{"vulnerability": "2024-57", "sightings": [{"uuid": "c6164599-070b-49a7-8a16-228c2e9a6892", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5719", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113528902676671185", "content": "", "creation_timestamp": "2024-11-22T22:12:59.141566Z"}, {"uuid": "1900c733-a518-46f8-9b46-e6b655ff6c3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5720", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113528902690589592", "content": "", "creation_timestamp": "2024-11-22T22:12:59.463911Z"}, {"uuid": "b46e231b-264a-4fbd-b0c8-43a80f0e8050", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5718", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113528902662618950", "content": "", "creation_timestamp": "2024-11-22T22:12:58.787104Z"}, {"uuid": "3799f2b0-3cc8-4df0-9de9-585146a97211", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5716", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113528843647091961", "content": "", "creation_timestamp": "2024-11-22T21:57:58.602936Z"}, {"uuid": "4867e959-c387-4f62-aa1a-89c6a064b446", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5722", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113528961707886148", "content": "", "creation_timestamp": "2024-11-22T22:27:59.687951Z"}, {"uuid": "34589e95-5b0b-4199-ac91-5105312c90e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5721", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113528902704467989", "content": "", "creation_timestamp": "2024-11-22T22:12:59.665284Z"}, {"uuid": "cf0a6175-2046-4422-ac85-2805950908e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5717", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113528843661388449", "content": "", "creation_timestamp": "2024-11-22T21:57:58.685349Z"}, {"uuid": "ecec25a9-5b9d-400f-93dc-be2ccd379413", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57211", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lffr5yhdqm25", "content": "", "creation_timestamp": "2025-01-10T17:54:06.904666Z"}, {"uuid": "a39818fa-2517-4456-8285-6ab0722d6fc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57809", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113810135100107478", "content": "", "creation_timestamp": "2025-01-11T14:14:05.197617Z"}, {"uuid": "3ef64320-9e11-4757-a902-21f4a29f65f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57625", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3bfl2c52t", "content": "", "creation_timestamp": "2025-01-14T01:16:16.355442Z"}, {"uuid": "d30dd0a5-80b7-4e9f-aaac-7655200303d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57212", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lffr5yyprn2i", "content": "", "creation_timestamp": "2025-01-10T17:54:07.872577Z"}, {"uuid": "0358882d-d01c-4ee8-8ff1-a2cc2cebc999", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57838", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113810135114718803", "content": "", "creation_timestamp": "2025-01-11T14:14:06.054828Z"}, {"uuid": "887ba802-d4bc-4a11-bc09-6a26df1a765b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57838", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhvgdn3wc2f", "content": "", "creation_timestamp": "2025-01-11T14:15:41.249200Z"}, {"uuid": "16af4288-8eca-41f6-bf31-040350101a1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57627", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3bkgw672n", "content": "", "creation_timestamp": "2025-01-14T01:16:21.481728Z"}, {"uuid": "1adbea7a-b2bb-4733-8ed1-08dcfabeda75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57013", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfsbeb53ed2c", "content": "", "creation_timestamp": "2025-01-15T17:15:54.049261Z"}, {"uuid": "869adc25-67f9-46fc-aff1-9146bd1585ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57611", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfuprasaog2h", "content": "", "creation_timestamp": "2025-01-16T16:39:02.107307Z"}, {"uuid": "72966567-208b-4829-9eee-61aee3e04062", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57809", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhvgbexjh22", "content": "", "creation_timestamp": "2025-01-11T14:15:39.138780Z"}, {"uuid": "da056c4c-44c4-4326-b021-045f448d1e5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57014", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfsbedcd6n2j", "content": "", "creation_timestamp": "2025-01-15T17:15:56.079069Z"}, {"uuid": "51360563-78de-4177-9fbd-7537e90c08e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57015", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfsbefvyom2e", "content": "", "creation_timestamp": "2025-01-15T17:15:58.942816Z"}, {"uuid": "cff3b9ae-c2b8-48d7-8031-a6f5d818d39f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57018", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfsbenhnd52f", "content": "", "creation_timestamp": "2025-01-15T17:16:06.887770Z"}, {"uuid": "c2d3b4c8-63c0-4cca-8abc-774fb9073bb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57022", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfsbeyn4s32c", "content": "", "creation_timestamp": "2025-01-15T17:16:18.705961Z"}, {"uuid": "1406bd56-c94f-4c03-9e90-8b3c6c97bd73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57160", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfupraxfbz2g", "content": "", "creation_timestamp": "2025-01-16T16:39:02.734868Z"}, {"uuid": "6698ff40-e2cc-4b75-8cb4-e26ce68745be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5743", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/113822522594572407", "content": "", "creation_timestamp": "2025-01-13T18:44:25.346569Z"}, {"uuid": "ce4f092b-bf19-4a2f-a9f5-e1dc16a4da2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5743", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113822538936401433", "content": "", "creation_timestamp": "2025-01-13T18:48:37.376996Z"}, {"uuid": "ca90564b-5e0e-4552-87ce-69333c6cad9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57629", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3bpbqff2b", "content": "", "creation_timestamp": "2025-01-14T01:16:26.764919Z"}, {"uuid": "f8789814-ea96-44e7-908f-50529b1aa3f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57630", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3brilbn2t", "content": "", "creation_timestamp": "2025-01-14T01:16:28.983714Z"}, {"uuid": "b3645931-c502-4b2c-8768-2eaeee34ec16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57016", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfsbeiujfh2p", "content": "", "creation_timestamp": "2025-01-15T17:16:02.141649Z"}, {"uuid": "51201ef7-ea60-4970-9a54-a514fdd8d409", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57843", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113810229071720253", "content": "", "creation_timestamp": "2025-01-11T14:37:59.124579Z"}, {"uuid": "c91f1001-cae0-40a2-99f3-ef2aeb4cf725", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57628", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113824064283109040", "content": "", "creation_timestamp": "2025-01-14T01:16:27.686677Z"}, {"uuid": "5f6e670d-02d9-4743-bc4b-2715d3d6d66e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57017", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfsbel7etn2j", "content": "", "creation_timestamp": "2025-01-15T17:16:04.436992Z"}, {"uuid": "69bdade7-593e-438b-85e5-688394a43a0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57213", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lffr5zoye22k", "content": "", "creation_timestamp": "2025-01-10T17:54:11.092143Z"}, {"uuid": "53e596bb-ef77-4857-94e1-073e986302d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57839", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113810229056518658", "content": "", "creation_timestamp": "2025-01-11T14:37:59.210961Z"}, {"uuid": "45a1b105-03b2-42f8-8bf3-c724d7e2b6ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57630", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113824064314762265", "content": "", "creation_timestamp": "2025-01-14T01:16:28.103831Z"}, {"uuid": "518aff3e-aee7-4aba-a9ca-1998b884bc20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57644", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3cumqix2n", "content": "", "creation_timestamp": "2025-01-14T01:17:05.935773Z"}, {"uuid": "de74736e-eff3-407b-95a5-5170126f26e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57214", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lffr5zsgzf2i", "content": "", "creation_timestamp": "2025-01-10T17:54:11.740016Z"}, {"uuid": "9ca90883-9f0a-413f-9a60-1a1049ced024", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57849", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113810229085340766", "content": "", "creation_timestamp": "2025-01-11T14:37:59.423853Z"}, {"uuid": "b01cac6a-b0ce-45ff-a34c-bf6479946840", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57019", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfsbepyo4d2c", "content": "", "creation_timestamp": "2025-01-15T17:16:09.390196Z"}, {"uuid": "1ecc2f2c-87dd-4612-9221-6f5f59286950", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57161", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfuprb2nlt2q", "content": "", "creation_timestamp": "2025-01-16T16:39:03.319468Z"}, {"uuid": "8f51f241-ec5a-4a6b-80fa-0201dccd1e58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57680", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113839609956562737", "content": "", "creation_timestamp": "2025-01-16T19:09:55.856604Z"}, {"uuid": "8ebf1de9-ad07-4128-a096-c00bd27449ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57850", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113810229099255433", "content": "", "creation_timestamp": "2025-01-11T14:37:59.548197Z"}, {"uuid": "d4636ab4-4d40-440e-bb02-333e22dfa7be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57021", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfsbewap5t2f", "content": "", "creation_timestamp": "2025-01-15T17:16:15.932181Z"}, {"uuid": "fb9a5141-f9d9-40c3-96c8-616ab0747001", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57162", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfuprb754x25", "content": "", "creation_timestamp": "2025-01-16T16:39:03.932539Z"}, {"uuid": "c61ffa85-6aec-435f-aae7-885d53be10db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57838", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfhwxvrrdv2e", "content": "", "creation_timestamp": "2025-01-11T14:43:25.045937Z"}, {"uuid": "d8d0ae6c-e693-4247-9334-8923edad2333", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57636", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3cbvepu2r", "content": "", "creation_timestamp": "2025-01-14T01:16:46.168612Z"}, {"uuid": "93d32631-dad4-4831-abb7-e08785e0fe72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57023", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfsbf2tawn2j", "content": "", "creation_timestamp": "2025-01-15T17:16:20.754153Z"}, {"uuid": "9876e503-cfd3-41a8-8f75-6e24e40b60a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57681", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113839609989550745", "content": "", "creation_timestamp": "2025-01-16T19:09:56.360758Z"}, {"uuid": "e53c26d1-c1f2-40f4-b690-38dac969c45d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57809", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfhwxw4qqw2q", "content": "", "creation_timestamp": "2025-01-11T14:43:25.882449Z"}, {"uuid": "aadbcc85-965a-47e9-a514-a697a5e2f6b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57638", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3cgonry2e", "content": "", "creation_timestamp": "2025-01-14T01:16:51.126866Z"}, {"uuid": "6c374f1d-52a0-4129-858c-070883d4cdcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57653", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3dm5hqq2j", "content": "", "creation_timestamp": "2025-01-14T01:17:30.438240Z"}, {"uuid": "f5e79008-e8e1-475e-a92b-b9ee42f646fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57024", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfsbf535zs2t", "content": "", "creation_timestamp": "2025-01-15T17:16:23.176983Z"}, {"uuid": "f987fd29-0677-4640-a88f-87065fc6dd77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57018", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113839056252478093", "content": "", "creation_timestamp": "2025-01-16T16:49:07.791366Z"}, {"uuid": "033ba8f5-5dfb-4427-94ba-8000efef7b0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57682", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113839610004775264", "content": "", "creation_timestamp": "2025-01-16T19:09:56.493220Z"}, {"uuid": "3959f851-f50c-481a-a250-d8de618f4a7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57872", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113810288102758843", "content": "", "creation_timestamp": "2025-01-11T14:52:59.876419Z"}, {"uuid": "36340783-57fc-4907-9357-60ecf2410587", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57639", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3cj4o6p2n", "content": "", "creation_timestamp": "2025-01-14T01:16:53.693151Z"}, {"uuid": "7d76ff86-2693-4355-8f62-16cabbf2f7af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57641", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3cnpjlz2f", "content": "", "creation_timestamp": "2025-01-14T01:16:58.432994Z"}, {"uuid": "a5ad106c-5760-4aa5-ac04-0c4387c3c6b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57642", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3cpvyl22c", "content": "", "creation_timestamp": "2025-01-14T01:17:00.760001Z"}, {"uuid": "791c9945-2e07-4380-a3b2-641dfcae70a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57645", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3cx5dci2e", "content": "", "creation_timestamp": "2025-01-14T01:17:08.327501Z"}, {"uuid": "058c5fc0-3065-4e09-9c49-3d3d255747b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57657", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3dvn35d2r", "content": "", "creation_timestamp": "2025-01-14T01:17:40.361176Z"}, {"uuid": "c99282fe-c916-48ac-803c-1fee1143b4b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57663", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3eemnlk2f", "content": "", "creation_timestamp": "2025-01-14T01:17:56.072419Z"}, {"uuid": "d123e113-2f1d-4c43-9e52-24c69a04669b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57025", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfsbf7lymv2j", "content": "", "creation_timestamp": "2025-01-15T17:16:25.809586Z"}, {"uuid": "d60de1bc-21d2-4cd6-a37b-c1e041f4b433", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57646", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3czk6zv2n", "content": "", "creation_timestamp": "2025-01-14T01:17:10.854622Z"}, {"uuid": "3411bde9-e8ad-4833-966a-7158f29e4953", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57017", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113839056184176151", "content": "", "creation_timestamp": "2025-01-16T16:49:08.100804Z"}, {"uuid": "18f93679-29c6-45f8-a7cb-09a6c5952515", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57683", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113839610018257257", "content": "", "creation_timestamp": "2025-01-16T19:09:56.969934Z"}, {"uuid": "43954f4a-79ef-41eb-b129-9d60ea252001", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57649", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3db4eb22f", "content": "", "creation_timestamp": "2025-01-14T01:17:18.858668Z"}, {"uuid": "5cff2f54-eb9a-4592-9232-335686b21176", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57651", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3dh4u6f2t", "content": "", "creation_timestamp": "2025-01-14T01:17:25.244924Z"}, {"uuid": "087c3b56-2e15-4ac6-8569-42a2f3fdd304", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57222", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lffseo5yjo2k", "content": "", "creation_timestamp": "2025-01-10T18:15:44.515160Z"}, {"uuid": "6189e81d-1548-401f-b3d8-a23cac4e151e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57019", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113839056303799373", "content": "", "creation_timestamp": "2025-01-16T16:49:08.993884Z"}, {"uuid": "e6cd209c-98e0-4842-a783-f3b329a00095", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57223", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lffseqrvpa2f", "content": "", "creation_timestamp": "2025-01-10T18:15:47.223358Z"}, {"uuid": "167023da-d48d-4163-8d6b-6f5b416f85ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "seen", "source": "https://bsky.app/profile/tmjintel.bsky.social/post/3lfsbi3fw5c25", "content": "", "creation_timestamp": "2025-01-15T17:18:02.571347Z"}, {"uuid": "ba868851-8f18-4643-a267-499b1e763b92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57728", "type": "seen", "source": "https://bsky.app/profile/tmjintel.bsky.social/post/3lfsbi3fw5c25", "content": "", "creation_timestamp": "2025-01-15T17:18:02.631318Z"}, {"uuid": "bc9928c8-7e91-4ab5-b14a-60f4d020e290", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57726", "type": "seen", "source": "https://bsky.app/profile/tmjintel.bsky.social/post/3lfsbi3fw5c25", "content": "", "creation_timestamp": "2025-01-15T17:18:02.672091Z"}, {"uuid": "7ffe94bf-8418-4f9a-9649-81d0928f92df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57224", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lffset4dk22e", "content": "", "creation_timestamp": "2025-01-10T18:15:49.653003Z"}, {"uuid": "aec91fe7-ffe9-40ff-9ff7-428b2aaf3cd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57658", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3dy5sml2p", "content": "", "creation_timestamp": "2025-01-14T01:17:42.961884Z"}, {"uuid": "136b23fa-19b0-44c9-adc3-5cf7afdc0179", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57660", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3e547ie2r", "content": "", "creation_timestamp": "2025-01-14T01:17:48.239535Z"}, {"uuid": "1161e6f4-55f5-40e1-938d-f72079bd4992", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57225", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lffsevmqcc2x", "content": "", "creation_timestamp": "2025-01-10T18:15:52.421583Z"}, {"uuid": "d26bb6d1-7cd9-4f33-8394-a22528bfe448", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57879", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113810360706329976", "content": "", "creation_timestamp": "2025-01-11T15:11:27.811278Z"}, {"uuid": "320e50a8-39a7-4195-b4d9-06ecdbbb870f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57880", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113810360720791001", "content": "", "creation_timestamp": "2025-01-11T15:11:27.882726Z"}, {"uuid": "21c89b9b-34f8-4a35-ad70-9b2fa498b17b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57655", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3dqzd2i2j", "content": "", "creation_timestamp": "2025-01-14T01:17:35.573373Z"}, {"uuid": "b1f0911b-cfe9-4492-8236-aceba04666c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57020", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113839056364455762", "content": "", "creation_timestamp": "2025-01-16T16:49:09.057570Z"}, {"uuid": "3e303724-08f2-42c0-9e70-c32db98bbc51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57226", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lffseyhjb72i", "content": "", "creation_timestamp": "2025-01-10T18:15:55.455180Z"}, {"uuid": "67e7b35a-716a-482b-ab52-0119e9e2c3e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57839", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhyr5cotv2x", "content": "", "creation_timestamp": "2025-01-11T15:15:25.130696Z"}, {"uuid": "d53da3e1-c443-42b8-8636-ffa0eb82d607", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57227", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lffsf2u67a2f", "content": "", "creation_timestamp": "2025-01-10T18:15:57.828792Z"}, {"uuid": "81f8cba6-d871-48f5-8e48-8728a2c8c16e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57843", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhyr7easc2f", "content": "", "creation_timestamp": "2025-01-11T15:15:27.385889Z"}, {"uuid": "3ad29193-19d8-4c7a-ac45-e64b2128aa93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57021", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113839056420933335", "content": "", "creation_timestamp": "2025-01-16T16:49:09.963703Z"}, {"uuid": "045ac530-0d19-408b-b7ab-3417d11c3d72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57228", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lffsf5njun22", "content": "", "creation_timestamp": "2025-01-10T18:16:01.226147Z"}, {"uuid": "328f17c5-68ca-4f98-913e-63d0e985f1f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57849", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhyrbyyml2i", "content": "", "creation_timestamp": "2025-01-11T15:15:30.328779Z"}, {"uuid": "5a82141e-98e2-4b7d-affa-691ef453776b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57022", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113839056495457640", "content": "", "creation_timestamp": "2025-01-16T16:49:10.966357Z"}, {"uuid": "b2f44af6-fc79-4886-85c5-137a922f5825", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57676", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfuyjqxhd62r", "content": "", "creation_timestamp": "2025-01-16T19:15:53.741843Z"}, {"uuid": "83a4ebe6-dc1b-4456-88c5-2ad0707267bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57850", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhyrf5y7d2m", "content": "", "creation_timestamp": "2025-01-11T15:15:33.376134Z"}, {"uuid": "a24739f4-37d9-4d89-9f5e-991e6558f587", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57659", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3e2nwfi2e", "content": "", "creation_timestamp": "2025-01-14T01:17:45.963443Z"}, {"uuid": "f5699843-87cc-4263-b8c4-aa082edc5017", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57872", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhyri2hje2l", "content": "", "creation_timestamp": "2025-01-11T15:15:36.170532Z"}, {"uuid": "f2a869ad-bdaa-4ce3-8c17-a8bf912f840c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57661", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3e7pa4k2c", "content": "", "creation_timestamp": "2025-01-14T01:17:50.922243Z"}, {"uuid": "43c7b165-b827-40f2-aca2-60b9b1510661", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57874", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhyrke5mx2k", "content": "", "creation_timestamp": "2025-01-11T15:15:38.724472Z"}, {"uuid": "6f3cc72c-be0e-4de7-9e98-a4a20b39a46c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57677", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfuyjt23gc2n", "content": "", "creation_timestamp": "2025-01-16T19:15:56.093323Z"}, {"uuid": "158fee36-a7cd-4f84-b372-10812298e9d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57875", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhyrmjx4z22", "content": "", "creation_timestamp": "2025-01-11T15:15:40.925193Z"}, {"uuid": "4637a37a-6d01-49d8-b077-c0af2360974c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57876", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhyrox3du27", "content": "", "creation_timestamp": "2025-01-11T15:15:43.420575Z"}, {"uuid": "b0f54486-941c-406a-88c9-f536deeff105", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57877", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhyrrj5qx2k", "content": "", "creation_timestamp": "2025-01-11T15:15:46.150520Z"}, {"uuid": "6522fe76-33ce-486c-bd7e-f3dc0f65078f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57162", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3lfuqpq4wjm2s", "content": "", "creation_timestamp": "2025-01-16T16:56:04.201585Z"}, {"uuid": "8fca487b-86f4-4740-8061-ba951487f2af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57678", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfuyjvxnks2n", "content": "", "creation_timestamp": "2025-01-16T19:15:58.966245Z"}, {"uuid": "f1c3d8b7-9bee-4f2f-8173-63f83cdaeca5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57878", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhyrtq3ty2a", "content": "", "creation_timestamp": "2025-01-11T15:15:48.639483Z"}, {"uuid": "1c9f03bc-94c3-4f6d-ad75-592044571499", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57679", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfuyjyllnf2e", "content": "", "creation_timestamp": "2025-01-16T19:16:01.822658Z"}, {"uuid": "ac550e04-f350-4f62-9b7c-e6712268945f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57222", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lffujglmiw25", "content": "", "creation_timestamp": "2025-01-10T18:54:11.988372Z"}, {"uuid": "bab32e6f-bd43-43ca-a4b8-c0eb0a1332ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57224", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lffujhcbdy2h", "content": "", "creation_timestamp": "2025-01-10T18:54:12.820176Z"}, {"uuid": "de8f7f1e-1f72-40db-9b85-e8849d5fb21f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57223", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lffujhm52h2y", "content": "", "creation_timestamp": "2025-01-10T18:54:13.832078Z"}, {"uuid": "c0468f9d-536c-4431-b598-fcc7c2d19414", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57225", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lffujhpksu2r", "content": "", "creation_timestamp": "2025-01-10T18:54:14.336351Z"}, {"uuid": "9bbc540a-c61c-4042-aeee-27ad5e115773", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57227", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lffujhstaz2k", "content": "", "creation_timestamp": "2025-01-10T18:54:14.803984Z"}, {"uuid": "d2435bc3-b76c-4ab2-a5e4-80f8519739ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57879", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhyrw5y2v2x", "content": "", "creation_timestamp": "2025-01-11T15:15:51.049470Z"}, {"uuid": "d00c0177-5148-4577-b105-08ccffb91b6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57226", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lffujhwg5p2y", "content": "", "creation_timestamp": "2025-01-10T18:54:15.296217Z"}, {"uuid": "7539bb7a-42f3-4956-af37-b494bfdce87b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57228", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lffuji27af2u", "content": "", "creation_timestamp": "2025-01-10T18:54:15.799288Z"}, {"uuid": "b3aa44c6-06d0-4170-bb73-7c36bdf47084", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57880", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhyryjsqq2e", "content": "", "creation_timestamp": "2025-01-11T15:15:53.951193Z"}, {"uuid": "20c1cddc-f6d5-424e-bf0c-5b2d82cf1fce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57680", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfuyk4bfya2n", "content": "", "creation_timestamp": "2025-01-16T19:16:06.033664Z"}, {"uuid": "f05c84c4-d863-428d-a608-44edb1965a54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57681", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfuyk6mlm62r", "content": "", "creation_timestamp": "2025-01-16T19:16:08.052386Z"}, {"uuid": "59b02138-b728-4a2b-a718-dd2c88820744", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57682", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfuykbcnp72f", "content": "", "creation_timestamp": "2025-01-16T19:16:10.864875Z"}, {"uuid": "31c2e075-afa7-4094-b831-f73fcaf8d984", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57683", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfuykdszlv2e", "content": "", "creation_timestamp": "2025-01-16T19:16:13.884510Z"}, {"uuid": "e0fb99b8-253e-4b60-a264-3a3ef6dc40c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57881", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113810399757862515", "content": "", "creation_timestamp": "2025-01-11T15:21:23.469101Z"}, {"uuid": "ef19c04b-38e7-4a1d-8115-576aca598d5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57631", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113824123335673302", "content": "", "creation_timestamp": "2025-01-14T01:31:28.648209Z"}, {"uuid": "3cfef808-de55-4299-89ce-472273bd982b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57876", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfi22fjnti2h", "content": "", "creation_timestamp": "2025-01-11T15:38:29.489666Z"}, {"uuid": "a0c6d9e3-812a-408e-b33f-9e7517550da4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57633", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113824123363792239", "content": "", "creation_timestamp": "2025-01-14T01:31:29.124095Z"}, {"uuid": "ebba8e32-32a0-47ab-af51-259e8feb2a01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57632", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113824123349562918", "content": "", "creation_timestamp": "2025-01-14T01:31:29.714603Z"}, {"uuid": "7c9a098c-4d4c-4903-9e03-5c861e3f7318", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57878", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfi22fylmb2w", "content": "", "creation_timestamp": "2025-01-11T15:38:30.345631Z"}, {"uuid": "c4e18d63-ecc9-4179-aa55-cf1980c26082", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57634", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113824123377616367", "content": "", "creation_timestamp": "2025-01-14T01:31:29.415173Z"}, {"uuid": "6337123c-a1d2-435b-86b8-f81b6c805cd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57684", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfuykgbpga2b", "content": "", "creation_timestamp": "2025-01-16T19:16:16.046514Z"}, {"uuid": "6affcc4f-de5f-4e55-a44b-3ed72b7643ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57872", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfi244qk4b2w", "content": "", "creation_timestamp": "2025-01-11T15:39:27.211913Z"}, {"uuid": "91b72641-09e2-4e0e-843c-1e3cdf48d2f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57875", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfi2454jtd2k", "content": "", "creation_timestamp": "2025-01-11T15:39:28.052149Z"}, {"uuid": "ec01759f-1859-4224-81bb-04b1af9101e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57874", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfi2457uor2g", "content": "", "creation_timestamp": "2025-01-11T15:39:28.654926Z"}, {"uuid": "da068328-4b61-4d53-94be-fe92a2d312ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57839", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfi245gbft2e", "content": "", "creation_timestamp": "2025-01-11T15:39:29.517657Z"}, {"uuid": "2b83c941-cbf1-4402-9806-e4350e582a95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57635", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113824182374682868", "content": "", "creation_timestamp": "2025-01-14T01:46:32.902265Z"}, {"uuid": "46ea3e6f-6537-429b-94c0-144f0aaf270e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57880", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfi245jwer2h", "content": "", "creation_timestamp": "2025-01-11T15:39:30.044441Z"}, {"uuid": "6f59e949-e158-4497-ad24-a0681a2bf79c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57637", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113824182403127754", "content": "", "creation_timestamp": "2025-01-14T01:46:33.906401Z"}, {"uuid": "8ddd0122-f546-45f9-8136-6821d23bd110", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5769", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfcki77pnh2e", "content": "", "creation_timestamp": "2025-01-09T11:16:33.847107Z"}, {"uuid": "097f60f3-2c13-44e3-a2e7-4517f7485fe1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57877", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfi245oa2z2h", "content": "", "creation_timestamp": "2025-01-11T15:39:30.667422Z"}, {"uuid": "70b847b5-2118-40c1-800e-29979a79a38a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57636", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113824182388487639", "content": "", "creation_timestamp": "2025-01-14T01:46:33.960150Z"}, {"uuid": "f9443eaf-2cc6-474d-97c8-4bc6033a755c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57822", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lffblzztly2m", "content": "", "creation_timestamp": "2025-01-10T13:15:38.896713Z"}, {"uuid": "f9fff572-09a9-4801-9641-5721e24b515e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57638", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113824182418946558", "content": "", "creation_timestamp": "2025-01-14T01:46:34.017607Z"}, {"uuid": "ed73181f-d723-46c9-9ff9-ea438f36510a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57823", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lffbm6a64s2a", "content": "", "creation_timestamp": "2025-01-10T13:15:42.556040Z"}, {"uuid": "f4d82253-2e3f-41eb-9bfb-a8d3f78374d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57843", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfi245ywci2y", "content": "", "creation_timestamp": "2025-01-11T15:39:32.308589Z"}, {"uuid": "0a885a06-b703-4637-9fb6-d568364caeda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57822", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lffcvjmkbx2w", "content": "", "creation_timestamp": "2025-01-10T13:38:50.393474Z"}, {"uuid": "5364eba6-b502-4e1e-b2e3-00766105a89d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57768", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113839220107635072", "content": "", "creation_timestamp": "2025-01-16T17:30:47.128186Z"}, {"uuid": "7fbb78a9-69e6-47f1-b5bb-e9a2a10e8855", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57823", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lffcvjvu722i", "content": "", "creation_timestamp": "2025-01-10T13:38:51.074424Z"}, {"uuid": "593f1ddf-f282-412f-a970-2000ec5f7a75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57687", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113804356594065667", "content": "", "creation_timestamp": "2025-01-10T13:44:32.236217Z"}, {"uuid": "d35d00d6-0b60-43a5-8666-38004e0f0f60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57686", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lffexqorks2f", "content": "", "creation_timestamp": "2025-01-10T14:15:52.352974Z"}, {"uuid": "747b10fd-9305-414c-985a-28e1a0303d57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57850", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113810514473001111", "content": "", "creation_timestamp": "2025-01-11T15:50:33.945464Z"}, {"uuid": "f909f6ef-2896-432c-8f38-def3fe637c6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57686", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113804379856253348", "content": "", "creation_timestamp": "2025-01-10T13:50:27.036979Z"}, {"uuid": "ba9a88d4-25e5-4ec7-a2c6-17185a11776b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57687", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lffextjndu2k", "content": "", "creation_timestamp": "2025-01-10T14:15:55.556497Z"}, {"uuid": "ae850cc1-cc63-4c7e-b531-e59d4f70e986", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57881", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfi44yfuwr22", "content": "", "creation_timestamp": "2025-01-11T16:15:43.739695Z"}, {"uuid": "6c205aa9-141f-4813-a041-28dbee017dea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57770", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113839220123286364", "content": "", "creation_timestamp": "2025-01-16T17:30:47.382110Z"}, {"uuid": "79c2dd08-0f26-49ca-ba25-f08d457f7663", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57823", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113804607369956077", "content": "", "creation_timestamp": "2025-01-10T14:48:25.333735Z"}, {"uuid": "e74f2538-9356-4a3a-8ac5-8e0a052cb87b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57881", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfi6amskr42g", "content": "", "creation_timestamp": "2025-01-11T16:53:33.296629Z"}, {"uuid": "e35f3cc6-c413-47a3-b696-42c80cfab1e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57769", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113839246685053852", "content": "", "creation_timestamp": "2025-01-16T17:37:32.761164Z"}, {"uuid": "a269471a-18d8-4cda-9871-8e16bec80fc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57684", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113839669018065257", "content": "", "creation_timestamp": "2025-01-16T19:24:57.098545Z"}, {"uuid": "5befb98d-5e2a-4498-8fb5-2b653f7449ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57881", "type": "seen", "source": "https://bsky.app/profile/omo.bsky.social/post/3lfmexmah2k2d", "content": "", "creation_timestamp": "2025-01-13T09:04:27.825311Z"}, {"uuid": "ed2e2ba6-f9f0-46c2-947d-c227c89d6fcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57011", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/113833769317315493", "content": "", "creation_timestamp": "2025-01-15T18:24:35.015152Z"}, {"uuid": "4b7c20f8-2396-4eed-a03b-becbd6bfb3c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57013", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/113833769317315493", "content": "", "creation_timestamp": "2025-01-15T18:24:35.089169Z"}, {"uuid": "fe787e33-c2ce-49e4-b97a-1f380c87fd2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57015", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/113833769317315493", "content": "", "creation_timestamp": "2025-01-15T18:24:35.153922Z"}, {"uuid": "6521e1b5-1b44-436a-913a-610f423a1781", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57017", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/113833769317315493", "content": "", "creation_timestamp": "2025-01-15T18:24:35.216152Z"}, {"uuid": "cb69e1fd-f374-4ec2-809b-c2d76cf224c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57019", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/113833769317315493", "content": "", "creation_timestamp": "2025-01-15T18:24:35.280806Z"}, {"uuid": "36fccf70-7503-46c8-bd4f-7b3a8bada88b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57021", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/113833769317315493", "content": "", "creation_timestamp": "2025-01-15T18:24:35.350442Z"}, {"uuid": "e5d7dae8-1b26-46a8-9b63-6ff1b5763686", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57023", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/113833769317315493", "content": "", "creation_timestamp": "2025-01-15T18:24:35.416983Z"}, {"uuid": "447af3fc-7543-488c-ace9-ac803bd56c0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57025", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/113833769317315493", "content": "", "creation_timestamp": "2025-01-15T18:24:35.482507Z"}, {"uuid": "4e2cf80c-1fca-40ef-acc1-c7dd939a84fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57012", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/113833769317315493", "content": "", "creation_timestamp": "2025-01-15T18:24:35.055251Z"}, {"uuid": "5d45fefb-0f9f-401d-a6d0-d61c1ab6c296", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57014", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/113833769317315493", "content": "", "creation_timestamp": "2025-01-15T18:24:35.122432Z"}, {"uuid": "ba48d1c2-77ad-4962-9e36-dec368f06099", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57016", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/113833769317315493", "content": "", "creation_timestamp": "2025-01-15T18:24:35.185365Z"}, {"uuid": "e1fd1c6c-ef9e-46f6-b804-2862ad99061f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57018", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/113833769317315493", "content": "", "creation_timestamp": "2025-01-15T18:24:35.247728Z"}, {"uuid": "cde40cb9-4abe-4aac-bb13-4915bdc51fd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57639", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113824241418005061", "content": "", "creation_timestamp": "2025-01-14T02:01:30.454548Z"}, {"uuid": "7a39fe24-a802-4242-9a90-593e23f28dd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57641", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113824241465889359", "content": "", "creation_timestamp": "2025-01-14T02:01:31.230009Z"}, {"uuid": "99383303-14d2-46be-9f1e-b60af1f32043", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57020", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/113833769317315493", "content": "", "creation_timestamp": "2025-01-15T18:24:35.315997Z"}, {"uuid": "950dbe50-e100-4395-b5ad-c77973bb3c9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57022", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/113833769317315493", "content": "", "creation_timestamp": "2025-01-15T18:24:35.384593Z"}, {"uuid": "eb37aa95-b30f-4ef7-b575-a925f8124f9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57640", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113824241432312123", "content": "", "creation_timestamp": "2025-01-14T02:01:30.869262Z"}, {"uuid": "d195948a-5e97-44a9-824d-bf32174e174c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57642", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113824241479799203", "content": "", "creation_timestamp": "2025-01-14T02:01:31.574746Z"}, {"uuid": "3e1d9b93-3424-432c-8a18-3bf132705e06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57024", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/113833769317315493", "content": "", "creation_timestamp": "2025-01-15T18:24:35.450160Z"}, {"uuid": "31830c7b-6628-49a5-a5db-69129cac6fb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57771", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113839246701055681", "content": "", "creation_timestamp": "2025-01-16T17:37:32.970347Z"}, {"uuid": "c04a9792-f2b0-43f6-a502-9c82324cffbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57643", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113824300483800987", "content": "", "creation_timestamp": "2025-01-14T02:16:32.041145Z"}, {"uuid": "719e7408-4f3c-4fb0-a7ba-a06d03494eb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57645", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113824300512821369", "content": "", "creation_timestamp": "2025-01-14T02:16:33.311654Z"}, {"uuid": "67174310-b1d3-4b21-b01b-715ab289f871", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57811", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113823205963235371", "content": "", "creation_timestamp": "2025-01-13T21:38:12.999191Z"}, {"uuid": "35c1d0b5-f0b7-4190-9d1e-44f865e87496", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57644", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113824300497921002", "content": "", "creation_timestamp": "2025-01-14T02:16:32.097285Z"}, {"uuid": "eef5289f-9462-4998-afe4-9ea04da5da16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57646", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113824300526311626", "content": "", "creation_timestamp": "2025-01-14T02:16:32.362175Z"}, {"uuid": "ec54b06a-56a6-44b3-9c66-6136c082a79a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57726", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113834804044410211", "content": "", "creation_timestamp": "2025-01-15T22:47:43.265517Z"}, {"uuid": "a66d6f4b-a827-4f12-9846-751864a3f10f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57773", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113839268826253953", "content": "", "creation_timestamp": "2025-01-16T17:43:10.579929Z"}, {"uuid": "9a5e2aba-3124-4a0a-9ffe-7c32bfa5bd4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57223", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113823246346167439", "content": "", "creation_timestamp": "2025-01-13T21:48:27.960908Z"}, {"uuid": "eae6f4e9-8747-4480-b55c-c022242991a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57224", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113823246403824787", "content": "", "creation_timestamp": "2025-01-13T21:48:28.752175Z"}, {"uuid": "442b0466-3f94-4aa8-b48d-573076797968", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57225", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113823246478515367", "content": "", "creation_timestamp": "2025-01-13T21:48:29.797145Z"}, {"uuid": "c2b9006e-97dd-419c-a3e4-0e37bc21f465", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57648", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113824359539377180", "content": "", "creation_timestamp": "2025-01-14T02:31:33.180079Z"}, {"uuid": "24787c38-923e-49fb-b3f4-c021889afde9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57649", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113824359552796827", "content": "", "creation_timestamp": "2025-01-14T02:31:33.231274Z"}, {"uuid": "d6dc51c3-fade-4f96-b11d-d4e9b0109ab2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57024", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfsga75gdb2b", "content": "", "creation_timestamp": "2025-01-15T18:43:06.436836Z"}, {"uuid": "b1467112-1048-4c84-aa61-e0e5549a8db3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113834804058613414", "content": "", "creation_timestamp": "2025-01-15T22:47:43.653063Z"}, {"uuid": "92807723-9b38-4fd3-8e3e-d9a5f26a4092", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57687", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lffjvbdfk62i", "content": "", "creation_timestamp": "2025-01-10T15:43:58.028220Z"}, {"uuid": "200ca810-b7b0-40c3-aa76-89ecc2fd15c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57650", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113824359585662446", "content": "", "creation_timestamp": "2025-01-14T02:31:33.457951Z"}, {"uuid": "278b94a6-f17a-454f-a02b-ec623e9c2187", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57022", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfsga7tfdr2y", "content": "", "creation_timestamp": "2025-01-15T18:43:07.249523Z"}, {"uuid": "a2f9d643-7817-499e-9bcf-7d957fb6c451", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57774", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113839268840808380", "content": "", "creation_timestamp": "2025-01-16T17:43:10.966703Z"}, {"uuid": "a734627e-6b77-4231-a269-3a4a2f9dfbbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57686", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lffjvbqdl72h", "content": "", "creation_timestamp": "2025-01-10T15:43:58.742313Z"}, {"uuid": "921e2558-ece7-441f-bba2-582c84b66b73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57647", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113824359525513712", "content": "", "creation_timestamp": "2025-01-14T02:31:35.234475Z"}, {"uuid": "0ba6e004-1282-45e5-884f-b72a0a447fd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57686", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113804843644942146", "content": "", "creation_timestamp": "2025-01-10T15:48:24.075219Z"}, {"uuid": "bee2df11-d2a6-45b6-a2b0-c5a7550d2a4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57651", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113824418584483439", "content": "", "creation_timestamp": "2025-01-14T02:46:33.866345Z"}, {"uuid": "1a3fab64-896a-438e-b4a5-b3e3fc67cab8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57652", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113824418598313539", "content": "", "creation_timestamp": "2025-01-14T02:46:34.042735Z"}, {"uuid": "708bcb6a-cb02-465e-aef3-5e8770f3c75b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57654", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113824418625516903", "content": "", "creation_timestamp": "2025-01-14T02:46:34.422618Z"}, {"uuid": "f93c0822-0594-4854-8931-782f1a576930", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57615", "type": "seen", "source": "https://bsky.app/profile/gothburz.bsky.social/post/3lfp5ujbgpb2p", "content": "", "creation_timestamp": "2025-01-14T11:35:25.195862Z"}, {"uuid": "83d55486-0108-4c93-b413-4a15b1a64216", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57653", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113824418611852219", "content": "", "creation_timestamp": "2025-01-14T02:46:34.351511Z"}, {"uuid": "22c096cc-d393-466f-9ef7-bc68d55a2ff7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57726", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lfr77ikywk22", "content": "", "creation_timestamp": "2025-01-15T07:04:46.604423Z"}, {"uuid": "0d42f391-9a94-483b-ab3c-7d9154c828d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lfr77ikywk22", "content": "", "creation_timestamp": "2025-01-15T07:04:46.656045Z"}, {"uuid": "f8f97007-b0b0-4f79-9e2f-b23b97a08f44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57728", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lfr77ikywk22", "content": "", "creation_timestamp": "2025-01-15T07:04:46.698947Z"}, {"uuid": "64a2bd5f-0b59-466a-ad14-c6a8d0d7290f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57016", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfsga7wzc72i", "content": "", "creation_timestamp": "2025-01-15T18:43:07.820807Z"}, {"uuid": "79232c92-6dc5-450e-9b1f-907c0fe7d088", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57017", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfsgaa7nnx2i", "content": "", "creation_timestamp": "2025-01-15T18:43:08.530440Z"}, {"uuid": "c34dae97-7325-45f6-be25-490b9fa9cd43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57020", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfsgaaf3ih2i", "content": "", "creation_timestamp": "2025-01-15T18:43:09.070894Z"}, {"uuid": "7566eafc-4fde-42ec-8411-5ae6f159546d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57728", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113834825799437827", "content": "", "creation_timestamp": "2025-01-15T22:53:15.432817Z"}, {"uuid": "865acc09-a320-444c-9956-f3a77bd4b9e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57679", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfv24femvw2g", "content": "", "creation_timestamp": "2025-01-16T19:44:13.239816Z"}, {"uuid": "d880ebe5-6ffc-4f06-b73b-044356fa6df8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57019", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfsgaailm62e", "content": "", "creation_timestamp": "2025-01-15T18:43:09.563999Z"}, {"uuid": "61c7e7df-e458-48e5-988b-ed98cbee2ad6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57656", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113824477643373209", "content": "", "creation_timestamp": "2025-01-14T03:01:35.189791Z"}, {"uuid": "d532dd5c-9d3c-4b80-82e9-57b7490ed253", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57658", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113824477690663118", "content": "", "creation_timestamp": "2025-01-14T03:01:35.871851Z"}, {"uuid": "0b38c9dd-ed36-4ad4-94ff-9616d8f0aee4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57657", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113824477657414186", "content": "", "creation_timestamp": "2025-01-14T03:01:37.817378Z"}, {"uuid": "ff9ead4d-95c0-4eda-a2d5-20c240d9c937", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57655", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113824477629685624", "content": "", "creation_timestamp": "2025-01-14T03:01:35.234024Z"}, {"uuid": "d9ab7f8f-f30d-4441-b40a-2425c4aefc77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57677", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfv24fhzrp2k", "content": "", "creation_timestamp": "2025-01-16T19:44:13.826164Z"}, {"uuid": "eb01729f-d7f1-4f35-b157-ff27a4b65c5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57659", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113824536687353309", "content": "", "creation_timestamp": "2025-01-14T03:16:35.926748Z"}, {"uuid": "6337b9dd-1f69-4266-87de-88579e3c2252", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57772", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113839295370791652", "content": "", "creation_timestamp": "2025-01-16T17:49:55.595033Z"}, {"uuid": "32e854de-2eba-47b9-9969-5980386f111a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57680", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfv24fljrm2q", "content": "", "creation_timestamp": "2025-01-16T19:44:14.415941Z"}, {"uuid": "18c36434-572f-4633-846c-7ba5894fd2c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57660", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113824536707776133", "content": "", "creation_timestamp": "2025-01-14T03:16:36.224103Z"}, {"uuid": "d38e561b-f4c1-41d4-86ba-42c0674f3828", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57661", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113824536722901752", "content": "", "creation_timestamp": "2025-01-14T03:16:36.404646Z"}, {"uuid": "1a2d2aa9-e554-4ee7-9dbf-0c0c526bccee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57662", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113824536736542597", "content": "", "creation_timestamp": "2025-01-14T03:16:36.749062Z"}, {"uuid": "d37ca847-4bcc-439a-9208-7e60ed5bc92b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57811", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfnrbi7fj52h", "content": "", "creation_timestamp": "2025-01-13T22:17:21.975267Z"}, {"uuid": "093195e2-e535-4ee3-aae9-e2ffbad722c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57663", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113824595738169137", "content": "", "creation_timestamp": "2025-01-14T03:31:36.949406Z"}, {"uuid": "b4c2c196-ffb6-4e12-bdfc-a352e8b33181", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57775", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113839295385603825", "content": "", "creation_timestamp": "2025-01-16T17:49:55.991818Z"}, {"uuid": "51c29f07-cdcc-4b49-a09a-778d584e2c7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57682", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfv24fpx7o2g", "content": "", "creation_timestamp": "2025-01-16T19:44:15.081652Z"}, {"uuid": "669b01ac-0f53-4c20-af20-8b49a752555a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57664", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113824595752014413", "content": "", "creation_timestamp": "2025-01-14T03:31:37.727858Z"}, {"uuid": "3eafebd4-23b6-415c-9218-f4bed3cca9a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57726", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfsvhvgccw2n", "content": "", "creation_timestamp": "2025-01-15T23:15:50.660669Z"}, {"uuid": "4cddb465-d09a-40e4-82c0-2272637c4e6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57776", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113839317489246649", "content": "", "creation_timestamp": "2025-01-16T17:55:33.014873Z"}, {"uuid": "9714ce49-e9b6-4fe1-8434-57b67d8a69b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57676", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfv24ftdmg2g", "content": "", "creation_timestamp": "2025-01-16T19:44:15.673407Z"}, {"uuid": "8d3b5b92-a4ac-485c-8e05-b4c71a02d6d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57792", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhs6c7u6e27", "content": "", "creation_timestamp": "2025-01-11T13:17:30.127708Z"}, {"uuid": "98af1f7c-65d0-411f-a17b-8f85537d3064", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57728", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfsvi2cvsv2t", "content": "", "creation_timestamp": "2025-01-15T23:15:55.766302Z"}, {"uuid": "911bc58e-4305-46f0-a062-cc888fc5df08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5769", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113798459475482726", "content": "", "creation_timestamp": "2025-01-09T12:44:49.886755Z"}, {"uuid": "171359b7-cd24-4df6-9548-3ad5f4e36df7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57011", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113838817645038283", "content": "", "creation_timestamp": "2025-01-16T15:48:38.595463Z"}, {"uuid": "7e987be5-520e-4026-a8f7-55b958a6a130", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57678", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfv24fwtvi2u", "content": "", "creation_timestamp": "2025-01-16T19:44:16.293940Z"}, {"uuid": "8fd8a6f7-4c0f-40ed-9cd0-aa4a03562f72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57687", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113805082149231484", "content": "", "creation_timestamp": "2025-01-10T16:49:15.697434Z"}, {"uuid": "f4328c7e-4d4d-46c4-a45c-ac0fc4848a0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57791", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhs67yeh425", "content": "", "creation_timestamp": "2025-01-11T13:17:27.749385Z"}, {"uuid": "59dac241-7b54-4cd0-9d98-75f234c62151", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57800", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhs6l3knu25", "content": "", "creation_timestamp": "2025-01-11T13:17:39.481232Z"}, {"uuid": "d482aeb1-638e-4571-a154-ddae8a83f642", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57805", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhs6r7usd25", "content": "", "creation_timestamp": "2025-01-11T13:17:46.231935Z"}, {"uuid": "57b0b771-3d25-4713-a475-c6d272a7697f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57899", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfrtzfmzug2e", "content": "", "creation_timestamp": "2025-01-15T13:17:11.023033Z"}, {"uuid": "18a57ff5-c277-4357-b243-fa698ca620b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57012", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113838817720364110", "content": "", "creation_timestamp": "2025-01-16T15:48:38.663447Z"}, {"uuid": "9d383a0d-a76f-4a97-8617-91e86b2e52a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57793", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhs6emaiw2k", "content": "", "creation_timestamp": "2025-01-11T13:17:32.644591Z"}, {"uuid": "63543668-f83e-4cc7-b6b7-195a6710282e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57804", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhs6ohgar2l", "content": "", "creation_timestamp": "2025-01-11T13:17:43.361728Z"}, {"uuid": "9fa9deec-c06c-4b54-a85f-5199ebdf0c4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57886", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfrtyh4uxb2b", "content": "", "creation_timestamp": "2025-01-15T13:16:38.860134Z"}, {"uuid": "a2e404aa-35a5-4eeb-8e7b-ff63fcb05339", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57014", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113838817832041380", "content": "", "creation_timestamp": "2025-01-16T15:48:38.730126Z"}, {"uuid": "6894bbc3-28f1-45da-9ab8-0e18d89df7f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57683", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfv24g2ilx2k", "content": "", "creation_timestamp": "2025-01-16T19:44:16.930526Z"}, {"uuid": "f0db9d32-6986-48e8-a9da-1b9013808f8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57684", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfv24g6crh2i", "content": "", "creation_timestamp": "2025-01-16T19:44:17.518978Z"}, {"uuid": "a2c3f0d8-0345-495b-965f-8725636677f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57882", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfrty5n2652t", "content": "", "creation_timestamp": "2025-01-15T13:16:29.250145Z"}, {"uuid": "f62949a0-e1bb-4005-849c-ff87bd660428", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5764", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lfkpgsva2m2h", "content": "", "creation_timestamp": "2025-01-12T17:06:34.673637Z"}, {"uuid": "7c90f723-bc05-4e33-a74b-5560a7b85b0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57795", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfrtxp224u2h", "content": "", "creation_timestamp": "2025-01-15T13:16:13.624750Z"}, {"uuid": "7be1b3b2-d5bc-447a-b7eb-f13073f74492", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57888", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfrtylvy7y2n", "content": "", "creation_timestamp": "2025-01-15T13:16:43.918852Z"}, {"uuid": "b461fef6-6354-4018-9f13-7ca0a76dccf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57015", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113838817896358460", "content": "", "creation_timestamp": "2025-01-16T15:48:38.812785Z"}, {"uuid": "b9172efc-4a07-4704-ac54-2283e7ef48a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57801", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfrtxrgfab2c", "content": "", "creation_timestamp": "2025-01-15T13:16:16.431261Z"}, {"uuid": "0330c1af-cdbd-465d-b330-a6a2d2219d7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57726", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfsy53e6uq2k", "content": "", "creation_timestamp": "2025-01-16T00:03:29.458201Z"}, {"uuid": "4e319759-c7fd-44c8-9507-34eaf5678729", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57013", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113838817770485112", "content": "", "creation_timestamp": "2025-01-16T15:48:39.184975Z"}, {"uuid": "3fe6963e-9f53-48ab-9afb-d9b996bcbfbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57802", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfrtxtrg622r", "content": "", "creation_timestamp": "2025-01-15T13:16:18.558794Z"}, {"uuid": "8421ebbd-c2a1-4d01-8a73-a35d6664e980", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57884", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfrtyc4nkh2n", "content": "", "creation_timestamp": "2025-01-15T13:16:33.621885Z"}, {"uuid": "e73ad30a-1771-468b-8104-b7e18c7d7834", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57890", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfrtyqeeic2r", "content": "", "creation_timestamp": "2025-01-15T13:16:48.529608Z"}, {"uuid": "ef0bed7f-9750-4e35-bdb3-8f043f54eb84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57902", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfrtzmhrqc2r", "content": "", "creation_timestamp": "2025-01-15T13:17:17.924660Z"}, {"uuid": "f5cee71b-0012-49d3-82c9-401d1ac075b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57213", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113805147468821557", "content": "", "creation_timestamp": "2025-01-10T17:05:42.086263Z"}, {"uuid": "faef8fc8-9137-4826-a83c-a4b5fc463766", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57841", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfrtxwhh7w2e", "content": "", "creation_timestamp": "2025-01-15T13:16:21.466481Z"}, {"uuid": "3cee6f04-96b6-4bf5-bc2b-9943d83cc7d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57891", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfrtytbh4w2e", "content": "", "creation_timestamp": "2025-01-15T13:16:51.683099Z"}, {"uuid": "a0b8dd73-3a65-48d7-bae8-9ac552bb036d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57894", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfrtz2apwf2t", "content": "", "creation_timestamp": "2025-01-15T13:16:58.961725Z"}, {"uuid": "f98fb284-a571-48d3-80ef-6e69b170ced2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57016", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113838817963443986", "content": "", "creation_timestamp": "2025-01-16T15:48:39.564017Z"}, {"uuid": "c54f8427-bce3-4ef1-8576-aae466751c38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57681", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfv24gjcg22k", "content": "", "creation_timestamp": "2025-01-16T19:44:19.297059Z"}, {"uuid": "1288e274-62d9-4a81-8713-752c707a6808", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57211", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113805177877958565", "content": "", "creation_timestamp": "2025-01-10T17:13:23.956938Z"}, {"uuid": "4a5107c6-6dec-4ecc-b463-bd7f5e02a60f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57212", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113805177892013482", "content": "", "creation_timestamp": "2025-01-10T17:13:24.146538Z"}, {"uuid": "af8402f6-34a3-4648-954b-e90819a0be9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57844", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfrtxymloz2n", "content": "", "creation_timestamp": "2025-01-15T13:16:23.670685Z"}, {"uuid": "dfedf31e-5cbd-4dcc-9e7b-4a5ea4f99403", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57857", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfrty3gnwv2f", "content": "", "creation_timestamp": "2025-01-15T13:16:26.524786Z"}, {"uuid": "07c35803-5012-429e-ab96-d016e7cb57d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57887", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfrtyjnolo2r", "content": "", "creation_timestamp": "2025-01-15T13:16:41.532828Z"}, {"uuid": "e3315278-2051-4b26-b6ce-18ddda7fc805", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57575", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfv77xtvn32r", "content": "", "creation_timestamp": "2025-01-16T21:15:41.893854Z"}, {"uuid": "f4f12c19-2df0-423e-bd19-be466780152d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57214", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113805177905577491", "content": "", "creation_timestamp": "2025-01-10T17:13:24.460011Z"}, {"uuid": "900683b1-dd64-4ffa-b126-dc233d027f36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57883", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfrty7vuo62t", "content": "", "creation_timestamp": "2025-01-15T13:16:31.322009Z"}, {"uuid": "2c98faf6-360c-4a41-ae3c-6edd4734e61c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57728", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfsy53wytg2q", "content": "", "creation_timestamp": "2025-01-16T00:03:32.392012Z"}, {"uuid": "eeb593b6-fb34-4050-bac3-f8fbd5683330", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57577", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfv7a27qit2s", "content": "", "creation_timestamp": "2025-01-16T21:15:44.056262Z"}, {"uuid": "ca2d94d8-3609-4e5e-b012-b43fdf4c5e0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57615", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113823887144469288", "content": "", "creation_timestamp": "2025-01-14T00:31:24.717415Z"}, {"uuid": "4e27c9e5-eece-4eff-9360-cbfe633e34ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57885", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfrtyevti22j", "content": "", "creation_timestamp": "2025-01-15T13:16:36.493973Z"}, {"uuid": "a29f284a-b99b-40a6-9aaa-fc58599e5813", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57774", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfuv6spg4z2t", "content": "", "creation_timestamp": "2025-01-16T18:16:05.224361Z"}, {"uuid": "67c76def-dd80-4e32-81dc-be2f98d7fe49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57578", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfv7a4t5ow2f", "content": "", "creation_timestamp": "2025-01-16T21:15:47.022931Z"}, {"uuid": "10866a34-8b19-4c61-bb2f-e2310af9319a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57582", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfv7ag6x5w2t", "content": "", "creation_timestamp": "2025-01-16T21:15:56.966155Z"}, {"uuid": "2337c196-6afc-42b6-a42a-8dd838788c7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57617", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113823887173240908", "content": "", "creation_timestamp": "2025-01-14T00:31:25.221207Z"}, {"uuid": "c28b4ece-f3f2-4dfe-b775-50f8d2877106", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57889", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfrtyod23z2c", "content": "", "creation_timestamp": "2025-01-15T13:16:46.317588Z"}, {"uuid": "de1f1e12-8e26-4bc0-8c2c-fb07d1dfc001", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57768", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfuv6ejcxi2n", "content": "", "creation_timestamp": "2025-01-16T18:15:50.336918Z"}, {"uuid": "a1ecb9fa-fa56-4a0f-93d6-328ff8d1745e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57579", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfv7a7fdzw2p", "content": "", "creation_timestamp": "2025-01-16T21:15:49.566649Z"}, {"uuid": "c2aee92f-4f43-486e-8277-2407472b0fd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57616", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113823887159504481", "content": "", "creation_timestamp": "2025-01-14T00:31:25.750379Z"}, {"uuid": "915fab62-aa39-40ca-950d-dfec859846ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57618", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113823887188753503", "content": "", "creation_timestamp": "2025-01-14T00:31:25.961048Z"}, {"uuid": "85cada19-7bf7-4cfb-8107-ee4e9386ecf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57892", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfrtyvorop2n", "content": "", "creation_timestamp": "2025-01-15T13:16:54.064483Z"}, {"uuid": "d71d2dde-81ce-41fa-b087-9a0ad60b3fa5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57769", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfuv6gtd7l2e", "content": "", "creation_timestamp": "2025-01-16T18:15:52.742100Z"}, {"uuid": "5ef34d3f-15d1-44d0-8657-f304c64b1469", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57580", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfv7abng462f", "content": "", "creation_timestamp": "2025-01-16T21:15:51.845348Z"}, {"uuid": "fe142f82-c85c-4389-9e83-8ec14edd0e28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57211", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lffozyduyr2a", "content": "", "creation_timestamp": "2025-01-10T17:16:04.856624Z"}, {"uuid": "29381c2f-948e-480f-8d9a-dfbf713979d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57619", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113823946186473339", "content": "", "creation_timestamp": "2025-01-14T00:46:25.656779Z"}, {"uuid": "c733c3a0-4f7b-4f68-ae27-fb353bff8734", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57893", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfrtyxz2fo2t", "content": "", "creation_timestamp": "2025-01-15T13:16:56.546454Z"}, {"uuid": "bfb755bd-297a-4513-88ce-7bcf446d151d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57770", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfuv6j55hk2p", "content": "", "creation_timestamp": "2025-01-16T18:15:55.220699Z"}, {"uuid": "e0bebce9-243a-4bb1-b814-1a73bd07bf96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57212", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lffp22pajf2m", "content": "", "creation_timestamp": "2025-01-10T17:16:07.423439Z"}, {"uuid": "bb21caef-c93e-4249-b53f-1466036eb923", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57621", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113823946213534882", "content": "", "creation_timestamp": "2025-01-14T00:46:26.064894Z"}, {"uuid": "10734c51-364e-466a-9cde-38d22b7a7eb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57895", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfrtz4fwlw2r", "content": "", "creation_timestamp": "2025-01-15T13:17:01.139551Z"}, {"uuid": "55031141-82e9-467c-838d-e5fce1e1536b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57896", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfrtz6moib2c", "content": "", "creation_timestamp": "2025-01-15T13:17:03.449451Z"}, {"uuid": "ed1d0ba4-59f8-481f-ab52-3a87e1fb4208", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57771", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfuv6lcasg2f", "content": "", "creation_timestamp": "2025-01-16T18:15:57.591392Z"}, {"uuid": "981de464-770c-44a6-9bea-8a5ef53331d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57581", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfv7aduy3j2b", "content": "", "creation_timestamp": "2025-01-16T21:15:54.188936Z"}, {"uuid": "c0dad0ac-cf44-46c5-be66-ca336d9591b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57213", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lffp25qbi42d", "content": "", "creation_timestamp": "2025-01-10T17:16:10.450919Z"}, {"uuid": "ce865a7e-5386-47a2-bd47-2b0cd9cc4447", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57620", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113823946200309272", "content": "", "creation_timestamp": "2025-01-14T00:46:28.429359Z"}, {"uuid": "c3be5c85-ad7a-4fa9-87fc-7e87f780c00e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57897", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfrtzazhmu2p", "content": "", "creation_timestamp": "2025-01-15T13:17:05.977503Z"}, {"uuid": "26d045cc-61f1-4243-83ee-cbc6b8e77154", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57898", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfrtzdgdkr2b", "content": "", "creation_timestamp": "2025-01-15T13:17:08.449826Z"}, {"uuid": "53c4ed49-fe6e-4e03-9b44-f78f34f9514c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57900", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfrtzhyivf2f", "content": "", "creation_timestamp": "2025-01-15T13:17:13.357359Z"}, {"uuid": "c562c0dc-9577-44e0-9f21-113e909086dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57901", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfrtzkbblm2h", "content": "", "creation_timestamp": "2025-01-15T13:17:15.865271Z"}, {"uuid": "e0b6201f-574a-4131-98b1-48b452edef0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57903", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfrtzorcdx2n", "content": "", "creation_timestamp": "2025-01-15T13:17:20.572032Z"}, {"uuid": "cb347704-9d65-49d4-a281-4c0e4b04b2bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57772", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfuv6npzns2p", "content": "", "creation_timestamp": "2025-01-16T18:16:00.217213Z"}, {"uuid": "3bf23606-becd-4228-90da-f5bcb80d7ff7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57583", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfv7aijjzj2c", "content": "", "creation_timestamp": "2025-01-16T21:15:59.155331Z"}, {"uuid": "6a7df583-5db5-4d70-b6f7-611513d1449d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57214", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lffp2ajssg2f", "content": "", "creation_timestamp": "2025-01-10T17:16:13.431170Z"}, {"uuid": "4ec768e0-9fab-483d-9f75-58996e7b3546", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57622", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113823946226980617", "content": "", "creation_timestamp": "2025-01-14T00:46:28.479802Z"}, {"uuid": "7d5c5644-b524-435e-8f98-7b2e06efa1b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57773", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfuv6qdnmv2r", "content": "", "creation_timestamp": "2025-01-16T18:16:02.750506Z"}, {"uuid": "b7c72f3f-b671-4b50-9b05-8b15ffce8406", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57799", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhs6iulxz22", "content": "", "creation_timestamp": "2025-01-11T13:17:37.126514Z"}, {"uuid": "f347f832-7327-4d6c-9e24-dca2f818a54b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57624", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113824005238373112", "content": "", "creation_timestamp": "2025-01-14T01:01:26.776485Z"}, {"uuid": "66c43206-179a-45dd-aba7-3e3c4feaa13b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57775", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfuv6v6azy2c", "content": "", "creation_timestamp": "2025-01-16T18:16:08.029803Z"}, {"uuid": "d737d5f0-200f-4d5e-a5e7-778754a48c78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57226", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113805216590032112", "content": "", "creation_timestamp": "2025-01-10T17:23:14.533670Z"}, {"uuid": "ada1053c-185f-46ce-bdb1-1aee78be033d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57228", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113805216618037812", "content": "", "creation_timestamp": "2025-01-10T17:23:14.972913Z"}, {"uuid": "259d8c24-a01c-482c-8380-92ed9e0f2c33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57227", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113805216604390919", "content": "", "creation_timestamp": "2025-01-10T17:23:15.409980Z"}, {"uuid": "0bbe2b26-5a71-402f-b6c7-d81db6451a53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57623", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113824005224497117", "content": "", "creation_timestamp": "2025-01-14T01:01:27.034854Z"}, {"uuid": "565bcbdb-2df2-4c8e-8fa1-49485abfe397", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57776", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfuv6xluiw2f", "content": "", "creation_timestamp": "2025-01-16T18:16:10.372602Z"}, {"uuid": "bbf3a630-2bb3-463b-95aa-53b44349af21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57798", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhs6gnk4h2d", "content": "", "creation_timestamp": "2025-01-11T13:17:35.199042Z"}, {"uuid": "9ce8b57d-bdbc-4d41-b9be-7e04e419f07e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57626", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113824005266266853", "content": "", "creation_timestamp": "2025-01-14T01:01:27.329709Z"}, {"uuid": "065a2d77-cb1b-4593-9474-a5071fcede84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57898", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfrvq5ymqx2u", "content": "", "creation_timestamp": "2025-01-15T13:47:48.494050Z"}, {"uuid": "2fa5a10e-d8eb-4e77-b8fb-b02ba796c2c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57806", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhs6tdsvb2f", "content": "", "creation_timestamp": "2025-01-11T13:17:48.150064Z"}, {"uuid": "3fb4a956-4892-4930-84c4-03efe7894cd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57625", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113824005252192323", "content": "", "creation_timestamp": "2025-01-14T01:01:27.385640Z"}, {"uuid": "d26eb9e4-0425-4f9d-b009-e7a1d74d593c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57899", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfrvq6odww2g", "content": "", "creation_timestamp": "2025-01-15T13:47:49.488340Z"}, {"uuid": "5e156aec-7b3d-4b28-8b19-ed5ba9fd36fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57159", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113838924920738866", "content": "", "creation_timestamp": "2025-01-16T16:15:44.389429Z"}, {"uuid": "df2d979f-e944-425c-a5cf-e0988a0f9b17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57807", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhs6vovx32f", "content": "", "creation_timestamp": "2025-01-11T13:17:50.651937Z"}, {"uuid": "6d201862-1491-4583-8eea-ee359ba98bb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57652", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3djterf2n", "content": "", "creation_timestamp": "2025-01-14T01:17:27.966416Z"}, {"uuid": "bcdd9bcb-3c49-40a8-bd5a-82acee29bba6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57664", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3eguzqv2t", "content": "", "creation_timestamp": "2025-01-14T01:17:58.440675Z"}, {"uuid": "9ec0fee8-a842-4f33-881b-f196a62200f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57901", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfrvq6scl42e", "content": "", "creation_timestamp": "2025-01-15T13:47:50.059063Z"}, {"uuid": "16ecc99d-f2fb-4275-98c9-c5b393d31342", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57160", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113838924936818897", "content": "", "creation_timestamp": "2025-01-16T16:15:44.469050Z"}, {"uuid": "f6968c8e-f78e-4afb-8227-10d6ca67e120", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57770", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfuwqykzqa2y", "content": "", "creation_timestamp": "2025-01-16T18:44:09.256236Z"}, {"uuid": "1faa9987-e582-4953-b22d-3df1cf0138e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57772", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfuwqzo4c62i", "content": "", "creation_timestamp": "2025-01-16T18:44:11.324341Z"}, {"uuid": "40135036-cb9c-42d2-8d61-5341e5898b8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57775", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfuwqzsdoi2q", "content": "", "creation_timestamp": "2025-01-16T18:44:11.997766Z"}, {"uuid": "1cdc0894-0b34-497c-a74d-81e6b00406ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57224", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113805250996210556", "content": "", "creation_timestamp": "2025-01-10T17:32:01.290679Z"}, {"uuid": "715a603d-e469-401c-b2d3-9c5444e3a4a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57222", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113805250968600872", "content": "", "creation_timestamp": "2025-01-10T17:32:01.384649Z"}, {"uuid": "ac3b91e1-9e0b-4f53-abc1-5481c8e9556b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57627", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113824064269153050", "content": "", "creation_timestamp": "2025-01-14T01:16:27.393547Z"}, {"uuid": "06c79eef-a777-4e0e-8622-d867d9c0c9bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57632", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3bwuox22t", "content": "", "creation_timestamp": "2025-01-14T01:16:34.619966Z"}, {"uuid": "03dc3e69-4ca6-4fff-b1a2-f7f20aab8820", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57633", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3bzb7sm2r", "content": "", "creation_timestamp": "2025-01-14T01:16:37.153634Z"}, {"uuid": "3db08cec-ef27-4876-bd2f-98015604453e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57634", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3c55v2u2r", "content": "", "creation_timestamp": "2025-01-14T01:16:41.144828Z"}, {"uuid": "409e17fa-e738-4f20-9604-d020f5ed5f1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57640", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3cldmsv2b", "content": "", "creation_timestamp": "2025-01-14T01:16:55.972770Z"}, {"uuid": "f8568eb8-be0a-440e-adf9-f1c549fc6f65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57900", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfrvq6w3572u", "content": "", "creation_timestamp": "2025-01-15T13:47:50.673404Z"}, {"uuid": "41b13791-3c4a-4d18-8875-e27c6a8ba1a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57162", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113838924965901071", "content": "", "creation_timestamp": "2025-01-16T16:15:44.691686Z"}, {"uuid": "dfa8f33a-2c5d-4c9a-97e1-562217dec7a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57769", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfuwqzhlpr2g", "content": "", "creation_timestamp": "2025-01-16T18:44:10.297248Z"}, {"uuid": "f5fec0e7-f510-4d89-9e29-d9b90d8dd2fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57223", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113805250982538059", "content": "", "creation_timestamp": "2025-01-10T17:32:01.339101Z"}, {"uuid": "1b00e52f-930f-4d4d-9204-05fc72074045", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57804", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfhtoczt6d2e", "content": "", "creation_timestamp": "2025-01-11T13:44:24.815498Z"}, {"uuid": "cff86c50-8972-491e-9600-736307e9d352", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57629", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113824064297409647", "content": "", "creation_timestamp": "2025-01-14T01:16:27.845655Z"}, {"uuid": "3107497c-cddb-44b3-b995-c68701ecdd4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57631", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3buny7k2h", "content": "", "creation_timestamp": "2025-01-14T01:16:32.270594Z"}, {"uuid": "56c47e04-a631-4625-b568-1c290b8a96ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57903", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfrvq74e6o2g", "content": "", "creation_timestamp": "2025-01-15T13:47:51.299488Z"}, {"uuid": "dc6ffbb5-364e-4a8d-9c7f-41bce127b619", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57161", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113838924951270770", "content": "", "creation_timestamp": "2025-01-16T16:15:44.813367Z"}, {"uuid": "edb9dfe9-6a4c-4bd9-a814-a7b652117e30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57771", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfuwqzkx3z2u", "content": "", "creation_timestamp": "2025-01-16T18:44:10.807908Z"}, {"uuid": "0e7f0243-4f02-4d47-b912-ecece7724762", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57225", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113805251009888703", "content": "", "creation_timestamp": "2025-01-10T17:32:01.436084Z"}, {"uuid": "9c0f1643-001d-458b-a165-f82c3b2285d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57650", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3depnj52n", "content": "", "creation_timestamp": "2025-01-14T01:17:22.689900Z"}, {"uuid": "e467c143-7518-426b-a088-14a05cdb81de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57656", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3dtfy7t2p", "content": "", "creation_timestamp": "2025-01-14T01:17:38.009905Z"}, {"uuid": "eb2bbcdd-9d8b-48c2-a055-c0d6c47885cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57893", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfrvq7cihw2g", "content": "", "creation_timestamp": "2025-01-15T13:47:51.905418Z"}, {"uuid": "63168307-211a-40cb-b59d-5c7d5a3dae3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57159", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfuohvgkek2s", "content": "", "creation_timestamp": "2025-01-16T16:15:54.118726Z"}, {"uuid": "47f8756f-ab91-410b-8f04-3b7af884e24a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57628", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3bmuvib2f", "content": "", "creation_timestamp": "2025-01-14T01:16:24.143800Z"}, {"uuid": "6b8d02c0-a0f4-4ffc-acb6-5deb871c287c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57654", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3dok4w32p", "content": "", "creation_timestamp": "2025-01-14T01:17:33.018086Z"}, {"uuid": "a78be379-8be9-4ceb-990b-baf2d54a1c3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57887", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfrvq7fzpz2w", "content": "", "creation_timestamp": "2025-01-15T13:47:52.497975Z"}, {"uuid": "f1e783c2-9215-45c7-aa1a-2497579c7856", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57160", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfuohxsmx62t", "content": "", "creation_timestamp": "2025-01-16T16:15:56.472669Z"}, {"uuid": "3051276f-feba-4a94-9509-8e47f219c507", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57680", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113839913452910996", "content": "", "creation_timestamp": "2025-01-16T20:27:06.663506Z"}, {"uuid": "3ff964ba-ec86-4f0d-9301-f9934e3d1e93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57615", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3anf7tk2f", "content": "", "creation_timestamp": "2025-01-14T01:15:51.046029Z"}, {"uuid": "674640eb-9e55-4dce-a383-742e8b88a0ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57161", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfuoi2chpy2c", "content": "", "creation_timestamp": "2025-01-16T16:15:59.172850Z"}, {"uuid": "a55114ac-db0b-4ccb-8d2a-8cdf1cb6493f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57159", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113838939391448334", "content": "", "creation_timestamp": "2025-01-16T16:19:23.752779Z"}, {"uuid": "120c345a-737d-451e-9642-c4ad525f3ec7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57161", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113838939421308353", "content": "", "creation_timestamp": "2025-01-16T16:19:24.231976Z"}, {"uuid": "cc40b0f2-0609-4876-af6a-8b60a1269f94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57774", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfuwr2b74y2y", "content": "", "creation_timestamp": "2025-01-16T18:44:13.787137Z"}, {"uuid": "03fa0352-a801-4e64-bf38-5d44b2d2c636", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57785", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfvfwnaheq2p", "content": "", "creation_timestamp": "2025-01-16T23:15:45.201463Z"}, {"uuid": "805edf89-95a4-42be-9e74-b431429967de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57791", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfhtocott32k", "content": "", "creation_timestamp": "2025-01-11T13:44:23.049382Z"}, {"uuid": "91a45b55-3cd8-46bb-9ab0-b34bc18b0855", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57616", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3aph57k2f", "content": "", "creation_timestamp": "2025-01-14T01:15:53.164156Z"}, {"uuid": "eac01b86-c035-4a2f-80cb-b7d3aab74b2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57162", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfuoi4p5q22s", "content": "", "creation_timestamp": "2025-01-16T16:16:01.663054Z"}, {"uuid": "67df5eb7-6d79-4af8-aba3-e44f74321499", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57776", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfuwr2f5bw2e", "content": "", "creation_timestamp": "2025-01-16T18:44:14.406580Z"}, {"uuid": "b6b958c6-8c4c-4600-a9e5-d7936c67e1ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57703", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfvfwggibf2n", "content": "", "creation_timestamp": "2025-01-16T23:15:37.628230Z"}, {"uuid": "c2cbb156-b8f6-4932-92ca-fdd106d3acec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57785", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfvgy5d6mn2k", "content": "", "creation_timestamp": "2025-01-16T23:34:29.652285Z"}, {"uuid": "a53b92f4-3629-4d36-abd8-c9443a281dc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57647", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3d44ydh2d", "content": "", "creation_timestamp": "2025-01-14T01:17:13.625652Z"}, {"uuid": "40742632-9469-4df0-afe8-4369f3f387ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57611", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfuoi6xx542j", "content": "", "creation_timestamp": "2025-01-16T16:16:04.075356Z"}, {"uuid": "9a655493-f8a1-45a7-a2ab-4ac3dc92e136", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57792", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfhtocwesq2q", "content": "", "creation_timestamp": "2025-01-11T13:44:24.266132Z"}, {"uuid": "b9a32173-a497-431a-9569-ee25639d2266", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57617", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3arkhcn2n", "content": "", "creation_timestamp": "2025-01-14T01:15:55.460104Z"}, {"uuid": "6eadf07b-2278-4052-9758-4d509ef079e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57160", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113838939406993522", "content": "", "creation_timestamp": "2025-01-16T16:19:23.925390Z"}, {"uuid": "1fe520cd-60c9-4d63-9564-a4cc82eccd26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57773", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfuwr2melq2g", "content": "", "creation_timestamp": "2025-01-16T18:44:15.656062Z"}, {"uuid": "c0d5a4f9-dc80-4d22-b3ca-32e9f3bce59f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57784", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfvgy5iku72y", "content": "", "creation_timestamp": "2025-01-16T23:34:30.202106Z"}, {"uuid": "fed872c0-1684-47e5-bfef-2363b2db1a33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57487", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113822087650712773", "content": "", "creation_timestamp": "2025-01-13T16:53:46.654383Z"}, {"uuid": "434d621a-6eb1-4e39-80f4-97701f288406", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57488", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113822087650712773", "content": "", "creation_timestamp": "2025-01-13T16:53:46.700794Z"}, {"uuid": "6cf8edda-5905-43ab-b9d0-45d887006482", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57488", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113822087664903605", "content": "", "creation_timestamp": "2025-01-13T16:53:48.033458Z"}, {"uuid": "5c131a4b-9308-4041-bf47-f645b0e6b823", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57487", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113822087664903605", "content": "", "creation_timestamp": "2025-01-13T16:53:48.082131Z"}, {"uuid": "6d768fe2-3a68-4216-8421-1eeacc55f18a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57618", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3atwm2q2e", "content": "", "creation_timestamp": "2025-01-14T01:15:58.108461Z"}, {"uuid": "c5af9381-a401-4d88-be9a-31d71b3404da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57620", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3azprmf2n", "content": "", "creation_timestamp": "2025-01-14T01:16:03.938527Z"}, {"uuid": "3ab84764-31d1-494d-8cc5-52b1a5a5443d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57623", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3bat5vt2p", "content": "", "creation_timestamp": "2025-01-14T01:16:11.772576Z"}, {"uuid": "f4e88ff0-750e-4398-8ca9-db3fb7d6ebc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57635", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3c7m3jf2t", "content": "", "creation_timestamp": "2025-01-14T01:16:43.956656Z"}, {"uuid": "9bbe4514-39d5-46b5-9a73-87c512e6d522", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57643", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3csenkq2e", "content": "", "creation_timestamp": "2025-01-14T01:17:03.526094Z"}, {"uuid": "e83c0a17-759d-48f9-96b5-74b376b30140", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57162", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113838939436211918", "content": "", "creation_timestamp": "2025-01-16T16:19:24.450375Z"}, {"uuid": "b376e89f-ed6b-401b-a45a-9bedb93089b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57768", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfuwr2w2xe2q", "content": "", "creation_timestamp": "2025-01-16T18:44:16.932724Z"}, {"uuid": "33ddc130-d569-4e43-9164-c1f741a7667c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57726", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113840234754788636", "content": "", "creation_timestamp": "2025-01-16T21:48:49.647493Z"}, {"uuid": "61695b79-8d72-46b1-be8c-3e8f2dafe501", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57806", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfhtodcnfl2e", "content": "", "creation_timestamp": "2025-01-11T13:44:25.978538Z"}, {"uuid": "e5c490a8-5521-415e-83b5-79463449efd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57626", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3bhqrpd2p", "content": "", "creation_timestamp": "2025-01-14T01:16:18.755270Z"}, {"uuid": "4289c1e8-f469-45d2-83c9-8e9ffacfdf8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57662", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3ec2t5l2p", "content": "", "creation_timestamp": "2025-01-14T01:17:53.516975Z"}, {"uuid": "192d2206-0588-4e79-b7ef-18deaa290d36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57020", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfsbetzfyn2s", "content": "", "creation_timestamp": "2025-01-15T17:16:14.050873Z"}, {"uuid": "3d72b2ca-5741-4bc5-9605-099857e908a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57805", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfhtodovyl25", "content": "", "creation_timestamp": "2025-01-11T13:44:26.821180Z"}, {"uuid": "85d704e7-f867-42c6-b600-590ce7104a34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57648", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3d6m4us2f", "content": "", "creation_timestamp": "2025-01-14T01:17:16.363353Z"}, {"uuid": "2fe0d020-38ba-42b5-9135-e4d554db24d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57684", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113839999054841894", "content": "", "creation_timestamp": "2025-01-16T20:48:53.404132Z"}, {"uuid": "6b9fcff0-b9a5-42fc-b724-560c6d42e627", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57704", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfvfwioxau2e", "content": "", "creation_timestamp": "2025-01-16T23:15:40.021045Z"}, {"uuid": "913685ed-f9b9-49ae-832e-752ce380510b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57704", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfvgy5xx3c2g", "content": "", "creation_timestamp": "2025-01-16T23:34:31.843112Z"}, {"uuid": "ebbd947c-caba-4e0d-81a6-0a70598426c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57800", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfhtodsa3h2g", "content": "", "creation_timestamp": "2025-01-11T13:44:27.429924Z"}, {"uuid": "93f3b0c7-66e2-4ae0-96e6-5abca0644884", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57619", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3awriba2e", "content": "", "creation_timestamp": "2025-01-14T01:16:00.972360Z"}, {"uuid": "c078e7e1-5412-4100-9148-8cbad940c373", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57676", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113839550906576518", "content": "", "creation_timestamp": "2025-01-16T18:54:54.671834Z"}, {"uuid": "f7ab3ce7-2ac0-4f9a-9983-a10e60ba647e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57784", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfvfwkyfpi2p", "content": "", "creation_timestamp": "2025-01-16T23:15:42.553869Z"}, {"uuid": "9a878e19-a03a-4bab-9e4d-b7da03d4d855", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57703", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfvgy6a5l42w", "content": "", "creation_timestamp": "2025-01-16T23:34:32.891214Z"}, {"uuid": "d47c1277-d42e-4e03-b927-66542451e417", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57799", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfhtodvnp22q", "content": "", "creation_timestamp": "2025-01-11T13:44:27.939146Z"}, {"uuid": "d7816319-17f8-4047-b455-28033f0331d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5743", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113822219355691353", "content": "", "creation_timestamp": "2025-01-13T17:27:16.669812Z"}, {"uuid": "42ac3580-e2d9-4e68-9818-45bbe2591043", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57621", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3b3rnl32s", "content": "", "creation_timestamp": "2025-01-14T01:16:06.215763Z"}, {"uuid": "c5809936-63af-40ed-938a-1d21bd6df12b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57677", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113839550922847694", "content": "", "creation_timestamp": "2025-01-16T18:54:55.076026Z"}, {"uuid": "54dfc8ce-695e-49ab-bb4a-ed32c61e2bfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57011", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfsbe4kprd2c", "content": "", "creation_timestamp": "2025-01-15T17:15:49.173169Z"}, {"uuid": "924d97c6-b180-4136-9ea7-b0ff3abceb73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57678", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113839550937045613", "content": "", "creation_timestamp": "2025-01-16T18:54:55.311007Z"}, {"uuid": "63069350-dccd-4937-826b-a39b1ddc827e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57622", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3b6cxjv2t", "content": "", "creation_timestamp": "2025-01-14T01:16:08.758942Z"}, {"uuid": "023c0751-f041-4e10-a7fb-3e480e42ac3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57637", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3cecrf32s", "content": "", "creation_timestamp": "2025-01-14T01:16:48.638226Z"}, {"uuid": "9667bbea-e321-431e-b362-9837a30d5490", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57012", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfsbe6qwtn2j", "content": "", "creation_timestamp": "2025-01-15T17:15:51.349240Z"}, {"uuid": "d264ec9e-07f1-44dd-92b5-a61ce3f41db5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57159", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfupraghb72g", "content": "", "creation_timestamp": "2025-01-16T16:39:01.272214Z"}, {"uuid": "aea9e7ce-87c5-4fde-8c6e-0dc99611aca3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57679", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113839550952252289", "content": "", "creation_timestamp": "2025-01-16T18:54:55.602165Z"}, {"uuid": "c9e82a35-9cce-4a52-9647-3d22412c8d46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57624", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3bdar4z2f", "content": "", "creation_timestamp": "2025-01-14T01:16:13.964707Z"}, {"uuid": "3cb90444-594a-443b-8f1f-f9053d2760e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "seen", "source": "https://bsky.app/profile/onyphe.bsky.social/post/3lfx3gdjnus27", "content": "", "creation_timestamp": "2025-01-17T15:13:02.353240Z"}, {"uuid": "ec657776-cfbf-45b0-9817-fc4af31ed34d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57580", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113844952977214745", "content": "", "creation_timestamp": "2025-01-17T17:48:46.186288Z"}, {"uuid": "794be9e3-ea1c-4ee2-9078-c40b54945f8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57581", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113844953037832474", "content": "", "creation_timestamp": "2025-01-17T17:48:46.365240Z"}, {"uuid": "7e7bc66a-2b68-46d4-be38-13cb1774c3f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57582", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113844953083452356", "content": "", "creation_timestamp": "2025-01-17T17:48:46.539740Z"}, {"uuid": "da4feaa9-5101-4134-9a6f-654fba75ccee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57582", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfxgxp7e7z2k", "content": "", "creation_timestamp": "2025-01-17T18:39:38.276175Z"}, {"uuid": "a0f87af2-5e58-44b4-b3cc-0b3def6dfd9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57581", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfxgxpcw6a2y", "content": "", "creation_timestamp": "2025-01-17T18:39:38.853083Z"}, {"uuid": "e233f6ee-c392-451b-b605-52b205026783", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57768", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113845186974540502", "content": "", "creation_timestamp": "2025-01-17T18:48:16.197771Z"}, {"uuid": "adbfcc7e-7158-4646-9cd8-33dea36b8807", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57579", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113845187028402266", "content": "", "creation_timestamp": "2025-01-17T18:48:17.071411Z"}, {"uuid": "c43cd3e6-0f88-415e-ac3e-8ca0ca6bdf44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57369", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113845324870345424", "content": "", "creation_timestamp": "2025-01-17T19:23:18.463257Z"}, {"uuid": "e74fcba1-674f-4ee2-bab4-8ef2da964e64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57370", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113845371552982251", "content": "", "creation_timestamp": "2025-01-17T19:35:10.786984Z"}, {"uuid": "4dbba90f-b395-44b8-b0ea-b67ca51f702c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57372", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113845371569928781", "content": "", "creation_timestamp": "2025-01-17T19:35:11.071325Z"}, {"uuid": "cbd77490-06cb-4959-8603-ea467379ca46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57030", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113845467361093984", "content": "", "creation_timestamp": "2025-01-17T19:59:32.623235Z"}, {"uuid": "271a2923-bf1b-4bb8-b180-d8e664c779e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57030", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfxmdv74gs2w", "content": "", "creation_timestamp": "2025-01-17T20:15:51.239521Z"}, {"uuid": "522dc2e8-a491-44db-b325-eeae26592658", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57031", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfxmdxjm3o2e", "content": "", "creation_timestamp": "2025-01-17T20:15:53.740473Z"}, {"uuid": "e79a6d78-91d1-4ff4-87ae-7ec92989cb47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57032", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfxmdzxx5h2f", "content": "", "creation_timestamp": "2025-01-17T20:15:56.338577Z"}, {"uuid": "f8f2d971-52cb-4b05-a431-03aa327105ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57369", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfxme72fak2r", "content": "", "creation_timestamp": "2025-01-17T20:16:01.738131Z"}, {"uuid": "915160fb-4af8-4184-8aca-c5ad01c5e05c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57370", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfxmebntt32p", "content": "", "creation_timestamp": "2025-01-17T20:16:04.455658Z"}, {"uuid": "9200608e-55fe-4470-a5d0-ffb1b6acff72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57768", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lfxmecnp4y22", "content": "", "creation_timestamp": "2025-01-17T20:16:05.649984Z"}, {"uuid": "4152fc64-f69e-4fd1-a480-78722b8e8b7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57579", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lfxmeddmpw2n", "content": "", "creation_timestamp": "2025-01-17T20:16:06.265605Z"}, {"uuid": "a287cf90-f1a6-4c66-9b21-6612ea425ff4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57580", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lfxmedob4q22", "content": "", "creation_timestamp": "2025-01-17T20:16:06.900577Z"}, {"uuid": "0c1d90b6-da77-420b-a7a0-73efec9a5d8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57581", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lfxmedymfj2f", "content": "", "creation_timestamp": "2025-01-17T20:16:07.509460Z"}, {"uuid": "58f85df3-1d51-4d04-bea2-f4d05a815e0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57372", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfxmedwjdk2r", "content": "", "creation_timestamp": "2025-01-17T20:16:08.004580Z"}, {"uuid": "f5a16307-66ad-45a0-aac2-fda31de2d2bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57582", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lfxmeedjo72z", "content": "", "creation_timestamp": "2025-01-17T20:16:08.744072Z"}, {"uuid": "e610d179-6513-4fb1-969c-e33c6942fdda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57033", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113845537573466684", "content": "", "creation_timestamp": "2025-01-17T20:17:24.049563Z"}, {"uuid": "520fb82d-5b70-46eb-a0f8-7b339247c5ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57035", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113845537590313066", "content": "", "creation_timestamp": "2025-01-17T20:17:24.368688Z"}, {"uuid": "8cb62c7b-1de4-4c51-81c6-d9ffc09bda64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57033", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113845552194441254", "content": "", "creation_timestamp": "2025-01-17T20:21:07.239608Z"}, {"uuid": "19c3a56e-01ea-46b6-8702-b2f55bc5693e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57035", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113845552210273560", "content": "", "creation_timestamp": "2025-01-17T20:21:07.439840Z"}, {"uuid": "544be4e3-860a-4d4d-9737-af0d68e8e186", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57768", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lfxmzrecid22", "content": "", "creation_timestamp": "2025-01-17T20:28:05.510041Z"}, {"uuid": "2e5a42fe-5091-430d-b6b4-9fc01535b199", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57684", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lfxmzrorxd2j", "content": "", "creation_timestamp": "2025-01-17T20:28:06.304699Z"}, {"uuid": "78cd8547-bb6f-4f54-99d9-c7373ae96608", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57579", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lfxmzrzkkh2k", "content": "", "creation_timestamp": "2025-01-17T20:28:07.023351Z"}, {"uuid": "d4c030e9-09b1-4b1f-9265-6215a87dd6b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57580", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lfxmzse6ez2f", "content": "", "creation_timestamp": "2025-01-17T20:28:07.840277Z"}, {"uuid": "be426fbe-94a6-43f0-9cbc-38959678561c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57581", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lfxmzsognl2j", "content": "", "creation_timestamp": "2025-01-17T20:28:08.616699Z"}, {"uuid": "d70d5628-20ba-42bf-b48f-df804377d76e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57582", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lfxmzsyyij2h", "content": "", "creation_timestamp": "2025-01-17T20:28:09.377133Z"}, {"uuid": "c5aca35e-55d3-4254-9a3d-09a9fc7ca891", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57768", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lfxna65sph2z", "content": "", "creation_timestamp": "2025-01-17T20:31:40.383729Z"}, {"uuid": "02b56c8a-d477-4e7c-bb97-7b14b49c3d4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57684", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lfxna6ij3s2y", "content": "", "creation_timestamp": "2025-01-17T20:31:41.141575Z"}, {"uuid": "7e822792-ae33-4077-9322-00506982d47f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57579", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lfxna6t5fh2k", "content": "", "creation_timestamp": "2025-01-17T20:31:41.838482Z"}, {"uuid": "eb1dc522-3479-4790-91ba-14f98c586e45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57580", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lfxna7aayt2u", "content": "", "creation_timestamp": "2025-01-17T20:31:42.552785Z"}, {"uuid": "c130da82-515c-482f-93df-eafd3feec8a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57581", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lfxna7kusp2z", "content": "", "creation_timestamp": "2025-01-17T20:31:43.187887Z"}, {"uuid": "3312fa56-564b-44c2-9dfe-fd326d384b8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57582", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lfxna7vaut2u", "content": "", "creation_timestamp": "2025-01-17T20:31:43.778012Z"}, {"uuid": "76120e90-f7c9-4a9d-9187-3cc9aa5975ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57768", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lfxndmt4aw2n", "content": "", "creation_timestamp": "2025-01-17T20:33:36.153085Z"}, {"uuid": "0c703e8a-0940-4acb-92dc-8ab4902d0b9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57684", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lfxndn5m6g2v", "content": "", "creation_timestamp": "2025-01-17T20:33:37.001303Z"}, {"uuid": "6c961476-c607-4f0b-ab01-370776928f8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57579", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lfxndnhykk2y", "content": "", "creation_timestamp": "2025-01-17T20:33:37.712451Z"}, {"uuid": "7a30fa4e-ddfc-4533-a3c6-0ed7963a8e64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57580", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lfxndnse2x2k", "content": "", "creation_timestamp": "2025-01-17T20:33:38.433464Z"}, {"uuid": "b2136485-e930-4d2b-86d6-77006a565e28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57581", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lfxndoary72k", "content": "", "creation_timestamp": "2025-01-17T20:33:39.304773Z"}, {"uuid": "f37e526f-78cc-496e-9835-1702fef437c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57582", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lfxndol2vs25", "content": "", "creation_timestamp": "2025-01-17T20:33:40.080369Z"}, {"uuid": "411ed3ca-b9d2-4fe5-b0c1-372207c3064c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57768", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lfxninj6lp2z", "content": "", "creation_timestamp": "2025-01-17T20:36:24.653626Z"}, {"uuid": "89af8da4-8c5c-4767-bdb3-b13793cc9c82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57684", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lfxnintcrt22", "content": "", "creation_timestamp": "2025-01-17T20:36:25.419485Z"}, {"uuid": "b05a5a4f-a243-46e7-aca0-d7f0e668e1fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57579", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lfxnio5w4b2h", "content": "", "creation_timestamp": "2025-01-17T20:36:26.160214Z"}, {"uuid": "28aa5d24-0e58-4d83-a1f0-fd772aff81d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57580", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lfxnioiss32j", "content": "", "creation_timestamp": "2025-01-17T20:36:27.037869Z"}, {"uuid": "c9237520-f845-485c-871d-440e76cb0e0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57581", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lfxniotplv2y", "content": "", "creation_timestamp": "2025-01-17T20:36:27.682804Z"}, {"uuid": "005e716e-96bd-4c02-a45b-dc1d307275ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57582", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lfxnip6b6b2f", "content": "", "creation_timestamp": "2025-01-17T20:36:28.521271Z"}, {"uuid": "e2a1b2a9-6459-4173-87fb-fadb11aca3a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57768", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lfxnnlvpmv2y", "content": "", "creation_timestamp": "2025-01-17T20:39:10.999702Z"}, {"uuid": "543ee0f4-3d37-47fd-9c95-d4b276c880f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57684", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lfxnnmaqxq2z", "content": "", "creation_timestamp": "2025-01-17T20:39:11.788351Z"}, {"uuid": "f0978a8d-ef44-401f-8718-6a2dbe64c43e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57579", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lfxnnmkuaw2v", "content": "", "creation_timestamp": "2025-01-17T20:39:12.578652Z"}, {"uuid": "cc1f43a7-5273-4f90-be0d-05f0ccd17749", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57580", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lfxnnmwett22", "content": "", "creation_timestamp": "2025-01-17T20:39:13.384744Z"}, {"uuid": "b7c29bc6-918e-4f68-a9ff-b07011e4ab87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57581", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lfxnnnaomv2y", "content": "", "creation_timestamp": "2025-01-17T20:39:14.194137Z"}, {"uuid": "9bf61303-6885-4389-bec6-4de09f08530a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57582", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lfxnnnlaut2u", "content": "", "creation_timestamp": "2025-01-17T20:39:15.108150Z"}, {"uuid": "ff3046aa-e41b-49ab-b9a3-827ea9ce7348", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57768", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lfxnv4mdlj25", "content": "", "creation_timestamp": "2025-01-17T20:43:23.571735Z"}, {"uuid": "4cce3d18-6aa8-4004-b20d-7d5e0fc45f33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57684", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lfxnv4xfcb2h", "content": "", "creation_timestamp": "2025-01-17T20:43:24.300650Z"}, {"uuid": "cfa89156-2b03-4878-870d-67d69975e519", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57579", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lfxnv5bybg2n", "content": "", "creation_timestamp": "2025-01-17T20:43:25.294607Z"}, {"uuid": "9ab7a78d-e49e-4d89-a006-270ccd0be47e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57580", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lfxnv5mtwg2n", "content": "", "creation_timestamp": "2025-01-17T20:43:25.897890Z"}, {"uuid": "ff33b11a-0116-4e2d-af67-ed95eb781663", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57581", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lfxnv5x7cs2y", "content": "", "creation_timestamp": "2025-01-17T20:43:26.863692Z"}, {"uuid": "c44129ee-7bf3-4fac-8155-63db4cff2bb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57582", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lfxnv6ki662n", "content": "", "creation_timestamp": "2025-01-17T20:43:27.871611Z"}, {"uuid": "8a3bc70c-6e3f-4012-b623-0abc1029e982", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57582", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lfxny77tv322", "content": "", "creation_timestamp": "2025-01-17T20:45:08.055716Z"}, {"uuid": "ed160c97-ddf6-4f73-ab81-21c1b174d2dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-57727.yaml", "content": "", "creation_timestamp": "2025-01-19T03:58:06.000000Z"}, {"uuid": "143e0070-9960-4bbd-8fde-ad4816f015e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57931", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113866248257509687", "content": "", "creation_timestamp": "2025-01-21T12:04:24.022420Z"}, {"uuid": "a430ef56-0864-4eb4-8be1-ccdca9d1ac44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57932", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113866248271940250", "content": "", "creation_timestamp": "2025-01-21T12:04:24.259788Z"}, {"uuid": "36fe8413-05a1-4111-9bf4-513dacc43cb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57933", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgatfv3xhe2t", "content": "", "creation_timestamp": "2025-01-21T12:16:12.021073Z"}, {"uuid": "a3f88e38-e8a3-4ce3-8f9e-cf8f44f7969c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57937", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgatg6kq4h2j", "content": "", "creation_timestamp": "2025-01-21T12:16:21.853933Z"}, {"uuid": "eeeb70eb-be69-4de4-bf62-f1cdf66ca067", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57938", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgatgas2cn2j", "content": "", "creation_timestamp": "2025-01-21T12:16:24.255191Z"}, {"uuid": "11732a3f-18ea-49c9-a6cc-ff3841aac4cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57934", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113866307303997674", "content": "", "creation_timestamp": "2025-01-21T12:19:24.976200Z"}, {"uuid": "6f71ce86-3d80-42a0-bc85-8e3924dbd240", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57942", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113866342006435319", "content": "", "creation_timestamp": "2025-01-21T12:28:14.629036Z"}, {"uuid": "4999e3e9-61ab-4519-8305-b70d16c47f5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57931", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgavtarh6d2h", "content": "", "creation_timestamp": "2025-01-21T12:59:28.689724Z"}, {"uuid": "860efe57-9fd3-4b41-aa58-147190cc4c3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57939", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgawqcdubk2p", "content": "", "creation_timestamp": "2025-01-21T13:15:42.934575Z"}, {"uuid": "683ec9fb-c101-4cec-9108-a941ed98ffe3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57944", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgawqntfi22r", "content": "", "creation_timestamp": "2025-01-21T13:15:54.665804Z"}, {"uuid": "64c5c85b-76d3-4b40-a608-aa93efa0f356", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57942", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgay2thaez2q", "content": "", "creation_timestamp": "2025-01-21T13:39:32.857094Z"}, {"uuid": "05f8e3ce-66a3-4b07-b4b3-2b298e2c341c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57940", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgay2twr752y", "content": "", "creation_timestamp": "2025-01-21T13:39:34.926491Z"}, {"uuid": "380465a4-750f-49a6-97c7-9260f1b92e91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57943", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgay2u6ehg2k", "content": "", "creation_timestamp": "2025-01-21T13:39:35.654728Z"}, {"uuid": "1d4e7eec-88f2-423f-802d-976d7bdfb052", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57372", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfxnxfb3ra2r", "content": "", "creation_timestamp": "2025-01-17T20:44:39.849097Z"}, {"uuid": "25beba9f-bc8e-4763-a977-e04085073119", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57030", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfxnxfgiru2k", "content": "", "creation_timestamp": "2025-01-17T20:44:40.536789Z"}, {"uuid": "ad87cf54-fdc4-4ef5-871d-c374285c9f40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57369", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfxnxfkscd2y", "content": "", "creation_timestamp": "2025-01-17T20:44:41.175033Z"}, {"uuid": "8f3d4c68-182e-4a6e-a75a-620d6c07118a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57370", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfxnxfzezd2q", "content": "", "creation_timestamp": "2025-01-17T20:44:43.376599Z"}, {"uuid": "1b98e201-4308-4e21-9ef6-6d282e79ce0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57032", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfxnxg5co62h", "content": "", "creation_timestamp": "2025-01-17T20:44:43.862137Z"}, {"uuid": "e620574d-f1dd-401e-941f-fb7295c2d6e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57031", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfxnxgipj42k", "content": "", "creation_timestamp": "2025-01-17T20:44:45.863900Z"}, {"uuid": "825d953b-2654-49d5-9772-3c572eaea1cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57933", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113866248305930881", "content": "", "creation_timestamp": "2025-01-21T12:04:24.645070Z"}, {"uuid": "97eb29ae-3177-48f3-ac86-e4ae985371da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57935", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgatfzjxfm2t", "content": "", "creation_timestamp": "2025-01-21T12:16:16.692604Z"}, {"uuid": "87e9d52a-356a-4f52-b93f-850710911f3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57935", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113866307317944200", "content": "", "creation_timestamp": "2025-01-21T12:19:25.435155Z"}, {"uuid": "781a61a1-d505-457d-9f1a-1e1fadbd61d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57943", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113866401028432271", "content": "", "creation_timestamp": "2025-01-21T12:43:15.116542Z"}, {"uuid": "1cd4dc61-628f-4735-9f0c-8b272ca2d280", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57933", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgavtan6gj2g", "content": "", "creation_timestamp": "2025-01-21T12:59:28.142522Z"}, {"uuid": "192c3bec-ed80-45f9-8afb-3989484bc6a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57932", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgavtblwkx2b", "content": "", "creation_timestamp": "2025-01-21T12:59:32.549904Z"}, {"uuid": "94bafdba-74e2-4ec9-9fb5-0be360d5fea1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57940", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgawqeryja2f", "content": "", "creation_timestamp": "2025-01-21T13:15:45.343808Z"}, {"uuid": "8ad4cf75-d512-441c-8d90-840f624d8df9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57034", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfxnxglxti2r", "content": "", "creation_timestamp": "2025-01-17T20:44:46.423003Z"}, {"uuid": "7c815a79-8dc5-4f66-97c4-ab6ee3cac96a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57768", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lfxny5ikvo2v", "content": "", "creation_timestamp": "2025-01-17T20:45:04.719342Z"}, {"uuid": "af4fe847-31c9-44af-b255-40ae098d97a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57684", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lfxny5t3tg2n", "content": "", "creation_timestamp": "2025-01-17T20:45:05.340980Z"}, {"uuid": "3f03e374-0a45-4b10-96ea-c0dc525908a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57930", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgatfncnv32e", "content": "", "creation_timestamp": "2025-01-21T12:16:04.209355Z"}, {"uuid": "933a5d88-6941-4d72-b767-cf426b5c9f5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57934", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgatfxddsa2p", "content": "", "creation_timestamp": "2025-01-21T12:16:14.353461Z"}, {"uuid": "99f2873f-12f7-412a-af66-ca0d03820600", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57936", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgatg3wgki2f", "content": "", "creation_timestamp": "2025-01-21T12:16:19.235956Z"}, {"uuid": "bbbdb131-d427-439a-be46-11407b0b216d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57936", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113866307332160636", "content": "", "creation_timestamp": "2025-01-21T12:19:25.582102Z"}, {"uuid": "1347f9b0-52ce-4486-9105-146e91167f5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57944", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113866401042708216", "content": "", "creation_timestamp": "2025-01-21T12:43:15.397241Z"}, {"uuid": "da1ee27f-969e-4724-b71a-c2c8aba3d20e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57941", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgawqgxik52b", "content": "", "creation_timestamp": "2025-01-21T13:15:47.518739Z"}, {"uuid": "93f9f41f-5be5-4071-983e-c6e204b43d26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57945", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgawqq3hpg2h", "content": "", "creation_timestamp": "2025-01-21T13:15:57.213982Z"}, {"uuid": "38a6f7d4-13fe-4d22-8144-7bf08f3d74d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57939", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgay2shdfz2e", "content": "", "creation_timestamp": "2025-01-21T13:39:29.104225Z"}, {"uuid": "dda5fae6-37b5-464d-9724-d1811814c4d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57579", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lfxny65olr2h", "content": "", "creation_timestamp": "2025-01-17T20:45:06.020501Z"}, {"uuid": "076fcfe0-109b-4b3d-aecf-66fde2e744ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57931", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgatfqd7mm2n", "content": "", "creation_timestamp": "2025-01-21T12:16:06.953521Z"}, {"uuid": "8f8bc1cf-283f-4517-9aa5-b6ac9654fadb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57939", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113866341963235598", "content": "", "creation_timestamp": "2025-01-21T12:28:13.921944Z"}, {"uuid": "ff5c0017-7862-4ff5-8706-01466e8111ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57940", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113866341978131633", "content": "", "creation_timestamp": "2025-01-21T12:28:14.201169Z"}, {"uuid": "e2e8d1b6-6e16-489e-9344-c7b3313d40f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57945", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113866401056935021", "content": "", "creation_timestamp": "2025-01-21T12:43:15.722153Z"}, {"uuid": "a0a15b7b-d975-4e1f-9351-989b6fd2c448", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57934", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgavtav4t32w", "content": "", "creation_timestamp": "2025-01-21T12:59:29.294405Z"}, {"uuid": "067fc916-88f9-4374-b69b-b80815bdb92b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57937", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgavtaylgh2b", "content": "", "creation_timestamp": "2025-01-21T12:59:29.813688Z"}, {"uuid": "9168e5f1-7f8d-4242-8a0a-3d4e34a7f665", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57935", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgavtb4pir2g", "content": "", "creation_timestamp": "2025-01-21T12:59:30.374254Z"}, {"uuid": "3b6ced0a-6021-4e3c-a11c-5d0a658bc156", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57938", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgavtbdxx32h", "content": "", "creation_timestamp": "2025-01-21T12:59:31.503616Z"}, {"uuid": "912b1127-a89c-418c-9805-62cc66dbcee5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57942", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgawqjaufk2e", "content": "", "creation_timestamp": "2025-01-21T13:15:50.033794Z"}, {"uuid": "81a163d3-5283-4883-b678-0aa334962952", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57580", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lfxny6j3w62v", "content": "", "creation_timestamp": "2025-01-17T20:45:06.767657Z"}, {"uuid": "4d2869c6-f4c6-4a2d-9fc0-c2abda5b5272", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57581", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lfxny6tmof2z", "content": "", "creation_timestamp": "2025-01-17T20:45:07.356930Z"}, {"uuid": "5d1c5474-f54e-4bb7-8cb5-d542ec072d35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57033", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfxpohw3ts2f", "content": "", "creation_timestamp": "2025-01-17T21:15:27.537106Z"}, {"uuid": "cb4107af-bd6c-4dcd-82c2-df140857e1d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57035", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfxpokgzrt2c", "content": "", "creation_timestamp": "2025-01-17T21:15:30.246878Z"}, {"uuid": "7fc67ab1-360a-49f7-9f45-80425e75476c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57252", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfxpon2say2f", "content": "", "creation_timestamp": "2025-01-17T21:15:32.956934Z"}, {"uuid": "4d8ae4ff-e352-429e-bc68-e3a05d5845fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57768", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lfxpw3g44k2z", "content": "", "creation_timestamp": "2025-01-17T21:19:43.313248Z"}, {"uuid": "66293deb-4d34-4ab4-82cc-45caf6a172f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57684", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lfxpw3qsvc2z", "content": "", "creation_timestamp": "2025-01-17T21:19:43.970423Z"}, {"uuid": "9ca49787-7f38-46f9-9b37-cbd98fdaf4d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57579", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lfxpw44rqr2j", "content": "", "creation_timestamp": "2025-01-17T21:19:44.728007Z"}, {"uuid": "aa187ae8-4c91-453b-8bf7-a71240c5d5b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57580", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lfxpw4h7da22", "content": "", "creation_timestamp": "2025-01-17T21:19:45.446864Z"}, {"uuid": "91681b68-8e28-496b-8467-68536ae21733", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57581", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lfxpw4rdhn2u", "content": "", "creation_timestamp": "2025-01-17T21:19:46.176594Z"}, {"uuid": "754b4967-b2e3-44c2-b486-7cfbd39901ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57582", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lfxpw54b352u", "content": "", "creation_timestamp": "2025-01-17T21:19:46.963100Z"}, {"uuid": "849f5f4f-e14a-479d-9004-45b435256250", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57030", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113845895479022844", "content": "", "creation_timestamp": "2025-01-17T21:48:25.382513Z"}, {"uuid": "af0dac04-1022-44cb-84b2-c6ba2972cae8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57033", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfxudgvpa22u", "content": "", "creation_timestamp": "2025-01-17T22:38:46.639309Z"}, {"uuid": "fe689fec-cd3c-4045-a6ce-ba13dfffedd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57252", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfxuf7d2c52k", "content": "", "creation_timestamp": "2025-01-17T22:39:45.264764Z"}, {"uuid": "5c394331-4996-4d5f-9e0c-1b3e17e4613e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57035", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfxuf7s6t42g", "content": "", "creation_timestamp": "2025-01-17T22:39:46.433280Z"}, {"uuid": "24f0c5b9-813c-4b90-9d4d-3a3997d84bd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57930", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113866248242945246", "content": "", "creation_timestamp": "2025-01-21T12:04:23.882592Z"}, {"uuid": "d0d0a83b-4b15-417d-a58e-889d551b62a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57932", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgatfsnlt72j", "content": "", "creation_timestamp": "2025-01-21T12:16:09.476540Z"}, {"uuid": "00f7f12e-6308-433d-81cc-408c91dfb803", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57941", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113866341992199507", "content": "", "creation_timestamp": "2025-01-21T12:28:14.353312Z"}, {"uuid": "a2a98c3f-8891-4c47-ae88-68c823eb5c95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57946", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113866401071114067", "content": "", "creation_timestamp": "2025-01-21T12:43:16.068271Z"}, {"uuid": "b91bc114-0c07-49e2-a824-f95ae64d3078", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57930", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgavtad6kh2r", "content": "", "creation_timestamp": "2025-01-21T12:59:27.421272Z"}, {"uuid": "40a28979-daa6-4014-b806-04fb40ab00bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57936", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgavtbphk72r", "content": "", "creation_timestamp": "2025-01-21T12:59:33.099730Z"}, {"uuid": "8b333fd6-4daa-4d6e-87b1-e61cf75878df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57943", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgawqllkt52b", "content": "", "creation_timestamp": "2025-01-21T13:15:52.422855Z"}, {"uuid": "f4de2c9c-4ca8-4d43-ab82-a8b9c8438c9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57946", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgawqsp6ma2f", "content": "", "creation_timestamp": "2025-01-21T13:15:59.758734Z"}, {"uuid": "66299ded-263a-43c8-9f71-a8ba142c1559", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57939", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113866581148390646", "content": "", "creation_timestamp": "2025-01-21T13:29:03.380872Z"}, {"uuid": "3926a6f4-1c48-4386-becb-066a56f4e4b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57941", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgay2sqpu22g", "content": "", "creation_timestamp": "2025-01-21T13:39:29.714187Z"}, {"uuid": "ee1dce75-2f8f-4782-823c-1130f31270f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57945", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgay2sunrx2g", "content": "", "creation_timestamp": "2025-01-21T13:39:30.207723Z"}, {"uuid": "2faf0323-ac47-4403-90c1-692c1f67a895", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57944", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgay2sxvc42e", "content": "", "creation_timestamp": "2025-01-21T13:39:30.717929Z"}, {"uuid": "4f341849-3fae-43d2-9fc2-78942bfe88d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57946", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgay2t6rhs2u", "content": "", "creation_timestamp": "2025-01-21T13:39:31.704711Z"}, {"uuid": "72b8b898-8edc-48a6-b5a4-7beed87c466a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57768", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lfzk2x3gfc25", "content": "", "creation_timestamp": "2025-01-18T14:40:23.722603Z"}, {"uuid": "f72a5abf-a35a-4344-b84e-77f5c80da05f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57684", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lfzk2xg2ei25", "content": "", "creation_timestamp": "2025-01-18T14:40:24.508382Z"}, {"uuid": "c9ba3b43-455d-4cd8-80d8-abbf600e2811", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57579", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lfzk2xrd7a2z", "content": "", "creation_timestamp": "2025-01-18T14:40:25.307207Z"}, {"uuid": "4f26c863-3b81-44e6-8eaa-bf64c23485f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57580", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lfzk2y3ixk2f", "content": "", "creation_timestamp": "2025-01-18T14:40:26.080925Z"}, {"uuid": "dbae4eac-c39e-44fc-bd69-acbc587813b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57581", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lfzk2yft222f", "content": "", "creation_timestamp": "2025-01-18T14:40:26.910953Z"}, {"uuid": "6e642e2a-a273-4150-8d9e-b5d344502f07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57582", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lfzk2yq6tg2z", "content": "", "creation_timestamp": "2025-01-18T14:40:27.689737Z"}, {"uuid": "22ccb349-2a13-443f-b4ae-55296f915593", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57768", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lg24awivkt25", "content": "", "creation_timestamp": "2025-01-18T20:05:51.759107Z"}, {"uuid": "6cbf2cf0-b102-4d6b-a98c-ab42ee7f75fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57684", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lg24awt2wg25", "content": "", "creation_timestamp": "2025-01-18T20:05:52.637735Z"}, {"uuid": "1b20f6d5-1d7a-4cef-8f18-815e4dfe83c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57579", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lg24ax6tpl25", "content": "", "creation_timestamp": "2025-01-18T20:05:53.293707Z"}, {"uuid": "c26259ce-91a7-4f3a-befa-3780a5a3aede", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57580", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lg24axj6ja22", "content": "", "creation_timestamp": "2025-01-18T20:05:54.025508Z"}, {"uuid": "b3d886e0-637f-436d-bca6-12d553db9279", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57581", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lg24axtvby22", "content": "", "creation_timestamp": "2025-01-18T20:05:54.815087Z"}, {"uuid": "fd7d5608-ad68-4926-9efc-08f11c5448a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57582", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lg24ay6iqx2j", "content": "", "creation_timestamp": "2025-01-18T20:05:55.504430Z"}, {"uuid": "9406c3c2-ac14-41ba-9480-cb7eb2558c43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57904", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lg3sh3wtdy2b", "content": "", "creation_timestamp": "2025-01-19T12:15:40.447173Z"}, {"uuid": "7bd5a73c-b4b7-4b94-a196-7dfcf358aa7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57905", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lg3sh5xwiw2c", "content": "", "creation_timestamp": "2025-01-19T12:15:42.507728Z"}, {"uuid": "1cd7ebf4-017a-4b63-a891-bae09d709b26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57906", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lg3sha3z7d2h", "content": "", "creation_timestamp": "2025-01-19T12:15:44.887155Z"}, {"uuid": "906053df-f115-4ca0-870b-7180f09ef925", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57907", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lg3shd2rjy2f", "content": "", "creation_timestamp": "2025-01-19T12:15:47.960753Z"}, {"uuid": "da833e2d-905d-4b47-88d7-d891395c2311", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57908", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lg3shfault2h", "content": "", "creation_timestamp": "2025-01-19T12:15:50.119108Z"}, {"uuid": "f9da772b-0169-4959-ba57-4e7dc90c1b23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57909", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lg3shhlr3d2h", "content": "", "creation_timestamp": "2025-01-19T12:15:52.662731Z"}, {"uuid": "591fcde6-3957-486d-81f0-ca98a11f0334", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57910", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lg3shjxiii2e", "content": "", "creation_timestamp": "2025-01-19T12:15:54.930332Z"}, {"uuid": "89d5dd83-0729-4979-92ea-d0cea21c1fe0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57911", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lg3shmqcky2b", "content": "", "creation_timestamp": "2025-01-19T12:15:57.943001Z"}, {"uuid": "80bdeee4-f72d-4c62-b196-66046cf864df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57912", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lg3shpf7ma2f", "content": "", "creation_timestamp": "2025-01-19T12:16:01.155129Z"}, {"uuid": "30d62ecd-a929-4203-8e18-50f469888b51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57913", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lg3shrgeh42j", "content": "", "creation_timestamp": "2025-01-19T12:16:02.834587Z"}, {"uuid": "f237a6e3-2cac-448b-8fd9-ff07f53f5ebd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57914", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lg3shtos742p", "content": "", "creation_timestamp": "2025-01-19T12:16:05.364808Z"}, {"uuid": "02ecf9b9-6282-4551-85d4-035de02e3fee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57915", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lg3shvrocj2s", "content": "", "creation_timestamp": "2025-01-19T12:16:07.492204Z"}, {"uuid": "f1c83b75-3d85-4751-8adf-d015a504ab09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57916", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lg3shygigy2f", "content": "", "creation_timestamp": "2025-01-19T12:16:10.138384Z"}, {"uuid": "03412b26-af1f-4e8b-b44c-def528d98529", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57917", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lg3si2kl2t2t", "content": "", "creation_timestamp": "2025-01-19T12:16:12.481346Z"}, {"uuid": "cb8f5c6a-dbad-4faf-83eb-98f6c8333fb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57918", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lg3si4nugl2n", "content": "", "creation_timestamp": "2025-01-19T12:16:14.647153Z"}, {"uuid": "a2f8456d-19d8-4f2d-beb8-ec17cc6161f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57919", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lg3si6v2mv2f", "content": "", "creation_timestamp": "2025-01-19T12:16:16.963610Z"}, {"uuid": "1572e841-4de8-41e8-99df-e3901ae27f6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57920", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lg3sib7nft2h", "content": "", "creation_timestamp": "2025-01-19T12:16:19.417874Z"}, {"uuid": "0e92dd40-f894-42f7-8ff0-99533175ed6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57921", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lg3sidbzjy2f", "content": "", "creation_timestamp": "2025-01-19T12:16:21.661828Z"}, {"uuid": "0e89a764-fbea-4bbb-ab67-7de20434bf69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57922", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lg3sifls542p", "content": "", "creation_timestamp": "2025-01-19T12:16:24.271785Z"}, {"uuid": "3d24db71-54df-4fb3-807f-861fb1167a77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57923", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lg3sihs2wo27", "content": "", "creation_timestamp": "2025-01-19T12:16:26.493415Z"}, {"uuid": "d9b1dbbc-50a0-4e75-ab7b-17484aaf3c0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57924", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lg3sikuynr2s", "content": "", "creation_timestamp": "2025-01-19T12:16:29.579535Z"}, {"uuid": "ab349998-a555-4795-a8ac-4853ad8013b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57925", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lg3simxpnl2n", "content": "", "creation_timestamp": "2025-01-19T12:16:31.691667Z"}, {"uuid": "c1d5d1fc-a0e5-4806-95c8-c91a291057a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57926", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lg3sip63o627", "content": "", "creation_timestamp": "2025-01-19T12:16:34.432626Z"}, {"uuid": "ed42aede-2f8e-4dee-9c80-8b5910c3a0dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57927", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lg3sirwsbi2b", "content": "", "creation_timestamp": "2025-01-19T12:16:36.946065Z"}, {"uuid": "a9b50d2e-67d6-415d-82c7-bebefdec9c7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57928", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lg3siujc332t", "content": "", "creation_timestamp": "2025-01-19T12:16:39.851815Z"}, {"uuid": "12c84ba8-5366-4ef2-af1d-c5eddf18f3fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57929", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lg3siwm4kr2s", "content": "", "creation_timestamp": "2025-01-19T12:16:42.193514Z"}, {"uuid": "3717e4df-13c1-4cc8-81d6-a5696e7ccfcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57918", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113855034400687613", "content": "", "creation_timestamp": "2025-01-19T12:32:34.034639Z"}, {"uuid": "61c6213f-6994-4c5a-bc34-1c8eb851e56b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57928", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113855087502562969", "content": "", "creation_timestamp": "2025-01-19T12:46:04.392837Z"}, {"uuid": "b529c511-7e13-466d-923c-af31f28c8f77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57913", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lg3ulnxynh2g", "content": "", "creation_timestamp": "2025-01-19T12:54:01.175174Z"}, {"uuid": "98d5f589-fa4f-4abe-90a1-d5a6848579c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57911", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lg3und5ge62q", "content": "", "creation_timestamp": "2025-01-19T12:54:56.611041Z"}, {"uuid": "e5a70f8d-0f0c-41d0-87e4-b1f5e40c1295", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57923", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lg3undlhjd2e", "content": "", "creation_timestamp": "2025-01-19T12:54:57.437762Z"}, {"uuid": "58f2e5fd-49e0-4969-a1e1-d8517893d2b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57920", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lg3undpyvi2k", "content": "", "creation_timestamp": "2025-01-19T12:54:58.001937Z"}, {"uuid": "a84924a5-03e6-4e65-a0e6-b0fdc9c83ecc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57912", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lg3undtvo42u", "content": "", "creation_timestamp": "2025-01-19T12:54:58.564267Z"}, {"uuid": "f2384592-70a3-40a9-89ad-6efa5cb4272b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57910", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lg3undy7pt2e", "content": "", "creation_timestamp": "2025-01-19T12:54:59.187368Z"}, {"uuid": "84e1a0c5-1b38-4891-b23c-fbfc6a97954d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57922", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lg3une43f42u", "content": "", "creation_timestamp": "2025-01-19T12:54:59.688693Z"}, {"uuid": "136ef5eb-b38c-42d4-a78e-68052da4dd47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57927", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lg3une7rke2u", "content": "", "creation_timestamp": "2025-01-19T12:55:00.262572Z"}, {"uuid": "ab6411dd-7330-4cac-9a70-04b559d6a4e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57915", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lg3unedqlx2g", "content": "", "creation_timestamp": "2025-01-19T12:55:00.833600Z"}, {"uuid": "6ab0f709-e44e-4cb0-9618-6da62c4e1555", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57767", "type": "seen", "source": "https://bsky.app/profile/wiretor.bsky.social/post/3lg4ax6nboc2h", "content": "", "creation_timestamp": "2025-01-19T16:35:17.628026Z"}, {"uuid": "1aa8100e-4731-40af-b5f5-5b6fe7620d4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57386", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lggvujxvgp2e", "content": "", "creation_timestamp": "2025-01-23T22:16:09.984011Z"}, {"uuid": "d440fbb7-c87c-4b52-b2b0-56ddcebd58f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57556", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lggvumqmf52t", "content": "", "creation_timestamp": "2025-01-23T22:16:12.488509Z"}, {"uuid": "98119abe-41b5-4ee3-b063-b20fa33632f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57427", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhjqsu46pz23", "content": "", "creation_timestamp": "2025-02-06T18:48:56.413180Z"}, {"uuid": "d133ca53-d0a2-4a4e-870e-b600b1af464b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57931", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113866636248516929", "content": "", "creation_timestamp": "2025-01-21T13:43:04.205677Z"}, {"uuid": "33b78c0a-4bfc-4b63-ba2e-0bf98de48e8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57936", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113866740466951809", "content": "", "creation_timestamp": "2025-01-21T14:09:34.830463Z"}, {"uuid": "3365fb6d-041d-4afe-9747-d2bd399ba094", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lgazwfkf7s2z", "content": "", "creation_timestamp": "2025-01-21T14:12:58.551877Z"}, {"uuid": "6c132baa-27f9-42b3-ab6f-f16bd6fe6bd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57036", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113867210977785280", "content": "", "creation_timestamp": "2025-01-21T16:09:14.122539Z"}, {"uuid": "6ca7d738-b18c-4662-9c7b-cac73d9ffcf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57036", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgbasokhwy2b", "content": "", "creation_timestamp": "2025-01-21T16:15:59.963739Z"}, {"uuid": "13d2a510-d882-4c45-92a6-de610fc1244f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57036", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgbcotdfpr2q", "content": "", "creation_timestamp": "2025-01-21T16:49:38.777527Z"}, {"uuid": "5a08d88c-5858-4d84-825b-f546ffc29831", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57595", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113901810140226823", "content": "", "creation_timestamp": "2025-01-27T18:48:17.287126Z"}, {"uuid": "3c1f7d7b-754e-4df4-9b00-30493c55903d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57395", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgvyo4ud7m27", "content": "", "creation_timestamp": "2025-01-29T22:16:11.769684Z"}, {"uuid": "c721a0f2-7101-40fe-a61f-abd84989df89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lgbqs25kbw27", "content": "", "creation_timestamp": "2025-01-21T21:01:59.726950Z"}, {"uuid": "11a4d245-3b94-4ad5-8e1e-eb7d7752eb9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57360", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgbrkw4x722p", "content": "", "creation_timestamp": "2025-01-21T21:15:53.400367Z"}, {"uuid": "0deddb78-9a93-4165-8d04-eaf81eff651b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57536", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgbrkyewmx2j", "content": "", "creation_timestamp": "2025-01-21T21:15:55.754689Z"}, {"uuid": "880a9353-784d-4cf0-a648-70808390ea63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57537", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgbrl2oiwh2t", "content": "", "creation_timestamp": "2025-01-21T21:15:58.052533Z"}, {"uuid": "d29431c1-19ec-4483-839c-e71dfded95fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57538", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgbrl543he2f", "content": "", "creation_timestamp": "2025-01-21T21:16:00.357705Z"}, {"uuid": "2e58e247-30cb-4f96-b814-f6dc9bb44c83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57539", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgbrl7iwhd2h", "content": "", "creation_timestamp": "2025-01-21T21:16:03.130141Z"}, {"uuid": "ad9a3cec-7e69-4f6f-8beb-2ffc92fd51fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57540", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgbrlc2pay2t", "content": "", "creation_timestamp": "2025-01-21T21:16:05.837925Z"}, {"uuid": "367d358a-1930-4ca8-909f-9c01770bd947", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57541", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgbrlemtnh2j", "content": "", "creation_timestamp": "2025-01-21T21:16:08.464654Z"}, {"uuid": "5eb9d294-f6c8-4669-8d9b-ad5ac65b292b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57542", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgbrlgyrzr2s", "content": "", "creation_timestamp": "2025-01-21T21:16:10.892345Z"}, {"uuid": "fee3d79e-5f95-4a1d-8e24-384c088f297d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57543", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgbrljn6qa2j", "content": "", "creation_timestamp": "2025-01-21T21:16:13.611913Z"}, {"uuid": "25729f96-8713-4d65-9992-a81e5f91fc61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57544", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgbrllxhhh2j", "content": "", "creation_timestamp": "2025-01-21T21:16:16.154212Z"}, {"uuid": "8f6456df-60e0-4688-8582-e72e8551b457", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57545", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgbrlofom62f", "content": "", "creation_timestamp": "2025-01-21T21:16:18.553771Z"}, {"uuid": "a95665a5-ba0d-4d16-9031-9d365d18e382", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57509", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgvyo7aoja2c", "content": "", "creation_timestamp": "2025-01-29T22:16:14.662300Z"}, {"uuid": "0deb558f-7645-4620-8fef-a2c3ef2fb2a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57428", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhjqsu7g4a23", "content": "", "creation_timestamp": "2025-02-06T18:48:57.003313Z"}, {"uuid": "cab4f9b5-0686-42f9-bd7f-0dd10dd1de48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57392", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113959065799738457", "content": "", "creation_timestamp": "2025-02-06T21:29:07.280110Z"}, {"uuid": "e3fe547a-2f6e-4f69-8936-0717ebd2c3d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57510", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgvyobqexk2i", "content": "", "creation_timestamp": "2025-01-29T22:16:16.880196Z"}, {"uuid": "69a0cc13-f9f8-4528-82af-dbfe7cd47bed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57430", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhjqsuy5572a", "content": "", "creation_timestamp": "2025-02-06T18:49:01.239012Z"}, {"uuid": "36e68a90-6f4a-4d63-ad46-740717e8c281", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57513", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgvyoe76oc2h", "content": "", "creation_timestamp": "2025-01-29T22:16:19.618178Z"}, {"uuid": "b3ce2c15-c496-4376-97e5-d5b6be94ba01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57595", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgqm6bz6a52g", "content": "", "creation_timestamp": "2025-01-27T18:49:17.177253Z"}, {"uuid": "d6724a67-9d38-4cab-bcea-df4cb918f3e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57534", "type": "seen", "source": "https://gist.github.com/binophism/8bb2135e18c363d1a5da873212d33b86", "content": "", "creation_timestamp": "2025-01-22T20:49:59.000000Z"}, {"uuid": "0c481251-3b5e-4412-9924-7f8cdf3ca191", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57665", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113914006663904743", "content": "", "creation_timestamp": "2025-01-29T22:29:59.382213Z"}, {"uuid": "12ce2b1c-fa5b-43f3-94e1-6df6df43f06c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57175", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhc5lfrwag2c", "content": "", "creation_timestamp": "2025-02-03T18:16:06.028730Z"}, {"uuid": "480f7f1f-cbaa-475a-9dcd-75fdcd156853", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57362", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhc5lisump2j", "content": "", "creation_timestamp": "2025-02-03T18:16:09.200453Z"}, {"uuid": "854da03e-94f8-43c7-9e2b-561c61482314", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57967", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhc5lkzlhw2c", "content": "", "creation_timestamp": "2025-02-03T18:16:11.552728Z"}, {"uuid": "bd36da71-9f20-4a11-847a-16cd4271e27e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57272", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgqmj562ml2g", "content": "", "creation_timestamp": "2025-01-27T18:55:20.937759Z"}, {"uuid": "b85c49c2-2f54-454b-b603-4d160409435c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57968", "type": "seen", "source": "https://bsky.app/profile/seifreed.bsky.social/post/3lhhhm4fdyy2y", "content": "", "creation_timestamp": "2025-02-05T20:58:46.814138Z"}, {"uuid": "3b8691ad-86d8-4d59-801a-2d325816409a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57514", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-57514.yaml", "content": "", "creation_timestamp": "2025-02-01T22:54:11.000000Z"}, {"uuid": "311872e9-a10d-4708-916d-ecd9fc2c2108", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57276", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgqmj5rwqv2y", "content": "", "creation_timestamp": "2025-01-27T18:55:23.994512Z"}, {"uuid": "efab1976-fb83-4674-a1df-2ce0a5a9076d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57004", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113941444193551327", "content": "", "creation_timestamp": "2025-02-03T18:47:42.868706Z"}, {"uuid": "8fb099b7-77bb-4960-998f-3bc1897f4b78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57432", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113941447094987736", "content": "", "creation_timestamp": "2025-02-03T18:48:42.066867Z"}, {"uuid": "754b9489-59e5-4689-a4f2-e87038e202ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57665", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgw3ypsaat2f", "content": "", "creation_timestamp": "2025-01-29T23:15:48.457320Z"}, {"uuid": "2d0f0ffb-4da0-44c5-9bc3-39de358d439e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57523", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113958464774525519", "content": "", "creation_timestamp": "2025-02-06T18:56:16.314718Z"}, {"uuid": "d4c5498d-18f7-4329-beb8-354bfcd5d5ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57514", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lhhhs3g52v27", "content": "", "creation_timestamp": "2025-02-05T21:02:10.546256Z"}, {"uuid": "e6b5f306-5455-4811-bd74-480428b7ef97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57668", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113958487949902692", "content": "", "creation_timestamp": "2025-02-06T19:02:09.932847Z"}, {"uuid": "82daac55-e6b4-4b0f-bbc9-e93f35e4ef46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57719", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgeph2zrpp2c", "content": "", "creation_timestamp": "2025-01-23T01:15:55.736785Z"}, {"uuid": "f61bd10a-1911-472a-b8d6-51d26bf9ca24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57514", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-57514.yaml", "content": "", "creation_timestamp": "2025-02-01T22:54:11.000000Z"}, {"uuid": "ba70db13-cb12-4061-9530-02c48136b3e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57968", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lhhhxtgbhw22", "content": "", "creation_timestamp": "2025-02-05T21:05:19.471898Z"}, {"uuid": "10e92ced-9dc9-4bcb-8871-d90839275f26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57720", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgeph5hgzt2b", "content": "", "creation_timestamp": "2025-01-23T01:15:58.330237Z"}, {"uuid": "0e552eb0-2609-4244-b4ff-b671e4da3d2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57556", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgh3g2r7jr2u", "content": "", "creation_timestamp": "2025-01-23T23:55:28.810218Z"}, {"uuid": "6f296ff5-3636-4a58-99f2-ba9e0a5a50ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57721", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgeph7xlud2t", "content": "", "creation_timestamp": "2025-01-23T01:16:00.962743Z"}, {"uuid": "fa5c819e-9325-4d85-aa44-4618a368196c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57326", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgh3g2ui4n2i", "content": "", "creation_timestamp": "2025-01-23T23:55:29.395525Z"}, {"uuid": "d755eede-183c-42a6-a0aa-37b82ab63b49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57722", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgephcb6x32j", "content": "", "creation_timestamp": "2025-01-23T01:16:03.449741Z"}, {"uuid": "f9107582-5315-4ab8-a729-e5d586d446a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57329", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgh3g2xrbh2g", "content": "", "creation_timestamp": "2025-01-23T23:55:30.010054Z"}, {"uuid": "9512bcec-2e04-413d-a361-91ab270345d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57079", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113953353375204676", "content": "", "creation_timestamp": "2025-02-05T21:16:22.883968Z"}, {"uuid": "4f13b278-2fb5-4dd4-9c11-e5bf35d848cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57081", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113953353389223081", "content": "", "creation_timestamp": "2025-02-05T21:16:23.000954Z"}, {"uuid": "8622bc3f-1b34-4ca3-9443-e95a2648218d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57723", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgephegbaj2h", "content": "", "creation_timestamp": "2025-01-23T01:16:05.936473Z"}, {"uuid": "f55c8942-9a7a-420a-9be2-c5b7ebc9d6d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57724", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgephgzjwn2j", "content": "", "creation_timestamp": "2025-01-23T01:16:08.471792Z"}, {"uuid": "1739e0df-c1c9-4ee8-89f8-d3c57cf2d8a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57082", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113953353403713809", "content": "", "creation_timestamp": "2025-02-05T21:16:23.237128Z"}, {"uuid": "999342f8-3aa7-4922-8ce5-3f3f0f85e5ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57085", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113953412401038570", "content": "", "creation_timestamp": "2025-02-05T21:31:23.210926Z"}, {"uuid": "9a306046-c3fb-44e1-a38e-2958780b580d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57720", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgerejhauo2h", "content": "", "creation_timestamp": "2025-01-23T01:50:18.157647Z"}, {"uuid": "8f2608ad-99f7-401b-bce4-b71be445b73c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57724", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgerejnsq22k", "content": "", "creation_timestamp": "2025-01-23T01:50:19.234255Z"}, {"uuid": "9780f51d-3928-4e08-a515-d484f9322b38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57721", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgerejqwgw2h", "content": "", "creation_timestamp": "2025-01-23T01:50:19.755986Z"}, {"uuid": "fe5f4aeb-24a1-41e1-a2b2-6850f68ff22d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57722", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgerejxj3k2k", "content": "", "creation_timestamp": "2025-01-23T01:50:20.822058Z"}, {"uuid": "d5b30173-51c1-4b2b-8105-e93313f8f11c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57065", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113953417645635776", "content": "", "creation_timestamp": "2025-02-05T21:32:43.299625Z"}, {"uuid": "4989f21c-db47-44af-a76d-b3ea04677a39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57719", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgerejkhy72i", "content": "", "creation_timestamp": "2025-01-23T01:50:18.677274Z"}, {"uuid": "54d6b14b-66e8-4c6e-b60c-961d267776ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57099", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhetrfhlmu24", "content": "", "creation_timestamp": "2025-02-04T19:58:29.434986Z"}, {"uuid": "ea35a7fb-87c4-40f5-8de0-87b47bc88ee6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57066", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113953417660295408", "content": "", "creation_timestamp": "2025-02-05T21:32:43.509889Z"}, {"uuid": "b404540c-90a9-460a-b956-29049a63bc22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57723", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgerejucqc2k", "content": "", "creation_timestamp": "2025-01-23T01:50:20.305919Z"}, {"uuid": "3a827d0c-460d-4ba6-96cc-4d5aaeb764d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57386", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgh3g3vnnf2i", "content": "", "creation_timestamp": "2025-01-23T23:55:35.428630Z"}, {"uuid": "b7bcfd19-87f9-49ba-bcd9-dee58d1df6e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-57237", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113941520017397058", "content": "", "creation_timestamp": "2025-02-03T19:06:59.924354Z"}, {"uuid": "808252af-71d9-4101-aea6-0c1557d2b4af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57098", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhetrfl5yb2f", "content": "", "creation_timestamp": "2025-02-04T19:58:30.026427Z"}, {"uuid": "0bf87d1f-517f-4d92-a049-4cc106e0abd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57072", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113953417674192292", "content": "", "creation_timestamp": "2025-02-05T21:32:43.803279Z"}, {"uuid": "0bcf06e5-d442-4796-b547-39a0e6d929fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57328", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgh3g3yv5v2i", "content": "", "creation_timestamp": "2025-01-23T23:55:36.091293Z"}, {"uuid": "f5f8b07d-9f27-438d-a1ec-49e82320b71d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-57238", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113941520032392306", "content": "", "creation_timestamp": "2025-02-03T19:07:00.125169Z"}, {"uuid": "5146fc3e-4a43-4ca0-a511-ba106a233652", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57450", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhetrfofk42z", "content": "", "creation_timestamp": "2025-02-04T19:58:30.723083Z"}, {"uuid": "f4c2b084-7f5d-46f5-bf85-a628fe2369f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57078", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113953417707901210", "content": "", "creation_timestamp": "2025-02-05T21:32:44.166320Z"}, {"uuid": "83029531-3ceb-4df7-b0d3-c31e6a0bab84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57599", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113958012509894658", "content": "", "creation_timestamp": "2025-02-06T17:01:15.485955Z"}, {"uuid": "f78194eb-e837-4ebe-b0e3-bbd4f722f659", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57084", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113953476726611424", "content": "", "creation_timestamp": "2025-02-05T21:47:44.800867Z"}, {"uuid": "562f1671-14a1-4d3c-9fca-4a32df7ae8c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57669", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113941555688737056", "content": "", "creation_timestamp": "2025-02-03T19:16:04.167525Z"}, {"uuid": "b63393cc-2958-47d9-83ad-5c2abd01b541", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57598", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113953490741272595", "content": "", "creation_timestamp": "2025-02-05T21:51:18.663221Z"}, {"uuid": "c4d41e6d-598e-44a8-aba9-c2c10c6e3ed5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57249", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113963289955460712", "content": "", "creation_timestamp": "2025-02-07T15:23:22.821885Z"}, {"uuid": "35e0bd5b-b670-46e7-aa39-212c8033aa0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57668", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113963625201165590", "content": "", "creation_timestamp": "2025-02-07T16:48:38.752457Z"}, {"uuid": "b690cc47-8a5e-49d2-a2a9-ae2001f99716", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57968", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113941555703677096", "content": "", "creation_timestamp": "2025-02-03T19:16:04.401757Z"}, {"uuid": "7032bc65-5c5b-4ec3-975c-714fbfc3d833", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57004", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhcawyo7rz2t", "content": "", "creation_timestamp": "2025-02-03T19:16:17.486920Z"}, {"uuid": "1678f8f7-aa38-4dab-9326-f6bebc1087a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57523", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhjscjaxk62s", "content": "", "creation_timestamp": "2025-02-06T19:15:34.422949Z"}, {"uuid": "b7465046-e6e1-422a-b247-38815615e300", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57237", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhcax2xa2y2b", "content": "", "creation_timestamp": "2025-02-03T19:16:19.447056Z"}, {"uuid": "4a32a07f-b4a4-4296-84ff-8ff7cd5b6466", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57238", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhcax5fmnm2c", "content": "", "creation_timestamp": "2025-02-03T19:16:21.763288Z"}, {"uuid": "a3328f20-bfbc-40b5-a876-58d1ce366b85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57063", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhhlwtvn2i2f", "content": "", "creation_timestamp": "2025-02-05T22:16:22.275373Z"}, {"uuid": "ebc1ebfe-2b4b-4315-aaad-fc9c63351208", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57074", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhhlxjv5qq2b", "content": "", "creation_timestamp": "2025-02-05T22:16:46.064742Z"}, {"uuid": "4778521f-21a8-4a71-8ce4-4b85abf2a796", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57668", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhjsclpxsf26", "content": "", "creation_timestamp": "2025-02-06T19:15:37.398684Z"}, {"uuid": "6357ae6d-978a-41ee-80e2-78d2609229c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57726", "type": "seen", "source": "https://infosec.exchange/users/jbhall56/statuses/113911798441950991", "content": "", "creation_timestamp": "2025-01-29T13:08:24.590590Z"}, {"uuid": "53dc707c-57d1-4447-b71d-53fb44ae3aca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "seen", "source": "https://infosec.exchange/users/jbhall56/statuses/113911798441950991", "content": "", "creation_timestamp": "2025-01-29T13:08:24.631890Z"}, {"uuid": "a15c503c-9c96-4956-b7e5-1ebe5670e837", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57728", "type": "seen", "source": "https://infosec.exchange/users/jbhall56/statuses/113911798441950991", "content": "", "creation_timestamp": "2025-01-29T13:08:24.670747Z"}, {"uuid": "faa5d153-651c-466b-948b-430f6151e570", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57726", "type": "seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3lgv22tkvoc2a", "content": "", "creation_timestamp": "2025-01-29T13:08:33.535111Z"}, {"uuid": "72ffe725-ef21-4c01-a336-6fc5cb73a0cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3lgv22tkvoc2a", "content": "", "creation_timestamp": "2025-01-29T13:08:33.585920Z"}, {"uuid": "9abf079a-7ee9-419d-b319-fb1e4067d435", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57728", "type": "seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3lgv22tkvoc2a", "content": "", "creation_timestamp": "2025-01-29T13:08:33.636507Z"}, {"uuid": "9bceacbe-21a6-4373-aa29-7eff6d007a30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57510", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgwjwqyjds2w", "content": "", "creation_timestamp": "2025-01-30T03:25:15.168546Z"}, {"uuid": "d013d137-144c-4bb8-9417-8e321b0c2b86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57392", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhk4gpdegp2d", "content": "", "creation_timestamp": "2025-02-06T22:16:52.480008Z"}, {"uuid": "06b1b091-61de-493a-a421-5aa7de7e8385", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57965", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgv2fkhur525", "content": "", "creation_timestamp": "2025-01-29T13:14:31.771503Z"}, {"uuid": "a8063829-dc4d-4cc1-9386-b57221250ee3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57513", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgwjwrhe6n2u", "content": "", "creation_timestamp": "2025-01-30T03:25:15.919292Z"}, {"uuid": "095cbfb7-9137-49ed-a699-01d2f1b4c589", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57064", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhhlwwely62j", "content": "", "creation_timestamp": "2025-02-05T22:16:25.171702Z"}, {"uuid": "eef26308-cb83-48ec-a082-b0de5b8ba800", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57665", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgwjwrp7ic2r", "content": "", "creation_timestamp": "2025-01-30T03:25:16.922403Z"}, {"uuid": "1ed566bf-ec85-4632-86f3-dce4f9b3e3fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57966", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lharxvjgar2c", "content": "", "creation_timestamp": "2025-02-03T05:15:41.357656Z"}, {"uuid": "395b8ea5-509e-4a12-96fe-4381cc0f0921", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57065", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhhlwyledt2n", "content": "", "creation_timestamp": "2025-02-05T22:16:28.390185Z"}, {"uuid": "af741137-4ea5-4f28-8549-4dbf1892e28d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57067", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhhlx5ipit2n", "content": "", "creation_timestamp": "2025-02-05T22:16:35.262712Z"}, {"uuid": "8b2c07a5-51ce-4d83-9a93-552536f560c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57599", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhjlnhvwk224", "content": "", "creation_timestamp": "2025-02-06T17:16:25.981632Z"}, {"uuid": "2f70644d-fefa-4037-8293-3512321e21df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57609", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhk4gs7hi225", "content": "", "creation_timestamp": "2025-02-06T22:16:55.544608Z"}, {"uuid": "c0f4ecc3-bf3f-4547-8223-950f55d14d37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57066", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhhlx34hri2f", "content": "", "creation_timestamp": "2025-02-05T22:16:31.555575Z"}, {"uuid": "2f786dab-cfee-4649-8042-bf8d22ff2656", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57395", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgwjwrvsts2w", "content": "", "creation_timestamp": "2025-01-30T03:25:17.997715Z"}, {"uuid": "ebc46e20-4675-4513-9d13-b5f8029dc0ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57068", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhhlxaglal2w", "content": "", "creation_timestamp": "2025-02-05T22:16:38.042394Z"}, {"uuid": "97578371-bf9b-4582-a8c4-2f65186ab096", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57079", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhhlxwf2mq2b", "content": "", "creation_timestamp": "2025-02-05T22:16:57.171311Z"}, {"uuid": "bdea5c75-886c-4c3c-bf76-8f33de7b24b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57069", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhhlxcibe72i", "content": "", "creation_timestamp": "2025-02-05T22:16:39.721270Z"}, {"uuid": "f7385a67-8a17-4dea-a148-f82dd3ecb9a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57078", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhhlxu5own2t", "content": "", "creation_timestamp": "2025-02-05T22:16:54.837592Z"}, {"uuid": "0d301ab5-7b83-4c4d-9f83-392838e783f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57509", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgwjws5lzk2e", "content": "", "creation_timestamp": "2025-01-30T03:25:19.062161Z"}, {"uuid": "6ebc260d-8360-4fa6-87e0-2ea5989f8011", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57071", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhhlxexita2f", "content": "", "creation_timestamp": "2025-02-05T22:16:41.837832Z"}, {"uuid": "3668dbe6-c216-437a-990a-b5f0e05f20f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57072", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhhlxhnmxl2n", "content": "", "creation_timestamp": "2025-02-05T22:16:44.014998Z"}, {"uuid": "7400dc25-2ab2-4cd3-a5fa-a0591365b67d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57097", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113941758520768830", "content": "", "creation_timestamp": "2025-02-03T20:07:39.184759Z"}, {"uuid": "fb8dba5c-ec78-46ab-9e6a-ef0f2935f4cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57075", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhhlxm7vmt2n", "content": "", "creation_timestamp": "2025-02-05T22:16:48.071296Z"}, {"uuid": "c43ad156-efdd-48bf-85d9-54587449b2f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57436", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113912080898338103", "content": "", "creation_timestamp": "2025-01-29T14:20:14.562660Z"}, {"uuid": "45718e6a-4aa6-4f26-9db4-ea0c7b0bba49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57437", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113912080915386342", "content": "", "creation_timestamp": "2025-01-29T14:20:14.766954Z"}, {"uuid": "449ade57-6107-4bd3-a0e4-4ba90030712d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57450", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113941758534982692", "content": "", "creation_timestamp": "2025-02-03T20:07:39.386721Z"}, {"uuid": "dee2646a-9e0b-47ca-8197-8efbd4a99f3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57076", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhhlxp6p4u2e", "content": "", "creation_timestamp": "2025-02-05T22:16:50.545227Z"}, {"uuid": "9289f79e-bfde-45d8-ada4-d622d07300e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57084", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhhlyaqpnz2c", "content": "", "creation_timestamp": "2025-02-05T22:17:08.046366Z"}, {"uuid": "d7d409b1-2752-43f2-943e-081a0fa3f29b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57520", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhhlyhocd42e", "content": "", "creation_timestamp": "2025-02-05T22:17:15.443423Z"}, {"uuid": "5f255cdc-e98e-401c-bfe7-40ea3ce0edc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57438", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113912080930011368", "content": "", "creation_timestamp": "2025-01-29T14:20:15.107856Z"}, {"uuid": "2017ced8-6651-4145-8741-371d2f72df3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57439", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113912080944758221", "content": "", "creation_timestamp": "2025-01-29T14:20:15.450686Z"}, {"uuid": "87ae422d-dbf8-45f6-a8f4-813e1472e627", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57452", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113941758549036769", "content": "", "creation_timestamp": "2025-02-03T20:07:39.598163Z"}, {"uuid": "1966a952-85ae-4f4b-8271-77766f83e170", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57077", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhhlxrouxi2b", "content": "", "creation_timestamp": "2025-02-05T22:16:52.652162Z"}, {"uuid": "58cc2097-0a98-4a6b-9aae-60e5a836a71a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57086", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhhlyfcklh2i", "content": "", "creation_timestamp": "2025-02-05T22:17:13.037312Z"}, {"uuid": "9e4df2f0-d2ea-42a3-a3f0-cd796bdab3af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57726", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lgwo24rxnk2n", "content": "", "creation_timestamp": "2025-01-30T04:38:43.762182Z"}, {"uuid": "8eee0002-a618-4ef6-b1ab-85ea4389b74b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57080", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhhlxykzzj2t", "content": "", "creation_timestamp": "2025-02-05T22:16:59.654351Z"}, {"uuid": "ef46b078-897d-4f20-918d-1a5cc6e3b02b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57081", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhhly3s5oq2b", "content": "", "creation_timestamp": "2025-02-05T22:17:02.863659Z"}, {"uuid": "c7cde719-ccbe-48ea-b575-46b2219d6c85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57082", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhhly67a672i", "content": "", "creation_timestamp": "2025-02-05T22:17:05.416307Z"}, {"uuid": "e5366450-23c1-406b-b29b-f012631969b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57085", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhhlycsrxt2c", "content": "", "creation_timestamp": "2025-02-05T22:17:10.204769Z"}, {"uuid": "acf30af3-f658-4b59-820e-cfc4808a2bde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57514", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-57514.yaml", "content": "", "creation_timestamp": "2025-02-01T22:54:11.000000Z"}, {"uuid": "cfd98808-9052-445d-9a78-44fe46229307", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57598", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhhlyk6h4h27", "content": "", "creation_timestamp": "2025-02-05T22:17:18.043917Z"}, {"uuid": "b6460ad1-ad57-46e0-b279-c7c513e5df58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57097", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhceck54hs2j", "content": "", "creation_timestamp": "2025-02-03T20:16:24.811130Z"}, {"uuid": "4149623d-d788-49e8-a20b-9d479e4bfba3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57669", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhced2cuzy2b", "content": "", "creation_timestamp": "2025-02-03T20:16:42.659898Z"}, {"uuid": "940d01cf-6f49-4440-a838-ec7dfefa033a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57699", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhhlymxzbi2f", "content": "", "creation_timestamp": "2025-02-05T22:17:20.834339Z"}, {"uuid": "e7ca1231-cfec-4a24-ae4f-9f29bd8e36f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57098", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhcecmgr7j2t", "content": "", "creation_timestamp": "2025-02-03T20:16:27.428471Z"}, {"uuid": "6a8459b7-31f6-4424-a168-cb6d7e6ce1ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57099", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhcecp7baj2t", "content": "", "creation_timestamp": "2025-02-03T20:16:30.323402Z"}, {"uuid": "6baa1d52-6ce2-4942-b5a7-536d90267f7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57450", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhcecrtucp2f", "content": "", "creation_timestamp": "2025-02-03T20:16:32.849090Z"}, {"uuid": "f313d4f7-73e8-49d7-a0c2-6e53776da8e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57452", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhcecu4x6h2f", "content": "", "creation_timestamp": "2025-02-03T20:16:35.254937Z"}, {"uuid": "6eaa6beb-2c46-4662-97b6-31966ae178f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57522", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lhexcuykgn2y", "content": "", "creation_timestamp": "2025-02-04T21:01:57.314544Z"}, {"uuid": "427d340e-c930-494a-ab56-a1f0c7400f05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57498", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhcecwsc7b2e", "content": "", "creation_timestamp": "2025-02-03T20:16:38.496923Z"}, {"uuid": "d74a8da8-6edd-4996-a041-6a098ad5bc12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57968", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhced4xduj2e", "content": "", "creation_timestamp": "2025-02-03T20:16:45.234718Z"}, {"uuid": "0a273cec-0b4d-453b-a1ec-b0f33adb9f06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57436", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgvb65a5sx27", "content": "", "creation_timestamp": "2025-01-29T15:15:39.475236Z"}, {"uuid": "c74f30cc-a3ac-426c-a58c-d2381045eb52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57498", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113941817554078327", "content": "", "creation_timestamp": "2025-02-03T20:23:10.930426Z"}, {"uuid": "a7518e81-56e2-4077-b775-8d46e2b8cb79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57437", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgvb67j2hl2p", "content": "", "creation_timestamp": "2025-01-29T15:15:41.884478Z"}, {"uuid": "61287ed8-2e48-45de-8e07-416942182257", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57438", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgvb6bxlvy2e", "content": "", "creation_timestamp": "2025-01-29T15:15:44.367704Z"}, {"uuid": "cef8145f-e59e-4944-aed0-7c23a0e51dc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57546", "type": "seen", "source": "https://gist.github.com/h4ckr4v3n/afbb87b5a05f283dbee705709c2769eb", "content": "", "creation_timestamp": "2025-01-24T06:39:44.000000Z"}, {"uuid": "e0a3e713-f345-4ca0-86d4-d187ec186529", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57547", "type": "seen", "source": "https://gist.github.com/h4ckr4v3n/afbb87b5a05f283dbee705709c2769eb", "content": "", "creation_timestamp": "2025-01-24T06:39:44.000000Z"}, {"uuid": "028ed614-da29-48d5-b8d6-92a845922dca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57439", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgvb6e7dzp2i", "content": "", "creation_timestamp": "2025-01-29T15:15:46.643656Z"}, {"uuid": "794a171a-9fd1-4a30-bd72-40c2d5ebf784", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57549", "type": "seen", "source": "https://gist.github.com/h4ckr4v3n/afbb87b5a05f283dbee705709c2769eb", "content": "", "creation_timestamp": "2025-01-24T06:39:44.000000Z"}, {"uuid": "4bab6155-7278-4bcb-b622-424aca732a39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57548", "type": "seen", "source": "https://gist.github.com/h4ckr4v3n/afbb87b5a05f283dbee705709c2769eb", "content": "", "creation_timestamp": "2025-01-24T06:39:44.000000Z"}, {"uuid": "12419acd-bed9-430f-b8f9-95c1219eebb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57968", "type": "seen", "source": "https://bsky.app/profile/nicolefishbein.bsky.social/post/3lhcfixgiu22q", "content": "", "creation_timestamp": "2025-02-03T20:37:54.522246Z"}, {"uuid": "ef39115b-f9f2-46b0-960a-fc5a61091e2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57427", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhjln6jahs2t", "content": "", "creation_timestamp": "2025-02-06T17:16:16.026667Z"}, {"uuid": "97643ae0-c5dd-4ddd-941b-6dc91e574539", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57428", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhjlnaxw2c2d", "content": "", "creation_timestamp": "2025-02-06T17:16:18.745866Z"}, {"uuid": "7970579b-1601-4a3c-aadb-09a60aa7c6b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57429", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhjlnd663s22", "content": "", "creation_timestamp": "2025-02-06T17:16:21.018402Z"}, {"uuid": "4e7c3482-a18f-499e-92e3-dab9301bdae3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57430", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhjlnfgmhc24", "content": "", "creation_timestamp": "2025-02-06T17:16:23.421329Z"}, {"uuid": "efa7b814-c02f-4415-a61f-60d1571a1ae0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57428", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lhlsgh7es72f", "content": "", "creation_timestamp": "2025-02-07T14:23:06.920520Z"}, {"uuid": "38859884-430f-4d8e-9c07-3d88978fef96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57968", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113941919628604703", "content": "", "creation_timestamp": "2025-02-03T20:48:37.693936Z"}, {"uuid": "4da055cc-10fb-4e51-bb6e-b6404f6869a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3lgqrmbn3i22a", "content": "", "creation_timestamp": "2025-01-27T20:26:39.313758Z"}, {"uuid": "42d82f12-c9c8-4c84-9ba4-e79c21533fc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57672", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113958586418028421", "content": "", "creation_timestamp": "2025-02-06T19:27:12.652879Z"}, {"uuid": "b587b075-a71e-49c3-ad9b-c8c655aa26f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3lgqrmdfj5c2a", "content": "", "creation_timestamp": "2025-01-27T20:26:40.190241Z"}, {"uuid": "b5234808-edd7-4878-b4b6-7d54a8f44d37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "seen", "source": "https://infosec.exchange/users/shadowserver/statuses/113902205079772565", "content": "", "creation_timestamp": "2025-01-27T20:28:42.855856Z"}, {"uuid": "5086c738-6a17-4ad9-a386-169f4f81a0be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57947", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113878026126540149", "content": "", "creation_timestamp": "2025-01-23T13:59:41.220697Z"}, {"uuid": "b048debd-9173-42c1-a3b2-209c06ddaa70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57673", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113958586432409277", "content": "", "creation_timestamp": "2025-02-06T19:27:12.724861Z"}, {"uuid": "5ca7ea92-f756-4e86-898f-77c9050589c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57428", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113959377087590387", "content": "", "creation_timestamp": "2025-02-06T22:48:17.502559Z"}, {"uuid": "b1d33ffd-881d-49c5-b733-342f31cb79ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57514", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113908207774846911", "content": "", "creation_timestamp": "2025-01-28T21:55:15.728080Z"}, {"uuid": "9b441670-7210-4528-a8ef-449bd3fce7c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57947", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgg322kbyy2x", "content": "", "creation_timestamp": "2025-01-23T14:16:03.668191Z"}, {"uuid": "57a113bd-43e6-494d-94f0-c26d2c8e24a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57451", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhchmt5y542t", "content": "", "creation_timestamp": "2025-02-03T21:15:51.035366Z"}, {"uuid": "59f811aa-9763-4f54-899d-02ec60636175", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57430", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113959377139558293", "content": "", "creation_timestamp": "2025-02-06T22:48:18.394320Z"}, {"uuid": "51388a7c-4383-49a3-a84b-a001db359f4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57426", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhk6afmhkb26", "content": "", "creation_timestamp": "2025-02-06T22:49:09.933946Z"}, {"uuid": "1f416c57-3f56-4399-90c6-f05c09c45cc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57376", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgti6cf64u2e", "content": "", "creation_timestamp": "2025-01-28T22:15:41.849050Z"}, {"uuid": "b6dadacb-998f-447a-b44d-9cc755dbe63d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57966", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhb3efscfj2u", "content": "", "creation_timestamp": "2025-02-03T08:03:50.587573Z"}, {"uuid": "b6a0cd35-4503-4c91-84da-994c5e246bc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57514", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgti6ewau42e", "content": "", "creation_timestamp": "2025-01-28T22:15:44.189927Z"}, {"uuid": "7dbd31ac-8749-4b25-a041-fab2ceafd646", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57426", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113958635845317722", "content": "", "creation_timestamp": "2025-02-06T19:39:46.645829Z"}, {"uuid": "62202f8f-3571-42f8-a648-ce93ad4be154", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57184", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113883692622179301", "content": "", "creation_timestamp": "2025-01-24T14:00:43.802333Z"}, {"uuid": "2262e918-2ef5-4e74-8c73-3ac0dff7250e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57947", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgg4nouiwt2u", "content": "", "creation_timestamp": "2025-01-23T14:44:56.451093Z"}, {"uuid": "69777d7e-3322-462f-9fff-282a8a67136a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57519", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113908366267475748", "content": "", "creation_timestamp": "2025-01-28T22:35:34.837379Z"}, {"uuid": "ad66ece6-f3c1-4158-9180-8c4c765201b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57514", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-57514.yaml", "content": "", "creation_timestamp": "2025-02-01T22:54:11.000000Z"}, {"uuid": "3c0b9059-b5c5-47a2-a0be-350ae4ea7c91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57954", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhj6b3ighg2w", "content": "", "creation_timestamp": "2025-02-06T13:16:51.543867Z"}, {"uuid": "d2549d10-0051-4bce-910a-6257702a3725", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57955", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhj6b5xziy2n", "content": "", "creation_timestamp": "2025-02-06T13:16:54.267975Z"}, {"uuid": "5b295282-0e7d-4775-a497-9e1b9551fbcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57960", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhj6bjliiz2c", "content": "", "creation_timestamp": "2025-02-06T13:17:06.482264Z"}, {"uuid": "4f344d65-3926-4452-8127-9756ae354741", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57052", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113908418511859308", "content": "", "creation_timestamp": "2025-01-28T22:48:51.662178Z"}, {"uuid": "be26f3de-87f5-4629-a0f0-7b7ae9336b37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57373", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113908418569635215", "content": "", "creation_timestamp": "2025-01-28T22:48:52.668469Z"}, {"uuid": "36b38192-3cbc-44d5-aed0-554ad4391c19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57956", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhj6ba7xba2n", "content": "", "creation_timestamp": "2025-02-06T13:16:56.873889Z"}, {"uuid": "5380f4f3-4ec4-4630-abce-10fa88c5fe87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57961", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhj6bm6g2r2r", "content": "", "creation_timestamp": "2025-02-06T13:17:09.129707Z"}, {"uuid": "7597288e-7370-4499-a4e4-2894560113b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57548", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113908418617021210", "content": "", "creation_timestamp": "2025-01-28T22:48:53.585230Z"}, {"uuid": "1e052e6a-d55d-49f8-9f60-550688fdb397", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57957", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhj6bcktzr2e", "content": "", "creation_timestamp": "2025-02-06T13:16:59.228543Z"}, {"uuid": "70ffd403-4fa2-470a-b928-3ae7e4cc94d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57962", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhj6boodxo2w", "content": "", "creation_timestamp": "2025-02-06T13:17:11.698499Z"}, {"uuid": "a4ebbfb7-9b78-4361-b66d-c482383674e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57958", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhj6beztgr2j", "content": "", "creation_timestamp": "2025-02-06T13:17:01.671629Z"}, {"uuid": "888b6828-34ef-4ec0-8d39-96a38972d4a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57948", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgzy2txgxh2w", "content": "", "creation_timestamp": "2025-01-31T12:16:04.218378Z"}, {"uuid": "fef19512-fe28-4fb6-875a-fd0d3af989c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57959", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhj6bh4blm2f", "content": "", "creation_timestamp": "2025-02-06T13:17:03.812983Z"}, {"uuid": "0a4edae1-35ae-4999-8523-c3b66e5652b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57726", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113892647563621121", "content": "", "creation_timestamp": "2025-01-26T03:58:05.878993Z"}, {"uuid": "169a3bda-ba00-421b-9bc1-e72dc5ce1e66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113892647563621121", "content": "", "creation_timestamp": "2025-01-26T03:58:05.936473Z"}, {"uuid": "6ad1aa81-7ce9-4375-a8b8-c2dd3410043b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57728", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113892647563621121", "content": "", "creation_timestamp": "2025-01-26T03:58:05.986868Z"}, {"uuid": "a0195730-ae30-4bbc-b1c1-ae3f5cbdb433", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57522", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113940128372651821", "content": "", "creation_timestamp": "2025-02-03T13:13:05.143784Z"}, {"uuid": "4ab3510e-f88e-45e6-91f9-248b1af72e1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57522", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhbmsbmtat2i", "content": "", "creation_timestamp": "2025-02-03T13:15:43.181675Z"}, {"uuid": "bdc758b8-8f37-437a-a251-1447374390d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57376", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgtl72cagn25", "content": "", "creation_timestamp": "2025-01-28T23:09:49.841435Z"}, {"uuid": "d8d290a5-a41b-4beb-bf38-4204e039539d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57968", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3lhi5s7xhpk2e", "content": "", "creation_timestamp": "2025-02-06T03:35:56.743170Z"}, {"uuid": "90fd4b56-ce4e-4f7e-83bf-5d24e6364598", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57522", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhbpprcmnw2h", "content": "", "creation_timestamp": "2025-02-03T14:08:00.550538Z"}, {"uuid": "4e620eed-aace-41fd-a12c-b70e848c3b3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57426", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhjvp32jkz2x", "content": "", "creation_timestamp": "2025-02-06T20:16:17.030544Z"}, {"uuid": "11aacc78-2ab1-4e1d-9d47-be03eda30244", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57673", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhk6aevxvu2o", "content": "", "creation_timestamp": "2025-02-06T22:49:07.626557Z"}, {"uuid": "69c9b28e-ebbe-4b1a-b30e-6a142b846408", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57672", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhk6afeeoq2o", "content": "", "creation_timestamp": "2025-02-06T22:49:08.727750Z"}, {"uuid": "ead93332-3f0a-460e-8547-90fe65e9ad29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57609", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhk6afxb4k27", "content": "", "creation_timestamp": "2025-02-06T22:49:11.476879Z"}, {"uuid": "b3f56dd1-68b8-4246-a341-51d2ff6dadfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57451", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhckkskia52b", "content": "", "creation_timestamp": "2025-02-03T22:08:30.551135Z"}, {"uuid": "35fcf2a9-c187-4817-85f9-7269bb6f8e53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57726", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lhjoi6hi4g2v", "content": "", "creation_timestamp": "2025-02-06T18:07:09.896958Z"}, {"uuid": "351cdf81-f6e3-424f-adda-4bf537629d12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57430", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lhlsghkqdi2v", "content": "", "creation_timestamp": "2025-02-07T14:23:07.899469Z"}, {"uuid": "ffe43800-0790-41b8-8484-c3c43e4824e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57519", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgtlj6qmx52r", "content": "", "creation_timestamp": "2025-01-28T23:15:27.986366Z"}, {"uuid": "3e452c56-1899-43f2-9758-64732f15669c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57672", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhjvp5g5gg2v", "content": "", "creation_timestamp": "2025-02-06T20:16:19.551533Z"}, {"uuid": "d4c1f88d-ae39-4413-9337-886ce37b42cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57673", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhjvp7oaxq2t", "content": "", "creation_timestamp": "2025-02-06T20:16:21.914934Z"}, {"uuid": "3749c2b3-6b75-44f0-8b62-b413f067009d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57392", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhk6agjsav22", "content": "", "creation_timestamp": "2025-02-06T22:49:14.227121Z"}, {"uuid": "027dfdfd-d64b-4782-80ef-26c755ad7279", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57595", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113900850509943269", "content": "", "creation_timestamp": "2025-01-27T14:44:12.618986Z"}, {"uuid": "b0f157dc-a947-45cc-ba30-37b82ed857e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57434", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113942391559330202", "content": "", "creation_timestamp": "2025-02-03T22:48:38.828325Z"}, {"uuid": "0ce057c6-1ab7-46a4-bb7d-61803f08ad5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57095", "type": "seen", "source": "https://gist.github.com/wjlin0/ff3ee8afb8f8001faff89bbc03805605", "content": "", "creation_timestamp": "2025-01-24T16:37:59.000000Z"}, {"uuid": "e4cf26c5-fab8-4670-9d6a-480042798454", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57968", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3lhgzfzmfjc27", "content": "", "creation_timestamp": "2025-02-05T16:44:52.344080Z"}, {"uuid": "c0609065-f399-4e91-bc86-4b93bab2421b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57077", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhjou6ylep23", "content": "", "creation_timestamp": "2025-02-06T18:13:53.199753Z"}, {"uuid": "07ae3b21-3182-432b-ad65-99b179d66d67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57373", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113902657782965535", "content": "", "creation_timestamp": "2025-01-27T22:23:49.298685Z"}, {"uuid": "15b545dd-f2ac-463a-99f1-89dd81485abb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57547", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113902746029865281", "content": "", "creation_timestamp": "2025-01-27T22:46:15.768812Z"}, {"uuid": "cbef8a1a-5204-4045-91b2-8328fab63dc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57590", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqaapwez52r", "content": "", "creation_timestamp": "2025-01-27T15:15:54.212134Z"}, {"uuid": "973f0157-0363-4b7b-af98-8da76385716e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57548", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113902746044763098", "content": "", "creation_timestamp": "2025-01-27T22:46:16.270443Z"}, {"uuid": "4f99fbdc-2f10-4932-8883-b8f4a4bfc7df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57595", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqaasgswj2i", "content": "", "creation_timestamp": "2025-01-27T15:15:56.157306Z"}, {"uuid": "db27b1af-dd2a-4bb9-899d-aea6d0379e87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57549", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113902746058561155", "content": "", "creation_timestamp": "2025-01-27T22:46:16.386803Z"}, {"uuid": "7bb652bf-9bfa-43dc-911d-3a4b245dcff4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "seen", "source": "https://threatintel.cc/2025/01/29/simplehelp-remote-access-software-exploited.html", "content": "", "creation_timestamp": "2025-01-29T11:16:49.000000Z"}, {"uuid": "0f38d6cb-e3f0-4f34-b061-1bbe1ceb1f71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57728", "type": "seen", "source": "https://threatintel.cc/2025/01/29/simplehelp-remote-access-software-exploited.html", "content": "", "creation_timestamp": "2025-01-29T11:16:49.000000Z"}, {"uuid": "c4ea6a58-05d0-4be0-b9a2-12d3d1f6e261", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57726", "type": "seen", "source": "https://threatintel.cc/2025/01/29/simplehelp-remote-access-software-exploited.html", "content": "", "creation_timestamp": "2025-01-29T11:16:49.000000Z"}, {"uuid": "8f2d7ea7-c826-4105-bc90-ad29b7af4c92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57520", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhjvtw5edu2f", "content": "", "creation_timestamp": "2025-02-06T20:18:59.861378Z"}, {"uuid": "af70540d-f617-4f49-a41c-c4dddc41d078", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57052", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113902794945002521", "content": "", "creation_timestamp": "2025-01-27T22:58:42.139446Z"}, {"uuid": "63c61f19-d292-4bec-abe8-c1381c61eb61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57519", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgtyvj726c2r", "content": "", "creation_timestamp": "2025-01-29T03:15:01.491451Z"}, {"uuid": "cd04dfc9-0a8e-400d-aadc-637f868be273", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57610", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhjoyxlyrg2x", "content": "", "creation_timestamp": "2025-02-06T18:16:32.749048Z"}, {"uuid": "e6c92e20-a932-4e61-81f5-329a90b62c67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lh5my6xjpk2y", "content": "", "creation_timestamp": "2025-02-01T23:08:25.934228Z"}, {"uuid": "2200cf51-520d-46a5-bab8-ce0d041a430a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57726", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113958325031939143", "content": "", "creation_timestamp": "2025-02-06T18:20:44.347391Z"}, {"uuid": "10b6be0c-0e11-4a7e-b1ba-2bf3724bb66a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57728", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113958325031939143", "content": "", "creation_timestamp": "2025-02-06T18:20:44.398272Z"}, {"uuid": "f1f4d15f-65da-43c6-bc9e-1bd1c55c7965", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57077", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lhjpv7z3b724", "content": "", "creation_timestamp": "2025-02-06T18:32:21.820748Z"}, {"uuid": "28c45530-bd18-48b2-8782-a948523d93ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57427", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113957861619119242", "content": "", "creation_timestamp": "2025-02-06T16:22:52.976403Z"}, {"uuid": "49b7381f-44dc-4877-94cd-56f63056caa1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57428", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113957861655010492", "content": "", "creation_timestamp": "2025-02-06T16:22:53.369973Z"}, {"uuid": "ff0f04c8-155c-46df-84bb-b3b2ea89736a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57514", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-57514.yaml", "content": "", "creation_timestamp": "2025-02-01T22:54:11.000000Z"}, {"uuid": "158de0c1-8aaa-4cac-83f8-596f5d758856", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57429", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113957905337272847", "content": "", "creation_timestamp": "2025-02-06T16:33:59.879727Z"}, {"uuid": "06ba55a5-df52-4482-b60e-3ed08b59778b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57520", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lhjpvaftun2t", "content": "", "creation_timestamp": "2025-02-06T18:32:22.709962Z"}, {"uuid": "904b66bf-fe40-40fe-99c1-2de3044c20f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57968", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lhjybyzjrb2x", "content": "", "creation_timestamp": "2025-02-06T21:02:42.020454Z"}, {"uuid": "284f6048-a3a8-48f6-b08e-5784cd645a3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57510", "type": "seen", "source": "https://gist.github.com/G2FUZZ/91a1cc3b8f2b0720e984353d59023b24", "content": "", "creation_timestamp": "2025-01-29T03:14:02.000000Z"}, {"uuid": "7c0d895b-9501-4a32-bab5-2db92b695b5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57513", "type": "seen", "source": "https://gist.github.com/G2FUZZ/91a1cc3b8f2b0720e984353d59023b24", "content": "", "creation_timestamp": "2025-01-29T03:14:02.000000Z"}, {"uuid": "1050a174-d8c2-4fa3-876a-5fa17b08c339", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57509", "type": "seen", "source": "https://gist.github.com/G2FUZZ/91a1cc3b8f2b0720e984353d59023b24", "content": "", "creation_timestamp": "2025-01-29T03:14:02.000000Z"}, {"uuid": "c5fdf497-aff8-4256-8479-37433b8cb428", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57430", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113957905371081090", "content": "", "creation_timestamp": "2025-02-06T16:34:00.631822Z"}, {"uuid": "45f06168-aedb-419f-86a2-a7fcb92a3100", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57432", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lh2ispe4dc2h", "content": "", "creation_timestamp": "2025-01-31T17:15:44.240855Z"}, {"uuid": "53a53060-6746-4828-bd73-218d94dbaa24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57376", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113913135674656866", "content": "", "creation_timestamp": "2025-01-29T18:48:29.909219Z"}, {"uuid": "50bb416c-8375-4e1a-b8f0-f69cc857a546", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57959", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhjjt4zfaz2v", "content": "", "creation_timestamp": "2025-02-06T16:43:49.788308Z"}, {"uuid": "e889b561-f196-4e91-afe4-87a70a0783c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57962", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhjjt4lvcx2l", "content": "", "creation_timestamp": "2025-02-06T16:43:48.370462Z"}, {"uuid": "d05a8f57-6ee5-4024-96b0-19338fd438d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57052", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgr32ixnrh2f", "content": "", "creation_timestamp": "2025-01-27T23:15:35.890784Z"}, {"uuid": "929e36e7-82a2-4065-b04e-ea9f2a68d496", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57438", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgvojteexv2q", "content": "", "creation_timestamp": "2025-01-29T19:14:52.685063Z"}, {"uuid": "30519476-80d0-4723-9429-aa0ed3970223", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57961", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhjjt4vzpp24", "content": "", "creation_timestamp": "2025-02-06T16:43:49.169425Z"}, {"uuid": "b4cdc464-728c-4b0e-9d54-bafe04afe31e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57373", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgr32lifhl2c", "content": "", "creation_timestamp": "2025-01-27T23:15:38.636124Z"}, {"uuid": "92e290af-efb1-48ed-875d-e00fe5acd674", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57548", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgr32tyc2g2j", "content": "", "creation_timestamp": "2025-01-27T23:15:47.447258Z"}, {"uuid": "e4ae7b38-c3e9-4483-9aa3-5cbea67553d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57437", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgvojsx3fq2y", "content": "", "creation_timestamp": "2025-01-29T19:14:50.332667Z"}, {"uuid": "095a9646-602e-480d-aa7b-6062b35b18b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57546", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgr32oeemw2n", "content": "", "creation_timestamp": "2025-01-27T23:15:41.580328Z"}, {"uuid": "1c2227c5-a6d8-415a-bc79-32f1772a2f81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57520", "type": "seen", "source": "https://gist.github.com/hyp164D1/ae76ab25acfbe263b2ed7b24b6e5c621", "content": "", "creation_timestamp": "2025-02-04T05:25:45.000000Z"}, {"uuid": "0e2a7d0c-217f-474f-b584-05e1c26d2569", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57547", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgr32qyiic2b", "content": "", "creation_timestamp": "2025-01-27T23:15:44.328535Z"}, {"uuid": "a0621635-cb26-4e8d-a070-ef6e335a287c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57439", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgvojtaph72k", "content": "", "creation_timestamp": "2025-01-29T19:14:52.121240Z"}, {"uuid": "dce1b463-8803-4cd3-b991-9f07864b8ac4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57549", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgr32wepjo2e", "content": "", "creation_timestamp": "2025-01-27T23:15:50.081181Z"}, {"uuid": "144dab93-64e4-40a7-85ff-476c8fa5faa1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57436", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgvojto6e72w", "content": "", "creation_timestamp": "2025-01-29T19:14:54.543451Z"}, {"uuid": "2abee582-bdc1-42d4-bb17-b060018b4176", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57276", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113901292449278960", "content": "", "creation_timestamp": "2025-01-27T16:36:36.033209Z"}, {"uuid": "2485e827-ab6b-49e8-b82f-55398660c84c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57595", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lgsoal747o2m", "content": "", "creation_timestamp": "2025-01-28T14:31:42.403144Z"}, {"uuid": "0f4f32e1-afd7-4d3a-8201-2e36054cfa2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57956", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhjjt54psb2q", "content": "", "creation_timestamp": "2025-02-06T16:43:50.440188Z"}, {"uuid": "332c43ee-3234-4401-8086-8f3e3ce48583", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57968", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lhjqetiesk2n", "content": "", "creation_timestamp": "2025-02-06T18:41:05.894854Z"}, {"uuid": "7306c847-a112-4b30-a346-700e31ce2b19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57376", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113913464463076808", "content": "", "creation_timestamp": "2025-01-29T20:12:06.266932Z"}, {"uuid": "7b00dfc5-8170-4cb3-9501-908e3e677bf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57947", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113879439511131359", "content": "", "creation_timestamp": "2025-01-23T19:59:06.419402Z"}, {"uuid": "4cc9eab9-7756-460d-9d5e-8d1539a138b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57432", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lh2xd75jz52g", "content": "", "creation_timestamp": "2025-01-31T21:35:32.138940Z"}, {"uuid": "e40d09da-625e-4bf0-92a1-9eee90a2b4de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57965", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113910859195697321", "content": "", "creation_timestamp": "2025-01-29T09:09:32.860244Z"}, {"uuid": "2893d762-85df-4d71-8afd-cbe2867ee984", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57957", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhjjt5ffjq27", "content": "", "creation_timestamp": "2025-02-06T16:43:51.708597Z"}, {"uuid": "c8e37950-7f39-49b3-afa6-12584813676b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57965", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgun2bt7l22i", "content": "", "creation_timestamp": "2025-01-29T09:15:35.296577Z"}, {"uuid": "7569415e-7406-4de7-b0fe-ded2c98a6f15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57958", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhjjt5iuf72w", "content": "", "creation_timestamp": "2025-02-06T16:43:52.331524Z"}, {"uuid": "d4567f29-c89d-4a43-be50-f83497109447", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57599", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhjqsufw5e27", "content": "", "creation_timestamp": "2025-02-06T18:48:58.254264Z"}, {"uuid": "91ac1d9a-5762-4191-b8e9-26c992f655c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57434", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lh2zl7iyv52h", "content": "", "creation_timestamp": "2025-01-31T22:15:46.605053Z"}, {"uuid": "ee065a19-a99d-4417-ba19-7b72a68301f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57433", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lh2zl535rs2t", "content": "", "creation_timestamp": "2025-01-31T22:15:43.982568Z"}, {"uuid": "15ebe79d-4fef-4e05-8b7c-13168b606fce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57435", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lh2zlbrefk2c", "content": "", "creation_timestamp": "2025-01-31T22:15:48.920778Z"}, {"uuid": "2f654084-c723-4f6d-b07d-759c2d282971", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57955", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhjjt5m64j2g", "content": "", "creation_timestamp": "2025-02-06T16:43:52.945341Z"}, {"uuid": "0bf56df6-0d61-4527-9a70-bb44b0392972", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57520", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113958433128349129", "content": "", "creation_timestamp": "2025-02-06T18:48:14.967186Z"}, {"uuid": "41ecd4de-c11a-4b60-b459-07f3cc62adb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57587", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lh2zlejutx2i", "content": "", "creation_timestamp": "2025-01-31T22:15:51.601625Z"}, {"uuid": "feed66e0-6fc6-442c-b98a-faac9db01182", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57968", "type": "seen", "source": "https://bsky.app/profile/anontroyano.bsky.social/post/3lhil3xuhls2a", "content": "", "creation_timestamp": "2025-02-06T07:35:26.292351Z"}, {"uuid": "53b4e08e-dd96-47fd-934b-cbee3cb5d02f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57099", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113946638149281952", "content": "", "creation_timestamp": "2025-02-04T16:48:36.870686Z"}, {"uuid": "aeb12305-badc-4d90-9271-c6ba3ff70b7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57433", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lh3eqqyd3x25", "content": "", "creation_timestamp": "2025-02-01T01:35:43.699182Z"}, {"uuid": "979f7bfc-3411-4993-8561-c0c735ae1e11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57098", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113946638088629147", "content": "", "creation_timestamp": "2025-02-04T16:48:37.294602Z"}, {"uuid": "42def90f-d37b-4112-9287-a0d27244ff36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57450", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113946638208687806", "content": "", "creation_timestamp": "2025-02-04T16:48:38.767445Z"}, {"uuid": "58502d37-7e7f-458e-8822-c0ac118debbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57587", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lh3eqrsnss2q", "content": "", "creation_timestamp": "2025-02-01T01:35:47.121718Z"}, {"uuid": "6cb52444-0a81-489e-8dfd-c8e0bff7f222", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57272", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqgxripgq2p", "content": "", "creation_timestamp": "2025-01-27T17:16:09.345539Z"}, {"uuid": "ed959c3a-ff59-4ee5-a3a0-89a5a97a966f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57276", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqgxv6iqm2h", "content": "", "creation_timestamp": "2025-01-27T17:16:13.250746Z"}, {"uuid": "5a54949e-3d0f-4bfa-8447-b7b06b41f3e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57435", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lh3eqs57rw2i", "content": "", "creation_timestamp": "2025-02-01T01:35:48.736690Z"}, {"uuid": "c2bb9212-019c-4f4a-aae5-ccf8a36fa0eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57386", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113879810537150997", "content": "", "creation_timestamp": "2025-01-23T21:33:27.935096Z"}, {"uuid": "25ba509c-3c3b-409a-aaaf-96c096cc063f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57434", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lh3eqsabzx2g", "content": "", "creation_timestamp": "2025-02-01T01:35:49.253623Z"}, {"uuid": "8f4bc35c-6e03-43f7-8052-73274a67deb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57498", "type": "seen", "source": "https://gist.github.com/Catherines77/ac0b554f3d755879eb12bfd69ef585b1", "content": "", "creation_timestamp": "2025-02-02T10:14:37.000000Z"}, {"uuid": "210a94b0-29ea-4134-b701-fd8239278e40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57326", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113879837226898085", "content": "", "creation_timestamp": "2025-01-23T21:40:15.418878Z"}, {"uuid": "5f2f3869-4e96-41d3-b690-856c37a83de9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57328", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113879859188536569", "content": "", "creation_timestamp": "2025-01-23T21:45:50.299056Z"}, {"uuid": "e0193e47-a550-4294-9079-8885a3ab86fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57960", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhjjt5pdsl2u", "content": "", "creation_timestamp": "2025-02-06T16:43:53.529574Z"}, {"uuid": "5173d713-30c9-428a-895a-7ccc44a5a32d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57707", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113963421640543311", "content": "", "creation_timestamp": "2025-02-07T15:56:52.126564Z"}, {"uuid": "d96f0266-7a6c-41b6-8d8f-5243fd080eb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57329", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113879859204922404", "content": "", "creation_timestamp": "2025-01-23T21:45:50.605370Z"}, {"uuid": "eb554851-94ee-462f-8bba-12175e46edaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57395", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113913758218948748", "content": "", "creation_timestamp": "2025-01-29T21:26:48.463998Z"}, {"uuid": "4d882866-589d-4eef-a115-5d1532d6cadf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57968", "type": "seen", "source": "https://bsky.app/profile/anontroyano.bsky.social/post/3lhil3z7ofs2a", "content": "", "creation_timestamp": "2025-02-06T07:35:26.851417Z"}, {"uuid": "31cf62c7-7dc5-4068-97e9-0d5a51cce052", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57954", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhjjt5snuh2w", "content": "", "creation_timestamp": "2025-02-06T16:43:54.172390Z"}, {"uuid": "c2cb92c1-0d82-4c93-8557-bbf70e66519b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57509", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113913758233447474", "content": "", "creation_timestamp": "2025-01-29T21:26:48.676778Z"}, {"uuid": "de6d6c99-3cae-4a14-b204-575f5d3c9ec5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57098", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lhekj5czhi2t", "content": "", "creation_timestamp": "2025-02-04T17:12:49.513887Z"}, {"uuid": "283cd4ab-3f2a-4c4f-b3ad-4ce3c6f24b14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57429", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhjqsv3gpz23", "content": "", "creation_timestamp": "2025-02-06T18:49:01.838940Z"}, {"uuid": "59bf6aad-1687-468f-b625-ceafdc0ea32f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57556", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113879933962800378", "content": "", "creation_timestamp": "2025-01-23T22:04:51.523197Z"}, {"uuid": "1f10d299-dcd2-4e19-b2f5-ab43279d76ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57510", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113913758248642242", "content": "", "creation_timestamp": "2025-01-29T21:26:48.926472Z"}, {"uuid": "eb0e65cc-7b3c-45a2-bc90-1049c0ffafc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57099", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lhekj5mvui2t", "content": "", "creation_timestamp": "2025-02-04T17:12:50.341297Z"}, {"uuid": "973bbb7a-3c7e-4b1f-9bba-826f61abce97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57450", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lhekj62kfg2v", "content": "", "creation_timestamp": "2025-02-04T17:12:51.177607Z"}, {"uuid": "b4dfadfb-45fa-4044-8b68-c4abed5286b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57395", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113913776902363076", "content": "", "creation_timestamp": "2025-01-29T21:31:33.490352Z"}, {"uuid": "ccdd1fb6-3162-4767-9282-ae4e650b75bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57509", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113913776917211959", "content": "", "creation_timestamp": "2025-01-29T21:31:34.134572Z"}, {"uuid": "ad9c1c6f-6d62-4815-ad45-52f43276c274", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57968", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lhekj6egp22r", "content": "", "creation_timestamp": "2025-02-04T17:12:51.947805Z"}, {"uuid": "9b5b41d0-97de-4e36-bc06-2f81560df552", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57510", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113913776931602766", "content": "", "creation_timestamp": "2025-01-29T21:31:34.218927Z"}, {"uuid": "cd23df14-3a01-46af-96cf-70918957d1df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57513", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113913835957392816", "content": "", "creation_timestamp": "2025-01-29T21:46:34.570729Z"}, {"uuid": "3612f7de-de8b-4756-8f2f-d000e2cd609b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57077", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113957962515351887", "content": "", "creation_timestamp": "2025-02-06T16:48:33.399137Z"}, {"uuid": "a3c96352-20c8-498f-9204-1c78fe72463c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57328", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lggvuf7seh2x", "content": "", "creation_timestamp": "2025-01-23T22:16:04.628211Z"}, {"uuid": "96476800-4c98-486d-83b7-ba8ac32cbc17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57326", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lggvucytpj2f", "content": "", "creation_timestamp": "2025-01-23T22:16:02.423058Z"}, {"uuid": "197b9035-10a8-43a3-b880-939fd6973fe1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57329", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lggvuhgodp2p", "content": "", "creation_timestamp": "2025-01-23T22:16:06.864411Z"}, {"uuid": "14870601-0fb1-4ab6-a10a-bec7e909fffb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57606", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113964857128219062", "content": "", "creation_timestamp": "2025-02-07T22:01:55.893921Z"}, {"uuid": "20cdf901-857b-4326-ab04-1cc02089b05a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57357", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113964891362981241", "content": "", "creation_timestamp": "2025-02-07T22:10:38.325260Z"}, {"uuid": "77bec773-f907-49fe-8d06-a2d82b8325e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57278", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhmmtahhjy2u", "content": "", "creation_timestamp": "2025-02-07T22:15:32.467339Z"}, {"uuid": "1c64a855-ad85-466c-a85b-01bf1e5ad1ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57279", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhmmtcpp7o27", "content": "", "creation_timestamp": "2025-02-07T22:15:35.214596Z"}, {"uuid": "fe9c5926-8e0e-4c46-b30d-b9fa4aa73418", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57357", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhmmteyhnh2t", "content": "", "creation_timestamp": "2025-02-07T22:15:37.147019Z"}, {"uuid": "fe68043c-8962-47af-afdc-6d68ccdd45b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57606", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhmmth5zwz22", "content": "", "creation_timestamp": "2025-02-07T22:15:39.457541Z"}, {"uuid": "bd767e41-169f-4569-a270-e113cc6b5be3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57606", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhmrjapibm2p", "content": "", "creation_timestamp": "2025-02-07T23:39:27.012955Z"}, {"uuid": "563db0fb-8e82-4f7a-accc-7d160b2b198a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57279", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhmrjbbggh2b", "content": "", "creation_timestamp": "2025-02-07T23:39:30.060868Z"}, {"uuid": "ac4130ee-18f1-4f04-ac36-9ea545618d15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57357", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113965512302633302", "content": "", "creation_timestamp": "2025-02-08T00:48:33.269084Z"}, {"uuid": "4c722b47-041b-4e68-9c43-2ed612fef825", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57248", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lhoz6m7rsw27", "content": "", "creation_timestamp": "2025-02-08T21:01:59.221659Z"}, {"uuid": "1251cb03-7f39-439f-8d96-8873dc33b9ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57249", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lhoz6mcfdn2o", "content": "", "creation_timestamp": "2025-02-08T21:01:59.699070Z"}, {"uuid": "47ab3708-2c9a-4d37-9c8e-679a15d09d05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57968", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/3533542", "content": "", "creation_timestamp": "2025-03-10T20:37:15.658487Z"}, {"uuid": "9a05640d-76a2-4b7a-a64d-60f9dbef422e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57949", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113973737061607590", "content": "", "creation_timestamp": "2025-02-09T11:40:12.930247Z"}, {"uuid": "663939d7-aec7-444c-a13c-e4ab010ec874", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57949", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhqmatzl3m2q", "content": "", "creation_timestamp": "2025-02-09T12:15:54.777811Z"}, {"uuid": "a53148fe-5cd9-48b1-b7ae-9a09a0aad4ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57949", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhqyhvzgud2o", "content": "", "creation_timestamp": "2025-02-09T15:54:37.026622Z"}, {"uuid": "6d93a067-3733-491e-b404-081fd9693e93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57376", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3lkxwuofwhp2n", "content": "", "creation_timestamp": "2025-03-22T14:30:21.456266Z"}, {"uuid": "ee5381cf-50d1-4c0b-9d38-c852b2bf6a77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57968", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lhsgllfpta2z", "content": "", "creation_timestamp": "2025-02-10T05:39:52.180169Z"}, {"uuid": "27534c9e-cb36-48c0-b19d-ad7e9391ddba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57968", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3lhshriip3v2e", "content": "", "creation_timestamp": "2025-02-10T06:01:03.745834Z"}, {"uuid": "61904b5a-99b8-40c7-9ac7-d84933257655", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57026", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114060548889819867", "content": "", "creation_timestamp": "2025-02-24T19:37:37.469797Z"}, {"uuid": "5d923d4c-dd2b-48e5-afb4-7a99cdf7e5f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57440", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/114197169720370649", "content": "", "creation_timestamp": "2025-03-20T22:42:04.944379Z"}, {"uuid": "6f1e615b-7a41-42a3-863e-56fa20449f09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lj4blavog42g", "content": "", "creation_timestamp": "2025-02-26T21:02:04.039190Z"}, {"uuid": "0c0163bc-9beb-4060-b694-1bf0965b3ba9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57968", "type": "seen", "source": "https://infosec.exchange/users/dragonjar/statuses/113979245899426202", "content": "", "creation_timestamp": "2025-02-10T11:01:13.036131Z"}, {"uuid": "ce2a7b6f-dc80-493c-bbbd-b6f9fe46afc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57950", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhtk5oznep2x", "content": "", "creation_timestamp": "2025-02-10T16:16:20.251041Z"}, {"uuid": "35d2c5d0-e7ad-4791-b1b3-e17734ad7fd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57407", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113980867386263319", "content": "", "creation_timestamp": "2025-02-10T17:53:33.172409Z"}, {"uuid": "9792a2e2-504d-4dcc-9bb2-44e101bcd9c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57408", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113980891314808177", "content": "", "creation_timestamp": "2025-02-10T17:59:38.167443Z"}, {"uuid": "5e0f7054-e2fa-47b8-a8ef-c79fc11462ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57409", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113980891330526605", "content": "", "creation_timestamp": "2025-02-10T17:59:38.455117Z"}, {"uuid": "3302e3f7-f123-4614-9cf5-1a7c0e30bcf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57407", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhtqtnpkn627", "content": "", "creation_timestamp": "2025-02-10T18:15:59.566545Z"}, {"uuid": "f3e6eafe-b5fa-4ea5-a6eb-bcd19bea4a6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57408", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhtqtpzf6x2q", "content": "", "creation_timestamp": "2025-02-10T18:16:01.877919Z"}, {"uuid": "ff81be7f-654f-4e10-9fa0-a1a87af880c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57409", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhtqtshh2b2c", "content": "", "creation_timestamp": "2025-02-10T18:16:04.566025Z"}, {"uuid": "fcb52264-f248-4c93-9e17-7ae79c7c356f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57249", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113981084140609131", "content": "", "creation_timestamp": "2025-02-10T18:48:57.910403Z"}, {"uuid": "7f80d1c5-f307-4cda-a13e-8421455b01b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57707", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113981084229503489", "content": "", "creation_timestamp": "2025-02-10T18:48:58.124412Z"}, {"uuid": "f969c9b0-8e92-4898-a9d4-d2a516f67054", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57177", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113981192080802875", "content": "", "creation_timestamp": "2025-02-10T19:16:08.008696Z"}, {"uuid": "0d841a43-182e-4cc4-b0cb-e2d237d9e57e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57178", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113981223105355170", "content": "", "creation_timestamp": "2025-02-10T19:24:01.005005Z"}, {"uuid": "837d0414-44e3-4e2c-8b1f-984c2179ed50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57950", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhtx7oro232f", "content": "", "creation_timestamp": "2025-02-10T20:10:11.044368Z"}, {"uuid": "9d8013c0-3c7f-4089-a9c9-e4e1624064c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57177", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhtxkc72fm2i", "content": "", "creation_timestamp": "2025-02-10T20:16:02.452562Z"}, {"uuid": "1648b9f6-7e10-4852-b153-d0908f27c6d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57178", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhtxkf7amf2n", "content": "", "creation_timestamp": "2025-02-10T20:16:04.817685Z"}, {"uuid": "4e9f99cf-d58d-4d6a-a853-8bcad6aac1a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57040", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114072595097576184", "content": "", "creation_timestamp": "2025-02-26T22:41:07.203779Z"}, {"uuid": "bf2b4e1d-e17a-40e5-ae10-c9e9d5a6636f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5738", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhultwv2qr2n", "content": "", "creation_timestamp": "2025-02-11T02:19:20.154921Z"}, {"uuid": "a4e13156-d939-424f-af2c-32f4bd55fa6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5747", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhultz4vlb2n", "content": "", "creation_timestamp": "2025-02-11T02:19:22.834546Z"}, {"uuid": "d47d1cfb-7b8d-45fc-a268-e62d02129c20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57040", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lj4jzsixta2p", "content": "", "creation_timestamp": "2025-02-26T23:33:19.377238Z"}, {"uuid": "eb363526-788f-4b86-b595-8225ab9f5eb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57026", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lixafcd5q52s", "content": "", "creation_timestamp": "2025-02-24T20:57:28.425807Z"}, {"uuid": "847bb1d6-49a6-4622-a65c-6f33732cba2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57968", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3ljx242rpn32l", "content": "", "creation_timestamp": "2025-03-09T12:30:08.321870Z"}, {"uuid": "5625dc4b-6c27-4bc1-a344-86caa6a51782", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57968", "type": "seen", "source": "https://bsky.app/profile/socprime.com/post/3lhw2usicv72v", "content": "", "creation_timestamp": "2025-02-11T16:20:56.054103Z"}, {"uuid": "1ab55e60-4073-484f-be1c-c1417c6f3dc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57608", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lixhf5q7mg2r", "content": "", "creation_timestamp": "2025-02-24T23:02:43.908451Z"}, {"uuid": "10334477-3b4a-4f8e-970f-12ba95e8d7f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57777", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113987443318669012", "content": "", "creation_timestamp": "2025-02-11T21:45:53.899790Z"}, {"uuid": "b587fc64-0478-444f-8146-e473d1e465e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57241", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113987467580951679", "content": "", "creation_timestamp": "2025-02-11T21:52:04.089247Z"}, {"uuid": "53de40fb-36d1-4333-87ec-09e4a92a98bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57241", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwoprz5ef2z", "content": "", "creation_timestamp": "2025-02-11T22:16:01.528158Z"}, {"uuid": "752f309f-5f2d-44db-9f98-44612200ecff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57777", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwopuanhy2a", "content": "", "creation_timestamp": "2025-02-11T22:16:04.150760Z"}, {"uuid": "58c5a9b8-5f97-4431-8329-e66ecee85524", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57000", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113987656907693602", "content": "", "creation_timestamp": "2025-02-11T22:40:13.143788Z"}, {"uuid": "578dbe51-b4f2-41ed-b9be-2d9742f24d0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57000", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhws2urr2u2a", "content": "", "creation_timestamp": "2025-02-11T23:15:54.833102Z"}, {"uuid": "fc95fcc6-2427-4814-8739-9a474f366131", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57968", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lk4xnhp2nq2c", "content": "", "creation_timestamp": "2025-03-11T21:02:10.819633Z"}, {"uuid": "ea2a9178-6767-4790-8e83-7f092b639246", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57685", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lixujraxtj2a", "content": "", "creation_timestamp": "2025-02-25T02:57:53.712707Z"}, {"uuid": "2b879eaf-84f0-4f9c-a889-7dc441acc5cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57241", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhx4mjahdi2y", "content": "", "creation_timestamp": "2025-02-12T02:24:49.482456Z"}, {"uuid": "7fc69456-1d41-4794-a833-0563479bb163", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57777", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhx4mjoncq2v", "content": "", "creation_timestamp": "2025-02-12T02:24:51.844469Z"}, {"uuid": "5d16f9af-770b-457e-ac31-08aef730ebe0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57951", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113991178455812072", "content": "", "creation_timestamp": "2025-02-12T13:35:47.584392Z"}, {"uuid": "4f512016-9ae5-407d-8c8c-6980089b8e71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-11)", "content": "", "creation_timestamp": "2025-02-11T00:00:00.000000Z"}, {"uuid": "bb3c43f6-8426-41fe-ad4f-bbdf48adc387", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57951", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyeetd5sz2c", "content": "", "creation_timestamp": "2025-02-12T14:16:15.829410Z"}, {"uuid": "648c826d-800f-4c99-baef-1ee1d89ca8ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57952", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyeewjky62z", "content": "", "creation_timestamp": "2025-02-12T14:16:19.185267Z"}, {"uuid": "caa3bf6e-e41f-4ec2-8e20-ed249132e834", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57983", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/114074757918670446", "content": "", "creation_timestamp": "2025-02-27T07:51:08.764775Z"}, {"uuid": "492a072a-82f2-4373-b02e-a84425f774b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57045", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-57045.yaml", "content": "", "creation_timestamp": "2025-03-11T16:53:35.000000Z"}, {"uuid": "75ba9b04-f9bd-4484-8498-5581c4e4441c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57046", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-57046.yaml", "content": "", "creation_timestamp": "2025-03-11T16:48:48.000000Z"}, {"uuid": "103e3fef-ae47-4cef-9767-a83ea2f688eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57602", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhz7ejndut2c", "content": "", "creation_timestamp": "2025-02-12T22:19:16.737860Z"}, {"uuid": "ec319e2e-5dc5-4440-b633-bc269d774ffb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57604", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhz7eot7ex2a", "content": "", "creation_timestamp": "2025-02-12T22:19:22.225316Z"}, {"uuid": "d581f813-5999-4e59-af12-fe2611c442d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57601", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhz7egjggc2a", "content": "", "creation_timestamp": "2025-02-12T22:19:13.464504Z"}, {"uuid": "52198764-3ad1-4665-b19e-7eeaebc86f4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57603", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhz7emlm4v2h", "content": "", "creation_timestamp": "2025-02-12T22:19:19.827026Z"}, {"uuid": "e165fa3f-05f3-4ecf-8dd4-9f50c68e6d89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57605", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhz7er6tct2g", "content": "", "creation_timestamp": "2025-02-12T22:19:24.636259Z"}, {"uuid": "151894e4-bbb5-4703-876d-4bfcf29dca6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57000", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lhzlsu4z7t24", "content": "", "creation_timestamp": "2025-02-13T02:02:02.848912Z"}, {"uuid": "9dcd01a1-1a9f-4754-82e6-16a748af5f17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57601", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhzn3zmbcx2z", "content": "", "creation_timestamp": "2025-02-13T02:25:06.856109Z"}, {"uuid": "87a5ad30-88a2-49c4-91fc-af5ea9a13100", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57605", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhzn425liq2a", "content": "", "creation_timestamp": "2025-02-13T02:25:09.272495Z"}, {"uuid": "14719585-46d1-4d89-8d5c-4ace71b57ba6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57603", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhzn42fy532z", "content": "", "creation_timestamp": "2025-02-13T02:25:10.280415Z"}, {"uuid": "2561e95a-fc9a-4394-aecd-3653f441d73a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57604", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhzn42nlv32v", "content": "", "creation_timestamp": "2025-02-13T02:25:11.420534Z"}, {"uuid": "6a171e9f-b841-4914-a276-d0ca183f2408", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57602", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhzn42v7gt2z", "content": "", "creation_timestamp": "2025-02-13T02:25:12.609989Z"}, {"uuid": "746da980-d38c-4977-ae23-dd33e212a7f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57968", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-03-11T05:26:42.000000Z"}, {"uuid": "4ec71c60-1dc1-4f4b-9b8d-f16b9aa93864", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "seen", "source": "https://bsky.app/profile/tmjintel.bsky.social/post/3li3fzhhmm42b", "content": "", "creation_timestamp": "2025-02-13T19:23:41.087049Z"}, {"uuid": "abddb3b6-6fb9-4b18-8f68-a104978b8e51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/3337120", "content": "", "creation_timestamp": "2025-02-13T20:35:23.223890Z"}, {"uuid": "25f5c3fe-af08-4e86-9a6d-35e7776ee87b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3li3lykuopc2j", "content": "", "creation_timestamp": "2025-02-13T21:10:33.609998Z"}, {"uuid": "4741cb3a-f2eb-47a7-9f15-c62e6163211d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-13T21:10:02.000000Z"}, {"uuid": "3d5576bf-2719-4283-b65f-6ede8a50b034", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57378", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113998818929513545", "content": "", "creation_timestamp": "2025-02-13T21:58:52.715967Z"}, {"uuid": "3761094b-7ede-45c9-9420-165b5a8290a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57378", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li3pn55e222i", "content": "", "creation_timestamp": "2025-02-13T22:15:44.960306Z"}, {"uuid": "7d01ffed-18d9-4910-a0e3-2e8d5af68331", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57040", "type": "seen", "source": "https://bsky.app/profile/andranglin.bsky.social/post/3lkkoaquc2s2c", "content": "", "creation_timestamp": "2025-03-17T07:51:16.093033Z"}, {"uuid": "c18caaa4-b609-401d-bfc5-ffa5bc3aad51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57782", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113998927608370767", "content": "", "creation_timestamp": "2025-02-13T22:26:30.559601Z"}, {"uuid": "f1242855-9142-4847-b06d-b69df454b52e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57782", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li3sz56idg2a", "content": "", "creation_timestamp": "2025-02-13T23:16:08.810354Z"}, {"uuid": "ce06b083-911d-4f9f-90ca-7149c5e319f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57782", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li3xgdufgk22", "content": "", "creation_timestamp": "2025-02-14T00:35:11.349316Z"}, {"uuid": "7044dc06-533a-442f-afd4-73bd199eb7d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57968", "type": "seen", "source": "https://thehackernews.com/2025/03/cisa-adds-five-actively-exploited.html", "content": "", "creation_timestamp": "2025-03-11T02:58:00.000000Z"}, {"uuid": "ab62b82d-c986-4a68-8be9-4db6377a190e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57969", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/114000864455141980", "content": "", "creation_timestamp": "2025-02-14T06:39:04.227801Z"}, {"uuid": "be5593a6-fd27-4538-bbc1-3c18f2f0aa2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57969", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li4nsnzkeh2s", "content": "", "creation_timestamp": "2025-02-14T07:15:42.872373Z"}, {"uuid": "997a65b6-0e4e-4828-88a8-f56f3bc75bdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57969", "type": "seen", "source": "https://misp-community.org/users/misp/statuses/114001046584674700", "content": "", "creation_timestamp": "2025-02-14T07:25:25.702693Z"}, {"uuid": "c959abd4-6f1e-42e6-899e-1cc678474520", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57725", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li5lyu76gf2k", "content": "", "creation_timestamp": "2025-02-14T16:16:02.726007Z"}, {"uuid": "13380a8a-1809-4f47-bea5-9da1fff56600", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57778", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li5lywdlut2k", "content": "", "creation_timestamp": "2025-02-14T16:16:05.122549Z"}, {"uuid": "c11b6b2b-6821-4ecc-821b-d8c5aefb6364", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57790", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/114003188127846618", "content": "", "creation_timestamp": "2025-02-14T16:30:00.561983Z"}, {"uuid": "e2e2e38c-a412-4436-b9ec-7b9c3587c9b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57790", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li5pdjdagg2s", "content": "", "creation_timestamp": "2025-02-14T17:15:42.537224Z"}, {"uuid": "cc8c7593-1167-4694-945c-6bb8492f8459", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57790", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li5ud6rsnx2e", "content": "", "creation_timestamp": "2025-02-14T18:45:00.555880Z"}, {"uuid": "f62e0a9f-3e42-4147-9fd6-56885e2c7a02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3li63y6xpbe2f", "content": "", "creation_timestamp": "2025-02-14T21:02:03.328164Z"}, {"uuid": "12f211d6-aec4-4d09-a2ca-5e0ebb103834", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3li6hweq3gt2g", "content": "", "creation_timestamp": "2025-02-15T00:35:45.854746Z"}, {"uuid": "d5353df6-7143-473b-a833-25428e7bbcac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57240", "type": "seen", "source": "https://gist.github.com/Xib3rR4dAr/dc9dd7ddbc329d5d348d0ac69fb81b31", "content": "", "creation_timestamp": "2025-03-13T09:53:23.000000Z"}, {"uuid": "b42d22fa-77b1-41d1-b4e4-5949aee2bd10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57170", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkoihyyia62l", "content": "", "creation_timestamp": "2025-03-18T20:18:37.104141Z"}, {"uuid": "89af82f9-7e09-4ce5-98bc-ab378809579e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57972", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114117894839911428", "content": "", "creation_timestamp": "2025-03-06T22:41:26.646196Z"}, {"uuid": "59239c9c-0c89-4f3d-938e-86071f3be3a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57174", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114118157679394786", "content": "", "creation_timestamp": "2025-03-06T23:48:17.096342Z"}, {"uuid": "581a4e13-d653-4523-9166-e2e7a64d62c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-14)", "content": "", "creation_timestamp": "2025-02-14T00:00:00.000000Z"}, {"uuid": "d0dd4859-9f2c-446c-bdcb-7675d5faaab7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57971", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/114011532176024665", "content": "", "creation_timestamp": "2025-02-16T03:52:00.710612Z"}, {"uuid": "c008fa85-d1f7-4e8d-8339-c0e29ba30fef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57970", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3libeoe5ts42g", "content": "", "creation_timestamp": "2025-02-16T04:15:33.263784Z"}, {"uuid": "fa834128-b25e-49db-abbf-82aa47407921", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57971", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3libeogjmwv2n", "content": "", "creation_timestamp": "2025-02-16T04:15:35.590352Z"}, {"uuid": "a85a825e-aa40-4aef-9dad-6398a4203558", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57971", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114011754542458798", "content": "", "creation_timestamp": "2025-02-16T04:48:33.867039Z"}, {"uuid": "660f1d8f-5910-4789-a818-e07b5b1a75b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57971", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3libq5cg7sj2m", "content": "", "creation_timestamp": "2025-02-16T07:40:46.120232Z"}, {"uuid": "c781cd4b-f039-4f26-8bf0-bd056e9a8d6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57971", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lic6mzt3g525", "content": "", "creation_timestamp": "2025-02-16T12:00:06.801645Z"}, {"uuid": "c44fa08d-c5d2-46d6-a423-cd5ebd8af6f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57971", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/114015180291677641", "content": "", "creation_timestamp": "2025-02-16T19:19:47.483094Z"}, {"uuid": "3621917e-1d8d-476a-b022-57ab8e27985e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57971", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lidguieorj27", "content": "", "creation_timestamp": "2025-02-17T00:00:05.813713Z"}, {"uuid": "767180f7-7a30-4040-8fac-ec4cad32cbc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lidsw4glgs2s", "content": "", "creation_timestamp": "2025-02-17T03:35:46.360405Z"}, {"uuid": "842060ce-9082-433a-bf6f-006b141f1c92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57174", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljo5njut622r", "content": "", "creation_timestamp": "2025-03-05T23:39:37.697308Z"}, {"uuid": "1138c4b3-68e3-46b3-afd0-2a2d38998bfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57040", "type": "seen", "source": "https://bsky.app/profile/paulasadoorian.bsky.social/post/3lkqbwecpbg2n", "content": "", "creation_timestamp": "2025-03-19T13:26:40.617175Z"}, {"uuid": "79e2a9eb-2049-49f6-900a-2c6bde4cbe7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57049", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-57049.yaml", "content": "", "creation_timestamp": "2025-03-20T12:26:26.000000Z"}, {"uuid": "367cbcdf-bfd2-4632-9e60-1e2428e3c0f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-16)", "content": "", "creation_timestamp": "2025-02-16T00:00:00.000000Z"}, {"uuid": "a52cc6a8-94ab-457f-a5f7-3240f9ee03a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57963", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ligpoabtnd2t", "content": "", "creation_timestamp": "2025-02-18T07:15:38.974337Z"}, {"uuid": "c7e9839b-b35c-401d-9291-5d4bf9043756", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57964", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ligpocwctl2k", "content": "", "creation_timestamp": "2025-02-18T07:15:41.798717Z"}, {"uuid": "6421b022-e195-4fc5-8250-c5c2b8a9ebb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57050", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-57050.yaml", "content": "", "creation_timestamp": "2025-03-11T10:51:24.000000Z"}, {"uuid": "7edde621-165f-4e7c-a32d-d1ed0a44f331", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57490", "type": "seen", "source": "https://gist.github.com/NaliangzzZ/44bfcc1d9c2cf275d2b6683ca9e20980", "content": "", "creation_timestamp": "2025-03-07T05:17:07.000000Z"}, {"uuid": "0a25e20e-09dc-41b8-bad8-efac28301b91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57963", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lih6soxnjz2y", "content": "", "creation_timestamp": "2025-02-18T11:46:35.302870Z"}, {"uuid": "3da4fa98-87ea-4465-92d6-2ff6127e1bd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57045", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lihkmk4zm52h", "content": "", "creation_timestamp": "2025-02-18T15:17:53.374641Z"}, {"uuid": "62f5e595-9a81-4f5a-9ddf-7feca1c1cbaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57046", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lihkmmh6nn2o", "content": "", "creation_timestamp": "2025-02-18T15:17:55.553072Z"}, {"uuid": "8e28d0f3-3a1f-4c22-becf-de740e593fe4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57049", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lihkmos6nu2y", "content": "", "creation_timestamp": "2025-02-18T15:17:58.081690Z"}, {"uuid": "e8d285ef-96ac-429a-a29f-6cb8c829c495", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57050", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lihkmqzfef2o", "content": "", "creation_timestamp": "2025-02-18T15:18:00.424173Z"}, {"uuid": "0d5f40fa-4932-4ab1-aba4-d616842a4f0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57046", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lihthen7am22", "content": "", "creation_timestamp": "2025-02-18T17:56:03.827449Z"}, {"uuid": "7086f2c1-6650-4f26-b6be-f2102d4792b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57050", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lihthewk5e2m", "content": "", "creation_timestamp": "2025-02-18T17:56:05.041693Z"}, {"uuid": "645c0842-fbfe-4e2d-8050-40f136d23f97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57045", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lihthf3gab24", "content": "", "creation_timestamp": "2025-02-18T17:56:05.710134Z"}, {"uuid": "ceb22f4a-177e-4680-a040-81074cc1918f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57049", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lihthfacne2m", "content": "", "creation_timestamp": "2025-02-18T17:56:06.373783Z"}, {"uuid": "33b529a0-7c8f-4078-a1e4-a5c5d8a8f34a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57055", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lihxwlgrss23", "content": "", "creation_timestamp": "2025-02-18T19:16:08.850381Z"}, {"uuid": "51348fea-5d84-4040-81bb-ec8d0f9bbe82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57056", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lihxwnmtx52g", "content": "", "creation_timestamp": "2025-02-18T19:16:11.263044Z"}, {"uuid": "14400818-b410-4665-ae3a-6fcfd7657ec7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57055", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3liiauwjy7c2z", "content": "", "creation_timestamp": "2025-02-18T21:56:18.132873Z"}, {"uuid": "e666c787-f456-419c-9be1-eb0d2fbe7cb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57056", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3liiauwnbz52e", "content": "", "creation_timestamp": "2025-02-18T21:56:18.729169Z"}, {"uuid": "a87dd29d-f600-43d1-8607-8f81af5d74d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57254", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3liife7e7sr2t", "content": "", "creation_timestamp": "2025-02-18T23:16:24.446709Z"}, {"uuid": "3b16ea89-f003-470f-ab51-c99037286321", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57255", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3liifebi6ir27", "content": "", "creation_timestamp": "2025-02-18T23:16:27.104775Z"}, {"uuid": "5bddddd0-ef0e-44a4-b62e-33da85dc6d91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57256", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3liifedvtxr2t", "content": "", "creation_timestamp": "2025-02-18T23:16:29.251484Z"}, {"uuid": "21c9ed27-3053-45d0-903c-126e51ae55c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57257", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3liifegmv4r2t", "content": "", "creation_timestamp": "2025-02-18T23:16:32.072989Z"}, {"uuid": "e2172183-b0e4-4ff8-a479-5d705d898703", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57258", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3liifeiypmj2p", "content": "", "creation_timestamp": "2025-02-18T23:16:34.524214Z"}, {"uuid": "153ed6f9-21f6-4bf2-8584-aea5cdd323e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57259", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3liifelat4l2y", "content": "", "creation_timestamp": "2025-02-18T23:16:36.967893Z"}, {"uuid": "4accc7f0-09f0-467b-8514-21f0286d67c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57255", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3liip5fd64y24", "content": "", "creation_timestamp": "2025-02-19T02:11:35.218407Z"}, {"uuid": "3019b150-c93b-42de-9c46-578bc82720ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57259", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3liip5fgybe22", "content": "", "creation_timestamp": "2025-02-19T02:11:35.807388Z"}, {"uuid": "1a5935fb-fcd4-4b04-ae9d-9801a4a1a269", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57258", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3liip5fkgki24", "content": "", "creation_timestamp": "2025-02-19T02:11:36.402570Z"}, {"uuid": "def8317f-5015-45fe-a781-8b7289796243", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57261", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3liipeisizy23", "content": "", "creation_timestamp": "2025-02-19T02:15:31.940209Z"}, {"uuid": "f827c49f-51f0-42db-9ef2-b0a24df213a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57258", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3liipeisizy23", "content": "", "creation_timestamp": "2025-02-19T02:15:32.000771Z"}, {"uuid": "b8f3a666-e1be-4aa2-9a07-8046b29a018e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57262", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3liipelzwma23", "content": "", "creation_timestamp": "2025-02-19T02:15:35.231916Z"}, {"uuid": "abd5e5a8-6101-4bd7-8b94-348333f04b34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57262", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lij3z5dsrk23", "content": "", "creation_timestamp": "2025-02-19T06:01:49.570019Z"}, {"uuid": "725025fc-b107-40a1-aff6-01a0d191908c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57261", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lij3z5pkhq2c", "content": "", "creation_timestamp": "2025-02-19T06:01:50.243809Z"}, {"uuid": "3ab8ea64-7700-42af-bd5f-9370c0162d3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57045", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114031809621172375", "content": "", "creation_timestamp": "2025-02-19T17:48:57.112346Z"}, {"uuid": "cda7c2c7-75b1-4163-bd2f-76ff076588a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57049", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114031809661753694", "content": "", "creation_timestamp": "2025-02-19T17:48:58.304687Z"}, {"uuid": "c6b4e79f-6e3a-4de1-9254-808539b99ce5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57050", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114031809722318785", "content": "", "creation_timestamp": "2025-02-19T17:48:58.375656Z"}, {"uuid": "eb881450-9e1a-4706-84ca-8e7abb1952b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5705", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114033695504956262", "content": "", "creation_timestamp": "2025-02-20T01:48:26.317586Z"}, {"uuid": "df9f747d-71b3-4c0d-815a-1a1afed7108b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5706", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114033695538790847", "content": "", "creation_timestamp": "2025-02-20T01:48:26.817023Z"}, {"uuid": "4318c7fe-af43-42e9-b682-1fabd1ea4e47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5706", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lilagi25vc2p", "content": "", "creation_timestamp": "2025-02-20T02:26:12.828584Z"}, {"uuid": "9241d649-da86-49e6-8cf9-cc74e8616004", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57401", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lipitdophz2v", "content": "", "creation_timestamp": "2025-02-21T19:07:12.181682Z"}, {"uuid": "8e72d58c-c10b-4a92-91ef-703e75235eac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57401", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114043605324613090", "content": "", "creation_timestamp": "2025-02-21T19:48:40.954729Z"}, {"uuid": "e73b34e1-e2c7-4671-8d68-41acc74f2d30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57151", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkovvir5uy2m", "content": "", "creation_timestamp": "2025-03-19T00:18:46.423202Z"}, {"uuid": "4870f087-aee9-45ac-8577-dd0c74c38f8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57492", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljzv7jffgh2m", "content": "", "creation_timestamp": "2025-03-10T15:40:35.859142Z"}, {"uuid": "8155b45d-62c0-4625-8e1e-e677f2180021", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-26T02:35:25.000000Z"}, {"uuid": "a6203c6b-a96d-4063-b768-e00800392932", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:11:05.000000Z"}, {"uuid": "f7394499-a10b-4775-97e3-c52093981ce3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57968", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-03-10T18:10:04.000000Z"}, {"uuid": "a32eb1fd-b222-43f3-8212-31e135e4c0c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5752", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lksmhiwhhn2o", "content": "", "creation_timestamp": "2025-03-20T11:40:32.518288Z"}, {"uuid": "e33b14be-54ba-4230-9c34-ea430800e563", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57968", "type": "seen", "source": "https://bsky.app/profile/aakl.bsky.social/post/3lk2ayuynhs2g", "content": "", "creation_timestamp": "2025-03-10T19:11:43.335727Z"}, {"uuid": "3353aaad-848c-4372-9272-15db62cd04fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57968", "type": "seen", "source": "https://bsky.app/profile/aakl.bsky.social/post/3lk2ayuz6322g", "content": "", "creation_timestamp": "2025-03-10T19:11:44.570423Z"}, {"uuid": "bacf7ab8-6d54-4c17-b52a-ee5fff338505", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57240", "type": "seen", "source": "https://gist.github.com/devom3/43c328e23ec854090ed555a13541ca94", "content": "", "creation_timestamp": "2025-02-24T18:03:54.000000Z"}, {"uuid": "fb992845-ea9d-4991-95d7-c8013c1f70a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57440", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lktlxatzma2n", "content": "", "creation_timestamp": "2025-03-20T21:04:09.365014Z"}, {"uuid": "8535cfbc-c8a1-4312-ab6b-ff8eb0bd7588", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57968", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lk2e6kjbxk24", "content": "", "creation_timestamp": "2025-03-10T20:08:29.995567Z"}, {"uuid": "e8e58921-6c4a-4613-b2b3-b0f474ac028e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57061", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkr2mya2fw2l", "content": "", "creation_timestamp": "2025-03-19T20:48:50.340335Z"}, {"uuid": "89a7171e-16ba-4132-8ed1-a9783b944c53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57882", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3llrm5goqas25", "content": "", "creation_timestamp": "2025-04-01T19:27:26.528941Z"}, {"uuid": "47a532e7-3e94-4013-92e0-57087a8155e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57882", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3llrelgootz26", "content": "", "creation_timestamp": "2025-04-01T17:12:06.224279Z"}, {"uuid": "35bf14db-6b4d-42be-a5f7-693b07a3f570", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57882", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3llrjdld3c22k", "content": "", "creation_timestamp": "2025-04-01T18:37:10.954519Z"}, {"uuid": "630193c1-fc1d-4eb8-8843-cf9cfd46a8ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57882", "type": "seen", "source": "https://infosec.exchange/users/andersonc0d3/statuses/114264166030412462", "content": "", "creation_timestamp": "2025-04-01T18:40:07.508351Z"}, {"uuid": "be6229ae-586b-4c07-a24c-c8e2b78989f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57882", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3llrfwedg2q25", "content": "", "creation_timestamp": "2025-04-01T17:36:06.676233Z"}, {"uuid": "7ae1da53-dff9-490b-9c51-93b7856ed39e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57882", "type": "seen", "source": "https://infosec.exchange/users/andersonc0d3/statuses/114264166030412462", "content": "", "creation_timestamp": "2025-04-01T18:40:07.516217Z"}, {"uuid": "f8e34878-a6ec-4b0a-8153-4bc80d0b0d8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57882", "type": "seen", "source": "https://bsky.app/profile/andersonc0d3.bsky.social/post/3llrjir6fmc2u", "content": "", "creation_timestamp": "2025-04-01T18:40:10.545214Z"}, {"uuid": "317167bf-953d-48d0-9825-f04d6f297d4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57996", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lrqdlbneos2p", "content": "", "creation_timestamp": "2025-06-16T15:52:38.356165Z"}, {"uuid": "07bf15c5-4739-4fcc-9861-94da06bb97f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57868", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lm3g5ixsfd2q", "content": "", "creation_timestamp": "2025-04-05T17:06:43.996802Z"}, {"uuid": "52bccfc1-1293-4249-8b1d-d891ec91c745", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57835", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lm3g5j35yc2u", "content": "", "creation_timestamp": "2025-04-05T17:06:44.547311Z"}, {"uuid": "41c60b15-a8e8-4d32-a405-e60579ad50a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57337", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqat75m4lsp2", "content": "", "creation_timestamp": "2025-05-28T18:24:24.366210Z"}, {"uuid": "67503209-5b93-419d-af35-3d601dd4690f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57336", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqat76bihip2", "content": "", "creation_timestamp": "2025-05-28T18:24:25.010756Z"}, {"uuid": "28471a0d-05ef-4bb9-990f-19e7d672d754", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57338", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqat7b3frs42", "content": "", "creation_timestamp": "2025-05-28T18:24:35.750726Z"}, {"uuid": "23261da1-ba58-4ea9-b8cc-63cd46552eec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57529", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lppkygn3zr2j", "content": "", "creation_timestamp": "2025-05-21T21:42:11.572601Z"}, {"uuid": "4c984cc7-d950-4651-92a1-25f6b9f28377", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57996", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lrb63dthg22e", "content": "", "creation_timestamp": "2025-06-10T15:04:20.625515Z"}, {"uuid": "a5ef2d51-6486-4941-8c27-d3d99c419f91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57337", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqaze7bstv2m", "content": "", "creation_timestamp": "2025-05-28T20:14:34.383597Z"}, {"uuid": "5168d291-e3c6-4d57-bfdf-8da7d469ef5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57336", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqazw4jbb42k", "content": "", "creation_timestamp": "2025-05-28T20:24:35.367843Z"}, {"uuid": "f423ad79-e5ca-455e-ac27-7cbacfbd19ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57040", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3lqfr3x7qft2e", "content": "", "creation_timestamp": "2025-05-30T17:30:08.952843Z"}, {"uuid": "33d9cd76-c5aa-4d58-b3ef-84e9892ea255", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57783", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqmyxpo3u5a2", "content": "", "creation_timestamp": "2025-06-02T14:39:59.116733Z"}, {"uuid": "4e1cedd7-2d7f-4440-9948-2d43b498d48a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57049", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-15)", "content": "", "creation_timestamp": "2025-05-15T00:00:00.000000Z"}, {"uuid": "7f651db8-5e0b-422b-9c8a-d354fbd4a62b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57798", "type": "seen", "source": "https://gist.github.com/webmutation/894dd1a9a17615b7469198bb18bc3a16", "content": "", "creation_timestamp": "2025-04-12T00:10:16.000000Z"}, {"uuid": "3213b83b-65e2-446d-b33f-6ea9883b0129", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57459", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqnaxan7cpc2", "content": "", "creation_timestamp": "2025-06-02T17:04:08.266409Z"}, {"uuid": "39fd71d9-a143-4933-b5c9-323c6b21f623", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57783", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqncetugvy2r", "content": "", "creation_timestamp": "2025-06-02T17:27:56.575728Z"}, {"uuid": "fbd32fe8-25dd-400a-bb52-3e5ad48c958a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57040", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lqgojs324f2w", "content": "", "creation_timestamp": "2025-05-31T02:16:49.604552Z"}, {"uuid": "bddf8d1e-a8ee-4fd8-b247-617a19c06e1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3lq5nuhllia2l", "content": "", "creation_timestamp": "2025-05-27T12:10:56.118665Z"}, {"uuid": "7668336c-6d36-4f41-8759-80aca1a3afd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57728", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3lq5nuhllia2l", "content": "", "creation_timestamp": "2025-05-27T12:10:56.217020Z"}, {"uuid": "ec0cf74d-e378-4721-b315-38c31b2d9cef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57726", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3lq5nuhllia2l", "content": "", "creation_timestamp": "2025-05-27T12:10:56.283146Z"}, {"uuid": "eb3e7fbb-3466-4bf2-93f3-59f638b325a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57970", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3ln4gbfhjbx2q", "content": "", "creation_timestamp": "2025-04-18T20:06:45.392122Z"}, {"uuid": "57732170-2f41-4ddd-80f0-0efa04f34440", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57493", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ln4hrghkyl2h", "content": "", "creation_timestamp": "2025-04-18T20:33:42.859892Z"}, {"uuid": "ddc2e90c-68cc-49be-b10e-2698900f0f7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57493", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ln4ryiuugmm2", "content": "", "creation_timestamp": "2025-04-18T23:36:37.575859Z"}, {"uuid": "39dc4733-6742-47cf-a1c5-d4ef2c58924e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5742", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/114816361290443115", "content": "", "creation_timestamp": "2025-07-08T07:10:40.608335Z"}, {"uuid": "8883000d-417c-4fdc-b67a-6470501688e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57394", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lne2lu2kdk2h", "content": "", "creation_timestamp": "2025-04-21T20:59:09.513570Z"}, {"uuid": "0218a11b-5f1b-43f9-9e63-15b327ef3c38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57049", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-26)", "content": "", "creation_timestamp": "2025-06-26T00:00:00.000000Z"}, {"uuid": "c4cc848a-5fd9-41f7-b949-8c622c14fefb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57726", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lnglalruht27", "content": "", "creation_timestamp": "2025-04-22T21:02:25.988285Z"}, {"uuid": "012c8076-e946-4042-9d07-cea4753fe62e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57728", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lnglalufw72t", "content": "", "creation_timestamp": "2025-04-22T21:02:26.506180Z"}, {"uuid": "e998722f-7633-45f3-abff-b080b56f951e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114580666303355391", "content": "", "creation_timestamp": "2025-05-27T16:10:18.344953Z"}, {"uuid": "2417a469-ebcb-410d-be40-b7f1f734de35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57726", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114580666303355391", "content": "", "creation_timestamp": "2025-05-27T16:10:18.453270Z"}, {"uuid": "92ffd4f6-189d-4ad3-bbf6-17b7d32269e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57728", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114580666303355391", "content": "", "creation_timestamp": "2025-05-27T16:10:18.588635Z"}, {"uuid": "ec5de0bf-f9d4-4d61-b6f3-e5a0142ea45e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lrmi3axhrk25", "content": "", "creation_timestamp": "2025-06-15T03:02:33.237787Z"}, {"uuid": "2f30944c-a934-41f3-b6f1-eca83c2e504d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lrmjlqszak25", "content": "", "creation_timestamp": "2025-06-15T03:29:40.988521Z"}, {"uuid": "8d0271c5-159d-4e4f-b778-dda0719b31ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57728", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lrmjlqszak25", "content": "", "creation_timestamp": "2025-06-15T03:29:41.099978Z"}, {"uuid": "23f895d7-8f8a-4ecf-a802-ff4970cc9111", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57726", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lrmjlqszak25", "content": "", "creation_timestamp": "2025-06-15T03:29:41.205176Z"}, {"uuid": "78ec1e25-93ab-4cc3-a62b-b5c99ac0badc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57996", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-05", "content": "", "creation_timestamp": "2025-06-12T10:00:00.000000Z"}, {"uuid": "6afd07da-970a-46c4-bcc0-bf57eeaf6258", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "seen", "source": "https://thehackernews.com/2025/05/dragonforce-exploits-simplehelp-flaws.html", "content": "", "creation_timestamp": "2025-05-29T08:34:00.000000Z"}, {"uuid": "791b2a2f-2f91-4fa2-b442-36f8cd98c227", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57728", "type": "seen", "source": "https://thehackernews.com/2025/05/dragonforce-exploits-simplehelp-flaws.html", "content": "", "creation_timestamp": "2025-05-29T08:34:00.000000Z"}, {"uuid": "f659dd10-7ee0-49da-ae8b-2ee6f223fb24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57977", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-05", "content": "", "creation_timestamp": "2025-06-12T10:00:00.000000Z"}, {"uuid": "93e500b9-18e9-4abb-b2cd-98af0b258cbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57726", "type": "seen", "source": "https://thehackernews.com/2025/05/dragonforce-exploits-simplehelp-flaws.html", "content": "", "creation_timestamp": "2025-05-29T08:34:00.000000Z"}, {"uuid": "927d4fd8-4835-494c-a867-b7eba1868a2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3lrgym745xb23", "content": "", "creation_timestamp": "2025-06-12T22:42:18.989972Z"}, {"uuid": "eaef89c4-2597-4121-bbb4-7a1b913c5c57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3lrgynyds6o2a", "content": "", "creation_timestamp": "2025-06-12T22:43:19.298495Z"}, {"uuid": "e47f4d16-8d80-4973-8e93-c08584da57c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "seen", "source": "https://bsky.app/profile/nihonmatsu.bsky.social/post/3lrhduobhrc2a", "content": "", "creation_timestamp": "2025-06-13T02:03:59.950309Z"}, {"uuid": "f6b321c9-c2bc-4b6e-88f4-7608b4297964", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57996", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lrsxsedbi22o", "content": "", "creation_timestamp": "2025-06-17T16:59:50.817622Z"}, {"uuid": "49259673-4e58-467f-b62c-a5a6f81d1adb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57698", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnyhw27dtf2h", "content": "", "creation_timestamp": "2025-04-29T23:50:44.767117Z"}, {"uuid": "e6cf9f1c-3a39-4c32-bf7c-5222eb1c5717", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57708", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lsmjzasxp227", "content": "", "creation_timestamp": "2025-06-27T21:02:27.256642Z"}, {"uuid": "20b13864-73f2-4329-a83e-f47f7f8d6a7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3lrhzjq23jz2l", "content": "", "creation_timestamp": "2025-06-13T08:31:30.358221Z"}, {"uuid": "913d1770-ba78-4239-bfde-c9e2305ec29b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57514", "type": "seen", "source": "https://bsky.app/profile/u2k25.bsky.social/post/3lofisraeos2l", "content": "", "creation_timestamp": "2025-05-05T04:11:25.361715Z"}, {"uuid": "979d385d-792a-4cbd-ad5d-3bad851b7c0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57996", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lro4g6yaq22q", "content": "", "creation_timestamp": "2025-06-15T18:39:13.368440Z"}, {"uuid": "97fe5a47-0532-4be3-b8f3-560751ed73c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57996", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lro4wkikx22q", "content": "", "creation_timestamp": "2025-06-15T18:48:22.794191Z"}, {"uuid": "fdcc051d-e142-4582-9514-511895116f7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lriawpm4752i", "content": "", "creation_timestamp": "2025-06-13T10:44:04.232888Z"}, {"uuid": "5f44bb7b-0b65-4d65-b94c-4b95c71725cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57726", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lrowdtbahs2w", "content": "", "creation_timestamp": "2025-06-16T02:23:09.292926Z"}, {"uuid": "552e8be1-daab-4052-8942-a1e39c9412fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57728", "type": "seen", "source": "https://bsky.app/profile/rapid7.com/post/3lrijwxflas2d", "content": "", "creation_timestamp": "2025-06-13T13:25:17.076825Z"}, {"uuid": "4ef5c4bc-fbcc-419f-bad1-da418b002f18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3lqeqanug4z2i", "content": "", "creation_timestamp": "2025-05-30T07:42:10.968620Z"}, {"uuid": "d3dd5ab3-0135-4a3c-b1e9-1e0fe02a2eab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57728", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3lqeqanug4z2i", "content": "", "creation_timestamp": "2025-05-30T07:42:11.059715Z"}, {"uuid": "ef1830b0-eab9-414f-bc8a-9be6d8249996", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57726", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3lqeqanug4z2i", "content": "", "creation_timestamp": "2025-05-30T07:42:11.148782Z"}, {"uuid": "9c1864ee-8db9-4997-b7c9-042ce5c6d6a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "seen", "source": "https://bsky.app/profile/jgreig.bsky.social/post/3lriobz45cc2h", "content": "", "creation_timestamp": "2025-06-13T14:43:01.214877Z"}, {"uuid": "d0e2f86c-58eb-40fc-9282-b38649aad72c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57996", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lrdqgcmsrk2d", "content": "", "creation_timestamp": "2025-06-11T15:37:53.849530Z"}, {"uuid": "74a5d247-028b-44f2-a502-67f32c9128e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57049", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lowe3u4qhl2r", "content": "", "creation_timestamp": "2025-05-11T21:02:18.336807Z"}, {"uuid": "5df24390-a1d1-4d29-aec0-c7b786353f39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57656", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3lp2uwp72sw27", "content": "", "creation_timestamp": "2025-05-13T16:14:16.232800Z"}, {"uuid": "96cb2691-7396-4221-88a3-2385e3d8b31a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57656", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3lp2uwr33sz2j", "content": "", "creation_timestamp": "2025-05-13T16:14:18.479770Z"}, {"uuid": "2e2f7a0c-0bc8-4a29-a143-3e77c769d9e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57656", "type": "seen", "source": "https://bsky.app/profile/OpenSource.activitypub.awakari.com.ap.brid.gy/post/3lp2vgfqucij2", "content": "", "creation_timestamp": "2025-05-13T16:29:33.506017Z"}, {"uuid": "e1505c61-2eed-46cf-b134-2873a1ec5f96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "seen", "source": "https://bsky.app/profile/hivesystems.com/post/3ltmhus4f5f2f", "content": "", "creation_timestamp": "2025-07-10T13:49:16.016319Z"}, {"uuid": "52b5f318-67b0-4898-ab6f-7e7ffcbe4ad5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57376", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lpujox7sqp24", "content": "", "creation_timestamp": "2025-05-23T21:02:26.783683Z"}, {"uuid": "5dbff578-1147-4cee-b200-16147ea36669", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "seen", "source": "https://threatintel.cc/2025/06/13/morning-cyber-summary-show-thinking.html", "content": "", "creation_timestamp": "2025-06-13T13:42:44.000000Z"}, {"uuid": "f48e1061-26e4-4b46-929c-d71b6aaeb358", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "seen", "source": "https://mstdn.ca/users/rfwaveio/statuses/114596537881689248", "content": "", "creation_timestamp": "2025-05-30T11:26:43.289806Z"}, {"uuid": "a6992d31-f095-48b0-b796-b6767e759809", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57728", "type": "seen", "source": "https://mstdn.ca/users/rfwaveio/statuses/114596537881689248", "content": "", "creation_timestamp": "2025-05-30T11:26:43.387882Z"}, {"uuid": "fccfe5b2-723b-4b7f-8c67-cbf10462de2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57726", "type": "seen", "source": "https://mstdn.ca/users/rfwaveio/statuses/114596537881689248", "content": "", "creation_timestamp": "2025-05-30T11:26:43.483856Z"}, {"uuid": "e165c24d-3a2e-444b-976c-eb5c41c9b828", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57996", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lrjbacjvqs26", "content": "", "creation_timestamp": "2025-06-13T20:22:06.115182Z"}, {"uuid": "5bb2bde6-2849-483b-8098-26fcc16224c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57996", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lrjcvddqys26", "content": "", "creation_timestamp": "2025-06-13T20:51:45.998219Z"}, {"uuid": "aa050fca-34c3-485e-a37f-2f648d30a561", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57273", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lp5htyuzpq2h", "content": "", "creation_timestamp": "2025-05-14T16:58:07.286997Z"}, {"uuid": "7ba8286b-b4ce-4742-8eea-ec9b2c110dec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57487", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lp5vioermp2a", "content": "", "creation_timestamp": "2025-05-14T21:02:25.096056Z"}, {"uuid": "2c2ecceb-763f-49d9-a5f8-548f6fd71b3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57996", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lrjegavunk26", "content": "", "creation_timestamp": "2025-06-13T21:19:07.620697Z"}, {"uuid": "d3ced0c6-72a8-4f0f-91a4-11e23c1787d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "seen", "source": "MISP/a6c45078-caf1-51fe-82ea-24e29882e2cb", "content": "", "creation_timestamp": "2025-07-16T14:08:15.000000Z"}, {"uuid": "18a17582-2640-4d91-b78e-0cdbd6ab0c82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5721", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:04.000000Z"}, {"uuid": "0fe92186-accb-4d88-8788-94b493f7d989", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57487", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:04.000000Z"}, {"uuid": "bafcc93e-01f3-44e4-b682-18426314afcc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:04.000000Z"}, {"uuid": "a95bf875-aed3-407e-96e4-4149e0a63258", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57708", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3luvhjymuxw2h", "content": "", "creation_timestamp": "2025-07-26T21:02:25.636399Z"}, {"uuid": "44f06511-95f3-4e89-9bd8-4473482f2757", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57049", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-30)", "content": "", "creation_timestamp": "2025-07-30T00:00:00.000000Z"}, {"uuid": "c93c34ed-65d3-4094-a8b4-f9509dab51b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57049", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-01)", "content": "", "creation_timestamp": "2025-08-01T00:00:00.000000Z"}, {"uuid": "e8fc5e81-5d78-45a2-b51d-1dfcef28cabd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57490", "type": "seen", "source": "MISP/3e4b778d-5810-4171-a915-f1d106684af4", "content": "", "creation_timestamp": "2025-08-11T18:27:49.000000Z"}, {"uuid": "6ff0b13b-d544-4966-9d5b-367b210a623e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57049", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-11)", "content": "", "creation_timestamp": "2025-11-11T00:00:00.000000Z"}, {"uuid": "d2ce29f9-48db-4828-995b-fa46ac342a2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57874", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "7692899c-a1b4-42ec-af38-683f5fc7db44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57049", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-05)", "content": "", "creation_timestamp": "2025-10-05T00:00:00.000000Z"}, {"uuid": "4ac458f1-1225-4e21-8338-b22bd366bd01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57049", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-10)", "content": "", "creation_timestamp": "2025-11-10T00:00:00.000000Z"}, {"uuid": "1de9311b-2653-4571-9189-c8650c4b881a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57972", "type": "seen", "source": "MISP/4937e86f-f5bd-4d09-8bda-88a7440077f3", "content": "", "creation_timestamp": "2025-08-18T13:31:23.000000Z"}, {"uuid": "9ecaaccf-8ed9-400c-a2d6-c423a50c766d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57972", "type": "seen", "source": "MISP/4937e86f-f5bd-4d09-8bda-88a7440077f3", "content": "", "creation_timestamp": "2025-08-19T02:47:44.000000Z"}, {"uuid": "128994c4-8650-4db6-afc5-4c73a7aaf1bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57728", "type": "seen", "source": "MISP/b0c25fb2-dac6-4007-a9ec-8c5a35e99e35", "content": "", "creation_timestamp": "2025-08-20T15:45:55.000000Z"}, {"uuid": "48915da8-d661-46f0-96d7-9de8b85345d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "seen", "source": "MISP/b0c25fb2-dac6-4007-a9ec-8c5a35e99e35", "content": "", "creation_timestamp": "2025-08-20T15:45:55.000000Z"}, {"uuid": "256c3f8a-afd7-4aaf-89e9-b698a0f995d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57726", "type": "seen", "source": "MISP/b0c25fb2-dac6-4007-a9ec-8c5a35e99e35", "content": "", "creation_timestamp": "2025-08-20T15:45:55.000000Z"}, {"uuid": "447ff532-7bc0-42b1-9c97-b3295428fa3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57491", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lwu2uumy2l2a", "content": "", "creation_timestamp": "2025-08-20T18:33:32.425155Z"}, {"uuid": "a7432c64-5c44-43e4-8f5a-05786bbfe8ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57154", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lwuofzwp2v2g", "content": "", "creation_timestamp": "2025-08-21T00:23:09.358125Z"}, {"uuid": "9913593a-a58e-41a9-8045-378083f34417", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57155", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lwuooyfvnr2g", "content": "", "creation_timestamp": "2025-08-21T00:28:09.704393Z"}, {"uuid": "fc7d1b51-1593-4a83-a405-31ca9d32a7a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57728", "type": "seen", "source": "MISP/b0c25fb2-dac6-4007-a9ec-8c5a35e99e35", "content": "", "creation_timestamp": "2025-08-22T00:23:56.000000Z"}, {"uuid": "46a3e5d4-ec30-4e02-a8e5-8cfc01a4ffea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "seen", "source": "MISP/b0c25fb2-dac6-4007-a9ec-8c5a35e99e35", "content": "", "creation_timestamp": "2025-08-22T00:23:56.000000Z"}, {"uuid": "ea1c8c31-eff9-4bb2-9f8b-d0b05ba288cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57726", "type": "seen", "source": "MISP/b0c25fb2-dac6-4007-a9ec-8c5a35e99e35", "content": "", "creation_timestamp": "2025-08-22T00:23:56.000000Z"}, {"uuid": "b27776a2-69a0-4c80-a34d-7edc0ba5639b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57695", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m5ehvfw23r2n", "content": "", "creation_timestamp": "2025-11-11T15:40:14.397574Z"}, {"uuid": "ff0f51e0-3bcc-4313-aecb-a3752838eadf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57695", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5eon25pjmp2", "content": "", "creation_timestamp": "2025-11-11T17:41:29.201318Z"}, {"uuid": "97f8b995-9f94-4cbc-8568-f6378ba297c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5721", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/logsign_exec.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "bdff7c51-938a-4891-9cf0-f2a36af1e845", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57176", "type": "seen", "source": "MISP/9ca82492-7deb-4197-a6f1-191e121eef96", "content": "", "creation_timestamp": "2025-08-25T13:32:04.000000Z"}, {"uuid": "d6fcbb11-3db7-417c-b458-e91c3496c323", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57716", "type": "seen", "source": "MISP/9ca82492-7deb-4197-a6f1-191e121eef96", "content": "", "creation_timestamp": "2025-08-25T13:32:05.000000Z"}, {"uuid": "e0e4910d-3da0-4550-9294-d31c1b286965", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57497", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lxatiypqxc2u", "content": "", "creation_timestamp": "2025-08-25T20:26:17.229305Z"}, {"uuid": "6c9974b2-dc0c-4968-8ed4-e7a815fd9752", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57050", "type": "seen", "source": "MISP/71f05cce-2beb-4b80-8496-bbbabc032544", "content": "", "creation_timestamp": "2025-08-25T18:31:43.000000Z"}, {"uuid": "8d1fc5b3-7a98-443d-aa17-bf4eea05d30b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57963", "type": "seen", "source": "MISP/71f05cce-2beb-4b80-8496-bbbabc032544", "content": "", "creation_timestamp": "2025-08-25T18:31:43.000000Z"}, {"uuid": "e1ed1ec6-0be7-4088-9a98-f79e5584f752", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57778", "type": "seen", "source": "MISP/71f05cce-2beb-4b80-8496-bbbabc032544", "content": "", "creation_timestamp": "2025-08-25T18:31:44.000000Z"}, {"uuid": "86861ff5-3713-4d80-9cad-02e16a29b44d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57971", "type": "seen", "source": "MISP/71f05cce-2beb-4b80-8496-bbbabc032544", "content": "", "creation_timestamp": "2025-08-25T18:31:44.000000Z"}, {"uuid": "8cb7ace6-c6f5-429c-9c34-8d625b36c7c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57522", "type": "seen", "source": "MISP/f7787455-9994-4047-b6f7-77347597c104", "content": "", "creation_timestamp": "2025-08-26T18:36:19.000000Z"}, {"uuid": "5728cdd0-17f4-4403-9056-201bf2a1c716", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/simplehelp_toolbox_path_traversal.rb", "content": "", "creation_timestamp": "2025-02-25T11:10:14.000000Z"}, {"uuid": "198f98c9-6228-4ffb-92b2-ac38582b4cda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57996", "type": "seen", "source": "https://gist.github.com/Darkcrai86/c2e363fe546c0d30b06f5e312bb6e1bb", "content": "", "creation_timestamp": "2025-08-29T11:28:04.000000Z"}, {"uuid": "bfb50093-f1bb-4523-a6fc-e2b9dbfa47d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57996", "type": "seen", "source": "https://gist.github.com/Darkcrai86/367664d2a94230671ccc0ebf34735cf2", "content": "", "creation_timestamp": "2025-08-29T11:27:50.000000Z"}, {"uuid": "a1f0e372-8651-4096-a9d8-0e49a86c67c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57487", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/carrental_fileupload_rce.rb", "content": "", "creation_timestamp": "2025-05-14T06:10:17.000000Z"}, {"uuid": "4f817001-bdef-42ca-b7eb-f2ce47a0f2cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57052", "type": "seen", "source": "MISP/d0bda5d9-8cbc-4c6c-8803-a5e3150f9ec2", "content": "", "creation_timestamp": "2025-09-01T19:03:02.000000Z"}, {"uuid": "1f6c7848-84cf-4166-981b-daf8e6938975", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57590", "type": "seen", "source": "MISP/d0bda5d9-8cbc-4c6c-8803-a5e3150f9ec2", "content": "", "creation_timestamp": "2025-09-01T19:03:03.000000Z"}, {"uuid": "637eaff4-ecc3-454c-aaa4-ac08027808ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57510", "type": "seen", "source": "MISP/ca7dfd4e-d0b5-4d10-8982-36d9f6e53c8e", "content": "", "creation_timestamp": "2025-09-01T13:53:38.000000Z"}, {"uuid": "963e9e04-c5d9-4c83-89c2-15f73c009fe4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57513", "type": "seen", "source": "MISP/ca7dfd4e-d0b5-4d10-8982-36d9f6e53c8e", "content": "", "creation_timestamp": "2025-09-01T13:53:38.000000Z"}, {"uuid": "e4618ed8-c29f-4424-93c0-a1c9a22fa76c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5753", "type": "seen", "source": "https://gist.github.com/YLChen-007/251cb05f6b16f03e75e9f6c80ea3162f", "content": "", "creation_timestamp": "2026-02-27T04:04:35.000000Z"}, {"uuid": "4637b215-eb42-4863-abbc-98fc452f1576", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57049", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-27)", "content": "", "creation_timestamp": "2026-02-27T00:00:00.000000Z"}, {"uuid": "601bea6a-8585-490c-9634-95752e366fcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57726", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m7exgu3avc26", "content": "", "creation_timestamp": "2025-12-07T07:08:54.830359Z"}, {"uuid": "0766fd5d-6254-4969-8d7f-9f8999683afb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m7exgu3avc26", "content": "", "creation_timestamp": "2025-12-07T07:08:54.922911Z"}, {"uuid": "b43deafd-005f-46bb-80a7-ca545a1fee06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57728", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m7exgu3avc26", "content": "", "creation_timestamp": "2025-12-07T07:08:54.997473Z"}, {"uuid": "453ed5a4-fe66-41cd-bf97-c9e1590818f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57040", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mdj6ccn4wy2s", "content": "", "creation_timestamp": "2026-01-28T21:03:00.701508Z"}, {"uuid": "f6699a53-dc05-442a-9740-4d2c17902a03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5749", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfml3hvdcr24", "content": "", "creation_timestamp": "2026-02-24T16:20:10.267833Z"}, {"uuid": "1dd6ccc7-b261-4076-93b3-00442c382718", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57521", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3maoeltj3xb2q", "content": "", "creation_timestamp": "2025-12-23T18:23:24.464705Z"}, {"uuid": "30cc2fc1-d590-4b73-891c-4306bc874a27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57521", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3maooik2key2t", "content": "", "creation_timestamp": "2025-12-23T21:20:31.572180Z"}, {"uuid": "8d426d60-71dd-4311-84ee-cb222efada8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57854", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mgc5pvdo7x24", "content": "", "creation_timestamp": "2026-03-05T06:19:37.324801Z"}, {"uuid": "a00b3d36-091e-4651-90ca-86f095df61f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57854", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mgcjwojc572r", "content": "", "creation_timestamp": "2026-03-05T09:58:09.669532Z"}, {"uuid": "f0ffd115-f926-4734-9310-f60aaacc1744", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57049", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-14)", "content": "", "creation_timestamp": "2026-02-14T00:00:00.000000Z"}, {"uuid": "ae64af90-d8f5-410c-85e2-d38fc896dc49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-57895", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0291/", "content": "", "creation_timestamp": "2026-03-13T00:00:00.000000Z"}, {"uuid": "e71504e6-f808-4d97-88dc-a7f26f996efa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-57974", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "43ac490a-44fd-4af4-a060-d697993ed7df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-57876", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "bfe13a12-8a28-4019-a4d6-3c0c38071552", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-57795", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "94dd0089-19c2-405b-b344-9c895357bf03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-57804", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "d8a0bd13-e15a-4691-8de0-da6561b9e9bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-57809", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "59d17ae0-eaef-4c16-8690-310b74af67ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-57843", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "aa024091-94f0-4168-b314-f2ace2588de0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-57852", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "80defb33-d29a-4734-b332-60614368c032", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-57857", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "69e14c82-3f8e-4c58-a4e8-6e37fcbf25df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-57872", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "e2b01dc9-90a5-4ebc-a558-5239e06c6b2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-57875", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "0e6d9fcb-f2ad-47a3-b241-559818f36df4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-57699", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1729", "content": "", "creation_timestamp": "2026-01-21T04:00:00.000000Z"}, {"uuid": "eec166c1-a166-421e-bcb1-635e64e1df8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-57887", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "527b4f0a-e34b-440b-b25c-e36e2961dba8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-57888", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "584f017b-70fd-4552-93dd-00e45dd2a0db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-57893", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "41365a31-cedf-4d1d-9d20-128827e43997", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-57895", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "ff309b4c-aa1e-45d2-80b4-db4c2b60aa26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-57898", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "98857dc2-9cbe-4787-b771-f8e16c8f6a48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-57899", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "6392426d-9106-453a-bdea-2fb7bcdcf7ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-57924", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "40335960-f288-4124-94cf-644fc03fd55f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-57945", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "1d28c155-b6ce-4e78-a188-3d8b603eb76e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-57950", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "ab97f7b0-42ac-469a-a9e5-09a4775767e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-57952", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "30d32786-88f9-4f2b-8b4f-95d159259a0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-57975", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "569f5fe4-2e8b-468a-be4b-c04ce41ab77c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-57976", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "5444f260-061d-420a-9344-21eb86c2343f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-57699", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0314/", "content": "", "creation_timestamp": "2026-03-18T00:00:00.000000Z"}, {"uuid": "41764308-0f55-4387-ad28-c5b16be3a483", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-57982", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "b4a610e1-2ac2-4793-9a68-192999ee3b9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-57993", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "51f82ba8-2e5d-413a-a235-bd5d0c3970cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-57999", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "bb5463fb-bfb2-47b9-9e8f-e7f595c13c9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57699", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mhdo3de6y72z", "content": "", "creation_timestamp": "2026-03-18T14:10:12.445738Z"}, {"uuid": "3cd6d0a5-c696-4856-a639-d663621f490e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-57699", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-prodotti-atlassian", "content": "", "creation_timestamp": "2026-02-20T13:38:22.000000Z"}, {"uuid": "5bb4839d-2374-4b4a-9640-49d8956c45d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-57809", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "d024aa53-2939-459f-b2c7-7fefc2a28a77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-57838", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "39b71990-b957-465c-8301-a8a7d0474e87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-57887", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "4733c789-5547-4a06-8d89-5c2cef14d317", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-57903", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "d8cb8c0e-f16d-476d-b8e9-852b4b08561a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-57899", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "b9ca826d-df41-4089-a691-636981523210", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-57843", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "1c7b0048-0932-4e7d-884f-ef30c2ca0eda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-57883", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "567f28c7-eb77-420c-8c57-9cea97221323", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-57896", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "240eceb7-bf03-4a2e-a81b-552fbeda1f66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-57924", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "1248ac2e-30ab-4bc2-a5c3-045bb6e4e642", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-57893", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "02fbc37e-4bd8-44ad-93d0-87beb03346d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-57974", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "393fe257-8026-4269-bd32-e6b32e9ca18c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-57888", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "34f1f062-d0fa-491c-be97-68190e1a9563", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-57875", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "146689be-b330-48d8-a0ff-c448ff219659", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-57984", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "23ab34a3-4db4-405b-a37e-2714d7fc2101", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-57898", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "8de5b4a4-d30f-4086-9dba-92651ebac8bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-57939", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "70398260-b13b-44e5-bf01-b0e900868465", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-57976", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "11eacaa5-8bf3-4f26-bd6e-c3bd54745243", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-57982", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "8e5c2669-9f16-45ad-a005-4f8ac8f3e3f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-57975", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "84ae75b9-e780-44c3-9578-be31ebd7b570", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-57897", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "a7bf02d0-5664-4c17-b0f4-36e35aa6eed6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-57857", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "731e14dc-e0c5-4af8-b885-2ceaf6425c93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-57872", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "3d8be8b2-14d3-4ad8-b505-2d82beba6a95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-57795", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "87e04d1e-35fb-4ff7-9d9b-3423334816e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-57546", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/f16e4486-bb1e-424d-9c5e-24cd9c0be4c1", "content": "", "creation_timestamp": "2025-01-24T07:54:26.591700Z"}, {"uuid": "3ccce0f4-3dd5-4481-8ed1-09c9d50a97aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-57547", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/f16e4486-bb1e-424d-9c5e-24cd9c0be4c1", "content": "", "creation_timestamp": "2025-01-24T07:54:26.591700Z"}, {"uuid": "126199cf-06a9-4fa1-9f17-849aa4d9075a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-57549", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/f16e4486-bb1e-424d-9c5e-24cd9c0be4c1", "content": "", "creation_timestamp": "2025-01-24T07:54:26.591700Z"}, {"uuid": "c66ab460-f49b-4371-9518-f6a5fc917cae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-57548", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/f16e4486-bb1e-424d-9c5e-24cd9c0be4c1", "content": "", "creation_timestamp": "2025-01-24T07:54:26.591700Z"}, {"uuid": "0b7ea1c9-6df9-49e9-9bb0-e992c12685d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-57699", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/bbcbc485-b88d-4831-b8e9-6e37e7bd9875", "content": "", "creation_timestamp": "2026-01-21T21:18:16.771453Z"}, {"uuid": "d3bc162f-70db-4ae3-b605-c861700e2b8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-57895", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260316", "content": "", "creation_timestamp": "2026-03-16T03:00:00.000000Z"}, {"uuid": "a9ec2dd3-1b9b-4555-9289-f235d6334a98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-57727", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/637b0151-7750-4761-9adb-bf66c23430ad", "content": "", "creation_timestamp": "2026-02-02T12:26:13.547370Z"}, {"uuid": "117c22a4-0e7f-4940-8f03-1ac36fd41f27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-57968", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f9696218-e6b9-452d-865b-9f7ccc6f25bd", "content": "", "creation_timestamp": "2026-02-02T12:26:08.621212Z"}, {"uuid": "6d1ed6e0-2fb3-4cfa-a4dc-f9cc48b76666", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57241", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-57241.yaml", "content": "", "creation_timestamp": "2026-03-29T23:33:49.000000Z"}, {"uuid": "11258e0f-6c58-4dda-b9f2-8020a58d3c7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57241", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mif37gvcj62q", "content": "", "creation_timestamp": "2026-03-31T21:03:00.135856Z"}, {"uuid": "0a99a0d6-6ccb-4d79-9983-a5782cbe0dfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5798", "type": "seen", "source": "https://gist.github.com/acornies/f7b0fff853aa88218b8ce51a09a963e4", "content": "", "creation_timestamp": "2026-04-02T17:44:04.000000Z"}, {"uuid": "7c74640d-0fe2-40cf-9ea7-420ef92db5d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57967", "type": "seen", "source": "https://t.me/cvedetector/17081", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57967 - CyberArk Privileged Access Manager Self-Hosted LDAP Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-57967 \nPublished : Feb. 3, 2025, 6:15 p.m. | 22\u00a0minutes ago \nDescription : PVWA (Password Vault Web Access) in CyberArk Privileged Access Manager Self-Hosted before 14.4 has potentially elevated privileges in LDAP mapping. \nSeverity: 4.2 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-03T20:19:11.000000Z"}, {"uuid": "f19e1fef-8b2a-444a-a22b-e7d9c3891bee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57240", "type": "seen", "source": "https://t.me/cvedetector/19382", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57240 - Apryse WebViewer XSS\", \n  \"Content\": \"CVE ID : CVE-2024-57240 \nPublished : March 3, 2025, 5:15 p.m. | 1\u00a0hour, 1\u00a0minute ago \nDescription : A Cross-Site Scripting (XSS) vulnerability in the Rendering Engine component in Apryse WebViewer v11.1 and earlier allows attackers to execute arbitrary code via a crafted PDF file. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T19:44:13.000000Z"}, {"uuid": "019e7fb5-13c8-48f6-bcf6-b05962163fcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57069", "type": "seen", "source": "https://t.me/cvedetector/17355", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57069 - Apache Expand-Object Prototype Pollution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57069 \nPublished : Feb. 5, 2025, 10:15 p.m. | 2\u00a0hours, 1\u00a0minute ago \nDescription : A prototype pollution in the lib function of expand-object v0.4.2 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-06T01:51:07.000000Z"}, {"uuid": "9db4c234-71b0-4f93-801f-702ab331765a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57071", "type": "seen", "source": "https://t.me/cvedetector/17354", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57071 - \"PHP-Parser Prototype Pollution Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-57071 \nPublished : Feb. 5, 2025, 10:15 p.m. | 2\u00a0hours, 1\u00a0minute ago \nDescription : A prototype pollution in the lib.combine function of php-parser v3.2.1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-06T01:51:06.000000Z"}, {"uuid": "ed683f1a-f2bc-47b7-bce1-248461b562a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57084", "type": "seen", "source": "https://t.me/cvedetector/17353", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57084 - Dot-Properties Prototype Pollution DoS\", \n  \"Content\": \"CVE ID : CVE-2024-57084 \nPublished : Feb. 5, 2025, 10:15 p.m. | 2\u00a0hours, 1\u00a0minute ago \nDescription : A prototype pollution in the function lib.parse of dot-properties v1.0.1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-06T01:51:05.000000Z"}, {"uuid": "a31a9efa-945b-49f0-8f6d-c6e07a805b1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57520", "type": "seen", "source": "https://t.me/cvedetector/17352", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57520 - Asterisk Unix Secure Permissions Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57520 \nPublished : Feb. 5, 2025, 10:15 p.m. | 2\u00a0hours, 1\u00a0minute ago \nDescription : Insecure Permissions vulnerability in asterisk v22 allows a remote attacker to execute arbitrary code via the action_createconfig function \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-06T01:51:04.000000Z"}, {"uuid": "3e61683e-e02c-4b6f-93dd-d470444342fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57086", "type": "seen", "source": "https://t.me/cvedetector/17351", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57086 - \"Node-OPCUA Albania Condition Prototype Pollution DoS Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-57086 \nPublished : Feb. 5, 2025, 10:15 p.m. | 2\u00a0hours, 1\u00a0minute ago \nDescription : A prototype pollution in the function fieldsToJson of node-opcua-alarm-condition v2.134.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-06T01:51:04.000000Z"}, {"uuid": "d1646911-83d5-4dbd-b598-13ce331a548b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57079", "type": "seen", "source": "https://t.me/cvedetector/17345", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57079 - Zag-js Core Prototype Pollution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57079 \nPublished : Feb. 5, 2025, 10:15 p.m. | 2\u00a0hours, 1\u00a0minute ago \nDescription : A prototype pollution in the lib.deepMerge function of @zag-js/core v0.50.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-06T01:50:54.000000Z"}, {"uuid": "512b6882-9f2a-4581-ae36-5519f2b30f6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57598", "type": "seen", "source": "https://t.me/cvedetector/17344", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57598 - \"Bento4 Floating Point Denial of Service Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-57598 \nPublished : Feb. 5, 2025, 10:15 p.m. | 2\u00a0hours, 1\u00a0minute ago \nDescription : A floating point exception (divide-by-zero) vulnerability was discovered in Bento4 1.6.0-641 in function AP4_TfraAtom() of Ap4TfraAtom.cpp which allows a remote attacker to cause a denial of service vulnerability. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-06T01:50:53.000000Z"}, {"uuid": "9f8113e4-d1a2-46e5-98fe-27b93fdf615f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57699", "type": "seen", "source": "https://t.me/cvedetector/17343", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57699 - Netplex Json-smart Denial of Service (DoS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57699 \nPublished : Feb. 5, 2025, 10:15 p.m. | 2\u00a0hours, 1\u00a0minute ago \nDescription : A security issue was found in Netplex Json-smart 2.5.0 through 2.5.1. When loading a specially crafted JSON input, containing a large number of \u2019{\u2019, a stack exhaustion can be trigger, which could allow an attacker to cause a Denial of Service (DoS). This issue exists because of an incomplete fix for CVE-2023-1370. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-06T01:50:52.000000Z"}, {"uuid": "279a7f1c-bbb2-45ad-acf3-c5b3eaab7f99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57728", "type": "seen", "source": "MISP/f3b16ca9-f749-4169-9a68-b159e6aaf5ed", "content": "", "creation_timestamp": "2026-04-08T07:25:51.000000Z"}, {"uuid": "b8f4b8d3-5014-4b41-9cf0-42601f1819ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "seen", "source": "MISP/f3b16ca9-f749-4169-9a68-b159e6aaf5ed", "content": "", "creation_timestamp": "2026-04-08T07:25:52.000000Z"}, {"uuid": "6a43d6bd-a758-483c-9372-f850acdde8db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57726", "type": "seen", "source": "MISP/f3b16ca9-f749-4169-9a68-b159e6aaf5ed", "content": "", "creation_timestamp": "2026-04-08T07:25:53.000000Z"}, {"uuid": "4f3ec594-6bfc-4d73-99e6-0009d3fc2605", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57348", "type": "seen", "source": "https://t.me/cvedetector/20227", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57348 - PecanProject Pecan Cross Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57348 \nPublished : March 13, 2025, 2:15 p.m. | 1\u00a0hour, 41\u00a0minutes ago \nDescription : Cross Site Scripting vulnerability in PecanProject pecan v.1.7.2 allows a remote attacker to execute arbitrary code via the crafted payload to the hostname, sitegroupid, lat, lon and sitename parameters. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-13T17:17:32.000000Z"}, {"uuid": "18a489d6-0656-408a-9f0c-29d22cb78274", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5717", "type": "published-proof-of-concept", "source": "https://t.me/Kelvinseccommunity/730", "content": "\u041f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430 Logsign Unified SecOps\n*\nCVE: CVE-2024-5716 to CVE-2024-5722 \u0438 CVE-2024-5716 CVE-2024-5717\n*\nRCE + ByPass  (+ \u0448\u0430\u0431\u043b\u043e\u043d\u044b nuclei)\n*\nPOC exploits", "creation_timestamp": "2024-08-13T07:31:39.000000Z"}, {"uuid": "4baf5542-005b-49b1-82df-8f68845233f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5716", "type": "published-proof-of-concept", "source": "https://t.me/Kelvinseccommunity/730", "content": "\u041f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430 Logsign Unified SecOps\n*\nCVE: CVE-2024-5716 to CVE-2024-5722 \u0438 CVE-2024-5716 CVE-2024-5717\n*\nRCE + ByPass  (+ \u0448\u0430\u0431\u043b\u043e\u043d\u044b nuclei)\n*\nPOC exploits", "creation_timestamp": "2024-08-13T07:31:39.000000Z"}, {"uuid": "53cec3cd-1da8-4a27-b7d3-dbbdb4f6f439", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-57726", "type": "exploited", "source": "https://www.microsoft.com/en-us/security/blog/2026/04/06/storm-1175-focuses-gaze-on-vulnerable-web-facing-assets-in-high-tempo-medusa-ransomware-", "content": "", "creation_timestamp": "2026-04-07T04:00:00.000000Z"}, {"uuid": "fb29815a-4d88-4635-b320-cdc900c8e670", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-57727", "type": "exploited", "source": "https://www.microsoft.com/en-us/security/blog/2026/04/06/storm-1175-focuses-gaze-on-vulnerable-web-facing-assets-in-high-tempo-medusa-ransomware-", "content": "", "creation_timestamp": "2026-04-07T04:00:00.000000Z"}, {"uuid": "b9f5ae83-b38c-43d9-8ef3-6ccae2705dfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-57728", "type": "exploited", "source": "https://www.microsoft.com/en-us/security/blog/2026/04/06/storm-1175-focuses-gaze-on-vulnerable-web-facing-assets-in-high-tempo-medusa-ransomware-", "content": "", "creation_timestamp": "2026-04-07T04:00:00.000000Z"}, {"uuid": "7de33279-7f6e-4197-a789-2c3a72b1ea12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-57726", "type": "exploited", "source": "https://www.microsoft.com/en-us/security/blog/2026/04/06/storm-1175-focuses-gaze-on-vulnerable-web-facing-assets-in-high-tempo-medusa-ransomware-operations/", "content": "", "creation_timestamp": "2026-04-06T04:00:00.000000Z"}, {"uuid": "64004b89-124e-4879-a87d-097930a41d6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-57727", "type": "exploited", "source": "https://www.microsoft.com/en-us/security/blog/2026/04/06/storm-1175-focuses-gaze-on-vulnerable-web-facing-assets-in-high-tempo-medusa-ransomware-operations/", "content": "", "creation_timestamp": "2026-04-06T04:00:00.000000Z"}, {"uuid": "3d9e2e83-6a59-4cb2-a632-b86dd62c18f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-57728", "type": "exploited", "source": "https://www.microsoft.com/en-us/security/blog/2026/04/06/storm-1175-focuses-gaze-on-vulnerable-web-facing-assets-in-high-tempo-medusa-ransomware-operations/", "content": "", "creation_timestamp": "2026-04-06T04:00:00.000000Z"}, {"uuid": "90dcec6b-8d43-44fd-a8fc-67f3ff40bbc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5716", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8179", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-5716 Nuclei Template\nURL\uff1ahttps://github.com/j4nk3/CVE-2024-5716\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-08-06T09:45:49.000000Z"}, {"uuid": "c3bd27ec-10c3-4cdf-951a-1a54aee0d175", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5716", "type": "seen", "source": "https://t.me/GithubRedTeam/8181", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-5716 Nuclei Template\nURL\uff1ahttps://github.com/X-Projetion/CVE-2023-4596-OpenSSH-Multi-Checker\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-08-06T08:16:46.000000Z"}, {"uuid": "92fe7f48-1662-4a17-9591-fd822787079c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57492", "type": "seen", "source": "https://t.me/cvedetector/19958", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57492 - RedoxOS Relibc Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2024-57492 \nPublished : March 10, 2025, 2:15 p.m. | 57\u00a0minutes ago \nDescription : An issue in redoxOS relibc before commit 98aa4ea5 allows a local attacker to cause a denial of service via the round_up_to_page funciton. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-10T16:31:55.000000Z"}, {"uuid": "4ae7a340-3d5b-4765-9121-1511fae8fd7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57471", "type": "seen", "source": "https://t.me/cvedetector/15371", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57471 - H3C N12 Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57471 \nPublished : Jan. 14, 2025, 10:15 p.m. | 36\u00a0minutes ago \nDescription : H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the 2.4G wireless network processing function. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands by sending a POST request to /bin/webs. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T00:03:12.000000Z"}, {"uuid": "cb146d99-39fe-46e1-98b1-f664555ba581", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57046", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mjfrbm3ten2i", "content": "", "creation_timestamp": "2026-04-13T21:03:07.821976Z"}, {"uuid": "e242b63e-a779-46e3-b25e-b62dd9e13cfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57726", "type": "seen", "source": "https://thehackernews.com/2026/04/cisa-adds-4-exploited-flaws-to-kev-sets.html", "content": "", "creation_timestamp": "2026-04-25T03:08:00.000000Z"}, {"uuid": "f58b6b2b-c2d4-48ed-907c-b4d4c4948b0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57726", "type": "seen", "source": "https://gist.github.com/stone776/62caf070c1c841dbb439acee42f962a2", "content": "", "creation_timestamp": "2026-04-25T08:28:28.000000Z"}, {"uuid": "36efa532-2817-4894-a97c-5395b6dceb57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57728", "type": "seen", "source": "https://gist.github.com/stone776/62caf070c1c841dbb439acee42f962a2", "content": "", "creation_timestamp": "2026-04-25T08:28:28.000000Z"}, {"uuid": "97b3f91d-4d1e-48db-af3a-f6d5ef70c76f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57728", "type": "seen", "source": "MISP/f3b16ca9-f749-4169-9a68-b159e6aaf5ed", "content": "", "creation_timestamp": "2026-04-18T13:07:24.000000Z"}, {"uuid": "28b3b661-9bec-4e86-a58d-e18351dd5a2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "seen", "source": "MISP/f3b16ca9-f749-4169-9a68-b159e6aaf5ed", "content": "", "creation_timestamp": "2026-04-18T13:07:25.000000Z"}, {"uuid": "dd03fef0-149c-4ff4-831d-c720e68d8893", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57726", "type": "seen", "source": "MISP/f3b16ca9-f749-4169-9a68-b159e6aaf5ed", "content": "", "creation_timestamp": "2026-04-18T13:07:25.000000Z"}, {"uuid": "44d1d492-873a-409f-af18-b5acb8c34f62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57972", "type": "seen", "source": "https://t.me/cvedetector/19755", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57972 - Microsoft HoloLens 2 - Windows Holographic Remote Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2024-57972 \nPublished : March 6, 2025, 9:15 p.m. | 1\u00a0hour, 10\u00a0minutes ago \nDescription : A vulnerability in the pairing request method in Microsoft HoloLens 1 and 2 - Windows Holographic 10.0.17763.3046 through 10.0.22621.1244 allows remote attackers to cause a Denial of Service via the Device Portal framework. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-06T23:52:55.000000Z"}, {"uuid": "b122c74b-a123-41b2-a829-b1cde12f8870", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57026", "type": "seen", "source": "https://t.me/cvedetector/18816", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57026 - TawkTo Widget Cross Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-57026 \nPublished : Feb. 24, 2025, 6:15 p.m. | 45\u00a0minutes ago \nDescription : TawkTo Widget Version <=\nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-24T20:28:08.000000Z"}, {"uuid": "2e5614fd-a295-4942-925a-aef28e71952c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57726", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116460864002205112", "content": "", "creation_timestamp": "2026-04-24T17:29:18.764232Z"}, {"uuid": "c2cb9db4-a4f8-4493-b8d0-76c5ad5d564e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57728", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116460864002205112", "content": "", "creation_timestamp": "2026-04-24T17:29:18.864859Z"}, {"uuid": "b23c757a-2fa2-4b3a-b5dd-ffbf853518a2", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-57728", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8396106e-e701-4798-8c53-cb00bc2a2239", "content": "", "creation_timestamp": "2026-04-24T18:00:02.074080Z"}, {"uuid": "ac2ebebc-c02b-4d4b-bc9b-c0d2ae922bdd", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-57726", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5ff877db-95a7-464f-b073-733bf4094abd", "content": "", "creation_timestamp": "2026-04-24T18:00:02.170556Z"}, {"uuid": "311308eb-fc66-4975-9d11-8aff1ee561fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57726", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/6334750", "content": "", "creation_timestamp": "2026-04-24T19:38:31.850347Z"}, {"uuid": "277d4ee9-db1b-43ce-abad-241b20c51d9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57728", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/6334751", "content": "", "creation_timestamp": "2026-04-24T19:38:33.745822Z"}, {"uuid": "bc4bea99-5b22-40e7-beec-8496adc52d46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57401", "type": "seen", "source": "https://t.me/cvedetector/18544", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57401 - Uniclare Student Portal SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57401 \nPublished : Feb. 20, 2025, 3:15 p.m. | 16\u00a0minutes ago \nDescription : SQL Injection vulnerability in Uniclare Student portal v.2 and before allows a remote attacker to execute arbitrary code via the Forgot Password function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-20T17:19:55.000000Z"}, {"uuid": "8cae53cf-85db-47ca-b75c-d48cc5503845", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57176", "type": "seen", "source": "https://t.me/cvedetector/18671", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57176 - White-Jotter Directory Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57176 \nPublished : Feb. 21, 2025, 6:15 p.m. | 23\u00a0minutes ago \nDescription : An issue in the shiroFilter function of White-Jotter project v0.2.2 allows attackers to execute a directory traversal and access sensitive endpoints via a crafted URL. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-21T19:46:42.000000Z"}, {"uuid": "81f8dff4-b80c-47bd-a5da-0c0a148acbfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5705", "type": "seen", "source": "https://t.me/cvedetector/18504", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5705 - Hitachi Vantara Pentaho Business Analytics Server Authorization Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-5705 \nPublished : Feb. 19, 2025, 11:15 p.m. | 1\u00a0hour, 27\u00a0minutes ago \nDescription : The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions. (CWE-863)   \n  \n  \n  \n\u00a0  \n  \n  \n  \n\u00a0  \n  \n  \n  \nHitachi Vantara Pentaho Business Analytics Server versions before 10.2.0.0 and 9.3.0.9, including 8.3.x, have modules enabled by default that allow execution of system level processes.   \n  \n  \n  \n\u00a0  \n  \n  \n  \n  \n  \n  \n  \n  \nWhen access control checks are incorrectly applied, users can access data or perform actions that they should not be allowed to perform. This can lead to a wide range of problems, including information exposures and denial of service. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-20T02:16:51.000000Z"}, {"uuid": "76b48058-f923-490c-811b-773389c737be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57716", "type": "seen", "source": "https://t.me/cvedetector/18565", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57716 - Trenoncourt AutoQueryable Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57716 \nPublished : Feb. 20, 2025, 5:15 p.m. | 16\u00a0minutes ago \nDescription : An issue in trenoncourt AutoQueryable v.1.7.0 allows a remote attacker to obtain sensitive information via the Unselectable function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-20T19:00:32.000000Z"}, {"uuid": "680da8ce-032a-4a05-a52e-8d525b92e6f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57262", "type": "seen", "source": "https://t.me/cvedetector/18400", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57262 - Barebox ext4fs Read Symlink Integer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57262 \nPublished : Feb. 19, 2025, 2:15 a.m. | 1\u00a0hour, 58\u00a0minutes ago \nDescription : In barebox before 2025.01.0, ext4fs_read_symlink has an integer overflow for zalloc (adding one to an le32 variable) via a crafted ext4 filesystem with an inode size of 0xffffffff, resulting in a malloc of zero and resultant memory overwrite, a related issue to CVE-2024-57256. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-19T05:21:59.000000Z"}, {"uuid": "29951d47-5595-4e38-a230-617fd940fe98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57256", "type": "seen", "source": "https://t.me/cvedetector/18400", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57262 - Barebox ext4fs Read Symlink Integer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57262 \nPublished : Feb. 19, 2025, 2:15 a.m. | 1\u00a0hour, 58\u00a0minutes ago \nDescription : In barebox before 2025.01.0, ext4fs_read_symlink has an integer overflow for zalloc (adding one to an le32 variable) via a crafted ext4 filesystem with an inode size of 0xffffffff, resulting in a malloc of zero and resultant memory overwrite, a related issue to CVE-2024-57256. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-19T05:21:59.000000Z"}, {"uuid": "eb087bc0-54e1-43ad-9425-77b52e5f44d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57261", "type": "seen", "source": "https://t.me/cvedetector/18399", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57261 - Barebox Integer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57261 \nPublished : Feb. 19, 2025, 2:15 a.m. | 1\u00a0hour, 58\u00a0minutes ago \nDescription : In barebox before 2025.01.0, request2size in common/dlmalloc.c has an integer overflow, a related issue to CVE-2024-57258. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-19T05:21:58.000000Z"}, {"uuid": "2ac3ba17-72b4-4177-b66e-067be8470928", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57259", "type": "seen", "source": "https://t.me/cvedetector/18391", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57259 - Das U-Boot sqfs_search_dir Heap Memory Corruption Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57259 \nPublished : Feb. 18, 2025, 11:15 p.m. | 51\u00a0minutes ago \nDescription : sqfs_search_dir in Das U-Boot before 2025.01-rc1 exhibits an off-by-one error and resultant heap memory corruption for squashfs directory listing because the path separator is not considered in a size calculation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-19T01:11:08.000000Z"}, {"uuid": "e58a2f16-617b-4662-bbfa-9eae9ab80805", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57258", "type": "seen", "source": "https://t.me/cvedetector/18390", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57258 - Das U-Boot Integer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57258 \nPublished : Feb. 18, 2025, 11:15 p.m. | 51\u00a0minutes ago \nDescription : Integer overflows in memory allocation in Das U-Boot before 2025.01-rc1 occur for a crafted squashfs filesystem via sbrk, via request2size, or because ptrdiff_t is mishandled on x86_64. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-19T01:11:07.000000Z"}, {"uuid": "6a120b20-0d3b-43ef-93a1-520c02c6c91b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57256", "type": "seen", "source": "https://t.me/cvedetector/18389", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57256 - Das U-Boot Integer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57256 \nPublished : Feb. 18, 2025, 11:15 p.m. | 51\u00a0minutes ago \nDescription : An integer overflow in ext4fs_read_symlink in Das U-Boot before 2025.01-rc1 occurs for zalloc (adding one to an le32 variable) via a crafted ext4 filesystem with an inode size of 0xffffffff, resulting in a malloc of zero and resultant memory overwrite. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-19T01:11:06.000000Z"}, {"uuid": "8ebe4d7e-60c2-4b1a-b349-c31a81bf4fa1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57255", "type": "seen", "source": "https://t.me/cvedetector/18388", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57255 - Das U-Boot Squashfs Integer Overflow\", \n  \"Content\": \"CVE ID : CVE-2024-57255 \nPublished : Feb. 18, 2025, 11:15 p.m. | 51\u00a0minutes ago \nDescription : An integer overflow in sqfs_resolve_symlink in Das U-Boot before 2025.01-rc1 occurs via a crafted squashfs filesystem with an inode size of 0xffffffff, resulting in a malloc of zero and resultant memory overwrite. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-19T01:11:06.000000Z"}, {"uuid": "030e3fd2-9208-4739-a4c7-9ddac6672dba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57254", "type": "seen", "source": "https://t.me/cvedetector/18387", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57254 - Das U-Boot Symlink Integer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57254 \nPublished : Feb. 18, 2025, 11:15 p.m. | 51\u00a0minutes ago \nDescription : An integer overflow in sqfs_inode_size in Das U-Boot before 2025.01-rc1 occurs in the symlink size calculation via a crafted squashfs filesystem. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-19T01:11:05.000000Z"}, {"uuid": "86f02c24-6f49-40a8-9fdb-f38cfd058fa2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57050", "type": "seen", "source": "https://t.me/cvedetector/18330", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57050 - TP-Link WR840N Authentication Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57050 \nPublished : Feb. 18, 2025, 3:15 p.m. | 29\u00a0minutes ago \nDescription : A vulnerability in the TP-Link WR840N v6 router with firmware version 0.9.1 4.16 and earlier permits unauthorized individuals to bypass the authentication of some interfaces under the /cgi directory.When adding Referer:  to the the request, it will be recognized as passing the authentication. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-18T16:49:00.000000Z"}, {"uuid": "53be5a1e-cef2-4176-9a6e-22c2735a502f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57049", "type": "seen", "source": "https://t.me/cvedetector/18329", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57049 - TP-Link Archer c20 Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-57049 \nPublished : Feb. 18, 2025, 3:15 p.m. | 29\u00a0minutes ago \nDescription : A vulnerability in the TP-Link Archer c20 router with firmware version V6.6_230412 and earlier permits unauthorized individuals to bypass the authentication of some interfaces under the /cgi directory. When adding Referer:  to the the request, it will be recognized as passing the authentication. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-18T16:48:56.000000Z"}, {"uuid": "6e76d598-cd87-4663-a54e-0bcd05fdabeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57257", "type": "seen", "source": "https://t.me/cvedetector/18393", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57257 - Das U-Boot Squashfs Stack Consumption Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2024-57257 \nPublished : Feb. 18, 2025, 11:15 p.m. | 51\u00a0minutes ago \nDescription : A stack consumption issue in sqfs_size in Das U-Boot before 2025.01-rc1 occurs via a crafted squashfs filesystem with deep symlink nesting. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-19T01:11:12.000000Z"}, {"uuid": "35eb8247-7941-4195-b68a-26180e55d240", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57258", "type": "seen", "source": "https://t.me/cvedetector/18399", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57261 - Barebox Integer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57261 \nPublished : Feb. 19, 2025, 2:15 a.m. | 1\u00a0hour, 58\u00a0minutes ago \nDescription : In barebox before 2025.01.0, request2size in common/dlmalloc.c has an integer overflow, a related issue to CVE-2024-57258. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-19T05:21:58.000000Z"}, {"uuid": "752404ae-e6ae-4db0-8519-7ba26ba54616", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57963", "type": "seen", "source": "https://t.me/cvedetector/18311", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57963 - USB-CONVERTERCABLE DRIVER DLL Loading Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57963 \nPublished : Feb. 18, 2025, 7:15 a.m. | 2\u00a0hours, 17\u00a0minutes ago \nDescription : Insecure Loading of Dynamic Link Libraries have been discovered in USB-CONVERTERCABLE DRIVER, which could allow local attackers to potentially disclose information or execute arbitray code on affected systems.  \nThis issue affects USB-CONVERTERCABLE DRIVER:. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-18T10:57:50.000000Z"}, {"uuid": "f0064148-e017-486c-ad4c-a22c7231faa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57482", "type": "seen", "source": "https://t.me/cvedetector/15374", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57482 - H3C N12 Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57482 \nPublished : Jan. 14, 2025, 10:15 p.m. | 36\u00a0minutes ago \nDescription : H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the 5G wireless network processing function. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands by sending a POST request to /bin/webs. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T00:03:14.000000Z"}, {"uuid": "42e2c9cd-8d90-4838-9cef-58f22afc3c22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57056", "type": "seen", "source": "https://t.me/cvedetector/18345", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57056 - WombatDialer Session Impersonation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57056 \nPublished : Feb. 18, 2025, 7:15 p.m. | 39\u00a0minutes ago \nDescription : Incorrect cookie session handling in WombatDialer before 25.02 results in the full session identity being written to system logs and could be used by a malicious attacker to impersonate an existing user session. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-18T20:59:43.000000Z"}, {"uuid": "d5c64762-d510-447b-b6ac-b2c20ab971ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57055", "type": "seen", "source": "https://t.me/cvedetector/18344", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57055 - WombatDialer Server-Side Access Control Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-57055 \nPublished : Feb. 18, 2025, 7:15 p.m. | 39\u00a0minutes ago \nDescription : Server-Side Access Control Bypass vulnerability in WombatDialer before 25.02 could allow unauthorized users to potentially call certain services without the necessary access level. This issue is limited to services used by the client (not the general-use JSON services) and requires reverse engineering of the proprietary serialization protocol, making it difficult to exploit. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-18T20:59:42.000000Z"}, {"uuid": "30139249-e0d6-4846-8237-fea3501be727", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57479", "type": "seen", "source": "https://t.me/cvedetector/15373", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57479 - \"H3C N12 Buffer Overflow Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-57479 \nPublished : Jan. 14, 2025, 10:15 p.m. | 36\u00a0minutes ago \nDescription : H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the mac address update function. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands by sending a POST request to /bin/webs. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T00:03:14.000000Z"}, {"uuid": "de18bc64-a929-4141-b646-ad8c6317ad44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57046", "type": "seen", "source": "https://t.me/cvedetector/18328", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57046 - Netgear DGN2200 Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-57046 \nPublished : Feb. 18, 2025, 3:15 p.m. | 29\u00a0minutes ago \nDescription : A vulnerability in the Netgear DGN2200 router with firmware version v1.0.0.46 and earlier permits unauthorized individuals to bypass the authentication. When adding \"?x=1.gif\" to the the requested url, it will be recognized as passing the authentication. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-18T16:48:55.000000Z"}, {"uuid": "c140bc6b-44b8-4454-8e39-cd90fdf6f4f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57045", "type": "seen", "source": "https://t.me/cvedetector/18327", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57045 - D-Link DIR-859 Authentication Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57045 \nPublished : Feb. 18, 2025, 3:15 p.m. | 29\u00a0minutes ago \nDescription : A vulnerability in the D-Link DIR-859 router with firmware version A3 1.05 and earlier permits unauthorized individuals to bypass the authentication. An attacker can obtain a user name and password by forging a post request to the / getcfg.php page. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-18T16:48:55.000000Z"}, {"uuid": "0a736543-75ab-47f0-bc64-6483e8d12919", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57964", "type": "seen", "source": "https://t.me/cvedetector/18312", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57964 - HVAC Energy Saving Program DLL Loading Remote Code Execution/Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57964 \nPublished : Feb. 18, 2025, 7:15 a.m. | 2\u00a0hours, 17\u00a0minutes ago \nDescription : Insecure Loading of Dynamic Link Libraries have been discovered in HVAC Energy Saving Program, which could allow local attackers to potentially disclose information or execute arbitray code on affected systems.  \nThis issue affects HVAC Energy Saving Program:. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-18T10:57:51.000000Z"}, {"uuid": "0fe96b9c-dd3d-49b4-9690-8da88622bf23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57277", "type": "seen", "source": "https://t.me/cvedetector/16345", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57277 - InnoShop SVG File Upload Reflected XSS\", \n  \"Content\": \"CVE ID : CVE-2024-57277 \nPublished : Jan. 24, 2025, 8:15 p.m. | 40\u00a0minutes ago \nDescription : InnoShop V.0.3.8 and below is vulnerable to Cross Site Scripting (XSS) via SVG file upload. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-24T21:56:25.000000Z"}, {"uuid": "7fb36f82-1ae6-4904-909e-aa243d586cdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57095", "type": "seen", "source": "https://t.me/cvedetector/16344", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57095 - Go-CMS SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57095 \nPublished : Jan. 24, 2025, 8:15 p.m. | 40\u00a0minutes ago \nDescription : SQL injection vulnerability in Go-CMS v.1.1.10 allows a remote attacker to execute arbitrary code via a crafted payload. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-24T21:56:25.000000Z"}, {"uuid": "3f2707dc-5f44-4ea1-a1ce-523363c92237", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57041", "type": "seen", "source": "https://t.me/cvedetector/16343", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57041 - NodeBB Persistent Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-57041 \nPublished : Jan. 24, 2025, 8:15 p.m. | 40\u00a0minutes ago \nDescription : A persistent cross-site scripting (XSS) vulnerability in NodeBB v3.11.0 allows remote attackers to store arbitrary code in the 'about me' section of their profile. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-24T21:56:24.000000Z"}, {"uuid": "d44b9cfa-9dcc-447b-a823-1c950552aa4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57480", "type": "seen", "source": "https://t.me/cvedetector/15372", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57480 - H3C N12 Router Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57480 \nPublished : Jan. 14, 2025, 10:15 p.m. | 36\u00a0minutes ago \nDescription : H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the AP configuration function. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands by sending a POST request to /bin/webs. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T00:03:13.000000Z"}, {"uuid": "d3a33a9a-e110-4530-9fe7-dea5631ec72d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57423", "type": "seen", "source": "https://t.me/cvedetector/18964", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57423 - CloudClassroom-PHP Cross Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-57423 \nPublished : Feb. 26, 2025, 9:15 p.m. | 1\u00a0hour, 33\u00a0minutes ago \nDescription : A Cross Site Scripting vulnerability in CloudClassroom-PHP Project v1.0 allows a remote attacker to execute arbitrary code via the exid parameter of the assessment function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-27T00:19:24.000000Z"}, {"uuid": "cccc31ac-abc1-4a48-a1fa-ac98bda3a933", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57040", "type": "seen", "source": "https://t.me/cvedetector/18961", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57040 - TP-Link TL-WR845N Root Hardcoded Password Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57040 \nPublished : Feb. 26, 2025, 10:15 p.m. | 33\u00a0minutes ago \nDescription : TL-WR845N(UN)_V4_200909 and TL-WR845N(UN)_V4_190219 was discovered to contain a hardcoded password for the root account which can be obtained via a brute force attack. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-27T00:19:22.000000Z"}, {"uuid": "cef63b42-9524-4d09-af10-85dfb8f1069b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5764", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/9036", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-5764 exploitation script\nURL\uff1ahttps://github.com/fin3ss3g0d/CVE-2024-5764\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-11-14T20:10:20.000000Z"}, {"uuid": "828ae09f-0d07-42ef-a861-45a5c9940941", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57685", "type": "seen", "source": "https://t.me/cvedetector/18846", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57685 - Apache Sparkshop Phar File Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57685 \nPublished : Feb. 24, 2025, 11:15 p.m. | 1\u00a0hour, 54\u00a0minutes ago \nDescription : An issue in sparkshop v.1.1.7 and before allows a remote attacker to execute arbitrary code via a crafted phar file. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-25T02:19:33.000000Z"}, {"uuid": "f862a0a3-a8be-4f97-bc8d-bc1d8b06fe25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57184", "type": "seen", "source": "https://t.me/cvedetector/16279", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57184 - Vulnerability: \"GPAC Heap Buffer Overflow\"\", \n  \"Content\": \"CVE ID : CVE-2024-57184 \nPublished : Jan. 24, 2025, 2:15 p.m. | 38\u00a0minutes ago \nDescription : An issue was discovered in GPAC v0.8.0, as demonstrated by MP4Box. It contains a heap-based buffer overflow in gf_m2ts_process_pmt in media_tools/mpegts.c:2163 that can cause a denial of service (DOS) via a crafted MP4 file. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-24T16:04:36.000000Z"}, {"uuid": "6a5161ab-39c4-4d50-8040-05c1bfda7501", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57608", "type": "seen", "source": "https://t.me/cvedetector/18834", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57608 - Via Browser RCE\", \n  \"Content\": \"CVE ID : CVE-2024-57608 \nPublished : Feb. 24, 2025, 10:15 p.m. | 54\u00a0minutes ago \nDescription : An issue in Via Browser 6.1.0 allows a a remote attacker to execute arbitrary code via the mark.via.Shell component. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-25T00:39:08.000000Z"}, {"uuid": "c41dacac-31a6-4064-a7ed-31d82e9f8fe9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57809", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1333", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57809\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nPCI: imx6: Fix suspend/resume support on i.MX6QDL\n\nThe suspend/resume functionality is currently broken on the i.MX6QDL\nplatform, as documented in the NXP errata (ERR005723):\n\n  https://www.nxp.com/docs/en/errata/IMX6DQCE.pdf\n\nThis patch addresses the issue by sharing most of the suspend/resume\nsequences used by other i.MX devices, while avoiding modifications to\ncritical registers that disrupt the PCIe functionality. It targets the\nsame problem as the following downstream commit:\n\n  https://github.com/nxp-imx/linux-imx/commit/4e92355e1f79d225ea842511fcfd42b343b32995\n\nUnlike the downstream commit, this patch also resets the connected PCIe\ndevice if possible. Without this reset, certain drivers, such as ath10k\nor iwlwifi, will crash on resume. The device reset is also done by the\ndriver on other i.MX platforms, making this patch consistent with\nexisting practices.\n\nUpon resuming, the kernel will hang and display an error. Here's an\nexample of the error encountered with the ath10k driver:\n\n  ath10k_pci 0000:01:00.0: Unable to change power state from D3hot to D0, device inaccessible\n  Unhandled fault: imprecise external abort (0x1406) at 0x0106f944\n\nWithout this patch, suspend/resume will fail on i.MX6QDL devices if a\nPCIe device is connected.\n\n[kwilczynski: commit log, added tag for stable releases]\n\ud83d\udccf Published: 2025-01-11T14:08:56.044Z\n\ud83d\udccf Modified: 2025-01-11T14:08:56.044Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/ac43ea3d27a8f9beadf3af66c9ea4a566ebfff1f\n2. https://git.kernel.org/stable/c/0a726f542d7c8cc0f9c5ed7df5a4bd4b59ac21b3", "creation_timestamp": "2025-01-11T15:05:31.000000Z"}, {"uuid": "333e5e2d-d4c9-479a-bb07-18ca5557b296", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57241", "type": "seen", "source": "https://t.me/cvedetector/17784", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57241 - Dedecms URL Redirect Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57241 \nPublished : Feb. 11, 2025, 10:15 p.m. | 2\u00a0hours, 7\u00a0minutes ago \nDescription : Dedecms 5.71sp1 and earlier is vulnerable to URL redirect. In the web application, a logic error does not judge the input GET request resulting in URL redirection. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T01:48:37.000000Z"}, {"uuid": "eb8594c5-50f1-46b7-bc20-e797e691510c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57777", "type": "seen", "source": "https://t.me/cvedetector/17782", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57777 - Ianproxy Directory Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57777 \nPublished : Feb. 11, 2025, 10:15 p.m. | 2\u00a0hours, 7\u00a0minutes ago \nDescription : Directory Traversal vulnerability in Ianproxy v.0.1 and before allows a remote attacker to obtain sensitive information \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T01:48:00.000000Z"}, {"uuid": "b78dd0f2-2d44-48ee-9742-dafc1b3554b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57000", "type": "seen", "source": "https://t.me/cvedetector/17773", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57000 - Anyscale Inc Ray Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57000 \nPublished : Feb. 11, 2025, 11:15 p.m. | 1\u00a0hour, 7\u00a0minutes ago \nDescription : An issue in Anyscale Inc Ray between v.2.9.3 and v.2.40.0 allows a remote attacker to execute arbitrary code via a crafted script. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T01:45:40.000000Z"}, {"uuid": "c5c36162-545b-409b-a18b-601b4ad6e4cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57357", "type": "seen", "source": "https://t.me/cvedetector/17527", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57357 - TPLINK TL-WPA 8630 Router Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57357 \nPublished : Feb. 7, 2025, 10:15 p.m. | 1\u00a0hour, 10\u00a0minutes ago \nDescription : An issue in TPLINK TL-WPA 8630 TL-WPA8630(US)_V2_2.0.4 Build 20230427 allows a remote attacker to execute arbitrary code via function sub_4256CC, which allows command injection by injecting 'devpwd'. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-08T00:41:52.000000Z"}, {"uuid": "6a25a2ac-ed16-4fa6-8dc0-d018f0c36fb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57279", "type": "seen", "source": "https://t.me/cvedetector/17526", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57279 - OpenLDAP LDAP User Manager Reflected Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-57279 \nPublished : Feb. 7, 2025, 10:15 p.m. | 1\u00a0hour, 10\u00a0minutes ago \nDescription : A reflected Cross-Site Scripting (XSS) vulnerability has been identified in the LDAP User Manager <=\nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-08T00:41:51.000000Z"}, {"uuid": "000ea8ce-faf6-46af-a5ae-1132f596f236", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57684", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2004", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57684\n\ud83d\udd39 Description: An access control issue in the component formDMZ.cgi of D-Link 816A2_FWv1.10CNB05_R1B011D88210 allows unauthenticated attackers to set the DMZ service of the device via a crafted POST request.\n\ud83d\udccf Published: 2025-01-16T00:00:00\n\ud83d\udccf Modified: 2025-01-16T18:52:05.736078\n\ud83d\udd17 References:\n1. https://www.dlink.com/en/security-bulletin/\n2. https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Unauthorized_Vulnerability/D-Link/DIR-816/formDMZ.md", "creation_timestamp": "2025-01-16T18:56:13.000000Z"}, {"uuid": "e900df4d-e0c1-4b11-b118-cb035ccf6dd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57177", "type": "seen", "source": "https://t.me/cvedetector/17607", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57177 - \"Couch-Auth Host Header Injection SSTI Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-57177 \nPublished : Feb. 10, 2025, 8:15 p.m. | 1\u00a0hour, 28\u00a0minutes ago \nDescription : A host header injection vulnerability exists in the NPM package of perfood/couch-auth <=\nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-10T22:57:01.000000Z"}, {"uuid": "3f9e7b5b-fb4b-44c5-9b2c-bc61c9b6f22e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57673", "type": "seen", "source": "https://t.me/cvedetector/17419", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57673 - Floodlight Denial of Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57673 \nPublished : Feb. 6, 2025, 8:15 p.m. | 26\u00a0minutes ago \nDescription : An issue in floodlight v1.2 allows a local attacker to cause a denial of service via the Topology Manager module and Linkdiscovery module \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-06T21:55:23.000000Z"}, {"uuid": "306231f7-395a-42a8-84cc-ca7c6e101bb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57178", "type": "seen", "source": "https://t.me/cvedetector/17603", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57178 - Apache Stock-Forecaster SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-57178 \nPublished : Feb. 10, 2025, 8:15 p.m. | 1\u00a0hour, 28\u00a0minutes ago \nDescription : An SQL injection vulnerability exists in Stock-Forecaster <=01-04-2020.\nSeverity: 5.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-10T22:56:55.000000Z"}, {"uuid": "b0c1672d-078b-4b4e-9e3e-a386be3cc7a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57950", "type": "seen", "source": "https://t.me/cvedetector/17579", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57950 - AMD Display Zero Division Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57950 \nPublished : Feb. 10, 2025, 4:15 p.m. | 1\u00a0hour, 27\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ndrm/amd/display: Initialize denominator defaults to 1  \n  \n[WHAT & HOW]  \nVariables, used as denominators and maybe not assigned to other values,  \nshould be initialized to non-zero to avoid DIVIDE_BY_ZERO, as reported  \nby Coverity.  \n  \n(cherry picked from commit e2c4c6c10542ccfe4a0830bb6c9fd5b177b7bbb7) \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-10T18:45:56.000000Z"}, {"uuid": "b5c3b1e0-db54-47d3-9c88-4202c66cdd93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57606", "type": "seen", "source": "https://t.me/cvedetector/17528", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57606 - \"JeecgBoot SQL Injection Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-57606 \nPublished : Feb. 7, 2025, 10:15 p.m. | 1\u00a0hour, 10\u00a0minutes ago \nDescription : SQL injection vulnerability in Beijing Guoju Information Technology Co., Ltd JeecgBoot v.3.7.2 allows a remote attacker to obtain sensitive information via the getTotalData component. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-08T00:41:52.000000Z"}, {"uuid": "7614ecd7-a9d7-4c9e-86c9-520df7de9002", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57427", "type": "seen", "source": "https://t.me/cvedetector/17412", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57427 - PHPJabbers Cinema Booking System Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57427 \nPublished : Feb. 6, 2025, 5:15 p.m. | 1\u00a0hour, 25\u00a0minutes ago \nDescription : PHPJabbers Cinema Booking System v2.0 is vulnerable to reflected cross-site scripting (XSS). Multiple endpoints improperly handle user input, allowing malicious scripts to execute in a victim\u2019s browser. Attackers can craft malicious links to steal session cookies or conduct phishing attacks. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-06T20:15:11.000000Z"}, {"uuid": "fb716f84-7ac5-4105-86e9-9bed1cf73ecb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57430", "type": "seen", "source": "https://t.me/cvedetector/17411", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57430 - PHPJabbers Cinema Booking System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57430 \nPublished : Feb. 6, 2025, 5:15 p.m. | 1\u00a0hour, 25\u00a0minutes ago \nDescription : An SQL injection vulnerability in the pjActionGetUser function of PHPJabbers Cinema Booking System v2.0 allows attackers to manipulate database queries via the column parameter. Exploiting this flaw can lead to unauthorized information disclosure, privilege escalation, or database manipulation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-06T20:15:07.000000Z"}, {"uuid": "fb85a0a1-8059-4f8e-9ded-0c23c323db15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57429", "type": "seen", "source": "https://t.me/cvedetector/17410", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57429 - PHPJabbers Cinema Booking System CSRF Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-57429 \nPublished : Feb. 6, 2025, 5:15 p.m. | 1\u00a0hour, 25\u00a0minutes ago \nDescription : A cross-site request forgery (CSRF) vulnerability in the pjActionUpdate function of PHPJabbers Cinema Booking System v2.0 allows remote attackers to escalate privileges by tricking an authenticated admin into submitting an unauthorized request. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-06T20:15:06.000000Z"}, {"uuid": "b678356c-022b-423c-9c84-317cf21c372b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57428", "type": "seen", "source": "https://t.me/cvedetector/17409", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57428 - \"PHPJabbers Cinema Booking System Stored Cross-Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-57428 \nPublished : Feb. 6, 2025, 5:15 p.m. | 1\u00a0hour, 25\u00a0minutes ago \nDescription : A stored cross-site scripting (XSS) vulnerability in PHPJabbers Cinema Booking System v2.0 exists due to unsanitized input in file upload fields (event_img, seat_maps) and seat number configurations (number[new_X] in pjActionCreate). Attackers can inject persistent JavaScript, leading to phishing, malware injection, and session hijacking. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-06T20:15:05.000000Z"}, {"uuid": "0fcac737-fbf8-49d0-a410-3ac5937afa1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57278", "type": "seen", "source": "https://t.me/cvedetector/17525", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57278 - QingScan Reflected Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-57278 \nPublished : Feb. 7, 2025, 10:15 p.m. | 1\u00a0hour, 10\u00a0minutes ago \nDescription : A reflected Cross-Site Scripting (XSS) vulnerability exists in /webscan/sqlmap/index.html in QingScan <=v1.8.0.\nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-08T00:41:47.000000Z"}, {"uuid": "4e0fdbf2-3d94-4418-bcd3-d28ef81a3402", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57949", "type": "seen", "source": "https://t.me/cvedetector/17549", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57949 - Linux kernel GIC-v3-its Infinite Recursion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57949 \nPublished : Feb. 9, 2025, 12:15 p.m. | 22\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nirqchip/gic-v3-its: Don't enable interrupts in its_irq_set_vcpu_affinity()  \n  \nThe following call-chain leads to enabling interrupts in a nested interrupt  \ndisabled section:  \n  \nirq_set_vcpu_affinity()  \n  irq_get_desc_lock()  \n     raw_spin_lock_irqsave() <---<---<---\nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-09T14:19:37.000000Z"}, {"uuid": "95e0afe0-df5f-40b1-a660-6456bc3c3565", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57707", "type": "seen", "source": "https://t.me/cvedetector/17498", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57707 - DataEase Privilege Escalation Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2024-57707 \nPublished : Feb. 7, 2025, 4:15 p.m. | 59\u00a0minutes ago \nDescription : An issue in DataEase v1 allows an attacker to execute arbitrary code via the user account and password components. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-07T18:50:15.000000Z"}, {"uuid": "639125be-7f51-4f7f-914f-7ec7fac7da3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57249", "type": "seen", "source": "https://t.me/cvedetector/17497", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57249 - Gleamtech FileVista Access Control Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-57249 \nPublished : Feb. 7, 2025, 4:15 p.m. | 59\u00a0minutes ago \nDescription : Incorrect Access Control in the Preview Function of Gleamtech FileVista 9.2.0.0 allows remote attackers to gain unauthorized access via exploiting a vulnerability in access control mechanisms by removing authentication-related HTTP headers, such as the Cookie header, in the request. This bypasses the authentication process and grants attackers access to sensitive image files without proper login credentials. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-07T18:50:12.000000Z"}, {"uuid": "4c4127d1-aa0d-4ef3-991f-ad273a164e27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57248", "type": "seen", "source": "https://t.me/cvedetector/17496", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57248 - Gleamtech FileVista Directory Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57248 \nPublished : Feb. 7, 2025, 4:15 p.m. | 59\u00a0minutes ago \nDescription : Directory Traversal in File Upload in Gleamtech FileVista 9.2.0.0 allows remote attackers to achieve Code Execution, Information Disclosure, and Escalation of Privileges via injecting malicious payloads in HTTP requests to manipulate file paths, bypass access controls, and upload malicious files. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-07T18:50:11.000000Z"}, {"uuid": "9d31f503-a2f3-4f21-aa7b-2ba00e19f008", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57392", "type": "seen", "source": "https://t.me/cvedetector/17433", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57392 - Proftpd Buffer Overflow Remote Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-57392 \nPublished : Feb. 6, 2025, 10:15 p.m. | 29\u00a0minutes ago \nDescription : Buffer Overflow vulnerability in Proftpd commit 4017eff8 allows a remote attacker to execute arbitrary code and can cause a Denial of Service (DoS) on the FTP service by sending a maliciously crafted message to the ProFTPD service port. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-07T00:25:56.000000Z"}, {"uuid": "568b1406-4237-4f65-81cb-b21b4898c446", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57085", "type": "seen", "source": "https://t.me/cvedetector/17350", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57085 - Stryker-Mutator Util Prototype Pollution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57085 \nPublished : Feb. 5, 2025, 10:15 p.m. | 2\u00a0hours, 1\u00a0minute ago \nDescription : A prototype pollution in the function deepMerge of @stryker-mutator/util v8.6.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-06T01:51:00.000000Z"}, {"uuid": "cd3567ca-bfbd-466a-b0aa-8f08153a2c33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57078", "type": "seen", "source": "https://t.me/cvedetector/17349", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57078 - Apache Cli-util Prototype Pollution Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2024-57078 \nPublished : Feb. 5, 2025, 10:15 p.m. | 2\u00a0hours, 1\u00a0minute ago \nDescription : A prototype pollution in the lib.merge function of cli-util v1.1.27 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-06T01:50:59.000000Z"}, {"uuid": "b2bae5ab-d92d-478e-b13c-53aa3b683808", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57082", "type": "seen", "source": "https://t.me/cvedetector/17348", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57082 - Rpldy Uploader Prototype Pollution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57082 \nPublished : Feb. 5, 2025, 10:15 p.m. | 2\u00a0hours, 1\u00a0minute ago \nDescription : A prototype pollution in the lib.createUploader function of @rpldy/uploader v1.8.1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-06T01:50:59.000000Z"}, {"uuid": "b5e532e5-8621-4996-8eb1-6d57233e70ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57080", "type": "seen", "source": "https://t.me/cvedetector/17347", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57080 - VXE-Table Prototype Pollution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57080 \nPublished : Feb. 5, 2025, 10:15 p.m. | 2\u00a0hours, 1\u00a0minute ago \nDescription : A prototype pollution in the lib.install function of vxe-table v4.8.10 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-06T01:50:58.000000Z"}, {"uuid": "d346f084-43bc-48b3-87a0-d79176f019d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57081", "type": "seen", "source": "https://t.me/cvedetector/17346", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57081 - Vulnerability in Underscore Contrib Prototype Pollution Leading to Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2024-57081 \nPublished : Feb. 5, 2025, 10:15 p.m. | 2\u00a0hours, 1\u00a0minute ago \nDescription : A prototype pollution in the lib.fromQuery function of underscore-contrib v0.3.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-06T01:50:57.000000Z"}, {"uuid": "9e41aea2-556e-4c69-96af-4741b03961b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57609", "type": "seen", "source": "https://t.me/cvedetector/17432", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57609 - Kanaries Inc Pygwalker Arbitrary Code Execution and Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-57609 \nPublished : Feb. 6, 2025, 10:15 p.m. | 29\u00a0minutes ago \nDescription : An issue in Kanaries Inc Pygwalker before v.0.4.9.9 allows a remote attacker to obtain sensitive information and execute arbitrary code via the redirect_path parameter of the login redirection function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-07T00:25:55.000000Z"}, {"uuid": "70f4efa6-2f5d-49f0-8148-d9867306de5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57668", "type": "seen", "source": "https://t.me/cvedetector/17431", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57668 - Apache Code-projects Shopping Portal File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57668 \nPublished : Feb. 6, 2025, 7:15 p.m. | 1\u00a0hour, 27\u00a0minutes ago \nDescription : In Code-projects Shopping Portal v1.0, the insert-product.php page has an arbitrary file upload vulnerability. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-06T21:55:38.000000Z"}, {"uuid": "70da3dd3-0d8b-43ea-aabd-a4b889516399", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57523", "type": "seen", "source": "https://t.me/cvedetector/17428", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57523 - SourceCodester Packers and Movers Management System CSRF Account Creation\", \n  \"Content\": \"CVE ID : CVE-2024-57523 \nPublished : Feb. 6, 2025, 7:15 p.m. | 1\u00a0hour, 27\u00a0minutes ago \nDescription : Cross Site Request Forgery (CSRF) in Users.php in SourceCodester Packers and Movers Management System 1.0 allows attackers to create unauthorized admin accounts via crafted requests sent to an authenticated admin user. \nSeverity: 4.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-06T21:55:36.000000Z"}, {"uuid": "39d8942d-f374-4ed2-998e-9546115ff929", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57969", "type": "seen", "source": "Telegram/m77sqcLVO9m2szrutpNVVz5IihOFU7jAY6puRab0nzxlZWF2", "content": "", "creation_timestamp": "2025-02-14T21:08:29.000000Z"}, {"uuid": "4184e83d-b1cb-48c1-a55d-4a75b9e7cbbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57587", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3689", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57587\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-31T22:15:13.300\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://github.com/Elymaro/CVE/blob/main/EasyVirt/CVE-2024-57587.md", "creation_timestamp": "2025-01-31T23:24:54.000000Z"}, {"uuid": "0477519c-da01-4432-9907-abf4fccb9533", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57698", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13905", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57698\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in modernwms v.1.0 allows an attacker view the MD5 hash of the administrator password and other attributes without authentication, even after initial configuration and password change. This happens due to excessive exposure of information and the lack of adequate access control on the /user/list?culture=en-us endpoint.\n\ud83d\udccf Published: 2025-04-29T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-29T20:05:11.346Z\n\ud83d\udd17 References:\n1. https://github.com/rodolfomarianocy/xpl-ModernWMS", "creation_timestamp": "2025-04-29T20:12:24.000000Z"}, {"uuid": "38ac4032-b182-43bf-8757-c732c5b8588d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57426", "type": "seen", "source": "https://t.me/cvedetector/17425", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57426 - NetMod VPN Client DLL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57426 \nPublished : Feb. 6, 2025, 8:15 p.m. | 26\u00a0minutes ago \nDescription : NetMod VPN Client 5.3.1 is vulnerable to DLL injection, allowing an attacker to execute arbitrary code by placing a malicious DLL in a directory where the application loads dependencies. This vulnerability arises due to the improper validation of dynamically loaded libraries. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-06T21:55:30.000000Z"}, {"uuid": "088773d7-6967-4200-a3be-86026fc1cbd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57672", "type": "seen", "source": "https://t.me/cvedetector/17417", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57672 - Floodlight DoS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57672 \nPublished : Feb. 6, 2025, 8:15 p.m. | 26\u00a0minutes ago \nDescription : An issue in floodlight v1.2 allows a local attacker to cause a denial of service via the Topology Manager module, Topologylnstance module, Routing module. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-06T21:55:22.000000Z"}, {"uuid": "8ee7dc67-7945-4179-929e-04b9344d438c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57599", "type": "seen", "source": "https://t.me/cvedetector/17413", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57599 - DouPHP Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57599 \nPublished : Feb. 6, 2025, 5:15 p.m. | 1\u00a0hour, 25\u00a0minutes ago \nDescription : Cross Site Scripting vulnerability in DouPHP v.1.8 Release 20231203 allows attackers to execute arbitrary code via a crafted payload injected into the description parameter in /admin/article.php \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-06T20:15:11.000000Z"}, {"uuid": "114a4732-5353-47b4-9c9c-1e96c8afc867", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57971", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4574", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57971\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-16T04:15:23.077\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://github.com/KnowageLabs/Knowage-Server/commit/f7d0362f737e1b0db1cc9cc95b1236d62d83dd0c\n2. https://github.com/KnowageLabs/Knowage-Server/compare/v8.1.29...v8.1.30\n3. https://spagobi.readthedocs.io", "creation_timestamp": "2025-02-16T05:11:31.000000Z"}, {"uuid": "4bed99d3-5ec7-4880-bf11-97227f1f7c8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57972", "type": "seen", "source": "Telegram/KhJYBPMyf7ivpLg7k1zB4adNMR2fXa2aaWaeGGxpsrocCA6y", "content": "", "creation_timestamp": "2025-03-08T04:34:55.000000Z"}, {"uuid": "3f80ff32-f247-47fd-9244-c85202a07a75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57610", "type": "seen", "source": "https://t.me/cvedetector/17397", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57610 - Sylius Rate Limiting Memory Corruption Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57610 \nPublished : Feb. 6, 2025, 6:15 p.m. | 25\u00a0minutes ago \nDescription : A rate limiting issue in Sylius v2.0.2 allows a remote attacker to perform unrestricted brute-force attacks on user accounts, significantly increasing the risk of account compromise and denial of service for legitimate users. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-06T20:14:50.000000Z"}, {"uuid": "f60c5401-375c-42fd-aab9-9fdca0f93a52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57957", "type": "seen", "source": "https://t.me/cvedetector/17393", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57957 - Apache Stash Log Information Exposure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57957 \nPublished : Feb. 6, 2025, 1:15 p.m. | 1\u00a0hour, 20\u00a0minutes ago \nDescription : Vulnerability of improper log information control in the UI framework module  \nImpact: Successful exploitation of this vulnerability may affect service confidentiality. \nSeverity: 6.6 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-06T16:04:03.000000Z"}, {"uuid": "ab2706ba-b2ce-4641-b420-c831a4ace96c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57956", "type": "seen", "source": "https://t.me/cvedetector/17392", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57956 - Cisco Interpreters Out-of-Bounds Read Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57956 \nPublished : Feb. 6, 2025, 1:15 p.m. | 1\u00a0hour, 20\u00a0minutes ago \nDescription : Out-of-bounds read vulnerability in the interpreter string module  \nImpact: Successful exploitation of this vulnerability may affect availability. \nSeverity: 2.8 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-06T16:04:03.000000Z"}, {"uuid": "55e13c9c-c9e6-4d96-aa1b-32586532a469", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57955", "type": "seen", "source": "https://t.me/cvedetector/17391", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57955 - WordPress Gallery Module Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57955 \nPublished : Feb. 6, 2025, 1:15 p.m. | 1\u00a0hour, 20\u00a0minutes ago \nDescription : Arbitrary write vulnerability in the Gallery module   \nImpact: Successful exploitation of this vulnerability may affect service confidentiality. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-06T16:03:59.000000Z"}, {"uuid": "423bd42d-3209-4734-8cc6-f69f8f919f43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57954", "type": "seen", "source": "https://t.me/cvedetector/17390", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57954 - Apache Media Library Permission Verification Vulnerability (Information Disclosure)\", \n  \"Content\": \"CVE ID : CVE-2024-57954 \nPublished : Feb. 6, 2025, 1:15 p.m. | 1\u00a0hour, 20\u00a0minutes ago \nDescription : Permission verification vulnerability in the media library module  \nImpact: Successful exploitation of this vulnerability may affect service confidentiality. \nSeverity: 6.2 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-06T16:03:58.000000Z"}, {"uuid": "2871726c-2ce6-4c17-b747-89a6eff8b6be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57962", "type": "seen", "source": "https://t.me/cvedetector/17389", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57962 - Microsoft VPN Unvalidated Input Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57962 \nPublished : Feb. 6, 2025, 1:15 p.m. | 1\u00a0hour, 20\u00a0minutes ago \nDescription : Vulnerability of incomplete verification information in the VPN service module  \nImpact: Successful exploitation of this vulnerability may affect availability. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-06T16:03:57.000000Z"}, {"uuid": "d51d27db-a1b3-4ee3-8b87-efd656e1f61e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57961", "type": "seen", "source": "https://t.me/cvedetector/17388", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57961 - Cisco Router Emcom OOB Write Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57961 \nPublished : Feb. 6, 2025, 1:15 p.m. | 1\u00a0hour, 20\u00a0minutes ago \nDescription : Out-of-bounds write vulnerability in the emcom module  \nImpact: Successful exploitation of this vulnerability may cause features to perform abnormally. \nSeverity: 6.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-06T16:03:56.000000Z"}, {"uuid": "d074df36-7f20-405c-9a64-8a3ac0f2cd19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57960", "type": "seen", "source": "https://t.me/cvedetector/17387", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57960 - Android ExternalStorageProvider Module Input Verification Remote Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57960 \nPublished : Feb. 6, 2025, 1:15 p.m. | 1\u00a0hour, 20\u00a0minutes ago \nDescription : Input verification vulnerability in the ExternalStorageProvider module  \nImpact: Successful exploitation of this vulnerability may affect service confidentiality. \nSeverity: 7.7 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-06T16:03:56.000000Z"}, {"uuid": "6935d2a2-d394-48e5-9ae3-d6dd7349850a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57959", "type": "seen", "source": "https://t.me/cvedetector/17386", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57959 - Cisco Networking Equipment Use-After-Free Display Module Memory Corruption\", \n  \"Content\": \"CVE ID : CVE-2024-57959 \nPublished : Feb. 6, 2025, 1:15 p.m. | 1\u00a0hour, 20\u00a0minutes ago \nDescription : Use-After-Free (UAF) vulnerability in the display module  \nImpact: Successful exploitation of this vulnerability may cause features to perform abnormally. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-06T16:03:52.000000Z"}, {"uuid": "74e35656-9574-4654-b13e-5da7348cd7cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57958", "type": "seen", "source": "https://t.me/cvedetector/17385", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57958 - Fujitsu Flashcache Robustness Tool Out-of-Bounds Read\", \n  \"Content\": \"CVE ID : CVE-2024-57958 \nPublished : Feb. 6, 2025, 1:15 p.m. | 1\u00a0hour, 20\u00a0minutes ago \nDescription : Out-of-bounds array read vulnerability in the FFRT module  \nImpact: Successful exploitation of this vulnerability may cause features to perform abnormally. \nSeverity: 5.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-06T16:03:51.000000Z"}, {"uuid": "ba3aa196-203e-47a3-bb6d-29e36b214366", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57386", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2849", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57386\n\ud83d\udd39 Description: Cross Site Scripting vulnerability in Wallos v.2.41.0 allows a remote attacker to execute arbitrary code via the profile picture function.\n\ud83d\udccf Published: 2025-01-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-23T21:32:24.543Z\n\ud83d\udd17 References:\n1. https://github.com/PawaritSanguanpang/CVEs/tree/main/Wallos/CVE-2024-57386", "creation_timestamp": "2025-01-23T22:03:49.000000Z"}, {"uuid": "017b2642-cf44-4039-8d00-4c1f8c9a3ec5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57473", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1638", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57473\n\ud83d\udd39 Description: H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the mac address editing function. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands by sending a POST request to /bin/webs.\n\ud83d\udccf Published: 2025-01-14T00:00:00\n\ud83d\udccf Modified: 2025-01-14T22:21:05.603501\n\ud83d\udd17 References:\n1. http://h3c.com\n2. https://gist.github.com/XiaoCurry/85ae28b7437d24d9c531c970612d3bd8", "creation_timestamp": "2025-01-14T23:09:42.000000Z"}, {"uuid": "a1d440d4-d20f-4ef3-9218-b7a1abaf63c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5769", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/947", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-5769\n\ud83d\udd39 Description: The MIMO Woocommerce Order Tracking plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several functions in all versions up to, and including, 1.0.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to add, update, and delete shipper tracking settings.\n\ud83d\udccf Published: 2025-01-09T11:10:56.814Z\n\ud83d\udccf Modified: 2025-01-09T11:10:56.814Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/47c666b1-1ac2-4764-bbee-385ec321a580?source=cve\n2. https://plugins.trac.wordpress.org/browser/mimo-woocommerce-order-tracking/tags/1.0.2/mimo-woocommerce-order-tracking.php#L264\n3. https://plugins.trac.wordpress.org/browser/mimo-woocommerce-order-tracking/tags/1.0.2/mimo-woocommerce-order-tracking.php#L292\n4. https://plugins.trac.wordpress.org/browser/mimo-woocommerce-order-tracking/tags/1.0.2/mimo-woocommerce-order-tracking.php#L322\n5. https://plugins.trac.wordpress.org/browser/mimo-woocommerce-order-tracking/tags/1.0.2/mimo-woocommerce-order-tracking.php#L137", "creation_timestamp": "2025-01-09T12:16:38.000000Z"}, {"uuid": "337cbfc7-c036-4750-8b6d-a797ef693534", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57726", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1882", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57726\n\ud83d\udd39 Description: SimpleHelp remote support software v5.5.7 and before has a vulnerability that allows low-privileges technicians to create API keys with excessive permissions. These API keys can be used to escalate privileges to the server admin role.\n\ud83d\udccf Published: 2025-01-15T00:00:00\n\ud83d\udccf Modified: 2025-01-15T22:45:19.312287\n\ud83d\udd17 References:\n1. https://www.horizon3.ai/attack-research/disclosures/critical-vulnerabilities-in-simplehelp-remote-support-software/\n2. https://simple-help.com/kb---security-vulnerabilities-01-2025#security-vulnerabilities-in-simplehelp-5-5-7-and-earlier", "creation_timestamp": "2025-01-15T22:55:09.000000Z"}, {"uuid": "3bb065e2-55b1-4694-ae9a-d0a88d72d791", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1881", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57727\n\ud83d\udd39 Description: SimpleHelp remote support software v5.5.7 and before is vulnerable to multiple path traversal vulnerabilities that enable unauthenticated remote attackers to download arbitrary files from the SimpleHelp host via crafted HTTP requests. These files include server configuration files containing various secrets and hashed user passwords.\n\ud83d\udccf Published: 2025-01-15T00:00:00\n\ud83d\udccf Modified: 2025-01-15T22:46:02.402205\n\ud83d\udd17 References:\n1. https://www.horizon3.ai/attack-research/disclosures/critical-vulnerabilities-in-simplehelp-remote-support-software/\n2. https://simple-help.com/kb---security-vulnerabilities-01-2025#security-vulnerabilities-in-simplehelp-5-5-7-and-earlier", "creation_timestamp": "2025-01-15T22:55:08.000000Z"}, {"uuid": "b1d3fe2e-05ea-40e5-9f2b-4933d71a733e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57728", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1880", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57728\n\ud83d\udd39 Description: SimpleHelp remote support software v5.5.7 and before allows admin users to upload arbitrary files anywhere on the file system by uploading a crafted zip file (i.e. zip slip). This can be exploited to execute arbitrary code on the host in the context of the SimpleHelp server user.\n\ud83d\udccf Published: 2025-01-15T00:00:00\n\ud83d\udccf Modified: 2025-01-15T22:47:06.340758\n\ud83d\udd17 References:\n1. https://www.horizon3.ai/attack-research/disclosures/critical-vulnerabilities-in-simplehelp-remote-support-software/\n2. https://simple-help.com/kb---security-vulnerabilities-01-2025#security-vulnerabilities-in-simplehelp-5-5-7-and-earlier", "creation_timestamp": "2025-01-15T22:55:07.000000Z"}, {"uuid": "fa7a6d4b-0ea3-461b-9911-5be225393a23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57776", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1981", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57776\n\ud83d\udd39 Description: A cross-site scripting (XSS) vulnerability in the /apply/getEditPage?view interface of JFinalOA before v2025.01.01 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.\n\ud83d\udccf Published: 2025-01-16T00:00:00\n\ud83d\udccf Modified: 2025-01-16T17:50:45.116639\n\ud83d\udd17 References:\n1. https://gitee.com/r1bbit/JFinalOA/issues/IBHUS8", "creation_timestamp": "2025-01-16T17:55:33.000000Z"}, {"uuid": "9990a428-1cce-4c0c-81fc-08f7889c9b47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57774", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1990", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57774\n\ud83d\udd39 Description: A cross-site scripting (XSS) vulnerability in the getBusinessUploadListPage?busid interface of JFinalOA before v2025.01.01 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.\n\ud83d\udccf Published: 2025-01-16T00:00:00\n\ud83d\udccf Modified: 2025-01-16T17:37:12.120032\n\ud83d\udd17 References:\n1. https://gitee.com/r1bbit/JFinalOA/issues/IBHUQQ", "creation_timestamp": "2025-01-16T17:55:46.000000Z"}, {"uuid": "e34a667e-aff7-49c6-ad33-91f244b38bab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57773", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1988", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57773\n\ud83d\udd39 Description: A cross-site scripting (XSS) vulnerability in the openSelectManyUserPage?orgid interface of JFinalOA before v2025.01.01 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.\n\ud83d\udccf Published: 2025-01-16T00:00:00\n\ud83d\udccf Modified: 2025-01-16T17:40:18.774574\n\ud83d\udd17 References:\n1. https://gitee.com/r1bbit/JFinalOA/issues/IBHUQ9", "creation_timestamp": "2025-01-16T17:55:41.000000Z"}, {"uuid": "406bb230-83a4-4bd2-8c52-16d72cf08b84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57823", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1131", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57823\n\ud83d\udd39 Description: In Raptor RDF Syntax Library through 2.0.16, there is an integer underflow when normalizing a URI with the turtle parser in raptor_uri_normalize_path().\n\ud83d\udccf Published: 2025-01-10T00:00:00\n\ud83d\udccf Modified: 2025-01-10T13:21:44.019Z\n\ud83d\udd17 References:\n1. https://github.com/pedrib/PoC/blob/master/fuzzing/raptor-fuzz.md\n2. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1067896\n3. https://github.com/dajobe/raptor/issues/70", "creation_timestamp": "2025-01-10T14:05:31.000000Z"}, {"uuid": "f2eaff6a-1034-4e95-aa1a-bfc11ea6c2d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57822", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1130", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57822\n\ud83d\udd39 Description: In Raptor RDF Syntax Library through 2.0.16, there is a heap-based buffer over-read when parsing triples with the nquads parser in raptor_ntriples_parse_term_internal().\n\ud83d\udccf Published: 2025-01-10T00:00:00\n\ud83d\udccf Modified: 2025-01-10T13:24:20.261Z\n\ud83d\udd17 References:\n1. https://github.com/pedrib/PoC/blob/master/fuzzing/raptor-fuzz.md\n2. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1067896\n3. https://github.com/dajobe/raptor/issues/70", "creation_timestamp": "2025-01-10T14:05:26.000000Z"}, {"uuid": "b2d7d0f4-6c08-4697-acfe-c195423f6a91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57687", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1129", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57687\n\ud83d\udd39 Description: An OS Command Injection vulnerability was found in /landrecordsys/admin/dashboard.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the \"Cookie\" GET request parameter.\n\ud83d\udccf Published: 2025-01-10T00:00:00\n\ud83d\udccf Modified: 2025-01-10T13:40:31.733362\n\ud83d\udd17 References:\n1. https://github.com/Santoshcyber1/CVE-wirteup/blob/main/Phpgurukul/Land%20record/Command%20Injection.pdf", "creation_timestamp": "2025-01-10T14:05:21.000000Z"}, {"uuid": "14ea34f0-b29f-4d31-81a0-1924b18de64a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57686", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1128", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57686\n\ud83d\udd39 Description: A Cross Site Scripting (XSS) vulnerability was found in /landrecordsys/admin/contactus.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the \"pagetitle\" parameter.\n\ud83d\udccf Published: 2025-01-10T00:00:00\n\ud83d\udccf Modified: 2025-01-10T13:48:50.336293\n\ud83d\udd17 References:\n1. https://github.com/Santoshcyber1/CVE-wirteup/blob/main/Phpgurukul/Land%20record/Reflected%20Cross%20Site%20Scripting.pdf", "creation_timestamp": "2025-01-10T14:05:15.000000Z"}, {"uuid": "167d0635-c5b2-4bdc-b405-ed97f01fe09e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57798", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1299", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57798\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req()\n\nWhile receiving an MST up request message from one thread in\ndrm_dp_mst_handle_up_req(), the MST topology could be removed from\nanother thread via drm_dp_mst_topology_mgr_set_mst(false), freeing\nmst_primary and setting drm_dp_mst_topology_mgr::mst_primary to NULL.\nThis could lead to a NULL deref/use-after-free of mst_primary in\ndrm_dp_mst_handle_up_req().\n\nAvoid the above by holding a reference for mst_primary in\ndrm_dp_mst_handle_up_req() while it's used.\n\nv2: Fix kfreeing the request if getting an mst_primary reference fails.\n\ud83d\udccf Published: 2025-01-11T12:39:48.212Z\n\ud83d\udccf Modified: 2025-01-11T12:39:48.212Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/f61b2e5e7821f868d6afc22382a66a30ee780ba0\n2. https://git.kernel.org/stable/c/9735d40f5fde9970aa46e828ecc85c32571d58a2\n3. https://git.kernel.org/stable/c/ce55818b2d3a999f886af91679589e4644ff1dc8\n4. https://git.kernel.org/stable/c/e54b00086f7473dbda1a7d6fc47720ced157c6a8", "creation_timestamp": "2025-01-11T13:05:57.000000Z"}, {"uuid": "482f881d-5edc-42ed-807b-1beada7db353", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57878", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1317", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57878\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\narm64: ptrace: fix partial SETREGSET for NT_ARM_FPMR\n\nCurrently fpmr_set() doesn't initialize the temporary 'fpmr' variable,\nand a SETREGSET call with a length of zero will leave this\nuninitialized. Consequently an arbitrary value will be written back to\ntarget->thread.uw.fpmr, potentially leaking up to 64 bits of memory from\nthe kernel stack. The read is limited to a specific slot on the stack,\nand the issue does not provide a write mechanism.\n\nFix this by initializing the temporary value before copying the regset\nfrom userspace, as for other regsets (e.g. NT_PRSTATUS, NT_PRFPREG,\nNT_ARM_SYSTEM_CALL). In the case of a zero-length write, the existing\ncontents of FPMR will be retained.\n\nBefore this patch:\n\n| # ./fpmr-test\n| Attempting to write NT_ARM_FPMR::fpmr = 0x900d900d900d900d\n| SETREGSET(nt=0x40e, len=8) wrote 8 bytes\n|\n| Attempting to read NT_ARM_FPMR::fpmr\n| GETREGSET(nt=0x40e, len=8) read 8 bytes\n| Read NT_ARM_FPMR::fpmr = 0x900d900d900d900d\n|\n| Attempting to write NT_ARM_FPMR (zero length)\n| SETREGSET(nt=0x40e, len=0) wrote 0 bytes\n|\n| Attempting to read NT_ARM_FPMR::fpmr\n| GETREGSET(nt=0x40e, len=8) read 8 bytes\n| Read NT_ARM_FPMR::fpmr = 0xffff800083963d50\n\nAfter this patch:\n\n| # ./fpmr-test\n| Attempting to write NT_ARM_FPMR::fpmr = 0x900d900d900d900d\n| SETREGSET(nt=0x40e, len=8) wrote 8 bytes\n|\n| Attempting to read NT_ARM_FPMR::fpmr\n| GETREGSET(nt=0x40e, len=8) read 8 bytes\n| Read NT_ARM_FPMR::fpmr = 0x900d900d900d900d\n|\n| Attempting to write NT_ARM_FPMR (zero length)\n| SETREGSET(nt=0x40e, len=0) wrote 0 bytes\n|\n| Attempting to read NT_ARM_FPMR::fpmr\n| GETREGSET(nt=0x40e, len=8) read 8 bytes\n| Read NT_ARM_FPMR::fpmr = 0x900d900d900d900d\n\ud83d\udccf Published: 2025-01-11T14:49:04.088Z\n\ud83d\udccf Modified: 2025-01-11T14:49:04.088Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/8ab73c34e3c5b580721696665eabd799346bc50b\n2. https://git.kernel.org/stable/c/f5d71291841aecfe5d8435da2dfa7f58ccd18bc8", "creation_timestamp": "2025-01-11T15:04:27.000000Z"}, {"uuid": "756f2d30-a6ad-47db-909e-3b36f903924c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57224", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1204", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57224\n\ud83d\udd39 Description: Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_do_enr_pin_wps function.\n\ud83d\udccf Published: 2025-01-10T00:00:00\n\ud83d\udccf Modified: 2025-01-10T17:23:39.926224\n\ud83d\udd17 References:\n1. https://github.com/yanggao017/vuln/blob/main/Linksys/E7350/CI_3_apcli_do_enr_pin_wps/README.md", "creation_timestamp": "2025-01-10T18:04:08.000000Z"}, {"uuid": "75d1ecde-838d-4f0b-a1db-e195a45f84fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57223", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1203", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57223\n\ud83d\udd39 Description: Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_wps_gen_pincode function.\n\ud83d\udccf Published: 2025-01-10T00:00:00\n\ud83d\udccf Modified: 2025-01-10T17:25:12.937682\n\ud83d\udd17 References:\n1. https://github.com/yanggao017/vuln/blob/main/Linksys/E7350/CI_6_apcli_wps_gen_pincode/README.md", "creation_timestamp": "2025-01-10T18:04:04.000000Z"}, {"uuid": "78dcb977-80c4-4b88-a57f-cb8b4e0b6795", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57222", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1201", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57222\n\ud83d\udd39 Description: Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_cancel_wps function.\n\ud83d\udccf Published: 2025-01-10T00:00:00\n\ud83d\udccf Modified: 2025-01-10T17:27:07.945327\n\ud83d\udd17 References:\n1. https://github.com/yanggao017/vuln/blob/main/Linksys/E7350/CI_5_apcli_cancel_wps/README.md", "creation_timestamp": "2025-01-10T18:03:58.000000Z"}, {"uuid": "74d27401-11fc-43bd-a791-4f44c2ca621c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57226", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1207", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57226\n\ud83d\udd39 Description: Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the iface parameter in the vif_enable function.\n\ud83d\udccf Published: 2025-01-10T00:00:00\n\ud83d\udccf Modified: 2025-01-10T17:19:32.852251\n\ud83d\udd17 References:\n1. https://github.com/yanggao017/vuln/blob/main/Linksys/E7350/CI_2_vif_enable/README.md", "creation_timestamp": "2025-01-10T18:04:25.000000Z"}, {"uuid": "7f5cd72f-7a6f-4889-a536-a8cef54f7884", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57225", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1205", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57225\n\ud83d\udd39 Description: Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the devname parameter in the reset_wifi function.\n\ud83d\udccf Published: 2025-01-10T00:00:00\n\ud83d\udccf Modified: 2025-01-10T17:22:24.258579\n\ud83d\udd17 References:\n1. https://github.com/yanggao017/vuln/blob/main/Linksys/E7350/CI_7_reset_wifi/README.md", "creation_timestamp": "2025-01-10T18:04:10.000000Z"}, {"uuid": "137db207-de43-411f-90a1-14839df9dfa5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57874", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1321", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57874\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\narm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL\n\nCurrently tagged_addr_ctrl_set() doesn't initialize the temporary 'ctrl'\nvariable, and a SETREGSET call with a length of zero will leave this\nuninitialized. Consequently tagged_addr_ctrl_set() will consume an\narbitrary value, potentially leaking up to 64 bits of memory from the\nkernel stack. The read is limited to a specific slot on the stack, and\nthe issue does not provide a write mechanism.\n\nAs set_tagged_addr_ctrl() only accepts values where bits [63:4] zero and\nrejects other values, a partial SETREGSET attempt will randomly succeed\nor fail depending on the value of the uninitialized value, and the\nexposure is significantly limited.\n\nFix this by initializing the temporary value before copying the regset\nfrom userspace, as for other regsets (e.g. NT_PRSTATUS, NT_PRFPREG,\nNT_ARM_SYSTEM_CALL). In the case of a zero-length write, the existing\nvalue of the tagged address ctrl will be retained.\n\nThe NT_ARM_TAGGED_ADDR_CTRL regset is only visible in the\nuser_aarch64_view used by a native AArch64 task to manipulate another\nnative AArch64 task. As get_tagged_addr_ctrl() only returns an error\nvalue when called for a compat task, tagged_addr_ctrl_get() and\ntagged_addr_ctrl_set() should never observe an error value from\nget_tagged_addr_ctrl(). Add a WARN_ON_ONCE() to both to indicate that\nsuch an error would be unexpected, and error handlnig is not missing in\neither case.\n\ud83d\udccf Published: 2025-01-11T14:47:10.665Z\n\ud83d\udccf Modified: 2025-01-11T14:47:10.665Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/1152dd13845efde5554f80c7e1233bae1d26bd3e\n2. https://git.kernel.org/stable/c/1c176f5155ee6161fee6f416b64aa50394d3f220\n3. https://git.kernel.org/stable/c/1370cf3eb5495d70e00547598583a4cd45b40b99\n4. https://git.kernel.org/stable/c/96035c0093db258975b8887676afe59a64c34a72\n5. https://git.kernel.org/stable/c/abd614bbfcee73247495bd9472da8f85ac83546e\n6. https://git.kernel.org/stable/c/ca62d90085f4af36de745883faab9f8a7cbb45d3", "creation_timestamp": "2025-01-11T15:04:50.000000Z"}, {"uuid": "041e7dbf-3c72-439c-bfd0-6644827fc6b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57658", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1431", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57658\n\ud83d\udd39 Description: An issue in the sql_tree_hash_1 component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.\n\ud83d\udccf Published: 2025-01-14T00:00:00\n\ud83d\udccf Modified: 2025-01-14T00:21:44.848298\n\ud83d\udd17 References:\n1. https://github.com/openlink/virtuoso-opensource/issues/1209", "creation_timestamp": "2025-01-14T01:07:54.000000Z"}, {"uuid": "3edec838-be42-4eec-8348-52d8f481a516", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57648", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1440", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57648\n\ud83d\udd39 Description: An issue in the itc_set_param_row component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.\n\ud83d\udccf Published: 2025-01-14T00:00:00\n\ud83d\udccf Modified: 2025-01-14T00:21:31.737266\n\ud83d\udd17 References:\n1. https://github.com/openlink/virtuoso-opensource/issues/1195", "creation_timestamp": "2025-01-14T01:08:18.000000Z"}, {"uuid": "6c08a7b4-e8a9-45a2-b3bd-dc94a3381be8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57650", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1439", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57650\n\ud83d\udd39 Description: An issue in the qi_inst_state_free component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.\n\ud83d\udccf Published: 2025-01-14T00:00:00\n\ud83d\udccf Modified: 2025-01-14T00:21:32.566145\n\ud83d\udd17 References:\n1. https://github.com/openlink/virtuoso-opensource/issues/1204", "creation_timestamp": "2025-01-14T01:08:16.000000Z"}, {"uuid": "f39215f9-b074-41ed-bf85-780977387e5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57652", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1438", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57652\n\ud83d\udd39 Description: An issue in the numeric_to_dv component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.\n\ud83d\udccf Published: 2025-01-14T00:00:00\n\ud83d\udccf Modified: 2025-01-14T00:21:34.224930\n\ud83d\udd17 References:\n1. https://github.com/openlink/virtuoso-opensource/issues/1198", "creation_timestamp": "2025-01-14T01:08:11.000000Z"}, {"uuid": "54a8bfad-bf82-48a8-9691-8944fd7f6fd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57653", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1437", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57653\n\ud83d\udd39 Description: An issue in the qst_vec_set_copy component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.\n\ud83d\udccf Published: 2025-01-14T00:00:00\n\ud83d\udccf Modified: 2025-01-14T00:21:35.162510\n\ud83d\udd17 References:\n1. https://github.com/openlink/virtuoso-opensource/issues/1208", "creation_timestamp": "2025-01-14T01:08:09.000000Z"}, {"uuid": "af95ad5f-2d08-45b0-983f-225c2bf7ac4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57647", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1442", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57647\n\ud83d\udd39 Description: An issue in the row_insert_cast component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.\n\ud83d\udccf Published: 2025-01-14T00:00:00\n\ud83d\udccf Modified: 2025-01-14T00:21:25.429724\n\ud83d\udd17 References:\n1. https://github.com/openlink/virtuoso-opensource/issues/1207", "creation_timestamp": "2025-01-14T01:08:26.000000Z"}, {"uuid": "d84c46a2-8815-4db0-922c-e8aba62aaaa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57649", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1441", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57649\n\ud83d\udd39 Description: An issue in the qst_vec_set component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.\n\ud83d\udccf Published: 2025-01-14T00:00:00\n\ud83d\udccf Modified: 2025-01-14T00:21:29.854634\n\ud83d\udd17 References:\n1. https://github.com/openlink/virtuoso-opensource/issues/1206", "creation_timestamp": "2025-01-14T01:08:23.000000Z"}, {"uuid": "ad30d7ad-357f-44d2-b2e8-6090e045a759", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57640", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1449", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57640\n\ud83d\udd39 Description: An issue in the dc_add_int component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.\n\ud83d\udccf Published: 2025-01-14T00:00:00\n\ud83d\udccf Modified: 2025-01-14T00:21:17.534227\n\ud83d\udd17 References:\n1. https://github.com/openlink/virtuoso-opensource/issues/1184", "creation_timestamp": "2025-01-14T01:08:41.000000Z"}, {"uuid": "abc292fc-5cd9-4aee-aaa8-c227365d408d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57641", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1448", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57641\n\ud83d\udd39 Description: An issue in the sqlexp component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.\n\ud83d\udccf Published: 2025-01-14T00:00:00\n\ud83d\udccf Modified: 2025-01-14T00:21:18.229996\n\ud83d\udd17 References:\n1. https://github.com/openlink/virtuoso-opensource/issues/1183", "creation_timestamp": "2025-01-14T01:08:39.000000Z"}, {"uuid": "2bcf7b20-366b-4394-817f-71a6c8cf8616", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57643", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1446", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57643\n\ud83d\udd39 Description: An issue in the box_deserialize_string component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.\n\ud83d\udccf Published: 2025-01-14T00:00:00\n\ud83d\udccf Modified: 2025-01-14T00:21:21.033752\n\ud83d\udd17 References:\n1. https://github.com/openlink/virtuoso-opensource/issues/1181", "creation_timestamp": "2025-01-14T01:08:35.000000Z"}, {"uuid": "881dc5d6-7ab7-4bd7-85e0-176f4c7cc4b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57579", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2048", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57579\n\ud83d\udd39 Description: Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the limitSpeedUp parameter in the formSetClientState function.\n\ud83d\udccf Published: 2025-01-16T00:00:00\n\ud83d\udccf Modified: 2025-01-16T20:25:07.096686\n\ud83d\udd17 References:\n1. https://github.com/qijiale/Tenda/tree/main/6", "creation_timestamp": "2025-01-16T20:56:07.000000Z"}, {"uuid": "745f5a49-3459-4514-82a3-16352b5ca4ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57581", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2047", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57581\n\ud83d\udd39 Description: Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the firewallEn parameter in the formSetFirewallCfg function.\n\ud83d\udccf Published: 2025-01-16T00:00:00\n\ud83d\udccf Modified: 2025-01-16T20:25:09.237677\n\ud83d\udd17 References:\n1. https://github.com/qijiale/Tenda/tree/main/8", "creation_timestamp": "2025-01-16T20:56:07.000000Z"}, {"uuid": "e3cc2e4f-a3ac-435b-a08c-c63fb48365ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57838", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1332", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57838\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\ns390/entry: Mark IRQ entries to fix stack depot warnings\n\nThe stack depot filters out everything outside of the top interrupt\ncontext as an uninteresting or irrelevant part of the stack traces. This\nhelps with stack trace de-duplication, avoiding an explosion of saved\nstack traces that share the same IRQ context code path but originate\nfrom different randomly interrupted points, eventually exhausting the\nstack depot.\n\nFiltering uses in_irqentry_text() to identify functions within the\n.irqentry.text and .softirqentry.text sections, which then become the\nlast stack trace entries being saved.\n\nWhile __do_softirq() is placed into the .softirqentry.text section by\ncommon code, populating .irqentry.text is architecture-specific.\n\nCurrently, the .irqentry.text section on s390 is empty, which prevents\nstack depot filtering and de-duplication and could result in warnings\nlike:\n\nStack depot reached limit capacity\nWARNING: CPU: 0 PID: 286113 at lib/stackdepot.c:252 depot_alloc_stack+0x39a/0x3c8\n\nwith PREEMPT and KASAN enabled.\n\nFix this by moving the IO/EXT interrupt handlers from .kprobes.text into\nthe .irqentry.text section and updating the kprobes blacklist to include\nthe .irqentry.text section.\n\nThis is done only for asynchronous interrupts and explicitly not for\nprogram checks, which are synchronous and where the context beyond the\nprogram check is important to preserve. Despite machine checks being\nsomewhat in between, they are extremely rare, and preserving context\nwhen possible is also of value.\n\nSVCs and Restart Interrupts are not relevant, one being always at the\nboundary to user space and the other being a one-time thing.\n\nIRQ entries filtering is also optionally used in ftrace function graph,\nwhere the same logic applies.\n\ud83d\udccf Published: 2025-01-11T14:08:56.951Z\n\ud83d\udccf Modified: 2025-01-11T14:08:56.951Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/ca687fdce5b95f84d91d6e36ac77047771eb3dfc\n2. https://git.kernel.org/stable/c/5bb7a2c3afcf8732dc65ea49c09147b07da1d993\n3. https://git.kernel.org/stable/c/1af22528fee8072b7adc007b8ca49cc4ea62689e\n4. https://git.kernel.org/stable/c/473ffae3030188f1c6b80e1b3631a26b4adf7b32\n5. https://git.kernel.org/stable/c/45c9f2b856a075a34873d00788d2e8a250c1effd", "creation_timestamp": "2025-01-11T15:05:28.000000Z"}, {"uuid": "d6664d01-c6f5-41b3-a787-43688faee972", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57619", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1813", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57619\n\ud83d\udd39 Description: An issue in the atom_get_int component of MonetDB Server v11.47.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.\n\ud83d\udccf Published: 2025-01-14T00:00:00\n\ud83d\udccf Modified: 2025-01-15T17:08:43.081Z\n\ud83d\udd17 References:\n1. https://github.com/MonetDB/MonetDB/issues/7416", "creation_timestamp": "2025-01-15T17:54:48.000000Z"}, {"uuid": "7622dfe9-a8e7-4820-9012-43a1a6abe3bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57877", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1318", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57877\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\narm64: ptrace: fix partial SETREGSET for NT_ARM_POE\n\nCurrently poe_set() doesn't initialize the temporary 'ctrl' variable,\nand a SETREGSET call with a length of zero will leave this\nuninitialized. Consequently an arbitrary value will be written back to\ntarget->thread.por_el0, potentially leaking up to 64 bits of memory from\nthe kernel stack. The read is limited to a specific slot on the stack,\nand the issue does not provide a write mechanism.\n\nFix this by initializing the temporary value before copying the regset\nfrom userspace, as for other regsets (e.g. NT_PRSTATUS, NT_PRFPREG,\nNT_ARM_SYSTEM_CALL). In the case of a zero-length write, the existing\ncontents of POR_EL1 will be retained.\n\nBefore this patch:\n\n| # ./poe-test\n| Attempting to write NT_ARM_POE::por_el0 = 0x900d900d900d900d\n| SETREGSET(nt=0x40f, len=8) wrote 8 bytes\n|\n| Attempting to read NT_ARM_POE::por_el0\n| GETREGSET(nt=0x40f, len=8) read 8 bytes\n| Read NT_ARM_POE::por_el0 = 0x900d900d900d900d\n|\n| Attempting to write NT_ARM_POE (zero length)\n| SETREGSET(nt=0x40f, len=0) wrote 0 bytes\n|\n| Attempting to read NT_ARM_POE::por_el0\n| GETREGSET(nt=0x40f, len=8) read 8 bytes\n| Read NT_ARM_POE::por_el0 = 0xffff8000839c3d50\n\nAfter this patch:\n\n| # ./poe-test\n| Attempting to write NT_ARM_POE::por_el0 = 0x900d900d900d900d\n| SETREGSET(nt=0x40f, len=8) wrote 8 bytes\n|\n| Attempting to read NT_ARM_POE::por_el0\n| GETREGSET(nt=0x40f, len=8) read 8 bytes\n| Read NT_ARM_POE::por_el0 = 0x900d900d900d900d\n|\n| Attempting to write NT_ARM_POE (zero length)\n| SETREGSET(nt=0x40f, len=0) wrote 0 bytes\n|\n| Attempting to read NT_ARM_POE::por_el0\n| GETREGSET(nt=0x40f, len=8) read 8 bytes\n| Read NT_ARM_POE::por_el0 = 0x900d900d900d900d\n\ud83d\udccf Published: 2025-01-11T14:49:03.297Z\n\ud83d\udccf Modified: 2025-01-11T14:49:03.297Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/4105dd76bc8ad6529d47157ef0565cb84ca6676c\n2. https://git.kernel.org/stable/c/594bfc4947c4fcabba1318d8384c61a29a6b89fb", "creation_timestamp": "2025-01-11T15:04:31.000000Z"}, {"uuid": "7bb5ce4c-dd49-4162-bf26-29009c8953ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57839", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1331", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57839\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nRevert \"readahead: properly shorten readahead when falling back to do_page_cache_ra()\"\n\nThis reverts commit 7c877586da3178974a8a94577b6045a48377ff25.\n\nAnders and Philippe have reported that recent kernels occasionally hang\nwhen used with NFS in readahead code.  The problem has been bisected to\n7c877586da3 (\"readahead: properly shorten readahead when falling back to\ndo_page_cache_ra()\").  The cause of the problem is that ra->size can be\nshrunk by read_pages() call and subsequently we end up calling\ndo_page_cache_ra() with negative (read huge positive) number of pages. \nLet's revert 7c877586da3 for now until we can find a proper way how the\nlogic in read_pages() and page_cache_ra_order() can coexist.  This can\nlead to reduced readahead throughput due to readahead window confusion but\nthat's better than outright hangs.\n\ud83d\udccf Published: 2025-01-11T14:30:56.149Z\n\ud83d\udccf Modified: 2025-01-11T14:30:56.149Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/85351e4941a253e4c50fb7048bfc19b60b4ec44b\n2. https://git.kernel.org/stable/c/a220d6b95b1ae12c7626283d7609f0a1438e6437", "creation_timestamp": "2025-01-11T15:05:26.000000Z"}, {"uuid": "1ad1c02c-bb6d-407a-b3cf-d736a0e018c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57799", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1298", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57799\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nphy: rockchip: samsung-hdptx: Set drvdata before enabling runtime PM\n\nIn some cases, rk_hdptx_phy_runtime_resume() may be invoked before\nplatform_set_drvdata() is executed in ->probe(), leading to a NULL\npointer dereference when using the return of dev_get_drvdata().\n\nEnsure platform_set_drvdata() is called before devm_pm_runtime_enable().\n\ud83d\udccf Published: 2025-01-11T12:39:48.936Z\n\ud83d\udccf Modified: 2025-01-11T12:39:48.936Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/7061849a4a1752a06944a819dd1f7bfd58df7383\n2. https://git.kernel.org/stable/c/9d23e48654620fdccfcc74cc2cef04eaf7353d07", "creation_timestamp": "2025-01-11T13:05:54.000000Z"}, {"uuid": "8e62a779-8cc6-440f-99af-a1454835609c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57800", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1297", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57800\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: memalloc: prefer dma_mapping_error() over explicit address checking\n\nWith CONFIG_DMA_API_DEBUG enabled, the following warning is observed:\n\nDMA-API: snd_hda_intel 0000:03:00.1: device driver failed to check map error[device address=0x00000000ffff0000] [size=20480 bytes] [mapped as single]\nWARNING: CPU: 28 PID: 2255 at kernel/dma/debug.c:1036 check_unmap+0x1408/0x2430\nCPU: 28 UID: 42 PID: 2255 Comm: wireplumber Tainted: G  W L  6.12.0-10-133577cad6bf48e5a7848c4338124081393bfe8a+ #759\ndebug_dma_unmap_page+0xe9/0xf0\nsnd_dma_wc_free+0x85/0x130 [snd_pcm]\nsnd_pcm_lib_free_pages+0x1e3/0x440 [snd_pcm]\nsnd_pcm_common_ioctl+0x1c9a/0x2960 [snd_pcm]\nsnd_pcm_ioctl+0x6a/0xc0 [snd_pcm]\n...\n\nCheck for returned DMA addresses using specialized dma_mapping_error()\nhelper which is generally recommended for this purpose by\nDocumentation/core-api/dma-api.rst.\n\ud83d\udccf Published: 2025-01-11T12:39:49.702Z\n\ud83d\udccf Modified: 2025-01-11T12:39:49.702Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/c180c3f42d340e8dcb9094bb8ea7d477d37081a8\n2. https://git.kernel.org/stable/c/fa0308134d26dbbeb209a1581eea46df663866b6", "creation_timestamp": "2025-01-11T13:05:50.000000Z"}, {"uuid": "77f715e7-dba6-432f-84b7-ec4c400fa7a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57804", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1296", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57804\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs\n\nThe driver, through the SAS transport, exposes a sysfs interface to\nenable/disable PHYs in a controller/expander setup.  When multiple PHYs\nare disabled and enabled in rapid succession, the persistent and current\nconfig pages related to SAS IO unit/SAS Expander pages could get\ncorrupted.\n\nUse separate memory for each config request.\n\ud83d\udccf Published: 2025-01-11T12:39:50.958Z\n\ud83d\udccf Modified: 2025-01-11T12:39:50.958Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/869fdc6f0606060301aef648231e186c7c542f5a\n2. https://git.kernel.org/stable/c/711201a8b8334a397440ac0b859df0054e174bc9", "creation_timestamp": "2025-01-11T13:05:34.000000Z"}, {"uuid": "59d33d31-3ce3-4b86-9a69-7c612d6ffed9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57805", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1295", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57805\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: SOF: Intel: hda-dai: Do not release the link DMA on STOP\n\nThe linkDMA should not be released on stop trigger since a stream re-start\nmight happen without closing of the stream. This leaves a short time for\nother streams to 'steal' the linkDMA since it has been released.\n\nThis issue is not easy to reproduce under normal conditions as usually\nafter stop the stream is closed, or the same stream is restarted, but if\nanother stream got in between the stop and start, like this:\naplay -Dhw:0,3 -c2 -r48000 -fS32_LE /dev/zero -d 120\nCTRL+z\naplay -Dhw:0,0 -c2 -r48000 -fS32_LE /dev/zero -d 120\n\nthen the link DMA channels will be mixed up, resulting firmware error or\ncrash.\n\ud83d\udccf Published: 2025-01-11T12:39:51.798Z\n\ud83d\udccf Modified: 2025-01-11T12:39:51.798Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/909ecf15cb70f78cdb5c930f58df01db039a0ff8\n2. https://git.kernel.org/stable/c/e8d0ba147d901022bcb69da8d8fd817f84e9f3ca", "creation_timestamp": "2025-01-11T13:05:14.000000Z"}, {"uuid": "bc3a0c0d-402f-469c-b493-f4b8c6fc1115", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57807", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1294", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57807\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: megaraid_sas: Fix for a potential deadlock\n\nThis fixes a 'possible circular locking dependency detected' warning\n      CPU0                    CPU1\n      ----                    ----\n lock(&instance->reset_mutex);\n                              lock(&shost->scan_mutex);\n                              lock(&instance->reset_mutex);\n lock(&shost->scan_mutex);\n\nFix this by temporarily releasing the reset_mutex.\n\ud83d\udccf Published: 2025-01-11T12:39:53.645Z\n\ud83d\udccf Modified: 2025-01-11T12:39:53.645Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/78afb9bfad00c4aa58a424111d7edbcab9452f2b\n2. https://git.kernel.org/stable/c/f36d024bd15ed356a80dda3ddc46d0a62aa55815\n3. https://git.kernel.org/stable/c/3c654998a3e8167a58b6c6fede545fe400a4b554\n4. https://git.kernel.org/stable/c/edadc693bfcc0f1ea08b8fa041c9361fd042410d\n5. https://git.kernel.org/stable/c/f50783148ec98a1d38b87422e2ceaf2380b7b606\n6. https://git.kernel.org/stable/c/466ca39dbf5d0ba71c16b15c27478a9c7d4022a8\n7. https://git.kernel.org/stable/c/50740f4dc78b41dec7c8e39772619d5ba841ddd7", "creation_timestamp": "2025-01-11T13:04:35.000000Z"}, {"uuid": "bb39644d-c75e-4a55-acbf-26c6400b533d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57791", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1302", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57791\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nnet/smc: check return value of sock_recvmsg when draining clc data\n\nWhen receiving clc msg, the field length in smc_clc_msg_hdr indicates the\nlength of msg should be received from network and the value should not be\nfully trusted as it is from the network. Once the value of length exceeds\nthe value of buflen in function smc_clc_wait_msg it may run into deadloop\nwhen trying to drain the remaining data exceeding buflen.\n\nThis patch checks the return value of sock_recvmsg when draining data in\ncase of deadloop in draining.\n\ud83d\udccf Published: 2025-01-11T12:35:48.905Z\n\ud83d\udccf Modified: 2025-01-11T12:35:48.905Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/82c7ad9ca09975aae737abffd66d1ad98874c13d\n2. https://git.kernel.org/stable/c/6b80924af6216277892d5f091f5bfc7d1265fa28\n3. https://git.kernel.org/stable/c/d7d1f986ebb284b1db8dafca7d1bdb6dd2445cf6\n4. https://git.kernel.org/stable/c/7a6927814b4256d603e202ae7c5e38db3b338896\n5. https://git.kernel.org/stable/c/df3dfe1a93c6298d8c09a18e4fba19ef5b17763b\n6. https://git.kernel.org/stable/c/c5b8ee5022a19464783058dc6042e8eefa34e8cd", "creation_timestamp": "2025-01-11T13:06:09.000000Z"}, {"uuid": "7d11a834-94ed-4514-b705-bceb2e9fc0e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57792", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1301", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57792\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\npower: supply: gpio-charger: Fix set charge current limits\n\nFix set charge current limits for devices which allow to set the lowest\ncharge current limit to be greater zero. If requested charge current limit\nis below lowest limit, the index equals current_limit_map_size which leads\nto accessing memory beyond allocated memory.\n\ud83d\udccf Published: 2025-01-11T12:39:46.397Z\n\ud83d\udccf Modified: 2025-01-11T12:39:46.397Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/b29c7783ac1fe36d639c089cf471ac7a46df05f0\n2. https://git.kernel.org/stable/c/c3703d9340ca2820e1ac63256f4b423ea8559831\n3. https://git.kernel.org/stable/c/6abbbd8286b6f944eecf3c74444c138590135211\n4. https://git.kernel.org/stable/c/13eb3cae1d8e23cce96c095abe34da8028c09ac5\n5. https://git.kernel.org/stable/c/f6279a98db132da0cfff18712a1b06478c32007f\n6. https://git.kernel.org/stable/c/afc6e39e824ad0e44b2af50a97885caec8d213d1", "creation_timestamp": "2025-01-11T13:06:04.000000Z"}, {"uuid": "8c5bf200-37e2-440b-acbe-d94e46f69739", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57793", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1300", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57793\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nvirt: tdx-guest: Just leak decrypted memory on unrecoverable errors\n\nIn CoCo VMs it is possible for the untrusted host to cause\nset_memory_decrypted() to fail such that an error is returned\nand the resulting memory is shared. Callers need to take care\nto handle these errors to avoid returning decrypted (shared)\nmemory to the page allocator, which could lead to functional\nor security issues.\n\nLeak the decrypted memory when set_memory_decrypted() fails,\nand don't need to print an error since set_memory_decrypted()\nwill call WARN_ONCE().\n\ud83d\udccf Published: 2025-01-11T12:39:47.347Z\n\ud83d\udccf Modified: 2025-01-11T12:39:47.347Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/1429ae7b7d4759a1e362456b8911c701bae655b4\n2. https://git.kernel.org/stable/c/27834971f616c5e154423c578fa95e0444444ce1", "creation_timestamp": "2025-01-11T13:06:01.000000Z"}, {"uuid": "5a7979eb-9792-4546-824b-4180be4791ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57664", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1425", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57664\n\ud83d\udd39 Description: An issue in the sqlg_group_node component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.\n\ud83d\udccf Published: 2025-01-14T00:00:00\n\ud83d\udccf Modified: 2025-01-14T00:21:51.341146\n\ud83d\udd17 References:\n1. https://github.com/openlink/virtuoso-opensource/issues/1211", "creation_timestamp": "2025-01-14T01:07:33.000000Z"}, {"uuid": "c66f327d-48df-48d0-bca1-89980dda7d0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57876", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1319", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57876\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/dp_mst: Fix resetting msg rx state after topology removal\n\nIf the MST topology is removed during the reception of an MST down reply\nor MST up request sideband message, the\ndrm_dp_mst_topology_mgr::up_req_recv/down_rep_recv states could be reset\nfrom one thread via drm_dp_mst_topology_mgr_set_mst(false), racing with\nthe reading/parsing of the message from another thread via\ndrm_dp_mst_handle_down_rep() or drm_dp_mst_handle_up_req(). The race is\npossible since the reader/parser doesn't hold any lock while accessing\nthe reception state. This in turn can lead to a memory corruption in the\nreader/parser as described by commit bd2fccac61b4 (\"drm/dp_mst: Fix MST\nsideband message body length check\").\n\nFix the above by resetting the message reception state if needed before\nreading/parsing a message. Another solution would be to hold the\ndrm_dp_mst_topology_mgr::lock for the whole duration of the message\nreception/parsing in drm_dp_mst_handle_down_rep() and\ndrm_dp_mst_handle_up_req(), however this would require a bigger change.\nSince the fix is also needed for stable, opting for the simpler solution\nin this patch.\n\ud83d\udccf Published: 2025-01-11T14:49:02.550Z\n\ud83d\udccf Modified: 2025-01-11T14:49:02.550Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/94b33b2d7640e807869451384eb88321dd0ffbd4\n2. https://git.kernel.org/stable/c/d834d20d2e86c52ed5cab41763fa61e6071680ef\n3. https://git.kernel.org/stable/c/be826b4451fd187a7c0b04be4f8243d5df6e0450\n4. https://git.kernel.org/stable/c/a6fa67d26de385c3c7a23c1e109a0e23bfda4ec7", "creation_timestamp": "2025-01-11T15:04:34.000000Z"}, {"uuid": "7c2a418a-a832-4c9e-8301-04f30a9eb37b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57843", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1330", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57843\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nvirtio-net: fix overflow inside virtnet_rq_alloc\n\nWhen the frag just got a page, then may lead to regression on VM.\nSpecially if the sysctl net.core.high_order_alloc_disable value is 1,\nthen the frag always get a page when do refill.\n\nWhich could see reliable crashes or scp failure (scp a file 100M in size\nto VM).\n\nThe issue is that the virtnet_rq_dma takes up 16 bytes at the beginning\nof a new frag. When the frag size is larger than PAGE_SIZE,\neverything is fine. However, if the frag is only one page and the\ntotal size of the buffer and virtnet_rq_dma is larger than one page, an\noverflow may occur.\n\nThe commit f9dac92ba908 (\"virtio_ring: enable premapped mode whatever\nuse_dma_api\") introduced this problem. And we reverted some commits to\nfix this in last linux version. Now we try to enable it and fix this\nbug directly.\n\nHere, when the frag size is not enough, we reduce the buffer len to fix\nthis problem.\n\ud83d\udccf Published: 2025-01-11T14:30:57.255Z\n\ud83d\udccf Modified: 2025-01-11T14:30:57.255Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/a8f7d6963768b114ec9644ff0148dde4c104e84b\n2. https://git.kernel.org/stable/c/67a11de8965c2ab19e215fb6651d44847e068614\n3. https://git.kernel.org/stable/c/6aacd1484468361d1d04badfe75f264fa5314864", "creation_timestamp": "2025-01-11T15:05:23.000000Z"}, {"uuid": "693d8b15-f1bc-447b-aea4-a2affee502bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57849", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1329", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57849\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\ns390/cpum_sf: Handle CPU hotplug remove during sampling\n\nCPU hotplug remove handling triggers the following function\ncall sequence:\n\n   CPUHP_AP_PERF_S390_SF_ONLINE  --> s390_pmu_sf_offline_cpu()\n   ...\n   CPUHP_AP_PERF_ONLINE          --> perf_event_exit_cpu()\n\nThe s390 CPUMF sampling CPU hotplug handler invokes:\n\n s390_pmu_sf_offline_cpu()\n +-->  cpusf_pmu_setup()\n       +--> setup_pmc_cpu()\n            +--> deallocate_buffers()\n\nThis function de-allocates all sampling data buffers (SDBs) allocated\nfor that CPU at event initialization. It also clears the\nPMU_F_RESERVED bit. The CPU is gone and can not be sampled.\n\nWith the event still being active on the removed CPU, the CPU event\nhotplug support in kernel performance subsystem triggers the\nfollowing function calls on the removed CPU:\n\n  perf_event_exit_cpu()\n  +--> perf_event_exit_cpu_context()\n       +--> __perf_event_exit_context()\n     +--> __perf_remove_from_context()\n          +--> event_sched_out()\n               +--> cpumsf_pmu_del()\n                    +--> cpumsf_pmu_stop()\n                                +--> hw_perf_event_update()\n\nto stop and remove the event. During removal of the event, the\nsampling device driver tries to read out the remaining samples from\nthe sample data buffers (SDBs). But they have already been freed\n(and may have been re-assigned). This may lead to a use after free\nsituation in which case the samples are most likely invalid. In the\nbest case the memory has not been reassigned and still contains\nvalid data.\n\nRemedy this situation and check if the CPU is still in reserved\nstate (bit PMU_F_RESERVED set). In this case the SDBs have not been\nreleased an contain valid data. This is always the case when\nthe event is removed (and no CPU hotplug off occured).\nIf the PMU_F_RESERVED bit is not set, the SDB buffers are gone.\n\ud83d\udccf Published: 2025-01-11T14:30:58.365Z\n\ud83d\udccf Modified: 2025-01-11T14:30:58.365Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/238e3af849dfdcb1faed544349f7025e533f9aab\n2. https://git.kernel.org/stable/c/99192c735ed4bfdff0d215ec85c8a87a677cb898\n3. https://git.kernel.org/stable/c/06a92f810df8037ca36157282ddcbefdcaf049b8\n4. https://git.kernel.org/stable/c/b5be6a0bb639d165c8418d8dddd8f322587be8be\n5. https://git.kernel.org/stable/c/a69752f1e5de817941a2ea0609254f6f25acd274\n6. https://git.kernel.org/stable/c/be54e6e0f93a39a9c00478d70d12956a5f3d5b9b\n7. https://git.kernel.org/stable/c/a0bd7dacbd51c632b8e2c0500b479af564afadf3", "creation_timestamp": "2025-01-11T15:05:21.000000Z"}, {"uuid": "51fa1688-4cc0-4d41-864a-18ea05023696", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57875", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1320", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57875\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nblock: RCU protect disk->conv_zones_bitmap\n\nEnsure that a disk revalidation changing the conventional zones bitmap\nof a disk does not cause invalid memory references when using the\ndisk_zone_is_conv() helper by RCU protecting the disk->conv_zones_bitmap\npointer.\n\ndisk_zone_is_conv() is modified to operate under the RCU read lock and\nthe function disk_set_conv_zones_bitmap() is added to update a disk\nconv_zones_bitmap pointer using rcu_replace_pointer() with the disk\nzone_wplugs_lock spinlock held.\n\ndisk_free_zone_resources() is modified to call\ndisk_update_zone_resources() with a NULL bitmap pointer to free the disk\nconv_zones_bitmap. disk_set_conv_zones_bitmap() is also used in\ndisk_update_zone_resources() to set the new (revalidated) bitmap and\nfree the old one.\n\ud83d\udccf Published: 2025-01-11T14:49:01.655Z\n\ud83d\udccf Modified: 2025-01-11T14:49:01.655Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/493326c4f10cc71a42c27fdc97ce112182ee4cbc\n2. https://git.kernel.org/stable/c/d7cb6d7414ea1b33536fa6d11805cb8dceec1f97", "creation_timestamp": "2025-01-11T15:04:37.000000Z"}, {"uuid": "e5bf0209-3d0b-4c68-aaee-f422d935412f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57850", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1328", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57850\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\njffs2: Prevent rtime decompress memory corruption\n\nThe rtime decompression routine does not fully check bounds during the\nentirety of the decompression pass and can corrupt memory outside the\ndecompression buffer if the compressed data is corrupted. This adds the\nrequired check to prevent this failure mode.\n\ud83d\udccf Published: 2025-01-11T14:30:59.271Z\n\ud83d\udccf Modified: 2025-01-11T14:30:59.271Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/421f9e9f0fae9f8e721ffa07f22d9765fa1214d5\n2. https://git.kernel.org/stable/c/f6fc251baefc3cdc4f41f2f5a47940d7d4a67332\n3. https://git.kernel.org/stable/c/bd384b04ad1995441b18fe6c1366d02de8c5d5eb\n4. https://git.kernel.org/stable/c/47c9a7f81027a78afea9d2e9a54bfd8fabb6b3d0\n5. https://git.kernel.org/stable/c/6808a1812a3419542223e7fe9e2de577e99e45d1\n6. https://git.kernel.org/stable/c/dc39b08fcc3831b0bc46add91ba93cd2aab50716\n7. https://git.kernel.org/stable/c/fe051552f5078fa02d593847529a3884305a6ffe", "creation_timestamp": "2025-01-11T15:05:19.000000Z"}, {"uuid": "7045e949-fbae-4ac5-bcdd-e392907b7f3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57872", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1327", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57872\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: ufs: pltfrm: Dellocate HBA during ufshcd_pltfrm_remove()\n\nThis will ensure that the scsi host is cleaned up properly using\nscsi_host_dev_release(). Otherwise, it may lead to memory leaks.\n\ud83d\udccf Published: 2025-01-11T14:31:00.610Z\n\ud83d\udccf Modified: 2025-01-11T14:31:00.610Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/cd188519d2467ab4c2141587b0551ba030abff0e\n2. https://git.kernel.org/stable/c/897df60c16d54ad515a3d0887edab5c63da06d1f", "creation_timestamp": "2025-01-11T15:05:16.000000Z"}, {"uuid": "25f3f1bb-9488-47a5-a606-6e0b0f3b528d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57488", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1378", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57488\n\ud83d\udd39 Description: Code-Projects Online Car Rental System 1.0 is vulnerable to Cross Site Scripting (XSS) via the vehicalorcview parameter in /admin/edit-vehicle.php.\n\ud83d\udccf Published: 2025-01-13T00:00:00\n\ud83d\udccf Modified: 2025-01-13T19:36:46.132Z\n\ud83d\udd17 References:\n1. https://code-projects.org/online-car-rental-using-php-source-code/\n2. https://github.com/aaryan-11-x/CVE-2024-57487-and-CVE-2024-57488", "creation_timestamp": "2025-01-13T20:07:37.000000Z"}, {"uuid": "ec3fdcf9-d1b8-42be-aa01-788686ea551e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57487", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1378", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57488\n\ud83d\udd39 Description: Code-Projects Online Car Rental System 1.0 is vulnerable to Cross Site Scripting (XSS) via the vehicalorcview parameter in /admin/edit-vehicle.php.\n\ud83d\udccf Published: 2025-01-13T00:00:00\n\ud83d\udccf Modified: 2025-01-13T19:36:46.132Z\n\ud83d\udd17 References:\n1. https://code-projects.org/online-car-rental-using-php-source-code/\n2. https://github.com/aaryan-11-x/CVE-2024-57487-and-CVE-2024-57488", "creation_timestamp": "2025-01-13T20:07:37.000000Z"}, {"uuid": "8fbb91c8-a9d7-44e4-8b0d-d184d1a7ce9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57659", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1430", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57659\n\ud83d\udd39 Description: An issue in the sqlg_parallel_ts_seq component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.\n\ud83d\udccf Published: 2025-01-14T00:00:00\n\ud83d\udccf Modified: 2025-01-14T00:21:46.000007\n\ud83d\udd17 References:\n1. https://github.com/openlink/virtuoso-opensource/issues/1212", "creation_timestamp": "2025-01-14T01:07:51.000000Z"}, {"uuid": "d8f913d8-b99b-4587-a8d8-f91fff73259e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57660", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1429", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57660\n\ud83d\udd39 Description: An issue in the sqlo_expand_jts component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.\n\ud83d\udccf Published: 2025-01-14T00:00:00\n\ud83d\udccf Modified: 2025-01-14T00:21:47.244689\n\ud83d\udd17 References:\n1. https://github.com/openlink/virtuoso-opensource/issues/1221", "creation_timestamp": "2025-01-14T01:07:48.000000Z"}, {"uuid": "42a00a9c-e161-4876-9a85-9968681de8bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57661", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1428", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57661\n\ud83d\udd39 Description: An issue in the sqlo_df component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.\n\ud83d\udccf Published: 2025-01-14T00:00:00\n\ud83d\udccf Modified: 2025-01-14T00:21:48.220951\n\ud83d\udd17 References:\n1. https://github.com/openlink/virtuoso-opensource/issues/1220", "creation_timestamp": "2025-01-14T01:07:44.000000Z"}, {"uuid": "67002599-0808-477c-8761-f9c1f1ff65eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57662", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1427", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57662\n\ud83d\udd39 Description: An issue in the sqlg_hash_source component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.\n\ud83d\udccf Published: 2025-01-14T00:00:00\n\ud83d\udccf Modified: 2025-01-14T00:21:49.669855\n\ud83d\udd17 References:\n1. https://github.com/openlink/virtuoso-opensource/issues/1217", "creation_timestamp": "2025-01-14T01:07:39.000000Z"}, {"uuid": "2f3763d7-3237-4737-b21b-6dfff3da2b2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57663", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1426", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57663\n\ud83d\udd39 Description: An issue in the sqlg_place_dpipes component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.\n\ud83d\udccf Published: 2025-01-14T00:00:00\n\ud83d\udccf Modified: 2025-01-14T00:21:50.619540\n\ud83d\udd17 References:\n1. https://github.com/openlink/virtuoso-opensource/issues/1218", "creation_timestamp": "2025-01-14T01:07:36.000000Z"}, {"uuid": "7e366700-f0b4-4209-be53-a2601901f96c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57651", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1435", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57651\n\ud83d\udd39 Description: An issue in the jp_add component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.\n\ud83d\udccf Published: 2025-01-14T00:00:00\n\ud83d\udccf Modified: 2025-01-14T00:21:38.532398\n\ud83d\udd17 References:\n1. https://github.com/openlink/virtuoso-opensource/issues/1196", "creation_timestamp": "2025-01-14T01:08:04.000000Z"}, {"uuid": "428a5763-414a-4ca5-bcc0-562fbf6bbf1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57656", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1434", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57656\n\ud83d\udd39 Description: An issue in the sqlc_add_distinct_node component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.\n\ud83d\udccf Published: 2025-01-14T00:00:00\n\ud83d\udccf Modified: 2025-01-14T00:21:41.722136\n\ud83d\udd17 References:\n1. https://github.com/openlink/virtuoso-opensource/issues/1210", "creation_timestamp": "2025-01-14T01:08:02.000000Z"}, {"uuid": "745d69b9-f79e-4b77-9169-70e8f98405a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57655", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1433", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57655\n\ud83d\udd39 Description: An issue in the dfe_n_in_order component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.\n\ud83d\udccf Published: 2025-01-14T00:00:00\n\ud83d\udccf Modified: 2025-01-14T00:21:43.131339\n\ud83d\udd17 References:\n1. https://github.com/openlink/virtuoso-opensource/issues/1216", "creation_timestamp": "2025-01-14T01:07:59.000000Z"}, {"uuid": "47a94896-2c04-443c-9097-8fce8c271b5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57657", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1432", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57657\n\ud83d\udd39 Description: An issue in the sqlg_vec_upd component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.\n\ud83d\udccf Published: 2025-01-14T00:00:00\n\ud83d\udccf Modified: 2025-01-14T00:21:44.075407\n\ud83d\udd17 References:\n1. https://github.com/openlink/virtuoso-opensource/issues/1219", "creation_timestamp": "2025-01-14T01:07:57.000000Z"}, {"uuid": "607ab1c6-ae1b-4f6d-a242-2e1acb9dfbb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57642", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1447", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57642\n\ud83d\udd39 Description: An issue in the dfe_inx_op_col_def_table component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.\n\ud83d\udccf Published: 2025-01-14T00:00:00\n\ud83d\udccf Modified: 2025-01-14T00:21:20.075775\n\ud83d\udd17 References:\n1. https://github.com/openlink/virtuoso-opensource/issues/1191", "creation_timestamp": "2025-01-14T01:08:37.000000Z"}, {"uuid": "2c432c58-77c9-42d8-a5dc-d128b23255f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57654", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1436", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57654\n\ud83d\udd39 Description: An issue in the qst_vec_get_int64 component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.\n\ud83d\udccf Published: 2025-01-14T00:00:00\n\ud83d\udccf Modified: 2025-01-14T00:21:37.311739\n\ud83d\udd17 References:\n1. https://github.com/openlink/virtuoso-opensource/issues/1205", "creation_timestamp": "2025-01-14T01:08:07.000000Z"}, {"uuid": "ef17217a-f5cc-429f-8ce9-14d9c5e3e5d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57644", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1445", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57644\n\ud83d\udd39 Description: An issue in the itc_hash_compare component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.\n\ud83d\udccf Published: 2025-01-14T00:00:00\n\ud83d\udccf Modified: 2025-01-14T00:21:21.929959\n\ud83d\udd17 References:\n1. https://github.com/openlink/virtuoso-opensource/issues/1193", "creation_timestamp": "2025-01-14T01:08:32.000000Z"}, {"uuid": "759fca59-3d88-4795-a50a-b73958d4a823", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57645", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1444", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57645\n\ud83d\udd39 Description: An issue in the qi_inst_state_free component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.\n\ud83d\udccf Published: 2025-01-14T00:00:00\n\ud83d\udccf Modified: 2025-01-14T00:21:23.149418\n\ud83d\udd17 References:\n1. https://github.com/openlink/virtuoso-opensource/issues/1197", "creation_timestamp": "2025-01-14T01:08:30.000000Z"}, {"uuid": "76f00a16-dad7-4aa7-889f-08a2e9d35769", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57646", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1443", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57646\n\ud83d\udd39 Description: An issue in the psiginfo component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.\n\ud83d\udccf Published: 2025-01-14T00:00:00\n\ud83d\udccf Modified: 2025-01-14T00:21:24.944467\n\ud83d\udd17 References:\n1. https://github.com/openlink/virtuoso-opensource/issues/1199", "creation_timestamp": "2025-01-14T01:08:28.000000Z"}, {"uuid": "160c48a9-3bb5-46a9-bae9-956609052c15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57633", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1509", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57633\n\ud83d\udd39 Description: An issue in the exps_bind_column component of MonetDB Server v11.49.1 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.\n\ud83d\udccf Published: 2025-01-14T00:00:00\n\ud83d\udccf Modified: 2025-01-14T16:00:13.585Z\n\ud83d\udd17 References:\n1. https://github.com/MonetDB/MonetDB/issues/7438", "creation_timestamp": "2025-01-14T16:18:21.000000Z"}, {"uuid": "f38b6d6d-f151-41ad-b585-71566c058155", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57623", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1582", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57623\n\ud83d\udd39 Description: An issue in the HEAP_malloc component of MonetDB Server v11.49.1 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.\n\ud83d\udccf Published: 2025-01-14T00:00:00\n\ud83d\udccf Modified: 2025-01-14T18:50:41.075Z\n\ud83d\udd17 References:\n1. https://github.com/MonetDB/MonetDB/issues/7415", "creation_timestamp": "2025-01-14T19:10:51.000000Z"}, {"uuid": "d3328dc4-3c14-48f8-bc26-67829b289619", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57214", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1520", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57214\n\ud83d\udd39 Description: TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the devname parameter in the reset_wifi function.\n\ud83d\udccf Published: 2025-01-10T00:00:00\n\ud83d\udccf Modified: 2025-01-14T16:57:39.754Z\n\ud83d\udd17 References:\n1. https://github.com/yanggao017/vuln/tree/main/TOTOLINK/A6000R/CI_8_reset_wifi", "creation_timestamp": "2025-01-14T17:20:18.000000Z"}, {"uuid": "63ca755e-0539-4f6b-a983-951ae72d0933", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57471", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1629", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57471\n\ud83d\udd39 Description: H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the 2.4G wireless network processing function. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands by sending a POST request to /bin/webs.\n\ud83d\udccf Published: 2025-01-14T00:00:00\n\ud83d\udccf Modified: 2025-01-14T21:57:21.664740\n\ud83d\udd17 References:\n1. http://h3c.com\n2. https://gist.github.com/XiaoCurry/88a43c9a68694941221eb7592da39d4c", "creation_timestamp": "2025-01-14T22:09:02.000000Z"}, {"uuid": "ef787cde-17ff-43b6-b7c8-f449a209fe07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57482", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1628", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57482\n\ud83d\udd39 Description: H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the 5G wireless network processing function. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands by sending a POST request to /bin/webs.\n\ud83d\udccf Published: 2025-01-14T00:00:00\n\ud83d\udccf Modified: 2025-01-14T22:00:38.812176\n\ud83d\udd17 References:\n1. http://h3c.com\n2. https://gist.github.com/XiaoCurry/d39f76a025df8b78a5f9e1aa48c16d18", "creation_timestamp": "2025-01-14T22:08:58.000000Z"}, {"uuid": "51b643ae-721e-4cf2-ad48-c183ab21bfaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57801", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1746", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57801\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5e: Skip restore TC rules for vport rep without loaded flag\n\nDuring driver unload, unregister_netdev is called after unloading\nvport rep. So, the mlx5e_rep_priv is already freed while trying to get\nrpriv->netdev, or walk rpriv->tc_ht, which results in use-after-free.\nSo add the checking to make sure access the data of vport rep which is\nstill loaded.\n\ud83d\udccf Published: 2025-01-15T13:10:24.619Z\n\ud83d\udccf Modified: 2025-01-15T13:10:24.619Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/3e45dd1622a2c1a83c11bf42fdd8c1810123d6c0\n2. https://git.kernel.org/stable/c/47c78d3fc26e38ab805613a0f592dc8a820c7c64\n3. https://git.kernel.org/stable/c/5a03b368562a7ff5f5f1f63b5adf8309cbdbd5be", "creation_timestamp": "2025-01-15T14:14:52.000000Z"}, {"uuid": "1adbf8a1-789c-4302-b8bf-090090e3380f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57893", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1754", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57893\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: seq: oss: Fix races at processing SysEx messages\n\nOSS sequencer handles the SysEx messages split in 6 bytes packets, and\nALSA sequencer OSS layer tries to combine those.  It stores the data\nin the internal buffer and this access is racy as of now, which may\nlead to the out-of-bounds access.\n\nAs a temporary band-aid fix, introduce a mutex for serializing the\nprocess of the SysEx message packets.\n\ud83d\udccf Published: 2025-01-15T13:05:45.550Z\n\ud83d\udccf Modified: 2025-01-15T13:05:45.550Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/cff1de87ed14fc0f2332213d2367100e7ad0753a\n2. https://git.kernel.org/stable/c/d2392b79d8af3714ea8878b71c66dc49d3110f44\n3. https://git.kernel.org/stable/c/9d382112b36382aa65aad765f189ebde9926c101\n4. https://git.kernel.org/stable/c/0179488ca992d79908b8e26b9213f1554fc5bacc", "creation_timestamp": "2025-01-15T14:25:14.000000Z"}, {"uuid": "62f061ec-1ab5-4cdd-92bf-eeec292c034e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57483", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1637", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57483\n\ud83d\udd39 Description: Tenda i24 V2.0.0.5 is vulnerable to Buffer Overflow in the addWifiMacFilter function.\n\ud83d\udccf Published: 2025-01-14T00:00:00\n\ud83d\udccf Modified: 2025-01-14T22:24:43.646165\n\ud83d\udd17 References:\n1. http://tenda.com\n2. https://gist.github.com/XiaoCurry/7dd5c6ab5af9df49883535b997cef7a4", "creation_timestamp": "2025-01-14T23:09:39.000000Z"}, {"uuid": "93019ee8-e379-4e72-aae0-8eb111d6340e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57682", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2002", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57682\n\ud83d\udd39 Description: An information disclosure vulnerability in the component d_status.asp of D-Link 816A2_FWv1.10CNB05_R1B011D88210 allows unauthenticated attackers to access sensitive information via a crafted POST request.\n\ud83d\udccf Published: 2025-01-16T00:00:00\n\ud83d\udccf Modified: 2025-01-16T18:52:07.809675\n\ud83d\udd17 References:\n1. https://www.dlink.com/en/security-bulletin/\n2. https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Unauthorized_Vulnerability/D-Link/DIR-816/d_status.md", "creation_timestamp": "2025-01-16T18:56:12.000000Z"}, {"uuid": "85aad945-bedd-4197-81dd-cf0ef4ce3d6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57681", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2001", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57681\n\ud83d\udd39 Description: An access control issue in the component form2alg.cgi of D-Link 816A2_FWv1.10CNB05_R1B011D88210 allows unauthenticated attackers to set the agl service of the device via a crafted POST request.\n\ud83d\udccf Published: 2025-01-16T00:00:00\n\ud83d\udccf Modified: 2025-01-16T18:52:08.716973\n\ud83d\udd17 References:\n1. https://www.dlink.com/en/security-bulletin/\n2. https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Unauthorized_Vulnerability/D-Link/DIR-816/form2alg.md", "creation_timestamp": "2025-01-16T18:56:11.000000Z"}, {"uuid": "488d6e16-85bc-410a-931c-307527b4fefe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57480", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1640", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57480\n\ud83d\udd39 Description: H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the AP configuration function. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands by sending a POST request to /bin/webs.\n\ud83d\udccf Published: 2025-01-14T00:00:00\n\ud83d\udccf Modified: 2025-01-14T22:03:45.948867\n\ud83d\udd17 References:\n1. http://h3c.com\n2. https://gist.github.com/XiaoCurry/16213a4d68f95f17cd0fc2cd07e78a90", "creation_timestamp": "2025-01-14T23:09:47.000000Z"}, {"uuid": "31c72dab-4096-4c84-a08c-2844369d6880", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57479", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1639", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57479\n\ud83d\udd39 Description: H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the mac address update function. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands by sending a POST request to /bin/webs.\n\ud83d\udccf Published: 2025-01-14T00:00:00\n\ud83d\udccf Modified: 2025-01-14T22:06:57.154626\n\ud83d\udd17 References:\n1. http://h3c.com\n2. https://gist.github.com/XiaoCurry/c7214be67a44a4a8858c5138ecd05984", "creation_timestamp": "2025-01-14T23:09:44.000000Z"}, {"uuid": "7075453e-d1a9-4c3b-bce5-836af040845f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57184", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2898", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57184\n\ud83d\udd39 Description: An issue was discovered in GPAC v0.8.0, as demonstrated by MP4Box. It contains a heap-based buffer overflow in gf_m2ts_process_pmt in media_tools/mpegts.c:2163 that can cause a denial of service (DOS) via a crafted MP4 file.\n\ud83d\udccf Published: 2025-01-24T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-24T13:58:39.059Z\n\ud83d\udd17 References:\n1. https://github.com/gpac/gpac/issues/1421\n2. https://github.com/gpac/gpac/commit/8c5e847185d74462d674ee7d28fb46c29dae6dd2", "creation_timestamp": "2025-01-24T14:04:32.000000Z"}, {"uuid": "8b21945f-834e-40de-9a33-84080ddbd81c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57625", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1774", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57625\n\ud83d\udd39 Description: An issue in the merge_table_prune_and_unionize component of MonetDB Server v11.49.1 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.\n\ud83d\udccf Published: 2025-01-14T00:00:00\n\ud83d\udccf Modified: 2025-01-15T15:50:33.618Z\n\ud83d\udd17 References:\n1. https://github.com/MonetDB/MonetDB/issues/7443", "creation_timestamp": "2025-01-15T15:55:00.000000Z"}, {"uuid": "57fdc09f-c1d1-4b1e-b2d6-924c5e4b2f3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57639", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1787", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57639\n\ud83d\udd39 Description: An issue in the dc_elt_size component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.\n\ud83d\udccf Published: 2025-01-14T00:00:00\n\ud83d\udccf Modified: 2025-01-15T15:37:55.133Z\n\ud83d\udd17 References:\n1. https://github.com/openlink/virtuoso-opensource/issues/1185", "creation_timestamp": "2025-01-15T15:55:17.000000Z"}, {"uuid": "1219d985-9634-4c67-993d-12d8102732f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57024", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1804", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57024\n\ud83d\udd39 Description: TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the \"eMinute\" parameter in setWiFiScheduleCfg.\n\ud83d\udccf Published: 2025-01-15T00:00:00\n\ud83d\udccf Modified: 2025-01-15T16:29:00.976184\n\ud83d\udd17 References:\n1. https://www.totolink.net/\n2. https://github.com/tiger5671/Vulnerabilities/blob/main/TOTOLINK%20X5000R/setWiFiScheduleCfg/setWiFiScheduleCfg.md", "creation_timestamp": "2025-01-15T16:54:50.000000Z"}, {"uuid": "0f1125b4-e9f4-4841-9829-75cb8d5320a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57889", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1757", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57889\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\npinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking\n\nIf a device uses MCP23xxx IO expander to receive IRQs, the following\nbug can happen:\n\n  BUG: sleeping function called from invalid context\n    at kernel/locking/mutex.c:283\n  in_atomic(): 1, irqs_disabled(): 1, non_block: 0, ...\n  preempt_count: 1, expected: 0\n  ...\n  Call Trace:\n  ...\n  __might_resched+0x104/0x10e\n  __might_sleep+0x3e/0x62\n  mutex_lock+0x20/0x4c\n  regmap_lock_mutex+0x10/0x18\n  regmap_update_bits_base+0x2c/0x66\n  mcp23s08_irq_set_type+0x1ae/0x1d6\n  __irq_set_trigger+0x56/0x172\n  __setup_irq+0x1e6/0x646\n  request_threaded_irq+0xb6/0x160\n  ...\n\nWe observed the problem while experimenting with a touchscreen driver which\nused MCP23017 IO expander (I2C).\n\nThe regmap in the pinctrl-mcp23s08 driver uses a mutex for protection from\nconcurrent accesses, which is the default for regmaps without .fast_io,\n.disable_locking, etc.\n\nmcp23s08_irq_set_type() calls regmap_update_bits_base(), and the latter\nlocks the mutex.\n\nHowever, __setup_irq() locks desc->lock spinlock before calling these\nfunctions. As a result, the system tries to lock the mutex whole holding\nthe spinlock.\n\nIt seems, the internal regmap locks are not needed in this driver at all.\nmcp->lock seems to protect the regmap from concurrent accesses already,\nexcept, probably, in mcp_pinconf_get/set.\n\nmcp23s08_irq_set_type() and mcp23s08_irq_mask/unmask() are called under\nchip_bus_lock(), which calls mcp23s08_irq_bus_lock(). The latter takes\nmcp->lock and enables regmap caching, so that the potentially slow I2C\naccesses are deferred until chip_bus_unlock().\n\nThe accesses to the regmap from mcp23s08_probe_one() do not need additional\nlocking.\n\nIn all remaining places where the regmap is accessed, except\nmcp_pinconf_get/set(), the driver already takes mcp->lock.\n\nThis patch adds locking in mcp_pinconf_get/set() and disables internal\nlocking in the regmap config. Among other things, it fixes the sleeping\nin atomic context described above.\n\ud83d\udccf Published: 2025-01-15T13:05:41.769Z\n\ud83d\udccf Modified: 2025-01-15T13:05:41.769Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/788d9e9a41b81893d6bb8faa05f045c975278318\n2. https://git.kernel.org/stable/c/c55d186376a87b468c9ee30f2195e0f3857f61a0\n3. https://git.kernel.org/stable/c/9372e160d8211a7e17f2abff8370794f182df785\n4. https://git.kernel.org/stable/c/0310cbad163a908d09d99c26827859365cd71fcb\n5. https://git.kernel.org/stable/c/8c6fd5803b988a5e78c9b9e42c70a936d7cfc6ec\n6. https://git.kernel.org/stable/c/830f838589522404cd7c2f0f540602f25034af61\n7. https://git.kernel.org/stable/c/a37eecb705f33726f1fb7cd2a67e514a15dfe693", "creation_timestamp": "2025-01-15T14:27:23.000000Z"}, {"uuid": "0ef9b03f-b59a-465c-91cf-38292c42bbbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57890", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1756", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57890\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/uverbs: Prevent integer overflow issue\n\nIn the expression \"cmd.wqe_size * cmd.wr_count\", both variables are u32\nvalues that come from the user so the multiplication can lead to integer\nwrapping.  Then we pass the result to uverbs_request_next_ptr() which also\ncould potentially wrap.  The \"cmd.sge_count * sizeof(struct ib_uverbs_sge)\"\nmultiplication can also overflow on 32bit systems although it's fine on\n64bit systems.\n\nThis patch does two things.  First, I've re-arranged the condition in\nuverbs_request_next_ptr() so that the use controlled variable \"len\" is on\none side of the comparison by itself without any math.  Then I've modified\nall the callers to use size_mul() for the multiplications.\n\ud83d\udccf Published: 2025-01-15T13:05:42.690Z\n\ud83d\udccf Modified: 2025-01-15T13:05:42.690Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/c57721b24bd897338a81a0ca5fff41600f0f1ad1\n2. https://git.kernel.org/stable/c/42a6eb4ed7a9a41ba0b83eb0c7e0225b5fca5608\n3. https://git.kernel.org/stable/c/c2f961c46ea0e5274c5c320d007c2dd949cf627a\n4. https://git.kernel.org/stable/c/346db03e9926ab7117ed9bf19665699c037c773c\n5. https://git.kernel.org/stable/c/b92667f755749cf10d9ef1088865c555ae83ffb7\n6. https://git.kernel.org/stable/c/b3ef4ae713360501182695dd47d6b4f6e1a43eb8\n7. https://git.kernel.org/stable/c/d0257e089d1bbd35c69b6c97ff73e3690ab149a9", "creation_timestamp": "2025-01-15T14:26:39.000000Z"}, {"uuid": "ac8f5a4b-c5f9-416a-a6b0-bf5e9793fca8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57892", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1755", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57892\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nocfs2: fix slab-use-after-free due to dangling pointer dqi_priv\n\nWhen mounting ocfs2 and then remounting it as read-only, a\nslab-use-after-free occurs after the user uses a syscall to\nquota_getnextquota.  Specifically, sb_dqinfo(sb, type)->dqi_priv is the\ndangling pointer.\n\nDuring the remounting process, the pointer dqi_priv is freed but is never\nset as null leaving it to be accessed.  Additionally, the read-only option\nfor remounting sets the DQUOT_SUSPENDED flag instead of setting the\nDQUOT_USAGE_ENABLED flags.  Moreover, later in the process of getting the\nnext quota, the function ocfs2_get_next_id is called and only checks the\nquota usage flags and not the quota suspended flags.\n\nTo fix this, I set dqi_priv to null when it is freed after remounting with\nread-only and put a check for DQUOT_SUSPENDED in ocfs2_get_next_id.\n\n[akpm@linux-foundation.org: coding-style cleanups]\n\ud83d\udccf Published: 2025-01-15T13:05:44.635Z\n\ud83d\udccf Modified: 2025-01-15T13:05:44.635Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/2e3d203b1adede46bbba049e497765d67865be18\n2. https://git.kernel.org/stable/c/ba950a02d8d23811aa1120affd3adedcfac6153d\n3. https://git.kernel.org/stable/c/5f3fd772d152229d94602bca243fbb658068a597", "creation_timestamp": "2025-01-15T14:25:31.000000Z"}, {"uuid": "e895bd5b-9250-4ff2-ab65-df2e4c0edda4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57857", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1744", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57857\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/siw: Remove direct link to net_device\n\nDo not manage a per device direct link to net_device. Rely\non associated ib_devices net_device management, not doubling\nthe effort locally. A badly managed local link to net_device\nwas causing a 'KASAN: slab-use-after-free' exception during\nsiw_query_port() call.\n\ud83d\udccf Published: 2025-01-15T13:10:28.613Z\n\ud83d\udccf Modified: 2025-01-15T13:10:28.613Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/4eafeb4f021c50d13f199239d913b37de3c83135\n2. https://git.kernel.org/stable/c/16b87037b48889d21854c8e97aec8a1baf2642b3", "creation_timestamp": "2025-01-15T14:12:06.000000Z"}, {"uuid": "2a5e6003-8d17-4a96-bae2-bc6c5b490e5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57802", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1745", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57802\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nnetrom: check buffer length before accessing it\n\nSyzkaller reports an uninit value read from ax25cmp when sending raw message\nthrough ieee802154 implementation.\n\n=====================================================\nBUG: KMSAN: uninit-value in ax25cmp+0x3a5/0x460 net/ax25/ax25_addr.c:119\n ax25cmp+0x3a5/0x460 net/ax25/ax25_addr.c:119\n nr_dev_get+0x20e/0x450 net/netrom/nr_route.c:601\n nr_route_frame+0x1a2/0xfc0 net/netrom/nr_route.c:774\n nr_xmit+0x5a/0x1c0 net/netrom/nr_dev.c:144\n __netdev_start_xmit include/linux/netdevice.h:4940 [inline]\n netdev_start_xmit include/linux/netdevice.h:4954 [inline]\n xmit_one net/core/dev.c:3548 [inline]\n dev_hard_start_xmit+0x247/0xa10 net/core/dev.c:3564\n __dev_queue_xmit+0x33b8/0x5130 net/core/dev.c:4349\n dev_queue_xmit include/linux/netdevice.h:3134 [inline]\n raw_sendmsg+0x654/0xc10 net/ieee802154/socket.c:299\n ieee802154_sock_sendmsg+0x91/0xc0 net/ieee802154/socket.c:96\n sock_sendmsg_nosec net/socket.c:730 [inline]\n __sock_sendmsg net/socket.c:745 [inline]\n ____sys_sendmsg+0x9c2/0xd60 net/socket.c:2584\n ___sys_sendmsg+0x28d/0x3c0 net/socket.c:2638\n __sys_sendmsg net/socket.c:2667 [inline]\n __do_sys_sendmsg net/socket.c:2676 [inline]\n __se_sys_sendmsg net/socket.c:2674 [inline]\n __x64_sys_sendmsg+0x307/0x490 net/socket.c:2674\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0x44/0x110 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x63/0x6b\n\nUninit was created at:\n slab_post_alloc_hook+0x129/0xa70 mm/slab.h:768\n slab_alloc_node mm/slub.c:3478 [inline]\n kmem_cache_alloc_node+0x5e9/0xb10 mm/slub.c:3523\n kmalloc_reserve+0x13d/0x4a0 net/core/skbuff.c:560\n __alloc_skb+0x318/0x740 net/core/skbuff.c:651\n alloc_skb include/linux/skbuff.h:1286 [inline]\n alloc_skb_with_frags+0xc8/0xbd0 net/core/skbuff.c:6334\n sock_alloc_send_pskb+0xa80/0xbf0 net/core/sock.c:2780\n sock_alloc_send_skb include/net/sock.h:1884 [inline]\n raw_sendmsg+0x36d/0xc10 net/ieee802154/socket.c:282\n ieee802154_sock_sendmsg+0x91/0xc0 net/ieee802154/socket.c:96\n sock_sendmsg_nosec net/socket.c:730 [inline]\n __sock_sendmsg net/socket.c:745 [inline]\n ____sys_sendmsg+0x9c2/0xd60 net/socket.c:2584\n ___sys_sendmsg+0x28d/0x3c0 net/socket.c:2638\n __sys_sendmsg net/socket.c:2667 [inline]\n __do_sys_sendmsg net/socket.c:2676 [inline]\n __se_sys_sendmsg net/socket.c:2674 [inline]\n __x64_sys_sendmsg+0x307/0x490 net/socket.c:2674\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0x44/0x110 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x63/0x6b\n\nCPU: 0 PID: 5037 Comm: syz-executor166 Not tainted 6.7.0-rc7-syzkaller-00003-gfbafc3e621c3 #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023\n=====================================================\n\nThis issue occurs because the skb buffer is too small, and it's actual\nallocation is aligned. This hides an actual issue, which is that nr_route_frame\ndoes not validate the buffer size before using it.\n\nFix this issue by checking skb->len before accessing any fields in skb->data.\n\nFound by Linux Verification Center (linuxtesting.org) with Syzkaller.\n\ud83d\udccf Published: 2025-01-15T13:10:25.685Z\n\ud83d\udccf Modified: 2025-01-15T13:10:25.685Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/64e9f54a14f2887be8634fb85cd2f13bec18a184\n2. https://git.kernel.org/stable/c/cf6befa7c569787f53440274bbed1405fc07738d\n3. https://git.kernel.org/stable/c/769e36c2119a51070faf58819c58274f57a088db\n4. https://git.kernel.org/stable/c/78a110332ae268d0b005247c3b9a7d703b875c49\n5. https://git.kernel.org/stable/c/f647d72245aadce30618f4c8fd3803904418dbec\n6. https://git.kernel.org/stable/c/3ba7f80d98d4965349cfcd258dd78418496c1625\n7. https://git.kernel.org/stable/c/a4fd163aed2edd967a244499754dec991d8b4c7d", "creation_timestamp": "2025-01-15T14:14:18.000000Z"}, {"uuid": "ab739760-dcb0-435b-afef-81cf719d2318", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57898", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1753", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57898\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: cfg80211: clear link ID from bitmap during link delete after clean up\n\nCurrently, during link deletion, the link ID is first removed from the\nvalid_links bitmap before performing any clean-up operations. However, some\nfunctions require the link ID to remain in the valid_links bitmap. One\nsuch example is cfg80211_cac_event(). The flow is -\n\nnl80211_remove_link()\n    cfg80211_remove_link()\n        ieee80211_del_intf_link()\n            ieee80211_vif_set_links()\n                ieee80211_vif_update_links()\n                    ieee80211_link_stop()\n                        cfg80211_cac_event()\n\ncfg80211_cac_event() requires link ID to be present but it is cleared\nalready in cfg80211_remove_link(). Ultimately, WARN_ON() is hit.\n\nTherefore, clear the link ID from the bitmap only after completing the link\nclean-up.\n\ud83d\udccf Published: 2025-01-15T13:05:49.718Z\n\ud83d\udccf Modified: 2025-01-15T13:05:49.718Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/ae07daf440d3220d0986e676317a5da66e4f9dfd\n2. https://git.kernel.org/stable/c/b5c32ff6a3a38c74facdd1fe34c0d709a55527fd", "creation_timestamp": "2025-01-15T14:22:18.000000Z"}, {"uuid": "df390441-21d3-430f-a957-55f0670e4443", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57899", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1752", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57899\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: fix mbss changed flags corruption on 32 bit systems\n\nOn 32-bit systems, the size of an unsigned long is 4 bytes,\nwhile a u64 is 8 bytes. Therefore, when using\nor_each_set_bit(bit, &bits, sizeof(changed) * BITS_PER_BYTE),\nthe code is incorrectly searching for a bit in a 32-bit\nvariable that is expected to be 64 bits in size,\nleading to incorrect bit finding.\n\nSolution: Ensure that the size of the bits variable is correctly\nadjusted for each architecture.\n\n Call Trace:\n  ? show_regs+0x54/0x58\n  ? __warn+0x6b/0xd4\n  ? ieee80211_link_info_change_notify+0xcc/0xd4 [mac80211]\n  ? report_bug+0x113/0x150\n  ? exc_overflow+0x30/0x30\n  ? handle_bug+0x27/0x44\n  ? exc_invalid_op+0x18/0x50\n  ? handle_exception+0xf6/0xf6\n  ? exc_overflow+0x30/0x30\n  ? ieee80211_link_info_change_notify+0xcc/0xd4 [mac80211]\n  ? exc_overflow+0x30/0x30\n  ? ieee80211_link_info_change_notify+0xcc/0xd4 [mac80211]\n  ? ieee80211_mesh_work+0xff/0x260 [mac80211]\n  ? cfg80211_wiphy_work+0x72/0x98 [cfg80211]\n  ? process_one_work+0xf1/0x1fc\n  ? worker_thread+0x2c0/0x3b4\n  ? kthread+0xc7/0xf0\n  ? mod_delayed_work_on+0x4c/0x4c\n  ? kthread_complete_and_exit+0x14/0x14\n  ? ret_from_fork+0x24/0x38\n  ? kthread_complete_and_exit+0x14/0x14\n  ? ret_from_fork_asm+0xf/0x14\n  ? entry_INT80_32+0xf0/0xf0\n\n[restore no-op path for no changes]\n\ud83d\udccf Published: 2025-01-15T13:05:50.701Z\n\ud83d\udccf Modified: 2025-01-15T13:05:50.701Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/86772872f9f5097cd03d0e1c6813238bd38c250b\n2. https://git.kernel.org/stable/c/36b739637d7042843f9df57212ecee6ed6e0d4b2\n3. https://git.kernel.org/stable/c/49dba1ded8dd5a6a12748631403240b2ab245c34", "creation_timestamp": "2025-01-15T14:21:29.000000Z"}, {"uuid": "4445ebe4-5c6f-439e-ae6f-d703c8e11cdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57159", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1977", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57159\n\ud83d\udd39 Description: 07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via /erp.07fly.net:80/oa/OaWorkReport/add.html.\n\ud83d\udccf Published: 2025-01-16T00:00:00\n\ud83d\udccf Modified: 2025-01-16T16:08:49.758472\n\ud83d\udd17 References:\n1. https://github.com/1091101/yang.xian/tree/main/6/readme.md", "creation_timestamp": "2025-01-16T16:55:38.000000Z"}, {"uuid": "eafabe4c-0716-476f-892b-7e803a76220f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57679", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2000", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57679\n\ud83d\udd39 Description: An access control issue in the component form2RepeaterSetup.cgi of D-Link 816A2_FWv1.10CNB05_R1B011D88210 allows unauthenticated attackers to set the 2.4G and 5G repeater service of the device via a crafted POST request.\n\ud83d\udccf Published: 2025-01-16T00:00:00\n\ud83d\udccf Modified: 2025-01-16T18:52:10.243485\n\ud83d\udd17 References:\n1. https://www.dlink.com/en/security-bulletin/\n2. https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Unauthorized_Vulnerability/D-Link/DIR-816/form2RepeaterSetup.md", "creation_timestamp": "2025-01-16T18:56:07.000000Z"}, {"uuid": "85e5f734-9c93-4c8d-86fd-b7df868ae6e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57582", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2046", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57582\n\ud83d\udd39 Description: Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the startIP parameter in the formSetPPTPServer function.\n\ud83d\udccf Published: 2025-01-16T00:00:00\n\ud83d\udccf Modified: 2025-01-16T20:25:10.686971\n\ud83d\udd17 References:\n1. https://github.com/qijiale/Tenda/tree/main/9", "creation_timestamp": "2025-01-16T20:56:06.000000Z"}, {"uuid": "bc8277af-129e-462c-b626-05fb27750f74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57626", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1777", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57626\n\ud83d\udd39 Description: An issue in the mat_join2 component of MonetDB Server v11.49.1 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.\n\ud83d\udccf Published: 2025-01-14T00:00:00\n\ud83d\udccf Modified: 2025-01-15T15:46:35.301Z\n\ud83d\udd17 References:\n1. https://github.com/MonetDB/MonetDB/issues/7442", "creation_timestamp": "2025-01-15T15:55:03.000000Z"}, {"uuid": "e87d1251-c940-42bb-9971-cb1f42599e13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57023", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1801", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57023\n\ud83d\udd39 Description: TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the \"week\" parameter in setWiFiScheduleCfg.\n\ud83d\udccf Published: 2025-01-15T00:00:00\n\ud83d\udccf Modified: 2025-01-15T16:34:15.827516\n\ud83d\udd17 References:\n1. https://www.totolink.net/\n2. https://github.com/tiger5671/Vulnerabilities/blob/main/TOTOLINK%20X5000R/setWiFiScheduleCfg/setWiFiScheduleCfg.md", "creation_timestamp": "2025-01-15T16:54:44.000000Z"}, {"uuid": "d8d4f693-5126-4ab2-974b-48cf01a837db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57627", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1780", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57627\n\ud83d\udd39 Description: An issue in the gc_col component of MonetDB Server v11.49.1 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.\n\ud83d\udccf Published: 2025-01-14T00:00:00\n\ud83d\udccf Modified: 2025-01-15T15:44:17.554Z\n\ud83d\udd17 References:\n1. https://github.com/MonetDB/MonetDB/issues/7440", "creation_timestamp": "2025-01-15T15:55:09.000000Z"}, {"uuid": "f5d1c9e1-2d7f-486d-8dec-daab73a5c7a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57021", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1803", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57021\n\ud83d\udd39 Description: TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the \"eHour\" parameter in setWiFiScheduleCfg.\n\ud83d\udccf Published: 2025-01-15T00:00:00\n\ud83d\udccf Modified: 2025-01-15T16:29:36.273173\n\ud83d\udd17 References:\n1. https://www.totolink.net/\n2. https://github.com/tiger5671/Vulnerabilities/blob/main/TOTOLINK%20X5000R/setWiFiScheduleCfg/setWiFiScheduleCfg.md", "creation_timestamp": "2025-01-15T16:54:49.000000Z"}, {"uuid": "26a858a5-29cd-4636-b4ad-b5e4b502dde4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57638", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1784", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57638\n\ud83d\udd39 Description: An issue in the dfe_body_copy component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.\n\ud83d\udccf Published: 2025-01-14T00:00:00\n\ud83d\udccf Modified: 2025-01-15T15:42:12.351Z\n\ud83d\udd17 References:\n1. https://github.com/openlink/virtuoso-opensource/issues/1190", "creation_timestamp": "2025-01-15T15:55:15.000000Z"}, {"uuid": "2a4de73f-8659-4348-9226-cf69bc53140c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57016", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1794", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57016\n\ud83d\udd39 Description: TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the \"user\" parameter in setVpnAccountCfg.\n\ud83d\udccf Published: 2025-01-15T00:00:00\n\ud83d\udccf Modified: 2025-01-15T16:49:03.766983\n\ud83d\udd17 References:\n1. https://www.totolink.net/\n2. https://github.com/tiger5671/Vulnerabilities/blob/main/TOTOLINK%20X5000R/setVpnAccountCfg/setVpnAccountCfg.md", "creation_timestamp": "2025-01-15T16:54:36.000000Z"}, {"uuid": "32eea5e5-111f-4f47-a787-9bffbf68da14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57017", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1793", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57017\n\ud83d\udd39 Description: TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the \"pass\" parameter in setVpnAccountCfg.\n\ud83d\udccf Published: 2025-01-15T00:00:00\n\ud83d\udccf Modified: 2025-01-15T16:49:23.964301\n\ud83d\udd17 References:\n1. https://www.totolink.net/\n2. https://github.com/tiger5671/Vulnerabilities/blob/main/TOTOLINK%20X5000R/setVpnAccountCfg/setVpnAccountCfg.md", "creation_timestamp": "2025-01-15T16:54:35.000000Z"}, {"uuid": "068c497f-960c-4f9e-89c8-a992ab711479", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57018", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1792", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57018\n\ud83d\udd39 Description: TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the \"desc\" parameter in setVpnAccountCfg.\n\ud83d\udccf Published: 2025-01-15T00:00:00\n\ud83d\udccf Modified: 2025-01-15T16:49:48.207118\n\ud83d\udd17 References:\n1. https://www.totolink.net/\n2. https://github.com/tiger5671/Vulnerabilities/blob/main/TOTOLINK%20X5000R/setVpnAccountCfg/setVpnAccountCfg.md", "creation_timestamp": "2025-01-15T16:54:34.000000Z"}, {"uuid": "663684f7-0c48-4387-a69e-1a6626b865c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57019", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1790", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57019\n\ud83d\udd39 Description: TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the \"limit\" parameter in setVpnAccountCfg.\n\ud83d\udccf Published: 2025-01-15T00:00:00\n\ud83d\udccf Modified: 2025-01-15T16:50:16.198867\n\ud83d\udd17 References:\n1. https://www.totolink.net/\n2. https://github.com/tiger5671/Vulnerabilities/blob/main/TOTOLINK%20X5000R/setVpnAccountCfg/setVpnAccountCfg.md", "creation_timestamp": "2025-01-15T16:54:30.000000Z"}, {"uuid": "9a917644-052c-474e-967b-c6bb105abd2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57025", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1800", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57025\n\ud83d\udd39 Description: TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the \"desc\" parameter in setWiFiScheduleCfg.\n\ud83d\udccf Published: 2025-01-15T00:00:00\n\ud83d\udccf Modified: 2025-01-15T16:34:43.922701\n\ud83d\udd17 References:\n1. https://www.totolink.net/\n2. https://github.com/tiger5671/Vulnerabilities/blob/main/TOTOLINK%20X5000R/setWiFiScheduleCfg/setWiFiScheduleCfg.md", "creation_timestamp": "2025-01-15T16:54:44.000000Z"}, {"uuid": "0cbab2b4-454e-4337-a2bf-a6162b0fa847", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57020", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1805", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57020\n\ud83d\udd39 Description: TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the \"sMinute\" parameter in setWiFiScheduleCfg.\n\ud83d\udccf Published: 2025-01-15T00:00:00\n\ud83d\udccf Modified: 2025-01-15T16:27:21.350511\n\ud83d\udd17 References:\n1. https://www.totolink.net/\n2. https://github.com/tiger5671/Vulnerabilities/blob/main/TOTOLINK%20X5000R/setWiFiScheduleCfg/setWiFiScheduleCfg.md", "creation_timestamp": "2025-01-15T16:54:51.000000Z"}, {"uuid": "37a3d2f1-1676-41ac-81f8-8cbfbb58dba4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57022", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1802", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57022\n\ud83d\udd39 Description: TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the \"sHour\" parameter in setWiFiScheduleCfg.\n\ud83d\udccf Published: 2025-01-15T00:00:00\n\ud83d\udccf Modified: 2025-01-15T16:29:58.315058\n\ud83d\udd17 References:\n1. https://www.totolink.net/\n2. https://github.com/tiger5671/Vulnerabilities/blob/main/TOTOLINK%20X5000R/setWiFiScheduleCfg/setWiFiScheduleCfg.md", "creation_timestamp": "2025-01-15T16:54:45.000000Z"}, {"uuid": "1101dc28-a2e9-45a1-984e-b8c1a2fe2a39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57211", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1863", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57211\n\ud83d\udd39 Description: TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the modifyOne parameter in the enable_wsh function.\n\ud83d\udccf Published: 2025-01-10T00:00:00\n\ud83d\udccf Modified: 2025-01-15T20:27:42.931Z\n\ud83d\udd17 References:\n1. https://github.com/yanggao017/vuln/blob/main/TOTOLINK/A6000R/CI_11_enable_wsh/README.md", "creation_timestamp": "2025-01-15T20:55:04.000000Z"}, {"uuid": "39d2de1c-f49f-4c00-adf0-831ea0be3249", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57241", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3976", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57241\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Dedecms 5.71sp1 and earlier is vulnerable to URL redirect. In the web application, a logic error does not judge the input GET request resulting in URL redirection.\n\ud83d\udccf Published: 2025-02-12T00:32:16Z\n\ud83d\udccf Modified: 2025-02-12T00:32:16Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-57241\n2. https://github.com/woshidaheike/dedecms-url-redirection", "creation_timestamp": "2025-02-12T01:13:59.000000Z"}, {"uuid": "1d561e29-8ce1-4adf-b77c-a0d95becc9e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57160", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1978", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57160\n\ud83d\udd39 Description: 07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via /erp.07fly.net:80/oa/OaTask/edit.html.\n\ud83d\udccf Published: 2025-01-16T00:00:00\n\ud83d\udccf Modified: 2025-01-16T16:07:45.376359\n\ud83d\udd17 References:\n1. https://github.com/1091101/yang.xian/tree/main/7/readme.md", "creation_timestamp": "2025-01-16T16:55:39.000000Z"}, {"uuid": "1886d2a5-5ce3-4b69-a1a0-16cc3aef4b38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57772", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1985", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57772\n\ud83d\udd39 Description: A cross-site scripting (XSS) vulnerability in the /bumph/getDraftListPage?type interface of JFinalOA before v2025.01.01 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.\n\ud83d\udccf Published: 2025-01-16T00:00:00\n\ud83d\udccf Modified: 2025-01-16T17:42:57.587264\n\ud83d\udd17 References:\n1. https://gitee.com/r1bbit/JFinalOA/issues/IBHUQ1", "creation_timestamp": "2025-01-16T17:55:39.000000Z"}, {"uuid": "7bc0590c-2bb3-4a67-bb4f-d23749f4f400", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57775", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1983", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57775\n\ud83d\udd39 Description: JFinalOA before v2025.01.01 was discovered to contain a SQL injection vulnerability via the component getWorkFlowHis?insid.\n\ud83d\udccf Published: 2025-01-16T00:00:00\n\ud83d\udccf Modified: 2025-01-16T17:48:00.956257\n\ud83d\udd17 References:\n1. https://gitee.com/r1bbit/JFinalOA/issues/IBHURT", "creation_timestamp": "2025-01-16T17:55:34.000000Z"}, {"uuid": "f2736181-179a-41b7-a69d-e55e2bca49c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57035", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2212", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57035\n\ud83d\udd39 Description: WeGIA v3.2.0 is vulnerable to SQL Injection viathe nextPage parameter in /controle/control.php.\n\ud83d\udccf Published: 2025-01-17T00:00:00\n\ud83d\udccf Modified: 2025-01-17T20:12:17.057205\n\ud83d\udd17 References:\n1. https://github.com/nilsonLazarin/WeGIA/issues/827\n2. https://github.com/nmmorette/vulnerability-research/tree/main/CVE-2024-57035", "creation_timestamp": "2025-01-17T20:57:58.000000Z"}, {"uuid": "c9078afd-dadb-4537-a465-5a399ed286ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57161", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1976", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57161\n\ud83d\udd39 Description: 07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via /erp.07fly.net:80/oa/OaWorkReport/edit.html\n\ud83d\udccf Published: 2025-01-16T00:00:00\n\ud83d\udccf Modified: 2025-01-16T16:09:12.819539\n\ud83d\udd17 References:\n1. https://github.com/1091101/yang.xian/tree/main/8/readme.md", "creation_timestamp": "2025-01-16T16:55:34.000000Z"}, {"uuid": "e3dba54f-8e54-4136-a600-aa4b8ce04cbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57162", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1975", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57162\n\ud83d\udd39 Description: Campcodes Cybercafe Management System v1.0 is vulnerable to SQL Injection in /ccms/view-user-detail.php.\n\ud83d\udccf Published: 2025-01-16T00:00:00\n\ud83d\udccf Modified: 2025-01-16T16:12:57.644626\n\ud83d\udd17 References:\n1. https://github.com/h1-wh0areu/bug_report/blob/main/cybercafe-management-system/SQLi-1.md", "creation_timestamp": "2025-01-16T16:55:33.000000Z"}, {"uuid": "321a462c-67bb-4152-b835-fb72701ffd76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57227", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1992", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57227\n\ud83d\udd39 Description: Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_do_enr_pbc_wps function.\n\ud83d\udccf Published: 2025-01-10T00:00:00\n\ud83d\udccf Modified: 2025-01-16T17:35:15.350Z\n\ud83d\udd17 References:\n1. https://github.com/yanggao017/vuln/blob/main/Linksys/E7350/CI_4_apcli_do_enr_pbc_wps/README.md", "creation_timestamp": "2025-01-16T17:55:47.000000Z"}, {"uuid": "ba4368a7-071d-4905-a154-50bb86cc3ff4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57228", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1995", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57228\n\ud83d\udd39 Description: Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the iface parameter in the vif_disable function.\n\ud83d\udccf Published: 2025-01-10T00:00:00\n\ud83d\udccf Modified: 2025-01-16T17:34:17.304Z\n\ud83d\udd17 References:\n1. https://github.com/yanggao017/vuln/blob/main/Linksys/E7350/CI_1_vif_disable/README.md", "creation_timestamp": "2025-01-16T17:55:53.000000Z"}, {"uuid": "64d89d36-83d9-4dcf-80d1-2bfe5a64fc3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57769", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1994", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57769\n\ud83d\udd39 Description: JFinalOA before v2025.01.01 was discovered to contain a SQL injection vulnerability via the component borrowmoney/listData?applyUser.\n\ud83d\udccf Published: 2025-01-16T00:00:00\n\ud83d\udccf Modified: 2025-01-16T17:34:24.703220\n\ud83d\udd17 References:\n1. https://gitee.com/r1bbit/JFinalOA/issues/IBHUNR", "creation_timestamp": "2025-01-16T17:55:49.000000Z"}, {"uuid": "4ddabddd-aa95-4f8a-b378-b69c2cf7c7e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57784", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2075", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57784\n\ud83d\udd39 Description: An issue in the component /php/script_uploads.php of Zenitel AlphaWeb XE v11.2.3.10 allows attackers to execute a directory traversal.\n\ud83d\udccf Published: 2025-01-16T00:00:00\n\ud83d\udccf Modified: 2025-01-16T22:20:07.448624\n\ud83d\udd17 References:\n1. https://gist.github.com/s4fv4n/8cc4e4cb6fd028e803898837b73aa342", "creation_timestamp": "2025-01-16T22:56:32.000000Z"}, {"uuid": "4bcac39a-15a0-4945-8514-1bf3d60ea55f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57785", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2072", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57785\n\ud83d\udd39 Description: Zenitel AlphaWeb XE v11.2.3.10 was discovered to contain a local file inclusion vulnerability via the component amc_uploads.php.\n\ud83d\udccf Published: 2025-01-16T00:00:00\n\ud83d\udccf Modified: 2025-01-16T22:21:40.116337\n\ud83d\udd17 References:\n1. https://gist.github.com/s4fv4n/56c326450dcb3ab808b5ce8242a11e30", "creation_timestamp": "2025-01-16T22:56:27.000000Z"}, {"uuid": "fc330d95-48bc-45d3-8d2c-377bbfbbe95a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57678", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1999", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57678\n\ud83d\udd39 Description: An access control issue in the component form2WlAc.cgi of D-Link 816A2_FWv1.10CNB05_R1B011D88210 allows unauthenticated attackers to set the 2.4G and 5G mac access control list of the device via a crafted POST request.\n\ud83d\udccf Published: 2025-01-16T00:00:00\n\ud83d\udccf Modified: 2025-01-16T18:52:11.247384\n\ud83d\udd17 References:\n1. https://www.dlink.com/en/security-bulletin/\n2. https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Unauthorized_Vulnerability/D-Link/DIR-816/form2WlAc.md", "creation_timestamp": "2025-01-16T18:56:06.000000Z"}, {"uuid": "dc46f76d-48c6-4a33-9e6a-88c56d973ac7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57677", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1998", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57677\n\ud83d\udd39 Description: An access control issue in the component form2Wan.cgi of D-Link 816A2_FWv1.10CNB05_R1B011D88210 allows unauthenticated attackers to set the wan service of the device via a crafted POST request.\n\ud83d\udccf Published: 2025-01-16T00:00:00\n\ud83d\udccf Modified: 2025-01-16T18:52:23.547274\n\ud83d\udd17 References:\n1. https://www.dlink.com/en/security-bulletin/\n2. https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Unauthorized_Vulnerability/D-Link/DIR-816/form2Wan.md", "creation_timestamp": "2025-01-16T18:56:05.000000Z"}, {"uuid": "61119694-8cf7-407c-9be4-a03b8bc4013d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57676", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1997", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57676\n\ud83d\udd39 Description: An access control issue in the component form2WlanBasicSetup.cgi of D-Link 816A2_FWv1.10CNB05_R1B011D88210 allows unauthenticated attackers to set the 2.4G and 5G wlan service of the device via a crafted POST request.\n\ud83d\udccf Published: 2025-01-16T00:00:00\n\ud83d\udccf Modified: 2025-01-16T18:52:24.674459\n\ud83d\udd17 References:\n1. https://www.dlink.com/en/security-bulletin/\n2. https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Unauthorized_Vulnerability/D-Link/DIR-816/form2WlanBasicSetup.md", "creation_timestamp": "2025-01-16T18:56:05.000000Z"}, {"uuid": "750d488f-326a-42cd-9c76-7ac53b9c7a1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57680", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1996", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57680\n\ud83d\udd39 Description: An access control issue in the component form2PortriggerRule.cgi of D-Link 816A2_FWv1.10CNB05_R1B011D88210 allows unauthenticated attackers to set the port trigger of the device via a crafted POST request.\n\ud83d\udccf Published: 2025-01-16T00:00:00\n\ud83d\udccf Modified: 2025-01-16T18:52:26.336999\n\ud83d\udd17 References:\n1. https://www.dlink.com/en/security-bulletin/\n2. https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Unauthorized_Vulnerability/D-Link/DIR-816/form2PortriggerRule.md", "creation_timestamp": "2025-01-16T18:56:04.000000Z"}, {"uuid": "c67e27c3-c7f5-47b1-b7a3-3482617e5a44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57683", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2003", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57683\n\ud83d\udd39 Description: An access control issue in the component websURLFilterAddDel of D-Link 816A2_FWv1.10CNB05_R1B011D88210 allows unauthenticated attackers to set the filter settings of the device via a crafted POST request.\n\ud83d\udccf Published: 2025-01-16T00:00:00\n\ud83d\udccf Modified: 2025-01-16T18:52:07.036024\n\ud83d\udd17 References:\n1. https://www.dlink.com/en/security-bulletin/\n2. https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Unauthorized_Vulnerability/D-Link/DIR-816/websURLFilterAddDel.md", "creation_timestamp": "2025-01-16T18:56:12.000000Z"}, {"uuid": "46149426-e887-4c79-996a-4afa74b32f9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57583", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2045", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57583\n\ud83d\udd39 Description: Tenda AC18 V15.03.05.19 was discovered to contain a command injection vulnerability via the usbName parameter in the formSetSambaConf function.\n\ud83d\udccf Published: 2025-01-16T00:00:00\n\ud83d\udccf Modified: 2025-01-16T20:25:12.178178\n\ud83d\udd17 References:\n1. https://github.com/qijiale/Tenda/tree/main/10", "creation_timestamp": "2025-01-16T20:56:05.000000Z"}, {"uuid": "bf001a82-0732-4f7e-b31f-6b85533ac28b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57703", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2082", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57703\n\ud83d\udd39 Description: Tenda AC8v4 V16.03.34.06 has a stack overflow vulnerability. Affected by this vulnerability is the function setSchedWifi of the file /goform/openSchedWifi. The manipulation of the argument schedEndTime leads to stack-based buffer overflow.\n\ud83d\udccf Published: 2025-01-16T00:00:00\n\ud83d\udccf Modified: 2025-01-16T22:10:21.679133\n\ud83d\udd17 References:\n1. https://github.com/Pr0b1em/IoT/blob/master/Tenda%20AC8v4%20V16.03.34.06.md", "creation_timestamp": "2025-01-16T22:56:40.000000Z"}, {"uuid": "7c2f6a95-9ea8-4feb-86c6-0a59cc936dda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57704", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2081", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57704\n\ud83d\udd39 Description: Tenda AC8v4 V16.03.34.06 has a stack overflow vulnerability. Affected by this vulnerability is the function setSchedWifi of the file /goform/openSchedWifi. The manipulation of the argument schedStartTime leads to stack-based buffer overflow.\n\ud83d\udccf Published: 2025-01-16T00:00:00\n\ud83d\udccf Modified: 2025-01-16T22:12:12.312759\n\ud83d\udd17 References:\n1. https://github.com/Pr0b1em/IoT/blob/master/Tenda%20AC8v4%20V16.03.34.06.md", "creation_timestamp": "2025-01-16T22:56:39.000000Z"}, {"uuid": "1c8e2fa5-8b05-4011-9bbe-e949e6637aaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57883", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2122", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57883\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nmm: hugetlb: independent PMD page table shared count\n\nThe folio refcount may be increased unexpectly through try_get_folio() by\ncaller such as split_huge_pages.  In huge_pmd_unshare(), we use refcount\nto check whether a pmd page table is shared.  The check is incorrect if\nthe refcount is increased by the above caller, and this can cause the page\ntable leaked:\n\n BUG: Bad page state in process sh  pfn:109324\n page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x66 pfn:0x109324\n flags: 0x17ffff800000000(node=0|zone=2|lastcpupid=0xfffff)\n page_type: f2(table)\n raw: 017ffff800000000 0000000000000000 0000000000000000 0000000000000000\n raw: 0000000000000066 0000000000000000 00000000f2000000 0000000000000000\n page dumped because: nonzero mapcount\n ...\n CPU: 31 UID: 0 PID: 7515 Comm: sh Kdump: loaded Tainted: G    B              6.13.0-rc2master+ #7\n Tainted: [B]=BAD_PAGE\n Hardware name: QEMU KVM Virtual Machine, BIOS 0.0.0 02/06/2015\n Call trace:\n  show_stack+0x20/0x38 (C)\n  dump_stack_lvl+0x80/0xf8\n  dump_stack+0x18/0x28\n  bad_page+0x8c/0x130\n  free_page_is_bad_report+0xa4/0xb0\n  free_unref_page+0x3cc/0x620\n  __folio_put+0xf4/0x158\n  split_huge_pages_all+0x1e0/0x3e8\n  split_huge_pages_write+0x25c/0x2d8\n  full_proxy_write+0x64/0xd8\n  vfs_write+0xcc/0x280\n  ksys_write+0x70/0x110\n  __arm64_sys_write+0x24/0x38\n  invoke_syscall+0x50/0x120\n  el0_svc_common.constprop.0+0xc8/0xf0\n  do_el0_svc+0x24/0x38\n  el0_svc+0x34/0x128\n  el0t_64_sync_handler+0xc8/0xd0\n  el0t_64_sync+0x190/0x198\n\nThe issue may be triggered by damon, offline_page, page_idle, etc, which\nwill increase the refcount of page table.\n\n1. The page table itself will be discarded after reporting the\n   \"nonzero mapcount\".\n\n2. The HugeTLB page mapped by the page table miss freeing since we\n   treat the page table as shared and a shared page table will not be\n   unmapped.\n\nFix it by introducing independent PMD page table shared count.  As\ndescribed by comment, pt_index/pt_mm/pt_frag_refcount are used for s390\ngmap, x86 pgds and powerpc, pt_share_count is used for x86/arm64/riscv\npmds, so we can reuse the field as pt_share_count.\n\ud83d\udccf Published: 2025-01-15T13:05:36.352Z\n\ud83d\udccf Modified: 2025-01-17T13:27:06.115Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/56b274473d6e7e7375f2d0a2b4aca11d67c6b52f\n2. https://git.kernel.org/stable/c/2e31443a0d18ae43b9d29e02bf0563f07772193d\n3. https://git.kernel.org/stable/c/59d9094df3d79443937add8700b2ef1a866b1081", "creation_timestamp": "2025-01-17T13:56:44.000000Z"}, {"uuid": "f2a26977-7671-4bda-8b57-369e3d6a2edd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57887", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2121", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57887\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\ndrm: adv7511: Fix use-after-free in adv7533_attach_dsi()\n\nThe host_node pointer was assigned and freed in adv7533_parse_dt(), and\nlater, adv7533_attach_dsi() uses the same. Fix this use-after-free issue\nby\u00a0dropping of_node_put() in adv7533_parse_dt() and calling of_node_put()\nin error path of probe() and also in the remove().\n\ud83d\udccf Published: 2025-01-15T13:05:39.933Z\n\ud83d\udccf Modified: 2025-01-17T13:27:07.276Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/d208571943ffddc438a7ce533d5d0b9219806242\n2. https://git.kernel.org/stable/c/1f49aaf55652580ae63ab83d67211fe6a55d83dc\n3. https://git.kernel.org/stable/c/ca9d077350fa21897de8bf64cba23b198740aab5\n4. https://git.kernel.org/stable/c/81adbd3ff21c1182e06aa02c6be0bfd9ea02d8e8", "creation_timestamp": "2025-01-17T13:56:43.000000Z"}, {"uuid": "b4e3073e-8392-4ac2-bd23-2b437713ed09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57617", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2178", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57617\n\ud83d\udd39 Description: An issue in the dameraulevenshtein component of MonetDB Server v11.49.1 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.\n\ud83d\udccf Published: 2025-01-14T00:00:00\n\ud83d\udccf Modified: 2025-01-17T17:42:52.791Z\n\ud83d\udd17 References:\n1. https://github.com/MonetDB/MonetDB/issues/7432", "creation_timestamp": "2025-01-17T17:57:11.000000Z"}, {"uuid": "da0044f8-4882-4670-b555-0e3570403433", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57615", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2170", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57615\n\ud83d\udd39 Description: An issue in the BATcalcbetween_intern component of MonetDB Server v11.47.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.\n\ud83d\udccf Published: 2025-01-14T00:00:00\n\ud83d\udccf Modified: 2025-01-17T17:48:35.374Z\n\ud83d\udd17 References:\n1. https://github.com/MonetDB/MonetDB/issues/7413", "creation_timestamp": "2025-01-17T17:57:01.000000Z"}, {"uuid": "9beb4445-b1f8-4189-b46d-c237cd019d91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57372", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2226", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57372\n\ud83d\udd39 Description: Cross Site Scripting vulnerability in InformationPush master version allows a remote attacker to obtain sensitive information via the title, time and msg parameters\n\ud83d\udccf Published: 2025-01-17T00:00:00\n\ud83d\udccf Modified: 2025-01-17T21:24:49.324Z\n\ud83d\udd17 References:\n1. https://github.com/kaixin1995\n2. https://github.com/kaixin1995/InformationPush\n3. https://royblume.github.io/CVE-2024-57372/", "creation_timestamp": "2025-01-17T21:57:03.000000Z"}, {"uuid": "54aba7e4-ca27-460d-bca2-d6f5a77210f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57905", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2347", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57905\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\niio: adc: ti-ads1119: fix information leak in triggered buffer\n\nThe 'scan' local struct is used to push data to user space from a\ntriggered buffer, but it has a hole between the sample (unsigned int)\nand the timestamp. This hole is never initialized.\n\nInitialize the struct to zero before using it to avoid pushing\nuninitialized information to userspace.\n\ud83d\udccf Published: 2025-01-19T11:52:29.699Z\n\ud83d\udccf Modified: 2025-01-19T11:52:29.699Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/2f1687cca911a2f294313c762e0646cd9e7be8cc\n2. https://git.kernel.org/stable/c/75f339d3ecd38cb1ce05357d647189d4a7f7ed08", "creation_timestamp": "2025-01-19T11:58:46.000000Z"}, {"uuid": "a6e721ab-2ac0-4c89-b6f4-e05182f70b55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57906", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2346", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57906\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\niio: adc: ti-ads8688: fix information leak in triggered buffer\n\nThe 'buffer' local array is used to push data to user space from a\ntriggered buffer, but it does not set values for inactive channels, as\nit only uses iio_for_each_active_channel() to assign new values.\n\nInitialize the array to zero before using it to avoid pushing\nuninitialized information to userspace.\n\ud83d\udccf Published: 2025-01-19T11:52:30.365Z\n\ud83d\udccf Modified: 2025-01-19T11:52:30.365Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/ebe2672bc42a0dfe31bb539f8ce79d024aa7e46d\n2. https://git.kernel.org/stable/c/455df95eb8f24a37abc549d6738fc8ee07eb623b\n3. https://git.kernel.org/stable/c/485570ed82b7a6bb109fa1d0a79998e21f7f4c73\n4. https://git.kernel.org/stable/c/2a7377ccfd940cd6e9201756aff1e7852c266e69", "creation_timestamp": "2025-01-19T11:58:42.000000Z"}, {"uuid": "9e3ff51a-dfea-43b6-89bb-71037c19b7d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57907", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2345", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57907\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\niio: adc: rockchip_saradc: fix information leak in triggered buffer\n\nThe 'data' local struct is used to push data to user space from a\ntriggered buffer, but it does not set values for inactive channels, as\nit only uses iio_for_each_active_channel() to assign new values.\n\nInitialize the struct to zero before using it to avoid pushing\nuninitialized information to userspace.\n\ud83d\udccf Published: 2025-01-19T11:52:31.039Z\n\ud83d\udccf Modified: 2025-01-19T11:52:31.039Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/5a95fbbecec7a34bbad5dcc3156700b8711d53c4\n2. https://git.kernel.org/stable/c/8193941bc4fe7247ff13233f328aea709f574554\n3. https://git.kernel.org/stable/c/38724591364e1e3b278b4053f102b49ea06ee17c", "creation_timestamp": "2025-01-19T11:58:42.000000Z"}, {"uuid": "0c9d7103-88bd-4c49-9aee-ea6d2e93ef27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57911", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2341", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57911\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\niio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer\n\nThe 'data' array is allocated via kmalloc() and it is used to push data\nto user space from a triggered buffer, but it does not set values for\ninactive channels, as it only uses iio_for_each_active_channel()\nto assign new values.\n\nUse kzalloc for the memory allocation to avoid pushing uninitialized\ninformation to userspace.\n\ud83d\udccf Published: 2025-01-19T11:52:33.806Z\n\ud83d\udccf Modified: 2025-01-19T11:52:33.806Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/b0642d9c871aea1f28eb02cd84d60434df594f67\n2. https://git.kernel.org/stable/c/74058395b2c63c8a438cf199d09094b640f8c7f4\n3. https://git.kernel.org/stable/c/ea703cda36da0dacb9a2fd876370003197d8a019\n4. https://git.kernel.org/stable/c/333be433ee908a53f283beb95585dfc14c8ffb46", "creation_timestamp": "2025-01-19T11:58:36.000000Z"}, {"uuid": "26292aaa-4d7c-4085-9bc9-8b6d9b3095a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57912", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2340", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57912\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\niio: pressure: zpa2326: fix information leak in triggered buffer\n\nThe 'sample' local struct is used to push data to user space from a\ntriggered buffer, but it has a hole between the temperature and the\ntimestamp (u32 pressure, u16 temperature, GAP, u64 timestamp).\nThis hole is never initialized.\n\nInitialize the struct to zero before using it to avoid pushing\nuninitialized information to userspace.\n\ud83d\udccf Published: 2025-01-19T11:52:34.490Z\n\ud83d\udccf Modified: 2025-01-19T11:52:34.490Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/b7849f62e61242e0e02c776e1109eb81e59c567c\n2. https://git.kernel.org/stable/c/fefb88a4da961a0b9c2473cbdcfce1a942fcfa9a\n3. https://git.kernel.org/stable/c/979a0db76ceda8fe1f2f85a116bfe97620ebbadf\n4. https://git.kernel.org/stable/c/6007d10c5262f6f71479627c1216899ea7f09073", "creation_timestamp": "2025-01-19T11:58:35.000000Z"}, {"uuid": "81ec6a4f-cd05-4d97-ba08-9704bba24a84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57926", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2334", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57926\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/mediatek: Set private->all_drm_private[i]->drm to NULL if mtk_drm_bind returns err\n\nThe pointer need to be set to NULL, otherwise KASAN complains about\nuse-after-free. Because in mtk_drm_bind, all private's drm are set\nas follows.\n\nprivate->all_drm_private[i]->drm = drm;\n\nAnd drm will be released by drm_dev_put in case mtk_drm_kms_init returns\nfailure. However, the shutdown path still accesses the previous allocated\nmemory in drm_atomic_helper_shutdown.\n\n[   84.874820] watchdog: watchdog0: watchdog did not stop!\n[   86.512054] ==================================================================\n[   86.513162] BUG: KASAN: use-after-free in drm_atomic_helper_shutdown+0x33c/0x378\n[   86.514258] Read of size 8 at addr ffff0000d46fc068 by task shutdown/1\n[   86.515213]\n[   86.515455] CPU: 1 UID: 0 PID: 1 Comm: shutdown Not tainted 6.13.0-rc1-mtk+gfa1a78e5d24b-dirty #55\n[   86.516752] Hardware name: Unknown Product/Unknown Product, BIOS 2022.10 10/01/2022\n[   86.517960] Call trace:\n[   86.518333]  show_stack+0x20/0x38 (C)\n[   86.518891]  dump_stack_lvl+0x90/0xd0\n[   86.519443]  print_report+0xf8/0x5b0\n[   86.519985]  kasan_report+0xb4/0x100\n[   86.520526]  __asan_report_load8_noabort+0x20/0x30\n[   86.521240]  drm_atomic_helper_shutdown+0x33c/0x378\n[   86.521966]  mtk_drm_shutdown+0x54/0x80\n[   86.522546]  platform_shutdown+0x64/0x90\n[   86.523137]  device_shutdown+0x260/0x5b8\n[   86.523728]  kernel_restart+0x78/0xf0\n[   86.524282]  __do_sys_reboot+0x258/0x2f0\n[   86.524871]  __arm64_sys_reboot+0x90/0xd8\n[   86.525473]  invoke_syscall+0x74/0x268\n[   86.526041]  el0_svc_common.constprop.0+0xb0/0x240\n[   86.526751]  do_el0_svc+0x4c/0x70\n[   86.527251]  el0_svc+0x4c/0xc0\n[   86.527719]  el0t_64_sync_handler+0x144/0x168\n[   86.528367]  el0t_64_sync+0x198/0x1a0\n[   86.528920]\n[   86.529157] The buggy address belongs to the physical page:\n[   86.529972] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff0000d46fd4d0 pfn:0x1146fc\n[   86.531319] flags: 0xbfffc0000000000(node=0|zone=2|lastcpupid=0xffff)\n[   86.532267] raw: 0bfffc0000000000 0000000000000000 dead000000000122 0000000000000000\n[   86.533390] raw: ffff0000d46fd4d0 0000000000000000 00000000ffffffff 0000000000000000\n[   86.534511] page dumped because: kasan: bad access detected\n[   86.535323]\n[   86.535559] Memory state around the buggy address:\n[   86.536265]  ffff0000d46fbf00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff\n[   86.537314]  ffff0000d46fbf80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff\n[   86.538363] >ffff0000d46fc000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff\n[   86.544733]                                                           ^\n[   86.551057]  ffff0000d46fc080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff\n[   86.557510]  ffff0000d46fc100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff\n[   86.563928] ==================================================================\n[   86.571093] Disabling lock debugging due to kernel taint\n[   86.577642] Unable to handle kernel paging request at virtual address e0e9c0920000000b\n[   86.581834] KASAN: maybe wild-memory-access in range [0x0752049000000058-0x075204900000005f]\n...\n\ud83d\udccf Published: 2025-01-19T11:52:43.915Z\n\ud83d\udccf Modified: 2025-01-19T11:52:43.915Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/7083b93e9755d60f0c2bcaa9d064308108280534\n2. https://git.kernel.org/stable/c/078b2ff7da200b7532398e668eef723ad40fb516\n3. https://git.kernel.org/stable/c/36684e9d88a2e2401ae26715a2e217cb4295cea7", "creation_timestamp": "2025-01-19T11:58:27.000000Z"}, {"uuid": "40a9c4cd-443e-4d19-b8de-d2d1a05b7d35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57927", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2333", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57927\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nnfs: Fix oops in nfs_netfs_init_request() when copying to cache\n\nWhen netfslib wants to copy some data that has just been read on behalf of\nnfs, it creates a new write request and calls nfs_netfs_init_request() to\ninitialise it, but with a NULL file pointer.  This causes\nnfs_file_open_context() to oops - however, we don't actually need the nfs\ncontext as we're only going to write to the cache.\n\nFix this by just returning if we aren't given a file pointer and emit a\nwarning if the request was for something other than copy-to-cache.\n\nFurther, fix nfs_netfs_free_request() so that it doesn't try to free the\ncontext if the pointer is NULL.\n\ud83d\udccf Published: 2025-01-19T11:52:44.567Z\n\ud83d\udccf Modified: 2025-01-19T11:52:44.567Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/13a07cc81e2d116cece727a83746c74b87a9d417\n2. https://git.kernel.org/stable/c/86ad1a58f6a9453f49e06ef957a40a8dac00a13f", "creation_timestamp": "2025-01-19T11:58:26.000000Z"}, {"uuid": "2d5d1042-4827-4313-a975-7c2ec505da32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57928", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2332", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57928\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nnetfs: Fix enomem handling in buffered reads\n\nIf netfs_read_to_pagecache() gets an error from either ->prepare_read() or\nfrom netfs_prepare_read_iterator(), it needs to decrement ->nr_outstanding,\ncancel the subrequest and break out of the issuing loop.  Currently, it\nonly does this for two of the cases, but there are two more that aren't\nhandled.\n\nFix this by moving the handling to a common place and jumping to it from\nall four places.  This is in preference to inserting a wrapper around\nnetfs_prepare_read_iterator() as proposed by Dmitry Antipov[1].\n\ud83d\udccf Published: 2025-01-19T11:52:45.427Z\n\ud83d\udccf Modified: 2025-01-19T11:52:45.427Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/88ecdfea1b333de5c51442b45cd549eeadf01852\n2. https://git.kernel.org/stable/c/105549d09a539a876b7c3330ab52d8aceedad358", "creation_timestamp": "2025-01-19T11:58:26.000000Z"}, {"uuid": "74ef2242-7bfd-4598-85bc-d4066fa7556e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57915", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2339", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57915\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nusb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null\n\nConsidering that in some extreme cases, when performing the\nunbinding operation, gserial_disconnect has cleared gser->ioport,\nwhich triggers gadget reconfiguration, and then calls gs_read_complete,\nresulting in access to a null pointer. Therefore, ep is disabled before\ngserial_disconnect sets port to null to prevent this from happening.\n\nCall trace:\n gs_read_complete+0x58/0x240\n usb_gadget_giveback_request+0x40/0x160\n dwc3_remove_requests+0x170/0x484\n dwc3_ep0_out_start+0xb0/0x1d4\n __dwc3_gadget_start+0x25c/0x720\n kretprobe_trampoline.cfi_jt+0x0/0x8\n kretprobe_trampoline.cfi_jt+0x0/0x8\n udc_bind_to_driver+0x1d8/0x300\n usb_gadget_probe_driver+0xa8/0x1dc\n gadget_dev_desc_UDC_store+0x13c/0x188\n configfs_write_iter+0x160/0x1f4\n vfs_write+0x2d0/0x40c\n ksys_write+0x7c/0xf0\n __arm64_sys_write+0x20/0x30\n invoke_syscall+0x60/0x150\n el0_svc_common+0x8c/0xf8\n do_el0_svc+0x28/0xa0\n el0_svc+0x24/0x84\n\ud83d\udccf Published: 2025-01-19T11:52:36.460Z\n\ud83d\udccf Modified: 2025-01-19T11:52:36.460Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/3d730e8758c75b68a0152ee1ac48a270ea6725b4\n2. https://git.kernel.org/stable/c/0c50f00cc29948184af05bda31392fff5821f4f3\n3. https://git.kernel.org/stable/c/8e122d780a0f19aefd700dbd0b0e3ed3af0ae97f\n4. https://git.kernel.org/stable/c/13014969cbf07f18d62ceea40bd8ca8ec9d36cec", "creation_timestamp": "2025-01-19T11:58:33.000000Z"}, {"uuid": "0bba6f20-5b53-4899-97b3-f4fd4b2c37a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57916", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2338", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57916\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nmisc: microchip: pci1xxxx: Resolve kernel panic during GPIO IRQ handling\n\nResolve kernel panic caused by improper handling of IRQs while\naccessing GPIO values. This is done by replacing generic_handle_irq with\nhandle_nested_irq.\n\ud83d\udccf Published: 2025-01-19T11:52:37.128Z\n\ud83d\udccf Modified: 2025-01-19T11:52:37.128Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/79aef6187e16b2d32307c8ff610e9e04f7f86e1f\n2. https://git.kernel.org/stable/c/25692750c0259c5b65afec467d97201a485e8a00\n3. https://git.kernel.org/stable/c/47d3749ec0cb56b7b98917c190a8c10cb54216fd\n4. https://git.kernel.org/stable/c/194f9f94a5169547d682e9bbcc5ae6d18a564735", "creation_timestamp": "2025-01-19T11:58:33.000000Z"}, {"uuid": "339a134f-6587-4c94-863a-250180aefed8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57917", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2337", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57917\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\ntopology: Keep the cpumask unchanged when printing cpumap\n\nDuring fuzz testing, the following warning was discovered:\n\n different return values (15 and 11) from vsnprintf(\"%*pbl\n \", ...)\n\n test:keyward is WARNING in kvasprintf\n WARNING: CPU: 55 PID: 1168477 at lib/kasprintf.c:30 kvasprintf+0x121/0x130\n Call Trace:\n  kvasprintf+0x121/0x130\n  kasprintf+0xa6/0xe0\n  bitmap_print_to_buf+0x89/0x100\n  core_siblings_list_read+0x7e/0xb0\n  kernfs_file_read_iter+0x15b/0x270\n  new_sync_read+0x153/0x260\n  vfs_read+0x215/0x290\n  ksys_read+0xb9/0x160\n  do_syscall_64+0x56/0x100\n  entry_SYSCALL_64_after_hwframe+0x78/0xe2\n\nThe call trace shows that kvasprintf() reported this warning during the\nprinting of core_siblings_list. kvasprintf() has several steps:\n\n (1) First, calculate the length of the resulting formatted string.\n\n (2) Allocate a buffer based on the returned length.\n\n (3) Then, perform the actual string formatting.\n\n (4) Check whether the lengths of the formatted strings returned in\n     steps (1) and (2) are consistent.\n\nIf the core_cpumask is modified between steps (1) and (3), the lengths\nobtained in these two steps may not match. Indeed our test includes cpu\nhotplugging, which should modify core_cpumask while printing.\n\nTo fix this issue, cache the cpumask into a temporary variable before\ncalling cpumap_print_{list, cpumask}_to_buf(), to keep it unchanged\nduring the printing process.\n\ud83d\udccf Published: 2025-01-19T11:52:37.866Z\n\ud83d\udccf Modified: 2025-01-19T11:52:37.866Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/ca47e933a900492d89dcf5db18a99c28bd4a742d\n2. https://git.kernel.org/stable/c/b02cf1d27e460ab2b3e1c8c9ce472d562cad2e8d\n3. https://git.kernel.org/stable/c/360596e7fe319a5db1b5fb34a3952862ae53c924\n4. https://git.kernel.org/stable/c/cbd399f78e23ad4492c174fc5e6b3676dba74a52", "creation_timestamp": "2025-01-19T11:58:32.000000Z"}, {"uuid": "a3a886a8-de7f-47fa-b188-8fedb3adf150", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57922", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2336", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57922\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Add check for granularity in dml ceil/floor helpers\n\n[Why]\nWrapper functions for dcn_bw_ceil2() and dcn_bw_floor2()\nshould check for granularity is non zero to avoid assert and\ndivide-by-zero error in dcn_bw_ functions.\n\n[How]\nAdd check for granularity 0.\n\n(cherry picked from commit f6e09701c3eb2ccb8cb0518e0b67f1c69742a4ec)\n\ud83d\udccf Published: 2025-01-19T11:52:41.156Z\n\ud83d\udccf Modified: 2025-01-19T11:52:41.156Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/f3d1e4062ef251fa55ccfeca1e54a98b6818b3a1\n2. https://git.kernel.org/stable/c/ae9ab63a268be99a27a4720ca24f6be801744fee\n3. https://git.kernel.org/stable/c/4f0dd09ed3001725ffd8cdc2868e71df585392fe\n4. https://git.kernel.org/stable/c/0881fbc4fd62e00a2b8e102725f76d10351b2ea8", "creation_timestamp": "2025-01-19T11:58:29.000000Z"}, {"uuid": "76d3226e-7b5e-4bab-a3b6-740b006791e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57925", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2335", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57925\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nksmbd: fix a missing return value check bug\n\nIn the smb2_send_interim_resp(), if ksmbd_alloc_work_struct()\nfails to allocate a node, it returns a NULL pointer to the\nin_work pointer. This can lead to an illegal memory write of\nin_work->response_buf when allocate_interim_rsp_buf() attempts\nto perform a kzalloc() on it.\n\nTo address this issue, incorporating a check for the return\nvalue of ksmbd_alloc_work_struct() ensures that the function\nreturns immediately upon allocation failure, thereby preventing\nthe aforementioned illegal memory access.\n\ud83d\udccf Published: 2025-01-19T11:52:43.244Z\n\ud83d\udccf Modified: 2025-01-19T11:52:43.244Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/ee7e40f7fb17f08a8cbae50553e5c2e10ae32fce\n2. https://git.kernel.org/stable/c/271ae0edbfc942795c162e6cf20d2bc02bd7fde4\n3. https://git.kernel.org/stable/c/2976e91a3e569cf2c92c9f71512c0ab1312fe965\n4. https://git.kernel.org/stable/c/4c16e1cadcbcaf3c82d5fc310fbd34d0f5d0db7c", "creation_timestamp": "2025-01-19T11:58:28.000000Z"}, {"uuid": "c47a8ac5-3489-4063-ae8b-fbbef587b562", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57908", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2344", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57908\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\niio: imu: kmx61: fix information leak in triggered buffer\n\nThe 'buffer' local array is used to push data to user space from a\ntriggered buffer, but it does not set values for inactive channels, as\nit only uses iio_for_each_active_channel() to assign new values.\n\nInitialize the array to zero before using it to avoid pushing\nuninitialized information to userspace.\n\ud83d\udccf Published: 2025-01-19T11:52:31.714Z\n\ud83d\udccf Modified: 2025-01-19T11:52:31.714Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/6985ba4467e4b15b809043fa7740d1fb23a1897b\n2. https://git.kernel.org/stable/c/cde312e257b59ecaa0fad3af9ec7e2370bb24639\n3. https://git.kernel.org/stable/c/565814cbbaa674d2901428796801de49a611e59d\n4. https://git.kernel.org/stable/c/6ae053113f6a226a2303caa4936a4c37f3bfff7b", "creation_timestamp": "2025-01-19T11:58:41.000000Z"}, {"uuid": "d57256e6-21ee-43b2-872e-15db4791627f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57909", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2343", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57909\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\niio: light: bh1745: fix information leak in triggered buffer\n\nThe 'scan' local struct is used to push data to user space from a\ntriggered buffer, but it does not set values for inactive channels, as\nit only uses iio_for_each_active_channel() to assign new values.\n\nInitialize the struct to zero before using it to avoid pushing\nuninitialized information to userspace.\n\ud83d\udccf Published: 2025-01-19T11:52:32.408Z\n\ud83d\udccf Modified: 2025-01-19T11:52:32.408Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/1cca2a666e099aa018e5ab385f0a6e01a3053629\n2. https://git.kernel.org/stable/c/b62fbe3b8eedd3cf3c9ad0b7cb9f72c3f40815f0", "creation_timestamp": "2025-01-19T11:58:40.000000Z"}, {"uuid": "82c1d261-23f2-49c9-8e42-5bab8206c8ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57910", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2342", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57910\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\niio: light: vcnl4035: fix information leak in triggered buffer\n\nThe 'buffer' local array is used to push data to userspace from a\ntriggered buffer, but it does not set an initial value for the single\ndata element, which is an u16 aligned to 8 bytes. That leaves at least\n4 bytes uninitialized even after writing an integer value with\nregmap_read().\n\nInitialize the array to zero before using it to avoid pushing\nuninitialized information to userspace.\n\ud83d\udccf Published: 2025-01-19T11:52:33.140Z\n\ud83d\udccf Modified: 2025-01-19T11:52:33.140Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/47d245be86492974db3aeb048609542167f56518\n2. https://git.kernel.org/stable/c/a15ea87d4337479c9446b5d71616f4668337afed\n3. https://git.kernel.org/stable/c/f6fb1c59776b4263634c472a5be8204c906ffc2c\n4. https://git.kernel.org/stable/c/47b43e53c0a0edf5578d5d12f5fc71c019649279", "creation_timestamp": "2025-01-19T11:58:40.000000Z"}, {"uuid": "731386d8-7df4-4f51-8436-17846d64af8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57904", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2348", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57904\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\niio: adc: at91: call input_free_device() on allocated iio_dev\n\nCurrent implementation of at91_ts_register() calls input_free_deivce()\non st->ts_input, however, the err label can be reached before the\nallocated iio_dev is stored to st->ts_input. Thus call\ninput_free_device() on input instead of st->ts_input.\n\ud83d\udccf Published: 2025-01-19T11:52:28.982Z\n\ud83d\udccf Modified: 2025-01-19T11:52:28.982Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/25ef52f1c15db67d890b80203a911b9a57b0bf71\n2. https://git.kernel.org/stable/c/09e067e3c83e0695d338e8a26916e3c2bc44be02\n3. https://git.kernel.org/stable/c/d115b7f3ddc03b38bb7e8754601556fe9b4fc034\n4. https://git.kernel.org/stable/c/de6a73bad1743e9e81ea5a24c178c67429ff510b", "creation_timestamp": "2025-01-19T11:58:47.000000Z"}, {"uuid": "a6067a8d-afc2-4852-8241-b438c29cad85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57946", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2387", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57946\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nvirtio-blk: don't keep queue frozen during system suspend\n\nCommit 4ce6e2db00de (\"virtio-blk: Ensure no requests in virtqueues before\ndeleting vqs.\") replaces queue quiesce with queue freeze in virtio-blk's\nPM callbacks. And the motivation is to drain inflight IOs before suspending.\n\nblock layer's queue freeze looks very handy, but it is also easy to cause\ndeadlock, such as, any attempt to call into bio_queue_enter() may run into\ndeadlock if the queue is frozen in current context. There are all kinds\nof ->suspend() called in suspend context, so keeping queue frozen in the\nwhole suspend context isn't one good idea. And Marek reported lockdep\nwarning[1] caused by virtio-blk's freeze queue in virtblk_freeze().\n\n[1] https://lore.kernel.org/linux-block/ca16370e-d646-4eee-b9cc-87277c89c43c@samsung.com/\n\nGiven the motivation is to drain in-flight IOs, it can be done by calling\nfreeze & unfreeze, meantime restore to previous behavior by keeping queue\nquiesced during suspend.\n\ud83d\udccf Published: 2025-01-21T12:22:53.324Z\n\ud83d\udccf Modified: 2025-01-21T12:22:53.324Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/d738f3215bb4f88911ff4579780a44960c8e0ca5\n2. https://git.kernel.org/stable/c/9ca428c6397abaa8c38f5c69133a2299e1efbbf2\n3. https://git.kernel.org/stable/c/6dea8e3de59928974bf157dd0499d3958d744ae4\n4. https://git.kernel.org/stable/c/9e323f856cf4963120e0e3892a84ef8bd764a0e4\n5. https://git.kernel.org/stable/c/12c0ddd6c551c1e438b087f874b4f1223a75f7ea\n6. https://git.kernel.org/stable/c/92d5139b91147ab372a17daf5dc27a5b9278e516\n7. https://git.kernel.org/stable/c/7678abee0867e6b7fb89aa40f6e9f575f755fb37", "creation_timestamp": "2025-01-21T13:00:44.000000Z"}, {"uuid": "3ed7c38f-9375-477d-9472-5f6df193cb35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57771", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2422", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57771\n\ud83d\udd39 Description: A cross-site scripting (XSS) vulnerability in the common/getEditPage?view interface of JFinalOA before v2025.01.01 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.\n\ud83d\udccf Published: 2025-01-16T00:00:00\n\ud83d\udccf Modified: 2025-01-21T16:44:13.435Z\n\ud83d\udd17 References:\n1. https://gitee.com/r1bbit/JFinalOA/issues/IBHUPO", "creation_timestamp": "2025-01-21T17:00:40.000000Z"}, {"uuid": "be551192-d653-4b5b-a902-c4da41afc71b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57545", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2662", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57545\n\ud83d\udd39 Description: Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field (hidden_dhcp_num) is copied to the stack without length verification.\n\ud83d\udccf Published: 2025-01-21T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-22T21:52:08.454Z\n\ud83d\udd17 References:\n1. https://github.com/Wood1314/Linksys_E8450_vul/blob/main/5/5.md", "creation_timestamp": "2025-01-22T22:02:25.000000Z"}, {"uuid": "4891975b-cec8-4f1f-99df-8bd47197847a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57723", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2680", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57723\n\ud83d\udd39 Description: lunasvg v3.0.0 was discovered to contain a segmentation violation via the component composition_source_over.\n\ud83d\udccf Published: 2025-01-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-23T00:06:18.107Z\n\ud83d\udd17 References:\n1. https://github.com/keepinggg/poc/blob/main/poc_of_lunasvg_3.1.0\n2. https://github.com/sammycage/lunasvg/issues/209", "creation_timestamp": "2025-01-23T01:01:58.000000Z"}, {"uuid": "d8b84a3d-1d95-4421-81a5-8f4868b14fc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57724", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2679", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57724\n\ud83d\udd39 Description: lunasvg v3.0.0 was discovered to contain a segmentation violation via the component gray_record_cell.\n\ud83d\udccf Published: 2025-01-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-23T00:06:19.165Z\n\ud83d\udd17 References:\n1. https://github.com/keepinggg/poc/blob/main/poc_of_lunasvg_3.1.0\n2. https://github.com/sammycage/lunasvg/issues/209", "creation_timestamp": "2025-01-23T01:01:57.000000Z"}, {"uuid": "4f56ec25-5720-4642-91c5-4605f3602892", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57544", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2663", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57544\n\ud83d\udd39 Description: Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field (lan_ipaddr) is copied to the stack without length verification.\n\ud83d\udccf Published: 2025-01-21T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-22T21:51:06.737Z\n\ud83d\udd17 References:\n1. https://github.com/Wood1314/Linksys_E8450_vul/blob/main/6/6.md", "creation_timestamp": "2025-01-22T22:02:26.000000Z"}, {"uuid": "236bc353-0433-4c0c-bfbd-e359ac2782f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57541", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2643", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57541\n\ud83d\udd39 Description: Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field (ipv6_protect_status) is copied to the stack without length verification.\n\ud83d\udccf Published: 2025-01-21T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-22T20:51:41.042Z\n\ud83d\udd17 References:\n1. https://github.com/Wood1314/Linksys_E8450_vul/blob/main/9/9.md", "creation_timestamp": "2025-01-22T21:02:03.000000Z"}, {"uuid": "37be84f9-51b0-4cb7-88cd-8e49a35f7562", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57542", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2642", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57542\n\ud83d\udd39 Description: Linksys E8450 v1.2.00.360516 was discovered to contain a command injection vulnerability via the field id_email_check_btn.\n\ud83d\udccf Published: 2025-01-21T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-22T20:54:45.768Z\n\ud83d\udd17 References:\n1. https://github.com/Wood1314/Linksys_E8450_vul/blob/main/4/4.md", "creation_timestamp": "2025-01-22T21:02:02.000000Z"}, {"uuid": "175d8e20-34ae-4ebb-aad6-31bfd2d84fe5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57543", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2641", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57543\n\ud83d\udd39 Description: Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field (dhcpstart_ip) is copied to the stack without length verification.\n\ud83d\udccf Published: 2025-01-21T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-22T20:55:47.641Z\n\ud83d\udd17 References:\n1. https://github.com/Wood1314/Linksys_E8450_vul/blob/main/7/7.md", "creation_timestamp": "2025-01-22T21:02:01.000000Z"}, {"uuid": "40b8e0c7-eef7-4201-aed7-c48918eb69fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57536", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2652", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57536\n\ud83d\udd39 Description: Linksys E8450 v1.2.00.360516 was discovered to contain a command injection vulnerability via wizard_status.\n\ud83d\udccf Published: 2025-01-21T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-22T20:28:37.848Z\n\ud83d\udd17 References:\n1. https://github.com/Wood1314/Linksys_E8450_vul/blob/main/8/8.md", "creation_timestamp": "2025-01-22T21:02:16.000000Z"}, {"uuid": "a2b64ce2-4fe9-4b96-8cb4-6768da2691ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57537", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2651", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57537\n\ud83d\udd39 Description: Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field (page) is copied to the stack without length verification.\n\ud83d\udccf Published: 2025-01-21T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-22T20:32:10.398Z\n\ud83d\udd17 References:\n1. https://github.com/Wood1314/Linksys_E8450_vul/blob/main/1/1.md", "creation_timestamp": "2025-01-22T21:02:15.000000Z"}, {"uuid": "ec3caaae-2f57-4555-a489-9946bd489eb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57329", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2845", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57329\n\ud83d\udd39 Description: HortusFox v3.9 contains a stored XSS vulnerability in the \"Add Plant\" function. The name input field does not sanitize or escape user inputs, allowing attackers to inject and execute arbitrary JavaScript payloads.\n\ud83d\udccf Published: 2025-01-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-23T21:39:51.800Z\n\ud83d\udd17 References:\n1. https://github.com/fatihtuzunn/CVEs/tree/main/CVE-2024-57329", "creation_timestamp": "2025-01-23T22:03:43.000000Z"}, {"uuid": "887e5d3c-d6ae-4c10-b485-29afb97235e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57328", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2844", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57328\n\ud83d\udd39 Description: A SQL Injection vulnerability exists in the login form of Online Food Ordering System v1.0. The vulnerability arises because the input fields username and password are not properly sanitized, allowing attackers to inject malicious SQL queries to bypass authentication and gain unauthorized access.\n\ud83d\udccf Published: 2025-01-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-23T21:41:19.398Z\n\ud83d\udd17 References:\n1. https://github.com/fatihtuzunn/CVEs/tree/main/CVE-2024-57328", "creation_timestamp": "2025-01-23T22:03:42.000000Z"}, {"uuid": "d41abc0a-ca2b-4bf5-ab02-360d08700917", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57277", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3010", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57277\n\ud83d\udd39 Description: InnoShop V.0.3.8 and below is vulnerable to Cross Site Scripting (XSS) via SVG file upload.\n\ud83d\udccf Published: 2025-01-24T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-24T19:40:20.835Z\n\ud83d\udd17 References:\n1. https://youtu.be/ved96wsIYlQ\n2. https://github.com/innocommerce/innoshop/issues/115\n3. https://github.com/yamerooo123/ResearchNBugBountyEncyclopedia/blob/main/Researches/Innocommerce/Findings.md", "creation_timestamp": "2025-01-24T20:04:56.000000Z"}, {"uuid": "861a7e4e-466a-406a-bb42-e51d39be94a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57719", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2684", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57719\n\ud83d\udd39 Description: lunasvg v3.0.0 was discovered to contain a segmentation violation via the component blend_transformed_tiled_argb.isra.0.\n\ud83d\udccf Published: 2025-01-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-23T00:06:15.654Z\n\ud83d\udd17 References:\n1. https://github.com/keepinggg/poc/blob/main/poc_of_lunasvg_3.1.0\n2. https://github.com/sammycage/lunasvg/issues/209", "creation_timestamp": "2025-01-23T01:02:04.000000Z"}, {"uuid": "a2d0af86-55bd-4707-b304-ad99dd5b22d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57720", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2683", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57720\n\ud83d\udd39 Description: lunasvg v3.0.0 was discovered to contain a segmentation violation via the component plutovg_blend.\n\ud83d\udccf Published: 2025-01-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-23T00:06:16.232Z\n\ud83d\udd17 References:\n1. https://github.com/keepinggg/poc/blob/main/poc_of_lunasvg_3.1.0\n2. https://github.com/sammycage/lunasvg/issues/209", "creation_timestamp": "2025-01-23T01:02:00.000000Z"}, {"uuid": "8966328c-500f-451a-a1c1-bfb17ca7ba59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57721", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2682", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57721\n\ud83d\udd39 Description: lunasvg v3.0.0 was discovered to contain a segmentation violation via the component plutovg_path_add_path.\n\ud83d\udccf Published: 2025-01-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-23T00:06:16.896Z\n\ud83d\udd17 References:\n1. https://github.com/keepinggg/poc/blob/main/poc_of_lunasvg_3.1.0\n2. https://github.com/sammycage/lunasvg/issues/209", "creation_timestamp": "2025-01-23T01:02:00.000000Z"}, {"uuid": "617819b5-ae31-489d-b67a-5a63600d3a4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57722", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2681", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57722\n\ud83d\udd39 Description: lunasvg v3.0.0 was discovered to contain a allocation-size-too-big bug via the component plutovg_surface_create.\n\ud83d\udccf Published: 2025-01-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-23T00:06:17.362Z\n\ud83d\udd17 References:\n1. https://github.com/keepinggg/poc/blob/main/poc_of_lunasvg_3.1.0\n2. https://github.com/sammycage/lunasvg/issues/209", "creation_timestamp": "2025-01-23T01:01:59.000000Z"}, {"uuid": "c0f59191-2b25-45fd-a5e0-b3ed6db60ddc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57360", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2751", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57360\n\ud83d\udd39 Description: https://www.gnu.org/software/binutils/ nm >=2.43 is affected by: Incorrect Access Control. The type of exploitation is: local. The component is: `nm --without-symbol-version` function.\n\ud83d\udccf Published: 2025-01-21T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-23T15:52:18.915Z\n\ud83d\udd17 References:\n1. https://sourceware.org/bugzilla/show_bug.cgi?id=32467", "creation_timestamp": "2025-01-23T16:02:57.000000Z"}, {"uuid": "2906f2ce-a8ca-4c73-bae4-ee817619d78d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57947", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2732", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57947\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_set_pipapo: fix initial map fill\n\nThe initial buffer has to be inited to all-ones, but it must restrict\nit to the size of the first field, not the total field size.\n\nAfter each round in the map search step, the result and the fill map\nare swapped, so if we have a set where f->bsize of the first element\nis smaller than m->bsize_max, those one-bits are leaked into future\nrounds result map.\n\nThis makes pipapo find an incorrect matching results for sets where\nfirst field size is not the largest.\n\nFollowup patch adds a test case to nft_concat_range.sh selftest script.\n\nThanks to Stefano Brivio for pointing out that we need to zero out\nthe remainder explicitly, only correcting memset() argument isn't enough.\n\ud83d\udccf Published: 2025-01-23T13:54:20.267Z\n\ud83d\udccf Modified: 2025-01-23T13:54:20.267Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/957a4d1c4c5849e4515c9fb4db21bf85318103dc\n2. https://git.kernel.org/stable/c/9625c46ce6fd4f922595a4b32b1de5066d70464f\n3. https://git.kernel.org/stable/c/69b6a67f7052905e928d75a0c5871de50e686986\n4. https://git.kernel.org/stable/c/8058c88ac0df21239daee54b5934d5c80ca9685f\n5. https://git.kernel.org/stable/c/791a615b7ad2258c560f91852be54b0480837c93", "creation_timestamp": "2025-01-23T14:02:35.000000Z"}, {"uuid": "608bb7e4-71a2-41c3-b097-586f26efe780", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57548", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3185", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57548\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: CMSimple 5.16 allows the user to edit log.php file via print page.\n\ud83d\udccf Published: 2025-01-28T00:32:15Z\n\ud83d\udccf Modified: 2025-01-28T00:32:15Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-57548\n2. https://gist.github.com/h4ckr4v3n/afbb87b5a05f283dbee705709c2769eb\n3. https://github.com/h4ckr4v3n/cmsimple5.16_research/blob/main/CMSimple%205.16%20Broken%20Access%20Control%20to%20log.php.md", "creation_timestamp": "2025-01-28T01:08:09.000000Z"}, {"uuid": "e5692ef1-7d51-4c75-93c1-15f14f237946", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57326", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2847", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57326\n\ud83d\udd39 Description: A Reflected Cross-Site Scripting (XSS) vulnerability exists in the search.php file of the Online Pizza Delivery System 1.0. The vulnerability allows an attacker to execute arbitrary JavaScript code in the browser via unsanitized input passed through the search parameter.\n\ud83d\udccf Published: 2025-01-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-23T21:35:44.643Z\n\ud83d\udd17 References:\n1. https://github.com/fatihtuzunn/CVEs/tree/main/CVE-2024-57326", "creation_timestamp": "2025-01-23T22:03:47.000000Z"}, {"uuid": "ee8bcb8e-850a-431e-ae90-ce66f3bf1e0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57434", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3704", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57434\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: macrozheng mall-tiny 1.0.1 is vulnerable to Incorrect Access Control. The project imports users by default, and the test user is made a super administrator.\n\ud83d\udccf Published: 2025-02-01T00:31:02Z\n\ud83d\udccf Modified: 2025-02-01T00:31:02Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-57434\n2. https://github.com/peccc/restful_vul/blob/main/mall_tiny_weak_password/mall_tiny_weak_password.md", "creation_timestamp": "2025-02-01T01:16:24.000000Z"}, {"uuid": "76317418-f3df-4ddf-b044-d3df759a37e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57435", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3703", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57435\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In macrozheng mall-tiny 1.0.1, an attacker can send null data through the resource creation interface resulting in a null pointer dereference occurring in all subsequent operations that require authentication, which triggers a denial-of-service attack and service restart failure.\n\ud83d\udccf Published: 2025-02-01T00:31:02Z\n\ud83d\udccf Modified: 2025-02-01T00:31:02Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-57435\n2. https://github.com/peccc/restful_vul/blob/main/mall_tiny_dos/mall_tiny_dos.md", "creation_timestamp": "2025-02-01T01:16:24.000000Z"}, {"uuid": "ac133d8a-c9c6-4398-b385-7ab7bb13f617", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57075", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3796", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57075\n\ud83d\udd25 CVSS Score: 7.5 (CVSS_V3)\n\ud83d\udd39 Description: A prototype pollution in the lib.Logger function of eazy-logger v4.0.1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload.\n\nAn attacker can supply a payload with `Object.prototype` setter to introduce or modify properties within the global prototype chain, causing denial of service (DoS) a the minimum consequence.\n\nMoreover, the consequences of this vulnerability can escalate to other injection-based attacks, depending on how the library integrates within the application. For instance, if the polluted property propagates to sensitive Node.js APIs (e.g., `child_process.exec`, `eval`), it could enable an attacker to execute arbitrary commands within the application's context.\n\n## Proof of Concept\n\n```js\n(async () => {\nconst lib = await import('eazy-logger');\nvar someObj = {}\nconsole.log(\"Before Attack: \", JSON.stringify({}.__proto__));\ntry {\n// for multiple functions, uncomment only one for each execution.\nlib.Logger (JSON.parse('{\"__proto__\":{\"pollutedKey\":123}}'))\n} catch (e) { }\nconsole.log(\"After Attack: \", JSON.stringify({}.__proto__));\ndelete Object.prototype.pollutedKey;\n})();\n```\n\ud83d\udccf Published: 2025-02-06T06:31:26Z\n\ud83d\udccf Modified: 2025-02-07T14:34:53Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-57075\n2. https://gist.github.com/tariqhawis/c601f7f85146510ca899a7406a03aba5\n3. https://github.com/shakyShane/eazy-logger", "creation_timestamp": "2025-02-07T15:02:10.000000Z"}, {"uuid": "5cc24e37-92f5-4c50-97c9-1297a0fbad95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57095", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3005", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57095\n\ud83d\udd39 Description: SQL injection vulnerability in Go-CMS v.1.1.10 allows a remote attacker to execute arbitrary code via a crafted payload.\n\ud83d\udccf Published: 2025-01-24T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-24T19:46:35.010Z\n\ud83d\udd17 References:\n1. https://github.com/Xi-Yuer/GO-CMS/issues/6\n2. https://gist.github.com/wjlin0/ff3ee8afb8f8001faff89bbc03805605", "creation_timestamp": "2025-01-24T20:04:49.000000Z"}, {"uuid": "0661a459-d98b-44c4-956b-f7e9036c2050", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57435", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3690", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57435\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-31T22:15:13.103\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://github.com/peccc/restful_vul/blob/main/mall_tiny_dos/mall_tiny_dos.md", "creation_timestamp": "2025-01-31T23:24:55.000000Z"}, {"uuid": "2a803a97-4830-4923-be6a-f1df4b2a35c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57587", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3705", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57587\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: EasyVirt DCScope 8.6.0 and earlier and co2Scope 1.3.0 and earlier are vulnerable to SQL Injection on the authentication portal.\n\ud83d\udccf Published: 2025-02-01T00:31:02Z\n\ud83d\udccf Modified: 2025-02-01T00:31:02Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-57587\n2. https://github.com/Elymaro/CVE/blob/main/EasyVirt/CVE-2024-57587.md", "creation_timestamp": "2025-02-01T01:16:25.000000Z"}, {"uuid": "9085b7f6-a5bb-44d2-be14-b256e3ebfac7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57041", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3832", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57041\n\ud83d\udd25 CVSS Score: 4.6 (CVSS_V3)\n\ud83d\udd39 Description: A persistent cross-site scripting (XSS) vulnerability in NodeBB v3.11.0 allows remote attackers to store arbitrary code in the 'about me' section of their profile.\n\ud83d\udccf Published: 2025-01-24T21:31:27Z\n\ud83d\udccf Modified: 2025-02-07T20:41:37Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-57041\n2. https://github.com/NodeBB/NodeBB/commit/4e69bff72fd04779064d37e46a43080e6c328adf\n3. https://github.com/NodeBB/NodeBB\n4. https://www.tonysec.com/posts/cve-2024-57041", "creation_timestamp": "2025-02-07T21:03:08.000000Z"}, {"uuid": "63c77980-e4dd-4ba1-acb3-2947c9bfe4d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57357", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3851", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57357\n\ud83d\udd25 CVSS Score: 7.9 (CVSS_V3)\n\ud83d\udd39 Description: An issue in TPLINK TL-WPA 8630 TL-WPA8630(US)_V2_2.0.4 Build 20230427 allows a remote attacker to execute arbitrary code via function sub_4256CC, which allows command injection by injecting 'devpwd'.\n\ud83d\udccf Published: 2025-02-08T00:32:18Z\n\ud83d\udccf Modified: 2025-02-08T00:32:18Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-57357\n2. https://github.com/c10uds/tplink-wpa8630-rce-vulnerability", "creation_timestamp": "2025-02-08T01:04:04.000000Z"}, {"uuid": "7ce0a1f4-e86b-4fcc-a5e8-6a0ecbda93ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57606", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3850", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57606\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: SQL injection vulnerability in Beijing Guoju Information Technology Co., Ltd JeecgBoot v.3.7.2 allows a remote attacker to obtain sensitive information via the getTotalData component.\n\ud83d\udccf Published: 2025-02-08T00:32:18Z\n\ud83d\udccf Modified: 2025-02-08T00:32:18Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-57606\n2. https://github.com/jeecgboot/JeecgBoot/issues/7665", "creation_timestamp": "2025-02-08T01:04:02.000000Z"}, {"uuid": "e2da0085-9b80-4e71-8ab9-082854be0b79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57426", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3951", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57426\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-06T20:15:39.923\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://github.com/iamsinghmanish/My-CVEs/tree/main/CVE-2024-57426\n2. https://sourceforge.net/projects/netmodhttp/", "creation_timestamp": "2025-02-11T23:12:03.000000Z"}, {"uuid": "29cc7b07-d9fe-4752-b96e-59541de1d7f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57777", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3950", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57777\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-11T22:15:29.680\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://github.com/ffay/lanproxy/issues/192", "creation_timestamp": "2025-02-11T23:12:01.000000Z"}, {"uuid": "13c6262e-74f5-4006-89e4-ad17c1666862", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57276", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3523", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57276\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-27T17:15:16.827\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://github.com/yamerooo123/CVE/blob/main/CVE-2024-57276/Description.md\n2. https://github.com/yamerooo123/ResearchNBugBountyEncyclopedia/blob/main/Researches/Dragon%20Age%20Origins/Description.md", "creation_timestamp": "2025-01-30T23:19:51.000000Z"}, {"uuid": "9b751c75-aa9f-40f2-afde-340ea2ce2780", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57965", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3371", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57965\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-29T09:15:08.183\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://github.com/axios/axios/commit/0a8d6e19da5b9899a2abafaaa06a75ee548597db\n2. https://github.com/axios/axios/issues/6351\n3. https://github.com/axios/axios/pull/6714\n4. https://github.com/axios/axios/releases/tag/v1.7.8", "creation_timestamp": "2025-01-29T11:18:14.000000Z"}, {"uuid": "59185fb1-5c9e-47ae-82c6-f6d26c77c917", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57965", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3370", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57965\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In axios before 1.7.8, lib/helpers/isURLSameOrigin.js does not use a URL object when determining an origin, and has a potentially unwanted setAttribute('href',href) call. NOTE: some parties feel that the code change only addresses a warning message from a SAST tool and does not fix a vulnerability.\n\ud83d\udccf Published: 2025-01-29T09:31:42Z\n\ud83d\udccf Modified: 2025-01-29T09:31:42Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-57965\n2. https://github.com/axios/axios/issues/6351\n3. https://github.com/axios/axios/pull/6714\n4. https://github.com/axios/axios/commit/0a8d6e19da5b9899a2abafaaa06a75ee548597db\n5. https://github.com/axios/axios/releases/tag/v1.7.8", "creation_timestamp": "2025-01-29T10:10:11.000000Z"}, {"uuid": "07b7e4b5-849b-4a3a-9686-a929c1981fe1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57547", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3201", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57547\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Insecure Permissions vulnerability in CMSimple v.5.16 allows a remote attacker to obtain sensitive information via a crafted script to the Functionality of downloading php backup files.\n\ud83d\udccf Published: 2025-01-28T00:32:15Z\n\ud83d\udccf Modified: 2025-01-28T00:32:15Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-57547\n2. https://gist.github.com/h4ckr4v3n/afbb87b5a05f283dbee705709c2769eb\n3. https://github.com/h4ckr4v3n/cmsimple5.16_research/blob/main/CMSimple%205.16%20Remote%20Code%20Execution%20via%20backup%20file%20editing.md", "creation_timestamp": "2025-01-28T01:08:30.000000Z"}, {"uuid": "4464f0da-9f31-41e6-82c3-1b11ee1e64bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57665", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3426", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57665\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: JFinalCMS 1.0 is vulnerable to SQL Injection in rc/main/java/com/cms/entity/Content.java. The cause of the vulnerability is that the title parameter is controllable and is concatenated directly into filterSql without filtering.\n\ud83d\udccf Published: 2025-01-30T00:31:04Z\n\ud83d\udccf Modified: 2025-01-30T00:31:04Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-57665\n2. https://github.com/Nbccccc/vulnerability_discovery/blob/main/JFinalCMS/JFinalCms%20SQL%20Injection.md", "creation_timestamp": "2025-01-30T01:12:08.000000Z"}, {"uuid": "98ab20f2-d3c5-4bcc-8f2f-64734bc68079", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57549", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3184", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57549\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: CMSimple 5.16 allows the user to read cms source code through manipulation of the file name in the file parameter of a GET request.\n\ud83d\udccf Published: 2025-01-28T00:32:15Z\n\ud83d\udccf Modified: 2025-01-28T00:32:15Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-57549\n2. https://gist.github.com/h4ckr4v3n/afbb87b5a05f283dbee705709c2769eb\n3. https://github.com/h4ckr4v3n/cmsimple5.16_research/blob/main/CMSimple%205.16%20Sensitive%20information%20disclosure.md", "creation_timestamp": "2025-01-28T01:08:08.000000Z"}, {"uuid": "beb159e2-08ef-4c50-b3ab-dc44334b3629", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57373", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3192", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57373\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Cross Site Request Forgery vulnerability in LifestyleStore v.1.0 allows a remote attacker to execute arbitrary cod and obtain sensitive information.\n\ud83d\udccf Published: 2025-01-28T00:32:15Z\n\ud83d\udccf Modified: 2025-01-28T00:32:15Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-57373\n2. https://github.com/cypherdavy/CVE-2024-57373", "creation_timestamp": "2025-01-28T01:08:17.000000Z"}, {"uuid": "d44e9054-407c-4f26-b8e0-59989c81e80f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57546", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3190", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57546\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in CMSimple v.5.16 allows a remote attacker to obtain sensitive information via a crafted script to the validate link function.\n\ud83d\udccf Published: 2025-01-28T00:32:15Z\n\ud83d\udccf Modified: 2025-01-28T00:32:15Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-57546\n2. https://gist.github.com/h4ckr4v3n/afbb87b5a05f283dbee705709c2769eb\n3. https://github.com/h4ckr4v3n/cmsimple5.16_research/blob/main/CMSimple%205.16%20Validate%20links%20SSRF.md", "creation_timestamp": "2025-01-28T01:08:16.000000Z"}, {"uuid": "e26dbdd2-1e4d-490c-8f8e-0a925a11ff8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57376", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3329", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57376\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Buffer Overflow vulnerability in D-Link DSR-150, DSR-150N, DSR-250, DSR-250N, DSR-500N, DSR-1000N from 3.13 to 3.17B901C allows unauthenticated users to execute remote code execution.\n\ud83d\udccf Published: 2025-01-29T00:31:54Z\n\ud83d\udccf Modified: 2025-01-29T00:31:54Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-57376\n2. https://www.dlink.com/en/security-bulletin", "creation_timestamp": "2025-01-29T01:10:12.000000Z"}, {"uuid": "4cc570f0-f285-4be8-ba3b-729eb806c43e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57514", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3304", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57514\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-28T22:15:16.103\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://www.zyenra.com/blog/xss-in-tplink-archer-a20.html", "creation_timestamp": "2025-01-28T23:17:59.000000Z"}, {"uuid": "afc58447-39ec-457d-82b3-42546272cf48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57519", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3319", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57519\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in Open5GS v.2.7.2 allows a remote attacker to cause a denial of service via the ogs_dbi_auth_info function in lib/dbi/subscription.c file.\n\ud83d\udccf Published: 2025-01-29T00:31:55Z\n\ud83d\udccf Modified: 2025-01-29T00:31:55Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-57519\n2. https://github.com/open5gs/open5gs/issues/3635\n3. https://github.com/open5gs/open5gs/commit/08b9e7c55f72649ef25b5407e7e4d938f0f16531\n4. https://github.com/f4rs1ght/vuln-research/tree/main/CVE-2024-57519", "creation_timestamp": "2025-01-29T01:09:58.000000Z"}, {"uuid": "e350648a-4e3a-44f9-aef8-8b5bc5614f6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57514", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3327", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57514\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The TP-Link Archer A20 v3 router is vulnerable to Cross-site Scripting (XSS) due to improper handling of directory listing paths in the web interface. When a specially crafted URL is visited, the router's web page renders the directory listing and executes arbitrary JavaScript embedded in the URL. This allows the attacker to inject malicious code into the page, executing JavaScript on the victim's browser, which could then be used for further malicious actions. The vulnerability was identified in the 1.0.6 Build 20231011 rel.85717(5553) version.\n\ud83d\udccf Published: 2025-01-29T00:31:54Z\n\ud83d\udccf Modified: 2025-01-29T00:31:54Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-57514\n2. https://www.zyenra.com/blog/xss-in-tplink-archer-a20.html", "creation_timestamp": "2025-01-29T01:10:10.000000Z"}, {"uuid": "9a407638-1008-4239-bb59-ba9fe06243f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57395", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3420", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57395\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Password Vulnerability in Safety production process management system v1.0 allows a remote attacker to escalate privileges, execute arbitrary code and obtain sensitive information via the password and account number parameters.\n\ud83d\udccf Published: 2025-01-30T00:31:04Z\n\ud83d\udccf Modified: 2025-01-30T00:31:04Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-57395\n2. https://github.com/qtxz54/Vul/blob/main/WeakPasswd/Safety-production-process-management-system.md\n3. http://www.hzzcka.com", "creation_timestamp": "2025-01-30T01:11:57.000000Z"}, {"uuid": "82c8216a-b0ca-483e-9a73-04db62ebb10a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57439", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3386", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57439\n\ud83d\udd25 CVSS Score: 4.8 (CVSS_V3)\n\ud83d\udd39 Description: An issue in the reset password interface of ruoyi v4.8.0 allows attackers with Admin privileges to cause a Denial of Service (DoS) by duplicating the login name of the account.\n\ud83d\udccf Published: 2025-01-29T15:31:35Z\n\ud83d\udccf Modified: 2025-01-29T18:31:22Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-57439\n2. https://gitee.com/y_project/RuoYi\n3. https://github.com/peccc/restful_vul/blob/main/ruoyi_dos/ruoyi_dos.md\n4. https://github.com/yangzongzhuan/RuoYi\n5. https://ruoyi.vip", "creation_timestamp": "2025-01-29T19:11:22.000000Z"}, {"uuid": "623d2bec-7cea-428c-9bcc-8556ec6eb2a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57513", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3417", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57513\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A floating-point exception (FPE) vulnerability exists in the AP4_TfraAtom::AP4_TfraAtom function in Bento4.\n\ud83d\udccf Published: 2025-01-30T00:31:04Z\n\ud83d\udccf Modified: 2025-01-30T00:31:04Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-57513\n2. https://github.com/axiomatic-systems/Bento4/issues/990\n3. https://gist.github.com/G2FUZZ/91a1cc3b8f2b0720e984353d59023b24", "creation_timestamp": "2025-01-30T01:11:54.000000Z"}, {"uuid": "eced0bc0-5dba-4fa6-b059-fe52df091914", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57510", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3425", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57510\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Buffer Overflow vulnerability in Bento4 mp42avc v.3bdc891602d19789b8e8626e4a3e613a937b4d35 allows a local attacker to execute arbitrary code via the AP4_MemoryByteStream::WritePartial.\n\ud83d\udccf Published: 2025-01-30T00:31:04Z\n\ud83d\udccf Modified: 2025-01-30T00:31:04Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-57510\n2. https://github.com/axiomatic-systems/Bento4/issues/989\n3. https://gist.github.com/G2FUZZ/91a1cc3b8f2b0720e984353d59023b24", "creation_timestamp": "2025-01-30T01:12:03.000000Z"}, {"uuid": "24fd710c-df11-4532-b52e-aba030d8d747", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57509", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3424", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57509\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Buffer Overflow vulnerability in Bento4 mp42avc v.3bdc891602d19789b8e8626e4a3e613a937b4d35 allows a local attacker to execute arbitrary code via the AP4_File::ParseStream and related functions.\n\ud83d\udccf Published: 2025-01-30T00:31:04Z\n\ud83d\udccf Modified: 2025-01-30T00:31:04Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-57509\n2. https://github.com/axiomatic-systems/Bento4/issues/989\n3. https://gist.github.com/G2FUZZ/91a1cc3b8f2b0720e984353d59023b24", "creation_timestamp": "2025-01-30T01:12:03.000000Z"}, {"uuid": "acf2a62b-7fc8-49d7-ab36-f47ce1b017e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57672", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3823", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57672\n\ud83d\udd25 CVSS Score: 5.4 (CVSS_V3)\n\ud83d\udd39 Description: An issue in floodlight v1.2 allows a local attacker to cause a denial of service via the Topology Manager module, Topologylnstance module, Routing module.\n\ud83d\udccf Published: 2025-02-06T21:32:09Z\n\ud83d\udccf Modified: 2025-02-07T18:31:20Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-57672\n2. https://github.com/floodlight/floodlight/issues/871", "creation_timestamp": "2025-02-07T19:04:22.000000Z"}, {"uuid": "4019441b-19a7-4018-a5dc-5a21ceb74605", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57276", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3543", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57276\n\ud83d\udd25 CVSS Score: 7.3 (CVSS_V3)\n\ud83d\udd39 Description: In Electronic Arts Dragon Age Origins 1.05, the DAUpdaterSVC service contains an unquoted service path vulnerability. This service is configured with insecure permissions, allowing users to modify the executable file path used by the service. The service runs with NT AUTHORITY\\SYSTEM privileges, enabling attackers to escalate privileges by replacing or placing a malicious executable in the service path.\n\ud83d\udccf Published: 2025-01-27T18:32:01Z\n\ud83d\udccf Modified: 2025-01-31T00:30:44Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-57276\n2. https://github.com/yamerooo123/CVE/blob/main/CVE-2024-57276/Description.md\n3. https://github.com/yamerooo123/ResearchNBugBountyEncyclopedia/blob/main/Researches/Dragon%20Age%20Origins/Description.md", "creation_timestamp": "2025-01-31T01:12:28.000000Z"}, {"uuid": "df171e66-8917-4b2e-9bd5-a734284b80f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57707", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3814", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57707\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in DataEase v1 allows an attacker to execute arbitrary code via the user account and password components.\n\ud83d\udccf Published: 2025-02-07T18:31:22Z\n\ud83d\udccf Modified: 2025-02-07T18:31:22Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-57707\n2. https://github.com/shigophilo/CVE/blob/main/DataEase-v1-code-execute.md", "creation_timestamp": "2025-02-07T19:03:35.000000Z"}, {"uuid": "0533409a-d071-4f9d-8a2b-cf7603ea9351", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57433", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3702", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57433\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: macrozheng mall-tiny 1.0.1 is vulnerable to Incorrect Access Control via the logout function. After a user logs out, their token is still available and fetches information in the logged-in state.\n\ud83d\udccf Published: 2025-02-01T00:31:02Z\n\ud83d\udccf Modified: 2025-02-01T00:31:02Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-57433\n2. https://github.com/peccc/restful_vul/blob/main/mall_tiny_logout_failed/mall_tiny_logout_failed.md", "creation_timestamp": "2025-02-01T01:16:23.000000Z"}, {"uuid": "e614f9a0-2ca9-4fd2-982a-a834a9405bf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57249", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3811", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57249\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Incorrect Access Control in the Preview Function of Gleamtech FileVista 9.2.0.0 allows remote attackers to gain unauthorized access via exploiting a vulnerability in access control mechanisms by removing authentication-related HTTP headers, such as the Cookie header, in the request. This bypasses the authentication process and grants attackers access to sensitive image files without proper login credentials.\n\ud83d\udccf Published: 2025-02-07T18:31:22Z\n\ud83d\udccf Modified: 2025-02-07T18:31:22Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-57249\n2. https://packetstorm.news/files/id/189019\n3. https://www.gleamtech.com/filevista", "creation_timestamp": "2025-02-07T19:03:33.000000Z"}, {"uuid": "3dabeeb3-ef28-4e28-9b28-359828f0c3fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57248", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3810", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57248\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Directory Traversal in File Upload in Gleamtech FileVista 9.2.0.0 allows remote attackers to achieve Code Execution, Information Disclosure, and Escalation of Privileges via injecting malicious payloads in HTTP requests to manipulate file paths, bypass access controls, and upload malicious files.\n\ud83d\udccf Published: 2025-02-07T18:31:22Z\n\ud83d\udccf Modified: 2025-02-07T18:31:22Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-57248\n2. https://packetstorm.news/files/id/189021\n3. https://www.gleamtech.com/filevista", "creation_timestamp": "2025-02-07T19:03:25.000000Z"}, {"uuid": "ac4a38b1-fd52-4e60-b42b-55fd3779482e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57433", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3692", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57433\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-31T22:15:12.383\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://github.com/peccc/restful_vul/blob/main/mall_tiny_logout_failed/mall_tiny_logout_failed.md", "creation_timestamp": "2025-01-31T23:24:56.000000Z"}, {"uuid": "99338186-41d9-40d0-bf4f-9be59b477ca6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57434", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3691", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57434\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-31T22:15:12.613\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://github.com/peccc/restful_vul/blob/main/mall_tiny_weak_password/mall_tiny_weak_password.md", "creation_timestamp": "2025-01-31T23:24:56.000000Z"}, {"uuid": "46c69a1a-321b-4787-9325-ca7084d54160", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57673", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3822", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57673\n\ud83d\udd25 CVSS Score: 5.4 (CVSS_V3)\n\ud83d\udd39 Description: An issue in floodlight v1.2 allows a local attacker to cause a denial of service via the Topology Manager module and Linkdiscovery module\n\ud83d\udccf Published: 2025-02-06T21:32:09Z\n\ud83d\udccf Modified: 2025-02-07T18:31:20Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-57673\n2. https://github.com/floodlight/floodlight/issues/872", "creation_timestamp": "2025-02-07T19:04:18.000000Z"}, {"uuid": "d3a15447-97fc-4fdf-b286-c881ec3f6ba2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57777", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3964", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57777\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Directory Traversal vulnerability in Ianproxy v.0.1 and before allows a remote attacker to obtain sensitive information\n\ud83d\udccf Published: 2025-02-12T00:32:16Z\n\ud83d\udccf Modified: 2025-02-12T00:32:16Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-57777\n2. https://github.com/ffay/lanproxy/issues/192", "creation_timestamp": "2025-02-12T01:10:06.000000Z"}, {"uuid": "0449d272-84bd-4b78-bfc1-c38b8b4aa436", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57606", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3861", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57606\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-07T22:15:13.707\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://github.com/jeecgboot/JeecgBoot/issues/7665", "creation_timestamp": "2025-02-08T06:03:08.000000Z"}, {"uuid": "ad3ca426-7277-4eaf-a81a-4d0d6760f68d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57000", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3953", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57000\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in Anyscale Inc Ray between v.2.9.3 and v.2.40.0 allows a remote attacker to execute arbitrary code via a crafted script.\n\ud83d\udccf Published: 2025-02-12T00:32:17Z\n\ud83d\udccf Modified: 2025-02-12T00:32:17Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-57000\n2. https://github.com/honysyang/Ray.git", "creation_timestamp": "2025-02-12T01:08:19.000000Z"}, {"uuid": "56fb04da-f37d-4355-b42e-8e8b55bd9e49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57603", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4189", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57603\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in MaysWind ezBookkeeping 0.7.0 allows a remote attacker to escalate privileges via the lack of rate limiting.\n\ud83d\udccf Published: 2025-02-13T00:33:07Z\n\ud83d\udccf Modified: 2025-02-13T00:33:07Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-57603\n2. https://github.com/mayswind/ezbookkeeping/issues/33\n3. https://hkohi.ca/vulnerability/1", "creation_timestamp": "2025-02-13T01:09:59.000000Z"}, {"uuid": "86af7dd1-6798-4f6c-b089-e2a32c110508", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57602", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4188", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57602\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in Alex Tselegidis EasyAppointments v.1.5.0 allows a remote attacker to escalate privileges via the index.php file.\n\ud83d\udccf Published: 2025-02-13T00:33:07Z\n\ud83d\udccf Modified: 2025-02-13T00:33:07Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-57602\n2. https://hkohi.ca/vulnerability/12", "creation_timestamp": "2025-02-13T01:09:57.000000Z"}, {"uuid": "34013666-d33d-4f51-a880-37d9cbbd9583", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57604", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4181", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57604\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in MaysWind ezBookkeeping 0.7.0 allows a remote attacker to escalate privileges via the token component.\n\ud83d\udccf Published: 2025-02-13T00:33:07Z\n\ud83d\udccf Modified: 2025-02-13T00:33:07Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-57604\n2. https://github.com/mayswind/ezbookkeeping/issues/33\n3. https://hkohi.ca/vulnerability/2", "creation_timestamp": "2025-02-13T01:08:56.000000Z"}, {"uuid": "4856d6bd-4525-4584-81b4-2761cb4b9270", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57603", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4148", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57603\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-12T22:15:40.977\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://github.com/mayswind/ezbookkeeping/issues/33\n2. https://hkohi.ca/vulnerability/1", "creation_timestamp": "2025-02-12T23:08:02.000000Z"}, {"uuid": "aa0888d4-fb2c-4df5-8ae6-4c32059c3aee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57604", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4147", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57604\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-12T22:15:41.100\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://github.com/mayswind/ezbookkeeping/issues/33\n2. https://hkohi.ca/vulnerability/2", "creation_timestamp": "2025-02-12T23:07:48.000000Z"}, {"uuid": "20d0a447-6a6d-4c84-b576-0545bb72fa31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57605", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4146", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57605\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-12T22:15:41.210\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://hkohi.ca/vulnerability/3", "creation_timestamp": "2025-02-12T23:07:46.000000Z"}, {"uuid": "eac4207e-69d1-4346-8b57-a67fe0281b1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57601", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4150", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57601\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-12T22:15:40.747\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://hkohi.ca/vulnerability/13", "creation_timestamp": "2025-02-12T23:09:17.000000Z"}, {"uuid": "a518b89c-bbcf-44d3-b9c1-777142662cfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57602", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4149", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57602\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-12T22:15:40.867\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://hkohi.ca/vulnerability/12", "creation_timestamp": "2025-02-12T23:08:05.000000Z"}, {"uuid": "7df29561-d5eb-47d2-98e3-5fca76dab905", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57605", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4174", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57605\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Cross Site Scripting vulnerability in Daylight Studio Fuel CMS v.1.5.2 allows an attacker to escalate privileges via the /fuel/blocks/ and /fuel/pages components.\n\ud83d\udccf Published: 2025-02-13T00:33:07Z\n\ud83d\udccf Modified: 2025-02-13T00:33:07Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-57605\n2. https://hkohi.ca/vulnerability/3", "creation_timestamp": "2025-02-13T01:08:23.000000Z"}, {"uuid": "b348e29a-4e58-4331-9421-b43ed21156cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57601", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4196", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57601\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Cross Site Scripting vulnerability in Alex Tselegidis EasyAppointments v.1.5.0 allows a remote attacker to execute arbitrary code via the legal_settings parameter.\n\ud83d\udccf Published: 2025-02-13T00:33:07Z\n\ud83d\udccf Modified: 2025-02-13T00:33:07Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-57601\n2. https://hkohi.ca/vulnerability/13", "creation_timestamp": "2025-02-13T01:10:25.000000Z"}, {"uuid": "fea75a50-f2ea-4b95-b8c4-8ed55857f170", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57963", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4757", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57963\n\ud83d\udd25 CVSS Score: 7.3 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Insecure Loading of Dynamic Link Libraries have been discovered in USB-CONVERTERCABLE DRIVER, which could allow local attackers to potentially disclose information or execute arbitray code on affected systems.\nThis issue affects USB-CONVERTERCABLE DRIVER:.\n\ud83d\udccf Published: 2025-02-18T06:33:02.885Z\n\ud83d\udccf Modified: 2025-02-18T06:33:02.885Z\n\ud83d\udd17 References:\n1. https://www.hitachi.com/hirt/hitachi-sec/2025/001.html", "creation_timestamp": "2025-02-18T08:09:54.000000Z"}, {"uuid": "d3740219-30ee-4dbc-b41d-4d88f15607e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57782", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4370", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57782\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-13T23:15:10.863\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://github.com/tzzhang123456/test123/issues/2", "creation_timestamp": "2025-02-14T01:09:54.000000Z"}, {"uuid": "fd863f9c-d07b-48f3-b188-5c6efa3d6476", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57782", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4392", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57782\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in Docker-proxy v18.09.0 allows attackers to cause a denial of service.\n\ud83d\udccf Published: 2025-02-14T00:30:45Z\n\ud83d\udccf Modified: 2025-02-14T00:30:45Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-57782\n2. https://github.com/tzzhang123456/test123/issues/2", "creation_timestamp": "2025-02-14T01:15:18.000000Z"}, {"uuid": "3e82fa20-b292-4922-b796-b731a0ac446a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57970", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4578", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57970\n\ud83d\udd25 CVSS Score: 3.9 (CVSS_V3)\n\ud83d\udd39 Description: libarchive through 3.7.7 has a heap-based buffer over-read in header_gnu_longlink in archive_read_support_format_tar.c via a TAR archive because it mishandles truncation in the middle of a GNU long linkname.\n\ud83d\udccf Published: 2025-02-16T06:31:45Z\n\ud83d\udccf Modified: 2025-02-16T06:31:45Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-57970\n2. https://github.com/libarchive/libarchive/issues/2415\n3. https://github.com/libarchive/libarchive/pull/2422", "creation_timestamp": "2025-02-16T07:12:28.000000Z"}, {"uuid": "655bda34-baf8-4f66-b38f-db3545e5f5cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57969", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4439", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57969\n\ud83d\udd25 CVSS Score: 4.2 (CVSS_V3)\n\ud83d\udd39 Description: app/Model/Attribute.php in MISP before 2.4.198 ignores an ACL during a GUI attribute search.\n\ud83d\udccf Published: 2025-02-14T09:31:22Z\n\ud83d\udccf Modified: 2025-02-14T09:31:22Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-57969\n2. https://github.com/MISP/MISP/commit/4f27f83a775aba4d3cca9255f69c3c9998b7df7f\n3. https://github.com/MISP/MISP/compare/v2.4.197...v2.4.198", "creation_timestamp": "2025-02-14T10:10:53.000000Z"}, {"uuid": "d15dc641-876b-4f99-9fcf-ee833b6522b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57725", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4504", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57725\n\ud83d\udd25 CVSS Score: 5.0 (CVSS_V3)\n\ud83d\udd39 Description: An issue in the Arcadyan Livebox Fibra PRV3399B_B_LT allows a remote or local attacker to modify the GPON link value without authentication, causing an internet service disruption via the /firstconnection.cgi endpoint.\n\ud83d\udccf Published: 2025-02-14T18:30:51Z\n\ud83d\udccf Modified: 2025-02-14T21:31:04Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-57725\n2. https://github.com/pointedsec/CVE-2024-57725", "creation_timestamp": "2025-02-14T22:11:04.000000Z"}, {"uuid": "f83af727-bd90-4359-ba2f-b1211dc8b772", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57970", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4575", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57970\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-16T04:15:21.843\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://github.com/libarchive/libarchive/issues/2415\n2. https://github.com/libarchive/libarchive/pull/2422", "creation_timestamp": "2025-02-16T05:11:31.000000Z"}, {"uuid": "ca84b46c-1682-42da-afd8-a023bde11546", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57971", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4577", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57971\n\ud83d\udd25 CVSS Score: 8.8 (CVSS_V3)\n\ud83d\udd39 Description: DataSourceResource.java in the SpagoBI API support in Knowage Server in KNOWAGE before 8.1.30 does not ensure that java:comp/env/jdbc/ occurs at the beginning of a JNDI Name.\n\ud83d\udccf Published: 2025-02-16T06:31:45Z\n\ud83d\udccf Modified: 2025-02-16T06:31:45Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-57971\n2. https://github.com/KnowageLabs/Knowage-Server/commit/f7d0362f737e1b0db1cc9cc95b1236d62d83dd0c\n3. https://github.com/KnowageLabs/Knowage-Server/compare/v8.1.29...v8.1.30\n4. https://spagobi.readthedocs.io", "creation_timestamp": "2025-02-16T07:12:27.000000Z"}, {"uuid": "554e2e33-99d1-4bf7-8e51-47bc117f140a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57964", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4756", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57964\n\ud83d\udd25 CVSS Score: 7.3 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Insecure Loading of Dynamic Link Libraries have been discovered in HVAC Energy Saving Program, which could allow local attackers to potentially disclose information or execute arbitray code on affected systems.\nThis issue affects HVAC Energy Saving Program:.\n\ud83d\udccf Published: 2025-02-18T06:33:57.761Z\n\ud83d\udccf Modified: 2025-02-18T06:33:57.761Z\n\ud83d\udd17 References:\n1. https://www.hitachi.com/hirt/hitachi-sec/2025/001.html", "creation_timestamp": "2025-02-18T08:09:53.000000Z"}, {"uuid": "c629219e-7bb1-4712-8b5e-934c78def71c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5706", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4815", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-5706\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The product receives input from an upstream component, but it does not restrict or incorrectly restricts the input before it is used as an identifier for a resource that may be outside the intended sphere of control. (CWE-99)\u00a0\n\n\n\n\n\n\nHitachi Vantara Pentaho Data Integration & Analytics versions before 10.2.0.0 and 9.3.0.9, including 8.3.x, do not restrict JNDI identifiers during the creation of Community Dashboards, allowing control of system-level data sources.\u00a0\n\n\n\n\n\n\n\nAn attacker could gain access to or modify sensitive data or system resources. This could allow access to protected files or directories including configuration files and files containing sensitive information, which can lead to remote code execution by unauthorized users.\n\ud83d\udccf Published: 2025-02-19T22:49:46.583Z\n\ud83d\udccf Modified: 2025-02-20T20:59:04.811Z\n\ud83d\udd17 References:\n1. https://support.pentaho.com/hc/en-us/articles/34296195570189--Resolved-Hitachi-Vantara-Pentaho-Data-Integration-Analytics-Improper-Control-of-Resource-Identifiers-Resource-Injection-Versions-before-10-2-0-0-and-9-3-0-9-including-8-3-x-Impacted-CVE-2024-5706", "creation_timestamp": "2025-02-20T21:17:48.000000Z"}, {"uuid": "75891c6b-cf3a-48c9-a5f4-5fb190e56809", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5705", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4816", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-5705\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions. (CWE-863) \n\n\n\n\u00a0\n\n\n\n\u00a0\n\n\n\nHitachi Vantara Pentaho Business Analytics Server versions before 10.2.0.0 and 9.3.0.9, including 8.3.x, have modules enabled by default that allow execution of system level processes. \n\n\n\n\u00a0\n\n\n\n\n\n\n\n\nWhen access control checks are incorrectly applied, users can access data or perform actions that they should not be allowed to perform. This can lead to a wide range of problems, including information exposures and denial of service.\n\ud83d\udccf Published: 2025-02-19T22:55:08.706Z\n\ud83d\udccf Modified: 2025-02-20T20:55:44.629Z\n\ud83d\udd17 References:\n1. https://support.pentaho.com/hc/en-us/articles/34296615099405--Resolved-Hitachi-Vantara-Pentaho-Business-Analytics-Server-Incorrect-Authorization-Versions-before-10-2-0-0-and-9-3-0-9-including-8-3-x-Impacted-CVE-2024-5705", "creation_timestamp": "2025-02-20T21:17:49.000000Z"}, {"uuid": "219e518b-0de8-4235-89c0-ded7beb1b60f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57176", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4950", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57176\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in the shiroFilter function of White-Jotter project v0.2.2 allows attackers to execute a directory traversal and access sensitive endpoints via a crafted URL.\n\ud83d\udccf Published: 2025-02-21T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-21T18:02:49.903Z\n\ud83d\udd17 References:\n1. https://github.com/DYX217/Incorrect-Access-Control", "creation_timestamp": "2025-02-21T18:19:09.000000Z"}, {"uuid": "fb9629e0-adfe-4658-bc21-8dcf58090887", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57726", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mkd7zgbq4m2s", "content": "", "creation_timestamp": "2026-04-25T14:14:10.961048Z"}, {"uuid": "5c5cf78c-9d6b-4b16-9b75-1ece9c8ef69e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57608", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5229", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57608\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in Via Browser 6.1.0 allows a a remote attacker to execute arbitrary code via the mark.via.Shell component.\n\ud83d\udccf Published: 2025-02-24T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-24T22:08:48.136Z\n\ud83d\udd17 References:\n1. https://github.com/Zkplo/AppVulHub/blob/main/mark.via.Shell/CWE-94.md", "creation_timestamp": "2025-02-24T22:22:21.000000Z"}, {"uuid": "0ad7380f-61d4-4145-9c2f-6dcd8bdc9ce4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57040", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5631", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57040\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: TL-WR845N(UN)_V4_200909 and TL-WR845N(UN)_V4_190219 was discovered to contain a hardcoded password for the root account which can be obtained via a brute force attack.\n\ud83d\udccf Published: 2025-02-26T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-26T21:58:53.632Z\n\ud83d\udd17 References:\n1. https://security.iiita.ac.in/iot/hashed_password.pdf", "creation_timestamp": "2025-02-26T22:24:29.000000Z"}, {"uuid": "b517bcee-1f56-4aae-b8be-52ff780f91e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57998", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5646", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57998\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nOPP: add index check to assert to avoid buffer overflow in _read_freq()\n\nPass the freq index to the assert function to make sure\nwe do not read a freq out of the opp->rates[] table when called\nfrom the indexed variants:\ndev_pm_opp_find_freq_exact_indexed() or\ndev_pm_opp_find_freq_ceil/floor_indexed().\n\nAdd a secondary parameter to the assert function, unused\nfor assert_single_clk() then add assert_clk_index() which\nwill check for the clock index when called from the _indexed()\nfind functions.\n\ud83d\udccf Published: 2025-02-27T02:07:17.965Z\n\ud83d\udccf Modified: 2025-02-27T02:07:17.965Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/774dd6f0f0a61c9c3848e025d7d9eeed1a7ca4cd\n2. https://git.kernel.org/stable/c/eb6ffa0192ba83ece1a318b956265519c5c7dcec\n3. https://git.kernel.org/stable/c/7d68c20638e50d5eb4576492a7958328ae445248\n4. https://git.kernel.org/stable/c/da2a6acc73933b7812c94794726e438cde39e037\n5. https://git.kernel.org/stable/c/d659bc68ed489022ea33342cfbda2911a81e7a0d", "creation_timestamp": "2025-02-27T02:25:36.000000Z"}, {"uuid": "a75e692b-4b22-4d7e-96c5-b9abc34aaf75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57977", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5669", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57977\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nmemcg: fix soft lockup in the OOM process\n\nA soft lockup issue was found in the product with about 56,000 tasks were\nin the OOM cgroup, it was traversing them when the soft lockup was\ntriggered.\n\nwatchdog: BUG: soft lockup - CPU#2 stuck for 23s! [VM Thread:1503066]\nCPU: 2 PID: 1503066 Comm: VM Thread Kdump: loaded Tainted: G\nHardware name: Huawei Cloud OpenStack Nova, BIOS\nRIP: 0010:console_unlock+0x343/0x540\nRSP: 0000:ffffb751447db9a0 EFLAGS: 00000247 ORIG_RAX: ffffffffffffff13\nRAX: 0000000000000001 RBX: 0000000000000000 RCX: 00000000ffffffff\nRDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000247\nRBP: ffffffffafc71f90 R08: 0000000000000000 R09: 0000000000000040\nR10: 0000000000000080 R11: 0000000000000000 R12: ffffffffafc74bd0\nR13: ffffffffaf60a220 R14: 0000000000000247 R15: 0000000000000000\nCS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 00007f2fe6ad91f0 CR3: 00000004b2076003 CR4: 0000000000360ee0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\n vprintk_emit+0x193/0x280\n printk+0x52/0x6e\n dump_task+0x114/0x130\n mem_cgroup_scan_tasks+0x76/0x100\n dump_header+0x1fe/0x210\n oom_kill_process+0xd1/0x100\n out_of_memory+0x125/0x570\n mem_cgroup_out_of_memory+0xb5/0xd0\n try_charge+0x720/0x770\n mem_cgroup_try_charge+0x86/0x180\n mem_cgroup_try_charge_delay+0x1c/0x40\n do_anonymous_page+0xb5/0x390\n handle_mm_fault+0xc4/0x1f0\n\nThis is because thousands of processes are in the OOM cgroup, it takes a\nlong time to traverse all of them.  As a result, this lead to soft lockup\nin the OOM process.\n\nTo fix this issue, call 'cond_resched' in the 'mem_cgroup_scan_tasks'\nfunction per 1000 iterations.  For global OOM, call\n'touch_softlockup_watchdog' per 1000 iterations to avoid this issue.\n\ud83d\udccf Published: 2025-02-27T02:07:04.943Z\n\ud83d\udccf Modified: 2025-02-27T12:57:18.083Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/972486d37169fe85035e81b8c5dff21f70df1173\n2. https://git.kernel.org/stable/c/c3a3741db8c1202aa959c77df3a4c361612d1eb1\n3. https://git.kernel.org/stable/c/46576834291869457d4772bb7df72d7c2bb3d57f\n4. https://git.kernel.org/stable/c/ade81479c7dda1ce3eedb215c78bc615bbd04f06", "creation_timestamp": "2025-02-27T13:27:35.000000Z"}, {"uuid": "193e57dc-9224-45d0-9a87-39e3221cd128", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57392", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6111", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57392\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Buffer Overflow vulnerability in Proftpd commit 4017eff8 allows a remote attacker to execute arbitrary code and can cause a Denial of Service (DoS) on the FTP service by sending a maliciously crafted message to the ProFTPD service port.\n\ud83d\udccf Published: 2025-02-06T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-02T22:02:29.260Z\n\ud83d\udd17 References:\n1. https://github.com/Br1m4zz/protocol_vul_repoduce.git", "creation_timestamp": "2025-03-02T22:29:19.000000Z"}, {"uuid": "28f5467e-b461-42d9-b1b3-f9502a5e1b86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57237", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6244", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57237\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Prolink 4G LTE Mobile Wi-Fi DL-7203E V4.0.0B05 is vulnerable to Cross Site Scripting (XSS) in the /reqproc/proc_get endpoint. The vulnerability arises because the cmd parameter does not properly sanitize input and the response is served with a Content-Type of text/html. This behavior allows the browser to execute injected JavaScript code.\n\ud83d\udccf Published: 2025-02-03T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-03T17:22:46.711Z\n\ud83d\udd17 References:\n1. https://prolink2u.com/products/dl-7203e-b\n2. https://harryha.substack.com/p/4g-lte-mobile-wifi-dl7203e-xss-cve-2024-57237", "creation_timestamp": "2025-03-03T17:31:26.000000Z"}, {"uuid": "6038e024-40b0-4247-9c96-f7d9d89127ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57240", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6386", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57240\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A Cross-Site Scripting (XSS) vulnerability in the Rendering Engine component in Apryse WebViewer v11.1 and earlier allows attackers to execute arbitrary code via a crafted PDF file.\n\ud83d\udccf Published: 2025-03-03T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-04T16:19:17.227Z\n\ud83d\udd17 References:\n1. https://gist.github.com/devom3/43c328e23ec854090ed555a13541ca94", "creation_timestamp": "2025-03-04T16:31:48.000000Z"}, {"uuid": "7a082556-aaaf-4968-bf45-29be8f25ea82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57972", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6755", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57972\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A vulnerability in the pairing request method in Microsoft HoloLens 1 and 2 - Windows Holographic 10.0.17763.3046 through 10.0.22621.1244 allows remote attackers to cause a Denial of Service via the Device Portal framework.\n\ud83d\udccf Published: 2025-03-06T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-06T21:03:58.445Z\n\ud83d\udd17 References:\n1. https://github.com/tania-silva/Hololens", "creation_timestamp": "2025-03-06T21:34:21.000000Z"}, {"uuid": "bb4e1345-6777-452a-b711-a937765a9e84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57174", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6776", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57174\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A misconfiguration in Alphion ASEE-1443 Firmware v0.4.H.00.02.15 defines a previously unregistered domain name as the default DNS suffix. This allows attackers to register the unclaimed domain and point its wildcard DNS entry to an attacker-controlled IP address, making it possible to access sensitive information.\n\ud83d\udccf Published: 2025-03-05T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-06T21:55:15.495Z\n\ud83d\udd17 References:\n1. https://chenzw.medium.com/internal-domain-names-f1cd2886c654\n2. https://github.com/geo-chen/BSides-SG-2022---Internal-Domain-Names?tab=readme-ov-file#finding-1---cve-2024-57174-alphion-routers", "creation_timestamp": "2025-03-06T22:33:49.000000Z"}, {"uuid": "1e8cb539-5a7b-4214-a4ba-b99af20465b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57492", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6878", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-42733\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in Docmosis Tornado v.2.9.7 and before allows a remote attacker to execute arbitrary code via a crafted script to the UNC path input\n\ud83d\udccf Published: 2025-03-07T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-07T20:23:26.850Z\n\ud83d\udd17 References:\n1. https://github.com/Docmosis/tornado-docker/issues/14\n2. https://github.com/Marsman1996/pocs/blob/master/redox/CVE-2024-57492/README.md", "creation_timestamp": "2025-03-07T20:40:23.000000Z"}, {"uuid": "4df4ea06-2554-4564-a43c-a949ec9765f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57968", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7024", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57968\n\ud83d\udd25 CVSS Score: 9.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: Advantive VeraCore before 2024.4.2.1 allows remote authenticated users to upload files to unintended folders (e.g., ones that are accessible during web browsing by other users). upload.aspx can be used for this.\n\ud83d\udccf Published: 2025-02-03T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-10T17:17:33.904Z\n\ud83d\udd17 References:\n1. https://advantive.my.site.com/support/s/article/VeraCore-Release-Notes-2024-4-2-1\n2. https://intezer.com/blog/research/xe-group-exploiting-zero-days/\n3. https://www.solissecurity.com/en-us/insights/xe-group-from-credit-card-skimming-to-exploiting-zero-days/", "creation_timestamp": "2025-03-10T17:38:20.000000Z"}, {"uuid": "282f6564-ec0e-438e-b240-291eb6497ec1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57064", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6994", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57064\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A prototype pollution in the lib.setValue function of @syncfusion/ej2-spreadsheet v27.2.2 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload. NOTE: a third party disputes this because they found that the lib.setValue function is not utilized.\n\ud83d\udccf Published: 2025-02-05T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-10T13:00:17.888Z\n\ud83d\udd17 References:\n1. https://gist.github.com/tariqhawis/1b40dc7f3836813663c871535039760e", "creation_timestamp": "2025-03-10T13:39:16.000000Z"}, {"uuid": "f666ddb4-29bf-4c87-89a8-1dbff1e7e968", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57492", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7003", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57492\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in redoxOS relibc before commit 98aa4ea5 allows a local attacker to cause a denial of service via the round_up_to_page funciton.\n\ud83d\udccf Published: 2025-03-10T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-10T14:06:21.428Z\n\ud83d\udd17 References:\n1. https://gitlab.redox-os.org/redox-os/relibc/-/issues/200\n2. https://gitlab.redox-os.org/redox-os/relibc/-/merge_requests/569\n3. https://github.com/Marsman1996/pocs/blob/master/redox/CVE-2024-57492/README.md", "creation_timestamp": "2025-03-10T14:38:49.000000Z"}, {"uuid": "f3e5c041-8faa-465e-8ec4-a02487cbf4e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57433", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7966", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57433\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: macrozheng mall-tiny 1.0.1 is vulnerable to Incorrect Access Control via the logout function. After a user logs out, their token is still available and fetches information in the logged-in state.\n\ud83d\udccf Published: 2025-01-31T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-18T18:32:28.577Z\n\ud83d\udd17 References:\n1. https://github.com/peccc/restful_vul/blob/main/mall_tiny_logout_failed/mall_tiny_logout_failed.md", "creation_timestamp": "2025-03-18T19:03:03.000000Z"}, {"uuid": "f838d819-0517-4e0d-b2de-caa3678a73d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57085", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7489", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57085\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A prototype pollution in the function deepMerge of @stryker-mutator/util v8.6.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload.\n\ud83d\udccf Published: 2025-02-05T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-13T19:21:59.810Z\n\ud83d\udd17 References:\n1. https://gist.github.com/tariqhawis/f59355f62dad6f8b53b42317f143ba0c", "creation_timestamp": "2025-03-13T19:42:53.000000Z"}, {"uuid": "160d8bad-a0c6-40ed-8b8a-74861b08c61e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57012", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7579", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57012\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the \"week\" parameter in setScheduleCfg.\n\ud83d\udccf Published: 2025-01-15T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-14T15:34:24.788Z\n\ud83d\udd17 References:\n1. https://www.totolink.net/\n2. https://github.com/tiger5671/Vulnerabilities/blob/main/TOTOLINK%20X5000R/setScheduleCfg/setScheduleCfg.md", "creation_timestamp": "2025-03-14T15:43:33.000000Z"}, {"uuid": "a6a64ed9-3ee6-4d25-9f8e-33f6b78c76bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57722", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7613", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57722\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: lunasvg v3.0.0 was discovered to contain a allocation-size-too-big bug via the component plutovg_surface_create.\n\ud83d\udccf Published: 2025-01-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-14T17:18:07.967Z\n\ud83d\udd17 References:\n1. https://github.com/keepinggg/poc/blob/main/poc_of_lunasvg_3.1.0\n2. https://github.com/sammycage/lunasvg/issues/209", "creation_timestamp": "2025-03-14T17:49:01.000000Z"}, {"uuid": "b336ad39-1934-4b87-b694-626f4eb6876e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57440", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8236", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57440\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: D-Link DSL-3788 revA1 1.01R1B036_EU_EN is vulnerable to Buffer Overflow via the COMM_MAKECustomMsg function of the webproc cgi\n\ud83d\udccf Published: 2025-03-20T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-20T16:55:40.284Z\n\ud83d\udd17 References:\n1. https://www.dlink.com/en/security-bulletin/\n2. https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10418", "creation_timestamp": "2025-03-20T17:18:44.000000Z"}, {"uuid": "1247d157-3ef7-4437-9072-eb4e227cf0fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57672", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7790", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57672\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in floodlight v1.2 allows a local attacker to cause a denial of service via the Topology Manager module, Topologylnstance module, Routing module.\n\ud83d\udccf Published: 2025-02-06T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-17T16:34:54.743Z\n\ud83d\udd17 References:\n1. https://github.com/floodlight/floodlight/issues/871", "creation_timestamp": "2025-03-17T16:47:25.000000Z"}, {"uuid": "67724e32-d120-4211-8184-a7b287eec39e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57011", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7789", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57011\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the \"minute\" parameters in setScheduleCfg.\n\ud83d\udccf Published: 2025-01-15T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-17T16:36:55.357Z\n\ud83d\udd17 References:\n1. https://www.totolink.net/\n2. https://github.com/tiger5671/Vulnerabilities/blob/main/TOTOLINK%20X5000R/setScheduleCfg/setScheduleCfg.md", "creation_timestamp": "2025-03-17T16:47:24.000000Z"}, {"uuid": "f34b5de3-ba64-457e-9d01-d5a02e32123c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57162", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8110", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57162\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Campcodes Cybercafe Management System v1.0 is vulnerable to SQL Injection in /ccms/view-user-detail.php.\n\ud83d\udccf Published: 2025-01-16T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-19T17:58:06.270Z\n\ud83d\udd17 References:\n1. https://github.com/h1-wh0areu/bug_report/blob/main/cybercafe-management-system/SQLi-1.md", "creation_timestamp": "2025-03-19T18:19:27.000000Z"}, {"uuid": "30699189-d3aa-4745-9715-a4e34c5f3232", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57790", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7822", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57790\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: IXON B.V. IXrouter IX2400 (Industrial Edge Gateway) v3.0 was discovered to contain hardcoded root credentials stored in the non-volatile flash memory. This vulnerability allows physically proximate attackers to gain root access via UART or SSH.\n\ud83d\udccf Published: 2025-02-14T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-17T18:41:19.921Z\n\ud83d\udd17 References:\n1. https://github.com/rick-cen/vulnerability-research/tree/main/CVE-2024-57790", "creation_timestamp": "2025-03-17T19:34:15.000000Z"}, {"uuid": "5166c9ea-fbf4-40f9-95e8-8ad0ff538386", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57721", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7976", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57721\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: lunasvg v3.0.0 was discovered to contain a segmentation violation via the component plutovg_path_add_path.\n\ud83d\udccf Published: 2025-01-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-18T19:32:37.882Z\n\ud83d\udd17 References:\n1. https://github.com/keepinggg/poc/blob/main/poc_of_lunasvg_3.1.0\n2. https://github.com/sammycage/lunasvg/issues/209", "creation_timestamp": "2025-03-18T19:48:49.000000Z"}, {"uuid": "7f644907-ad14-4de6-8b68-7e67324cff14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57151", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7994", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57151\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: SQL Injection vulnerability in rainrocka xinhu v.2.6.5 and before allows a remote attacker to execute arbitrary code via the inputAction.php file and the saveAjax function\n\ud83d\udccf Published: 2025-03-18T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-18T20:40:55.442Z\n\ud83d\udd17 References:\n1. https://github.com/jcxj/jcxj/blob/master/source/_posts/%E4%BF%A1%E5%91%BCoa%E5%AE%A1%E8%AE%A1.md", "creation_timestamp": "2025-03-18T20:48:14.000000Z"}, {"uuid": "c5566733-05d7-4cab-aba2-a6bccf652940", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57076", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8007", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57076\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A prototype pollution in the lib.post function of ajax-request v1.2.3 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload.\n\ud83d\udccf Published: 2025-02-05T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-18T20:21:08.978Z\n\ud83d\udd17 References:\n1. https://gist.github.com/tariqhawis/c432b93ee7d967c2e65bc1bf39241664", "creation_timestamp": "2025-03-18T20:48:31.000000Z"}, {"uuid": "a0d33fce-a770-4aae-aba0-493d7207280e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57473", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8231", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57473\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the mac address editing function. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands by sending a POST request to /bin/webs.\n\ud83d\udccf Published: 2025-01-14T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-20T15:42:41.562Z\n\ud83d\udd17 References:\n1. http://h3c.com\n2. https://gist.github.com/XiaoCurry/85ae28b7437d24d9c531c970612d3bd8", "creation_timestamp": "2025-03-20T16:18:22.000000Z"}, {"uuid": "b3ed4780-c435-40e0-8af2-4117499a3ce8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57723", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8004", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57723\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: lunasvg v3.0.0 was discovered to contain a segmentation violation via the component composition_source_over.\n\ud83d\udccf Published: 2025-01-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-18T20:27:11.788Z\n\ud83d\udd17 References:\n1. https://github.com/keepinggg/poc/blob/main/poc_of_lunasvg_3.1.0\n2. https://github.com/sammycage/lunasvg/issues/209", "creation_timestamp": "2025-03-18T20:48:29.000000Z"}, {"uuid": "df84f9bb-e799-4cc7-8773-8f0c105cbca0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57022", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8050", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57022\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the \"sHour\" parameter in setWiFiScheduleCfg.\n\ud83d\udccf Published: 2025-01-15T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-19T13:58:50.642Z\n\ud83d\udd17 References:\n1. https://www.totolink.net/\n2. https://github.com/tiger5671/Vulnerabilities/blob/main/TOTOLINK%20X5000R/setWiFiScheduleCfg/setWiFiScheduleCfg.md", "creation_timestamp": "2025-03-19T14:16:40.000000Z"}, {"uuid": "369751c6-26cd-40c1-8a8c-7aee75694825", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57724", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8047", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57724\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: lunasvg v3.0.0 was discovered to contain a segmentation violation via the component gray_record_cell.\n\ud83d\udccf Published: 2025-01-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-19T14:03:26.613Z\n\ud83d\udd17 References:\n1. https://github.com/keepinggg/poc/blob/main/poc_of_lunasvg_3.1.0\n2. https://github.com/sammycage/lunasvg/issues/209", "creation_timestamp": "2025-03-19T14:16:37.000000Z"}, {"uuid": "490d8928-aff7-4b7f-8c65-45f8a923e2bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57579", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8161", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57579\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the limitSpeedUp parameter in the formSetClientState function.\n\ud83d\udccf Published: 2025-01-16T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-19T20:45:11.652Z\n\ud83d\udd17 References:\n1. https://github.com/qijiale/Tenda/tree/main/6", "creation_timestamp": "2025-03-19T21:18:34.000000Z"}, {"uuid": "14216e6d-3c7e-42b6-a1c7-a62c24e6e609", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5752", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8202", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-5752\n\ud83d\udd25 CVSS Score: 9.1 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H)\n\ud83d\udd39 Description: A path traversal vulnerability exists in stitionai/devika, specifically in the project creation functionality. In the affected version beacf6edaa205a5a5370525407a6db45137873b3, the project name is not validated, allowing an attacker to create a project with a crafted name that traverses directories. This can lead to arbitrary file overwrite when the application generates code and saves it to the specified project directory, potentially resulting in remote code execution.\n\ud83d\udccf Published: 2025-03-20T10:11:17.971Z\n\ud83d\udccf Modified: 2025-03-20T14:53:54.243Z\n\ud83d\udd17 References:\n1. https://huntr.com/bounties/865b5f44-ef75-4243-a5f1-2f0d895353b1\n2. https://github.com/stitionai/devika/commit/6acce21fb08c3d1123ef05df6a33912bf0ee77c2", "creation_timestamp": "2025-03-20T15:18:13.000000Z"}, {"uuid": "42a6e7a8-25d9-46b6-9712-0f8d5d44bd9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57971", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8341", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57971\n\ud83d\udd25 CVSS Score: 9.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: DataSourceResource.java in the SpagoBI API support in Knowage Server in KNOWAGE before 8.1.30 does not ensure that java:comp/env/jdbc/ occurs at the beginning of a JNDI Name.\n\ud83d\udccf Published: 2025-02-16T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-21T13:48:38.429Z\n\ud83d\udd17 References:\n1. https://github.com/KnowageLabs/Knowage-Server/commit/f7d0362f737e1b0db1cc9cc95b1236d62d83dd0c\n2. https://spagobi.readthedocs.io\n3. https://github.com/KnowageLabs/Knowage-Server/compare/v8.1.29...v8.1.30\n4. https://github.com/darumaseye/CVEs/blob/ec2de9f7ecffde466e687745bfdfc672e86241d7/CVE-2024-57971.md", "creation_timestamp": "2025-03-21T14:19:14.000000Z"}, {"uuid": "21ec26de-acd6-4183-9b67-e0529b8f3ef7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57653", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8477", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57653\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in the qst_vec_set_copy component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.\n\ud83d\udccf Published: 2025-01-14T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-24T16:02:31.484Z\n\ud83d\udd17 References:\n1. https://github.com/openlink/virtuoso-opensource/issues/1208", "creation_timestamp": "2025-03-24T16:23:13.000000Z"}, {"uuid": "55a38de1-62f8-4c00-9e2a-e065b86985c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57658", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8480", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57658\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in the sql_tree_hash_1 component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.\n\ud83d\udccf Published: 2025-01-14T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-24T15:55:39.745Z\n\ud83d\udd17 References:\n1. https://github.com/openlink/virtuoso-opensource/issues/1209", "creation_timestamp": "2025-03-24T16:23:15.000000Z"}, {"uuid": "e1484c8b-fc85-4f9e-ab27-cf9fbed4cbb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57894", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9280", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57894\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-15T13:05:46.564Z\n\ud83d\udccf Modified: 2025-03-28T06:51:10.655Z\n\ud83d\udd17 References:\nNo references available.", "creation_timestamp": "2025-03-28T07:27:26.000000Z"}, {"uuid": "da314035-f1f0-42b1-8dcf-a491f4cda173", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5739", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9516", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-5739\n\ud83d\udd25 CVSS Score: 6.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The in-app browser of LINE client for iOS versions below 14.9.0 contains a Universal XSS (UXSS) vulnerability. This vulnerability allows for cross-site scripting (XSS) where arbitrary JavaScript can be executed in the top frame from an embedded iframe on any displayed web site within the in-app browser. The in-app browser is usually opened by tapping on URLs contained in chat messages, and for the attack to be successful, the victim must trigger a click event on a malicious iframe. If an iframe embedded in any website can be controlled by an attacker, this vulnerability could be exploited to capture or alter content displayed in the top frame, as well as user session information. This vulnerability affects LINE client for iOS versions below 14.9.0 and does not affect other LINE clients such as LINE client for Android. Please update LINE client for iOS to version 14.9.0 or higher.\n\ud83d\udccf Published: 2024-06-12T07:00:35.232Z\n\ud83d\udccf Modified: 2025-03-28T23:50:07.942Z\n\ud83d\udd17 References:\n1. https://hackerone.com/reports/2284129", "creation_timestamp": "2025-03-29T00:28:44.000000Z"}, {"uuid": "24d21923-c2fd-45d3-b46e-65e6af1c5f7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57151", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9688", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57151\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: SQL Injection vulnerability in rainrocka xinhu v.2.6.5 and before allows a remote attacker to execute arbitrary code via the inputAction.php file and the saveAjax function\n\ud83d\udccf Published: 2025-03-18T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-31T14:58:46.707Z\n\ud83d\udd17 References:\n1. https://github.com/jcxj/jcxj/blob/master/source/_posts/%E4%BF%A1%E5%91%BCoa%E5%AE%A1%E8%AE%A1.md\n2. https://github.com/l1uyi/cve-list/blob/main/cve-list/xinhu-CVE-2024-57171.md", "creation_timestamp": "2025-03-31T15:31:28.000000Z"}, {"uuid": "3ce2421d-14c3-4e51-b865-5785c409b5c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57171", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9688", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57151\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: SQL Injection vulnerability in rainrocka xinhu v.2.6.5 and before allows a remote attacker to execute arbitrary code via the inputAction.php file and the saveAjax function\n\ud83d\udccf Published: 2025-03-18T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-31T14:58:46.707Z\n\ud83d\udd17 References:\n1. https://github.com/jcxj/jcxj/blob/master/source/_posts/%E4%BF%A1%E5%91%BCoa%E5%AE%A1%E8%AE%A1.md\n2. https://github.com/l1uyi/cve-list/blob/main/cve-list/xinhu-CVE-2024-57171.md", "creation_timestamp": "2025-03-31T15:31:28.000000Z"}, {"uuid": "380e02d4-d162-45bb-89f8-0cec6877ae31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57728", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mkdwujzm3s2x", "content": "", "creation_timestamp": "2026-04-25T21:03:08.683419Z"}, {"uuid": "8f58464b-5f31-4acf-904d-f7d4f72b7b4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57868", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10609", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57868\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Web::API 2.8 and earlier for Perl uses the rand() function as the default source of entropy, which is not cryptographically secure, for cryptographic functions.\n\nSpecifically Web::API uses the Data::Random library which specifically states that it is \"Useful mostly for test programs\". Data::Random uses the rand() function.\n\ud83d\udccf Published: 2025-04-05T15:35:05.802Z\n\ud83d\udccf Modified: 2025-04-05T15:35:05.802Z\n\ud83d\udd17 References:\n1. https://perldoc.perl.org/functions/rand\n2. https://security.metacpan.org/docs/guides/random-data-for-security.html\n3. https://metacpan.org/release/BAREFOOT/Data-Random-0.13/source/lib/Data/Random.pm#L537\n4. https://metacpan.org/dist/Web-API/source/lib/Web/API.pm#L20\n5. https://metacpan.org/dist/Web-API/source/lib/Web/API.pm#L348", "creation_timestamp": "2025-04-05T16:39:09.000000Z"}, {"uuid": "6737a964-ddc8-42a3-8972-3d068c68bdb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57835", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10606", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57835\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Amon2::Auth::Site::LINE uses the String::Random module\u00a0to generate nonce values.\u00a0\n\nString::Random\u00a0defaults to Perl's built-in predictable\u00a0random number generator,\u00a0the rand() function, which is not cryptographically secure\n\ud83d\udccf Published: 2025-04-05T16:11:11.314Z\n\ud83d\udccf Modified: 2025-04-05T16:11:11.314Z\n\ud83d\udd17 References:\n1. https://metacpan.org/release/SHLOMIF/String-Random-0.32/source/lib/String/Random.pm#L377\n2. https://metacpan.org/release/TANIGUCHI/Amon2-Auth-Site-LINE-0.04/source/lib/Amon2/Auth/Site/LINE.pm#L235\n3. https://metacpan.org/release/TANIGUCHI/Amon2-Auth-Site-LINE-0.04/source/lib/Amon2/Auth/Site/LINE.pm#L255\n4. https://security.metacpan.org/docs/guides/random-data-for-security.html", "creation_timestamp": "2025-04-05T16:39:06.000000Z"}, {"uuid": "6f7f2d8e-2cd8-4a7d-bdcb-e7ca8a3f55bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57726", "type": "seen", "source": "https://bsky.app/profile/solomonneas.dev/post/3mkfj3zxuv32b", "content": "", "creation_timestamp": "2026-04-26T12:02:02.175134Z"}, {"uuid": "b236ec91-3dc9-4f17-a1a4-1883acb056c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57726", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mklqqlpops2w", "content": "", "creation_timestamp": "2026-04-28T23:34:46.494534Z"}, {"uuid": "77535393-d2b5-4f2f-8927-4baa34872026", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57728", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mklqqlpops2w", "content": "", "creation_timestamp": "2026-04-28T23:34:46.622186Z"}, {"uuid": "2978339c-5f43-4ed5-a377-0f404545cc50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57726", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mklr3f22zk2w", "content": "", "creation_timestamp": "2026-04-28T23:40:54.336871Z"}, {"uuid": "c3a09dfb-1399-40c1-868e-12a05152a0bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57493", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12536", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57493\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in redoxOS relibc before commit 98aa4ea5 allows a local attacker to cause a denial of service via the setsockopt function.\n\ud83d\udccf Published: 2025-04-18T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-18T19:21:13.002Z\n\ud83d\udd17 References:\n1. https://gitlab.redox-os.org/redox-os/relibc/-/issues/201\n2. https://gitlab.redox-os.org/redox-os/relibc/-/merge_requests/566\n3. https://github.com/Marsman1996/pocs/tree/master/redox/CVE-2024-57493", "creation_timestamp": "2025-04-18T19:59:09.000000Z"}, {"uuid": "b348e6a1-6e51-4177-948c-d262eab61ee0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57394", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12716", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57394\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The quarantine - restore function in Qi-ANXIN Tianqing Endpoint Security Management System v10.0 allows user to restore a malicious file to an arbitrary file path. Attackers can write malicious DLL to system path and perform privilege escalation by leveraging Windows DLL hijacking vulnerabilities.\n\ud83d\udccf Published: 2025-04-21T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-21T17:21:43.014Z\n\ud83d\udd17 References:\n1. https://en.qianxin.com/product/detail/165\n2. https://github.com/cwjchoi01/CVE-2024-57394", "creation_timestamp": "2025-04-21T18:02:36.000000Z"}, {"uuid": "fe21bfea-ca7a-4961-8028-4941b1014a19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57726", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mkly5f5ftc2w", "content": "", "creation_timestamp": "2026-04-29T01:47:14.183370Z"}, {"uuid": "515749f6-f8c1-4c1e-9ec6-a345fcf3c375", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57993", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14772", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57993\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nHID: hid-thrustmaster: Fix warning in thrustmaster_probe by adding endpoint check\n\nsyzbot has found a type mismatch between a USB pipe and the transfer\nendpoint, which is triggered by the hid-thrustmaster driver[1].\nThere is a number of similar, already fixed issues [2].\nIn this case as in others, implementing check for endpoint type fixes the issue.\n\n[1] https://syzkaller.appspot.com/bug?extid=040e8b3db6a96908d470\n[2] https://syzkaller.appspot.com/bug?extid=348331f63b034f89b622\n\ud83d\udccf Published: 2025-02-27T02:07:14.953Z\n\ud83d\udccf Modified: 2025-05-04T10:07:55.416Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/220883fba32549a34f0734e4859d07f4dcd56992\n2. https://git.kernel.org/stable/c/ae730deded66150204c494282969bfa98dc3ae67\n3. https://git.kernel.org/stable/c/e5bcae4212a6a4b4204f46a1b8bcba08909d2007\n4. https://git.kernel.org/stable/c/816e84602900f7f951458d743fa12769635ebfd5\n5. https://git.kernel.org/stable/c/50420d7c79c37a3efe4010ff9b1bb14bc61ebccf", "creation_timestamp": "2025-05-04T10:18:12.000000Z"}, {"uuid": "a70739d3-24a3-4f70-b34e-642f19464f4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57995", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14771", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57995\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath12k: fix read pointer after free in ath12k_mac_assign_vif_to_vdev()\n\nIn ath12k_mac_assign_vif_to_vdev(), if arvif is created on a different\nradio, it gets deleted from that radio through a call to\nath12k_mac_unassign_link_vif(). This action frees the arvif pointer.\nSubsequently, there is a check involving arvif, which will result in a\nread-after-free scenario.\n\nFix this by moving this check after arvif is again assigned via call to\nath12k_mac_assign_link_vif().\n\nTested-on: QCN9274 hw2.0 PCI WLAN.WBE.1.3.1-00173-QCAHKSWPL_SILICONZ-1\n\ud83d\udccf Published: 2025-02-27T02:07:16.163Z\n\ud83d\udccf Modified: 2025-05-04T10:07:58.580Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/f3a95a312419e4f1e992525917da9dbcd247038f\n2. https://git.kernel.org/stable/c/5a10971c7645a95f5d5dc23c26fbac4bf61801d0", "creation_timestamp": "2025-05-04T10:18:10.000000Z"}, {"uuid": "67cd3ee0-d71b-43d5-a4d8-56611b7933ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57992", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14773", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57992\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: wilc1000: unregister wiphy only if it has been registered\n\nThere is a specific error path in probe functions in wilc drivers (both\nsdio and spi) which can lead to kernel panic, as this one for example\nwhen using SPI:\n\nUnable to handle kernel paging request at virtual address 9f000000 when read\n[9f000000] *pgd=00000000\nInternal error: Oops: 5 [#1] ARM\nModules linked in: wilc1000_spi(+) crc_itu_t crc7 wilc1000 cfg80211 bluetooth ecdh_generic ecc\nCPU: 0 UID: 0 PID: 106 Comm: modprobe Not tainted 6.13.0-rc3+ #22\nHardware name: Atmel SAMA5\nPC is at wiphy_unregister+0x244/0xc40 [cfg80211]\nLR is at wiphy_unregister+0x1c0/0xc40 [cfg80211]\n[...]\n wiphy_unregister [cfg80211] from wilc_netdev_cleanup+0x380/0x494 [wilc1000]\n wilc_netdev_cleanup [wilc1000] from wilc_bus_probe+0x360/0x834 [wilc1000_spi]\n wilc_bus_probe [wilc1000_spi] from spi_probe+0x15c/0x1d4\n spi_probe from really_probe+0x270/0xb2c\n really_probe from __driver_probe_device+0x1dc/0x4e8\n __driver_probe_device from driver_probe_device+0x5c/0x140\n driver_probe_device from __driver_attach+0x220/0x540\n __driver_attach from bus_for_each_dev+0x13c/0x1a8\n bus_for_each_dev from bus_add_driver+0x2a0/0x6a4\n bus_add_driver from driver_register+0x27c/0x51c\n driver_register from do_one_initcall+0xf8/0x564\n do_one_initcall from do_init_module+0x2e4/0x82c\n do_init_module from load_module+0x59a0/0x70c4\n load_module from init_module_from_file+0x100/0x148\n init_module_from_file from sys_finit_module+0x2fc/0x924\n sys_finit_module from ret_fast_syscall+0x0/0x1c\n\nThe issue can easily be reproduced, for example by not wiring correctly\na wilc device through SPI (and so, make it unresponsive to early SPI\ncommands). It is due to a recent change decoupling wiphy allocation from\nwiphy registration, however wilc_netdev_cleanup has not been updated\naccordingly, letting it possibly call wiphy unregister on a wiphy which\nhas never been registered.\n\nFix this crash by moving wiphy_unregister/wiphy_free out of\nwilc_netdev_cleanup, and by adjusting error paths in both drivers\n\ud83d\udccf Published: 2025-02-27T02:07:14.278Z\n\ud83d\udccf Modified: 2025-05-04T10:07:54.096Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/c7115b8229f3e6cdfae43b1cdd180f5b6c67cd70\n2. https://git.kernel.org/stable/c/1be94490b6b8a06ff14cd23fda8714e6ec37cdfb", "creation_timestamp": "2025-05-04T10:18:13.000000Z"}, {"uuid": "c62f051f-5334-4081-8e77-c0a71e5255cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57998", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14769", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57998\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nOPP: add index check to assert to avoid buffer overflow in _read_freq()\n\nPass the freq index to the assert function to make sure\nwe do not read a freq out of the opp->rates[] table when called\nfrom the indexed variants:\ndev_pm_opp_find_freq_exact_indexed() or\ndev_pm_opp_find_freq_ceil/floor_indexed().\n\nAdd a secondary parameter to the assert function, unused\nfor assert_single_clk() then add assert_clk_index() which\nwill check for the clock index when called from the _indexed()\nfind functions.\n\ud83d\udccf Published: 2025-02-27T02:07:17.965Z\n\ud83d\udccf Modified: 2025-05-04T10:08:03.510Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/774dd6f0f0a61c9c3848e025d7d9eeed1a7ca4cd\n2. https://git.kernel.org/stable/c/eb6ffa0192ba83ece1a318b956265519c5c7dcec\n3. https://git.kernel.org/stable/c/7d68c20638e50d5eb4576492a7958328ae445248\n4. https://git.kernel.org/stable/c/da2a6acc73933b7812c94794726e438cde39e037\n5. https://git.kernel.org/stable/c/d659bc68ed489022ea33342cfbda2911a81e7a0d", "creation_timestamp": "2025-05-04T10:18:08.000000Z"}, {"uuid": "ce0adf79-7201-45ae-be26-faa19be8ec62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57997", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14770", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57997\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: wcn36xx: fix channel survey memory allocation size\n\nKASAN reported a memory allocation issue in wcn->chan_survey\ndue to incorrect size calculation.\nThis commit uses kcalloc to allocate memory for wcn->chan_survey,\nensuring proper initialization and preventing the use of uninitialized\nvalues when there are no frames on the channel.\n\ud83d\udccf Published: 2025-02-27T02:07:17.371Z\n\ud83d\udccf Modified: 2025-05-04T10:08:02.198Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/ae68efdff7a7a42ab251cac79d8713de6f0dbaa0\n2. https://git.kernel.org/stable/c/e95f9c408ff8311f75eeabc8acf34a66670d8815\n3. https://git.kernel.org/stable/c/64c4dcaeac1dc1030e47883b04a617ca9a4f164e\n4. https://git.kernel.org/stable/c/34cd2817708aec51ef1a6c007e0d6d5342a025d7\n5. https://git.kernel.org/stable/c/6200d947f050efdba4090dfefd8a01981363d954", "creation_timestamp": "2025-05-04T10:18:08.000000Z"}, {"uuid": "dc45ac32-f163-4a6a-b128-8dbadadbbd72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57989", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14776", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57989\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mt76: mt7925: fix NULL deref check in mt7925_change_vif_links\n\nIn mt7925_change_vif_links() devm_kzalloc() may return NULL but this\nreturned value is not checked.\n\ud83d\udccf Published: 2025-02-27T02:07:12.286Z\n\ud83d\udccf Modified: 2025-05-04T10:07:50.034Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/5872530c2862700070223a2c2ea85642bf2f8875\n2. https://git.kernel.org/stable/c/2f709fe755c16b811ba7339ae4c3ee2c72323d3d\n3. https://git.kernel.org/stable/c/5cd0bd815c8a48862a296df9b30e0ea0da14acd3", "creation_timestamp": "2025-05-04T10:18:16.000000Z"}, {"uuid": "e9317a21-0ef1-49cb-80b2-4188f0121528", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57990", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14775", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57990\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mt76: mt7925: fix off by one in mt7925_load_clc()\n\nThis comparison should be >= instead of > to prevent an out of bounds\nread and write.\n\ud83d\udccf Published: 2025-02-27T02:07:13.010Z\n\ud83d\udccf Modified: 2025-05-04T10:07:51.338Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/d03b8fe1b518fc2ea2d82588e905f56d80cd64b2\n2. https://git.kernel.org/stable/c/2d1628d32300e4f67ac0b7409cbfa7b912a8fe9d\n3. https://git.kernel.org/stable/c/08fa656c91fd5fdf47ba393795b9c0d1e97539ed", "creation_timestamp": "2025-05-04T10:18:15.000000Z"}, {"uuid": "508286e1-65ab-48ac-ac05-53e5adba1e01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57991", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14774", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57991\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: rtw89: chan: fix soft lockup in rtw89_entity_recalc_mgnt_roles()\n\nDuring rtw89_entity_recalc_mgnt_roles(), there is a normalizing process\nwhich will re-order the list if an entry with target pattern is found.\nAnd once one is found, should have aborted the list_for_each_entry. But,\n`break` just aborted the inner for-loop. The outer list_for_each_entry\nstill continues. Normally, only the first entry will match the target\npattern, and the re-ordering will change nothing, so there won't be\nsoft lockup. However, in some special cases, soft lockup would happen.\n\nFix it by `goto fill` to break from the list_for_each_entry.\n\nThe following is a sample of kernel log for this problem.\n\nwatchdog: BUG: soft lockup - CPU#1 stuck for 26s! [wpa_supplicant:2055]\n[...]\nRIP: 0010:rtw89_entity_recalc ([...] chan.c:392 chan.c:479) rtw89_core\n[...]\n\ud83d\udccf Published: 2025-02-27T02:07:13.668Z\n\ud83d\udccf Modified: 2025-05-04T10:07:52.679Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/223ba95fdcd3c6090e2bd51dce66abb6dd4f9df9\n2. https://git.kernel.org/stable/c/01d2d34e9fcc9897081c3c16a666f793c8a38c58\n3. https://git.kernel.org/stable/c/e4790b3e314a4814f1680a5dc552031fb199b878", "creation_timestamp": "2025-05-04T10:18:14.000000Z"}, {"uuid": "3042089d-c80e-4034-a3a8-7cb43cba9348", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57096", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16403", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57096\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in wps office before v.19302 allows a local attacker to obtain sensitive information via a crafted file.\n\ud83d\udccf Published: 2025-05-14T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-14T19:59:07.012Z\n\ud83d\udd17 References:\n1. https://github.com/paokuwansui/wps_exp/blob/main/README", "creation_timestamp": "2025-05-14T20:32:33.000000Z"}, {"uuid": "bb9a9c97-8513-438c-82b8-b3e271f8e803", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57883", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19690", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57883\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nmm: hugetlb: independent PMD page table shared count\n\nThe folio refcount may be increased unexpectly through try_get_folio() by\ncaller such as split_huge_pages.  In huge_pmd_unshare(), we use refcount\nto check whether a pmd page table is shared.  The check is incorrect if\nthe refcount is increased by the above caller, and this can cause the page\ntable leaked:\n\n BUG: Bad page state in process sh  pfn:109324\n page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x66 pfn:0x109324\n flags: 0x17ffff800000000(node=0|zone=2|lastcpupid=0xfffff)\n page_type: f2(table)\n raw: 017ffff800000000 0000000000000000 0000000000000000 0000000000000000\n raw: 0000000000000066 0000000000000000 00000000f2000000 0000000000000000\n page dumped because: nonzero mapcount\n ...\n CPU: 31 UID: 0 PID: 7515 Comm: sh Kdump: loaded Tainted: G    B              6.13.0-rc2master+ #7\n Tainted: [B]=BAD_PAGE\n Hardware name: QEMU KVM Virtual Machine, BIOS 0.0.0 02/06/2015\n Call trace:\n  show_stack+0x20/0x38 (C)\n  dump_stack_lvl+0x80/0xf8\n  dump_stack+0x18/0x28\n  bad_page+0x8c/0x130\n  free_page_is_bad_report+0xa4/0xb0\n  free_unref_page+0x3cc/0x620\n  __folio_put+0xf4/0x158\n  split_huge_pages_all+0x1e0/0x3e8\n  split_huge_pages_write+0x25c/0x2d8\n  full_proxy_write+0x64/0xd8\n  vfs_write+0xcc/0x280\n  ksys_write+0x70/0x110\n  __arm64_sys_write+0x24/0x38\n  invoke_syscall+0x50/0x120\n  el0_svc_common.constprop.0+0xc8/0xf0\n  do_el0_svc+0x24/0x38\n  el0_svc+0x34/0x128\n  el0t_64_sync_handler+0xc8/0xd0\n  el0t_64_sync+0x190/0x198\n\nThe issue may be triggered by damon, offline_page, page_idle, etc, which\nwill increase the refcount of page table.\n\n1. The page table itself will be discarded after reporting the\n   \"nonzero mapcount\".\n\n2. The HugeTLB page mapped by the page table miss freeing since we\n   treat the page table as shared and a shared page table will not be\n   unmapped.\n\nFix it by introducing independent PMD page table shared count.  As\ndescribed by comment, pt_index/pt_mm/pt_frag_refcount are used for s390\ngmap, x86 pgds and powerpc, pt_share_count is used for x86/arm64/riscv\npmds, so we can reuse the field as pt_share_count.\n\ud83d\udccf Published: 2025-01-15T13:05:36.352Z\n\ud83d\udccf Modified: 2025-06-27T10:21:12.793Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/94b4b41d0cdf5cfd4d4325bc0e6e9e0d0e996133\n2. https://git.kernel.org/stable/c/8410996eb6fea116fe1483ed977aacf580eee7b4\n3. https://git.kernel.org/stable/c/02333ac1c35370517a19a4a131332a9690c6a5c7\n4. https://git.kernel.org/stable/c/56b274473d6e7e7375f2d0a2b4aca11d67c6b52f\n5. https://git.kernel.org/stable/c/2e31443a0d18ae43b9d29e02bf0563f07772193d\n6. https://git.kernel.org/stable/c/59d9094df3d79443937add8700b2ef1a866b1081", "creation_timestamp": "2025-06-27T10:49:56.000000Z"}, {"uuid": "afe100af-0aee-47c9-98e3-bc56c9de55d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57273", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16984", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57273\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Netgate pfSense CE (prior to 2.8.0 beta release) and corresponding Plus builds is vulnerable to Cross-site scripting (XSS) in the Automatic Configuration Backup (ACB) service, allowing remote attackers to execute arbitrary JavaScript, delete backups, or leak sensitive information via an unsanitized \"reason\" field and a derivable device key generated from the public SSH key.\n\ud83d\udccf Published: 2025-05-14T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-20T14:27:40.251Z\n\ud83d\udd17 References:\n1. http://netgate.com\n2. https://blog.brillantit.com/exploiting-pfsense-xss-command-injection-cloud-hijack/\n3. https://www.netgate.com/blog/important-security-updates-for-pfsense-plus-24.11-and-ce-2.7.2\n4. https://docs.netgate.com/downloads/pfSense-SA-25_03.webgui.asc", "creation_timestamp": "2025-05-20T14:40:44.000000Z"}, {"uuid": "4b20872a-0cc8-4a2e-b493-717ba7de12a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57726", "type": "exploited", "source": "Telegram/7Nt5mQJy381WLwTUr1okbkyp4Xgwn8TPZDnk3Sd2AZedYw", "content": "", "creation_timestamp": "2026-04-25T11:20:01.000000Z"}, {"uuid": "4b9d6c41-dde8-423b-abef-d0cc37b1648a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57186", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17925", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57186\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In erxes <1.6.2, an unauthenticated attacker can read arbitrary files from the system using a Path Traversal vulnerability in the /read-file endpoint handler.\n\ud83d\udccf Published: 2025-06-10T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-10T16:22:57.293Z\n\ud83d\udd17 References:\n1. https://github.com/erxes/erxes/commit/d626070a0fcd435ae29e689aca051ccfb440c2f3\n2. https://www.sonarsource.com/blog/micro-services-major-headaches-detecting-vulnerabilities-in-erxes-microservices/", "creation_timestamp": "2025-06-10T16:31:50.000000Z"}, {"uuid": "842cec4d-fd98-465f-b17e-3580c14888ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57189", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18653", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57189\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In Erxes <1.6.2, an authenticated attacker can write to arbitrary files on the system using a Path Traversal vulnerability in the importHistoriesCreate GraphQL mutation handler.\n\ud83d\udccf Published: 2025-06-10T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-17T19:12:52.744Z\n\ud83d\udd17 References:\n1. https://github.com/erxes/erxes/commit/d626070a0fcd435ae29e689aca051ccfb440c2f3\n2. https://www.sonarsource.com/blog/micro-services-major-headaches-detecting-vulnerabilities-in-erxes-microservices/", "creation_timestamp": "2025-06-17T19:39:29.000000Z"}, {"uuid": "2af1b65b-ebd2-4908-a5d7-a589b7f6dd43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57708", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19468", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57708\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in OneTrust SDK v.6.33.0 allows a local attacker to cause a denial of service via the Object.setPrototypeOf, __proto__, and Object.assign components\n\ud83d\udccf Published: 2025-06-25T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-25T15:18:27.128Z\n\ud83d\udd17 References:\n1. https://discord.com/assets/oneTrust/v4/scripttemplates/6.33.0/otBannerSdk.js\n2. https://github.com/brotheralameen1/Discordforschool/security/advisories/GHSA-63xr-98vc-whx5", "creation_timestamp": "2025-06-25T15:52:14.000000Z"}, {"uuid": "7c467e37-a726-4882-8ba5-474723f901f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57490", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8344", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57490\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Guangzhou Hongfan Technology Co., LTD. iOffice20 has any user login vulnerability. An attacker can log in to any system account including the system administrator through a logical flaw.\n\ud83d\udccf Published: 2025-03-21T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-21T13:34:14.952Z\n\ud83d\udd17 References:\n1. https://www.ioffice.cn\n2. https://gist.github.com/NaliangzzZ/44bfcc1d9c2cf275d2b6683ca9e20980", "creation_timestamp": "2025-03-21T14:19:20.000000Z"}, {"uuid": "1f8ebd3b-2298-4656-b831-3846dcb4fad4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57450", "type": "seen", "source": "https://t.me/cvedetector/17107", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57450 - ChestnutCMS File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57450 \nPublished : Feb. 3, 2025, 8:15 p.m. | 22\u00a0minutes ago \nDescription : ChestnutCMS <=1.5.0\nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-03T22:00:04.000000Z"}, {"uuid": "92acafd3-fcdd-4b33-b611-950bb4b0d984", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57971", "type": "seen", "source": "https://t.me/cvedetector/18180", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57971 - Knowage DataSourceResource JNDI Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57971 \nPublished : Feb. 16, 2025, 4:15 a.m. | 1\u00a0hour, 30\u00a0minutes ago \nDescription : DataSourceResource.java in the SpagoBI API support in Knowage Server in KNOWAGE before 8.1.30 does not ensure that java:comp/env/jdbc/ occurs at the beginning of a JNDI Name. \nSeverity: 9.1 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-16T07:05:19.000000Z"}, {"uuid": "886fa948-9d58-4fb9-9728-e78d6db99bc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57790", "type": "seen", "source": "https://t.me/cvedetector/18130", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57790 - IXON B.V. IXrouter IX2400 Industrial Edge Gateway Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-57790 \nPublished : Feb. 14, 2025, 5:15 p.m. | 1\u00a0hour, 2\u00a0minutes ago \nDescription : IXON B.V. IXrouter IX2400 (Industrial Edge Gateway) v3.0 was discovered to contain hardcoded root credentials stored in the non-volatile flash memory. This vulnerability allows physically proximate attackers to gain root access via UART or SSH. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-14T19:57:07.000000Z"}, {"uuid": "8e72bb6b-2eab-48ba-ac6c-6abf5c8451fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57970", "type": "seen", "source": "https://t.me/cvedetector/18181", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57970 - Libarchive GNU Long Linkname Buffer Over-read\", \n  \"Content\": \"CVE ID : CVE-2024-57970 \nPublished : Feb. 16, 2025, 4:15 a.m. | 1\u00a0hour, 30\u00a0minutes ago \nDescription : libarchive through 3.7.7 has a heap-based buffer over-read in header_gnu_longlink in archive_read_support_format_tar.c via a TAR archive because it mishandles truncation in the middle of a GNU long linkname. \nSeverity: 4.0 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-16T07:05:20.000000Z"}, {"uuid": "e203232a-c9f2-4d38-859b-9b1a30ec1456", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57969", "type": "seen", "source": "https://t.me/cvedetector/18071", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57969 - MISP Attribute Search ACL Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-57969 \nPublished : Feb. 14, 2025, 7:15 a.m. | 39\u00a0minutes ago \nDescription : app/Model/Attribute.php in MISP before 2.4.198 ignores an ACL during a GUI attribute search. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-14T09:03:59.000000Z"}, {"uuid": "36042da2-09ab-4f02-b319-57a7736e4393", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57782", "type": "seen", "source": "https://t.me/cvedetector/18055", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57782 - Docker-proxy Denial of Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57782 \nPublished : Feb. 13, 2025, 11:15 p.m. | 33\u00a0minutes ago \nDescription : An issue in Docker-proxy v18.09.0 allows attackers to cause a denial of service. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-14T01:32:18.000000Z"}, {"uuid": "cb504db7-1a2d-4b37-b2a8-73195d5196f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57757", "type": "seen", "source": "https://t.me/cvedetector/15397", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57757 - JeeWMS AuthInterceptor Permission Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-57757 \nPublished : Jan. 15, 2025, 12:15 a.m. | 19\u00a0minutes ago \nDescription : JeeWMS before v2025.01.01 was discovered to contain a permission bypass in the component /interceptors/AuthInterceptor.cava. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T01:43:59.000000Z"}, {"uuid": "c93bde55-1521-4faa-93bb-b47d21a4105a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57366", "type": "published-proof-of-concept", "source": "Telegram/SXFD-qVBXvgg67VQCh23mumAE695MVlGdpAI0NU6zP317zs", "content": "", "creation_timestamp": "2025-09-20T03:00:05.000000Z"}, {"uuid": "9c6fb2d7-3a1a-4741-82b4-7a3e0c7340f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57767", "type": "seen", "source": "https://t.me/cvedetector/15396", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57767 - MSFM Server-Side Request Forgery (SSRF)\", \n  \"Content\": \"CVE ID : CVE-2024-57767 \nPublished : Jan. 15, 2025, 12:15 a.m. | 19\u00a0minutes ago \nDescription : MSFM before v2025.01.01 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /file/download. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T01:43:58.000000Z"}, {"uuid": "80b13749-285a-47c3-b3a2-784ea3510508", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57766", "type": "seen", "source": "https://t.me/cvedetector/15395", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57766 - \"MSFM Fastjson Deserialization Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-57766 \nPublished : Jan. 15, 2025, 12:15 a.m. | 19\u00a0minutes ago \nDescription : MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component system/table/editField. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T01:43:58.000000Z"}, {"uuid": "965ef19b-f551-41e3-a922-b7332dbe5a29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57765", "type": "seen", "source": "https://t.me/cvedetector/15394", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57765 - MSFM SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57765 \nPublished : Jan. 15, 2025, 12:15 a.m. | 19\u00a0minutes ago \nDescription : MSFM before 2025.01.01 was discovered to contain a SQL injection vulnerability via the s_name parameter at table/list. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T01:43:54.000000Z"}, {"uuid": "4214cbce-7524-412b-b801-4dd4ff31727e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57603", "type": "seen", "source": "https://t.me/cvedetector/17943", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57603 - MaysWind ezBookkeeping Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-57603 \nPublished : Feb. 12, 2025, 10:15 p.m. | 52\u00a0minutes ago \nDescription : An issue in MaysWind ezBookkeeping 0.7.0 allows a remote attacker to escalate privileges via the lack of rate limiting. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-13T00:26:03.000000Z"}, {"uuid": "b0154826-0d36-4237-aae6-e3dd47afd27b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57602", "type": "seen", "source": "https://t.me/cvedetector/17942", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57602 - EasyAppointments Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57602 \nPublished : Feb. 12, 2025, 10:15 p.m. | 52\u00a0minutes ago \nDescription : An issue in Alex Tselegidis EasyAppointments v.1.5.0 allows a remote attacker to escalate privileges via the index.php file. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-13T00:26:00.000000Z"}, {"uuid": "d08d8dce-1734-4e61-ad54-cbb46d1861ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57601", "type": "seen", "source": "https://t.me/cvedetector/17941", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57601 - EasyAppointments Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-57601 \nPublished : Feb. 12, 2025, 10:15 p.m. | 52\u00a0minutes ago \nDescription : Cross Site Scripting vulnerability in Alex Tselegidis EasyAppointments v.1.5.0 allows a remote attacker to execute arbitrary code via the legal_settings parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-13T00:25:59.000000Z"}, {"uuid": "b4f85fea-8c92-44b9-b876-6ca7b9e11c1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57605", "type": "seen", "source": "https://t.me/cvedetector/17935", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57605 - Daylight Studio Fuel CMS Cross Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57605 \nPublished : Feb. 12, 2025, 10:15 p.m. | 52\u00a0minutes ago \nDescription : Cross Site Scripting vulnerability in Daylight Studio Fuel CMS v.1.5.2 allows an attacker to escalate privileges via the /fuel/blocks/ and /fuel/pages components. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-13T00:25:52.000000Z"}, {"uuid": "a35616a2-3859-4d28-98cc-45175c149a2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57604", "type": "seen", "source": "https://t.me/cvedetector/17933", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57604 - MaysWind ezBookkeeping Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57604 \nPublished : Feb. 12, 2025, 10:15 p.m. | 52\u00a0minutes ago \nDescription : An issue in MaysWind ezBookkeeping 0.7.0 allows a remote attacker to escalate privileges via the token component. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-13T00:25:51.000000Z"}, {"uuid": "388083ec-3c7e-494e-8ff3-4e6eea89397d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57764", "type": "seen", "source": "https://t.me/cvedetector/15393", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57764 - \"MSFM Fastjson Deserialization Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-57764 \nPublished : Jan. 15, 2025, 12:15 a.m. | 19\u00a0minutes ago \nDescription : MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component system/table/add. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T01:43:53.000000Z"}, {"uuid": "25d2160a-62d7-401c-a58a-1b75b5bd4a64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57763", "type": "seen", "source": "https://t.me/cvedetector/15392", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57763 - \"MSFM Fastjson Deserialization Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-57763 \nPublished : Jan. 15, 2025, 12:15 a.m. | 19\u00a0minutes ago \nDescription : MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component system/table/addField. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T01:43:52.000000Z"}, {"uuid": "3d15b839-9583-4471-aff3-aa7453cdf4ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57968", "type": "exploited", "source": "https://t.me/claytechsolution/206", "content": "The Hacker News\nCISA Adds Five Actively Exploited Vulnerabilities in Advantive VeraCore and Ivanti EPM to KEV List\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added five security flaws impacting Advantive VeraCore and Ivanti Endpoint Manager (EPM) to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation in the wild.\nThe list of vulnerabilities is as follows -\n\nCVE-2024-57968 - An unrestricted file upload vulnerability in Advantive VeraCore", "creation_timestamp": "2025-03-11T08:28:09.000000Z"}, {"uuid": "4afb598a-5c49-4cdd-ac31-c19e90e53f4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "seen", "source": "Telegram/zKw3RvGmlNLCMCNuinsXPppZM3o0dM54xIHjLbpPJzZIXg", "content": "", "creation_timestamp": "2025-05-29T12:39:23.000000Z"}, {"uuid": "b2a3c5da-5a21-4cec-bbbe-69188aed14e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57728", "type": "seen", "source": "https://t.me/poxek/5343", "content": "SimpleHelp RMM CVE-2024-57727 \n\nSimpleHelp \u2014 \u044d\u0442\u043e \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f (RMM), \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 IT-\u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u044b \u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u044b \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u043c\u0438 \u0441\u0435\u0442\u044f\u043c\u0438. \u0421\u0438\u0441\u0442\u0435\u043c\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0442\u044c\u0441\u044f \u043a \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430\u043c, \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u0442\u044c \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0441\u0438\u0441\u0442\u0435\u043c \u0438 \u0440\u0435\u0448\u0430\u0442\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0431\u0435\u0437 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f.\n\nRMM-\u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u044b \u0434\u043b\u044f \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0433\u043e IT-\u0430\u0443\u0442\u0441\u043e\u0440\u0441\u0438\u043d\u0433\u0430 \u2014 \u0447\u0435\u0440\u0435\u0437 \u043d\u0438\u0445 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0442\u044b\u0441\u044f\u0447\u0438 endpoint'\u043e\u0432 \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0435\u0442\u044f\u0445. \u0418\u043c\u0435\u043d\u043d\u043e \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044f RMM \u0440\u0430\u0432\u043d\u043e\u0441\u0438\u043b\u044c\u043d\u0430 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044e \"\u043c\u0430\u0441\u0442\u0435\u0440-\u043a\u043b\u044e\u0447\u0430\" \u043a\u043e \u0432\u0441\u0435\u0439 IT-\u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u0430.\n\n\u0422\u0440\u0438\u043f\u043b \u043a\u0438\u043b\u043b: CVE-2024-57726, CVE-2024-57727, CVE-2024-57728\n\n\u0412 \u044f\u043d\u0432\u0430\u0440\u0435 2025 \u0433\u043e\u0434\u0430 \u0431\u044b\u043b\u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b \u0441\u0440\u0430\u0437\u0443 \u0442\u0440\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 SimpleHelp:\n\u27a1\ufe0fCVE-2024-57726 \u2014 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\n\u27a1\ufe0fCVE-2024-57727 \u2014 path traversal \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (\u043e\u0441\u043d\u043e\u0432\u043d\u0430\u044f)\n\u27a1\ufe0fCVE-2024-57728 \u2014 \u0435\u0449\u0435 \u043e\u0434\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0431\u0440\u0435\u0448\u044c\n\nCVE-2024-57727 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 path traversal \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 SimpleHelp \u0432\u0435\u0440\u0441\u0438\u0439 5.5.7 \u0438 \u0440\u0430\u043d\u0435\u0435. Path traversal \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \"\u0432\u044b\u0439\u0442\u0438\" \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u043d\u043e\u0439 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0442\u0438\u043f\u0430 `../` \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u2757\ufe0fDragonForce\n\u0413\u043b\u0430\u0432\u043d\u044b\u043c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0442\u043e\u0440\u043e\u043c \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0441\u0442\u0430\u043b\u0430 \u0433\u0440\u0443\u043f\u043f\u0430 DragonForce \u2014 \u043d\u0435 \u043f\u0440\u043e\u0441\u0442\u043e ransomware \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430, \u0430 \u0446\u0435\u043b\u0430\u044f \"\u043a\u0430\u0440\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u043c\u043e\u0434\u0435\u043b\u044c\" \u0441 \u0444\u0440\u0430\u043d\u0448\u0438\u0437\u043e\u0439 \u0434\u043b\u044f \u0430\u0444\u0444\u0438\u043b\u0438\u0430\u0442\u043e\u0432. \u0413\u0440\u0443\u043f\u043f\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u043f\u0435\u0440\u0435\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u0442 \u043b\u0430\u043d\u0434\u0448\u0430\u0444\u0442 \u0443\u0433\u0440\u043e\u0437 \u043f\u043e\u0441\u043b\u0435 \u043f\u0430\u0434\u0435\u043d\u0438\u044f LockBit.\n\n\ud83d\udccc\u0421\u0432\u044f\u0437\u0438 DragonForce:\n\u27a1\ufe0f\u041f\u043e\u0433\u043b\u043e\u0449\u0435\u043d\u0438\u0435/\u0432\u0437\u043b\u043e\u043c \u0441\u0430\u0439\u0442\u043e\u0432 BlackLock, Mamona, RansomHub\n\u27a1\ufe0f\u041f\u043e\u0434\u043e\u0437\u0440\u0435\u043d\u0438\u044f \u0432 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u0447\u0435\u0441\u0442\u0432\u0435 \u0441 Scattered Spider\n\u27a1\ufe0f\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 advanced \u0442\u0435\u0445\u043d\u0438\u043a \u0441\u043e\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0436\u0435\u043d\u0435\u0440\u0438\u0438\n\n\ud83d\udcbb\u0410\u043d\u0430\u0442\u043e\u043c\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 MSP\nDragonForce \u043f\u0440\u043e\u0432\u0435\u043b\u0430 sophisticated \u0430\u0442\u0430\u043a\u0443 \u043d\u0430 \u0431\u0440\u0438\u0442\u0430\u043d\u0441\u043a\u043e\u0433\u043e MSP-\u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u0430, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0443\u044e \u0441\u0445\u0435\u043c\u0443:\n\n\u27a1\ufe0f\u042d\u0442\u0430\u043f 1: \u041a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044f RMM\n- \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f CVE-2024-57727 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a SimpleHelp-\u0441\u0435\u0440\u0432\u0435\u0440\u0443 MSP\n- \u041f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 RMM-\u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043e\u0439\n\n\u27a1\ufe0f\u042d\u0442\u0430\u043f 2: \u0420\u0430\u0437\u0432\u0435\u0434\u043a\u0430 \u0438 \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u0438\u0435\n- \u041f\u0443\u0448 SimpleHelp-\u0438\u043d\u0441\u0442\u0430\u043b\u043b\u044f\u0442\u043e\u0440\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0447\u0435\u0440\u0435\u0437 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u0443\u044e RMM-\u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443\n- \u0421\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432: \u0438\u043c\u0435\u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f\n- \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 Microsoft Quick Assist \u0438 \u0431\u044d\u043a\u0434\u043e\u0440\u0430 QDoor \u0434\u043b\u044f \u0431\u0435\u0441\u0448\u0443\u043c\u043d\u043e\u0433\u043e \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u0438\u044f\n- \u041f\u0440\u0435\u0431\u044b\u0432\u0430\u043d\u0438\u0435 \u0432 \u0441\u0435\u0442\u0438 \u0434\u043e 9 \u0434\u043d\u0435\u0439 \u0434\u043e \u0430\u043a\u0442\u0438\u0432\u0430\u0446\u0438\u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a\u0430\n\n\u27a1\ufe0f\u042d\u0442\u0430\u043f 3: \u0410\u0442\u0430\u043a\u0430\n- \u0420\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0435 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a\u0430 \u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0434\u0432\u043e\u0439\u043d\u043e\u0433\u043e \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430\n- \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0432\u0438\u0437\u0438\u043d\u0433\u0430 + email-\u0431\u043e\u043c\u0431\u0438\u043d\u0433\u0430 \u0434\u043b\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u0430\u0432\u043b\u0435\u043d\u0438\u044f\n- \u041c\u0430\u0441\u0441\u043e\u0432\u044b\u0435 \u0441\u0431\u043e\u0438 \u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f IT \u0432 \u0440\u0438\u0442\u0435\u0439\u043b\u0435 \u0412\u0435\u043b\u0438\u043a\u043e\u0431\u0440\u0438\u0442\u0430\u043d\u0438\u0438\n\n\u2757\ufe0f\u0418\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 (\u043c\u0438\u043d\u0438 IoC)\nCISA \u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0432\u044b\u0434\u0435\u043b\u044f\u044e\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 IoC:\n\u27a1\ufe0f\u0418\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0441 \u0442\u0440\u0435\u0445\u0431\u0443\u043a\u0432\u0435\u043d\u043d\u044b\u043c\u0438 \u0438\u043c\u0435\u043d\u0430\u043c\u0438 (aaa.exe, bbb.exe, ccc.exe)\n\u27a1\ufe0f\u0412\u0440\u0435\u043c\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432 \u043f\u043e\u0441\u043b\u0435 \u044f\u043d\u0432\u0430\u0440\u044f 2025 \u0433\u043e\u0434\u0430\n\u27a1\ufe0f\u0410\u043d\u043e\u043c\u0430\u043b\u044c\u043d\u044b\u0439 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0442\u0440\u0430\u0444\u0438\u043a \u043e\u0442 SimpleHelp \u0441\u0435\u0440\u0432\u0435\u0440\u0430\n\u27a1\ufe0f\u041f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 Microsoft Quick Assist \u0432 \u043d\u0435\u043e\u0436\u0438\u0434\u0430\u043d\u043d\u044b\u0445 \u043c\u0435\u0441\u0442\u0430\u0445\n\u27a1\ufe0f\u0421\u043b\u0435\u0434\u044b QDoor \u0431\u044d\u043a\u0434\u043e\u0440\u0430 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435\n\n\ud83d\udd16\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435\n0\ufe0f\u20e3\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 5.5.8+ \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u043e \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u0438\u043d\u0441\u0442\u0430\u043b\u043b\u044f\u0446\u0438\u0439\n1\ufe0f\u20e3\u0418\u0437\u043e\u043b\u044f\u0446\u0438\u044f SimpleHelp \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u043e\u0442 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430 \u0434\u043e \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043f\u0430\u0442\u0447\u0430\n2\ufe0f\u20e3\u0410\u0443\u0434\u0438\u0442 \u0432\u0441\u0435\u0445 \u0442\u0440\u0435\u0445 CVE (57726, 57727, 57728) \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435\n3\ufe0f\u20e3\u041f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u043d\u0430 QDoor \u0438 Quick Assist \u0432 \u043d\u0435\u043e\u0436\u0438\u0434\u0430\u043d\u043d\u044b\u0445 \u043c\u0435\u0441\u0442\u0430\u0445\n\n\u2757\ufe0f\u0414\u043b\u044f MSP \u0438 IT-\u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432:\n\u27a1\ufe0f\u041d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u044b\u0439 \u0430\u0443\u0434\u0438\u0442 \u0432\u0441\u0435\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0445 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 SimpleHelp\n\u27a1\ufe0f\u041f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u043b\u043e\u0433\u043e\u0432 \u043d\u0430 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0441 \u044f\u043d\u0432\u0430\u0440\u044f 2025\n\u27a1\ufe0f\u0423\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 threat hunting\n\u27a1\ufe0f\u0412\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0435 \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 RMM-\u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0434\u043e \u043f\u043e\u043b\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438\n\n\ud83d\udd70\u041f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438:\n\u27a1\ufe0f\u041f\u043e\u0438\u0441\u043a \u0444\u0430\u0439\u043b\u043e\u0432 \u0441 \u0442\u0440\u0435\u0445\u0431\u0443\u043a\u0432\u0435\u043d\u043d\u044b\u043c\u0438 \u0438\u043c\u0435\u043d\u0430\u043c\u0438, \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u0441\u043b\u0435 \u044f\u043d\u0432\u0430\u0440\u044f 2025\n\u27a1\ufe0f\u0410\u043d\u0430\u043b\u0438\u0437 \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043d\u0430 \u0430\u043d\u043e\u043c\u0430\u043b\u0438\u0438\n\u27a1\ufe0f\u041f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u044f Microsoft Quick Assist \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445, \u0433\u0434\u0435 \u043e\u043d \u043d\u0435 \u0434\u043e\u043b\u0436\u0435\u043d \u0431\u044b\u0442\u044c\n\u27a1\ufe0f\u041f\u043e\u0438\u0441\u043a \u0441\u043b\u0435\u0434\u043e\u0432 QDoor \u0431\u044d\u043a\u0434\u043e\u0440\u0430\n\n\u0414\u043e\u043b\u0433\u043e\u0441\u0440\u043e\u0447\u043d\u044b\u0435 \u043c\u0435\u0440\u044b:\n\u27a1\ufe0f\u0412\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 Zero Trust \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b \u0434\u043b\u044f RMM-\u0441\u0438\u0441\u0442\u0435\u043c\n\u27a1\ufe0f\u0421\u0435\u0433\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u044f \u0441\u0435\u0442\u0438 \u043c\u0435\u0436\u0434\u0443 RMM \u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438\n\u27a1\ufe0f\u041c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433 \u0432\u0441\u0435\u0445 RMM-\u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0438\n\u27a1\ufe0f\u0421\u043e\u0437\u0434\u0430\u043d\u0438\u0435 incident response \u043f\u043b\u0430\u043d\u0430 \u0434\u043b\u044f RMM-\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438\n\n\ud83d\udcac\u0412\u044b\u0432\u043e\u0434\u044b\nCVE-2024-57727 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0442, \u0447\u0442\u043e \u0432 \u044d\u043f\u043e\u0445\u0443 cloud-first \u0438 remote-first \u043f\u043e\u0434\u0445\u043e\u0434\u043e\u0432, \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u0434\u043e\u043b\u0436\u043d\u0430 \u0431\u044b\u0442\u044c \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\u043e\u043c \u043d\u043e\u043c\u0435\u0440 \u043e\u0434\u0438\u043d.", "creation_timestamp": "2025-07-06T10:47:55.000000Z"}, {"uuid": "22282ff6-f248-4127-ad1a-b6ce62435832", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "seen", "source": "https://t.me/poxek/5343", "content": "SimpleHelp RMM CVE-2024-57727 \n\nSimpleHelp \u2014 \u044d\u0442\u043e \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f (RMM), \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 IT-\u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u044b \u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u044b \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u043c\u0438 \u0441\u0435\u0442\u044f\u043c\u0438. \u0421\u0438\u0441\u0442\u0435\u043c\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0442\u044c\u0441\u044f \u043a \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430\u043c, \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u0442\u044c \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0441\u0438\u0441\u0442\u0435\u043c \u0438 \u0440\u0435\u0448\u0430\u0442\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0431\u0435\u0437 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f.\n\nRMM-\u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u044b \u0434\u043b\u044f \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0433\u043e IT-\u0430\u0443\u0442\u0441\u043e\u0440\u0441\u0438\u043d\u0433\u0430 \u2014 \u0447\u0435\u0440\u0435\u0437 \u043d\u0438\u0445 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0442\u044b\u0441\u044f\u0447\u0438 endpoint'\u043e\u0432 \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0435\u0442\u044f\u0445. \u0418\u043c\u0435\u043d\u043d\u043e \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044f RMM \u0440\u0430\u0432\u043d\u043e\u0441\u0438\u043b\u044c\u043d\u0430 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044e \"\u043c\u0430\u0441\u0442\u0435\u0440-\u043a\u043b\u044e\u0447\u0430\" \u043a\u043e \u0432\u0441\u0435\u0439 IT-\u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u0430.\n\n\u0422\u0440\u0438\u043f\u043b \u043a\u0438\u043b\u043b: CVE-2024-57726, CVE-2024-57727, CVE-2024-57728\n\n\u0412 \u044f\u043d\u0432\u0430\u0440\u0435 2025 \u0433\u043e\u0434\u0430 \u0431\u044b\u043b\u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b \u0441\u0440\u0430\u0437\u0443 \u0442\u0440\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 SimpleHelp:\n\u27a1\ufe0fCVE-2024-57726 \u2014 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\n\u27a1\ufe0fCVE-2024-57727 \u2014 path traversal \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (\u043e\u0441\u043d\u043e\u0432\u043d\u0430\u044f)\n\u27a1\ufe0fCVE-2024-57728 \u2014 \u0435\u0449\u0435 \u043e\u0434\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0431\u0440\u0435\u0448\u044c\n\nCVE-2024-57727 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 path traversal \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 SimpleHelp \u0432\u0435\u0440\u0441\u0438\u0439 5.5.7 \u0438 \u0440\u0430\u043d\u0435\u0435. Path traversal \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \"\u0432\u044b\u0439\u0442\u0438\" \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u043d\u043e\u0439 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0442\u0438\u043f\u0430 `../` \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u2757\ufe0fDragonForce\n\u0413\u043b\u0430\u0432\u043d\u044b\u043c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0442\u043e\u0440\u043e\u043c \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0441\u0442\u0430\u043b\u0430 \u0433\u0440\u0443\u043f\u043f\u0430 DragonForce \u2014 \u043d\u0435 \u043f\u0440\u043e\u0441\u0442\u043e ransomware \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430, \u0430 \u0446\u0435\u043b\u0430\u044f \"\u043a\u0430\u0440\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u043c\u043e\u0434\u0435\u043b\u044c\" \u0441 \u0444\u0440\u0430\u043d\u0448\u0438\u0437\u043e\u0439 \u0434\u043b\u044f \u0430\u0444\u0444\u0438\u043b\u0438\u0430\u0442\u043e\u0432. \u0413\u0440\u0443\u043f\u043f\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u043f\u0435\u0440\u0435\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u0442 \u043b\u0430\u043d\u0434\u0448\u0430\u0444\u0442 \u0443\u0433\u0440\u043e\u0437 \u043f\u043e\u0441\u043b\u0435 \u043f\u0430\u0434\u0435\u043d\u0438\u044f LockBit.\n\n\ud83d\udccc\u0421\u0432\u044f\u0437\u0438 DragonForce:\n\u27a1\ufe0f\u041f\u043e\u0433\u043b\u043e\u0449\u0435\u043d\u0438\u0435/\u0432\u0437\u043b\u043e\u043c \u0441\u0430\u0439\u0442\u043e\u0432 BlackLock, Mamona, RansomHub\n\u27a1\ufe0f\u041f\u043e\u0434\u043e\u0437\u0440\u0435\u043d\u0438\u044f \u0432 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u0447\u0435\u0441\u0442\u0432\u0435 \u0441 Scattered Spider\n\u27a1\ufe0f\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 advanced \u0442\u0435\u0445\u043d\u0438\u043a \u0441\u043e\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0436\u0435\u043d\u0435\u0440\u0438\u0438\n\n\ud83d\udcbb\u0410\u043d\u0430\u0442\u043e\u043c\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 MSP\nDragonForce \u043f\u0440\u043e\u0432\u0435\u043b\u0430 sophisticated \u0430\u0442\u0430\u043a\u0443 \u043d\u0430 \u0431\u0440\u0438\u0442\u0430\u043d\u0441\u043a\u043e\u0433\u043e MSP-\u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u0430, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0443\u044e \u0441\u0445\u0435\u043c\u0443:\n\n\u27a1\ufe0f\u042d\u0442\u0430\u043f 1: \u041a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044f RMM\n- \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f CVE-2024-57727 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a SimpleHelp-\u0441\u0435\u0440\u0432\u0435\u0440\u0443 MSP\n- \u041f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 RMM-\u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043e\u0439\n\n\u27a1\ufe0f\u042d\u0442\u0430\u043f 2: \u0420\u0430\u0437\u0432\u0435\u0434\u043a\u0430 \u0438 \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u0438\u0435\n- \u041f\u0443\u0448 SimpleHelp-\u0438\u043d\u0441\u0442\u0430\u043b\u043b\u044f\u0442\u043e\u0440\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0447\u0435\u0440\u0435\u0437 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u0443\u044e RMM-\u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443\n- \u0421\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432: \u0438\u043c\u0435\u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f\n- \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 Microsoft Quick Assist \u0438 \u0431\u044d\u043a\u0434\u043e\u0440\u0430 QDoor \u0434\u043b\u044f \u0431\u0435\u0441\u0448\u0443\u043c\u043d\u043e\u0433\u043e \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u0438\u044f\n- \u041f\u0440\u0435\u0431\u044b\u0432\u0430\u043d\u0438\u0435 \u0432 \u0441\u0435\u0442\u0438 \u0434\u043e 9 \u0434\u043d\u0435\u0439 \u0434\u043e \u0430\u043a\u0442\u0438\u0432\u0430\u0446\u0438\u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a\u0430\n\n\u27a1\ufe0f\u042d\u0442\u0430\u043f 3: \u0410\u0442\u0430\u043a\u0430\n- \u0420\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0435 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a\u0430 \u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0434\u0432\u043e\u0439\u043d\u043e\u0433\u043e \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430\n- \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0432\u0438\u0437\u0438\u043d\u0433\u0430 + email-\u0431\u043e\u043c\u0431\u0438\u043d\u0433\u0430 \u0434\u043b\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u0430\u0432\u043b\u0435\u043d\u0438\u044f\n- \u041c\u0430\u0441\u0441\u043e\u0432\u044b\u0435 \u0441\u0431\u043e\u0438 \u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f IT \u0432 \u0440\u0438\u0442\u0435\u0439\u043b\u0435 \u0412\u0435\u043b\u0438\u043a\u043e\u0431\u0440\u0438\u0442\u0430\u043d\u0438\u0438\n\n\u2757\ufe0f\u0418\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 (\u043c\u0438\u043d\u0438 IoC)\nCISA \u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0432\u044b\u0434\u0435\u043b\u044f\u044e\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 IoC:\n\u27a1\ufe0f\u0418\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0441 \u0442\u0440\u0435\u0445\u0431\u0443\u043a\u0432\u0435\u043d\u043d\u044b\u043c\u0438 \u0438\u043c\u0435\u043d\u0430\u043c\u0438 (aaa.exe, bbb.exe, ccc.exe)\n\u27a1\ufe0f\u0412\u0440\u0435\u043c\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432 \u043f\u043e\u0441\u043b\u0435 \u044f\u043d\u0432\u0430\u0440\u044f 2025 \u0433\u043e\u0434\u0430\n\u27a1\ufe0f\u0410\u043d\u043e\u043c\u0430\u043b\u044c\u043d\u044b\u0439 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0442\u0440\u0430\u0444\u0438\u043a \u043e\u0442 SimpleHelp \u0441\u0435\u0440\u0432\u0435\u0440\u0430\n\u27a1\ufe0f\u041f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 Microsoft Quick Assist \u0432 \u043d\u0435\u043e\u0436\u0438\u0434\u0430\u043d\u043d\u044b\u0445 \u043c\u0435\u0441\u0442\u0430\u0445\n\u27a1\ufe0f\u0421\u043b\u0435\u0434\u044b QDoor \u0431\u044d\u043a\u0434\u043e\u0440\u0430 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435\n\n\ud83d\udd16\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435\n0\ufe0f\u20e3\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 5.5.8+ \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u043e \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u0438\u043d\u0441\u0442\u0430\u043b\u043b\u044f\u0446\u0438\u0439\n1\ufe0f\u20e3\u0418\u0437\u043e\u043b\u044f\u0446\u0438\u044f SimpleHelp \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u043e\u0442 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430 \u0434\u043e \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043f\u0430\u0442\u0447\u0430\n2\ufe0f\u20e3\u0410\u0443\u0434\u0438\u0442 \u0432\u0441\u0435\u0445 \u0442\u0440\u0435\u0445 CVE (57726, 57727, 57728) \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435\n3\ufe0f\u20e3\u041f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u043d\u0430 QDoor \u0438 Quick Assist \u0432 \u043d\u0435\u043e\u0436\u0438\u0434\u0430\u043d\u043d\u044b\u0445 \u043c\u0435\u0441\u0442\u0430\u0445\n\n\u2757\ufe0f\u0414\u043b\u044f MSP \u0438 IT-\u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432:\n\u27a1\ufe0f\u041d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u044b\u0439 \u0430\u0443\u0434\u0438\u0442 \u0432\u0441\u0435\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0445 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 SimpleHelp\n\u27a1\ufe0f\u041f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u043b\u043e\u0433\u043e\u0432 \u043d\u0430 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0441 \u044f\u043d\u0432\u0430\u0440\u044f 2025\n\u27a1\ufe0f\u0423\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 threat hunting\n\u27a1\ufe0f\u0412\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0435 \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 RMM-\u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0434\u043e \u043f\u043e\u043b\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438\n\n\ud83d\udd70\u041f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438:\n\u27a1\ufe0f\u041f\u043e\u0438\u0441\u043a \u0444\u0430\u0439\u043b\u043e\u0432 \u0441 \u0442\u0440\u0435\u0445\u0431\u0443\u043a\u0432\u0435\u043d\u043d\u044b\u043c\u0438 \u0438\u043c\u0435\u043d\u0430\u043c\u0438, \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u0441\u043b\u0435 \u044f\u043d\u0432\u0430\u0440\u044f 2025\n\u27a1\ufe0f\u0410\u043d\u0430\u043b\u0438\u0437 \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043d\u0430 \u0430\u043d\u043e\u043c\u0430\u043b\u0438\u0438\n\u27a1\ufe0f\u041f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u044f Microsoft Quick Assist \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445, \u0433\u0434\u0435 \u043e\u043d \u043d\u0435 \u0434\u043e\u043b\u0436\u0435\u043d \u0431\u044b\u0442\u044c\n\u27a1\ufe0f\u041f\u043e\u0438\u0441\u043a \u0441\u043b\u0435\u0434\u043e\u0432 QDoor \u0431\u044d\u043a\u0434\u043e\u0440\u0430\n\n\u0414\u043e\u043b\u0433\u043e\u0441\u0440\u043e\u0447\u043d\u044b\u0435 \u043c\u0435\u0440\u044b:\n\u27a1\ufe0f\u0412\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 Zero Trust \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b \u0434\u043b\u044f RMM-\u0441\u0438\u0441\u0442\u0435\u043c\n\u27a1\ufe0f\u0421\u0435\u0433\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u044f \u0441\u0435\u0442\u0438 \u043c\u0435\u0436\u0434\u0443 RMM \u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438\n\u27a1\ufe0f\u041c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433 \u0432\u0441\u0435\u0445 RMM-\u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0438\n\u27a1\ufe0f\u0421\u043e\u0437\u0434\u0430\u043d\u0438\u0435 incident response \u043f\u043b\u0430\u043d\u0430 \u0434\u043b\u044f RMM-\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438\n\n\ud83d\udcac\u0412\u044b\u0432\u043e\u0434\u044b\nCVE-2024-57727 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0442, \u0447\u0442\u043e \u0432 \u044d\u043f\u043e\u0445\u0443 cloud-first \u0438 remote-first \u043f\u043e\u0434\u0445\u043e\u0434\u043e\u0432, \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u0434\u043e\u043b\u0436\u043d\u0430 \u0431\u044b\u0442\u044c \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\u043e\u043c \u043d\u043e\u043c\u0435\u0440 \u043e\u0434\u0438\u043d.", "creation_timestamp": "2025-07-06T10:47:55.000000Z"}, {"uuid": "b9444189-9fc8-48b2-a924-2ae8b22e960e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57726", "type": "seen", "source": "https://t.me/poxek/5343", "content": "SimpleHelp RMM CVE-2024-57727 \n\nSimpleHelp \u2014 \u044d\u0442\u043e \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f (RMM), \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 IT-\u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u044b \u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u044b \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u043c\u0438 \u0441\u0435\u0442\u044f\u043c\u0438. \u0421\u0438\u0441\u0442\u0435\u043c\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0442\u044c\u0441\u044f \u043a \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430\u043c, \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u0442\u044c \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0441\u0438\u0441\u0442\u0435\u043c \u0438 \u0440\u0435\u0448\u0430\u0442\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0431\u0435\u0437 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f.\n\nRMM-\u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u044b \u0434\u043b\u044f \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0433\u043e IT-\u0430\u0443\u0442\u0441\u043e\u0440\u0441\u0438\u043d\u0433\u0430 \u2014 \u0447\u0435\u0440\u0435\u0437 \u043d\u0438\u0445 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0442\u044b\u0441\u044f\u0447\u0438 endpoint'\u043e\u0432 \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0435\u0442\u044f\u0445. \u0418\u043c\u0435\u043d\u043d\u043e \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044f RMM \u0440\u0430\u0432\u043d\u043e\u0441\u0438\u043b\u044c\u043d\u0430 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044e \"\u043c\u0430\u0441\u0442\u0435\u0440-\u043a\u043b\u044e\u0447\u0430\" \u043a\u043e \u0432\u0441\u0435\u0439 IT-\u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u0430.\n\n\u0422\u0440\u0438\u043f\u043b \u043a\u0438\u043b\u043b: CVE-2024-57726, CVE-2024-57727, CVE-2024-57728\n\n\u0412 \u044f\u043d\u0432\u0430\u0440\u0435 2025 \u0433\u043e\u0434\u0430 \u0431\u044b\u043b\u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b \u0441\u0440\u0430\u0437\u0443 \u0442\u0440\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 SimpleHelp:\n\u27a1\ufe0fCVE-2024-57726 \u2014 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\n\u27a1\ufe0fCVE-2024-57727 \u2014 path traversal \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (\u043e\u0441\u043d\u043e\u0432\u043d\u0430\u044f)\n\u27a1\ufe0fCVE-2024-57728 \u2014 \u0435\u0449\u0435 \u043e\u0434\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0431\u0440\u0435\u0448\u044c\n\nCVE-2024-57727 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 path traversal \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 SimpleHelp \u0432\u0435\u0440\u0441\u0438\u0439 5.5.7 \u0438 \u0440\u0430\u043d\u0435\u0435. Path traversal \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \"\u0432\u044b\u0439\u0442\u0438\" \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u043d\u043e\u0439 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0442\u0438\u043f\u0430 `../` \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u2757\ufe0fDragonForce\n\u0413\u043b\u0430\u0432\u043d\u044b\u043c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0442\u043e\u0440\u043e\u043c \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0441\u0442\u0430\u043b\u0430 \u0433\u0440\u0443\u043f\u043f\u0430 DragonForce \u2014 \u043d\u0435 \u043f\u0440\u043e\u0441\u0442\u043e ransomware \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430, \u0430 \u0446\u0435\u043b\u0430\u044f \"\u043a\u0430\u0440\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u043c\u043e\u0434\u0435\u043b\u044c\" \u0441 \u0444\u0440\u0430\u043d\u0448\u0438\u0437\u043e\u0439 \u0434\u043b\u044f \u0430\u0444\u0444\u0438\u043b\u0438\u0430\u0442\u043e\u0432. \u0413\u0440\u0443\u043f\u043f\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u043f\u0435\u0440\u0435\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u0442 \u043b\u0430\u043d\u0434\u0448\u0430\u0444\u0442 \u0443\u0433\u0440\u043e\u0437 \u043f\u043e\u0441\u043b\u0435 \u043f\u0430\u0434\u0435\u043d\u0438\u044f LockBit.\n\n\ud83d\udccc\u0421\u0432\u044f\u0437\u0438 DragonForce:\n\u27a1\ufe0f\u041f\u043e\u0433\u043b\u043e\u0449\u0435\u043d\u0438\u0435/\u0432\u0437\u043b\u043e\u043c \u0441\u0430\u0439\u0442\u043e\u0432 BlackLock, Mamona, RansomHub\n\u27a1\ufe0f\u041f\u043e\u0434\u043e\u0437\u0440\u0435\u043d\u0438\u044f \u0432 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u0447\u0435\u0441\u0442\u0432\u0435 \u0441 Scattered Spider\n\u27a1\ufe0f\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 advanced \u0442\u0435\u0445\u043d\u0438\u043a \u0441\u043e\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0436\u0435\u043d\u0435\u0440\u0438\u0438\n\n\ud83d\udcbb\u0410\u043d\u0430\u0442\u043e\u043c\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 MSP\nDragonForce \u043f\u0440\u043e\u0432\u0435\u043b\u0430 sophisticated \u0430\u0442\u0430\u043a\u0443 \u043d\u0430 \u0431\u0440\u0438\u0442\u0430\u043d\u0441\u043a\u043e\u0433\u043e MSP-\u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u0430, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0443\u044e \u0441\u0445\u0435\u043c\u0443:\n\n\u27a1\ufe0f\u042d\u0442\u0430\u043f 1: \u041a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044f RMM\n- \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f CVE-2024-57727 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a SimpleHelp-\u0441\u0435\u0440\u0432\u0435\u0440\u0443 MSP\n- \u041f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 RMM-\u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043e\u0439\n\n\u27a1\ufe0f\u042d\u0442\u0430\u043f 2: \u0420\u0430\u0437\u0432\u0435\u0434\u043a\u0430 \u0438 \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u0438\u0435\n- \u041f\u0443\u0448 SimpleHelp-\u0438\u043d\u0441\u0442\u0430\u043b\u043b\u044f\u0442\u043e\u0440\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0447\u0435\u0440\u0435\u0437 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u0443\u044e RMM-\u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443\n- \u0421\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432: \u0438\u043c\u0435\u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f\n- \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 Microsoft Quick Assist \u0438 \u0431\u044d\u043a\u0434\u043e\u0440\u0430 QDoor \u0434\u043b\u044f \u0431\u0435\u0441\u0448\u0443\u043c\u043d\u043e\u0433\u043e \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u0438\u044f\n- \u041f\u0440\u0435\u0431\u044b\u0432\u0430\u043d\u0438\u0435 \u0432 \u0441\u0435\u0442\u0438 \u0434\u043e 9 \u0434\u043d\u0435\u0439 \u0434\u043e \u0430\u043a\u0442\u0438\u0432\u0430\u0446\u0438\u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a\u0430\n\n\u27a1\ufe0f\u042d\u0442\u0430\u043f 3: \u0410\u0442\u0430\u043a\u0430\n- \u0420\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0435 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a\u0430 \u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0434\u0432\u043e\u0439\u043d\u043e\u0433\u043e \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430\n- \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0432\u0438\u0437\u0438\u043d\u0433\u0430 + email-\u0431\u043e\u043c\u0431\u0438\u043d\u0433\u0430 \u0434\u043b\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u0430\u0432\u043b\u0435\u043d\u0438\u044f\n- \u041c\u0430\u0441\u0441\u043e\u0432\u044b\u0435 \u0441\u0431\u043e\u0438 \u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f IT \u0432 \u0440\u0438\u0442\u0435\u0439\u043b\u0435 \u0412\u0435\u043b\u0438\u043a\u043e\u0431\u0440\u0438\u0442\u0430\u043d\u0438\u0438\n\n\u2757\ufe0f\u0418\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 (\u043c\u0438\u043d\u0438 IoC)\nCISA \u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0432\u044b\u0434\u0435\u043b\u044f\u044e\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 IoC:\n\u27a1\ufe0f\u0418\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0441 \u0442\u0440\u0435\u0445\u0431\u0443\u043a\u0432\u0435\u043d\u043d\u044b\u043c\u0438 \u0438\u043c\u0435\u043d\u0430\u043c\u0438 (aaa.exe, bbb.exe, ccc.exe)\n\u27a1\ufe0f\u0412\u0440\u0435\u043c\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432 \u043f\u043e\u0441\u043b\u0435 \u044f\u043d\u0432\u0430\u0440\u044f 2025 \u0433\u043e\u0434\u0430\n\u27a1\ufe0f\u0410\u043d\u043e\u043c\u0430\u043b\u044c\u043d\u044b\u0439 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0442\u0440\u0430\u0444\u0438\u043a \u043e\u0442 SimpleHelp \u0441\u0435\u0440\u0432\u0435\u0440\u0430\n\u27a1\ufe0f\u041f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 Microsoft Quick Assist \u0432 \u043d\u0435\u043e\u0436\u0438\u0434\u0430\u043d\u043d\u044b\u0445 \u043c\u0435\u0441\u0442\u0430\u0445\n\u27a1\ufe0f\u0421\u043b\u0435\u0434\u044b QDoor \u0431\u044d\u043a\u0434\u043e\u0440\u0430 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435\n\n\ud83d\udd16\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435\n0\ufe0f\u20e3\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 5.5.8+ \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u043e \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u0438\u043d\u0441\u0442\u0430\u043b\u043b\u044f\u0446\u0438\u0439\n1\ufe0f\u20e3\u0418\u0437\u043e\u043b\u044f\u0446\u0438\u044f SimpleHelp \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u043e\u0442 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430 \u0434\u043e \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043f\u0430\u0442\u0447\u0430\n2\ufe0f\u20e3\u0410\u0443\u0434\u0438\u0442 \u0432\u0441\u0435\u0445 \u0442\u0440\u0435\u0445 CVE (57726, 57727, 57728) \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435\n3\ufe0f\u20e3\u041f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u043d\u0430 QDoor \u0438 Quick Assist \u0432 \u043d\u0435\u043e\u0436\u0438\u0434\u0430\u043d\u043d\u044b\u0445 \u043c\u0435\u0441\u0442\u0430\u0445\n\n\u2757\ufe0f\u0414\u043b\u044f MSP \u0438 IT-\u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432:\n\u27a1\ufe0f\u041d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u044b\u0439 \u0430\u0443\u0434\u0438\u0442 \u0432\u0441\u0435\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0445 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 SimpleHelp\n\u27a1\ufe0f\u041f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u043b\u043e\u0433\u043e\u0432 \u043d\u0430 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0441 \u044f\u043d\u0432\u0430\u0440\u044f 2025\n\u27a1\ufe0f\u0423\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 threat hunting\n\u27a1\ufe0f\u0412\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0435 \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 RMM-\u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0434\u043e \u043f\u043e\u043b\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438\n\n\ud83d\udd70\u041f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438:\n\u27a1\ufe0f\u041f\u043e\u0438\u0441\u043a \u0444\u0430\u0439\u043b\u043e\u0432 \u0441 \u0442\u0440\u0435\u0445\u0431\u0443\u043a\u0432\u0435\u043d\u043d\u044b\u043c\u0438 \u0438\u043c\u0435\u043d\u0430\u043c\u0438, \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u0441\u043b\u0435 \u044f\u043d\u0432\u0430\u0440\u044f 2025\n\u27a1\ufe0f\u0410\u043d\u0430\u043b\u0438\u0437 \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043d\u0430 \u0430\u043d\u043e\u043c\u0430\u043b\u0438\u0438\n\u27a1\ufe0f\u041f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u044f Microsoft Quick Assist \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445, \u0433\u0434\u0435 \u043e\u043d \u043d\u0435 \u0434\u043e\u043b\u0436\u0435\u043d \u0431\u044b\u0442\u044c\n\u27a1\ufe0f\u041f\u043e\u0438\u0441\u043a \u0441\u043b\u0435\u0434\u043e\u0432 QDoor \u0431\u044d\u043a\u0434\u043e\u0440\u0430\n\n\u0414\u043e\u043b\u0433\u043e\u0441\u0440\u043e\u0447\u043d\u044b\u0435 \u043c\u0435\u0440\u044b:\n\u27a1\ufe0f\u0412\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 Zero Trust \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b \u0434\u043b\u044f RMM-\u0441\u0438\u0441\u0442\u0435\u043c\n\u27a1\ufe0f\u0421\u0435\u0433\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u044f \u0441\u0435\u0442\u0438 \u043c\u0435\u0436\u0434\u0443 RMM \u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438\n\u27a1\ufe0f\u041c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433 \u0432\u0441\u0435\u0445 RMM-\u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0438\n\u27a1\ufe0f\u0421\u043e\u0437\u0434\u0430\u043d\u0438\u0435 incident response \u043f\u043b\u0430\u043d\u0430 \u0434\u043b\u044f RMM-\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438\n\n\ud83d\udcac\u0412\u044b\u0432\u043e\u0434\u044b\nCVE-2024-57727 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0442, \u0447\u0442\u043e \u0432 \u044d\u043f\u043e\u0445\u0443 cloud-first \u0438 remote-first \u043f\u043e\u0434\u0445\u043e\u0434\u043e\u0432, \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u0434\u043e\u043b\u0436\u043d\u0430 \u0431\u044b\u0442\u044c \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\u043e\u043c \u043d\u043e\u043c\u0435\u0440 \u043e\u0434\u0438\u043d.", "creation_timestamp": "2025-07-06T10:47:55.000000Z"}, {"uuid": "e6a100af-4551-4bef-8086-6102277ee62d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57514", "type": "seen", "source": "Telegram/6PU_S-Gx_zfDkwI_q1kn90L6JSmM1dXHh-964o-UR3PTwi4", "content": "", "creation_timestamp": "2025-02-24T15:51:49.000000Z"}, {"uuid": "b3a6da78-add2-4789-992e-7a8d2853cd46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57510", "type": "seen", "source": "https://t.me/cvedetector/16723", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57510 - Bento4 mp42avc Buffer Overflow Arbitrary Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-57510 \nPublished : Jan. 29, 2025, 10:15 p.m. | 2\u00a0hours, 11\u00a0minutes ago \nDescription : Buffer Overflow vulnerability in Bento4 mp42avc v.3bdc891602d19789b8e8626e4a3e613a937b4d35 allows a local attacker to execute arbitrary code via the AP4_MemoryByteStream::WritePartial. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T01:43:33.000000Z"}, {"uuid": "3732baca-34b6-4537-90dc-b540f69b8307", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57699", "type": "seen", "source": "https://t.me/true_secator/7151", "content": "\u0412 \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u0438 \u043d\u0435\u0434\u0435\u043b\u0438 \u043e\u0442\u043c\u0435\u0442\u0438\u043c \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0443\u0433\u0440\u043e\u0437\u044b, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043d\u0438\u043c\u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f:\n\n1. BeyondTrust \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0448\u0438\u0431\u043a\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0440\u0430\u0431\u043e\u0447\u0435\u0433\u043e \u0441\u0442\u043e\u043b\u0430.\n\nCVE-2025-5309 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 Resilion\u00a0\u0438 \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b BeyondTrust Remote Support \u0438 Privileged Remote Access. \n\n\u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432 \u0448\u0430\u0431\u043b\u043e\u043d\u0438\u0437\u0430\u0442\u043e\u0440 BeyondTrust \u0438 \u0437\u0430\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b.\n\n2. Citrix \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u00a0\u0434\u043b\u044f \u0447\u0435\u0442\u044b\u0440\u0435\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0442\u0440\u0435\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 (CVE-2025-5777) \u0432 NetScaler ADC \u0438 NetScaler Gateway.\n\nCitrix \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043a\u0430\u043a\u0438\u0435-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445, \u043d\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435.\u00a0\n\n3. \u0414\u0436\u043e\u043d\u0430\u0442\u0430\u043d \u041c\u044d\u043d\u043d\u0445\u0435\u043d \u043e\u0442\u044b\u0441\u043a\u0430\u043b \u043e\u0448\u0438\u0431\u043a\u0443 \u0432 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 Erlang/OTP ZIP-\u043f\u0440\u043e\u0446\u0435\u0434\u0443\u0440, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u0441 \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u0430\u0431\u0441\u043e\u043b\u044e\u0442\u043d\u043e\u0433\u043e \u043f\u0443\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0438\u043b\u0438 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u043e\u0439 \u043f\u0443\u0442\u044c \u043f\u043e \u0441\u0432\u043e\u0435\u043c\u0443 \u0443\u0441\u043c\u043e\u0442\u0440\u0435\u043d\u0438\u044e.\n\n4. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 CrowdStrike \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043e\u0431\u0437\u043e\u0440 \u043d\u0430\u0441\u0442\u0443\u043f\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0442\u0435\u0445\u043d\u0438\u043a\u0438, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0439 \u043a\u0430\u043a \u043e\u0431\u0445\u043e\u0434 AMSI \u0431\u0435\u0437 \u043f\u0430\u0442\u0447\u0435\u0439, \u0435\u0435 \u043d\u0435\u0434\u0430\u0432\u043d\u0435\u0433\u043e \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u0435\u043d\u0438\u044f \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u0432 \u0435\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f.\n\n5. Cisco \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0430 \u0434\u0432\u0430 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0441\u0432\u043e\u0438\u0445 \u0440\u0435\u0448\u0435\u043d\u0438\u0439.\n\n6. Atlassian \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430\u00a0\u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u043f\u044f\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u044f\u0445 Bamboo, Bitbucket, Confluence, Crowd \u0438 Jira.\n\n\u041a \u043d\u0438\u043c \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f CVE-2025-22228 (\u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u0430\u044f \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u044f \u0432 Spring), CVE-2025-24970 (DoS \u0432 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 Netty), CVE-2024-38816 (\u043e\u0431\u0445\u043e\u0434 \u043f\u0443\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441 \u0432\u0435\u0431-\u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0430\u043c\u0438 WebMvc.fn \u0438 WebFlux.fn), CVE-2024-57699 (DoS \u0432 Netplex Json-smart) \u0438 CVE-2025-31650 (DoS \u0432 Apache Tomcat).\n\n7. Microsoft \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u043f\u043b\u0430\u043d\u0430\u0445 \u043f\u0435\u0440\u0438\u043e\u0434\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0445 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u043e\u0432 \u0438\u0437 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430 \u0426\u0435\u043d\u0442\u0440\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f Windows \u0434\u043b\u044f \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044f \u0440\u0438\u0441\u043a\u043e\u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u043e\u0441\u0442\u0438.\n\n8. GreyNoise \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u0432\u0441\u043f\u043b\u0435\u0441\u043a\u0435 \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 CVE-2023-28771 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 9,8) \u0432 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u0430\u0445 Zyxel, \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0443\u0436\u0435 \u0434\u0432\u0430 \u0433\u043e\u0434\u0430.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u0434\u043e\u0437\u0440\u0435\u0432\u0430\u044e\u0442, \u0447\u0442\u043e \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u043e\u043c \u0431\u043e\u0442\u043d\u0435\u0442\u0430 Mirai.\n\n9. \u041d\u0435\u0434\u0430\u0432\u043d\u044f\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Langflow, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u043a\u0430\u043a CVE-2025-3248, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0434\u043b\u044f \u0432\u043e\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0432 \u0431\u043e\u0442\u043d\u0435\u0442 Flodrix, \u043e \u0447\u0435\u043c \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 Trend Micro.\n\n\u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 Langflow, \u0430 \u0437\u0430\u0442\u0435\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u043e\u0434\u0438\u043d \u0438\u0437 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 PoC, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0435 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432 \u0440\u0430\u0437\u0432\u0435\u0434\u044b\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0446\u0435\u043b\u044f\u0445.", "creation_timestamp": "2025-06-20T18:30:05.000000Z"}, {"uuid": "6f7552ff-779e-4598-a195-f0430a61309a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57726", "type": "exploited", "source": "https://t.me/S_E_Reborn/5652", "content": "\u0411\u0430\u043d\u0434\u0430 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 DragonForce \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u043f\u0440\u0435\u043f\u0430\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0430 SimpleHelp \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a MSP, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f (RMM) \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a\u043e\u0432 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432.\n\nSimpleHelp - \u044d\u0442\u043e \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0431\u044b\u0447\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430\u043c\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u0443\u0441\u043b\u0443\u0433 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 \u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u041f\u041e \u0432 \u0441\u0435\u0442\u044f\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432.\u00a0\n\n\u041a \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044e \u0431\u044b\u043b\u0438 \u043f\u0440\u0438\u0432\u043b\u0435\u0447\u0435\u043d\u044b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Sophos, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0435 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0441\u0442\u0430\u0440\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 SimpleHelp, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u043a\u0430\u043a CVE-2024-57727, CVE-2024-57728 \u0438 CVE-2024-57726, \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u043d\u0430\u0447\u0430\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 SimpleHelp \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0440\u0430\u0437\u0432\u0435\u0434\u044b\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b \u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0438 \u0441\u0431\u043e\u0440\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u0445 MSP, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0438\u043c\u0435\u043d\u0430 \u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f.\n\n\u0417\u0430\u0442\u0435\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u043f\u044b\u0442\u0430\u043b\u0438\u0441\u044c \u0443\u043a\u0440\u0430\u0441\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044c ransomware \u0432 \u0441\u0435\u0442\u044f\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b\u0438 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0432 \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0441\u0435\u0442\u0435\u0439 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0437\u0430\u0449\u0438\u0442\u044b \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u0442\u043e\u0447\u0435\u043a Sophos.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043d\u0435 \u0432\u0441\u0435\u043c \u0442\u0430\u043a \u043f\u043e\u0432\u0435\u0437\u043b\u043e, \u0447\u0430\u0441\u0442\u044c \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0430\u0441\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438: \u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0431\u044b\u043b\u0438 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u044b, \u0430 \u0434\u0430\u043d\u043d\u044b\u0435 \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u044b \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a \u0441 \u0434\u0432\u043e\u0439\u043d\u044b\u043c \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e\u043c.\n\n\u0417\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u044b\u0435 \u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u044b, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u044d\u0442\u043e\u0439 \u0430\u0442\u0430\u043a\u043e\u0439, - \u043e\u0442\u0447\u0435\u0442\u0435 Sophos.\n\n\u0412\u043e\u043e\u0431\u0449\u0435 \u0436\u0435, MSP \u0432\u0441\u0435\u0433\u0434\u0430 \u0432\u0440\u0435\u043c\u044f \u0431\u044b\u043b\u0438\u00a0\u0437\u0430\u0432\u0435\u0442\u043d\u043e\u0439 \u0446\u0435\u043b\u044c\u044e \u0431\u0430\u043d\u0434 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0433\u043b\u0430 \u0438\u0445 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0430\u0442\u0430\u043a\u0430\u043c \u0441\u0440\u0430\u0437\u0443 \u043d\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439.\n\n\u041e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0442\u0440\u0435\u043f\u0435\u0442\u043d\u043e \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u043a SimpleHelp, ConnectWise ScreenConnect \u0438 Kaseya.\n\n\u041a\u0430\u043a \u043c\u044b \u043f\u043e\u043c\u043d\u0438\u043c, \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0441 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 REvil \u043f\u0440\u043e\u0432\u0435\u0440\u043d\u0443\u043b\u0430 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u0443\u044e \u0430\u0442\u0430\u043a\u0443, \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0432\u0448\u0443\u044e \u0431\u043e\u043b\u0435\u0435 1000 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439.\n\n\u0412\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u044f\u0441\u044c \u0441 DragonForce, \u0441\u0442\u043e\u0438\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c \u0438\u0445 \u043d\u0435\u0437\u0430\u0443\u0440\u044f\u0434\u043d\u0443\u044e \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c, \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u043c\u0443\u044e \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u0432\u0440\u0435\u043c\u044f, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u0441\u0435\u0440\u0438\u0435\u0439 \u0440\u0435\u0437\u043e\u043d\u0430\u043d\u0441\u043d\u044b\u0445 \u0432\u0437\u043b\u043e\u043c\u043e\u0432 \u0440\u043e\u0437\u043d\u0438\u0447\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439, \u043f\u0440\u0435\u0436\u0434\u0435 \u0432\u0441\u0435\u0433\u043e, \u0431\u0440\u0438\u0442\u0430\u043d\u0441\u043a\u0438\u0445 Marks & Spencer \u0438 Co-op, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0431\u0430\u043d\u0434.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0440\u0430\u043d\u0435\u0435\u00a0DragonForce \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0438 \u043a\u0430\u0440\u0442\u0435\u043b\u0438 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439, \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044f \u0441\u0432\u043e\u044e RaaS \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 white label, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0438 \u0434\u0440\u0443\u0433\u0438\u043c \u0431\u0430\u043d\u0434\u0430\u043c \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u0442\u044c \u0431\u0440\u0435\u043d\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u0434 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 \u0441\u0442\u0438\u043b\u044c \u0432\u0435\u0440\u0441\u0438\u0438 \u0441\u0432\u043e\u0435\u0433\u043e \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a\u0430.", "creation_timestamp": "2025-05-28T14:21:54.000000Z"}, {"uuid": "9e0e5a47-4ffc-4e7d-b3e9-00fc2ba4741f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "exploited", "source": "https://t.me/S_E_Reborn/5652", "content": "\u0411\u0430\u043d\u0434\u0430 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 DragonForce \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u043f\u0440\u0435\u043f\u0430\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0430 SimpleHelp \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a MSP, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f (RMM) \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a\u043e\u0432 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432.\n\nSimpleHelp - \u044d\u0442\u043e \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0431\u044b\u0447\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430\u043c\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u0443\u0441\u043b\u0443\u0433 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 \u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u041f\u041e \u0432 \u0441\u0435\u0442\u044f\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432.\u00a0\n\n\u041a \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044e \u0431\u044b\u043b\u0438 \u043f\u0440\u0438\u0432\u043b\u0435\u0447\u0435\u043d\u044b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Sophos, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0435 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0441\u0442\u0430\u0440\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 SimpleHelp, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u043a\u0430\u043a CVE-2024-57727, CVE-2024-57728 \u0438 CVE-2024-57726, \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u043d\u0430\u0447\u0430\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 SimpleHelp \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0440\u0430\u0437\u0432\u0435\u0434\u044b\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b \u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0438 \u0441\u0431\u043e\u0440\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u0445 MSP, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0438\u043c\u0435\u043d\u0430 \u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f.\n\n\u0417\u0430\u0442\u0435\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u043f\u044b\u0442\u0430\u043b\u0438\u0441\u044c \u0443\u043a\u0440\u0430\u0441\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044c ransomware \u0432 \u0441\u0435\u0442\u044f\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b\u0438 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0432 \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0441\u0435\u0442\u0435\u0439 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0437\u0430\u0449\u0438\u0442\u044b \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u0442\u043e\u0447\u0435\u043a Sophos.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043d\u0435 \u0432\u0441\u0435\u043c \u0442\u0430\u043a \u043f\u043e\u0432\u0435\u0437\u043b\u043e, \u0447\u0430\u0441\u0442\u044c \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0430\u0441\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438: \u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0431\u044b\u043b\u0438 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u044b, \u0430 \u0434\u0430\u043d\u043d\u044b\u0435 \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u044b \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a \u0441 \u0434\u0432\u043e\u0439\u043d\u044b\u043c \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e\u043c.\n\n\u0417\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u044b\u0435 \u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u044b, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u044d\u0442\u043e\u0439 \u0430\u0442\u0430\u043a\u043e\u0439, - \u043e\u0442\u0447\u0435\u0442\u0435 Sophos.\n\n\u0412\u043e\u043e\u0431\u0449\u0435 \u0436\u0435, MSP \u0432\u0441\u0435\u0433\u0434\u0430 \u0432\u0440\u0435\u043c\u044f \u0431\u044b\u043b\u0438\u00a0\u0437\u0430\u0432\u0435\u0442\u043d\u043e\u0439 \u0446\u0435\u043b\u044c\u044e \u0431\u0430\u043d\u0434 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0433\u043b\u0430 \u0438\u0445 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0430\u0442\u0430\u043a\u0430\u043c \u0441\u0440\u0430\u0437\u0443 \u043d\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439.\n\n\u041e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0442\u0440\u0435\u043f\u0435\u0442\u043d\u043e \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u043a SimpleHelp, ConnectWise ScreenConnect \u0438 Kaseya.\n\n\u041a\u0430\u043a \u043c\u044b \u043f\u043e\u043c\u043d\u0438\u043c, \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0441 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 REvil \u043f\u0440\u043e\u0432\u0435\u0440\u043d\u0443\u043b\u0430 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u0443\u044e \u0430\u0442\u0430\u043a\u0443, \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0432\u0448\u0443\u044e \u0431\u043e\u043b\u0435\u0435 1000 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439.\n\n\u0412\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u044f\u0441\u044c \u0441 DragonForce, \u0441\u0442\u043e\u0438\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c \u0438\u0445 \u043d\u0435\u0437\u0430\u0443\u0440\u044f\u0434\u043d\u0443\u044e \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c, \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u043c\u0443\u044e \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u0432\u0440\u0435\u043c\u044f, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u0441\u0435\u0440\u0438\u0435\u0439 \u0440\u0435\u0437\u043e\u043d\u0430\u043d\u0441\u043d\u044b\u0445 \u0432\u0437\u043b\u043e\u043c\u043e\u0432 \u0440\u043e\u0437\u043d\u0438\u0447\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439, \u043f\u0440\u0435\u0436\u0434\u0435 \u0432\u0441\u0435\u0433\u043e, \u0431\u0440\u0438\u0442\u0430\u043d\u0441\u043a\u0438\u0445 Marks & Spencer \u0438 Co-op, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0431\u0430\u043d\u0434.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0440\u0430\u043d\u0435\u0435\u00a0DragonForce \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0438 \u043a\u0430\u0440\u0442\u0435\u043b\u0438 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439, \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044f \u0441\u0432\u043e\u044e RaaS \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 white label, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0438 \u0434\u0440\u0443\u0433\u0438\u043c \u0431\u0430\u043d\u0434\u0430\u043c \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u0442\u044c \u0431\u0440\u0435\u043d\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u0434 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 \u0441\u0442\u0438\u043b\u044c \u0432\u0435\u0440\u0441\u0438\u0438 \u0441\u0432\u043e\u0435\u0433\u043e \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a\u0430.", "creation_timestamp": "2025-05-28T14:21:54.000000Z"}, {"uuid": "777fc281-e569-4f45-ba2e-50aa610abc13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57728", "type": "exploited", "source": "https://t.me/S_E_Reborn/5652", "content": "\u0411\u0430\u043d\u0434\u0430 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 DragonForce \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u043f\u0440\u0435\u043f\u0430\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0430 SimpleHelp \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a MSP, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f (RMM) \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a\u043e\u0432 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432.\n\nSimpleHelp - \u044d\u0442\u043e \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0431\u044b\u0447\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430\u043c\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u0443\u0441\u043b\u0443\u0433 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 \u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u041f\u041e \u0432 \u0441\u0435\u0442\u044f\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432.\u00a0\n\n\u041a \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044e \u0431\u044b\u043b\u0438 \u043f\u0440\u0438\u0432\u043b\u0435\u0447\u0435\u043d\u044b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Sophos, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0435 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0441\u0442\u0430\u0440\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 SimpleHelp, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u043a\u0430\u043a CVE-2024-57727, CVE-2024-57728 \u0438 CVE-2024-57726, \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u043d\u0430\u0447\u0430\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 SimpleHelp \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0440\u0430\u0437\u0432\u0435\u0434\u044b\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b \u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0438 \u0441\u0431\u043e\u0440\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u0445 MSP, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0438\u043c\u0435\u043d\u0430 \u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f.\n\n\u0417\u0430\u0442\u0435\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u043f\u044b\u0442\u0430\u043b\u0438\u0441\u044c \u0443\u043a\u0440\u0430\u0441\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044c ransomware \u0432 \u0441\u0435\u0442\u044f\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b\u0438 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0432 \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0441\u0435\u0442\u0435\u0439 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0437\u0430\u0449\u0438\u0442\u044b \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u0442\u043e\u0447\u0435\u043a Sophos.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043d\u0435 \u0432\u0441\u0435\u043c \u0442\u0430\u043a \u043f\u043e\u0432\u0435\u0437\u043b\u043e, \u0447\u0430\u0441\u0442\u044c \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0430\u0441\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438: \u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0431\u044b\u043b\u0438 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u044b, \u0430 \u0434\u0430\u043d\u043d\u044b\u0435 \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u044b \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a \u0441 \u0434\u0432\u043e\u0439\u043d\u044b\u043c \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e\u043c.\n\n\u0417\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u044b\u0435 \u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u044b, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u044d\u0442\u043e\u0439 \u0430\u0442\u0430\u043a\u043e\u0439, - \u043e\u0442\u0447\u0435\u0442\u0435 Sophos.\n\n\u0412\u043e\u043e\u0431\u0449\u0435 \u0436\u0435, MSP \u0432\u0441\u0435\u0433\u0434\u0430 \u0432\u0440\u0435\u043c\u044f \u0431\u044b\u043b\u0438\u00a0\u0437\u0430\u0432\u0435\u0442\u043d\u043e\u0439 \u0446\u0435\u043b\u044c\u044e \u0431\u0430\u043d\u0434 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0433\u043b\u0430 \u0438\u0445 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0430\u0442\u0430\u043a\u0430\u043c \u0441\u0440\u0430\u0437\u0443 \u043d\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439.\n\n\u041e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0442\u0440\u0435\u043f\u0435\u0442\u043d\u043e \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u043a SimpleHelp, ConnectWise ScreenConnect \u0438 Kaseya.\n\n\u041a\u0430\u043a \u043c\u044b \u043f\u043e\u043c\u043d\u0438\u043c, \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0441 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 REvil \u043f\u0440\u043e\u0432\u0435\u0440\u043d\u0443\u043b\u0430 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u0443\u044e \u0430\u0442\u0430\u043a\u0443, \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0432\u0448\u0443\u044e \u0431\u043e\u043b\u0435\u0435 1000 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439.\n\n\u0412\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u044f\u0441\u044c \u0441 DragonForce, \u0441\u0442\u043e\u0438\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c \u0438\u0445 \u043d\u0435\u0437\u0430\u0443\u0440\u044f\u0434\u043d\u0443\u044e \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c, \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u043c\u0443\u044e \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u0432\u0440\u0435\u043c\u044f, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u0441\u0435\u0440\u0438\u0435\u0439 \u0440\u0435\u0437\u043e\u043d\u0430\u043d\u0441\u043d\u044b\u0445 \u0432\u0437\u043b\u043e\u043c\u043e\u0432 \u0440\u043e\u0437\u043d\u0438\u0447\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439, \u043f\u0440\u0435\u0436\u0434\u0435 \u0432\u0441\u0435\u0433\u043e, \u0431\u0440\u0438\u0442\u0430\u043d\u0441\u043a\u0438\u0445 Marks & Spencer \u0438 Co-op, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0431\u0430\u043d\u0434.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0440\u0430\u043d\u0435\u0435\u00a0DragonForce \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0438 \u043a\u0430\u0440\u0442\u0435\u043b\u0438 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439, \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044f \u0441\u0432\u043e\u044e RaaS \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 white label, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0438 \u0434\u0440\u0443\u0433\u0438\u043c \u0431\u0430\u043d\u0434\u0430\u043c \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u0442\u044c \u0431\u0440\u0435\u043d\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u0434 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 \u0441\u0442\u0438\u043b\u044c \u0432\u0435\u0440\u0441\u0438\u0438 \u0441\u0432\u043e\u0435\u0433\u043e \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a\u0430.", "creation_timestamp": "2025-05-28T14:21:54.000000Z"}, {"uuid": "43aecfb6-6738-4bac-9494-35f095f460b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57728", "type": "seen", "source": "Telegram/zKw3RvGmlNLCMCNuinsXPppZM3o0dM54xIHjLbpPJzZIXg", "content": "", "creation_timestamp": "2025-05-29T12:39:23.000000Z"}, {"uuid": "e5b3ce10-9415-4030-a3d9-6b845f6bf7f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57726", "type": "seen", "source": "Telegram/zKw3RvGmlNLCMCNuinsXPppZM3o0dM54xIHjLbpPJzZIXg", "content": "", "creation_timestamp": "2025-05-29T12:39:23.000000Z"}, {"uuid": "c1c193a4-663d-4327-a1e7-a262babc265f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57378", "type": "published-proof-of-concept", "source": "Telegram/53wIaU0p9a171JLE0jZDDl-ZAg4u8Rv0M34YJ8GhWlpV87c", "content": "", "creation_timestamp": "2025-06-11T03:00:06.000000Z"}, {"uuid": "8c5032ad-8d95-4316-9ed7-fe0cc387e9ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57378", "type": "published-proof-of-concept", "source": "Telegram/3XjFdQnl9XelOVe1uN4E2a4frNC7kETFnR_z5QGqSWjIPjM", "content": "", "creation_timestamp": "2025-06-11T15:00:07.000000Z"}, {"uuid": "b07e1f37-0dd6-4df7-a6c0-ca70f18f68fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57509", "type": "seen", "source": "https://t.me/cvedetector/16722", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57509 - Bento4 mp42avc Buffer Overflow Arbitrary Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-57509 \nPublished : Jan. 29, 2025, 10:15 p.m. | 2\u00a0hours, 11\u00a0minutes ago \nDescription : Buffer Overflow vulnerability in Bento4 mp42avc v.3bdc891602d19789b8e8626e4a3e613a937b4d35 allows a local attacker to execute arbitrary code via the AP4_File::ParseStream and related functions. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T01:43:32.000000Z"}, {"uuid": "17f3bbec-b51d-4099-814a-4ff3ff107ae2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57395", "type": "seen", "source": "https://t.me/cvedetector/16721", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57395 - Safety Production Process Management System Remote Code Execution and Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57395 \nPublished : Jan. 29, 2025, 10:15 p.m. | 2\u00a0hours, 11\u00a0minutes ago \nDescription : Password Vulnerability in Safety production process management system v1.0 allows a remote attacker to escalate privileges, execute arbitrary code and obtain sensitive information via the password and account number parameters. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T01:43:29.000000Z"}, {"uuid": "9bb2b915-6c19-48ee-b5a1-1b661ad5dc01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57665", "type": "seen", "source": "https://t.me/cvedetector/16715", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57665 - JFinalCMS SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57665 \nPublished : Jan. 29, 2025, 11:15 p.m. | 1\u00a0hour, 11\u00a0minutes ago \nDescription : JFinalCMS 1.0 is vulnerable to SQL Injection in rc/main/java/com/cms/entity/Content.java. The cause of the vulnerability is that the title parameter is controllable and is concatenated directly into filterSql without filtering. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T01:43:21.000000Z"}, {"uuid": "2f8e87b7-3a83-4c77-9158-34c39251b2cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57513", "type": "seen", "source": "https://t.me/cvedetector/16716", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57513 - Bento4 FPE Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57513 \nPublished : Jan. 29, 2025, 10:15 p.m. | 2\u00a0hours, 11\u00a0minutes ago \nDescription : A floating-point exception (FPE) vulnerability exists in the AP4_TfraAtom::AP4_TfraAtom function in Bento4. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T01:43:22.000000Z"}, {"uuid": "480721c1-ee06-4af6-a41e-376f6e21b04a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57965", "type": "seen", "source": "https://t.me/cvedetector/16674", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57965 - Axios - Insecure Same-Origin Check\", \n  \"Content\": \"CVE ID : CVE-2024-57965 \nPublished : Jan. 29, 2025, 9:15 a.m. | 46\u00a0minutes ago \nDescription : In axios before 1.7.8, lib/helpers/isURLSameOrigin.js does not use a URL object when determining an origin, and has a potentially unwanted setAttribute('href',href) call. NOTE: some parties feel that the code change only addresses a warning message from a SAST tool and does not fix a vulnerability. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-29T11:30:37.000000Z"}, {"uuid": "e9f7bec7-acbf-4d44-a5b2-9aae256f42b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57439", "type": "seen", "source": "https://t.me/cvedetector/16688", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57439 - Ruoyi DoS Password Reset Interface Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57439 \nPublished : Jan. 29, 2025, 3:15 p.m. | 50\u00a0minutes ago \nDescription : An issue in the reset password interface of ruoyi v4.8.0 allows attackers with Admin privileges to cause a Denial of Service (DoS) by duplicating the login name of the account. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-29T17:21:32.000000Z"}, {"uuid": "8e4afc79-915b-4f2b-b559-4cb9131b9700", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57438", "type": "seen", "source": "https://t.me/cvedetector/16687", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57438 - RuoYi Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57438 \nPublished : Jan. 29, 2025, 3:15 p.m. | 50\u00a0minutes ago \nDescription : Insecure permissions in RuoYi v4.8.0 allows authenticated attackers to escalate privileges by assigning themselves higher level roles. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-29T17:21:31.000000Z"}, {"uuid": "0e4ab660-f77d-4780-aa50-f51da610b230", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57437", "type": "seen", "source": "https://t.me/cvedetector/16686", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57437 - RuoYi SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-57437 \nPublished : Jan. 29, 2025, 3:15 p.m. | 50\u00a0minutes ago \nDescription : RuoYi v4.8.0 was discovered to contain a SQL injection vulnerability via the orderby parameter at /monitor/online/list. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-29T17:21:30.000000Z"}, {"uuid": "1f7150f5-2328-4c1a-9fce-c0b389e43547", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57436", "type": "seen", "source": "https://t.me/cvedetector/16685", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57436 - RuoYi Session ID Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57436 \nPublished : Jan. 29, 2025, 3:15 p.m. | 50\u00a0minutes ago \nDescription : RuoYi v4.8.0 was discovered to allow unauthorized attackers to view the session ID of the admin in the system monitoring. This issue can allow attackers to impersonate Admin users via using a crafted cookie. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-29T17:21:29.000000Z"}, {"uuid": "d5cd326a-e32a-4d6f-acef-653aee3a1da6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57375", "type": "seen", "source": "https://t.me/cvedetector/23755", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57375 - Andamiro Pump It Up Bluetooth Denial of Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57375 \nPublished : April 25, 2025, 2:15 p.m. | 43\u00a0minutes ago \nDescription : Andamiro Pump It Up 20th Anniversary (aka Double X or XX/2019) 1.00.0-2.08.3 allows a physically proximate attacker to cause a denial of service (application crash) via certain deselect actions. \nSeverity: 2.4 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-25T17:30:47.000000Z"}, {"uuid": "a5f71c0b-4034-4ef1-85ef-78fb5f62fb00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57376", "type": "seen", "source": "https://t.me/cvedetector/16655", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57376 - \"Buffer Overflow in D-Link DSR Routers Allows Remote Code Execution\"\", \n  \"Content\": \"CVE ID : CVE-2024-57376 \nPublished : Jan. 28, 2025, 10:15 p.m. | 1\u00a0hour, 26\u00a0minutes ago \nDescription : Buffer Overflow vulnerability in D-Link DSR-150, DSR-150N, DSR-250, DSR-250N, DSR-500N, DSR-1000N from 3.13 to 3.17B901C allows unauthenticated users to execute remote code execution. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-29T01:29:09.000000Z"}, {"uuid": "041b8db3-5347-46e1-85d2-beba45b71a13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57514", "type": "seen", "source": "https://t.me/cvedetector/16649", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57514 - TP-Link Archer A20 XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57514 \nPublished : Jan. 28, 2025, 10:15 p.m. | 1\u00a0hour, 26\u00a0minutes ago \nDescription : The TP-Link Archer A20 v3 router is vulnerable to Cross-site Scripting (XSS) due to improper handling of directory listing paths in the web interface. When a specially crafted URL is visited, the router's web page renders the directory listing and executes arbitrary JavaScript embedded in the URL. This allows the attacker to inject malicious code into the page, executing JavaScript on the victim's browser, which could then be used for further malicious actions. The vulnerability was identified in the 1.0.6 Build 20231011 rel.85717(5553) version. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-29T01:29:02.000000Z"}, {"uuid": "985306ad-5623-4ef0-b5dd-1c56612b24e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57519", "type": "seen", "source": "https://t.me/cvedetector/16644", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57519 - Open5GS Denial of Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57519 \nPublished : Jan. 28, 2025, 11:15 p.m. | 26\u00a0minutes ago \nDescription : An issue in Open5GS v.2.7.2 allows a remote attacker to cause a denial of service via the ogs_dbi_auth_info function in lib/dbi/subscription.c file. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-29T01:28:55.000000Z"}, {"uuid": "f18452ae-593e-4b46-8f3a-2ceb79eec53a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57394", "type": "seen", "source": "https://t.me/cvedetector/23461", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57394 - Qi-ANXIN Tianqing Endpoint Security Management System DLL Hijacking Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57394 \nPublished : April 21, 2025, 6:15 p.m. | 1\u00a0hour, 28\u00a0minutes ago \nDescription : The quarantine - restore function in Qi-ANXIN Tianqing Endpoint Security Management System v10.0 allows user to restore a malicious file to an arbitrary file path. Attackers can write malicious DLL to system path and perform privilege escalation by leveraging Windows DLL hijacking vulnerabilities. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-21T22:20:13.000000Z"}, {"uuid": "4ad9c50d-8410-444e-ac63-ee41f06ab6bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57011", "type": "seen", "source": "Telegram/G2923xkOQkMB60cliUi60pEycippd2kOVIafZYbTkrvyqR4_", "content": "", "creation_timestamp": "2025-03-10T19:39:12.000000Z"}, {"uuid": "640e832b-ccb8-4a74-a91c-5ea75b7352c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57012", "type": "seen", "source": "Telegram/GGp5ndE6ms-xz2qaarxMCyVL1jftQ7n4sy_ncJ1vD7kKT9nC", "content": "", "creation_timestamp": "2025-03-10T19:39:12.000000Z"}, {"uuid": "56f0e273-47b5-4c20-bd28-c56cdbc773dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57493", "type": "seen", "source": "https://t.me/cvedetector/23349", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57493 - RedoxOS Relibc Denial of Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57493 \nPublished : April 18, 2025, 8:15 p.m. | 29\u00a0minutes ago \nDescription : An issue in redoxOS relibc before commit 98aa4ea5 allows a local attacker to cause a denial of service via the setsockopt function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-18T23:16:13.000000Z"}, {"uuid": "72344e05-a479-48de-86ff-03e647b0f7e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57901", "type": "seen", "source": "https://t.me/cvedetector/15448", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57901 - Linux Kernel af_packet VLAN Protocol Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57901 \nPublished : Jan. 15, 2025, 1:15 p.m. | 36\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \naf_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK  \n  \nBlamed commit forgot MSG_PEEK case, allowing a crash [1] as found  \nby syzbot.  \n  \nRework vlan_get_protocol_dgram() to not touch skb at all,  \nso that it can be used from many cpus on the same skb.  \n  \nAdd a const qualifier to skb argument.  \n  \n[1]  \nskbuff: skb_under_panic: text:ffffffff8a8ccd05 len:29 put:14 head:ffff88807fc8e400 data:ffff88807fc8e3f4 tail:0x11 end:0x140 dev:  \n------------[ cut here ]------------  \n kernel BUG at net/core/skbuff.c:206 !  \nOops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI  \nCPU: 1 UID: 0 PID: 5892 Comm: syz-executor883 Not tainted 6.13.0-rc4-syzkaller-00054-gd6ef8b40d075 #0  \nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024  \n RIP: 0010:skb_panic net/core/skbuff.c:206 [inline]  \n RIP: 0010:skb_under_panic+0x14b/0x150 net/core/skbuff.c:216  \nCode: 0b 8d 48 c7 c6 86 d5 25 8e 48 8b 54 24 08 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 41 54 41 57 41 56 e8 5a 69 79 f7 48 83 c4 20 90 <0f0b 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3  \nRSP: 0018:ffffc900038d7638 EFLAGS: 00010282  \nRAX: 0000000000000087 RBX: dffffc0000000000 RCX: 609ffd18ea660600  \nRDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000  \nRBP: ffff88802483c8d0 R08: ffffffff817f0a8c R09: 1ffff9200071ae60  \nR10: dffffc0000000000 R11: fffff5200071ae61 R12: 0000000000000140  \nR13: ffff88807fc8e400 R14: ffff88807fc8e3f4 R15: 0000000000000011  \nFS:  00007fbac5e006c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000  \nCS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033  \nCR2: 00007fbac5e00d58 CR3: 000000001238e000 CR4: 00000000003526f0  \nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000  \nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400  \nCall Trace:  \n   \n  skb_push+0xe5/0x100 net/core/skbuff.c:2636  \n  vlan_get_protocol_dgram+0x165/0x290 net/packet/af_packet.c:585  \n  packet_recvmsg+0x948/0x1ef0 net/packet/af_packet.c:3552  \n  sock_recvmsg_nosec net/socket.c:1033 [inline]  \n  sock_recvmsg+0x22f/0x280 net/socket.c:1055  \n  ____sys_recvmsg+0x1c6/0x480 net/socket.c:2803  \n  ___sys_recvmsg net/socket.c:2845 [inline]  \n  do_recvmmsg+0x426/0xab0 net/socket.c:2940  \n  __sys_recvmmsg net/socket.c:3014 [inline]  \n  __do_sys_recvmmsg net/socket.c:3037 [inline]  \n  __se_sys_recvmmsg net/socket.c:3030 [inline]  \n  __x64_sys_recvmmsg+0x199/0x250 net/socket.c:3030  \n  do_syscall_x64 arch/x86/entry/common.c:52 [inline]  \n  do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83  \n entry_SYSCALL_64_after_hwframe+0x77/0x7f \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T15:06:49.000000Z"}, {"uuid": "1c4a2cba-bfbf-4af5-bd50-be5c6de381b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57698", "type": "seen", "source": "https://t.me/cvedetector/24048", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57698 - Modernwms Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57698 \nPublished : April 29, 2025, 8:15 p.m. | 48\u00a0minutes ago \nDescription : An issue in modernwms v.1.0 allows an attacker view the MD5 hash of the administrator password and other attributes without authentication, even after initial configuration and password change. This happens due to excessive exposure of information and the lack of adequate access control on the /user/list?culture=en-us endpoint. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-29T23:31:41.000000Z"}, {"uuid": "d12bf553-b940-47e1-99ff-e961d2ac755b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57083", "type": "seen", "source": "https://t.me/cvedetector/21484", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57083 - Redoc Prototype Pollution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57083 \nPublished : March 28, 2025, 9:15 p.m. | 1\u00a0hour, 31\u00a0minutes ago \nDescription : A prototype pollution in the component Module.mergeObjects (redoc/bundles/redoc.lib.js:2) of redoc <=\nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-29T00:27:03.000000Z"}, {"uuid": "a6dcd037-8b0d-4d6f-b58c-7f0b3cae97ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57549", "type": "seen", "source": "https://t.me/cvedetector/16550", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57549 - CMSimple Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-57549 \nPublished : Jan. 27, 2025, 11:15 p.m. | 1\u00a0hour, 45\u00a0minutes ago \nDescription : CMSimple 5.16 allows the user to read cms source code through manipulation of the file name in the file parameter of a GET request. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-28T02:04:09.000000Z"}, {"uuid": "0fc061ca-986d-4dc8-a76d-9b8c26b98754", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57548", "type": "seen", "source": "https://t.me/cvedetector/16549", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57548 - CMSimple File Edit Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57548 \nPublished : Jan. 27, 2025, 11:15 p.m. | 1\u00a0hour, 45\u00a0minutes ago \nDescription : CMSimple 5.16 allows the user to edit log.php file via print page. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-28T02:04:05.000000Z"}, {"uuid": "fa7ef6bc-c151-4c82-b265-2c7b64773a50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57547", "type": "seen", "source": "https://t.me/cvedetector/16548", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57547 - CMSimple Insecure Permissions Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-57547 \nPublished : Jan. 27, 2025, 11:15 p.m. | 1\u00a0hour, 45\u00a0minutes ago \nDescription : Insecure Permissions vulnerability in CMSimple v.5.16 allows a remote attacker to obtain sensitive information via a crafted script to the Functionality of downloading php backup files. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-28T02:04:04.000000Z"}, {"uuid": "f0b93c33-e593-4fc9-a639-bd1b21219705", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57546", "type": "seen", "source": "https://t.me/cvedetector/16556", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57546 - CMSimple SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-57546 \nPublished : Jan. 27, 2025, 11:15 p.m. | 1\u00a0hour, 45\u00a0minutes ago \nDescription : An issue in CMSimple v.5.16 allows a remote attacker to obtain sensitive information via a crafted script to the validate link function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-28T02:04:16.000000Z"}, {"uuid": "b301f170-9730-4b91-a0e1-dd7389eefe2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57373", "type": "seen", "source": "https://t.me/cvedetector/16555", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57373 - LifestyleStore CSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57373 \nPublished : Jan. 27, 2025, 11:15 p.m. | 1\u00a0hour, 45\u00a0minutes ago \nDescription : Cross Site Request Forgery vulnerability in LifestyleStore v.1.0 allows a remote attacker to execute arbitrary cod and obtain sensitive information. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-28T02:04:15.000000Z"}, {"uuid": "61c64a17-aaec-4824-877d-d5db16b403d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57052", "type": "seen", "source": "https://t.me/cvedetector/16554", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57052 - Youdian CMS Session ID Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57052 \nPublished : Jan. 27, 2025, 11:15 p.m. | 1\u00a0hour, 45\u00a0minutes ago \nDescription : An issue in youdiancms v.9.5.20 and before allows a remote attacker to escalate privileges via the sessionID parameter in the index.php file. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-28T02:04:12.000000Z"}, {"uuid": "5b521b69-1f4c-4dd6-95ba-3f7157cac11e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57868", "type": "seen", "source": "https://t.me/cvedetector/22192", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57868 - Web::API Cryptographically Insecure Randomness Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57868 \nPublished : April 5, 2025, 4:15 p.m. | 36\u00a0minutes ago \nDescription : Web::API 2.8 and earlier for Perl uses the rand() function as the default source of entropy, which is not cryptographically secure, for cryptographic functions.  \n  \nSpecifically Web::API uses the Data::Random library which specifically states that it is \"Useful mostly for test programs\". Data::Random uses the rand() function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-05T19:05:38.000000Z"}, {"uuid": "bef552d3-6edc-47c2-982c-0b4f2e0eec43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57151", "type": "seen", "source": "https://t.me/cvedetector/20610", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57151 - Rainrocka Xinhu SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57151 \nPublished : March 18, 2025, 9:15 p.m. | 1\u00a0hour, 24\u00a0minutes ago \nDescription : SQL Injection vulnerability in rainrocka xinhu v.2.6.5 and before allows a remote attacker to execute arbitrary code via the inputAction.php file and the saveAjax function \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-19T00:26:15.000000Z"}, {"uuid": "205b9c0b-3eae-4cdd-b3c2-eaffbc0ef679", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57170", "type": "seen", "source": "https://t.me/cvedetector/20574", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57170 - SOPlanning Directory Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57170 \nPublished : March 18, 2025, 4:15 p.m. | 16\u00a0minutes ago \nDescription : SOPlanning 1.53.00 is vulnerable to a directory traversal issue in /process/upload.php. The \"fichier_to_delete\" parameter allows authenticated attackers to specify file paths containing directory traversal sequences (e.g., ../). This vulnerability enables attackers to delete arbitrary files outside the intended upload directory, potentially leading to denial of service or disruption of application functionality. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-18T17:44:09.000000Z"}, {"uuid": "9851a771-293d-4cd0-95f6-bf5abf51b3a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57169", "type": "seen", "source": "https://t.me/cvedetector/20573", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57169 - SOPlanning File Upload Bypass Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57169 \nPublished : March 18, 2025, 4:15 p.m. | 16\u00a0minutes ago \nDescription : A file upload bypass vulnerability exists in SOPlanning 1.53.00, specifically in /process/upload.php. This vulnerability allows remote attackers to bypass upload restrictions and potentially achieve remote code execution by uploading malicious files. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-18T17:44:05.000000Z"}, {"uuid": "fea537d3-431e-46b7-ae88-f4831eb760c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57835", "type": "seen", "source": "https://t.me/cvedetector/22194", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57835 - Amon2::Auth::Site::LINE Cryptographically Insecure Random Number Generation\", \n  \"Content\": \"CVE ID : CVE-2024-57835 \nPublished : April 5, 2025, 4:15 p.m. | 36\u00a0minutes ago \nDescription : Amon2::Auth::Site::LINE uses the String::Random module\u00a0to generate nonce values.\u00a0  \n  \nString::Random\u00a0defaults to Perl's built-in predictable\u00a0random number generator,\u00a0the rand() function, which is not cryptographically secure \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-05T19:05:42.000000Z"}, {"uuid": "8e596b1e-310b-44fe-aed3-685121c0da2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57490", "type": "seen", "source": "https://t.me/cvedetector/20811", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57490 - Guangzhou Hongfan Technology Co., LTD. iOffice20 Login Authentication Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57490 \nPublished : March 21, 2025, 2:15 p.m. | 27\u00a0minutes ago \nDescription : Guangzhou Hongfan Technology Co., LTD. iOffice20 has any user login vulnerability. An attacker can log in to any system account including the system administrator through a logical flaw. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-21T15:58:41.000000Z"}, {"uuid": "0b49507d-b0c3-45e2-82f6-40dffac13af4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57098", "type": "seen", "source": "https://t.me/cvedetector/17105", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57098 - Moss SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57098 \nPublished : Feb. 3, 2025, 8:15 p.m. | 22\u00a0minutes ago \nDescription : Moss v0.1.3 version has an SQL injection vulnerability that allows attackers to inject carefully designed payloads into the order parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-03T22:00:03.000000Z"}, {"uuid": "89c25565-640e-44b1-80af-9420a994499c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57440", "type": "seen", "source": "https://t.me/cvedetector/20753", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57440 - D-Link DSL-3788 Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2024-57440 \nPublished : March 20, 2025, 5:15 p.m. | 55\u00a0minutes ago \nDescription : D-Link DSL-3788 revA1 1.01R1B036_EU_EN is vulnerable to Buffer Overflow via the COMM_MAKECustomMsg function of the webproc cgi \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-20T19:54:36.000000Z"}, {"uuid": "893f5143-49f3-40a6-abf4-1292a6b8420d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57174", "type": "seen", "source": "https://t.me/cvedetector/19665", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57174 - Alphion ASEE-1443 DNS Suffix Misconfiguration Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57174 \nPublished : March 5, 2025, 9:15 p.m. | 2\u00a0hours, 22\u00a0minutes ago \nDescription : A misconfiguration in Alphion ASEE-1443 Firmware v0.4.H.00.02.15 defines a previously unregistered domain name as the default DNS suffix. This allows attackers to register the unclaimed domain and point its wildcard DNS entry to an attacker-controlled IP address, making it possible to access sensitive information. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-06T01:18:23.000000Z"}, {"uuid": "b5c0b2f4-508f-4761-859d-2f601d4138bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57973", "type": "seen", "source": "Telegram/nS9YKd3-UMVneCRnyLKpflqRw4pLYtqt0nV_2hPJSjtJifsO", "content": "", "creation_timestamp": "2025-03-08T04:35:53.000000Z"}, {"uuid": "6e46ad47-0c84-4d6a-913c-12738fd85880", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57889", "type": "seen", "source": "https://t.me/cvedetector/15455", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57889 - Linux Kernel PineA64 Pinctrl regmap(mutex)\", \n  \"Content\": \"CVE ID : CVE-2024-57889 \nPublished : Jan. 15, 2025, 1:15 p.m. | 36\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \npinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking  \n  \nIf a device uses MCP23xxx IO expander to receive IRQs, the following  \nbug can happen:  \n  \n  BUG: sleeping function called from invalid context  \n    at kernel/locking/mutex.c:283  \n  in_atomic(): 1, irqs_disabled(): 1, non_block: 0, ...  \n  preempt_count: 1, expected: 0  \n  ...  \n  Call Trace:  \n  ...  \n  __might_resched+0x104/0x10e  \n  __might_sleep+0x3e/0x62  \n  mutex_lock+0x20/0x4c  \n  regmap_lock_mutex+0x10/0x18  \n  regmap_update_bits_base+0x2c/0x66  \n  mcp23s08_irq_set_type+0x1ae/0x1d6  \n  __irq_set_trigger+0x56/0x172  \n  __setup_irq+0x1e6/0x646  \n  request_threaded_irq+0xb6/0x160  \n  ...  \n  \nWe observed the problem while experimenting with a touchscreen driver which  \nused MCP23017 IO expander (I2C).  \n  \nThe regmap in the pinctrl-mcp23s08 driver uses a mutex for protection from  \nconcurrent accesses, which is the default for regmaps without .fast_io,  \n.disable_locking, etc.  \n  \nmcp23s08_irq_set_type() calls regmap_update_bits_base(), and the latter  \nlocks the mutex.  \n  \nHowever, __setup_irq() locks desc->lock spinlock before calling these  \nfunctions. As a result, the system tries to lock the mutex whole holding  \nthe spinlock.  \n  \nIt seems, the internal regmap locks are not needed in this driver at all.  \nmcp->lock seems to protect the regmap from concurrent accesses already,  \nexcept, probably, in mcp_pinconf_get/set.  \n  \nmcp23s08_irq_set_type() and mcp23s08_irq_mask/unmask() are called under  \nchip_bus_lock(), which calls mcp23s08_irq_bus_lock(). The latter takes  \nmcp->lock and enables regmap caching, so that the potentially slow I2C  \naccesses are deferred until chip_bus_unlock().  \n  \nThe accesses to the regmap from mcp23s08_probe_one() do not need additional  \nlocking.  \n  \nIn all remaining places where the regmap is accessed, except  \nmcp_pinconf_get/set(), the driver already takes mcp->lock.  \n  \nThis patch adds locking in mcp_pinconf_get/set() and disables internal  \nlocking in the regmap config. Among other things, it fixes the sleeping  \nin atomic context described above. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T15:07:02.000000Z"}, {"uuid": "8f4f3b11-16b3-4b61-96ca-3bee25a1b46c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57887", "type": "seen", "source": "https://t.me/cvedetector/15454", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57887 - Linux Kernelony Use-After-Free Vulnerability in Adv7511 DRM\", \n  \"Content\": \"CVE ID : CVE-2024-57887 \nPublished : Jan. 15, 2025, 1:15 p.m. | 36\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ndrm: adv7511: Fix use-after-free in adv7533_attach_dsi()  \n  \nThe host_node pointer was assigned and freed in adv7533_parse_dt(), and  \nlater, adv7533_attach_dsi() uses the same. Fix this use-after-free issue  \nby\u00a0dropping of_node_put() in adv7533_parse_dt() and calling of_node_put()  \nin error path of probe() and also in the remove(). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T15:06:58.000000Z"}, {"uuid": "da4bde6a-4e29-43ca-bad6-bcd2d528eca9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57896", "type": "seen", "source": "https://t.me/cvedetector/15452", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57896 - Vulnerability: Intel Linux Kernels btrfs Delalloc Workers Use-After-Free\", \n  \"Content\": \"CVE ID : CVE-2024-57896 \nPublished : Jan. 15, 2025, 1:15 p.m. | 36\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nbtrfs: flush delalloc workers queue before stopping cleaner kthread during unmount  \n  \nDuring the unmount path, at close_ctree(), we first stop the cleaner  \nkthread, using kthread_stop() which frees the associated task_struct, and  \nthen stop and destroy all the work queues. However after we stopped the  \ncleaner we may still have a worker from the delalloc_workers queue running  \ninode.c:submit_compressed_extents(), which calls btrfs_add_delayed_iput(),  \nwhich in turn tries to wake up the cleaner kthread - which was already  \ndestroyed before, resulting in a use-after-free on the task_struct.  \n  \nSyzbot reported this with the following stack traces:  \n  \n  BUG: KASAN: slab-use-after-free in __lock_acquire+0x78/0x2100 kernel/locking/lockdep.c:5089  \n  Read of size 8 at addr ffff8880259d2818 by task kworker/u8:3/52  \n  \n  CPU: 1 UID: 0 PID: 52 Comm: kworker/u8:3 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0  \n  Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024  \n  Workqueue: btrfs-delalloc btrfs_work_helper  \n  Call Trace:  \n     \n   __dump_stack lib/dump_stack.c:94 [inline]  \n   dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120  \n   print_address_description mm/kasan/report.c:378 [inline]  \n   print_report+0x169/0x550 mm/kasan/report.c:489  \n   kasan_report+0x143/0x180 mm/kasan/report.c:602  \n   __lock_acquire+0x78/0x2100 kernel/locking/lockdep.c:5089  \n   lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5849  \n   __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]  \n   _raw_spin_lock_irqsave+0xd5/0x120 kernel/locking/spinlock.c:162  \n   class_raw_spinlock_irqsave_constructor include/linux/spinlock.h:551 [inline]  \n   try_to_wake_up+0xc2/0x1470 kernel/sched/core.c:4205  \n   submit_compressed_extents+0xdf/0x16e0 fs/btrfs/inode.c:1615  \n   run_ordered_work fs/btrfs/async-thread.c:288 [inline]  \n   btrfs_work_helper+0x96f/0xc40 fs/btrfs/async-thread.c:324  \n   process_one_work kernel/workqueue.c:3229 [inline]  \n   process_scheduled_works+0xa66/0x1840 kernel/workqueue.c:3310  \n   worker_thread+0x870/0xd30 kernel/workqueue.c:3391  \n   kthread+0x2f0/0x390 kernel/kthread.c:389  \n   ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147  \n   ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244  \n     \n  \n  Allocated by task 2:  \n   kasan_save_stack mm/kasan/common.c:47 [inline]  \n   kasan_save_track+0x3f/0x80 mm/kasan/common.c:68  \n   unpoison_slab_object mm/kasan/common.c:319 [inline]  \n   __kasan_slab_alloc+0x66/0x80 mm/kasan/common.c:345  \n   kasan_slab_alloc include/linux/kasan.h:250 [inline]  \n   slab_post_alloc_hook mm/slub.c:4104 [inline]  \n   slab_alloc_node mm/slub.c:4153 [inline]  \n   kmem_cache_alloc_node_noprof+0x1d9/0x380 mm/slub.c:4205  \n   alloc_task_struct_node kernel/fork.c:180 [inline]  \n   dup_task_struct+0x57/0x8c0 kernel/fork.c:1113  \n   copy_process+0x5d1/0x3d50 kernel/fork.c:2225  \n   kernel_clone+0x223/0x870 kernel/fork.c:2807  \n   kernel_thread+0x1bc/0x240 kernel/fork.c:2869  \n   create_kthread kernel/kthread.c:412 [inline]  \n   kthreadd+0x60d/0x810 kernel/kthread.c:767  \n   ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147  \n   ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244  \n  \n  Freed by task 24:  \n   kasan_save_stack mm/kasan/common.c:47 [inline]  \n   kasan_save_track+0x3f/0x80 mm/kasan/common.c:68  \n   kasan_save_free_info+0x40/0x50 mm/kasan/generic.c:582  \n   poison_slab_object mm/kasan/common.c:247 [inline]  \n   __kasan_slab_free+0x59/0x70 mm/kasan/common.c:264  \n   kasan_slab_free include/linux/kasan.h:233 [inline]  \n   slab_free_hook mm/slub.c:2338 [inline]  \n   slab_free mm/slub.c:4598 [inline]  \n   kmem_cache_free+0x195/0x410 mm/slub.c:4700  \n   put_ta[...]", "creation_timestamp": "2025-01-15T15:06:56.000000Z"}, {"uuid": "82e7f7ce-b731-45cd-a6aa-6064310b7b6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57895", "type": "seen", "source": "https://t.me/cvedetector/15451", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57895 - Linux kernel: Ksmbd Attribute Ctime Flag Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57895 \nPublished : Jan. 15, 2025, 1:15 p.m. | 36\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nksmbd: set ATTR_CTIME flags when setting mtime  \n  \nDavid reported that the new warning from setattr_copy_mgtime is coming  \nlike the following.  \n  \n[  113.215316] ------------[ cut here ]------------  \n[  113.215974] WARNING: CPU: 1 PID: 31 at fs/attr.c:300 setattr_copy+0x1ee/0x200  \n[  113.219192] CPU: 1 UID: 0 PID: 31 Comm: kworker/1:1 Not tainted 6.13.0-rc1+ #234  \n[  113.220127] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.2-3-gd478f380-rebuilt.opensuse.org 04/01/2014  \n[  113.221530] Workqueue: ksmbd-io handle_ksmbd_work [ksmbd]  \n[  113.222220] RIP: 0010:setattr_copy+0x1ee/0x200  \n[  113.222833] Code: 24 28 49 8b 44 24 30 48 89 53 58 89 43 6c 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 48 89 df e8 77 d6 ff ff e9 cd fe ff ff <0f0b e9 be fe ff ff 66 0  \n[  113.225110] RSP: 0018:ffffaf218010fb68 EFLAGS: 00010202  \n[  113.225765] RAX: 0000000000000120 RBX: ffffa446815f8568 RCX: 0000000000000003  \n[  113.226667] RDX: ffffaf218010fd38 RSI: ffffa446815f8568 RDI: ffffffff94eb03a0  \n[  113.227531] RBP: ffffaf218010fb90 R08: 0000001a251e217d R09: 00000000675259fa  \n[  113.228426] R10: 0000000002ba8a6d R11: ffffa4468196c7a8 R12: ffffaf218010fd38  \n[  113.229304] R13: 0000000000000120 R14: ffffffff94eb03a0 R15: 0000000000000000  \n[  113.230210] FS:  0000000000000000(0000) GS:ffffa44739d00000(0000) knlGS:0000000000000000  \n[  113.231215] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033  \n[  113.232055] CR2: 00007efe0053d27e CR3: 000000000331a000 CR4: 00000000000006b0  \n[  113.232926] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000  \n[  113.233812] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400  \n[  113.234797] Call Trace:  \n[  113.235116]    \n[  113.235393]  ? __warn+0x73/0xd0  \n[  113.235802]  ? setattr_copy+0x1ee/0x200  \n[  113.236299]  ? report_bug+0xf3/0x1e0  \n[  113.236757]  ? handle_bug+0x4d/0x90  \n[  113.237202]  ? exc_invalid_op+0x13/0x60  \n[  113.237689]  ? asm_exc_invalid_op+0x16/0x20  \n[  113.238185]  ? setattr_copy+0x1ee/0x200  \n[  113.238692]  btrfs_setattr+0x80/0x820 [btrfs]  \n[  113.239285]  ? get_stack_info_noinstr+0x12/0xf0  \n[  113.239857]  ? __module_address+0x22/0xa0  \n[  113.240368]  ? handle_ksmbd_work+0x6e/0x460 [ksmbd]  \n[  113.240993]  ? __module_text_address+0x9/0x50  \n[  113.241545]  ? __module_address+0x22/0xa0  \n[  113.242033]  ? unwind_next_frame+0x10e/0x920  \n[  113.242600]  ? __pfx_stack_trace_consume_entry+0x10/0x10  \n[  113.243268]  notify_change+0x2c2/0x4e0  \n[  113.243746]  ? stack_depot_save_flags+0x27/0x730  \n[  113.244339]  ? set_file_basic_info+0x130/0x2b0 [ksmbd]  \n[  113.244993]  set_file_basic_info+0x130/0x2b0 [ksmbd]  \n[  113.245613]  ? process_scheduled_works+0xbe/0x310  \n[  113.246181]  ? worker_thread+0x100/0x240  \n[  113.246696]  ? kthread+0xc8/0x100  \n[  113.247126]  ? ret_from_fork+0x2b/0x40  \n[  113.247606]  ? ret_from_fork_asm+0x1a/0x30  \n[  113.248132]  smb2_set_info+0x63f/0xa70 [ksmbd]  \n  \nksmbd is trying to set the atime and mtime via notify_change without also  \nsetting the ctime. so This patch add ATTR_CTIME flags when setting mtime  \nto avoid a warning. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T15:06:55.000000Z"}, {"uuid": "1ba249b6-4174-4fdf-82d2-3bf3e7b522e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57903", "type": "seen", "source": "https://t.me/cvedetector/15450", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57903 - Linux kernel SO_REUSEPORT Inet Socket Restriction Comic Book Bug\", \n  \"Content\": \"CVE ID : CVE-2024-57903 \nPublished : Jan. 15, 2025, 1:15 p.m. | 36\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnet: restrict SO_REUSEPORT to inet sockets  \n  \nAfter blamed commit, crypto sockets could accidentally be destroyed  \nfrom RCU call back, as spotted by zyzbot [1].  \n  \nTrying to acquire a mutex in RCU callback is not allowed.  \n  \nRestrict SO_REUSEPORT socket option to inet sockets.  \n  \nv1 of this patch supported TCP, UDP and SCTP sockets,  \nbut fcnal-test.sh test needed RAW and ICMP support.  \n  \n[1]  \nBUG: sleeping function called from invalid context at kernel/locking/mutex.c:562  \nin_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 24, name: ksoftirqd/1  \npreempt_count: 100, expected: 0  \nRCU nest depth: 0, expected: 0  \n1 lock held by ksoftirqd/1/24:  \n  #0: ffffffff8e937ba0 (rcu_callback){....}-{0:0}, at: rcu_lock_acquire include/linux/rcupdate.h:337 [inline]  \n  #0: ffffffff8e937ba0 (rcu_callback){....}-{0:0}, at: rcu_do_batch kernel/rcu/tree.c:2561 [inline]  \n  #0: ffffffff8e937ba0 (rcu_callback){....}-{0:0}, at: rcu_core+0xa37/0x17a0 kernel/rcu/tree.c:2823  \nPreemption disabled at:  \n [] softirq_handle_begin kernel/softirq.c:402 [inline]  \n [] handle_softirqs+0x128/0x9b0 kernel/softirq.c:537  \nCPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Not tainted 6.13.0-rc3-syzkaller-00174-ga024e377efed #0  \nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024  \nCall Trace:  \n   \n  __dump_stack lib/dump_stack.c:94 [inline]  \n  dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120  \n  __might_resched+0x5d4/0x780 kernel/sched/core.c:8758  \n  __mutex_lock_common kernel/locking/mutex.c:562 [inline]  \n  __mutex_lock+0x131/0xee0 kernel/locking/mutex.c:735  \n  crypto_put_default_null_skcipher+0x18/0x70 crypto/crypto_null.c:179  \n  aead_release+0x3d/0x50 crypto/algif_aead.c:489  \n  alg_do_release crypto/af_alg.c:118 [inline]  \n  alg_sock_destruct+0x86/0xc0 crypto/af_alg.c:502  \n  __sk_destruct+0x58/0x5f0 net/core/sock.c:2260  \n  rcu_do_batch kernel/rcu/tree.c:2567 [inline]  \n  rcu_core+0xaaa/0x17a0 kernel/rcu/tree.c:2823  \n  handle_softirqs+0x2d4/0x9b0 kernel/softirq.c:561  \n  run_ksoftirqd+0xca/0x130 kernel/softirq.c:950  \n  smpboot_thread_fn+0x544/0xa30 kernel/smpboot.c:164  \n  kthread+0x2f0/0x390 kernel/kthread.c:389  \n  ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147  \n  ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T15:06:54.000000Z"}, {"uuid": "3369b5de-bc45-4b39-aad4-f970feea860c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57902", "type": "seen", "source": "https://t.me/cvedetector/15449", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57902 - Linux Kernel af_packet: VLAN Get TCI Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57902 \nPublished : Jan. 15, 2025, 1:15 p.m. | 36\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \naf_packet: fix vlan_get_tci() vs MSG_PEEK  \n  \nBlamed commit forgot MSG_PEEK case, allowing a crash [1] as found  \nby syzbot.  \n  \nRework vlan_get_tci() to not touch skb at all,  \nso that it can be used from many cpus on the same skb.  \n  \nAdd a const qualifier to skb argument.  \n  \n[1]  \nskbuff: skb_under_panic: text:ffffffff8a8da482 len:32 put:14 head:ffff88807a1d5800 data:ffff88807a1d5810 tail:0x14 end:0x140 dev:  \n------------[ cut here ]------------  \n kernel BUG at net/core/skbuff.c:206 !  \nOops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI  \nCPU: 0 UID: 0 PID: 5880 Comm: syz-executor172 Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0  \nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024  \n RIP: 0010:skb_panic net/core/skbuff.c:206 [inline]  \n RIP: 0010:skb_under_panic+0x14b/0x150 net/core/skbuff.c:216  \nCode: 0b 8d 48 c7 c6 9e 6c 26 8e 48 8b 54 24 08 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 41 54 41 57 41 56 e8 3a 5a 79 f7 48 83 c4 20 90 <0f0b 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3  \nRSP: 0018:ffffc90003baf5b8 EFLAGS: 00010286  \nRAX: 0000000000000087 RBX: dffffc0000000000 RCX: 8565c1eec37aa000  \nRDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000  \nRBP: ffff88802616fb50 R08: ffffffff817f0a4c R09: 1ffff92000775e50  \nR10: dffffc0000000000 R11: fffff52000775e51 R12: 0000000000000140  \nR13: ffff88807a1d5800 R14: ffff88807a1d5810 R15: 0000000000000014  \nFS:  00007fa03261f6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000  \nCS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033  \nCR2: 00007ffd65753000 CR3: 0000000031720000 CR4: 00000000003526f0  \nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000  \nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400  \nCall Trace:  \n   \n  skb_push+0xe5/0x100 net/core/skbuff.c:2636  \n  vlan_get_tci+0x272/0x550 net/packet/af_packet.c:565  \n  packet_recvmsg+0x13c9/0x1ef0 net/packet/af_packet.c:3616  \n  sock_recvmsg_nosec net/socket.c:1044 [inline]  \n  sock_recvmsg+0x22f/0x280 net/socket.c:1066  \n  ____sys_recvmsg+0x1c6/0x480 net/socket.c:2814  \n  ___sys_recvmsg net/socket.c:2856 [inline]  \n  do_recvmmsg+0x426/0xab0 net/socket.c:2951  \n  __sys_recvmmsg net/socket.c:3025 [inline]  \n  __do_sys_recvmmsg net/socket.c:3048 [inline]  \n  __se_sys_recvmmsg net/socket.c:3041 [inline]  \n  __x64_sys_recvmmsg+0x199/0x250 net/socket.c:3041  \n  do_syscall_x64 arch/x86/entry/common.c:52 [inline]  \n  do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T15:06:50.000000Z"}, {"uuid": "1dfbe04b-a43a-4249-8614-1dc5f68177da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57900", "type": "seen", "source": "https://t.me/cvedetector/15447", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57900 - \"Linux ILA Net Hooks Registration Race Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-57900 \nPublished : Jan. 15, 2025, 1:15 p.m. | 36\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nila: serialize calls to nf_register_net_hooks()  \n  \nsyzbot found a race in ila_add_mapping() [1]  \n  \ncommit 031ae72825ce (\"ila: call nf_unregister_net_hooks() sooner\")  \nattempted to fix a similar issue.  \n  \nLooking at the syzbot repro, we have concurrent ILA_CMD_ADD commands.  \n  \nAdd a mutex to make sure at most one thread is calling nf_register_net_hooks().  \n  \n[1]  \n BUG: KASAN: slab-use-after-free in rht_key_hashfn include/linux/rhashtable.h:159 [inline]  \n BUG: KASAN: slab-use-after-free in __rhashtable_lookup.constprop.0+0x426/0x550 include/linux/rhashtable.h:604  \nRead of size 4 at addr ffff888028f40008 by task dhcpcd/5501  \n  \nCPU: 1 UID: 0 PID: 5501 Comm: dhcpcd Not tainted 6.13.0-rc4-syzkaller-00054-gd6ef8b40d075 #0  \nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024  \nCall Trace:  \n   \n  __dump_stack lib/dump_stack.c:94 [inline]  \n  dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120  \n  print_address_description mm/kasan/report.c:378 [inline]  \n  print_report+0xc3/0x620 mm/kasan/report.c:489  \n  kasan_report+0xd9/0x110 mm/kasan/report.c:602  \n  rht_key_hashfn include/linux/rhashtable.h:159 [inline]  \n  __rhashtable_lookup.constprop.0+0x426/0x550 include/linux/rhashtable.h:604  \n  rhashtable_lookup include/linux/rhashtable.h:646 [inline]  \n  rhashtable_lookup_fast include/linux/rhashtable.h:672 [inline]  \n  ila_lookup_wildcards net/ipv6/ila/ila_xlat.c:127 [inline]  \n  ila_xlat_addr net/ipv6/ila/ila_xlat.c:652 [inline]  \n  ila_nf_input+0x1ee/0x620 net/ipv6/ila/ila_xlat.c:185  \n  nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline]  \n  nf_hook_slow+0xbb/0x200 net/netfilter/core.c:626  \n  nf_hook.constprop.0+0x42e/0x750 include/linux/netfilter.h:269  \n  NF_HOOK include/linux/netfilter.h:312 [inline]  \n  ipv6_rcv+0xa4/0x680 net/ipv6/ip6_input.c:309  \n  __netif_receive_skb_one_core+0x12e/0x1e0 net/core/dev.c:5672  \n  __netif_receive_skb+0x1d/0x160 net/core/dev.c:5785  \n  process_backlog+0x443/0x15f0 net/core/dev.c:6117  \n  __napi_poll.constprop.0+0xb7/0x550 net/core/dev.c:6883  \n  napi_poll net/core/dev.c:6952 [inline]  \n  net_rx_action+0xa94/0x1010 net/core/dev.c:7074  \n  handle_softirqs+0x213/0x8f0 kernel/softirq.c:561  \n  __do_softirq kernel/softirq.c:595 [inline]  \n  invoke_softirq kernel/softirq.c:435 [inline]  \n  __irq_exit_rcu+0x109/0x170 kernel/softirq.c:662  \n  irq_exit_rcu+0x9/0x30 kernel/softirq.c:678  \n  instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1049 [inline]  \n  sysvec_apic_timer_interrupt+0xa4/0xc0 arch/x86/kernel/apic/apic.c:1049 \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T15:06:48.000000Z"}, {"uuid": "d474b5d8-bed3-4721-9ca9-ee3d2581979c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57899", "type": "seen", "source": "https://t.me/cvedetector/15446", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57899 - IBM WiFi 802.11 Bitwise Operation Integer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57899 \nPublished : Jan. 15, 2025, 1:15 p.m. | 36\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nwifi: mac80211: fix mbss changed flags corruption on 32 bit systems  \n  \nOn 32-bit systems, the size of an unsigned long is 4 bytes,  \nwhile a u64 is 8 bytes. Therefore, when using  \nor_each_set_bit(bit, &bits, sizeof(changed) * BITS_PER_BYTE),  \nthe code is incorrectly searching for a bit in a 32-bit  \nvariable that is expected to be 64 bits in size,  \nleading to incorrect bit finding.  \n  \nSolution: Ensure that the size of the bits variable is correctly  \nadjusted for each architecture.  \n  \n Call Trace:  \n  ? show_regs+0x54/0x58  \n  ? __warn+0x6b/0xd4  \n  ? ieee80211_link_info_change_notify+0xcc/0xd4 [mac80211]  \n  ? report_bug+0x113/0x150  \n  ? exc_overflow+0x30/0x30  \n  ? handle_bug+0x27/0x44  \n  ? exc_invalid_op+0x18/0x50  \n  ? handle_exception+0xf6/0xf6  \n  ? exc_overflow+0x30/0x30  \n  ? ieee80211_link_info_change_notify+0xcc/0xd4 [mac80211]  \n  ? exc_overflow+0x30/0x30  \n  ? ieee80211_link_info_change_notify+0xcc/0xd4 [mac80211]  \n  ? ieee80211_mesh_work+0xff/0x260 [mac80211]  \n  ? cfg80211_wiphy_work+0x72/0x98 [cfg80211]  \n  ? process_one_work+0xf1/0x1fc  \n  ? worker_thread+0x2c0/0x3b4  \n  ? kthread+0xc7/0xf0  \n  ? mod_delayed_work_on+0x4c/0x4c  \n  ? kthread_complete_and_exit+0x14/0x14  \n  ? ret_from_fork+0x24/0x38  \n  ? kthread_complete_and_exit+0x14/0x14  \n  ? ret_from_fork_asm+0xf/0x14  \n  ? entry_INT80_32+0xf0/0xf0  \n  \n[restore no-op path for no changes] \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T15:06:48.000000Z"}, {"uuid": "40e70526-ffaa-499e-a585-7e1f3c17e322", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57898", "type": "seen", "source": "https://t.me/cvedetector/15445", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57898 - Linux Kernel wifi cfg80211 Link ID Information Leak Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57898 \nPublished : Jan. 15, 2025, 1:15 p.m. | 36\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nwifi: cfg80211: clear link ID from bitmap during link delete after clean up  \n  \nCurrently, during link deletion, the link ID is first removed from the  \nvalid_links bitmap before performing any clean-up operations. However, some  \nfunctions require the link ID to remain in the valid_links bitmap. One  \nsuch example is cfg80211_cac_event(). The flow is -  \n  \nnl80211_remove_link()  \n    cfg80211_remove_link()  \n        ieee80211_del_intf_link()  \n            ieee80211_vif_set_links()  \n                ieee80211_vif_update_links()  \n                    ieee80211_link_stop()  \n                        cfg80211_cac_event()  \n  \ncfg80211_cac_event() requires link ID to be present but it is cleared  \nalready in cfg80211_remove_link(). Ultimately, WARN_ON() is hit.  \n  \nTherefore, clear the link ID from the bitmap only after completing the link  \nclean-up. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T15:06:47.000000Z"}, {"uuid": "0ba12088-c280-4fe3-8ff2-5d4007c707d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57897", "type": "seen", "source": "https://t.me/cvedetector/15443", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57897 - AMD KFD Linux Kernel DMA Direction Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57897 \nPublished : Jan. 15, 2025, 1:15 p.m. | 36\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ndrm/amdkfd: Correct the migration DMA map direction  \n  \nThe SVM DMA device map direction should be set the same as  \nthe DMA unmap setting, otherwise the DMA core will report  \nthe following warning.  \n  \nBefore finialize this solution, there're some discussion on  \nthe DMA mapping type(stream-based or coherent) in this KFD  \nmigration case, followed by   \n-45a1-4b88-86ee-fb0f35a0ca40@amd.com/T/.  \n  \nAs there's no dma_sync_single_for_*() in the DMA buffer accessed  \nthat because this migration operation should be sync properly and  \nautomatically. Give that there's might not be a performance problem  \nin various cache sync policy of DMA sync. Therefore, in order to  \nsimplify the DMA direction setting alignment, let's set the DMA map  \ndirection as BIDIRECTIONAL.  \n  \n[  150.834218] WARNING: CPU: 8 PID: 1812 at kernel/dma/debug.c:1028 check_unmap+0x1cc/0x930  \n[  150.834225] Modules linked in: amdgpu(OE) amdxcp drm_exec(OE) gpu_sched drm_buddy(OE) drm_ttm_helper(OE) ttm(OE) drm_suballoc_helper(OE) drm_display_helper(OE) drm_kms_helper(OE) i2c_algo_bit rpcsec_gss_krb5 auth_rpcgss nfsv4 nfs lockd grace netfs xt_conntrack xt_MASQUERADE nf_conntrack_netlink xfrm_user xfrm_algo iptable_nat xt_addrtype iptable_filter br_netfilter nvme_fabrics overlay nfnetlink_cttimeout nfnetlink openvswitch nsh nf_conncount nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 libcrc32c bridge stp llc sch_fq_codel intel_rapl_msr amd_atl intel_rapl_common snd_hda_codec_realtek snd_hda_codec_generic snd_hda_scodec_component snd_hda_codec_hdmi snd_hda_intel snd_intel_dspcfg edac_mce_amd snd_pci_acp6x snd_hda_codec snd_acp_config snd_hda_core snd_hwdep snd_soc_acpi kvm_amd sunrpc snd_pcm kvm binfmt_misc snd_seq_midi crct10dif_pclmul snd_seq_midi_event ghash_clmulni_intel sha512_ssse3 snd_rawmidi nls_iso8859_1 sha256_ssse3 sha1_ssse3 snd_seq aesni_intel snd_seq_device crypto_simd snd_timer cryptd input_leds  \n[  150.834310]  wmi_bmof serio_raw k10temp rapl snd sp5100_tco ipmi_devintf soundcore ccp ipmi_msghandler cm32181 industrialio mac_hid msr parport_pc ppdev lp parport efi_pstore drm(OE) ip_tables x_tables pci_stub crc32_pclmul nvme ahci libahci i2c_piix4 r8169 nvme_core i2c_designware_pci realtek i2c_ccgx_ucsi video wmi hid_generic cdc_ether usbnet usbhid hid r8152 mii  \n[  150.834354] CPU: 8 PID: 1812 Comm: rocrtst64 Tainted: G           OE      6.10.0-custom #492  \n[  150.834358] Hardware name: AMD Majolica-RN/Majolica-RN, BIOS RMJ1009A 06/13/2021  \n[  150.834360] RIP: 0010:check_unmap+0x1cc/0x930  \n[  150.834363] Code: c0 4c 89 4d c8 e8 34 bf 86 00 4c 8b 4d c8 4c 8b 45 c0 48 8b 4d b8 48 89 c6 41 57 4c 89 ea 48 c7 c7 80 49 b4 84 e8 b4 81 f3 ff <0f0b 48 c7 c7 04 83 ac 84 e8 76 ba fc ff 41 8b 76 4c 49 8d 7e 50  \n[  150.834365] RSP: 0018:ffffaac5023739e0 EFLAGS: 00010086  \n[  150.834368] RAX: 0000000000000000 RBX: ffffffff8566a2e0 RCX: 0000000000000027  \n[  150.834370] RDX: ffff8f6a8f621688 RSI: 0000000000000001 RDI: ffff8f6a8f621680  \n[  150.834372] RBP: ffffaac502373a30 R08: 00000000000000c9 R09: ffffaac502373850  \n[  150.834373] R10: ffffaac502373848 R11: ffffffff84f46328 R12: ffffaac502373a40  \n[  150.834375] R13: ffff8f6741045330 R14: ffff8f6741a77700 R15: ffffffff84ac831b  \n[  150.834377] FS:  00007faf0fc94c00(0000) GS:ffff8f6a8f600000(0000) knlGS:0000000000000000  \n[  150.834379] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033  \n[  150.834381] CR2: 00007faf0b600020 CR3: 000000010a52e000 CR4: 0000000000350ef0  \n[  150.834383] Call Trace:  \n[  150.834385]    \n[  150.834387]  ? show_regs+0x6d/0x80  \n[  150.834393]  ? __warn+0x8c/0x140  \n[  150.834397]  ? check_unmap+0x1cc/0x930  \n[  150.834400]  ? report_bug+0x193/0x1a0  \n[  150.834406]  ? handle_bug+0x46/0x80  \n[  150.834410]  ? exc_invalid_op+0x1d/0x80  \n[...]", "creation_timestamp": "2025-01-15T15:06:41.000000Z"}, {"uuid": "255a3e5e-8073-4413-bc14-75a88951b470", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57762", "type": "seen", "source": "https://t.me/cvedetector/15400", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57762 - Microsoft Swift Fusion Manager Deserialization Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57762 \nPublished : Jan. 15, 2025, 12:15 a.m. | 19\u00a0minutes ago \nDescription : MSFM before v2025.01.01 was discovered to contain a deserialization vulnerability via the pom.xml configuration file. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T01:44:05.000000Z"}, {"uuid": "1337b996-84a6-4327-887b-97e04ad6054b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57761", "type": "seen", "source": "https://t.me/cvedetector/15399", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57761 - JeeWMS Arbitrary Code Execution Vuln\", \n  \"Content\": \"CVE ID : CVE-2024-57761 \nPublished : Jan. 15, 2025, 12:15 a.m. | 19\u00a0minutes ago \nDescription : An arbitrary file upload vulnerability in the parserXML() method of JeeWMS before v2025.01.01 allows attackers to execute arbitrary code via uploading a crafted file. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T01:44:01.000000Z"}, {"uuid": "d1465590-5e0f-43e5-a3d6-0f3531b232c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57760", "type": "seen", "source": "https://t.me/cvedetector/15398", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57760 - JeeWMS SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57760 \nPublished : Jan. 15, 2025, 12:15 a.m. | 19\u00a0minutes ago \nDescription : JeeWMS before v2025.01.01 was discovered to contain a SQL injection vulnerability via the ReportId parameter at /core/CGReportDao.java. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T01:44:00.000000Z"}, {"uuid": "43f2614a-5f7b-45a4-8f6d-30b12196ea9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57473", "type": "seen", "source": "https://t.me/cvedetector/15384", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57473 - H3C N12 Wireless Device Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2024-57473 \nPublished : Jan. 14, 2025, 11:15 p.m. | 37\u00a0minutes ago \nDescription : H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the mac address editing function. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands by sending a POST request to /bin/webs. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T00:53:35.000000Z"}, {"uuid": "ea222770-bbc2-49a0-b08a-1993a3a63d57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57483", "type": "seen", "source": "https://t.me/cvedetector/15383", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57483 - Tenda i24 Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2024-57483 \nPublished : Jan. 14, 2025, 11:15 p.m. | 37\u00a0minutes ago \nDescription : Tenda i24 V2.0.0.5 is vulnerable to Buffer Overflow in the addWifiMacFilter function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T00:53:34.000000Z"}, {"uuid": "9626264e-b419-407b-b632-2eab76cccc6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57257", "type": "seen", "source": "Telegram/LQVsvuM0lrHQ0k3ylRS4cUOTqNphMlYSgAWJ-xeo0yJnQ-3n", "content": "", "creation_timestamp": "2025-02-19T03:09:25.000000Z"}, {"uuid": "29401852-680b-4631-b3bc-aa2854ef8df1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57968", "type": "seen", "source": "https://t.me/cvedetector/17103", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57968 - Advantive VeraCore Unrestricted File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57968 \nPublished : Feb. 3, 2025, 8:15 p.m. | 22\u00a0minutes ago \nDescription : Advantive VeraCore before 2024.4.2.1 allows remote authenticated users to upload files to unintended folders (e.g., ones that are accessible during web browsing by other users). upload.aspx can be used for this. \nSeverity: 9.9 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-03T21:59:58.000000Z"}, {"uuid": "79e56748-9cab-46e3-9d49-0f216b18200d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57175", "type": "seen", "source": "https://t.me/cvedetector/17083", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57175 - PHPGURUKUL Online Birth Certificate System Stored XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57175 \nPublished : Feb. 3, 2025, 6:15 p.m. | 22\u00a0minutes ago \nDescription : A Stored Cross-Site Scripting (XSS) vulnerability was identified in the PHPGURUKUL Online Birth Certificate System v1.0 via the profile name to /user/certificate-form.php. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-03T20:19:13.000000Z"}, {"uuid": "c278a61f-3c03-484b-81ea-c350fb8ecad8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57237", "type": "seen", "source": "https://t.me/cvedetector/17119", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57237 - Prolink 4G LTE Mobile Wi-Fi Prolink XSS\", \n  \"Content\": \"CVE ID : CVE-2024-57237 \nPublished : Feb. 3, 2025, 7:15 p.m. | 1\u00a0hour, 22\u00a0minutes ago \nDescription : Prolink 4G LTE Mobile Wi-Fi DL-7203E V4.0.0B05 is vulnerable to Cross Site Scripting (XSS) in the /reqproc/proc_get endpoint. The vulnerability arises because the cmd parameter does not properly sanitize input and the response is served with a Content-Type of text/html. This behavior allows the browser to execute injected JavaScript code. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-03T22:00:21.000000Z"}, {"uuid": "e1682a3e-d39c-4ecb-bbdc-bba97918e78c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57097", "type": "seen", "source": "https://t.me/cvedetector/17111", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57097 - ClassCMS XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57097 \nPublished : Feb. 3, 2025, 8:15 p.m. | 22\u00a0minutes ago \nDescription : ClassCMS 4.8 is vulnerable to Cross Site Scripting (XSS) in class/admin/channel.php. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-03T22:00:11.000000Z"}, {"uuid": "f4a3952c-6b2a-46e0-898b-94da596b4735", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57669", "type": "seen", "source": "https://t.me/cvedetector/17110", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57669 - Zrlog Directory Traversal Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-57669 \nPublished : Feb. 3, 2025, 8:15 p.m. | 22\u00a0minutes ago \nDescription : Directory Traversal vulnerability in Zrlog backup-sql-file.jar v.3.0.31 allows a remote attacker to obtain sensitive information via the BackupController.java file. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-03T22:00:10.000000Z"}, {"uuid": "c4651a63-3189-4fc9-83bf-070a4f5979f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57498", "type": "seen", "source": "https://t.me/cvedetector/17109", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57498 - ForestBlog sayski Cross-Site Scripting (XSS) Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-57498 \nPublished : Feb. 3, 2025, 8:15 p.m. | 22\u00a0minutes ago \nDescription : Cross Site Scripting vulnerability in sayski ForestBlog 20241223 allows a remote attacker to escalate privileges via the article editing function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-03T22:00:06.000000Z"}, {"uuid": "5ec33065-5e51-4ebd-ae7a-d7d9f2140ed7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57452", "type": "seen", "source": "https://t.me/cvedetector/17108", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57452 - ChestnutCMS File Deletion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57452 \nPublished : Feb. 3, 2025, 8:15 p.m. | 22\u00a0minutes ago \nDescription : ChestnutCMS <=1.5.0\nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-03T22:00:05.000000Z"}, {"uuid": "78c1de4e-e936-4d42-bbd3-ee8b14d3d026", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57099", "type": "seen", "source": "https://t.me/cvedetector/17106", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57099 - ClassCMS Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57099 \nPublished : Feb. 3, 2025, 8:15 p.m. | 22\u00a0minutes ago \nDescription : ClassCMS v4.8 has a code execution vulnerability. Attackers can exploit this vulnerability by constructing a payload in the classview parameter of the model management feature, allowing them to execute arbitrary code and potentially take control of the server. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-03T22:00:04.000000Z"}, {"uuid": "cb50210e-c3de-499e-b557-e9dae97f2767", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57522", "type": "seen", "source": "https://t.me/cvedetector/17059", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57522 - SourceCodester Packers and Movers Management System XSS\", \n  \"Content\": \"CVE ID : CVE-2024-57522 \nPublished : Feb. 3, 2025, 1:15 p.m. | 1\u00a0hour, 13\u00a0minutes ago \nDescription : SourceCodester Packers and Movers Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in Users.php. An attacker can inject a malicious script into the username or name field during user creation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-03T16:08:20.000000Z"}, {"uuid": "d6524a01-15c1-4e07-ae23-710cb62bfa8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57938", "type": "seen", "source": "https://t.me/cvedetector/15927", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57938 - Linux SCTP Integer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57938 \nPublished : Jan. 21, 2025, 12:15 p.m. | 21\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnet/sctp: Prevent autoclose integer overflow in sctp_association_init()  \n  \nWhile by default max_autoclose equals to INT_MAX / HZ, one may set  \nnet.sctp.max_autoclose to UINT_MAX. There is code in  \nsctp_association_init() that can consequently trigger overflow. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-21T13:36:55.000000Z"}, {"uuid": "bc59d15c-5c3c-4a43-adf6-cbad7eb49a2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57966", "type": "seen", "source": "https://t.me/cvedetector/17035", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57966 - KDE ark Absolute Path Archive Extraction Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57966 \nPublished : Feb. 3, 2025, 5:15 a.m. | 43\u00a0minutes ago \nDescription : libarchiveplugin.cpp in KDE ark before 24.12.0 can extract to an absolute path from an archive. \nSeverity: 5.0 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-03T07:46:33.000000Z"}, {"uuid": "6c4cfb85-a05a-4d91-a814-bfb0d95359fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57940", "type": "seen", "source": "https://t.me/cvedetector/15949", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57940 - Exfat Infinite Cluster Loop Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2024-57940 \nPublished : Jan. 21, 2025, 1:15 p.m. | 42\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nexfat: fix the infinite loop in exfat_readdir()  \n  \nIf the file system is corrupted so that a cluster is linked to  \nitself in the cluster chain, and there is an unused directory  \nentry in the cluster, 'dentry' will not be incremented, causing  \ncondition 'dentry < max_dentries' unable to prevent an infinite  \nloop.  \n  \nThis infinite loop causes s_lock not to be released, and other  \ntasks will hang, such as exfat_sync_fs().  \n  \nThis commit stops traversing the cluster chain when there is unused  \ndirectory entry in the cluster to avoid this infinite loop. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-21T15:17:34.000000Z"}, {"uuid": "2ffe8a9e-6593-4911-bcd9-b6de102172cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57944", "type": "seen", "source": "https://t.me/cvedetector/15948", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57944 - \"Qualcomm Ti IIO ADC Null Pointer Dereference\"\", \n  \"Content\": \"CVE ID : CVE-2024-57944 \nPublished : Jan. 21, 2025, 1:15 p.m. | 42\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \niio: adc: ti-ads1298: Add NULL check in ads1298_init  \n  \ndevm_kasprintf() can return a NULL pointer on failure. A check on the  \nreturn value of such a call in ads1298_init() is missing. Add it. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-21T15:17:30.000000Z"}, {"uuid": "d8373cbd-78ee-4f57-839d-492645691676", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57018", "type": "seen", "source": "https://t.me/cvedetector/15506", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57018 - TOTOLINK X5000R OS Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57018 \nPublished : Jan. 15, 2025, 5:15 p.m. | 39\u00a0minutes ago \nDescription : TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the \"desc\" parameter in setVpnAccountCfg. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T19:19:03.000000Z"}, {"uuid": "2275455c-8c30-4ff5-931e-033f3dc43b70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57684", "type": "seen", "source": "https://t.me/cvedetector/15612", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57684 - D-Link DMZ Service Access Control Bypassomaly\", \n  \"Content\": \"CVE ID : CVE-2024-57684 \nPublished : Jan. 16, 2025, 7:15 p.m. | 45\u00a0minutes ago \nDescription : An access control issue in the component formDMZ.cgi of D-Link 816A2_FWv1.10CNB05_R1B011D88210 allows unauthenticated attackers to set the DMZ service of the device via a crafted POST request. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-16T21:15:17.000000Z"}, {"uuid": "2d9b9bec-aa72-4067-9add-70aaed4b9472", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57678", "type": "seen", "source": "https://t.me/cvedetector/15606", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57678 - \"D-Link 816A Access Control Bypass\"\", \n  \"Content\": \"CVE ID : CVE-2024-57678 \nPublished : Jan. 16, 2025, 7:15 p.m. | 45\u00a0minutes ago \nDescription : An access control issue in the component form2WlAc.cgi of D-Link 816A2_FWv1.10CNB05_R1B011D88210 allows unauthenticated attackers to set the 2.4G and 5G mac access control list of the device via a crafted POST request. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-16T21:15:09.000000Z"}, {"uuid": "8c513128-a094-411c-b868-4bcf1e5622f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57677", "type": "seen", "source": "https://t.me/cvedetector/15605", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57677 - D-Link 816A2 Form2Wan.cgi Unauthenticated WAN Service Manipulation\", \n  \"Content\": \"CVE ID : CVE-2024-57677 \nPublished : Jan. 16, 2025, 7:15 p.m. | 45\u00a0minutes ago \nDescription : An access control issue in the component form2Wan.cgi of D-Link 816A2_FWv1.10CNB05_R1B011D88210 allows unauthenticated attackers to set the wan service of the device via a crafted POST request. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-16T21:15:08.000000Z"}, {"uuid": "777a09fb-a58f-4321-85bd-b1fdfe46096b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57915", "type": "seen", "source": "https://t.me/cvedetector/15862", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57915 - \"Linux usb gadget: Null Pointer Vulnerability in u_serial\"\", \n  \"Content\": \"CVE ID : CVE-2024-57915 \nPublished : Jan. 19, 2025, 12:15 p.m. | 36\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nusb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null  \n  \nConsidering that in some extreme cases, when performing the  \nunbinding operation, gserial_disconnect has cleared gser->ioport,  \nwhich triggers gadget reconfiguration, and then calls gs_read_complete,  \nresulting in access to a null pointer. Therefore, ep is disabled before  \ngserial_disconnect sets port to null to prevent this from happening.  \n  \nCall trace:  \n gs_read_complete+0x58/0x240  \n usb_gadget_giveback_request+0x40/0x160  \n dwc3_remove_requests+0x170/0x484  \n dwc3_ep0_out_start+0xb0/0x1d4  \n __dwc3_gadget_start+0x25c/0x720  \n kretprobe_trampoline.cfi_jt+0x0/0x8  \n kretprobe_trampoline.cfi_jt+0x0/0x8  \n udc_bind_to_driver+0x1d8/0x300  \n usb_gadget_probe_driver+0xa8/0x1dc  \n gadget_dev_desc_UDC_store+0x13c/0x188  \n configfs_write_iter+0x160/0x1f4  \n vfs_write+0x2d0/0x40c  \n ksys_write+0x7c/0xf0  \n __arm64_sys_write+0x20/0x30  \n invoke_syscall+0x60/0x150  \n el0_svc_common+0x8c/0xf8  \n do_el0_svc+0x28/0xa0  \n el0_svc+0x24/0x84 \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-19T13:58:39.000000Z"}, {"uuid": "aa42de12-445d-4dfd-b87d-927489ddcb51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57434", "type": "seen", "source": "https://t.me/cvedetector/16983", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57434 - Macrozheng Mall-Tiny Default Test User Super Admin Account Creation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57434 \nPublished : Jan. 31, 2025, 10:15 p.m. | 1\u00a0hour, 58\u00a0minutes ago \nDescription : macrozheng mall-tiny 1.0.1 is vulnerable to Incorrect Access Control. The project imports users by default, and the test user is made a super administrator. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-01T01:25:36.000000Z"}, {"uuid": "795e4304-fa15-426d-9e8f-79d873c1ef40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57433", "type": "seen", "source": "https://t.me/cvedetector/16982", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57433 - Macrozheng Mall-tiny Insecure Token Logout\", \n  \"Content\": \"CVE ID : CVE-2024-57433 \nPublished : Jan. 31, 2025, 10:15 p.m. | 1\u00a0hour, 58\u00a0minutes ago \nDescription : macrozheng mall-tiny 1.0.1 is vulnerable to Incorrect Access Control via the logout function. After a user logs out, their token is still available and fetches information in the logged-in state. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-01T01:25:35.000000Z"}, {"uuid": "0272f08f-4511-4c9e-8cbb-8b53d8ce41b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57933", "type": "seen", "source": "https://t.me/cvedetector/15933", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57933 - Linux Kernel GVE XSK Queue Guard\", \n  \"Content\": \"CVE ID : CVE-2024-57933 \nPublished : Jan. 21, 2025, 12:15 p.m. | 21\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ngve: guard XSK operations on the existence of queues  \n  \nThis patch predicates the enabling and disabling of XSK pools on the  \nexistence of queues. As it stands, if the interface is down, disabling  \nor enabling XSK pools would result in a crash, as the RX queue pointer  \nwould be NULL. XSK pool registration will occur as part of the next  \ninterface up.  \n  \nSimilarly, xsk_wakeup needs be guarded against queues disappearing  \nwhile the function is executing, so a check against the  \nGVE_PRIV_FLAGS_NAPI_ENABLED flag is added to synchronize with the  \ndisabling of the bit and the synchronize_net() in gve_turndown. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-21T13:37:05.000000Z"}, {"uuid": "85a13528-1474-4895-b808-c5673405876a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57932", "type": "seen", "source": "https://t.me/cvedetector/15932", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57932 - Apache Linux Kernel Divide By Zero and Null Pointer Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57932 \nPublished : Jan. 21, 2025, 12:15 p.m. | 21\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ngve: guard XDP xmit NDO on existence of xdp queues  \n  \nIn GVE, dedicated XDP queues only exist when an XDP program is installed  \nand the interface is up. As such, the NDO XDP XMIT callback should  \nreturn early if either of these conditions are false.  \n  \nIn the case of no loaded XDP program, priv->num_xdp_queues=0 which can  \ncause a divide-by-zero error, and in the case of interface down,  \nnum_xdp_queues remains untouched to persist XDP queue count for the next  \ninterface up, but the TX pointer itself would be NULL.  \n  \nThe XDP xmit callback also needs to synchronize with a device  \ntransitioning from open to close. This synchronization will happen via  \nthe GVE_PRIV_FLAGS_NAPI_ENABLED bit along with a synchronize_net() call,  \nwhich waits for any RCU critical sections at call-time to complete. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-21T13:37:01.000000Z"}, {"uuid": "f6d7f2b8-c434-498f-9b4b-01041bea72e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57931", "type": "seen", "source": "https://t.me/cvedetector/15931", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57931 - Linux SELinux Unknown Extended Permissions Ignorance Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57931 \nPublished : Jan. 21, 2025, 12:15 p.m. | 21\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nselinux: ignore unknown extended permissions  \n  \nWhen evaluating extended permissions, ignore unknown permissions instead  \nof calling BUG(). This commit ensures that future permissions can be  \nadded without interfering with older kernels. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-21T13:37:00.000000Z"}, {"uuid": "21c3887e-ff3d-4d5f-8cad-62fe4c6eb629", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57930", "type": "seen", "source": "https://t.me/cvedetector/15930", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57930 - Linux Kernel Array Dereference Vulnerability in Tracing\", \n  \"Content\": \"CVE ID : CVE-2024-57930 \nPublished : Jan. 21, 2025, 12:15 p.m. | 21\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ntracing: Have process_string() also allow arrays  \n  \nIn order to catch a common bug where a TRACE_EVENT() TP_fast_assign()  \nassigns an address of an allocated string to the ring buffer and then  \nreferences it in TP_printk(), which can be executed hours later when the  \nstring is free, the function test_event_printk() runs on all events as  \nthey are registered to make sure there's no unwanted dereferencing.  \n  \nIt calls process_string() to handle cases in TP_printk() format that has  \n\"%s\". It returns whether or not the string is safe. But it can have some  \nfalse positives.  \n  \nFor instance, xe_bo_move() has:  \n  \n TP_printk(\"move_lacks_source:%s, migrate object %p [size %zu] from %s to %s device_id:%s\",  \n            __entry->move_lacks_source ? \"yes\" : \"no\", __entry->bo, __entry->size,  \n            xe_mem_type_to_name[__entry->old_placement],  \n            xe_mem_type_to_name[__entry->new_placement], __get_str(device_id))  \n  \nWhere the \"%s\" references into xe_mem_type_to_name[]. This is an array of  \npointers that should be safe for the event to access. Instead of flagging  \nthis as a bad reference, if a reference points to an array, where the  \nrecord field is the index, consider it safe. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-21T13:37:00.000000Z"}, {"uuid": "12ab6b01-89d6-44e7-bd68-fbb3e65d72d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57435", "type": "seen", "source": "https://t.me/cvedetector/16981", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57435 - Macrozheng Mall-Tiny Denial-of-Service Vuln\", \n  \"Content\": \"CVE ID : CVE-2024-57435 \nPublished : Jan. 31, 2025, 10:15 p.m. | 1\u00a0hour, 58\u00a0minutes ago \nDescription : In macrozheng mall-tiny 1.0.1, an attacker can send null data through the resource creation interface resulting in a null pointer dereference occurring in all subsequent operations that require authentication, which triggers a denial-of-service attack and service restart failure. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-01T01:25:34.000000Z"}, {"uuid": "ee38d7f5-e23e-4482-8a08-8452cd18a069", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57587", "type": "seen", "source": "https://t.me/cvedetector/16980", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57587 - EasyVirt DCScope SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57587 \nPublished : Jan. 31, 2025, 10:15 p.m. | 1\u00a0hour, 58\u00a0minutes ago \nDescription : EasyVirt DCScope 8.6.0 and earlier and co2Scope 1.3.0 and earlier are vulnerable to SQL Injection on the authentication portal. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-01T01:25:34.000000Z"}, {"uuid": "bf29a11f-4ea0-4656-a8da-c9eb0aab34dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57432", "type": "seen", "source": "https://t.me/cvedetector/16962", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57432 - Macrozheng Mall-Tiny JWT Hardcoded Signing Key Privilege escalation\", \n  \"Content\": \"CVE ID : CVE-2024-57432 \nPublished : Jan. 31, 2025, 5:15 p.m. | 46\u00a0minutes ago \nDescription : macrozheng mall-tiny 1.0.1 suffers from Insecure Permissions. The application's JWT signing keys are hardcoded and do not change. User information is explicitly written into the JWT and used for subsequent privilege management, making it is possible to forge the JWT of any user to achieve authentication bypass. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-31T19:34:21.000000Z"}, {"uuid": "f68a18a0-cf1f-4507-b138-2a5688f6d0ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57939", "type": "seen", "source": "https://t.me/cvedetector/15951", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57939 - RISC-V Linux Sleeping in Invalid Context Memory Corruption\", \n  \"Content\": \"CVE ID : CVE-2024-57939 \nPublished : Jan. 21, 2025, 1:15 p.m. | 42\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nriscv: Fix sleeping in invalid context in die()  \n  \ndie() can be called in exception handler, and therefore cannot sleep.  \nHowever, die() takes spinlock_t which can sleep with PREEMPT_RT enabled.  \nThat causes the following warning:  \n  \nBUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48  \nin_atomic(): 1, irqs_disabled(): 1, non_block: 0, pid: 285, name: mutex  \npreempt_count: 110001, expected: 0  \nRCU nest depth: 0, expected: 0  \nCPU: 0 UID: 0 PID: 285 Comm: mutex Not tainted 6.12.0-rc7-00022-ge19049cf7d56-dirty #234  \nHardware name: riscv-virtio,qemu (DT)  \nCall Trace:  \n    dump_backtrace+0x1c/0x24  \n    show_stack+0x2c/0x38  \n    dump_stack_lvl+0x5a/0x72  \n    dump_stack+0x14/0x1c  \n    __might_resched+0x130/0x13a  \n    rt_spin_lock+0x2a/0x5c  \n    die+0x24/0x112  \n    do_trap_insn_illegal+0xa0/0xea  \n    _new_vmalloc_restore_context_a0+0xcc/0xd8  \nOops - illegal instruction [#1]  \n  \nSwitch to use raw_spinlock_t, which does not sleep even with PREEMPT_RT  \nenabled. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-21T15:17:35.000000Z"}, {"uuid": "5f8298e6-efad-4b2a-99d6-24ccf5878ff6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57943", "type": "seen", "source": "https://t.me/cvedetector/15950", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57943 - Apache Exfat uninitialized page cache write vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57943 \nPublished : Jan. 21, 2025, 1:15 p.m. | 42\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nexfat: fix the new buffer was not zeroed before writing  \n  \nBefore writing, if a buffer_head marked as new, its data must  \nbe zeroed, otherwise uninitialized data in the page cache will  \nbe written.  \n  \nSo this commit uses folio_zero_new_buffers() to zero the new  \nbuffers before ->write_end(). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-21T15:17:35.000000Z"}, {"uuid": "d407af54-4894-47da-8567-0b7005cd75e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57942", "type": "seen", "source": "https://t.me/cvedetector/15947", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57942 - \"Ceph Linux Kernel Copy-to-Cache Write Begin Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-57942 \nPublished : Jan. 21, 2025, 1:15 p.m. | 42\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnetfs: Fix ceph copy to cache on write-begin  \n  \nAt the end of netfs_unlock_read_folio() in which folios are marked  \nappropriately for copying to the cache (either with by being marked dirty  \nand having their private data set or by having PG_private_2 set) and then  \nunlocked, the folio_queue struct has the entry pointing to the folio  \ncleared.  This presents a problem for netfs_pgpriv2_write_to_the_cache(),  \nwhich is used to write folios marked with PG_private_2 to the cache as it  \nexpects to be able to trawl the folio_queue list thereafter to find the  \nrelevant folios, leading to a hang.  \n  \nFix this by not clearing the folio_queue entry if we're going to do the  \ndeprecated copy-to-cache.  The clearance will be done instead as the folios  \nare written to the cache.  \n  \nThis can be reproduced by starting cachefiles, mounting a ceph filesystem  \nwith \"-o fsc\" and writing to it. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-21T15:17:29.000000Z"}, {"uuid": "acb23dcc-afeb-4407-bd4e-e7d338289e27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57941", "type": "seen", "source": "https://t.me/cvedetector/15946", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57941 - Linux Ceph File System NetFS Private2 Cache Cancelation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57941 \nPublished : Jan. 21, 2025, 1:15 p.m. | 42\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnetfs: Fix the (non-)cancellation of copy when cache is temporarily disabled  \n  \nWhen the caching for a cookie is temporarily disabled (e.g. due to a DIO  \nwrite on that file), future copying to the cache for that file is disabled  \nuntil all fds open on that file are closed.  However, if netfslib is using  \nthe deprecated PG_private_2 method (such as is currently used by ceph), and  \ndecides it wants to copy to the cache, netfs_advance_write() will just bail  \nat the first check seeing that the cache stream is unavailable, and  \nindicate that it dealt with all the content.  \n  \nThis means that we have no subrequests to provide notifications to drive  \nthe state machine or even to pin the request and the request just gets  \ndiscarded, leaving the folios with PG_private_2 set.  \n  \nFix this by jumping directly to cancel the request if the cache is not  \navailable.  That way, we don't remove mark3 from the folio_queue list and  \nnetfs_pgpriv2_cancel() will clean up the folios.  \n  \nThis was found by running the generic/013 xfstest against ceph with an  \nactive cache and the \"-o fsc\" option passed to ceph.  That would usually  \nhang \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-21T15:17:29.000000Z"}, {"uuid": "27994e53-2067-4f1f-be51-8d0633b38c68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57936", "type": "seen", "source": "https://t.me/cvedetector/15925", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57936 - NetXtreme RDMA Linux Kernel Buffer Overflowulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57936 \nPublished : Jan. 21, 2025, 12:15 p.m. | 21\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nRDMA/bnxt_re: Fix max SGEs for the Work Request  \n  \nGen P7 supports up to 13 SGEs for now. WQE software structure  \ncan hold only 6 now. Since the max send sge is reported as  \n13, the stack can give requests up to 13 SGEs. This is causing  \ntraffic failures and system crashes.  \n  \nUse the define for max SGE supported for variable size. This  \nwill work for both static and variable WQEs. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-21T13:36:53.000000Z"}, {"uuid": "bb04e22b-a3f6-4236-a831-6672e9799cf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57934", "type": "seen", "source": "https://t.me/cvedetector/15924", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57934 - \"Linux_kernel fgraph_array READ_ONCE NULL Pointer Dereference Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-57934 \nPublished : Jan. 21, 2025, 12:15 p.m. | 21\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nfgraph: Add READ_ONCE() when accessing fgraph_array[]  \n  \nIn __ftrace_return_to_handler(), a loop iterates over the fgraph_array[]  \nelements, which are fgraph_ops. The loop checks if an element is a  \nfgraph_stub to prevent using a fgraph_stub afterward.  \n  \nHowever, if the compiler reloads fgraph_array[] after this check, it might  \nrace with an update to fgraph_array[] that introduces a fgraph_stub. This  \ncould result in the stub being processed, but the stub contains a null  \n\"func_hash\" field, leading to a NULL pointer dereference.  \n  \nTo ensure that the gops compared against the fgraph_stub matches the gops  \nprocessed later, add a READ_ONCE(). A similar patch appears in commit  \n63a8dfb (\"function_graph: Add READ_ONCE() when accessing fgraph_array[]\"). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-21T13:36:52.000000Z"}, {"uuid": "16b13a49-b590-42d1-8d53-312a146e2c61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57935", "type": "seen", "source": "https://t.me/cvedetector/15923", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57935 - Intel RDMA HNS Invalid Pointer Dereference\", \n  \"Content\": \"CVE ID : CVE-2024-57935 \nPublished : Jan. 21, 2025, 12:15 p.m. | 21\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nRDMA/hns: Fix accessing invalid dip_ctx during destroying QP  \n  \nIf it fails to modify QP to RTR, dip_ctx will not be attached. And  \nduring detroying QP, the invalid dip_ctx pointer will be accessed. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-21T13:36:52.000000Z"}, {"uuid": "5182aa47-e4f9-4f8f-a88b-bfd542b29c57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57946", "type": "seen", "source": "https://t.me/cvedetector/15938", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57946 - Vulnerability Title: \"Virtio-Blk Linux Kernel Deadlock Vulnerability\" (Virtio-Blk, Deadlock)\", \n  \"Content\": \"CVE ID : CVE-2024-57946 \nPublished : Jan. 21, 2025, 1:15 p.m. | 42\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nvirtio-blk: don't keep queue frozen during system suspend  \n  \nCommit 4ce6e2db00de (\"virtio-blk: Ensure no requests in virtqueues before  \ndeleting vqs.\") replaces queue quiesce with queue freeze in virtio-blk's  \nPM callbacks. And the motivation is to drain inflight IOs before suspending.  \n  \nblock layer's queue freeze looks very handy, but it is also easy to cause  \ndeadlock, such as, any attempt to call into bio_queue_enter() may run into  \ndeadlock if the queue is frozen in current context. There are all kinds  \nof ->suspend() called in suspend context, so keeping queue frozen in the  \nwhole suspend context isn't one good idea. And Marek reported lockdep  \nwarning[1] caused by virtio-blk's freeze queue in virtblk_freeze().  \n  \n[1]   \n  \nGiven the motivation is to drain in-flight IOs, it can be done by calling  \nfreeze & unfreeze, meantime restore to previous behavior by keeping queue  \nquiesced during suspend. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-21T15:17:17.000000Z"}, {"uuid": "ea688d21-5f77-42eb-81b5-b52aca816278", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57945", "type": "seen", "source": "https://t.me/cvedetector/15937", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57945 - \"Riscv Linux Kernel Out-of-Bounds Memory Access Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-57945 \nPublished : Jan. 21, 2025, 1:15 p.m. | 42\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nriscv: mm: Fix the out of bound issue of vmemmap address  \n  \nIn sparse vmemmap model, the virtual address of vmemmap is calculated as:  \n((struct page *)VMEMMAP_START - (phys_ram_base >> PAGE_SHIFT)).  \nAnd the struct page's va can be calculated with an offset:  \n(vmemmap + (pfn)).  \n  \nHowever, when initializing struct pages, kernel actually starts from the  \nfirst page from the same section that phys_ram_base belongs to. If the  \nfirst page's physical address is not (phys_ram_base >> PAGE_SHIFT), then  \nwe get an va below VMEMMAP_START when calculating va for it's struct page.  \n  \nFor example, if phys_ram_base starts from 0x82000000 with pfn 0x82000, the  \nfirst page in the same section is actually pfn 0x80000. During  \ninit_unavailable_range(), we will initialize struct page for pfn 0x80000  \nwith virtual address ((struct page *)VMEMMAP_START - 0x2000), which is  \nbelow VMEMMAP_START as well as PCI_IO_END.  \n  \nThis commit fixes this bug by introducing a new variable  \n'vmemmap_start_pfn' which is aligned with memory section size and using  \nit to calculate vmemmap address instead of phys_ram_base. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-21T15:17:16.000000Z"}, {"uuid": "ec954798-3a4f-4298-9d0c-7efce7dc847c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57937", "type": "seen", "source": "https://t.me/cvedetector/15926", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57937 - \"Linux Kernel Memfd F_SEAL_WRITE Read-Only Mapping Reinstatement\"\", \n  \"Content\": \"CVE ID : CVE-2024-57937 \nPublished : Jan. 21, 2025, 12:15 p.m. | 21\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nmm: reinstate ability to map write-sealed memfd mappings read-only  \n  \nPatch series \"mm: reinstate ability to map write-sealed memfd mappings  \nread-only\".  \n  \nIn commit 158978945f31 (\"mm: perform the mapping_map_writable() check  \nafter call_mmap()\") (and preceding changes in the same series) it became  \npossible to mmap() F_SEAL_WRITE sealed memfd mappings read-only.  \n  \nCommit 5de195060b2e (\"mm: resolve faulty mmap_region() error path  \nbehaviour\") unintentionally undid this logic by moving the  \nmapping_map_writable() check before the shmem_mmap() hook is invoked,  \nthereby regressing this change.  \n  \nThis series reworks how we both permit write-sealed mappings being mapped  \nread-only and disallow mprotect() from undoing the write-seal, fixing this  \nregression.  \n  \nWe also add a regression test to ensure that we do not accidentally  \nregress this in future.  \n  \nThanks to Julian Orth for reporting this regression.  \n  \n  \nThis patch (of 2):  \n  \nIn commit 158978945f31 (\"mm: perform the mapping_map_writable() check  \nafter call_mmap()\") (and preceding changes in the same series) it became  \npossible to mmap() F_SEAL_WRITE sealed memfd mappings read-only.  \n  \nThis was previously unnecessarily disallowed, despite the man page  \ndocumentation indicating that it would be, thereby limiting the usefulness  \nof F_SEAL_WRITE logic.  \n  \nWe fixed this by adapting logic that existed for the F_SEAL_FUTURE_WRITE  \nseal (one which disallows future writes to the memfd) to also be used for  \nF_SEAL_WRITE.  \n  \nFor background - the F_SEAL_FUTURE_WRITE seal clears VM_MAYWRITE for a  \nread-only mapping to disallow mprotect() from overriding the seal - an  \noperation performed by seal_check_write(), invoked from shmem_mmap(), the  \nf_op->mmap() hook used by shmem mappings.  \n  \nBy extending this to F_SEAL_WRITE and critically - checking  \nmapping_map_writable() to determine if we may map the memfd AFTER we  \ninvoke shmem_mmap() - the desired logic becomes possible.  This is because  \nmapping_map_writable() explicitly checks for VM_MAYWRITE, which we will  \nhave cleared.  \n  \nCommit 5de195060b2e (\"mm: resolve faulty mmap_region() error path  \nbehaviour\") unintentionally undid this logic by moving the  \nmapping_map_writable() check before the shmem_mmap() hook is invoked,  \nthereby regressing this change.  \n  \nWe reinstate this functionality by moving the check out of shmem_mmap()  \nand instead performing it in do_mmap() at the point at which VMA flags are  \nbeing determined, which seems in any case to be a more appropriate place  \nin which to make this determination.  \n  \nIn order to achieve this we rework memfd seal logic to allow us access to  \nthis information using existing logic and eliminate the clearing of  \nVM_MAYWRITE from seal_check_write() which we are performing in do_mmap()  \ninstead. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-21T13:36:54.000000Z"}, {"uuid": "2f9e2b0e-0a1e-434b-abdd-8cf87a29ae37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57911", "type": "seen", "source": "https://t.me/cvedetector/15857", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57911 - VMware iio Information Leak Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57911 \nPublished : Jan. 19, 2025, 12:15 p.m. | 36\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \niio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer  \n  \nThe 'data' array is allocated via kmalloc() and it is used to push data  \nto user space from a triggered buffer, but it does not set values for  \ninactive channels, as it only uses iio_for_each_active_channel()  \nto assign new values.  \n  \nUse kzalloc for the memory allocation to avoid pushing uninitialized  \ninformation to userspace. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-19T13:58:32.000000Z"}, {"uuid": "4b6935f7-1be5-420c-867a-0a29c9e1ac89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57370", "type": "seen", "source": "https://t.me/cvedetector/15729", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57370 - Sunnygkp10 Online Exam System Cross Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-57370 \nPublished : Jan. 17, 2025, 8:15 p.m. | 26\u00a0minutes ago \nDescription : Cross Site Scripting vulnerability in sunnygkp10 Online Exam System master version allows a remote attacker to obtain sensitive information via the w parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-17T21:48:45.000000Z"}, {"uuid": "366aa835-8132-46d5-b28a-20bd4178170c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57369", "type": "seen", "source": "https://t.me/cvedetector/15728", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57369 - Typecho Clickjacking Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57369 \nPublished : Jan. 17, 2025, 8:15 p.m. | 26\u00a0minutes ago \nDescription : Clickjacking vulnerability in typecho v1.2.1. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-17T21:48:44.000000Z"}, {"uuid": "0241967d-70b6-44f8-bb63-6f7f4046bd54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57034", "type": "seen", "source": "https://t.me/cvedetector/15727", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57034 - WeGIA SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-57034 \nPublished : Jan. 17, 2025, 8:15 p.m. | 26\u00a0minutes ago \nDescription : WeGIA < 3.2.0 is vulnerable to SQL Injection in query_geracao_auto.php via the query parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-17T21:48:43.000000Z"}, {"uuid": "0553f814-7bff-4c29-9c5d-2dad3abf747c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57909", "type": "seen", "source": "https://t.me/cvedetector/15866", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57909 - \"Linux IIO light bh1745 Information Leak\"\", \n  \"Content\": \"CVE ID : CVE-2024-57909 \nPublished : Jan. 19, 2025, 12:15 p.m. | 36\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \niio: light: bh1745: fix information leak in triggered buffer  \n  \nThe 'scan' local struct is used to push data to user space from a  \ntriggered buffer, but it does not set values for inactive channels, as  \nit only uses iio_for_each_active_channel() to assign new values.  \n  \nInitialize the struct to zero before using it to avoid pushing  \nuninitialized information to userspace. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-19T13:59:19.000000Z"}, {"uuid": "37067152-3ce0-458e-94d6-fd5e3c1f5a8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57918", "type": "seen", "source": "https://t.me/cvedetector/15864", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57918 - AMD amdgpu DC Driver Page Fault Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57918 \nPublished : Jan. 19, 2025, 12:15 p.m. | 36\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ndrm/amd/display: fix page fault due to max surface definition mismatch  \n  \nDC driver is using two different values to define the maximum number of  \nsurfaces: MAX_SURFACES and MAX_SURFACE_NUM. Consolidate MAX_SURFACES as  \nthe unique definition for surface updates across DC.  \n  \nIt fixes page fault faced by Cosmic users on AMD display versions that  \nsupport two overlay planes, since the introduction of cursor overlay  \nmode.  \n  \n[Nov26 21:33] BUG: unable to handle page fault for address: 0000000051d0f08b  \n[  +0.000015] #PF: supervisor read access in kernel mode  \n[  +0.000006] #PF: error_code(0x0000) - not-present page  \n[  +0.000005] PGD 0 P4D 0  \n[  +0.000007] Oops: Oops: 0000 [#1] PREEMPT SMP NOPTI  \n[  +0.000006] CPU: 4 PID: 71 Comm: kworker/u32:6 Not tainted 6.10.0+ #300  \n[  +0.000006] Hardware name: Valve Jupiter/Jupiter, BIOS F7A0131 01/30/2024  \n[  +0.000007] Workqueue: events_unbound commit_work [drm_kms_helper]  \n[  +0.000040] RIP: 0010:copy_stream_update_to_stream.isra.0+0x30d/0x750 [amdgpu]  \n[  +0.000847] Code: 8b 10 49 89 94 24 f8 00 00 00 48 8b 50 08 49 89 94 24 00 01 00 00 8b 40 10 41 89 84 24 08 01 00 00 49 8b 45 78 48 85 c0 74 0b <0fb6 00 41 88 84 24 90 64 00 00 49 8b 45 60 48 85 c0 74 3b 48 8b  \n[  +0.000010] RSP: 0018:ffffc203802f79a0 EFLAGS: 00010206  \n[  +0.000009] RAX: 0000000051d0f08b RBX: 0000000000000004 RCX: ffff9f964f0a8070  \n[  +0.000004] RDX: ffff9f9710f90e40 RSI: ffff9f96600c8000 RDI: ffff9f964f000000  \n[  +0.000004] RBP: ffffc203802f79f8 R08: 0000000000000000 R09: 0000000000000000  \n[  +0.000005] R10: 0000000000000000 R11: 0000000000000000 R12: ffff9f96600c8000  \n[  +0.000004] R13: ffff9f9710f90e40 R14: ffff9f964f000000 R15: ffff9f96600c8000  \n[  +0.000004] FS:  0000000000000000(0000) GS:ffff9f9970000000(0000) knlGS:0000000000000000  \n[  +0.000005] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033  \n[  +0.000005] CR2: 0000000051d0f08b CR3: 00000002e6a20000 CR4: 0000000000350ef0  \n[  +0.000005] Call Trace:  \n[  +0.000011]    \n[  +0.000010]  ? __die_body.cold+0x19/0x27  \n[  +0.000012]  ? page_fault_oops+0x15a/0x2d0  \n[  +0.000014]  ? exc_page_fault+0x7e/0x180  \n[  +0.000009]  ? asm_exc_page_fault+0x26/0x30  \n[  +0.000013]  ? copy_stream_update_to_stream.isra.0+0x30d/0x750 [amdgpu]  \n[  +0.000739]  ? dc_commit_state_no_check+0xd6c/0xe70 [amdgpu]  \n[  +0.000470]  update_planes_and_stream_state+0x49b/0x4f0 [amdgpu]  \n[  +0.000450]  ? srso_return_thunk+0x5/0x5f  \n[  +0.000009]  ? commit_minimal_transition_state+0x239/0x3d0 [amdgpu]  \n[  +0.000446]  update_planes_and_stream_v2+0x24a/0x590 [amdgpu]  \n[  +0.000464]  ? srso_return_thunk+0x5/0x5f  \n[  +0.000009]  ? sort+0x31/0x50  \n[  +0.000007]  ? amdgpu_dm_atomic_commit_tail+0x159f/0x3a30 [amdgpu]  \n[  +0.000508]  ? srso_return_thunk+0x5/0x5f  \n[  +0.000009]  ? amdgpu_crtc_get_scanout_position+0x28/0x40 [amdgpu]  \n[  +0.000377]  ? srso_return_thunk+0x5/0x5f  \n[  +0.000009]  ? drm_crtc_vblank_helper_get_vblank_timestamp_internal+0x160/0x390 [drm]  \n[  +0.000058]  ? srso_return_thunk+0x5/0x5f  \n[  +0.000005]  ? dma_fence_default_wait+0x8c/0x260  \n[  +0.000010]  ? srso_return_thunk+0x5/0x5f  \n[  +0.000005]  ? wait_for_completion_timeout+0x13b/0x170  \n[  +0.000006]  ? srso_return_thunk+0x5/0x5f  \n[  +0.000005]  ? dma_fence_wait_timeout+0x108/0x140  \n[  +0.000010]  ? commit_tail+0x94/0x130 [drm_kms_helper]  \n[  +0.000024]  ? process_one_work+0x177/0x330  \n[  +0.000008]  ? worker_thread+0x266/0x3a0  \n[  +0.000006]  ? __pfx_worker_thread+0x10/0x10  \n[  +0.000004]  ? kthread+0xd2/0x100  \n[  +0.000006]  ? __pfx_kthread+0x10/0x10  \n[  +0.000006]  ? ret_from_fork+0x34/0x50  \n[  +0.000004]  ? __pfx_kthread+0x10/0x10  \n[  +0.000005]  ? ret_from_fork_asm+0x1a/0x30  \n[  +0.000011]    \n  \n(cherry picked from commit 1c86c81a86c6[...]", "creation_timestamp": "2025-01-19T13:59:18.000000Z"}, {"uuid": "fc718ec2-0ca2-4f70-9f08-7f96f312db82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57916", "type": "seen", "source": "https://t.me/cvedetector/15863", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57916 - Microchip Linux PCI1xxxx GPIO Nested IRQ Handling Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57916 \nPublished : Jan. 19, 2025, 12:15 p.m. | 36\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nmisc: microchip: pci1xxxx: Resolve kernel panic during GPIO IRQ handling  \n  \nResolve kernel panic caused by improper handling of IRQs while  \naccessing GPIO values. This is done by replacing generic_handle_irq with  \nhandle_nested_irq. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-19T13:58:40.000000Z"}, {"uuid": "4adf8e41-57a8-47db-88d3-a90fe601d9bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57914", "type": "seen", "source": "https://t.me/cvedetector/15860", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57914 - Linux Kernel USB Type-C Tcpci NULL Pointer Dereference Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57914 \nPublished : Jan. 19, 2025, 12:15 p.m. | 36\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nusb: typec: tcpci: fix NULL pointer issue on shared irq case  \n  \nThe tcpci_irq() may meet below NULL pointer dereference issue:  \n  \n[    2.641851] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000010  \n[    2.641951] status 0x1, 0x37f  \n[    2.650659] Mem abort info:  \n[    2.656490]   ESR = 0x0000000096000004  \n[    2.660230]   EC = 0x25: DABT (current EL), IL = 32 bits  \n[    2.665532]   SET = 0, FnV = 0  \n[    2.668579]   EA = 0, S1PTW = 0  \n[    2.671715]   FSC = 0x04: level 0 translation fault  \n[    2.676584] Data abort info:  \n[    2.679459]   ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000  \n[    2.684936]   CM = 0, WnR = 0, TnD = 0, TagAccess = 0  \n[    2.689980]   GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0  \n[    2.695284] [0000000000000010] user address but active_mm is swapper  \n[    2.701632] Internal error: Oops: 0000000096000004 [#1] PREEMPT SMP  \n[    2.707883] Modules linked in:  \n[    2.710936] CPU: 1 UID: 0 PID: 87 Comm: irq/111-2-0051 Not tainted 6.12.0-rc6-06316-g7f63786ad3d1-dirty #4  \n[    2.720570] Hardware name: NXP i.MX93 11X11 EVK board (DT)  \n[    2.726040] pstate: 60400009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)  \n[    2.732989] pc : tcpci_irq+0x38/0x318  \n[    2.736647] lr : _tcpci_irq+0x14/0x20  \n[    2.740295] sp : ffff80008324bd30  \n[    2.743597] x29: ffff80008324bd70 x28: ffff800080107894 x27: ffff800082198f70  \n[    2.750721] x26: ffff0000050e6680 x25: ffff000004d172ac x24: ffff0000050f0000  \n[    2.757845] x23: ffff000004d17200 x22: 0000000000000001 x21: ffff0000050f0000  \n[    2.764969] x20: ffff000004d17200 x19: 0000000000000000 x18: 0000000000000001  \n[    2.772093] x17: 0000000000000000 x16: ffff80008183d8a0 x15: ffff00007fbab040  \n[    2.779217] x14: ffff00007fb918c0 x13: 0000000000000000 x12: 000000000000017a  \n[    2.786341] x11: 0000000000000001 x10: 0000000000000a90 x9 : ffff80008324bd00  \n[    2.793465] x8 : ffff0000050f0af0 x7 : ffff00007fbaa840 x6 : 0000000000000031  \n[    2.800589] x5 : 000000000000017a x4 : 0000000000000002 x3 : 0000000000000002  \n[    2.807713] x2 : ffff80008324bd3a x1 : 0000000000000010 x0 : 0000000000000000  \n[    2.814838] Call trace:  \n[    2.817273]  tcpci_irq+0x38/0x318  \n[    2.820583]  _tcpci_irq+0x14/0x20  \n[    2.823885]  irq_thread_fn+0x2c/0xa8  \n[    2.827456]  irq_thread+0x16c/0x2f4  \n[    2.830940]  kthread+0x110/0x114  \n[    2.834164]  ret_from_fork+0x10/0x20  \n[    2.837738] Code: f9426420 f9001fe0 d2800000 52800201 (f9400a60)  \n  \nThis may happen on shared irq case. Such as two Type-C ports share one  \nirq. After the first port finished tcpci_register_port(), it may trigger  \ninterrupt. However, if the interrupt comes by chance the 2nd port finishes  \ndevm_request_threaded_irq(), the 2nd port interrupt handler will run at  \nfirst. Then the above issue happens due to tcpci is still a NULL pointer  \nin tcpci_irq() when dereference to regmap.  \n  \n  devm_request_threaded_irq() <--irq);  \n  tcpci_register_port()  \n  \nThis will restore the logic to the state before commit (77e85107a771 \"usb:  \ntypec: tcpci: support edge irq\").  \n  \nHowever, moving tcpci_register_port() earlier creates a problem when use  \nedge irq because tcpci_init() will be called before  \ndevm_request_threaded_irq(). The tcpci_init() writes the ALERT_MASK to  \nthe hardware to tell it to start generating interrupts but we're not ready  \nto deal with them yet, then the ALERT events may be missed and ALERT line  \nwill not recover to high level forever. To avoid the issue, this will also  \nset ALERT_MASK register after devm_request_threaded_irq() return. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection[...]", "creation_timestamp": "2025-01-19T13:58:37.000000Z"}, {"uuid": "c0e4f4ca-ae8e-498a-9d03-a167b40e021c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57913", "type": "seen", "source": "https://t.me/cvedetector/15859", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57913 - Linux USB gadget functionfs remote denial of service (DoS) Windows Panic\", \n  \"Content\": \"CVE ID : CVE-2024-57913 \nPublished : Jan. 19, 2025, 12:15 p.m. | 36\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nusb: gadget: f_fs: Remove WARN_ON in functionfs_bind  \n  \nThis commit addresses an issue related to below kernel panic where  \npanic_on_warn is enabled. It is caused by the unnecessary use of WARN_ON  \nin functionsfs_bind, which easily leads to the following scenarios.  \n  \n1.adb_write in adbd               2. UDC write via configfs  \n  =================              =====================  \n  \n->usb_ffs_open_thread()           ->UDC write  \n ->open_functionfs()               ->configfs_write_iter()  \n  ->adb_open()                      ->gadget_dev_desc_UDC_store()  \n   ->adb_write()                     ->usb_gadget_register_driver_owner  \n                                      ->driver_register()  \n->StartMonitor()                       ->bus_add_driver()  \n ->adb_read()                           ->gadget_bind_driver()  \n           ->configfs_composite_bind()  \n                                          ->usb_add_function()  \n->open_functionfs()                        ->ffs_func_bind()  \n ->adb_open()                               ->functionfs_bind()  \n                                       state !=FFS_ACTIVE>  \n  \nThe adb_open, adb_read, and adb_write operations are invoked from the  \ndaemon, but trying to bind the function is a process that is invoked by  \nUDC write through configfs, which opens up the possibility of a race  \ncondition between the two paths. In this race scenario, the kernel panic  \noccurs due to the WARN_ON from functionfs_bind when panic_on_warn is  \nenabled. This commit fixes the kernel panic by removing the unnecessary  \nWARN_ON.  \n  \nKernel panic - not syncing: kernel: panic_on_warn set ...  \n[   14.542395] Call trace:  \n[   14.542464]  ffs_func_bind+0x1c8/0x14a8  \n[   14.542468]  usb_add_function+0xcc/0x1f0  \n[   14.542473]  configfs_composite_bind+0x468/0x588  \n[   14.542478]  gadget_bind_driver+0x108/0x27c  \n[   14.542483]  really_probe+0x190/0x374  \n[   14.542488]  __driver_probe_device+0xa0/0x12c  \n[   14.542492]  driver_probe_device+0x3c/0x220  \n[   14.542498]  __driver_attach+0x11c/0x1fc  \n[   14.542502]  bus_for_each_dev+0x104/0x160  \n[   14.542506]  driver_attach+0x24/0x34  \n[   14.542510]  bus_add_driver+0x154/0x270  \n[   14.542514]  driver_register+0x68/0x104  \n[   14.542518]  usb_gadget_register_driver_owner+0x48/0xf4  \n[   14.542523]  gadget_dev_desc_UDC_store+0xf8/0x144  \n[   14.542526]  configfs_write_iter+0xf0/0x138 \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-19T13:58:36.000000Z"}, {"uuid": "d5a78647-e51e-4705-9473-dd35ad00bc45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57912", "type": "seen", "source": "https://t.me/cvedetector/15858", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57912 - Oracle Linux Information Leaks Buffer\", \n  \"Content\": \"CVE ID : CVE-2024-57912 \nPublished : Jan. 19, 2025, 12:15 p.m. | 36\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \niio: pressure: zpa2326: fix information leak in triggered buffer  \n  \nThe 'sample' local struct is used to push data to user space from a  \ntriggered buffer, but it has a hole between the temperature and the  \ntimestamp (u32 pressure, u16 temperature, GAP, u64 timestamp).  \nThis hole is never initialized.  \n  \nInitialize the struct to zero before using it to avoid pushing  \nuninitialized information to userspace. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-19T13:58:32.000000Z"}, {"uuid": "8726202b-ffca-49a7-aa15-33236b53a7cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57910", "type": "seen", "source": "https://t.me/cvedetector/15856", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57910 - Linux IIO Light VCNL4035 Uninitialized Information Leak\", \n  \"Content\": \"CVE ID : CVE-2024-57910 \nPublished : Jan. 19, 2025, 12:15 p.m. | 36\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \niio: light: vcnl4035: fix information leak in triggered buffer  \n  \nThe 'buffer' local array is used to push data to userspace from a  \ntriggered buffer, but it does not set an initial value for the single  \ndata element, which is an u16 aligned to 8 bytes. That leaves at least  \n4 bytes uninitialized even after writing an integer value with  \nregmap_read().  \n  \nInitialize the array to zero before using it to avoid pushing  \nuninitialized information to userspace. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-19T13:58:31.000000Z"}, {"uuid": "1b8b47b7-e726-403e-b66a-621fef99ad6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57928", "type": "seen", "source": "https://t.me/cvedetector/15855", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57928 - Linux Kernel Netfs Enomem Handling Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57928 \nPublished : Jan. 19, 2025, 12:15 p.m. | 36\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnetfs: Fix enomem handling in buffered reads  \n  \nIf netfs_read_to_pagecache() gets an error from either ->prepare_read() or  \nfrom netfs_prepare_read_iterator(), it needs to decrement ->nr_outstanding,  \ncancel the subrequest and break out of the issuing loop.  Currently, it  \nonly does this for two of the cases, but there are two more that aren't  \nhandled.  \n  \nFix this by moving the handling to a common place and jumping to it from  \nall four places.  This is in preference to inserting a wrapper around  \nnetfs_prepare_read_iterator() as proposed by Dmitry Antipov[1]. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-19T13:58:30.000000Z"}, {"uuid": "09e73ac4-8541-4443-865a-12f414d6d244", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57919", "type": "seen", "source": "https://t.me/cvedetector/15853", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57919 - AMDGPU Divide Error Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57919 \nPublished : Jan. 19, 2025, 12:15 p.m. | 36\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ndrm/amd/display: fix divide error in DM plane scale calcs  \n  \ndm_get_plane_scale doesn't take into account plane scaled size equal to  \nzero, leading to a kernel oops due to division by zero. Fix by setting  \nout-scale size as zero when the dst size is zero, similar to what is  \ndone by drm_calc_scale(). This issue started with the introduction of  \ncursor ovelay mode that uses this function to assess cursor mode changes  \nvia dm_crtc_get_cursor_mode() before checking plane state.  \n  \n[Dec17 17:14] Oops: divide error: 0000 [#1] PREEMPT SMP NOPTI  \n[  +0.000018] CPU: 5 PID: 1660 Comm: surface-DP-1 Not tainted 6.10.0+ #231  \n[  +0.000007] Hardware name: Valve Jupiter/Jupiter, BIOS F7A0131 01/30/2024  \n[  +0.000004] RIP: 0010:dm_get_plane_scale+0x3f/0x60 [amdgpu]  \n[  +0.000553] Code: 44 0f b7 41 3a 44 0f b7 49 3e 83 e0 0f 48 0f a3 c2 73 21 69 41 28 e8 03 00 00 31 d2 41 f7 f1 31 d2 89 06 69 41 2c e8 03 00 00 <41f7 f0 89 07 e9 d7 d8 7e e9 44 89 c8 45 89 c1 41 89 c0 eb d4 66  \n[  +0.000005] RSP: 0018:ffffa8df0de6b8a0 EFLAGS: 00010246  \n[  +0.000006] RAX: 00000000000003e8 RBX: ffff9ac65c1f6e00 RCX: ffff9ac65d055500  \n[  +0.000003] RDX: 0000000000000000 RSI: ffffa8df0de6b8b0 RDI: ffffa8df0de6b8b4  \n[  +0.000004] RBP: ffff9ac64e7a5800 R08: 0000000000000000 R09: 0000000000000a00  \n[  +0.000003] R10: 00000000000000ff R11: 0000000000000054 R12: ffff9ac6d0700010  \n[  +0.000003] R13: ffff9ac65d054f00 R14: ffff9ac65d055500 R15: ffff9ac64e7a60a0  \n[  +0.000004] FS:  00007f869ea00640(0000) GS:ffff9ac970080000(0000) knlGS:0000000000000000  \n[  +0.000004] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033  \n[  +0.000003] CR2: 000055ca701becd0 CR3: 000000010e7f2000 CR4: 0000000000350ef0  \n[  +0.000004] Call Trace:  \n[  +0.000007]    \n[  +0.000006]  ? __die_body.cold+0x19/0x27  \n[  +0.000009]  ? die+0x2e/0x50  \n[  +0.000007]  ? do_trap+0xca/0x110  \n[  +0.000007]  ? do_error_trap+0x6a/0x90  \n[  +0.000006]  ? dm_get_plane_scale+0x3f/0x60 [amdgpu]  \n[  +0.000504]  ? exc_divide_error+0x38/0x50  \n[  +0.000005]  ? dm_get_plane_scale+0x3f/0x60 [amdgpu]  \n[  +0.000488]  ? asm_exc_divide_error+0x1a/0x20  \n[  +0.000011]  ? dm_get_plane_scale+0x3f/0x60 [amdgpu]  \n[  +0.000593]  dm_crtc_get_cursor_mode+0x33f/0x430 [amdgpu]  \n[  +0.000562]  amdgpu_dm_atomic_check+0x2ef/0x1770 [amdgpu]  \n[  +0.000501]  drm_atomic_check_only+0x5e1/0xa30 [drm]  \n[  +0.000047]  drm_mode_atomic_ioctl+0x832/0xcb0 [drm]  \n[  +0.000050]  ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [drm]  \n[  +0.000047]  drm_ioctl_kernel+0xb3/0x100 [drm]  \n[  +0.000062]  drm_ioctl+0x27a/0x4f0 [drm]  \n[  +0.000049]  ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [drm]  \n[  +0.000055]  amdgpu_drm_ioctl+0x4e/0x90 [amdgpu]  \n[  +0.000360]  __x64_sys_ioctl+0x97/0xd0  \n[  +0.000010]  do_syscall_64+0x82/0x190  \n[  +0.000008]  ? __pfx_drm_mode_createblob_ioctl+0x10/0x10 [drm]  \n[  +0.000044]  ? srso_return_thunk+0x5/0x5f  \n[  +0.000006]  ? drm_ioctl_kernel+0xb3/0x100 [drm]  \n[  +0.000040]  ? srso_return_thunk+0x5/0x5f  \n[  +0.000005]  ? __check_object_size+0x50/0x220  \n[  +0.000007]  ? srso_return_thunk+0x5/0x5f  \n[  +0.000005]  ? srso_return_thunk+0x5/0x5f  \n[  +0.000005]  ? drm_ioctl+0x2a4/0x4f0 [drm]  \n[  +0.000039]  ? __pfx_drm_mode_createblob_ioctl+0x10/0x10 [drm]  \n[  +0.000043]  ? srso_return_thunk+0x5/0x5f  \n[  +0.000005]  ? srso_return_thunk+0x5/0x5f  \n[  +0.000005]  ? __pm_runtime_suspend+0x69/0xc0  \n[  +0.000006]  ? srso_return_thunk+0x5/0x5f  \n[  +0.000005]  ? amdgpu_drm_ioctl+0x71/0x90 [amdgpu]  \n[  +0.000366]  ? srso_return_thunk+0x5/0x5f  \n[  +0.000006]  ? syscall_exit_to_user_mode+0x77/0x210  \n[  +0.000007]  ? srso_return_thunk+0x5/0x5f  \n[  +0.000005]  ? do_syscall_64+0x8e/0x190  \n[  +0.000006]  ? srso_return_thunk+0x5/0x5f  \n[  +0.000006]  ? do_syscall_64+0x8e/0x190  \n[  +0.00[...]", "creation_timestamp": "2025-01-19T13:58:28.000000Z"}, {"uuid": "1d5c0267-6848-4f3b-88d8-84527c3719ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57920", "type": "seen", "source": "https://t.me/cvedetector/15852", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57920 - Ampegu Null Pointer Dereference\", \n  \"Content\": \"CVE ID : CVE-2024-57920 \nPublished : Jan. 19, 2025, 12:15 p.m. | 36\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ndrm/amdkfd: wq_release signals dma_fence only when available  \n  \nkfd_process_wq_release() signals eviction fence by  \ndma_fence_signal() which wanrs if dma_fence  \nis NULL.  \n  \nkfd_process->ef is initialized by kfd_process_device_init_vm()  \nthrough ioctl. That means the fence is NULL for a new  \ncreated kfd_process, and close a kfd_process right  \nafter open it will trigger the warning.  \n  \nThis commit conditionally signals the eviction fence  \nin kfd_process_wq_release() only when it is available.  \n  \n[  503.660882] WARNING: CPU: 0 PID: 9 at drivers/dma-buf/dma-fence.c:467 dma_fence_signal+0x74/0xa0  \n[  503.782940] Workqueue: kfd_process_wq kfd_process_wq_release [amdgpu]  \n[  503.789640] RIP: 0010:dma_fence_signal+0x74/0xa0  \n[  503.877620] Call Trace:  \n[  503.880066]    \n[  503.882168]  ? __warn+0xcd/0x260  \n[  503.885407]  ? dma_fence_signal+0x74/0xa0  \n[  503.889416]  ? report_bug+0x288/0x2d0  \n[  503.893089]  ? handle_bug+0x53/0xa0  \n[  503.896587]  ? exc_invalid_op+0x14/0x50  \n[  503.900424]  ? asm_exc_invalid_op+0x16/0x20  \n[  503.904616]  ? dma_fence_signal+0x74/0xa0  \n[  503.908626]  kfd_process_wq_release+0x6b/0x370 [amdgpu]  \n[  503.914081]  process_one_work+0x654/0x10a0  \n[  503.918186]  worker_thread+0x6c3/0xe70  \n[  503.921943]  ? srso_alias_return_thunk+0x5/0xfbef5  \n[  503.926735]  ? srso_alias_return_thunk+0x5/0xfbef5  \n[  503.931527]  ? __kthread_parkme+0x82/0x140  \n[  503.935631]  ? __pfx_worker_thread+0x10/0x10  \n[  503.939904]  kthread+0x2a8/0x380  \n[  503.943132]  ? __pfx_kthread+0x10/0x10  \n[  503.946882]  ret_from_fork+0x2d/0x70  \n[  503.950458]  ? __pfx_kthread+0x10/0x10  \n[  503.954210]  ret_from_fork_asm+0x1a/0x30  \n[  503.958142]    \n[  503.960328] ---[ end trace 0000000000000000 ]---  \n  \n(cherry picked from commit 2774ef7625adb5fb9e9265c26a59dca7b8fd171e) \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-19T13:58:26.000000Z"}, {"uuid": "601919cf-2526-40dd-8ecb-53aa51559afe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57927", "type": "seen", "source": "https://t.me/cvedetector/15851", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57927 - Linux Kernel NFS Null File Pointer Cahce Writing Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57927 \nPublished : Jan. 19, 2025, 12:15 p.m. | 36\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnfs: Fix oops in nfs_netfs_init_request() when copying to cache  \n  \nWhen netfslib wants to copy some data that has just been read on behalf of  \nnfs, it creates a new write request and calls nfs_netfs_init_request() to  \ninitialise it, but with a NULL file pointer.  This causes  \nnfs_file_open_context() to oops - however, we don't actually need the nfs  \ncontext as we're only going to write to the cache.  \n  \nFix this by just returning if we aren't given a file pointer and emit a  \nwarning if the request was for something other than copy-to-cache.  \n  \nFurther, fix nfs_netfs_free_request() so that it doesn't try to free the  \ncontext if the pointer is NULL. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-19T13:58:25.000000Z"}, {"uuid": "9a45c816-8db2-4fee-b54b-684b65886b77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57926", "type": "seen", "source": "https://t.me/cvedetector/15850", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57926 - Mediatek Linux Kernel DRM Use-After-Free Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57926 \nPublished : Jan. 19, 2025, 12:15 p.m. | 36\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ndrm/mediatek: Set private->all_drm_private[i]->drm to NULL if mtk_drm_bind returns err  \n  \nThe pointer need to be set to NULL, otherwise KASAN complains about  \nuse-after-free. Because in mtk_drm_bind, all private's drm are set  \nas follows.  \n  \nprivate->all_drm_private[i]->drm = drm;  \n  \nAnd drm will be released by drm_dev_put in case mtk_drm_kms_init returns  \nfailure. However, the shutdown path still accesses the previous allocated  \nmemory in drm_atomic_helper_shutdown.  \n  \n[   84.874820] watchdog: watchdog0: watchdog did not stop!  \n[   86.512054] ==================================================================  \n[   86.513162] BUG: KASAN: use-after-free in drm_atomic_helper_shutdown+0x33c/0x378  \n[   86.514258] Read of size 8 at addr ffff0000d46fc068 by task shutdown/1  \n[   86.515213]  \n[   86.515455] CPU: 1 UID: 0 PID: 1 Comm: shutdown Not tainted 6.13.0-rc1-mtk+gfa1a78e5d24b-dirty #55  \n[   86.516752] Hardware name: Unknown Product/Unknown Product, BIOS 2022.10 10/01/2022  \n[   86.517960] Call trace:  \n[   86.518333]  show_stack+0x20/0x38 (C)  \n[   86.518891]  dump_stack_lvl+0x90/0xd0  \n[   86.519443]  print_report+0xf8/0x5b0  \n[   86.519985]  kasan_report+0xb4/0x100  \n[   86.520526]  __asan_report_load8_noabort+0x20/0x30  \n[   86.521240]  drm_atomic_helper_shutdown+0x33c/0x378  \n[   86.521966]  mtk_drm_shutdown+0x54/0x80  \n[   86.522546]  platform_shutdown+0x64/0x90  \n[   86.523137]  device_shutdown+0x260/0x5b8  \n[   86.523728]  kernel_restart+0x78/0xf0  \n[   86.524282]  __do_sys_reboot+0x258/0x2f0  \n[   86.524871]  __arm64_sys_reboot+0x90/0xd8  \n[   86.525473]  invoke_syscall+0x74/0x268  \n[   86.526041]  el0_svc_common.constprop.0+0xb0/0x240  \n[   86.526751]  do_el0_svc+0x4c/0x70  \n[   86.527251]  el0_svc+0x4c/0xc0  \n[   86.527719]  el0t_64_sync_handler+0x144/0x168  \n[   86.528367]  el0t_64_sync+0x198/0x1a0  \n[   86.528920]  \n[   86.529157] The buggy address belongs to the physical page:  \n[   86.529972] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff0000d46fd4d0 pfn:0x1146fc  \n[   86.531319] flags: 0xbfffc0000000000(node=0|zone=2|lastcpupid=0xffff)  \n[   86.532267] raw: 0bfffc0000000000 0000000000000000 dead000000000122 0000000000000000  \n[   86.533390] raw: ffff0000d46fd4d0 0000000000000000 00000000ffffffff 0000000000000000  \n[   86.534511] page dumped because: kasan: bad access detected  \n[   86.535323]  \n[   86.535559] Memory state around the buggy address:  \n[   86.536265]  ffff0000d46fbf00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  \n[   86.537314]  ffff0000d46fbf80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  \n[   86.538363] >ffff0000d46fc000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  \n[   86.544733]                                                           ^  \n[   86.551057]  ffff0000d46fc080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  \n[   86.557510]  ffff0000d46fc100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  \n[   86.563928] ==================================================================  \n[   86.571093] Disabling lock debugging due to kernel taint  \n[   86.577642] Unable to handle kernel paging request at virtual address e0e9c0920000000b  \n[   86.581834] KASAN: maybe wild-memory-access in range [0x0752049000000058-0x075204900000005f]  \n... \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-19T13:58:24.000000Z"}, {"uuid": "0294b47c-83c8-42f3-b119-af8f351fed7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57925", "type": "seen", "source": "https://t.me/cvedetector/15849", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57925 - \"Ksmbd Kernel Illegal Memory Write Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-57925 \nPublished : Jan. 19, 2025, 12:15 p.m. | 36\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nksmbd: fix a missing return value check bug  \n  \nIn the smb2_send_interim_resp(), if ksmbd_alloc_work_struct()  \nfails to allocate a node, it returns a NULL pointer to the  \nin_work pointer. This can lead to an illegal memory write of  \nin_work->response_buf when allocate_interim_rsp_buf() attempts  \nto perform a kzalloc() on it.  \n  \nTo address this issue, incorporating a check for the return  \nvalue of ksmbd_alloc_work_struct() ensures that the function  \nreturns immediately upon allocation failure, thereby preventing  \nthe aforementioned illegal memory access. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-19T13:58:23.000000Z"}, {"uuid": "382d17bf-3e80-48a4-980c-71f40dcfb1d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57924", "type": "seen", "source": "https://t.me/cvedetector/15848", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57924 - Oracle Solaris Linux Kernel File Handle Encoding Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57924 \nPublished : Jan. 19, 2025, 12:15 p.m. | 36\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nfs: relax assertions on failure to encode file handles  \n  \nEncoding file handles is usually performed by a filesystem >encode_fh()  \nmethod that may fail for various reasons.  \n  \nThe legacy users of exportfs_encode_fh(), namely, nfsd and  \nname_to_handle_at(2) syscall are ready to cope with the possibility  \nof failure to encode a file handle.  \n  \nThere are a few other users of exportfs_encode_{fh,fid}() that  \ncurrently have a WARN_ON() assertion when ->encode_fh() fails.  \nRelax those assertions because they are wrong.  \n  \nThe second linked bug report states commit 16aac5ad1fa9 (\"ovl: support  \nencoding non-decodable file handles\") in v6.6 as the regressing commit,  \nbut this is not accurate.  \n  \nThe aforementioned commit only increases the chances of the assertion  \nand allows triggering the assertion with the reproducer using overlayfs,  \ninotify and drop_caches.  \n  \nTriggering this assertion was always possible with other filesystems and  \nother reasons of ->encode_fh() failures and more particularly, it was  \nalso possible with the exact same reproducer using overlayfs that is  \nmounted with options index=on,nfs_export=on also on kernels < v6.6.  \nTherefore, I am not listing the aforementioned commit as a Fixes commit.  \n  \nBackport hint: this patch will have a trivial conflict applying to  \nv6.6.y, and other trivial conflicts applying to stable kernels < v6.6. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-19T13:58:20.000000Z"}, {"uuid": "86671e6b-86b1-43b7-8de8-cb1e54732406", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57923", "type": "seen", "source": "https://t.me/cvedetector/15847", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57923 - btrfs zlib S390 Hardware Acceleration Path Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2024-57923 \nPublished : Jan. 19, 2025, 12:15 p.m. | 36\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nbtrfs: zlib: fix avail_in bytes for s390 zlib HW compression path  \n  \nSince the input data length passed to zlib_compress_folios() can be  \narbitrary, always setting strm.avail_in to a multiple of PAGE_SIZE may  \ncause read-in bytes to exceed the input range. Currently this triggers  \nan assert in btrfs_compress_folios() on the debug kernel (see below).  \nFix strm.avail_in calculation for S390 hardware acceleration path.  \n  \n  assertion failed: *total_in <=0000021761df6538: 0707                bcr     0,%r7  \n             0000021761df653a: 0707                bcr     0,%r7  \n             0000021761df653c: 0707                bcr     0,%r7  \n             0000021761df653e: 0707                bcr     0,%r7  \n             0000021761df6540: c004004bb7ec        brcl    0,000002176276d518  \n  Call Trace:  \n   [<0000021761df6538] btrfs_compress_folios+0x198/0x1a0  \n  ([<0000021761df6534] btrfs_compress_folios+0x194/0x1a0)  \n   [<0000021761d97788] compress_file_range+0x3b8/0x6d0  \n   [<0000021761dcee7c] btrfs_work_helper+0x10c/0x160  \n   [<0000021761645760] process_one_work+0x2b0/0x5d0  \n   [<000002176164637e] worker_thread+0x20e/0x3e0  \n   [<000002176165221a] kthread+0x15a/0x170  \n   [<00000217615b859c] __ret_from_fork+0x3c/0x60  \n   [<00000217626e72d2] ret_from_fork+0xa/0x38  \n  INFO: lockdep is turned off.  \n  Last Breaking-Event-Address:  \n   [<0000021761597924] _printk+0x4c/0x58  \n  Kernel panic - not syncing: Fatal exception: panic_on_oops \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-19T13:58:19.000000Z"}, {"uuid": "8b20b0ef-5672-4b20-870c-5f7ab1b1fe95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57922", "type": "seen", "source": "https://t.me/cvedetector/15846", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57922 - AMD Display Divide-by-Zero Error (Linux Kernel)\", \n  \"Content\": \"CVE ID : CVE-2024-57922 \nPublished : Jan. 19, 2025, 12:15 p.m. | 36\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ndrm/amd/display: Add check for granularity in dml ceil/floor helpers  \n  \n[Why]  \nWrapper functions for dcn_bw_ceil2() and dcn_bw_floor2()  \nshould check for granularity is non zero to avoid assert and  \ndivide-by-zero error in dcn_bw_ functions.  \n  \n[How]  \nAdd check for granularity 0.  \n  \n(cherry picked from commit f6e09701c3eb2ccb8cb0518e0b67f1c69742a4ec) \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-19T13:58:18.000000Z"}, {"uuid": "2c34cda5-d3f1-429d-8b5b-77f8f2f2df4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57921", "type": "seen", "source": "https://t.me/cvedetector/15845", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57921 - AMD GPU amdgpu: Race Condition Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57921 \nPublished : Jan. 19, 2025, 12:15 p.m. | 36\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ndrm/amdgpu: Add a lock when accessing the buddy trim function  \n  \nWhen running YouTube videos and Steam games simultaneously,  \nthe tester found a system hang / race condition issue with  \nthe multi-display configuration setting. Adding a lock to  \nthe buddy allocator's trim function would be the solution.  \n  \n  \n[ 7197.250436] general protection fault, probably for non-canonical address 0xdead000000000108  \n[ 7197.250447] RIP: 0010:__alloc_range+0x8b/0x340 [amddrm_buddy]  \n[ 7197.250470] Call Trace:  \n[ 7197.250472]    \n[ 7197.250475]  ? show_regs+0x6d/0x80  \n[ 7197.250481]  ? die_addr+0x37/0xa0  \n[ 7197.250483]  ? exc_general_protection+0x1db/0x480  \n[ 7197.250488]  ? drm_suballoc_new+0x13c/0x93d [drm_suballoc_helper]  \n[ 7197.250493]  ? asm_exc_general_protection+0x27/0x30  \n[ 7197.250498]  ? __alloc_range+0x8b/0x340 [amddrm_buddy]  \n[ 7197.250501]  ? __alloc_range+0x109/0x340 [amddrm_buddy]  \n[ 7197.250506]  amddrm_buddy_block_trim+0x1b5/0x260 [amddrm_buddy]  \n[ 7197.250511]  amdgpu_vram_mgr_new+0x4f5/0x590 [amdgpu]  \n[ 7197.250682]  amdttm_resource_alloc+0x46/0xb0 [amdttm]  \n[ 7197.250689]  ttm_bo_alloc_resource+0xe4/0x370 [amdttm]  \n[ 7197.250696]  amdttm_bo_validate+0x9d/0x180 [amdttm]  \n[ 7197.250701]  amdgpu_bo_pin+0x15a/0x2f0 [amdgpu]  \n[ 7197.250831]  amdgpu_dm_plane_helper_prepare_fb+0xb2/0x360 [amdgpu]  \n[ 7197.251025]  ? try_wait_for_completion+0x59/0x70  \n[ 7197.251030]  drm_atomic_helper_prepare_planes.part.0+0x2f/0x1e0  \n[ 7197.251035]  drm_atomic_helper_prepare_planes+0x5d/0x70  \n[ 7197.251037]  drm_atomic_helper_commit+0x84/0x160  \n[ 7197.251040]  drm_atomic_nonblocking_commit+0x59/0x70  \n[ 7197.251043]  drm_mode_atomic_ioctl+0x720/0x850  \n[ 7197.251047]  ? __pfx_drm_mode_atomic_ioctl+0x10/0x10  \n[ 7197.251049]  drm_ioctl_kernel+0xb9/0x120  \n[ 7197.251053]  ? srso_alias_return_thunk+0x5/0xfbef5  \n[ 7197.251056]  drm_ioctl+0x2d4/0x550  \n[ 7197.251058]  ? __pfx_drm_mode_atomic_ioctl+0x10/0x10  \n[ 7197.251063]  amdgpu_drm_ioctl+0x4e/0x90 [amdgpu]  \n[ 7197.251186]  __x64_sys_ioctl+0xa0/0xf0  \n[ 7197.251190]  x64_sys_call+0x143b/0x25c0  \n[ 7197.251193]  do_syscall_64+0x7f/0x180  \n[ 7197.251197]  ? srso_alias_return_thunk+0x5/0xfbef5  \n[ 7197.251199]  ? amdgpu_display_user_framebuffer_create+0x215/0x320 [amdgpu]  \n[ 7197.251329]  ? drm_internal_framebuffer_create+0xb7/0x1a0  \n[ 7197.251332]  ? srso_alias_return_thunk+0x5/0xfbef5  \n  \n(cherry picked from commit 3318ba94e56b9183d0304577c74b33b6b01ce516) \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-19T13:58:17.000000Z"}, {"uuid": "0aa2c6ad-feaf-43b6-b142-85de34064dff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57929", "type": "published-proof-of-concept", "source": "https://t.me/cvedetector/15844", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57929 - Linux Device-Mapper Array Buffer\u00edo Buffer Overwrite\", \n  \"Content\": \"CVE ID : CVE-2024-57929 \nPublished : Jan. 19, 2025, 12:15 p.m. | 36\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ndm array: fix releasing a faulty array block twice in dm_array_cursor_end  \n  \nWhen dm_bm_read_lock() fails due to locking or checksum errors, it  \nreleases the faulty block implicitly while leaving an invalid output  \npointer behind. The caller of dm_bm_read_lock() should not operate on  \nthis invalid dm_block pointer, or it will lead to undefined result.  \nFor example, the dm_array_cursor incorrectly caches the invalid pointer  \non reading a faulty array block, causing a double release in  \ndm_array_cursor_end(), then hitting the BUG_ON in dm-bufio cache_put().  \n  \nReproduce steps:  \n  \n1. initialize a cache device  \n  \ndmsetup create cmeta --table \"0 8192 linear /dev/sdc 0\"  \ndmsetup create cdata --table \"0 65536 linear /dev/sdc 8192\"  \ndmsetup create corig --table \"0 524288 linear /dev/sdc $262144\"  \ndd if=/dev/zero of=/dev/mapper/cmeta bs=4k count=1  \ndmsetup create cache --table \"0 524288 cache /dev/mapper/cmeta \\  \n/dev/mapper/cdata /dev/mapper/corig 128 2 metadata2 writethrough smq 0\"  \n  \n2. wipe the second array block offline  \n  \ndmsteup remove cache cmeta cdata corig  \nmapping_root=$(dd if=/dev/sdc bs=1c count=8 skip=192 \\  \n2>/dev/null | hexdump -e '1/8 \"%u\\n\"')  \nablock=$(dd if=/dev/sdc bs=1c count=8 skip=$((4096*mapping_root+2056)) \\  \n2>/dev/null | hexdump -e '1/8 \"%u\\n\"')  \ndd if=/dev/zero of=/dev/sdc bs=4k count=1 seek=$ablock  \n  \n3. try reopen the cache device  \n  \ndmsetup create cmeta --table \"0 8192 linear /dev/sdc 0\"  \ndmsetup create cdata --table \"0 65536 linear /dev/sdc 8192\"  \ndmsetup create corig --table \"0 524288 linear /dev/sdc $262144\"  \ndmsetup create cache --table \"0 524288 cache /dev/mapper/cmeta \\  \n/dev/mapper/cdata /dev/mapper/corig 128 2 metadata2 writethrough smq 0\"  \n  \nKernel logs:  \n  \n(snip)  \ndevice-mapper: array: array_block_check failed: blocknr 0 != wanted 10  \ndevice-mapper: block manager: array validator check failed for block 10  \ndevice-mapper: array: get_ablock failed  \ndevice-mapper: cache metadata: dm_array_cursor_next for mapping failed  \n------------[ cut here ]------------  \nkernel BUG at drivers/md/dm-bufio.c:638!  \n  \nFix by setting the cached block pointer to NULL on errors.  \n  \nIn addition to the reproducer described above, this fix can be  \nverified using the \"array_cursor/damaged\" test in dm-unit:  \n  dm-unit run /pdata/array_cursor/damaged --kernel-dir \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-19T13:58:16.000000Z"}, {"uuid": "92202844-787d-482b-9b02-17db80aa2659", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57704", "type": "seen", "source": "https://t.me/cvedetector/15663", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57704 - Tenda AC8 WiFi Router Stack Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57704 \nPublished : Jan. 16, 2025, 11:15 p.m. | 33\u00a0minutes ago \nDescription : Tenda AC8v4 V16.03.34.06 has a stack overflow vulnerability. Affected by this vulnerability is the function setSchedWifi of the file /goform/openSchedWifi. The manipulation of the argument schedStartTime leads to stack-based buffer overflow. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-17T00:54:43.000000Z"}, {"uuid": "9bc1ecf6-de14-4d7b-926a-7b2ab8f1c210", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57775", "type": "seen", "source": "https://t.me/cvedetector/15594", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57775 - JFinalOA SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57775 \nPublished : Jan. 16, 2025, 6:15 p.m. | 43\u00a0minutes ago \nDescription : JFinalOA before v2025.01.01 was discovered to contain a SQL injection vulnerability via the component getWorkFlowHis?insid. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-16T20:24:45.000000Z"}, {"uuid": "90868ca0-ac56-462a-9b96-e522161d8ffd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57776", "type": "seen", "source": "https://t.me/cvedetector/15595", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57776 - JFinalOA XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57776 \nPublished : Jan. 16, 2025, 6:15 p.m. | 43\u00a0minutes ago \nDescription : A cross-site scripting (XSS) vulnerability in the /apply/getEditPage?view interface of JFinalOA before v2025.01.01 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-16T20:24:45.000000Z"}, {"uuid": "f2ddc4c4-67b1-4e71-a846-60840dad35d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57683", "type": "seen", "source": "https://t.me/cvedetector/15611", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57683 - D-Link Web-Enabled Router: Unauthenticated Filter Settings Tampering\", \n  \"Content\": \"CVE ID : CVE-2024-57683 \nPublished : Jan. 16, 2025, 7:15 p.m. | 45\u00a0minutes ago \nDescription : An access control issue in the component websURLFilterAddDel of D-Link 816A2_FWv1.10CNB05_R1B011D88210 allows unauthenticated attackers to set the filter settings of the device via a crafted POST request. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-16T21:15:16.000000Z"}, {"uuid": "c210e1bf-b12c-42c9-9156-d395586dfcd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57022", "type": "seen", "source": "https://t.me/cvedetector/15495", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57022 - TOTOLINK X5000R OS Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57022 \nPublished : Jan. 15, 2025, 5:15 p.m. | 39\u00a0minutes ago \nDescription : TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the \"sHour\" parameter in setWiFiScheduleCfg. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T19:18:49.000000Z"}, {"uuid": "ccec34ce-43a3-4b6b-8698-18666a41b01a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57682", "type": "seen", "source": "https://t.me/cvedetector/15610", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57682 - D-Link D-Status ASP Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-57682 \nPublished : Jan. 16, 2025, 7:15 p.m. | 45\u00a0minutes ago \nDescription : An information disclosure vulnerability in the component d_status.asp of D-Link 816A2_FWv1.10CNB05_R1B011D88210 allows unauthenticated attackers to access sensitive information via a crafted POST request. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-16T21:15:15.000000Z"}, {"uuid": "76466ee0-6a25-4bed-bad3-6e14d8805409", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57784", "type": "seen", "source": "https://t.me/cvedetector/15662", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57784 - Zenitel AlphaWeb XE Directory Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57784 \nPublished : Jan. 16, 2025, 11:15 p.m. | 33\u00a0minutes ago \nDescription : An issue in the component /php/script_uploads.php of Zenitel AlphaWeb XE v11.2.3.10 allows attackers to execute a directory traversal. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-17T00:54:42.000000Z"}, {"uuid": "8c556ff6-5565-468b-84df-c0627b4fe57a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57033", "type": "seen", "source": "https://t.me/cvedetector/15748", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57033 - WeGIA Cross Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-57033 \nPublished : Jan. 17, 2025, 9:15 p.m. | 15\u00a0minutes ago \nDescription : WeGIA < 3.2.0 is vulnerable to Cross Site Scripting (XSS) via the dados_addInfo parameter of documentos_funcionario.php. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-17T22:39:20.000000Z"}, {"uuid": "3d89f636-b8ba-4d84-8f44-76b0f47f7fd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57252", "type": "seen", "source": "https://t.me/cvedetector/15745", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57252 - OpenText CMS Server-Side Request Forgery (SSRF)\", \n  \"Content\": \"CVE ID : CVE-2024-57252 \nPublished : Jan. 17, 2025, 9:15 p.m. | 15\u00a0minutes ago \nDescription : OtCMS <=v7.46\nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-17T22:39:15.000000Z"}, {"uuid": "f2f6f1a5-e9ec-4f34-8da8-9a2bac40d94b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57035", "type": "seen", "source": "https://t.me/cvedetector/15744", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57035 - WeGIA SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-57035 \nPublished : Jan. 17, 2025, 9:15 p.m. | 15\u00a0minutes ago \nDescription : WeGIA v3.2.0 is vulnerable to SQL Injection viathe nextPage parameter in /controle/control.php. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-17T22:39:14.000000Z"}, {"uuid": "aa07b444-0e19-4f1c-97ba-a8f384396316", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57032", "type": "seen", "source": "https://t.me/cvedetector/15736", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57032 - WeGIA Password Change Insecure Access Control Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57032 \nPublished : Jan. 17, 2025, 8:15 p.m. | 26\u00a0minutes ago \nDescription : WeGIA < 3.2.0 is vulnerable to Incorrect Access Control in controle/control.php. The application does not validate the value of the old password, so it is possible to change the password by placing any value in the senha_antiga field. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-17T21:48:57.000000Z"}, {"uuid": "f512465b-84ba-4848-9e1d-950f3cb91068", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57030", "type": "seen", "source": "https://t.me/cvedetector/15734", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57030 - Wegia XSS in Documentos Funcionario\", \n  \"Content\": \"CVE ID : CVE-2024-57030 \nPublished : Jan. 17, 2025, 8:15 p.m. | 26\u00a0minutes ago \nDescription : Wegia < 3.2.0 is vulnerable to Cross Site Scripting (XSS) in /geral/documentos_funcionario.php via the id parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-17T21:48:52.000000Z"}, {"uuid": "0c82ed98-ffc7-453c-8a73-406482769de4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57031", "type": "seen", "source": "https://t.me/cvedetector/15735", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57031 - WeGIA SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-57031 \nPublished : Jan. 17, 2025, 8:15 p.m. | 26\u00a0minutes ago \nDescription : WeGIA < 3.2.0 is vulnerable to SQL Injection in /funcionario/remuneracao.php via the id_funcionario parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-17T21:48:56.000000Z"}, {"uuid": "ce7376c4-fbc7-4a1d-b953-a154860604ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57372", "type": "seen", "source": "https://t.me/cvedetector/15730", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57372 - Cisco Radius Cross Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57372 \nPublished : Jan. 17, 2025, 8:15 p.m. | 26\u00a0minutes ago \nDescription : Cross Site Scripting vulnerability in InformationPush master version allows a remote attacker to obtain sensitive information via the title, time and msg parameters \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-17T21:48:49.000000Z"}, {"uuid": "17815071-14e1-4161-844f-e15b655cd938", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57703", "type": "seen", "source": "https://t.me/cvedetector/15660", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57703 - Tenda AC8 Stack Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57703 \nPublished : Jan. 16, 2025, 11:15 p.m. | 33\u00a0minutes ago \nDescription : Tenda AC8v4 V16.03.34.06 has a stack overflow vulnerability. Affected by this vulnerability is the function setSchedWifi of the file /goform/openSchedWifi. The manipulation of the argument schedEndTime leads to stack-based buffer overflow. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-17T00:54:41.000000Z"}, {"uuid": "87d95872-908a-44c6-aef9-9bcb6d769c71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57785", "type": "seen", "source": "https://t.me/cvedetector/15664", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57785 - Zenitel AlphaWeb XE Local File Inclusion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57785 \nPublished : Jan. 16, 2025, 11:15 p.m. | 33\u00a0minutes ago \nDescription : Zenitel AlphaWeb XE v11.2.3.10 was discovered to contain a local file inclusion vulnerability via the component amc_uploads.php. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-17T00:54:44.000000Z"}, {"uuid": "6e2aea8d-fcde-4356-8a73-afaf0f103c53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57680", "type": "seen", "source": "https://t.me/cvedetector/15608", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57680 - D-Link 816A2 Unauthenticated Port Triggers Access Control Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-57680 \nPublished : Jan. 16, 2025, 7:15 p.m. | 45\u00a0minutes ago \nDescription : An access control issue in the component form2PortriggerRule.cgi of D-Link 816A2_FWv1.10CNB05_R1B011D88210 allows unauthenticated attackers to set the port trigger of the device via a crafted POST request. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-16T21:15:11.000000Z"}, {"uuid": "931439ff-81ea-4b0a-a730-1c941214a0aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57681", "type": "seen", "source": "https://t.me/cvedetector/15609", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57681 - D-Link Form2alg.cgi Unauthenticated Command Injection\", \n  \"Content\": \"CVE ID : CVE-2024-57681 \nPublished : Jan. 16, 2025, 7:15 p.m. | 45\u00a0minutes ago \nDescription : An access control issue in the component form2alg.cgi of D-Link 816A2_FWv1.10CNB05_R1B011D88210 allows unauthenticated attackers to set the agl service of the device via a crafted POST request. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-16T21:15:15.000000Z"}, {"uuid": "9ac9fa60-d497-46ba-b483-929e87a08f5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57772", "type": "seen", "source": "https://t.me/cvedetector/15600", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57772 - JFinalOA Cross-Site Scripting (XSS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57772 \nPublished : Jan. 16, 2025, 6:15 p.m. | 43\u00a0minutes ago \nDescription : A cross-site scripting (XSS) vulnerability in the /bumph/getDraftListPage?type interface of JFinalOA before v2025.01.01 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-16T20:24:52.000000Z"}, {"uuid": "ee2d697a-a706-483b-b9a1-139292ee0d34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57771", "type": "seen", "source": "https://t.me/cvedetector/15599", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57771 - JFinalOA Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-57771 \nPublished : Jan. 16, 2025, 6:15 p.m. | 43\u00a0minutes ago \nDescription : A cross-site scripting (XSS) vulnerability in the common/getEditPage?view interface of JFinalOA before v2025.01.01 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-16T20:24:51.000000Z"}, {"uuid": "9dc621e5-11d3-42e2-b53b-202d1696d21f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57770", "type": "seen", "source": "https://t.me/cvedetector/15598", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57770 - JFinalOA SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57770 \nPublished : Jan. 16, 2025, 6:15 p.m. | 43\u00a0minutes ago \nDescription : JFinalOA before v2025.01.01 was discovered to contain a SQL injection vulnerability via the component apply/save#oaContractApply.id. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-16T20:24:51.000000Z"}, {"uuid": "192173fb-bd55-4567-a231-7da4630c74f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57769", "type": "seen", "source": "https://t.me/cvedetector/15597", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57769 - JFinalOA SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-57769 \nPublished : Jan. 16, 2025, 6:15 p.m. | 43\u00a0minutes ago \nDescription : JFinalOA before v2025.01.01 was discovered to contain a SQL injection vulnerability via the component borrowmoney/listData?applyUser. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-16T20:24:50.000000Z"}, {"uuid": "ac85a548-df5d-4ec3-aa89-83a2a9500ec5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57768", "type": "seen", "source": "https://t.me/cvedetector/15596", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57768 - JFinalOA SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57768 \nPublished : Jan. 16, 2025, 6:15 p.m. | 43\u00a0minutes ago \nDescription : JFinalOA before v2025.01.01 was discovered to contain a SQL injection vulnerability via the component validRoleKey?sysRole.key. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-16T20:24:49.000000Z"}, {"uuid": "c5f01f35-79bd-49b5-aff6-661ca8853a8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57676", "type": "seen", "source": "https://t.me/cvedetector/15615", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57676 - D-Link 816A2 Access Control Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57676 \nPublished : Jan. 16, 2025, 7:15 p.m. | 45\u00a0minutes ago \nDescription : An access control issue in the component form2WlanBasicSetup.cgi of D-Link 816A2_FWv1.10CNB05_R1B011D88210 allows unauthenticated attackers to set the 2.4G and 5G wlan service of the device via a crafted POST request. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-16T21:15:22.000000Z"}, {"uuid": "5b5ca9e5-2e8d-4e0a-940b-98179f75d7ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57679", "type": "seen", "source": "https://t.me/cvedetector/15607", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57679 - D-Link 816A2 Access Control Bypass Allow Unauthorized Service Configuration\", \n  \"Content\": \"CVE ID : CVE-2024-57679 \nPublished : Jan. 16, 2025, 7:15 p.m. | 45\u00a0minutes ago \nDescription : An access control issue in the component form2RepeaterSetup.cgi of D-Link 816A2_FWv1.10CNB05_R1B011D88210 allows unauthenticated attackers to set the 2.4G and 5G repeater service of the device via a crafted POST request. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-16T21:15:10.000000Z"}, {"uuid": "4f463a3d-8b8c-4130-80ed-2162f147fbf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57726", "type": "seen", "source": "https://t.me/cvedetector/15544", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57726 - SimpleHelp Remote Support Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57726 \nPublished : Jan. 15, 2025, 11:15 p.m. | 34\u00a0minutes ago \nDescription : SimpleHelp remote support software v5.5.7 and before has a vulnerability that allows low-privileges technicians to create API keys with excessive permissions. These API keys can be used to escalate privileges to the server admin role. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-16T01:10:37.000000Z"}, {"uuid": "52b78744-8a9b-4e8c-aadf-0665846a0499", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57728", "type": "seen", "source": "https://t.me/cvedetector/15550", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57728 - SimpleHelp Remote Support File Upload Remote Code Execution (RCE)\", \n  \"Content\": \"CVE ID : CVE-2024-57728 \nPublished : Jan. 15, 2025, 11:15 p.m. | 45\u00a0minutes ago \nDescription : SimpleHelp remote support software v5.5.7 and before allows admin users to upload arbitrary files anywhere on the file system by uploading a crafted zip file (i.e. zip slip). This can be exploited to execute arbitrary code on the host in the context of the SimpleHelp server user. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-16T01:10:48.000000Z"}, {"uuid": "33305eb7-574a-4ab4-b269-4ca6b3bd58c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "seen", "source": "https://t.me/cvedetector/15549", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57727 - SimpleHelp Remote Support Software Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57727 \nPublished : Jan. 15, 2025, 11:15 p.m. | 45\u00a0minutes ago \nDescription : SimpleHelp remote support software v5.5.7 and before is vulnerable to multiple path traversal vulnerabilities that enable unauthenticated remote attackers to download arbitrary files from the SimpleHelp host via crafted HTTP requests. These files include server configuration files containing various secrets and hashed user passwords. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-16T01:10:45.000000Z"}, {"uuid": "0b2a74a2-1aeb-448a-81c4-7aa537157a90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57773", "type": "seen", "source": "https://t.me/cvedetector/15592", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57773 - JFinalOA Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-57773 \nPublished : Jan. 16, 2025, 6:15 p.m. | 43\u00a0minutes ago \nDescription : A cross-site scripting (XSS) vulnerability in the openSelectManyUserPage?orgid interface of JFinalOA before v2025.01.01 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-16T20:24:43.000000Z"}, {"uuid": "eb96f40e-7729-40da-b632-9054a1ea0c30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57161", "type": "seen", "source": "https://t.me/cvedetector/15588", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57161 - 07FLYCMS CSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57161 \nPublished : Jan. 16, 2025, 4:15 p.m. | 29\u00a0minutes ago \nDescription : 07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via /erp.07fly.net:80/oa/OaWorkReport/edit.html \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-16T17:54:13.000000Z"}, {"uuid": "01a369c2-bb22-4dc1-8c95-60f1704bc875", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57160", "type": "seen", "source": "https://t.me/cvedetector/15587", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57160 - 07FLYCMS CSRFlash\", \n  \"Content\": \"CVE ID : CVE-2024-57160 \nPublished : Jan. 16, 2025, 4:15 p.m. | 29\u00a0minutes ago \nDescription : 07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via /erp.07fly.net:80/oa/OaTask/edit.html. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-16T17:54:12.000000Z"}, {"uuid": "0b471ef4-e01f-46d8-9aa1-c9f36a5773c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57159", "type": "seen", "source": "https://t.me/cvedetector/15586", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57159 - 07FlyCMS CSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57159 \nPublished : Jan. 16, 2025, 4:15 p.m. | 29\u00a0minutes ago \nDescription : 07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via /erp.07fly.net:80/oa/OaWorkReport/add.html. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-16T17:54:11.000000Z"}, {"uuid": "49f7e897-9261-425e-8ef3-f16b10927b51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57162", "type": "seen", "source": "https://t.me/cvedetector/15585", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57162 - Campcodes Cybercafe Management System SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-57162 \nPublished : Jan. 16, 2025, 4:15 p.m. | 29\u00a0minutes ago \nDescription : Campcodes Cybercafe Management System v1.0 is vulnerable to SQL Injection in /ccms/view-user-detail.php. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-16T17:54:11.000000Z"}, {"uuid": "522fcecd-98b9-420b-b462-f1a2edd83487", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57611", "type": "seen", "source": "https://t.me/cvedetector/15584", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57611 - FLYCMS CSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57611 \nPublished : Jan. 16, 2025, 4:15 p.m. | 29\u00a0minutes ago \nDescription : 07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via admin/doAdminAction.php?act=editShop&shopId. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-16T17:54:10.000000Z"}, {"uuid": "66eceef3-a70d-439f-91ba-db5a3ff54b82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57774", "type": "seen", "source": "https://t.me/cvedetector/15593", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57774 - JFinalOA Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-57774 \nPublished : Jan. 16, 2025, 6:15 p.m. | 43\u00a0minutes ago \nDescription : A cross-site scripting (XSS) vulnerability in the getBusinessUploadListPage?busid interface of JFinalOA before v2025.01.01 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-16T20:24:44.000000Z"}, {"uuid": "7f9181a3-14e5-439b-8b63-6eb3a026678d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57012", "type": "seen", "source": "https://t.me/cvedetector/15504", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57012 - TOTOLINK X5000R Remote OS Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57012 \nPublished : Jan. 15, 2025, 5:15 p.m. | 39\u00a0minutes ago \nDescription : TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the \"week\" parameter in setScheduleCfg. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T19:19:01.000000Z"}, {"uuid": "c32a4d41-e863-47c1-895d-7f5f6fd58ae1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57011", "type": "seen", "source": "https://t.me/cvedetector/15503", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57011 - TOTOLINK X5000R OS Command Injection\", \n  \"Content\": \"CVE ID : CVE-2024-57011 \nPublished : Jan. 15, 2025, 5:15 p.m. | 39\u00a0minutes ago \nDescription : TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the \"minute\" parameters in setScheduleCfg. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T19:19:01.000000Z"}, {"uuid": "b970d0fb-c6d8-437a-80d9-d82cd3068ee5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57020", "type": "seen", "source": "https://t.me/cvedetector/15502", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57020 - TOTOLINK X5000R Wireless Router Command Injection\", \n  \"Content\": \"CVE ID : CVE-2024-57020 \nPublished : Jan. 15, 2025, 5:15 p.m. | 39\u00a0minutes ago \nDescription : TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the \"sMinute\" parameter in setWiFiScheduleCfg. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T19:19:00.000000Z"}, {"uuid": "5f83a53d-8d8c-47b4-b59b-e295aeda1719", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57019", "type": "seen", "source": "https://t.me/cvedetector/15501", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57019 - TOTOLINK X5000R OS Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57019 \nPublished : Jan. 15, 2025, 5:15 p.m. | 39\u00a0minutes ago \nDescription : TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the \"limit\" parameter in setVpnAccountCfg. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T19:18:56.000000Z"}, {"uuid": "f8b9b261-5489-4dbc-a506-f3b0f8971cd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57017", "type": "seen", "source": "https://t.me/cvedetector/15499", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57017 - TOTOLINK X5000R OS Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57017 \nPublished : Jan. 15, 2025, 5:15 p.m. | 39\u00a0minutes ago \nDescription : TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the \"pass\" parameter in setVpnAccountCfg. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T19:18:54.000000Z"}, {"uuid": "034ae5e4-6b1d-470e-bab9-0096fb780f07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57013", "type": "seen", "source": "https://t.me/cvedetector/15500", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57013 - TOTOLINK X5000R Remote OS Command Injection\", \n  \"Content\": \"CVE ID : CVE-2024-57013 \nPublished : Jan. 15, 2025, 5:15 p.m. | 39\u00a0minutes ago \nDescription : TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the \"switch\" parameter in setScheduleCfg. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T19:18:55.000000Z"}, {"uuid": "6a7a6bcc-b04d-421e-a0af-fc5876ab11a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57015", "type": "seen", "source": "https://t.me/cvedetector/15498", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57015 - TOTOLINK X5000R Remote Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57015 \nPublished : Jan. 15, 2025, 5:15 p.m. | 39\u00a0minutes ago \nDescription : TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the \"hour\" parameter in setScheduleCfg. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T19:18:53.000000Z"}, {"uuid": "b5819bb7-1b95-4ae8-a407-55a3a2f76046", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57016", "type": "seen", "source": "https://t.me/cvedetector/15497", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57016 - TOTOLINK X5000R OS Command Injection\", \n  \"Content\": \"CVE ID : CVE-2024-57016 \nPublished : Jan. 15, 2025, 5:15 p.m. | 39\u00a0minutes ago \nDescription : TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the \"user\" parameter in setVpnAccountCfg. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T19:18:52.000000Z"}, {"uuid": "9748bb49-9e32-4057-8d25-f3ead0f54855", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57014", "type": "seen", "source": "https://t.me/cvedetector/15496", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57014 - TOTOLINK X5000R Unauthenticated OS Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57014 \nPublished : Jan. 15, 2025, 5:15 p.m. | 39\u00a0minutes ago \nDescription : TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the \"recHour\" parameter in setScheduleCfg. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T19:18:50.000000Z"}, {"uuid": "59507d87-a575-4ce1-b2aa-ad3317280dfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57021", "type": "seen", "source": "https://t.me/cvedetector/15505", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57021 - TOTOLINK X5000R Router OS Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57021 \nPublished : Jan. 15, 2025, 5:15 p.m. | 39\u00a0minutes ago \nDescription : TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the \"eHour\" parameter in setWiFiScheduleCfg. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T19:19:02.000000Z"}, {"uuid": "b8330922-ebbb-40fe-8cee-1ff0bd667208", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57025", "type": "seen", "source": "https://t.me/cvedetector/15492", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57025 - TOTOLINK X5000R OS Command Injection\", \n  \"Content\": \"CVE ID : CVE-2024-57025 \nPublished : Jan. 15, 2025, 5:15 p.m. | 39\u00a0minutes ago \nDescription : TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the \"desc\" parameter in setWiFiScheduleCfg. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T19:18:47.000000Z"}, {"uuid": "b28d992f-9d3e-42b9-92e8-c86e62c83f1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57023", "type": "seen", "source": "https://t.me/cvedetector/15490", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57023 - TOTOLINK X5000R Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57023 \nPublished : Jan. 15, 2025, 5:15 p.m. | 39\u00a0minutes ago \nDescription : TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the \"week\" parameter in setWiFiScheduleCfg. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T19:18:42.000000Z"}, {"uuid": "222375f0-036c-4d30-95cd-e031a6d73abf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57024", "type": "seen", "source": "https://t.me/cvedetector/15491", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57024 - TOTOLINK X5000R OS Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57024 \nPublished : Jan. 15, 2025, 5:15 p.m. | 39\u00a0minutes ago \nDescription : TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the \"eMinute\" parameter in setWiFiScheduleCfg. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T19:18:43.000000Z"}, {"uuid": "b756298d-6840-44c3-89a4-ab2f1516392e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57886", "type": "seen", "source": "https://t.me/cvedetector/15461", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57886 - Linux Kernel DAMON Memory Leak Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57886 \nPublished : Jan. 15, 2025, 1:15 p.m. | 36\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nmm/damon/core: fix new damon_target objects leaks on damon_commit_targets()  \n  \nPatch series \"mm/damon/core: fix memory leaks and ignored inputs from  \ndamon_commit_ctx()\".  \n  \nDue to two bugs in damon_commit_targets() and damon_commit_schemes(),  \nwhich are called from damon_commit_ctx(), some user inputs can be ignored,  \nand some mmeory objects can be leaked.  Fix those.  \n  \nNote that only DAMON sysfs interface users are affected.  Other DAMON core  \nAPI user modules that more focused more on simple and dedicated production  \nusages, including DAMON_RECLAIM and DAMON_LRU_SORT are not using the buggy  \nfunction in the way, so not affected.  \n  \n  \nThis patch (of 2):  \n  \nWhen new DAMON targets are added via damon_commit_targets(), the newly  \ncreated targets are not deallocated when updating the internal data  \n(damon_commit_target()) is failed.  Worse yet, even if the setup is  \nsuccessfully done, the new target is not linked to the context.  Hence,  \nthe new targets are always leaked regardless of the internal data setup  \nfailure.  Fix the leaks. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T15:07:41.000000Z"}, {"uuid": "0a580e86-57a2-45ce-9148-48512a4e56bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57893", "type": "seen", "source": "https://t.me/cvedetector/15460", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57893 - ALSA OSS Linux Kernel Data Out-of-Bounds Access Vuln\", \n  \"Content\": \"CVE ID : CVE-2024-57893 \nPublished : Jan. 15, 2025, 1:15 p.m. | 36\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nALSA: seq: oss: Fix races at processing SysEx messages  \n  \nOSS sequencer handles the SysEx messages split in 6 bytes packets, and  \nALSA sequencer OSS layer tries to combine those.  It stores the data  \nin the internal buffer and this access is racy as of now, which may  \nlead to the out-of-bounds access.  \n  \nAs a temporary band-aid fix, introduce a mutex for serializing the  \nprocess of the SysEx message packets. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T15:07:40.000000Z"}, {"uuid": "2d98289e-52e7-4c90-af0a-5cfe6e8a9555", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57892", "type": "seen", "source": "https://t.me/cvedetector/15459", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57892 - Linux Kernel Ocfs2 Slab-Use-After-Free Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57892 \nPublished : Jan. 15, 2025, 1:15 p.m. | 36\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nocfs2: fix slab-use-after-free due to dangling pointer dqi_priv  \n  \nWhen mounting ocfs2 and then remounting it as read-only, a  \nslab-use-after-free occurs after the user uses a syscall to  \nquota_getnextquota.  Specifically, sb_dqinfo(sb, type)->dqi_priv is the  \ndangling pointer.  \n  \nDuring the remounting process, the pointer dqi_priv is freed but is never  \nset as null leaving it to be accessed.  Additionally, the read-only option  \nfor remounting sets the DQUOT_SUSPENDED flag instead of setting the  \nDQUOT_USAGE_ENABLED flags.  Moreover, later in the process of getting the  \nnext quota, the function ocfs2_get_next_id is called and only checks the  \nquota usage flags and not the quota suspended flags.  \n  \nTo fix this, I set dqi_priv to null when it is freed after remounting with  \nread-only and put a check for DQUOT_SUSPENDED in ocfs2_get_next_id.  \n  \n[akpm@linux-foundation.org: coding-style cleanups] \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T15:07:05.000000Z"}, {"uuid": "9955a59c-ec56-4175-bc9d-5b82b743bd25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57891", "type": "seen", "source": "https://t.me/cvedetector/15458", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57891 - Linux Kernel - Unpredictable IRQ Restoration Vulnerability in Sched Ext\", \n  \"Content\": \"CVE ID : CVE-2024-57891 \nPublished : Jan. 15, 2025, 1:15 p.m. | 36\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nsched_ext: Fix invalid irq restore in scx_ops_bypass()  \n  \nWhile adding outer irqsave/restore locking, 0e7ffff1b811 (\"scx: Fix raciness  \nin scx_ops_bypass()\") forgot to convert an inner rq_unlock_irqrestore() to  \nrq_unlock() which could re-enable IRQ prematurely leading to the following  \nwarning:  \n  \n  raw_local_irq_restore() called with IRQs enabled  \n  WARNING: CPU: 1 PID: 96 at kernel/locking/irqflag-debug.c:10 warn_bogus_irq_restore+0x30/0x40  \n  ...  \n  Sched_ext: create_dsq (enabling)  \n  pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)  \n  pc : warn_bogus_irq_restore+0x30/0x40  \n  lr : warn_bogus_irq_restore+0x30/0x40  \n  ...  \n  Call trace:  \n   warn_bogus_irq_restore+0x30/0x40 (P)  \n   warn_bogus_irq_restore+0x30/0x40 (L)  \n   scx_ops_bypass+0x224/0x3b8  \n   scx_ops_enable.isra.0+0x2c8/0xaa8  \n   bpf_scx_reg+0x18/0x30  \n  ...  \n  irq event stamp: 33739  \n  hardirqs last  enabled at (33739): [] scx_ops_bypass+0x174/0x3b8  \n  hardirqs last disabled at (33738): [] _raw_spin_lock_irqsave+0xb4/0xd8  \n  \nDrop the stray _irqrestore(). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T15:07:04.000000Z"}, {"uuid": "09cfc369-f77a-453e-b2fc-a46863638bee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57890", "type": "seen", "source": "https://t.me/cvedetector/15457", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57890 - Linux Kernel RDMA/uverbs Integer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57890 \nPublished : Jan. 15, 2025, 1:15 p.m. | 36\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nRDMA/uverbs: Prevent integer overflow issue  \n  \nIn the expression \"cmd.wqe_size * cmd.wr_count\", both variables are u32  \nvalues that come from the user so the multiplication can lead to integer  \nwrapping.  Then we pass the result to uverbs_request_next_ptr() which also  \ncould potentially wrap.  The \"cmd.sge_count * sizeof(struct ib_uverbs_sge)\"  \nmultiplication can also overflow on 32bit systems although it's fine on  \n64bit systems.  \n  \nThis patch does two things.  First, I've re-arranged the condition in  \nuverbs_request_next_ptr() so that the use controlled variable \"len\" is on  \none side of the comparison by itself without any math.  Then I've modified  \nall the callers to use size_mul() for the multiplications. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T15:07:04.000000Z"}, {"uuid": "fbe11701-ee4c-4122-99d9-1454fff41ebf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57888", "type": "seen", "source": "https://t.me/cvedetector/15456", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57888 - \"AMDGPU Workqueue Memory Reclaim False Positive Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-57888 \nPublished : Jan. 15, 2025, 1:15 p.m. | 36\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nworkqueue: Do not warn when cancelling WQ_MEM_RECLAIM work from !WQ_MEM_RECLAIM worker  \n  \nAfter commit  \n746ae46c1113 (\"drm/sched: Mark scheduler work queues with WQ_MEM_RECLAIM\")  \namdgpu started seeing the following warning:  \n  \n [ ] workqueue: WQ_MEM_RECLAIM sdma0:drm_sched_run_job_work [gpu_sched] is flushing !WQ_MEM_RECLAIM events:amdgpu_device_delay_enable_gfx_off [amdgpu]  \n...  \n [ ] Workqueue: sdma0 drm_sched_run_job_work [gpu_sched]  \n...  \n [ ] Call Trace:  \n [ ]    \n...  \n [ ]  ? check_flush_dependency+0xf5/0x110  \n...  \n [ ]  cancel_delayed_work_sync+0x6e/0x80  \n [ ]  amdgpu_gfx_off_ctrl+0xab/0x140 [amdgpu]  \n [ ]  amdgpu_ring_alloc+0x40/0x50 [amdgpu]  \n [ ]  amdgpu_ib_schedule+0xf4/0x810 [amdgpu]  \n [ ]  ? drm_sched_run_job_work+0x22c/0x430 [gpu_sched]  \n [ ]  amdgpu_job_run+0xaa/0x1f0 [amdgpu]  \n [ ]  drm_sched_run_job_work+0x257/0x430 [gpu_sched]  \n [ ]  process_one_work+0x217/0x720  \n...  \n [ ]    \n  \nThe intent of the verifcation done in check_flush_depedency is to ensure  \nforward progress during memory reclaim, by flagging cases when either a  \nmemory reclaim process, or a memory reclaim work item is flushed from a  \ncontext not marked as memory reclaim safe.  \n  \nThis is correct when flushing, but when called from the  \ncancel(_delayed)_work_sync() paths it is a false positive because work is  \neither already running, or will not be running at all. Therefore  \ncancelling it is safe and we can relax the warning criteria by letting the  \nhelper know of the calling context.  \n  \nReferences: 746ae46c1113 (\"drm/sched: Mark scheduler work queues with WQ_MEM_RECLAIM\") \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T15:07:03.000000Z"}, {"uuid": "1f6517a3-f69d-43cd-86ed-5f20440ee4e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57326", "type": "seen", "source": "https://t.me/cvedetector/16238", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57326 - Online Pizza Delivery System Reflected XSS\", \n  \"Content\": \"CVE ID : CVE-2024-57326 \nPublished : Jan. 23, 2025, 10:15 p.m. | 36\u00a0minutes ago \nDescription : A Reflected Cross-Site Scripting (XSS) vulnerability exists in the search.php file of the Online Pizza Delivery System 1.0. The vulnerability allows an attacker to execute arbitrary JavaScript code in the browser via unsanitized input passed through the search parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-24T00:10:16.000000Z"}, {"uuid": "09d9fc53-daf6-45f0-8eb5-5171ce6022b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57800", "type": "seen", "source": "https://t.me/cvedetector/15058", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57800 - ALSA DMA API Error Handling Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57800 \nPublished : Jan. 11, 2025, 1:15 p.m. | 35\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nALSA: memalloc: prefer dma_mapping_error() over explicit address checking  \n  \nWith CONFIG_DMA_API_DEBUG enabled, the following warning is observed:  \n  \nDMA-API: snd_hda_intel 0000:03:00.1: device driver failed to check map error[device address=0x00000000ffff0000] [size=20480 bytes] [mapped as single]  \nWARNING: CPU: 28 PID: 2255 at kernel/dma/debug.c:1036 check_unmap+0x1408/0x2430  \nCPU: 28 UID: 42 PID: 2255 Comm: wireplumber Tainted: G  W L  6.12.0-10-133577cad6bf48e5a7848c4338124081393bfe8a+ #759  \ndebug_dma_unmap_page+0xe9/0xf0  \nsnd_dma_wc_free+0x85/0x130 [snd_pcm]  \nsnd_pcm_lib_free_pages+0x1e3/0x440 [snd_pcm]  \nsnd_pcm_common_ioctl+0x1c9a/0x2960 [snd_pcm]  \nsnd_pcm_ioctl+0x6a/0xc0 [snd_pcm]  \n...  \n  \nCheck for returned DMA addresses using specialized dma_mapping_error()  \nhelper which is generally recommended for this purpose by  \nDocumentation/core-api/dma-api.rst. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-11T14:55:08.000000Z"}, {"uuid": "c76eba4f-7076-44d5-a7d0-37eb39f5f2c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57328", "type": "seen", "source": "https://t.me/cvedetector/16239", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57328 - \"Acme Online Food Ordering System SQL Injection\"\", \n  \"Content\": \"CVE ID : CVE-2024-57328 \nPublished : Jan. 23, 2025, 10:15 p.m. | 36\u00a0minutes ago \nDescription : A SQL Injection vulnerability exists in the login form of Online Food Ordering System v1.0. The vulnerability arises because the input fields username and password are not properly sanitized, allowing attackers to inject malicious SQL queries to bypass authentication and gain unauthorized access. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-24T00:10:20.000000Z"}, {"uuid": "7c9c6280-19af-489f-a91d-48dabc893b8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57719", "type": "seen", "source": "https://t.me/cvedetector/16150", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57719 - Lunasvg Segmentation Violation\", \n  \"Content\": \"CVE ID : CVE-2024-57719 \nPublished : Jan. 23, 2025, 1:15 a.m. | 38\u00a0minutes ago \nDescription : lunasvg v3.0.0 was discovered to contain a segmentation violation via the component blend_transformed_tiled_argb.isra.0. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-23T03:16:15.000000Z"}, {"uuid": "5d888da7-5fb7-43d3-a24c-8a2ef6b629b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57947", "type": "seen", "source": "https://t.me/cvedetector/16184", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57947 - Linux Kernel Netfilter Pipapo Pointer Leaking Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57947 \nPublished : Jan. 23, 2025, 2:15 p.m. | 31\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnetfilter: nf_set_pipapo: fix initial map fill  \n  \nThe initial buffer has to be inited to all-ones, but it must restrict  \nit to the size of the first field, not the total field size.  \n  \nAfter each round in the map search step, the result and the fill map  \nare swapped, so if we have a set where f->bsize of the first element  \nis smaller than m->bsize_max, those one-bits are leaked into future  \nrounds result map.  \n  \nThis makes pipapo find an incorrect matching results for sets where  \nfirst field size is not the largest.  \n  \nFollowup patch adds a test case to nft_concat_range.sh selftest script.  \n  \nThanks to Stefano Brivio for pointing out that we need to zero out  \nthe remainder explicitly, only correcting memset() argument isn't enough. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-23T15:48:22.000000Z"}, {"uuid": "0f4b6550-1628-4702-ad3b-5fee1c86cbee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57386", "type": "seen", "source": "https://t.me/cvedetector/16231", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57386 - Wallos Cross Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-57386 \nPublished : Jan. 23, 2025, 10:15 p.m. | 36\u00a0minutes ago \nDescription : Cross Site Scripting vulnerability in Wallos v.2.41.0 allows a remote attacker to execute arbitrary code via the profile picture function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-24T00:10:07.000000Z"}, {"uuid": "ab7d90a8-127b-4c87-8dc0-3e54d9c398bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57556", "type": "seen", "source": "https://t.me/cvedetector/16230", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57556 - \"nbubna Store Cross Site Scripting (XSS)\"\", \n  \"Content\": \"CVE ID : CVE-2024-57556 \nPublished : Jan. 23, 2025, 10:15 p.m. | 36\u00a0minutes ago \nDescription : Cross Site Scripting vulnerability in nbubna store v.2.14.2 and before allows a remote attacker to execute arbitrary code via the store.deep.js component \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-24T00:10:07.000000Z"}, {"uuid": "b4b8354e-c096-42b1-8cfd-47351fc0c88c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57329", "type": "seen", "source": "https://t.me/cvedetector/16229", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57329 - HortusFox Stored Cross-Site Scripting (XSS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57329 \nPublished : Jan. 23, 2025, 10:15 p.m. | 36\u00a0minutes ago \nDescription : HortusFox v3.9 contains a stored XSS vulnerability in the \"Add Plant\" function. The name input field does not sanitize or escape user inputs, allowing attackers to inject and execute arbitrary JavaScript payloads. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-24T00:10:06.000000Z"}, {"uuid": "bea4579b-d184-4a45-bea0-4b3bca66c5fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57722", "type": "seen", "source": "https://t.me/cvedetector/16146", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57722 - LunaSVG Plutovg Surface Create Allocation-Size-Too-Big Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57722 \nPublished : Jan. 23, 2025, 1:15 a.m. | 38\u00a0minutes ago \nDescription : lunasvg v3.0.0 was discovered to contain a allocation-size-too-big bug via the component plutovg_surface_create. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-23T03:16:13.000000Z"}, {"uuid": "d38cd736-84c1-4d93-a1a1-df2261919e9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57724", "type": "seen", "source": "https://t.me/cvedetector/16148", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57724 - Lunasvg Segmentation Violation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57724 \nPublished : Jan. 23, 2025, 1:15 a.m. | 38\u00a0minutes ago \nDescription : lunasvg v3.0.0 was discovered to contain a segmentation violation via the component gray_record_cell. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-23T03:16:14.000000Z"}, {"uuid": "7dfe3840-9293-43ed-9ebd-1734a6f311bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57723", "type": "seen", "source": "https://t.me/cvedetector/16147", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57723 - LunaSVG Format String Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57723 \nPublished : Jan. 23, 2025, 1:15 a.m. | 38\u00a0minutes ago \nDescription : lunasvg v3.0.0 was discovered to contain a segmentation violation via the component composition_source_over. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-23T03:16:13.000000Z"}, {"uuid": "14896bf3-5a9d-4633-b510-34efe2518edc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57721", "type": "seen", "source": "https://t.me/cvedetector/16152", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57721 - Adobe LunaSVG Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57721 \nPublished : Jan. 23, 2025, 1:15 a.m. | 38\u00a0minutes ago \nDescription : lunasvg v3.0.0 was discovered to contain a segmentation violation via the component plutovg_path_add_path. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-23T03:16:20.000000Z"}, {"uuid": "5fe4a387-0c8d-4e4e-83d2-22b8a35d8660", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57720", "type": "seen", "source": "https://t.me/cvedetector/16151", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57720 - Lunasvg Plutovg Blend Segmentation Violation xhr.connect\", \n  \"Content\": \"CVE ID : CVE-2024-57720 \nPublished : Jan. 23, 2025, 1:15 a.m. | 38\u00a0minutes ago \nDescription : lunasvg v3.0.0 was discovered to contain a segmentation violation via the component plutovg_blend. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-23T03:16:19.000000Z"}, {"uuid": "62f0d686-3944-49a1-b10f-f8bb3722b189", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57806", "type": "published-proof-of-concept", "source": "https://t.me/cvedetector/15059", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57806 - Linux BTRFS Invalid Simple Quota Flag Setting\", \n  \"Content\": \"CVE ID : CVE-2024-57806 \nPublished : Jan. 11, 2025, 1:15 p.m. | 35\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nbtrfs: fix transaction atomicity bug when enabling simple quotas  \n  \nSet squota incompat bit before committing the transaction that enables  \nthe feature.  \n  \nWith the config CONFIG_BTRFS_ASSERT enabled, an assertion  \nfailure occurs regarding the simple quota feature.  \n  \n  [5.596534] assertion failed: btrfs_fs_incompat(fs_info, SIMPLE_QUOTA), in fs/btrfs/qgroup.c:365  \n  [5.597098] ------------[ cut here ]------------  \n  [5.597371] kernel BUG at fs/btrfs/qgroup.c:365!  \n  [5.597946] CPU: 1 UID: 0 PID: 268 Comm: mount Not tainted 6.13.0-rc2-00031-gf92f4749861b #146  \n  [5.598450] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.2-debian-1.16.2-1 04/01/2014  \n  [5.599008] RIP: 0010:btrfs_read_qgroup_config+0x74d/0x7a0  \n  [5.604303]    \n  [5.605230]  ? btrfs_read_qgroup_config+0x74d/0x7a0  \n  [5.605538]  ? exc_invalid_op+0x56/0x70  \n  [5.605775]  ? btrfs_read_qgroup_config+0x74d/0x7a0  \n  [5.606066]  ? asm_exc_invalid_op+0x1f/0x30  \n  [5.606441]  ? btrfs_read_qgroup_config+0x74d/0x7a0  \n  [5.606741]  ? btrfs_read_qgroup_config+0x74d/0x7a0  \n  [5.607038]  ? try_to_wake_up+0x317/0x760  \n  [5.607286]  open_ctree+0xd9c/0x1710  \n  [5.607509]  btrfs_get_tree+0x58a/0x7e0  \n  [5.608002]  vfs_get_tree+0x2e/0x100  \n  [5.608224]  fc_mount+0x16/0x60  \n  [5.608420]  btrfs_get_tree+0x2f8/0x7e0  \n  [5.608897]  vfs_get_tree+0x2e/0x100  \n  [5.609121]  path_mount+0x4c8/0xbc0  \n  [5.609538]  __x64_sys_mount+0x10d/0x150  \n  \nThe issue can be easily reproduced using the following reproducer:  \n  \n  root@q:linux# cat repro.sh  \n  set -e  \n  \n  mkfs.btrfs -q -f /dev/sdb  \n  mount /dev/sdb /mnt/btrfs  \n  btrfs quota enable -s /mnt/btrfs  \n  umount /mnt/btrfs  \n  mount /dev/sdb /mnt/btrfs  \n  \nThe issue is that when enabling quotas, at btrfs_quota_enable(), we set  \nBTRFS_QGROUP_STATUS_FLAG_SIMPLE_MODE at fs_info->qgroup_flags and persist  \nit in the quota root in the item with the key BTRFS_QGROUP_STATUS_KEY, but  \nwe only set the incompat bit BTRFS_FEATURE_INCOMPAT_SIMPLE_QUOTA after we  \ncommit the transaction used to enable simple quotas.  \n  \nThis means that if after that transaction commit we unmount the filesystem  \nwithout starting and committing any other transaction, or we have a power  \nfailure, the next time we mount the filesystem we will find the flag  \nBTRFS_QGROUP_STATUS_FLAG_SIMPLE_MODE set in the item with the key  \nBTRFS_QGROUP_STATUS_KEY but we will not find the incompat bit  \nBTRFS_FEATURE_INCOMPAT_SIMPLE_QUOTA set in the superblock, triggering an  \nassertion failure at:  \n  \n  btrfs_read_qgroup_config() -> qgroup_read_enable_gen()  \n  \nTo fix this issue, set the BTRFS_FEATURE_INCOMPAT_SIMPLE_QUOTA flag  \nimmediately after setting the BTRFS_QGROUP_STATUS_FLAG_SIMPLE_MODE.  \nThis ensures that both flags are flushed to disk within the same  \ntransaction. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-11T14:55:09.000000Z"}, {"uuid": "3c6495be-228e-483f-afc3-42cddd20873e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57036", "type": "seen", "source": "https://t.me/cvedetector/15976", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57036 - TOTOLINK A810R Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57036 \nPublished : Jan. 21, 2025, 4:15 p.m. | 25\u00a0minutes ago \nDescription : TOTOLINK A810R V4.1.2cu.5032_B20200407 was found to contain a command insertion vulnerability in downloadFile.cgi main function. This vulnerability allows an attacker to execute arbitrary commands by sending HTTP request. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-21T17:48:28.000000Z"}, {"uuid": "778a75eb-f47b-42c8-9e96-a1274f1a3224", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57791", "type": "seen", "source": "https://t.me/cvedetector/15064", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57791 - Linux Kernel SMC Net Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2024-57791 \nPublished : Jan. 11, 2025, 1:15 p.m. | 35\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnet/smc: check return value of sock_recvmsg when draining clc data  \n  \nWhen receiving clc msg, the field length in smc_clc_msg_hdr indicates the  \nlength of msg should be received from network and the value should not be  \nfully trusted as it is from the network. Once the value of length exceeds  \nthe value of buflen in function smc_clc_wait_msg it may run into deadloop  \nwhen trying to drain the remaining data exceeding buflen.  \n  \nThis patch checks the return value of sock_recvmsg when draining data in  \ncase of deadloop in draining. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-11T14:55:16.000000Z"}, {"uuid": "8e16c688-c0b2-4d8b-a7c0-0ced8c94d4ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57807", "type": "seen", "source": "https://t.me/cvedetector/15062", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57807 - Linux Kernel; Possible Circular Locking Dependency Detected in MegaRAID SAS Driver\", \n  \"Content\": \"CVE ID : CVE-2024-57807 \nPublished : Jan. 11, 2025, 1:15 p.m. | 35\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nscsi: megaraid_sas: Fix for a potential deadlock  \n  \nThis fixes a 'possible circular locking dependency detected' warning  \n      CPU0                    CPU1  \n      ----                    ----  \n lock(&instance->reset_mutex);  \n                              lock(&shost->scan_mutex);  \n                              lock(&instance->reset_mutex);  \n lock(&shost->scan_mutex);  \n  \nFix this by temporarily releasing the reset_mutex. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-11T14:55:11.000000Z"}, {"uuid": "4371b5f6-9e6c-4314-b482-1acb0a9ef099", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57805", "type": "seen", "source": "https://t.me/cvedetector/15061", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57805 - Intel ASoC SOF hda-dai LinkDMA Release Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57805 \nPublished : Jan. 11, 2025, 1:15 p.m. | 35\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nASoC: SOF: Intel: hda-dai: Do not release the link DMA on STOP  \n  \nThe linkDMA should not be released on stop trigger since a stream re-start  \nmight happen without closing of the stream. This leaves a short time for  \nother streams to 'steal' the linkDMA since it has been released.  \n  \nThis issue is not easy to reproduce under normal conditions as usually  \nafter stop the stream is closed, or the same stream is restarted, but if  \nanother stream got in between the stop and start, like this:  \naplay -Dhw:0,3 -c2 -r48000 -fS32_LE /dev/zero -d 120  \nCTRL+z  \naplay -Dhw:0,0 -c2 -r48000 -fS32_LE /dev/zero -d 120  \n  \nthen the link DMA channels will be mixed up, resulting firmware error or  \ncrash. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-11T14:55:10.000000Z"}, {"uuid": "0344fa36-0bbe-4956-87e2-025f9849996b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57804", "type": "seen", "source": "https://t.me/cvedetector/15060", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57804 - Linux SCSIMPI3MR SAS Transport Sysfs Configuration Corruption\", \n  \"Content\": \"CVE ID : CVE-2024-57804 \nPublished : Jan. 11, 2025, 1:15 p.m. | 35\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nscsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs  \n  \nThe driver, through the SAS transport, exposes a sysfs interface to  \nenable/disable PHYs in a controller/expander setup.  When multiple PHYs  \nare disabled and enabled in rapid succession, the persistent and current  \nconfig pages related to SAS IO unit/SAS Expander pages could get  \ncorrupted.  \n  \nUse separate memory for each config request. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-11T14:55:10.000000Z"}, {"uuid": "546e60fa-2d68-4da8-b95b-3457c2191b77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57226", "type": "seen", "source": "https://t.me/cvedetector/14988", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57226 - Linksys E7350 Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57226 \nPublished : Jan. 10, 2025, 6:15 p.m. | 19\u00a0minutes ago \nDescription : Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the iface parameter in the vif_enable function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-10T19:41:30.000000Z"}, {"uuid": "3a060514-ce73-444d-a116-345e12ce550c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57225", "type": "seen", "source": "https://t.me/cvedetector/14987", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57225 - Linksys E7350 Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57225 \nPublished : Jan. 10, 2025, 6:15 p.m. | 19\u00a0minutes ago \nDescription : Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the devname parameter in the reset_wifi function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-10T19:41:30.000000Z"}, {"uuid": "1babed1a-bb2a-4ca4-a60e-718a4863f7e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57224", "type": "seen", "source": "https://t.me/cvedetector/14986", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57224 - Linksys E7350 Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57224 \nPublished : Jan. 10, 2025, 6:15 p.m. | 19\u00a0minutes ago \nDescription : Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_do_enr_pin_wps function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-10T19:41:26.000000Z"}, {"uuid": "8c82695b-e547-45b3-bd75-96a4e91b53f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57223", "type": "seen", "source": "https://t.me/cvedetector/14985", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57223 - Linksys E7350 WPS Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57223 \nPublished : Jan. 10, 2025, 6:15 p.m. | 19\u00a0minutes ago \nDescription : Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_wps_gen_pincode function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-10T19:41:25.000000Z"}, {"uuid": "76c01427-8a05-4db7-a3a3-cc72c74600c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57222", "type": "seen", "source": "https://t.me/cvedetector/14991", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57222 - Linksys E7350 Router Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57222 \nPublished : Jan. 10, 2025, 6:15 p.m. | 19\u00a0minutes ago \nDescription : Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_cancel_wps function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-10T19:41:33.000000Z"}, {"uuid": "7fbad20c-7082-4c99-bd3c-f1d75040378b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57228", "type": "seen", "source": "https://t.me/cvedetector/14990", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57228 - Linksys E7350 Remote Command Injection\", \n  \"Content\": \"CVE ID : CVE-2024-57228 \nPublished : Jan. 10, 2025, 6:15 p.m. | 19\u00a0minutes ago \nDescription : Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the iface parameter in the vif_disable function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-10T19:41:32.000000Z"}, {"uuid": "85253cb8-3851-4717-a131-7eabf54a5f21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57227", "type": "seen", "source": "https://t.me/cvedetector/14989", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57227 - Linksys E7350 Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57227 \nPublished : Jan. 10, 2025, 6:15 p.m. | 19\u00a0minutes ago \nDescription : Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_do_enr_pbc_wps function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-10T19:41:31.000000Z"}, {"uuid": "6aec4f5e-b411-4160-b1c8-1230a74d0a7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57822", "type": "seen", "source": "https://t.me/cvedetector/14955", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57822 - Raptor RDF Syntax Library Heap-Based Buffer Over-Read Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57822 \nPublished : Jan. 10, 2025, 1:15 p.m. | 16\u00a0minutes ago \nDescription : In Raptor RDF Syntax Library through 2.0.16, there is a heap-based buffer over-read when parsing triples with the nquads parser in raptor_ntriples_parse_term_internal(). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-10T14:40:13.000000Z"}, {"uuid": "e8407967-7510-4e78-bb6c-f07b4896d93c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57823", "type": "seen", "source": "https://t.me/cvedetector/14954", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57823 - Raptor Turtle Parser Integer Underflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57823 \nPublished : Jan. 10, 2025, 1:15 p.m. | 16\u00a0minutes ago \nDescription : In Raptor RDF Syntax Library through 2.0.16, there is an integer underflow when normalizing a URI with the turtle parser in raptor_uri_normalize_path(). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-10T14:40:13.000000Z"}, {"uuid": "74d2bc0e-689b-43be-814a-85b235ccf7cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57212", "type": "seen", "source": "https://t.me/cvedetector/14980", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57212 - TOTOLINK A6000R Router Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57212 \nPublished : Jan. 10, 2025, 5:15 p.m. | 28\u00a0minutes ago \nDescription : TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the opmode parameter in the action_reboot function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-10T18:51:14.000000Z"}, {"uuid": "bea8bd21-b312-4e68-b54c-23d00edaaab1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57211", "type": "seen", "source": "https://t.me/cvedetector/14979", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57211 - TOTOLINK A6000R Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57211 \nPublished : Jan. 10, 2025, 5:15 p.m. | 28\u00a0minutes ago \nDescription : TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the modifyOne parameter in the enable_wsh function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-10T18:51:13.000000Z"}, {"uuid": "2793f26e-8669-4deb-bd0e-bbb01e2c5d58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57213", "type": "seen", "source": "https://t.me/cvedetector/14975", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57213 - TOTOLINK A6000R Stored Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57213 \nPublished : Jan. 10, 2025, 5:15 p.m. | 28\u00a0minutes ago \nDescription : TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the newpasswd parameter in the action_passwd function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-10T18:51:07.000000Z"}, {"uuid": "4286ccd5-1f45-4c37-8c0a-7b98dcf99d7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57214", "type": "seen", "source": "https://t.me/cvedetector/14974", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57214 - TOTOLINK A6000R Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57214 \nPublished : Jan. 10, 2025, 5:15 p.m. | 28\u00a0minutes ago \nDescription : TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the devname parameter in the reset_wifi function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-10T18:51:07.000000Z"}, {"uuid": "d8fc6d40-369a-4bb2-a928-7b62d6671ce2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57686", "type": "seen", "source": "https://t.me/cvedetector/14956", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57686 - PHPGurukul Land Record System Cross Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57686 \nPublished : Jan. 10, 2025, 2:15 p.m. | 35\u00a0minutes ago \nDescription : A Cross Site Scripting (XSS) vulnerability was found in /landrecordsys/admin/contactus.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the \"pagetitle\" parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-10T16:20:24.000000Z"}, {"uuid": "10a1b972-d5f4-4635-a619-a9f906e8b525", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57687", "type": "seen", "source": "https://t.me/cvedetector/14957", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57687 - PHPGurukul Land Record System OS Command Injection\", \n  \"Content\": \"CVE ID : CVE-2024-57687 \nPublished : Jan. 10, 2025, 2:15 p.m. | 35\u00a0minutes ago \nDescription : An OS Command Injection vulnerability was found in /landrecordsys/admin/dashboard.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the \"Cookie\" GET request parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-10T16:20:25.000000Z"}, {"uuid": "e31f6dfe-1141-491d-b6d4-2c87c9b9c2ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5769", "type": "seen", "source": "https://t.me/cvedetector/14827", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5769 - \"Wordpress MIMO Woocommerce Order Tracking Plugin Unauthorized Data Modification Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-5769 \nPublished : Jan. 9, 2025, 11:15 a.m. | 22\u00a0minutes ago \nDescription : The MIMO Woocommerce Order Tracking plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several functions in all versions up to, and including, 1.0.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to add, update, and delete shipper tracking settings. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T12:44:36.000000Z"}, {"uuid": "16269a14-68b2-4102-9e02-2af0e6d0bff6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57838", "type": "seen", "source": "https://t.me/cvedetector/15080", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57838 - IBM zSeries s390 Linux Kernel Stack Depot Stack Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57838 \nPublished : Jan. 11, 2025, 2:15 p.m. | 25\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ns390/entry: Mark IRQ entries to fix stack depot warnings  \n  \nThe stack depot filters out everything outside of the top interrupt  \ncontext as an uninteresting or irrelevant part of the stack traces. This  \nhelps with stack trace de-duplication, avoiding an explosion of saved  \nstack traces that share the same IRQ context code path but originate  \nfrom different randomly interrupted points, eventually exhausting the  \nstack depot.  \n  \nFiltering uses in_irqentry_text() to identify functions within the  \n.irqentry.text and .softirqentry.text sections, which then become the  \nlast stack trace entries being saved.  \n  \nWhile __do_softirq() is placed into the .softirqentry.text section by  \ncommon code, populating .irqentry.text is architecture-specific.  \n  \nCurrently, the .irqentry.text section on s390 is empty, which prevents  \nstack depot filtering and de-duplication and could result in warnings  \nlike:  \n  \nStack depot reached limit capacity  \nWARNING: CPU: 0 PID: 286113 at lib/stackdepot.c:252 depot_alloc_stack+0x39a/0x3c8  \n  \nwith PREEMPT and KASAN enabled.  \n  \nFix this by moving the IO/EXT interrupt handlers from .kprobes.text into  \nthe .irqentry.text section and updating the kprobes blacklist to include  \nthe .irqentry.text section.  \n  \nThis is done only for asynchronous interrupts and explicitly not for  \nprogram checks, which are synchronous and where the context beyond the  \nprogram check is important to preserve. Despite machine checks being  \nsomewhat in between, they are extremely rare, and preserving context  \nwhen possible is also of value.  \n  \nSVCs and Restart Interrupts are not relevant, one being always at the  \nboundary to user space and the other being a one-time thing.  \n  \nIRQ entries filtering is also optionally used in ftrace function graph,  \nwhere the same logic applies. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-11T15:46:15.000000Z"}, {"uuid": "f5c35b4e-13cc-4914-9cb4-e51b79752e19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57487", "type": "seen", "source": "https://t.me/cvedetector/15159", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57487 - \"Code-Projects Online Car Rental File Upload Code Execution Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-57487 \nPublished : Jan. 13, 2025, 5:15 p.m. | 20\u00a0minutes ago \nDescription : In Code-Projects Online Car Rental System 1.0, the file upload feature does not validate file extensions or MIME types allowing an attacker to upload a PHP shell without any restrictions and execute commands on the server. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-13T18:45:00.000000Z"}, {"uuid": "e05cd1ae-10a6-47b2-8382-459e813ef844", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57875", "type": "seen", "source": "https://t.me/cvedetector/15094", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57875 - Linux kernel Drupal Uninitialized Pointer\", \n  \"Content\": \"CVE ID : CVE-2024-57875 \nPublished : Jan. 11, 2025, 3:15 p.m. | 42\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nblock: RCU protect disk->conv_zones_bitmap  \n  \nEnsure that a disk revalidation changing the conventional zones bitmap  \nof a disk does not cause invalid memory references when using the  \ndisk_zone_is_conv() helper by RCU protecting the disk->conv_zones_bitmap  \npointer.  \n  \ndisk_zone_is_conv() is modified to operate under the RCU read lock and  \nthe function disk_set_conv_zones_bitmap() is added to update a disk  \nconv_zones_bitmap pointer using rcu_replace_pointer() with the disk  \nzone_wplugs_lock spinlock held.  \n  \ndisk_free_zone_resources() is modified to call  \ndisk_update_zone_resources() with a NULL bitmap pointer to free the disk  \nconv_zones_bitmap. disk_set_conv_zones_bitmap() is also used in  \ndisk_update_zone_resources() to set the new (revalidated) bitmap and  \nfree the old one. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-11T17:26:42.000000Z"}, {"uuid": "2df216b9-c54a-4ded-a5f7-a107ecbb9e89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57874", "type": "seen", "source": "https://t.me/cvedetector/15093", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57874 - Linux Kernel Arm64 CPU Address Control Information Leak Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57874 \nPublished : Jan. 11, 2025, 3:15 p.m. | 42\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \narm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL  \n  \nCurrently tagged_addr_ctrl_set() doesn't initialize the temporary 'ctrl'  \nvariable, and a SETREGSET call with a length of zero will leave this  \nuninitialized. Consequently tagged_addr_ctrl_set() will consume an  \narbitrary value, potentially leaking up to 64 bits of memory from the  \nkernel stack. The read is limited to a specific slot on the stack, and  \nthe issue does not provide a write mechanism.  \n  \nAs set_tagged_addr_ctrl() only accepts values where bits [63:4] zero and  \nrejects other values, a partial SETREGSET attempt will randomly succeed  \nor fail depending on the value of the uninitialized value, and the  \nexposure is significantly limited.  \n  \nFix this by initializing the temporary value before copying the regset  \nfrom userspace, as for other regsets (e.g. NT_PRSTATUS, NT_PRFPREG,  \nNT_ARM_SYSTEM_CALL). In the case of a zero-length write, the existing  \nvalue of the tagged address ctrl will be retained.  \n  \nThe NT_ARM_TAGGED_ADDR_CTRL regset is only visible in the  \nuser_aarch64_view used by a native AArch64 task to manipulate another  \nnative AArch64 task. As get_tagged_addr_ctrl() only returns an error  \nvalue when called for a compat task, tagged_addr_ctrl_get() and  \ntagged_addr_ctrl_set() should never observe an error value from  \nget_tagged_addr_ctrl(). Add a WARN_ON_ONCE() to both to indicate that  \nsuch an error would be unexpected, and error handlnig is not missing in  \neither case. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-11T17:26:41.000000Z"}, {"uuid": "a3a201b8-23f9-4a98-ba2b-5ea996f5dd49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57850", "type": "seen", "source": "https://t.me/cvedetector/15092", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57850 - Linux JFFS2 Memory Corruption (Bounds Error) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57850 \nPublished : Jan. 11, 2025, 3:15 p.m. | 42\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \njffs2: Prevent rtime decompress memory corruption  \n  \nThe rtime decompression routine does not fully check bounds during the  \nentirety of the decompression pass and can corrupt memory outside the  \ndecompression buffer if the compressed data is corrupted. This adds the  \nrequired check to prevent this failure mode. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-11T17:26:40.000000Z"}, {"uuid": "23ef8d8f-04e8-4416-afaa-d717204c0467", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57849", "type": "seen", "source": "https://t.me/cvedetector/15091", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57849 - \"IBM s390 cpu hotplug sample buffer use after free vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-57849 \nPublished : Jan. 11, 2025, 3:15 p.m. | 42\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ns390/cpum_sf: Handle CPU hotplug remove during sampling  \n  \nCPU hotplug remove handling triggers the following function  \ncall sequence:  \n  \n   CPUHP_AP_PERF_S390_SF_ONLINE  --> s390_pmu_sf_offline_cpu()  \n   ...  \n   CPUHP_AP_PERF_ONLINE          --> perf_event_exit_cpu()  \n  \nThe s390 CPUMF sampling CPU hotplug handler invokes:  \n  \n s390_pmu_sf_offline_cpu()  \n +-->  cpusf_pmu_setup()  \n       +--> setup_pmc_cpu()  \n            +--> deallocate_buffers()  \n  \nThis function de-allocates all sampling data buffers (SDBs) allocated  \nfor that CPU at event initialization. It also clears the  \nPMU_F_RESERVED bit. The CPU is gone and can not be sampled.  \n  \nWith the event still being active on the removed CPU, the CPU event  \nhotplug support in kernel performance subsystem triggers the  \nfollowing function calls on the removed CPU:  \n  \n  perf_event_exit_cpu()  \n  +--> perf_event_exit_cpu_context()  \n       +--> __perf_event_exit_context()  \n     +--> __perf_remove_from_context()  \n          +--> event_sched_out()  \n               +--> cpumsf_pmu_del()  \n                    +--> cpumsf_pmu_stop()  \n                                +--> hw_perf_event_update()  \n  \nto stop and remove the event. During removal of the event, the  \nsampling device driver tries to read out the remaining samples from  \nthe sample data buffers (SDBs). But they have already been freed  \n(and may have been re-assigned). This may lead to a use after free  \nsituation in which case the samples are most likely invalid. In the  \nbest case the memory has not been reassigned and still contains  \nvalid data.  \n  \nRemedy this situation and check if the CPU is still in reserved  \nstate (bit PMU_F_RESERVED set). In this case the SDBs have not been  \nreleased an contain valid data. This is always the case when  \nthe event is removed (and no CPU hotplug off occured).  \nIf the PMU_F_RESERVED bit is not set, the SDB buffers are gone. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-11T17:26:39.000000Z"}, {"uuid": "ad589137-30b9-46f0-8694-129500a3f123", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57843", "type": "seen", "source": "https://t.me/cvedetector/15090", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57843 - \"VMware virtio-net Buffer Overflow Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-57843 \nPublished : Jan. 11, 2025, 3:15 p.m. | 42\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nvirtio-net: fix overflow inside virtnet_rq_alloc  \n  \nWhen the frag just got a page, then may lead to regression on VM.  \nSpecially if the sysctl net.core.high_order_alloc_disable value is 1,  \nthen the frag always get a page when do refill.  \n  \nWhich could see reliable crashes or scp failure (scp a file 100M in size  \nto VM).  \n  \nThe issue is that the virtnet_rq_dma takes up 16 bytes at the beginning  \nof a new frag. When the frag size is larger than PAGE_SIZE,  \neverything is fine. However, if the frag is only one page and the  \ntotal size of the buffer and virtnet_rq_dma is larger than one page, an  \noverflow may occur.  \n  \nThe commit f9dac92ba908 (\"virtio_ring: enable premapped mode whatever  \nuse_dma_api\") introduced this problem. And we reverted some commits to  \nfix this in last linux version. Now we try to enable it and fix this  \nbug directly.  \n  \nHere, when the frag size is not enough, we reduce the buffer len to fix  \nthis problem. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-11T17:26:35.000000Z"}, {"uuid": "1888a73b-3b22-4869-8501-d9fe45f9e222", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57663", "type": "seen", "source": "https://t.me/cvedetector/15226", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57663 - Virtuoso OpenLink SQLg_place_dpipes SQL Injection Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2024-57663 \nPublished : Jan. 14, 2025, 1:15 a.m. | 37\u00a0minutes ago \nDescription : An issue in the sqlg_place_dpipes component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-14T03:07:31.000000Z"}, {"uuid": "dcdf0ef7-b4dc-4007-8ff5-28b41f250a3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57811", "type": "seen", "source": "https://t.me/cvedetector/15189", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57811 - Eaton X303 SSH Default Root Password Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57811 \nPublished : Jan. 13, 2025, 10:15 p.m. | 25\u00a0minutes ago \nDescription : In Eaton X303 3.5.16 - X303 3.5.17 Build 712, an attacker with network access to a XC-303 PLC can login as root over SSH. The root password is hardcoded in the firmware. NOTE: This vulnerability appears in versions that are no longer supported by Eaton. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-13T23:46:21.000000Z"}, {"uuid": "ec22ad64-68b0-450f-b298-4c8ea0daebdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5743", "type": "seen", "source": "https://t.me/cvedetector/15164", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5743 - EveHome Eve Play Preimage Attack Giving RCE\", \n  \"Content\": \"CVE ID : CVE-2024-5743 \nPublished : Jan. 13, 2025, 6:15 p.m. | 43\u00a0minutes ago \nDescription : An attacker could exploit the 'Use of Password Hash With Insufficient Computational Effort' vulnerability in EveHome Eve Play to execute arbitrary code.  \n  \nThis issue affects Eve Play: through 1.1.42. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-13T20:25:21.000000Z"}, {"uuid": "e27b428c-1e0a-408b-8f89-eb91e4ce94cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57488", "type": "seen", "source": "https://t.me/cvedetector/15158", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57488 - Code-Projects Online Car Rental System Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-57488 \nPublished : Jan. 13, 2025, 5:15 p.m. | 20\u00a0minutes ago \nDescription : Code-Projects Online Car Rental System 1.0 is vulnerable to Cross Site Scripting (XSS) via the vehicalorcview parameter in /admin/edit-vehicle.php. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-13T18:44:59.000000Z"}, {"uuid": "0d8d4d49-0a1c-4076-9188-0c7d805f0963", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57798", "type": "seen", "source": "https://t.me/cvedetector/15067", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57798 - Linux Kernel: intel drm_dp_mst Use After Free Vuln\", \n  \"Content\": \"CVE ID : CVE-2024-57798 \nPublished : Jan. 11, 2025, 1:15 p.m. | 35\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ndrm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req()  \n  \nWhile receiving an MST up request message from one thread in  \ndrm_dp_mst_handle_up_req(), the MST topology could be removed from  \nanother thread via drm_dp_mst_topology_mgr_set_mst(false), freeing  \nmst_primary and setting drm_dp_mst_topology_mgr::mst_primary to NULL.  \nThis could lead to a NULL deref/use-after-free of mst_primary in  \ndrm_dp_mst_handle_up_req().  \n  \nAvoid the above by holding a reference for mst_primary in  \ndrm_dp_mst_handle_up_req() while it's used.  \n  \nv2: Fix kfreeing the request if getting an mst_primary reference fails. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-11T14:55:18.000000Z"}, {"uuid": "fa601b1b-694e-4207-9ac0-cad9adf3c7e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57793", "type": "seen", "source": "https://t.me/cvedetector/15066", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57793 - \"Red Hat Linux Virtfs Memory Leak Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-57793 \nPublished : Jan. 11, 2025, 1:15 p.m. | 35\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nvirt: tdx-guest: Just leak decrypted memory on unrecoverable errors  \n  \nIn CoCo VMs it is possible for the untrusted host to cause  \nset_memory_decrypted() to fail such that an error is returned  \nand the resulting memory is shared. Callers need to take care  \nto handle these errors to avoid returning decrypted (shared)  \nmemory to the page allocator, which could lead to functional  \nor security issues.  \n  \nLeak the decrypted memory when set_memory_decrypted() fails,  \nand don't need to print an error since set_memory_decrypted()  \nwill call WARN_ONCE(). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-11T14:55:17.000000Z"}, {"uuid": "fa18ebde-fa34-40e9-a791-9e7f63226659", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57792", "type": "seen", "source": "https://t.me/cvedetector/15065", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57792 - Linux Power Supply GPIO Charger Out-of-Bounds Write Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2024-57792 \nPublished : Jan. 11, 2025, 1:15 p.m. | 35\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \npower: supply: gpio-charger: Fix set charge current limits  \n  \nFix set charge current limits for devices which allow to set the lowest  \ncharge current limit to be greater zero. If requested charge current limit  \nis below lowest limit, the index equals current_limit_map_size which leads  \nto accessing memory beyond allocated memory. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-11T14:55:17.000000Z"}, {"uuid": "f597b3a9-93ee-4ca5-8f2b-2470102b720c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57799", "type": "seen", "source": "https://t.me/cvedetector/15068", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57799 - Samsung Rockchip Linux Kernel Null Pointer Dereference Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57799 \nPublished : Jan. 11, 2025, 1:15 p.m. | 35\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nphy: rockchip: samsung-hdptx: Set drvdata before enabling runtime PM  \n  \nIn some cases, rk_hdptx_phy_runtime_resume() may be invoked before  \nplatform_set_drvdata() is executed in ->probe(), leading to a NULL  \npointer dereference when using the return of dev_get_drvdata().  \n  \nEnsure platform_set_drvdata() is called before devm_pm_runtime_enable(). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-11T14:55:22.000000Z"}, {"uuid": "79ea1a42-b2de-493a-b4a9-056874717eec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57881", "type": "seen", "source": "https://t.me/cvedetector/15098", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57881 - Linux Kernel \"pfn_to_page\" NULL Pointer Dereference Vulnerability in Buddy Allocator\", \n  \"Content\": \"CVE ID : CVE-2024-57881 \nPublished : Jan. 11, 2025, 4:15 p.m. | 42\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nmm/page_alloc: don't call pfn_to_page() on possibly non-existent PFN in split_large_buddy()  \n  \nIn split_large_buddy(), we might call pfn_to_page() on a PFN that might  \nnot exist.  In corner cases, such as when freeing the highest pageblock in  \nthe last memory section, this could result with CONFIG_SPARSEMEM &&  \n!CONFIG_SPARSEMEM_EXTREME in __pfn_to_section() returning NULL and and  \n__section_mem_map_addr() dereferencing that NULL pointer.  \n  \nLet's fix it, and avoid doing a pfn_to_page() call for the first  \niteration, where we already have the page.  \n  \nSo far this was found by code inspection, but let's just CC stable as the  \nfix is easy. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-11T18:16:56.000000Z"}, {"uuid": "516b96cd-f55d-49ab-870a-16b39a6ebce5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57872", "type": "seen", "source": "https://t.me/cvedetector/15097", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57872 - \"ufs UFS Dellocate HBA Memory Leak Vulnerability in SCSI Linux Kernel\"\", \n  \"Content\": \"CVE ID : CVE-2024-57872 \nPublished : Jan. 11, 2025, 3:15 p.m. | 42\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nscsi: ufs: pltfrm: Dellocate HBA during ufshcd_pltfrm_remove()  \n  \nThis will ensure that the scsi host is cleaned up properly using  \nscsi_host_dev_release(). Otherwise, it may lead to memory leaks. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-11T17:26:47.000000Z"}, {"uuid": "127bffd4-e2b3-4952-b4a4-60ec18e74223", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57839", "type": "seen", "source": "https://t.me/cvedetector/15096", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57839 - NFS Linux Kernel Readahead Hang Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57839 \nPublished : Jan. 11, 2025, 3:15 p.m. | 42\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nRevert \"readahead: properly shorten readahead when falling back to do_page_cache_ra()\"  \n  \nThis reverts commit 7c877586da3178974a8a94577b6045a48377ff25.  \n  \nAnders and Philippe have reported that recent kernels occasionally hang  \nwhen used with NFS in readahead code.  The problem has been bisected to  \n7c877586da3 (\"readahead: properly shorten readahead when falling back to  \ndo_page_cache_ra()\").  The cause of the problem is that ra->size can be  \nshrunk by read_pages() call and subsequently we end up calling  \ndo_page_cache_ra() with negative (read huge positive) number of pages.   \nLet's revert 7c877586da3 for now until we can find a proper way how the  \nlogic in read_pages() and page_cache_ra_order() can coexist.  This can  \nlead to reduced readahead throughput due to readahead window confusion but  \nthat's better than outright hangs. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-11T17:26:46.000000Z"}, {"uuid": "31f63c6d-86d9-4e66-9882-3b25f1aa3c9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57876", "type": "seen", "source": "https://t.me/cvedetector/15095", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57876 - Linux Kernel DRM DP MST Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57876 \nPublished : Jan. 11, 2025, 3:15 p.m. | 42\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ndrm/dp_mst: Fix resetting msg rx state after topology removal  \n  \nIf the MST topology is removed during the reception of an MST down reply  \nor MST up request sideband message, the  \ndrm_dp_mst_topology_mgr::up_req_recv/down_rep_recv states could be reset  \nfrom one thread via drm_dp_mst_topology_mgr_set_mst(false), racing with  \nthe reading/parsing of the message from another thread via  \ndrm_dp_mst_handle_down_rep() or drm_dp_mst_handle_up_req(). The race is  \npossible since the reader/parser doesn't hold any lock while accessing  \nthe reception state. This in turn can lead to a memory corruption in the  \nreader/parser as described by commit bd2fccac61b4 (\"drm/dp_mst: Fix MST  \nsideband message body length check\").  \n  \nFix the above by resetting the message reception state if needed before  \nreading/parsing a message. Another solution would be to hold the  \ndrm_dp_mst_topology_mgr::lock for the whole duration of the message  \nreception/parsing in drm_dp_mst_handle_down_rep() and  \ndrm_dp_mst_handle_up_req(), however this would require a bigger change.  \nSince the fix is also needed for stable, opting for the simpler solution  \nin this patch. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-11T17:26:43.000000Z"}, {"uuid": "44b6359f-bfe9-449e-9a95-768762c56ae3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57880", "type": "seen", "source": "https://t.me/cvedetector/15088", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57880 - Intel ASoC SOF SDW Array Index Out-of-Bounds Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57880 \nPublished : Jan. 11, 2025, 3:15 p.m. | 42\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nASoC: Intel: sof_sdw: Add space for a terminator into DAIs array  \n  \nThe code uses the initialised member of the asoc_sdw_dailink struct to  \ndetermine if a member of the array is in use. However in the case the  \narray is completely full this will lead to an access 1 past the end of  \nthe array, expand the array by one entry to include a space for a  \nterminator. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-11T17:26:34.000000Z"}, {"uuid": "d1b32453-170c-43c5-abbb-b20238747800", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57879", "type": "seen", "source": "https://t.me/cvedetector/15087", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57879 - Qualcomm Bluetooth Linux Module - Resource Leaking Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57879 \nPublished : Jan. 11, 2025, 3:15 p.m. | 42\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nBluetooth: iso: Always release hdev at the end of iso_listen_bis  \n  \nSince hci_get_route holds the device before returning, the hdev  \nshould be released with hci_dev_put at the end of iso_listen_bis  \neven if the function returns with an error. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-11T17:26:33.000000Z"}, {"uuid": "e0acdd48-caa9-46a8-b52c-6fc90f0611b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57878", "type": "seen", "source": "https://t.me/cvedetector/15086", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57878 - Linux Kernel Arm64 Ptrace FPMR Initialization Leak\", \n  \"Content\": \"CVE ID : CVE-2024-57878 \nPublished : Jan. 11, 2025, 3:15 p.m. | 42\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \narm64: ptrace: fix partial SETREGSET for NT_ARM_FPMR  \n  \nCurrently fpmr_set() doesn't initialize the temporary 'fpmr' variable,  \nand a SETREGSET call with a length of zero will leave this  \nuninitialized. Consequently an arbitrary value will be written back to  \ntarget->thread.uw.fpmr, potentially leaking up to 64 bits of memory from  \nthe kernel stack. The read is limited to a specific slot on the stack,  \nand the issue does not provide a write mechanism.  \n  \nFix this by initializing the temporary value before copying the regset  \nfrom userspace, as for other regsets (e.g. NT_PRSTATUS, NT_PRFPREG,  \nNT_ARM_SYSTEM_CALL). In the case of a zero-length write, the existing  \ncontents of FPMR will be retained.  \n  \nBefore this patch:  \n  \n| # ./fpmr-test  \n| Attempting to write NT_ARM_FPMR::fpmr = 0x900d900d900d900d  \n| SETREGSET(nt=0x40e, len=8) wrote 8 bytes  \n|  \n| Attempting to read NT_ARM_FPMR::fpmr  \n| GETREGSET(nt=0x40e, len=8) read 8 bytes  \n| Read NT_ARM_FPMR::fpmr = 0x900d900d900d900d  \n|  \n| Attempting to write NT_ARM_FPMR (zero length)  \n| SETREGSET(nt=0x40e, len=0) wrote 0 bytes  \n|  \n| Attempting to read NT_ARM_FPMR::fpmr  \n| GETREGSET(nt=0x40e, len=8) read 8 bytes  \n| Read NT_ARM_FPMR::fpmr = 0xffff800083963d50  \n  \nAfter this patch:  \n  \n| # ./fpmr-test  \n| Attempting to write NT_ARM_FPMR::fpmr = 0x900d900d900d900d  \n| SETREGSET(nt=0x40e, len=8) wrote 8 bytes  \n|  \n| Attempting to read NT_ARM_FPMR::fpmr  \n| GETREGSET(nt=0x40e, len=8) read 8 bytes  \n| Read NT_ARM_FPMR::fpmr = 0x900d900d900d900d  \n|  \n| Attempting to write NT_ARM_FPMR (zero length)  \n| SETREGSET(nt=0x40e, len=0) wrote 0 bytes  \n|  \n| Attempting to read NT_ARM_FPMR::fpmr  \n| GETREGSET(nt=0x40e, len=8) read 8 bytes  \n| Read NT_ARM_FPMR::fpmr = 0x900d900d900d900d \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-11T17:26:32.000000Z"}, {"uuid": "b6821faa-23fa-42d6-8808-634c8cf40d44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57877", "type": "seen", "source": "https://t.me/cvedetector/15085", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57877 - Linux Kernel arm64: ptrace: POR_EL0 Information Leak\", \n  \"Content\": \"CVE ID : CVE-2024-57877 \nPublished : Jan. 11, 2025, 3:15 p.m. | 42\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \narm64: ptrace: fix partial SETREGSET for NT_ARM_POE  \n  \nCurrently poe_set() doesn't initialize the temporary 'ctrl' variable,  \nand a SETREGSET call with a length of zero will leave this  \nuninitialized. Consequently an arbitrary value will be written back to  \ntarget->thread.por_el0, potentially leaking up to 64 bits of memory from  \nthe kernel stack. The read is limited to a specific slot on the stack,  \nand the issue does not provide a write mechanism.  \n  \nFix this by initializing the temporary value before copying the regset  \nfrom userspace, as for other regsets (e.g. NT_PRSTATUS, NT_PRFPREG,  \nNT_ARM_SYSTEM_CALL). In the case of a zero-length write, the existing  \ncontents of POR_EL1 will be retained.  \n  \nBefore this patch:  \n  \n| # ./poe-test  \n| Attempting to write NT_ARM_POE::por_el0 = 0x900d900d900d900d  \n| SETREGSET(nt=0x40f, len=8) wrote 8 bytes  \n|  \n| Attempting to read NT_ARM_POE::por_el0  \n| GETREGSET(nt=0x40f, len=8) read 8 bytes  \n| Read NT_ARM_POE::por_el0 = 0x900d900d900d900d  \n|  \n| Attempting to write NT_ARM_POE (zero length)  \n| SETREGSET(nt=0x40f, len=0) wrote 0 bytes  \n|  \n| Attempting to read NT_ARM_POE::por_el0  \n| GETREGSET(nt=0x40f, len=8) read 8 bytes  \n| Read NT_ARM_POE::por_el0 = 0xffff8000839c3d50  \n  \nAfter this patch:  \n  \n| # ./poe-test  \n| Attempting to write NT_ARM_POE::por_el0 = 0x900d900d900d900d  \n| SETREGSET(nt=0x40f, len=8) wrote 8 bytes  \n|  \n| Attempting to read NT_ARM_POE::por_el0  \n| GETREGSET(nt=0x40f, len=8) read 8 bytes  \n| Read NT_ARM_POE::por_el0 = 0x900d900d900d900d  \n|  \n| Attempting to write NT_ARM_POE (zero length)  \n| SETREGSET(nt=0x40f, len=0) wrote 0 bytes  \n|  \n| Attempting to read NT_ARM_POE::por_el0  \n| GETREGSET(nt=0x40f, len=8) read 8 bytes  \n| Read NT_ARM_POE::por_el0 = 0x900d900d900d900d \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-11T17:26:28.000000Z"}, {"uuid": "5c2d07a3-ee5a-4da1-942d-7b5a6bc26e23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57809", "type": "seen", "source": "https://t.me/cvedetector/15079", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57809 - Linux Kernel i.MX6QDL PCIe Suspend/Resume Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57809 \nPublished : Jan. 11, 2025, 2:15 p.m. | 25\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nPCI: imx6: Fix suspend/resume support on i.MX6QDL  \n  \nThe suspend/resume functionality is currently broken on the i.MX6QDL  \nplatform, as documented in the NXP errata (ERR005723):  \n  \n    \n  \nThis patch addresses the issue by sharing most of the suspend/resume  \nsequences used by other i.MX devices, while avoiding modifications to  \ncritical registers that disrupt the PCIe functionality. It targets the  \nsame problem as the following downstream commit:  \n  \n    \n  \nUnlike the downstream commit, this patch also resets the connected PCIe  \ndevice if possible. Without this reset, certain drivers, such as ath10k  \nor iwlwifi, will crash on resume. The device reset is also done by the  \ndriver on other i.MX platforms, making this patch consistent with  \nexisting practices.  \n  \nUpon resuming, the kernel will hang and display an error. Here's an  \nexample of the error encountered with the ath10k driver:  \n  \n  ath10k_pci 0000:01:00.0: Unable to change power state from D3hot to D0, device inaccessible  \n  Unhandled fault: imprecise external abort (0x1406) at 0x0106f944  \n  \nWithout this patch, suspend/resume will fail on i.MX6QDL devices if a  \nPCIe device is connected.  \n  \n[kwilczynski: commit log, added tag for stable releases] \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-11T15:46:14.000000Z"}, {"uuid": "ce52f378-0c3c-4a8a-8b50-65e40f8020bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57241", "type": "seen", "source": "Telegram/Fp2NERVRyK25RF-yDULx7-eU9PWw6zulkr-wpSkVc7HAT8-T", "content": "", "creation_timestamp": "2025-02-18T21:11:31.000000Z"}, {"uuid": "e97c9cbb-74bb-4696-ad17-c3d765d94761", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57912", "type": "seen", "source": "Telegram/zIDfRG2961OZaOSBhpyplHb8kRuQjZnOjJUAiEJAGZEZcle1", "content": "", "creation_timestamp": "2025-02-18T21:11:31.000000Z"}, {"uuid": "146161e0-5c66-4903-b551-7f968d3193b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57909", "type": "seen", "source": "Telegram/d_5nGhf0MWAPcY54XckF-b5CGAi9Nvdf7TVg6UxIZUirxEs1", "content": "", "creation_timestamp": "2025-02-18T21:11:31.000000Z"}, {"uuid": "3edbe57b-44a2-428d-b129-afcc9ab80d24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57908", "type": "seen", "source": "Telegram/sQnoIxlmD_xBYaXriAIKW-itu_pQEMAjqMTTeke5H__1gf6r", "content": "", "creation_timestamp": "2025-02-18T21:11:31.000000Z"}, {"uuid": "65e5e5d5-8536-41fd-937f-d3aedb13baa2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57907", "type": "seen", "source": "Telegram/ixzcc8daq1pB7ojwOcJbedlz_LPWj_fkJLdOovMfqFDDyFjJ", "content": "", "creation_timestamp": "2025-02-18T21:11:31.000000Z"}, {"uuid": "cabbd048-35ee-43a5-938e-bfecb8c2cb8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57906", "type": "seen", "source": "Telegram/t7DG41-XZq4pmUw9xxBBVMEK1KESLeLaCZ7p7eFYzgutHhy6", "content": "", "creation_timestamp": "2025-02-18T21:11:31.000000Z"}, {"uuid": "270aca6f-3148-42d7-bdac-ac13ab4d232b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57964", "type": "seen", "source": "Telegram/_HMihAIEms5BtvHW3dn0-d0WKsAVWFPN0b-iX4-mdledJfnQ", "content": "", "creation_timestamp": "2025-02-18T11:39:00.000000Z"}, {"uuid": "6d13c07b-bced-478e-89a8-dc0a588fc425", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57963", "type": "seen", "source": "Telegram/-UpgA4FU5hAyspNSjdbIkZX_0pn29WfqX6m7wwOI5OI77BQT", "content": "", "creation_timestamp": "2025-02-18T11:39:00.000000Z"}, {"uuid": "248631b8-9be8-4168-bba3-b44cb8b1f0d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5764", "type": "seen", "source": "https://t.me/cvedetector/8696", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5764 - Sonatype Nexus Repository Hard-Coded Encryption Passphrase Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-5764 \nPublished : Oct. 23, 2024, 3:15 p.m. | 42\u00a0minutes ago \nDescription : Use of Hard-coded Credentials vulnerability in Sonatype Nexus Repository has been discovered in the code responsible for encrypting any secrets stored in the Nexus Repository configuration database (SMTP or HTTP proxy credentials, user tokens, tokens, among others). The affected versions relied on a static hard-coded encryption passphrase. While it was possible for an administrator to define an alternate encryption passphrase, it could only be done at first boot and not updated.  \n  \nThis issue affects Nexus Repository: from 3.0.0 through 3.72.0. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-23T18:13:29.000000Z"}, {"uuid": "013895c5-a5fc-4e08-83be-10112cbd774d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5749", "type": "seen", "source": "https://t.me/cvedetector/7939", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5749 - HP DesignJet SMTP Credential Reflection\", \n  \"Content\": \"CVE ID : CVE-2024-5749 \nPublished : Oct. 15, 2024, 6:15 p.m. | 38\u00a0minutes ago \nDescription : Certain HP DesignJet products may be vulnerable to credential reflection which allow viewing SMTP server credentials. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-15T21:07:30.000000Z"}, {"uuid": "3700b571-2ed9-4d18-a888-1a4d46aa5518", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5760", "type": "seen", "source": "https://t.me/cvedetector/5366", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5760 - Samsung Universal Print Driver EOP Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-5760 \nPublished : Sept. 11, 2024, 4:15 p.m. | 16\u00a0minutes ago \nDescription : The Samsung Universal Print Driver for Windows is potentially vulnerable to escalation of privilege allowing the creation of a reverse shell in the tool. This is only applicable for products in the application released or manufactured before 2018. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-11T18:41:19.000000Z"}, {"uuid": "350ca578-4549-4997-aa97-8ffef56ca339", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5754", "type": "seen", "source": "https://t.me/cvedetector/5650", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5754 - DragonFly BSD SSL/TLS Man-in-the-Middle Encryption Weakness\", \n  \"Content\": \"CVE ID : CVE-2024-5754 \nPublished : Sept. 13, 2024, 7:15 p.m. | 40\u00a0minutes ago \nDescription : BT: Encryption procedure host vulnerability \nSeverity: 8.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-13T22:09:14.000000Z"}, {"uuid": "e4d050b0-906a-4a3d-a1f6-04d7fc65aff5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5789", "type": "seen", "source": "https://t.me/cvedetector/5613", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5789 - Stored Cross-Site Scripting vulnerability in WordPress Triton Lite theme Button shortcode.\", \n  \"Content\": \"CVE ID : CVE-2024-5789 \nPublished : Sept. 13, 2024, 3:15 p.m. | 39\u00a0minutes ago \nDescription : The Triton Lite theme for WordPress is vulnerable to Stored Cross-Site Scripting via the 'url' attribute within the theme's Button shortcode in all versions up to, and including, 1.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-13T17:57:58.000000Z"}, {"uuid": "571d4755-fc3b-426e-b46c-f82509aa18f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5799", "type": "seen", "source": "https://t.me/cvedetector/5452", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5799 - WordPress CM Pop-Up Banners Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-5799 \nPublished : Sept. 12, 2024, 6:15 a.m. | 38\u00a0minutes ago \nDescription : The CM Pop-Up Banners for WordPress plugin before 1.7.3 does not sanitise and escape some of its popup fields, which could allow high privilege users such as Contributors to perform Cross-Site Scripting attacks. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-12T08:56:03.000000Z"}, {"uuid": "f3ba2582-6335-4bce-85a6-9923f25fc625", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5784", "type": "seen", "source": "https://t.me/cvedetector/4495", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5784 - Tutor LMS Pro - WordPress Authentication Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-5784 \nPublished : Aug. 30, 2024, 4:15 a.m. | 38\u00a0minutes ago \nDescription : The Tutor LMS  Pro plugin for WordPress is vulnerable to unauthorized administrative actions execution due to a missing capability checks on multiple functions like treport_quiz_atttempt_delete and tutor_gc_class_action in all versions up to, and including, 2.7.2. This makes it possible for authenticated attackers, with the subscriber-level access and above, to preform an administrative actions on the site, like comments, posts or users deletion, viewing notifications, etc. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-30T07:17:28.000000Z"}, {"uuid": "8f928fd8-74c8-4a48-8b75-55377fd7367e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57241", "type": "seen", "source": "Telegram/Yz2GSRaWOh4smiOo8R_KpgGA6RumU8pTfcdLtcNUpPaNrWOo", "content": "", "creation_timestamp": "2025-02-15T23:50:17.000000Z"}, {"uuid": "cb9140b9-34db-459c-86e0-0770b82d7719", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57777", "type": "seen", "source": "Telegram/wgukmgthE_6wYrWXNFfAdNjBZL1eej_AJhLEeBV-1-xGt_fS", "content": "", "creation_timestamp": "2025-02-15T23:50:17.000000Z"}, {"uuid": "ac169838-afeb-4ee9-8733-7bb918962375", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5725", "type": "seen", "source": "https://t.me/cvedetector/3806", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5725 - Centreon SQL Injection Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-5725 \nPublished : Aug. 21, 2024, 5:15 p.m. | 30\u00a0minutes ago \nDescription : Centreon initCurveList SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Centreon. Authentication is required to exploit this vulnerability.  \n  \nThe specific flaw exists within the initCurveList function. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the apache user. Was ZDI-CAN-22683. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-21T19:55:47.000000Z"}, {"uuid": "f4c204cb-e38f-49a9-bc07-fe17a0480b9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5762", "type": "seen", "source": "https://t.me/cvedetector/3803", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5762 - Zen Cart FindPluginAdminPage Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-5762 \nPublished : Aug. 21, 2024, 5:15 p.m. | 30\u00a0minutes ago \nDescription : Zen Cart findPluginAdminPage Local File Inclusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Zen Cart. Authentication is not required to exploit this vulnerability.  \n  \nThe specific flaw exists within the findPluginAdminPage function. The issue results from the lack of proper validation of user-supplied data prior to passing it to a PHP include function. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the service account. Was ZDI-CAN-21408. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-21T19:55:41.000000Z"}, {"uuid": "742221a3-a5de-4b6d-8991-c60ab1c96460", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5723", "type": "seen", "source": "https://t.me/cvedetector/3804", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5723 - Centreon SQL Injection Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-5723 \nPublished : Aug. 21, 2024, 5:15 p.m. | 30\u00a0minutes ago \nDescription : Centreon updateServiceHost SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Centreon. Authentication is required to exploit this vulnerability.  \n  \nThe specific flaw exists within the updateServiceHost function. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the apache user. Was ZDI-CAN-23294. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-21T19:55:42.000000Z"}, {"uuid": "c77b1841-e649-4a77-b57a-c6a55fabbbf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5763", "type": "seen", "source": "https://t.me/cvedetector/3598", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5763 - Elementor Addons Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-5763 \nPublished : Aug. 20, 2024, 4:15 a.m. | 39\u00a0minutes ago \nDescription : The The Plus Addons for Elementor \u2013 Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the video_date attribute within the plugin's Video widget in all versions up to, and including, 5.6.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-20T07:05:39.000000Z"}, {"uuid": "a174c61f-1086-4c08-8824-4548ef43e35f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5708", "type": "seen", "source": "https://t.me/cvedetector/2541", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5708 - \"WordPress WPBakery Visual Composer Stored Cross-Site Scripting (XSS)\"\", \n  \"Content\": \"CVE ID : CVE-2024-5708 \nPublished : Aug. 6, 2024, 6:15 a.m. | 44\u00a0minutes ago \nDescription : The WPBakery Visual Composer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018link\u2019 parameter in all versions up to, and including, 7.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, and with post permissions granted by an Administrator, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-06T09:09:15.000000Z"}, {"uuid": "5c48cce2-a566-4678-909c-13885e71cfdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5709", "type": "seen", "source": "https://t.me/cvedetector/2540", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5709 - WordPress WPBakery Visual Composer Local File Inclusion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-5709 \nPublished : Aug. 6, 2024, 6:15 a.m. | 44\u00a0minutes ago \nDescription : The WPBakery Visual Composer plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 7.7 via the 'layout_name' parameter. This makes it possible for authenticated attackers, with Author-level access and above, and with post permissions granted by an Administrator, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other \u201csafe\u201d file types can be uploaded and included. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-06T09:09:11.000000Z"}, {"uuid": "abda6d6c-3698-4e97-94f4-363b4576c08a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "exploited", "source": "https://t.me/true_secator/7077", "content": "\u0411\u0430\u043d\u0434\u0430 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 DragonForce \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u043f\u0440\u0435\u043f\u0430\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0430 SimpleHelp \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a MSP, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f (RMM) \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a\u043e\u0432 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432.\n\nSimpleHelp - \u044d\u0442\u043e \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0431\u044b\u0447\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430\u043c\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u0443\u0441\u043b\u0443\u0433 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 \u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u041f\u041e \u0432 \u0441\u0435\u0442\u044f\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432.\u00a0\n\n\u041a \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044e \u0431\u044b\u043b\u0438 \u043f\u0440\u0438\u0432\u043b\u0435\u0447\u0435\u043d\u044b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Sophos, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0435 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0441\u0442\u0430\u0440\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 SimpleHelp, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u043a\u0430\u043a CVE-2024-57727, CVE-2024-57728 \u0438 CVE-2024-57726, \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u043d\u0430\u0447\u0430\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 SimpleHelp \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0440\u0430\u0437\u0432\u0435\u0434\u044b\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b \u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0438 \u0441\u0431\u043e\u0440\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u0445 MSP, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0438\u043c\u0435\u043d\u0430 \u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f.\n\n\u0417\u0430\u0442\u0435\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u043f\u044b\u0442\u0430\u043b\u0438\u0441\u044c \u0443\u043a\u0440\u0430\u0441\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044c ransomware \u0432 \u0441\u0435\u0442\u044f\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b\u0438 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0432 \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0441\u0435\u0442\u0435\u0439 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0437\u0430\u0449\u0438\u0442\u044b \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u0442\u043e\u0447\u0435\u043a Sophos.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043d\u0435 \u0432\u0441\u0435\u043c \u0442\u0430\u043a \u043f\u043e\u0432\u0435\u0437\u043b\u043e, \u0447\u0430\u0441\u0442\u044c \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0430\u0441\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438: \u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0431\u044b\u043b\u0438 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u044b, \u0430 \u0434\u0430\u043d\u043d\u044b\u0435 \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u044b \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a \u0441 \u0434\u0432\u043e\u0439\u043d\u044b\u043c \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e\u043c.\n\n\u0417\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u044b\u0435 \u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u044b, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u044d\u0442\u043e\u0439 \u0430\u0442\u0430\u043a\u043e\u0439, - \u043e\u0442\u0447\u0435\u0442\u0435 Sophos.\n\n\u0412\u043e\u043e\u0431\u0449\u0435 \u0436\u0435, MSP \u0432\u0441\u0435\u0433\u0434\u0430 \u0432\u0440\u0435\u043c\u044f \u0431\u044b\u043b\u0438\u00a0\u0437\u0430\u0432\u0435\u0442\u043d\u043e\u0439 \u0446\u0435\u043b\u044c\u044e \u0431\u0430\u043d\u0434 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0433\u043b\u0430 \u0438\u0445 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0430\u0442\u0430\u043a\u0430\u043c \u0441\u0440\u0430\u0437\u0443 \u043d\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439.\n\n\u041e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0442\u0440\u0435\u043f\u0435\u0442\u043d\u043e \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u043a SimpleHelp, ConnectWise ScreenConnect \u0438 Kaseya.\n\n\u041a\u0430\u043a \u043c\u044b \u043f\u043e\u043c\u043d\u0438\u043c, \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0441 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 REvil \u043f\u0440\u043e\u0432\u0435\u0440\u043d\u0443\u043b\u0430 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u0443\u044e \u0430\u0442\u0430\u043a\u0443, \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0432\u0448\u0443\u044e \u0431\u043e\u043b\u0435\u0435 1000 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439.\n\n\u0412\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u044f\u0441\u044c \u0441 DragonForce, \u0441\u0442\u043e\u0438\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c \u0438\u0445 \u043d\u0435\u0437\u0430\u0443\u0440\u044f\u0434\u043d\u0443\u044e \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c, \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u043c\u0443\u044e \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u0432\u0440\u0435\u043c\u044f, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u0441\u0435\u0440\u0438\u0435\u0439 \u0440\u0435\u0437\u043e\u043d\u0430\u043d\u0441\u043d\u044b\u0445 \u0432\u0437\u043b\u043e\u043c\u043e\u0432 \u0440\u043e\u0437\u043d\u0438\u0447\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439, \u043f\u0440\u0435\u0436\u0434\u0435 \u0432\u0441\u0435\u0433\u043e, \u0431\u0440\u0438\u0442\u0430\u043d\u0441\u043a\u0438\u0445 Marks & Spencer \u0438 Co-op, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0431\u0430\u043d\u0434.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0440\u0430\u043d\u0435\u0435\u00a0DragonForce \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0438 \u043a\u0430\u0440\u0442\u0435\u043b\u0438 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439, \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044f \u0441\u0432\u043e\u044e RaaS \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 white label, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0438 \u0434\u0440\u0443\u0433\u0438\u043c \u0431\u0430\u043d\u0434\u0430\u043c \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u0442\u044c \u0431\u0440\u0435\u043d\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u0434 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 \u0441\u0442\u0438\u043b\u044c \u0432\u0435\u0440\u0441\u0438\u0438 \u0441\u0432\u043e\u0435\u0433\u043e \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a\u0430.", "creation_timestamp": "2025-05-28T15:00:07.000000Z"}, {"uuid": "4c8e1157-55dd-49de-b31e-596ae0502ca6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57726", "type": "exploited", "source": "https://t.me/true_secator/7077", "content": "\u0411\u0430\u043d\u0434\u0430 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 DragonForce \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u043f\u0440\u0435\u043f\u0430\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0430 SimpleHelp \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a MSP, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f (RMM) \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a\u043e\u0432 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432.\n\nSimpleHelp - \u044d\u0442\u043e \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0431\u044b\u0447\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430\u043c\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u0443\u0441\u043b\u0443\u0433 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 \u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u041f\u041e \u0432 \u0441\u0435\u0442\u044f\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432.\u00a0\n\n\u041a \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044e \u0431\u044b\u043b\u0438 \u043f\u0440\u0438\u0432\u043b\u0435\u0447\u0435\u043d\u044b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Sophos, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0435 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0441\u0442\u0430\u0440\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 SimpleHelp, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u043a\u0430\u043a CVE-2024-57727, CVE-2024-57728 \u0438 CVE-2024-57726, \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u043d\u0430\u0447\u0430\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 SimpleHelp \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0440\u0430\u0437\u0432\u0435\u0434\u044b\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b \u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0438 \u0441\u0431\u043e\u0440\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u0445 MSP, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0438\u043c\u0435\u043d\u0430 \u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f.\n\n\u0417\u0430\u0442\u0435\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u043f\u044b\u0442\u0430\u043b\u0438\u0441\u044c \u0443\u043a\u0440\u0430\u0441\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044c ransomware \u0432 \u0441\u0435\u0442\u044f\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b\u0438 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0432 \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0441\u0435\u0442\u0435\u0439 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0437\u0430\u0449\u0438\u0442\u044b \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u0442\u043e\u0447\u0435\u043a Sophos.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043d\u0435 \u0432\u0441\u0435\u043c \u0442\u0430\u043a \u043f\u043e\u0432\u0435\u0437\u043b\u043e, \u0447\u0430\u0441\u0442\u044c \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0430\u0441\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438: \u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0431\u044b\u043b\u0438 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u044b, \u0430 \u0434\u0430\u043d\u043d\u044b\u0435 \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u044b \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a \u0441 \u0434\u0432\u043e\u0439\u043d\u044b\u043c \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e\u043c.\n\n\u0417\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u044b\u0435 \u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u044b, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u044d\u0442\u043e\u0439 \u0430\u0442\u0430\u043a\u043e\u0439, - \u043e\u0442\u0447\u0435\u0442\u0435 Sophos.\n\n\u0412\u043e\u043e\u0431\u0449\u0435 \u0436\u0435, MSP \u0432\u0441\u0435\u0433\u0434\u0430 \u0432\u0440\u0435\u043c\u044f \u0431\u044b\u043b\u0438\u00a0\u0437\u0430\u0432\u0435\u0442\u043d\u043e\u0439 \u0446\u0435\u043b\u044c\u044e \u0431\u0430\u043d\u0434 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0433\u043b\u0430 \u0438\u0445 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0430\u0442\u0430\u043a\u0430\u043c \u0441\u0440\u0430\u0437\u0443 \u043d\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439.\n\n\u041e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0442\u0440\u0435\u043f\u0435\u0442\u043d\u043e \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u043a SimpleHelp, ConnectWise ScreenConnect \u0438 Kaseya.\n\n\u041a\u0430\u043a \u043c\u044b \u043f\u043e\u043c\u043d\u0438\u043c, \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0441 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 REvil \u043f\u0440\u043e\u0432\u0435\u0440\u043d\u0443\u043b\u0430 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u0443\u044e \u0430\u0442\u0430\u043a\u0443, \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0432\u0448\u0443\u044e \u0431\u043e\u043b\u0435\u0435 1000 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439.\n\n\u0412\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u044f\u0441\u044c \u0441 DragonForce, \u0441\u0442\u043e\u0438\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c \u0438\u0445 \u043d\u0435\u0437\u0430\u0443\u0440\u044f\u0434\u043d\u0443\u044e \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c, \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u043c\u0443\u044e \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u0432\u0440\u0435\u043c\u044f, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u0441\u0435\u0440\u0438\u0435\u0439 \u0440\u0435\u0437\u043e\u043d\u0430\u043d\u0441\u043d\u044b\u0445 \u0432\u0437\u043b\u043e\u043c\u043e\u0432 \u0440\u043e\u0437\u043d\u0438\u0447\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439, \u043f\u0440\u0435\u0436\u0434\u0435 \u0432\u0441\u0435\u0433\u043e, \u0431\u0440\u0438\u0442\u0430\u043d\u0441\u043a\u0438\u0445 Marks & Spencer \u0438 Co-op, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0431\u0430\u043d\u0434.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0440\u0430\u043d\u0435\u0435\u00a0DragonForce \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0438 \u043a\u0430\u0440\u0442\u0435\u043b\u0438 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439, \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044f \u0441\u0432\u043e\u044e RaaS \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 white label, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0438 \u0434\u0440\u0443\u0433\u0438\u043c \u0431\u0430\u043d\u0434\u0430\u043c \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u0442\u044c \u0431\u0440\u0435\u043d\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u0434 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 \u0441\u0442\u0438\u043b\u044c \u0432\u0435\u0440\u0441\u0438\u0438 \u0441\u0432\u043e\u0435\u0433\u043e \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a\u0430.", "creation_timestamp": "2025-05-28T15:00:07.000000Z"}, {"uuid": "6a8afa2b-a4bb-481c-a56e-2fc61b9a0550", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5765", "type": "seen", "source": "https://t.me/cvedetector/1992", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5765 - WordPress WpStickyBar SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-5765 \nPublished : July 30, 2024, 6:15 a.m. | 40\u00a0minutes ago \nDescription : The WpStickyBar  WordPress plugin through 2.1.0 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-30T09:02:53.000000Z"}, {"uuid": "d28b5018-a156-4c3b-88a6-ee1e4d8a1847", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57728", "type": "exploited", "source": "https://t.me/true_secator/7077", "content": "\u0411\u0430\u043d\u0434\u0430 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 DragonForce \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u043f\u0440\u0435\u043f\u0430\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0430 SimpleHelp \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a MSP, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f (RMM) \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a\u043e\u0432 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432.\n\nSimpleHelp - \u044d\u0442\u043e \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0431\u044b\u0447\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430\u043c\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u0443\u0441\u043b\u0443\u0433 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 \u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u041f\u041e \u0432 \u0441\u0435\u0442\u044f\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432.\u00a0\n\n\u041a \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044e \u0431\u044b\u043b\u0438 \u043f\u0440\u0438\u0432\u043b\u0435\u0447\u0435\u043d\u044b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Sophos, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0435 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0441\u0442\u0430\u0440\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 SimpleHelp, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u043a\u0430\u043a CVE-2024-57727, CVE-2024-57728 \u0438 CVE-2024-57726, \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u043d\u0430\u0447\u0430\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 SimpleHelp \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0440\u0430\u0437\u0432\u0435\u0434\u044b\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b \u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0438 \u0441\u0431\u043e\u0440\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u0445 MSP, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0438\u043c\u0435\u043d\u0430 \u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f.\n\n\u0417\u0430\u0442\u0435\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u043f\u044b\u0442\u0430\u043b\u0438\u0441\u044c \u0443\u043a\u0440\u0430\u0441\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044c ransomware \u0432 \u0441\u0435\u0442\u044f\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b\u0438 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0432 \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0441\u0435\u0442\u0435\u0439 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0437\u0430\u0449\u0438\u0442\u044b \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u0442\u043e\u0447\u0435\u043a Sophos.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043d\u0435 \u0432\u0441\u0435\u043c \u0442\u0430\u043a \u043f\u043e\u0432\u0435\u0437\u043b\u043e, \u0447\u0430\u0441\u0442\u044c \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0430\u0441\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438: \u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0431\u044b\u043b\u0438 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u044b, \u0430 \u0434\u0430\u043d\u043d\u044b\u0435 \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u044b \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a \u0441 \u0434\u0432\u043e\u0439\u043d\u044b\u043c \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e\u043c.\n\n\u0417\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u044b\u0435 \u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u044b, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u044d\u0442\u043e\u0439 \u0430\u0442\u0430\u043a\u043e\u0439, - \u043e\u0442\u0447\u0435\u0442\u0435 Sophos.\n\n\u0412\u043e\u043e\u0431\u0449\u0435 \u0436\u0435, MSP \u0432\u0441\u0435\u0433\u0434\u0430 \u0432\u0440\u0435\u043c\u044f \u0431\u044b\u043b\u0438\u00a0\u0437\u0430\u0432\u0435\u0442\u043d\u043e\u0439 \u0446\u0435\u043b\u044c\u044e \u0431\u0430\u043d\u0434 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0433\u043b\u0430 \u0438\u0445 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0430\u0442\u0430\u043a\u0430\u043c \u0441\u0440\u0430\u0437\u0443 \u043d\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439.\n\n\u041e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0442\u0440\u0435\u043f\u0435\u0442\u043d\u043e \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u043a SimpleHelp, ConnectWise ScreenConnect \u0438 Kaseya.\n\n\u041a\u0430\u043a \u043c\u044b \u043f\u043e\u043c\u043d\u0438\u043c, \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0441 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 REvil \u043f\u0440\u043e\u0432\u0435\u0440\u043d\u0443\u043b\u0430 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u0443\u044e \u0430\u0442\u0430\u043a\u0443, \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0432\u0448\u0443\u044e \u0431\u043e\u043b\u0435\u0435 1000 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439.\n\n\u0412\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u044f\u0441\u044c \u0441 DragonForce, \u0441\u0442\u043e\u0438\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c \u0438\u0445 \u043d\u0435\u0437\u0430\u0443\u0440\u044f\u0434\u043d\u0443\u044e \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c, \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u043c\u0443\u044e \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u0432\u0440\u0435\u043c\u044f, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u0441\u0435\u0440\u0438\u0435\u0439 \u0440\u0435\u0437\u043e\u043d\u0430\u043d\u0441\u043d\u044b\u0445 \u0432\u0437\u043b\u043e\u043c\u043e\u0432 \u0440\u043e\u0437\u043d\u0438\u0447\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439, \u043f\u0440\u0435\u0436\u0434\u0435 \u0432\u0441\u0435\u0433\u043e, \u0431\u0440\u0438\u0442\u0430\u043d\u0441\u043a\u0438\u0445 Marks & Spencer \u0438 Co-op, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0431\u0430\u043d\u0434.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0440\u0430\u043d\u0435\u0435\u00a0DragonForce \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0438 \u043a\u0430\u0440\u0442\u0435\u043b\u0438 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439, \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044f \u0441\u0432\u043e\u044e RaaS \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 white label, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0438 \u0434\u0440\u0443\u0433\u0438\u043c \u0431\u0430\u043d\u0434\u0430\u043c \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u0442\u044c \u0431\u0440\u0435\u043d\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u0434 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 \u0441\u0442\u0438\u043b\u044c \u0432\u0435\u0440\u0441\u0438\u0438 \u0441\u0432\u043e\u0435\u0433\u043e \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a\u0430.", "creation_timestamp": "2025-05-28T15:00:07.000000Z"}, {"uuid": "9a9f07f1-c9cb-4f88-a7fe-ccb9d43d0dcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5713", "type": "seen", "source": "https://t.me/cvedetector/796", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5713 - The If-So Dynamic Content Personalization WordPres\", \n  \"Content\": \"CVE ID : CVE-2024-5713 \nPublished : July 13, 2024, 6:15 a.m. | 32\u00a0minutes ago \nDescription : The If-So Dynamic Content Personalization WordPress plugin before 1.8.0.4 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-13T08:49:30.000000Z"}, {"uuid": "e6de2291-daca-444e-b1f0-cbdefb6817f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5744", "type": "seen", "source": "https://t.me/cvedetector/795", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5744 - The wp-eMember WordPress plugin before 10.6.7 does\", \n  \"Content\": \"CVE ID : CVE-2024-5744 \nPublished : July 13, 2024, 6:15 a.m. | 32\u00a0minutes ago \nDescription : The wp-eMember WordPress plugin before 10.6.7 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-13T08:49:29.000000Z"}, {"uuid": "d6b0f877-9369-473d-987b-12cf93db94e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5792", "type": "seen", "source": "https://t.me/cvedetector/497", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5792 - The Houzez CRM plugin for WordPress is vulnerable\", \n  \"Content\": \"CVE ID : CVE-2024-5792 \nPublished : July 10, 2024, 2:15 a.m. | 18\u00a0minutes ago \nDescription : The Houzez CRM plugin for WordPress is vulnerable to time-based SQL Injection via the notes \u2018belong_to\u2019 parameter in all versions up to, and including, 1.4.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Custom-level (seller) access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-10T04:38:05.000000Z"}, {"uuid": "255930fc-fda8-4bf3-8466-b49eeb05d56f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5704", "type": "seen", "source": "https://t.me/cvedetector/284", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5704 - The XPlainer \u2013 WooCommerce Product FAQ [WooCommerc\", \n  \"Content\": \"CVE ID : CVE-2024-5704 \nPublished : July 9, 2024, 9:15 a.m. | 31\u00a0minutes ago \nDescription : The XPlainer \u2013 WooCommerce Product FAQ [WooCommerce Accordion FAQ Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several functions in all versions up to, and including, 1.6.4. This makes it possible for authenticated attackers, with Subscriber-level access and above, to add new and update existing FAQs, FAQ lists, and modify FAQ associations with products. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T11:49:54.000000Z"}, {"uuid": "56d86f21-7d49-40f9-a4ef-f46b4babd279", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5726", "type": "seen", "source": "https://t.me/cvedetector/1139", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5726 - WordPress Timeline Event History PHP Object Injection\", \n  \"Content\": \"CVE ID : CVE-2024-5726 \nPublished : July 18, 2024, 2:15 a.m. | 43\u00a0minutes ago \nDescription : The Timeline Event History plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.1 via deserialization of untrusted input 'timelines-data' parameter. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-18T05:05:47.000000Z"}, {"uuid": "77718ab0-84ba-447a-bda9-057863912cb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5715", "type": "seen", "source": "https://t.me/cvedetector/797", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5715 - The wp-eMember WordPress plugin before 10.6.7 does\", \n  \"Content\": \"CVE ID : CVE-2024-5715 \nPublished : July 13, 2024, 6:15 a.m. | 32\u00a0minutes ago \nDescription : The wp-eMember WordPress plugin before 10.6.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-13T08:49:33.000000Z"}, {"uuid": "1e09bb81-c582-43ae-a8a1-e4a58341eb22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5753", "type": "seen", "source": "https://t.me/cvedetector/136", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5753 - vanna-ai/vanna version v0.3.4 is vulnerable to SQL\", \n  \"Content\": \"CVE ID : CVE-2024-5753 \nPublished : July 5, 2024, 8:15 p.m. | 16\u00a0minutes ago \nDescription : vanna-ai/vanna version v0.3.4 is vulnerable to SQL injection in some file-critical functions such as `pg_read_file()`. This vulnerability allows unauthenticated remote users to read arbitrary local files on the victim server, including sensitive files like `/etc/passwd`, by exploiting the exposed SQL queries via a Python Flask API. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-05T22:32:10.000000Z"}, {"uuid": "3b790b68-0d53-46e4-982b-3e64e6dd5313", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5795", "type": "seen", "source": "https://t.me/cvedetector/1021", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5795 - GitHub Enterprise Server Git Server Unbounded Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2024-5795 \nPublished : July 16, 2024, 10:15 p.m. | 22\u00a0minutes ago \nDescription : A Denial of Service vulnerability was identified in GitHub Enterprise Server that allowed an attacker to cause unbounded resource exhaustion by sending a large payload to the Git server. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.14 and was fixed in version 3.13.1, 3.12.6, 3.11.12, 3.10.14, and 3.9.17. This vulnerability was reported via the GitHub Bug Bounty program. \nSeverity: 7.7 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-17T00:39:26.000000Z"}, {"uuid": "f9996050-51b6-43ea-b674-439782cd3bde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5703", "type": "seen", "source": "https://t.me/cvedetector/1065", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5703 - Icegram Express WordPress Plugin API Unconfigured Capability Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-5703 \nPublished : July 17, 2024, 8:15 a.m. | 21\u00a0minutes ago \nDescription : The Email Subscribers by Icegram Express \u2013 Email Marketing, Newsletters, Automation for WordPress & WooCommerce plugin for WordPress is vulnerable to unauthorized API access due to a missing capability check in all versions up to, and including, 5.7.26. This makes it possible for authenticated attackers, with Subscriber-level access and above, to access the API (provided it is enabled) and add, edit, and delete audience users. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-17T10:41:46.000000Z"}, {"uuid": "400a72f5-9cec-4da2-aebb-aca200ea8142", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5793", "type": "seen", "source": "https://t.me/cvedetector/223", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5793 - The Houzez Theme - Functionality plugin for WordPr\", \n  \"Content\": \"CVE ID : CVE-2024-5793 \nPublished : July 9, 2024, 2:15 a.m. | 25\u00a0minutes ago \nDescription : The Houzez Theme - Functionality plugin for WordPress is vulnerable to SQL Injection via the \u2018currency_code\u2019 parameter in all versions up to, and including, 3.2.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Custom-level (seller) access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-09T04:42:36.000000Z"}, {"uuid": "df418747-8227-4306-bd91-229ca011bf14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5711", "type": "seen", "source": "https://t.me/cvedetector/167", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5711 - Cross-site Scripting (XSS) - Stored in GitHub repo\", \n  \"Content\": \"CVE ID : CVE-2024-5711 \nPublished : July 8, 2024, 12:15 a.m. | 28\u00a0minutes ago \nDescription : Cross-site Scripting (XSS) - Stored in GitHub repository stitionai/devika prior to -. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-08T02:47:35.000000Z"}, {"uuid": "0810bf86-f88d-4dbe-89c0-29e4180c9e67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57968", "type": "exploited", "source": "https://t.me/ton618cyber/2369", "content": "XE Hacker Group Exploits VeraCore Zero-Day to Deploy Persistent Web Shells\n\nXE Group exploits a VeraCore zero-day (CVE-2024-57968) to deploy web shells, enabling persistent access and targeting supply chains in manufacturing a\n\nThe Hacker News | thehackernews.com \u2022 Feb 10, 2025", "creation_timestamp": "2025-02-10T12:34:49.000000Z"}, {"uuid": "26ed7f8e-6ddc-430e-9bca-eb1382328494", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5722", "type": "published-proof-of-concept", "source": "https://t.me/HackerArsenal/160", "content": "\u041f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430 Logsign Unified SecOps\n*\nCVE: CVE-2024-5716 to CVE-2024-5722 \u0438 CVE-2024-5716 CVE-2024-5717\n*\nRCE + ByPass  (+ \u0448\u0430\u0431\u043b\u043e\u043d\u044b nuclei)\n*\nPOC exploits", "creation_timestamp": "2024-08-13T07:31:57.000000Z"}, {"uuid": "9a91079c-59c3-4c56-8d3c-dbb78f826b17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5717", "type": "published-proof-of-concept", "source": "https://t.me/HackerArsenal/160", "content": "\u041f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430 Logsign Unified SecOps\n*\nCVE: CVE-2024-5716 to CVE-2024-5722 \u0438 CVE-2024-5716 CVE-2024-5717\n*\nRCE + ByPass  (+ \u0448\u0430\u0431\u043b\u043e\u043d\u044b nuclei)\n*\nPOC exploits", "creation_timestamp": "2024-08-13T07:31:57.000000Z"}, {"uuid": "5ea14c2c-5247-4c77-b618-5901e2910833", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5716", "type": "published-proof-of-concept", "source": "https://t.me/HackerArsenal/160", "content": "\u041f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430 Logsign Unified SecOps\n*\nCVE: CVE-2024-5716 to CVE-2024-5722 \u0438 CVE-2024-5716 CVE-2024-5717\n*\nRCE + ByPass  (+ \u0448\u0430\u0431\u043b\u043e\u043d\u044b nuclei)\n*\nPOC exploits", "creation_timestamp": "2024-08-13T07:31:57.000000Z"}, {"uuid": "105e4060-5775-4ef2-8be8-3ad430accc33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5722", "type": "published-proof-of-concept", "source": "https://t.me/Kelvinseccommunity/730", "content": "\u041f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430 Logsign Unified SecOps\n*\nCVE: CVE-2024-5716 to CVE-2024-5722 \u0438 CVE-2024-5716 CVE-2024-5717\n*\nRCE + ByPass  (+ \u0448\u0430\u0431\u043b\u043e\u043d\u044b nuclei)\n*\nPOC exploits", "creation_timestamp": "2024-08-13T07:31:39.000000Z"}, {"uuid": "6d408108-a3f6-4039-bc55-bf5ef7a239ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57968", "type": "exploited", "source": "https://t.me/ton618cyber/6572", "content": "XE Hacker Group Exploits VeraCore Zero-Day to Deploy Persistent Web Shells\n\nXE Group exploits a VeraCore zero-day (CVE-2024-57968) to deploy web shells, enabling persistent access and targeting supply chains in manufacturing a\n\nThe Hacker News | thehackernews.com \u2022 Feb 10, 2025", "creation_timestamp": "2025-02-10T12:34:49.000000Z"}, {"uuid": "b62dad19-f47d-4ddd-b997-f1c1ca7ea0b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57971", "type": "seen", "source": "https://t.me/TheDarkWebInformer/12759", "content": "\ud83d\udea8Critical Security Vulnerability in DataSourceResource.java of Knowage Server affects the SpagoBI API support.\n\n\ud83c\udd94 CVE-2024-57971\n\ud83d\udca3 CVSS Score: 9.1\n\ud83d\udcc5 Published Date: 25/02/15\n\u26a0\ufe0f Details: An authenticated attacker with high privileges could manipulate JNDI resource identifiers, potentially leading to: - Unauthorized access to system resources - Data manipulation - Potential full system compromise The vulnerability has a critical CVSS score of 9.1, indicating severe risks to confidentiality, integrity, and availability.\n\nNIST: https://nvd.nist.gov/vuln/detail/CVE-2024-57971", "creation_timestamp": "2025-02-16T20:19:41.000000Z"}, {"uuid": "125d625a-2acf-421e-85eb-e5adff075912", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57174", "type": "seen", "source": "Telegram/-k3K8XXcyBels88Qkm2GOq6AszuLNYOxgggJJI22u18SGwlH", "content": "", "creation_timestamp": "2025-03-08T04:34:55.000000Z"}, {"uuid": "f648ce28-2cdb-45e1-9969-435133c88d5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57064", "type": "seen", "source": "Telegram/yrsZcsDza-ovJXWEaxiVdm2gKmMDqE4JvBNuj5qRnliXVxYl", "content": "", "creation_timestamp": "2025-03-10T19:39:04.000000Z"}, {"uuid": "0e2e4486-7185-43b1-9513-badafaac6c02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57977", "type": "seen", "source": "Telegram/Sou4NNu0Y0-F0BNghHuLL2mUptw41dExAIMTo7Y2a5SGUt8x", "content": "", "creation_timestamp": "2025-03-08T04:35:53.000000Z"}, {"uuid": "6fcab0b4-a27b-4f88-a05f-f1ae5e59d2be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57905", "type": "seen", "source": "Telegram/5L82iLY2phk6LzLYorTW034jdhF4N0sgUXd7qiDipYZvgQ9U", "content": "", "creation_timestamp": "2025-02-18T21:11:31.000000Z"}, {"uuid": "349c73a4-51da-4659-9b20-5d7d3ebe8c33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57015", "type": "seen", "source": "Telegram/_fM4aHJc6KrnK0fGX0xaPUvoVs-EGI4S5t5DXYTz1RFYZhbR", "content": "", "creation_timestamp": "2025-03-10T19:39:13.000000Z"}, {"uuid": "5805f487-f5c0-4bc8-ac25-0bc407de3cc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57014", "type": "seen", "source": "Telegram/DZ1xC_R2aqZsCVwszW40-6eWOHo_bWT-NvAzOIf1-wY6_-la", "content": "", "creation_timestamp": "2025-03-10T19:39:13.000000Z"}, {"uuid": "590f51e6-837b-4335-bff9-9687e2b64b6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57013", "type": "seen", "source": "Telegram/c_70_hYf0IEnv7_mxuR0VHxpDssQRx5qTXme6CmwCFMFYwx7", "content": "", "creation_timestamp": "2025-03-10T19:39:13.000000Z"}, {"uuid": "c19cbf48-e333-44b3-a695-5d30d9b28484", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57064", "type": "seen", "source": "Telegram/xbTxIFLfeAtRWwJ2S4LTUegLkF26PmhHh_oWXfkC7CRgYXwB", "content": "", "creation_timestamp": "2025-03-10T14:45:05.000000Z"}, {"uuid": "e53f13dd-f2a1-4d1d-bce4-bafeee141073", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5756", "type": "seen", "source": "https://t.me/HackingInsights/3466", "content": "\u200aCVE-2024-5756 (CVSS 9.8): Critical Icegram Express Flaw Puts 90,000 WordPress Sites at Risk\n\nhttps://securityonline.info/cve-2024-5756-cvss-9-8-critical-icegram-express-flaw-puts-90000-wordpress-sites-at-risk/", "creation_timestamp": "2024-06-24T19:09:42.000000Z"}, {"uuid": "2f09e6ea-0657-421b-a794-8118083830a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57946", "type": "seen", "source": "Telegram/w8xHYN6yTYZ9OUKsuruucyckQfCxlgNXWGEFT7f5w9SnsDhS", "content": "", "creation_timestamp": "2025-03-02T11:45:39.000000Z"}, {"uuid": "a831ddaf-2d00-4e00-85cb-4de4e92af698", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57968", "type": "seen", "source": "Telegram/WnupHCh-e4T9si1DyA7cv99LA8IkSO8ohj3z0UlOHNi7N3yS", "content": "", "creation_timestamp": "2025-03-11T04:41:14.000000Z"}, {"uuid": "48d5c827-656d-400d-8d21-a36f64b9a7b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57668", "type": "seen", "source": "Telegram/6M2b2OhfadeXI6-XstDvo8M8GUbRkDHDHOFCL8A7MOALbVHF", "content": "", "creation_timestamp": "2025-03-02T11:46:30.000000Z"}, {"uuid": "d1b62c23-5aba-4ca2-b497-c267ba3cfb92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57966", "type": "seen", "source": "Telegram/llNEwXOwxJ_EuxAm-zOoFBiGUyN7EciqWn81xE206XfoIgdm", "content": "", "creation_timestamp": "2025-02-06T02:39:10.000000Z"}, {"uuid": "82065849-c4d8-4bc2-a067-5f5606e1bb24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57681", "type": "seen", "source": "Telegram/77E0Xb0mirszFSlHS00pPhDxhAknrocbtWEGOdnkPzi4-j9X", "content": "", "creation_timestamp": "2025-02-06T02:40:19.000000Z"}, {"uuid": "c6aebc6f-4ee3-4fbc-822e-ad0b1910694d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57680", "type": "seen", "source": "Telegram/6Qts6YhihOn28BUVNK77KwjNFuDrmhBUZYPkyP0ElcibZU6M", "content": "", "creation_timestamp": "2025-02-06T02:40:19.000000Z"}, {"uuid": "ff71d098-4dc1-4e76-96e7-1738e52aa77a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57679", "type": "seen", "source": "Telegram/Ym-85n92Azj7VbeIuHnvRZPDhcSzYQQiS60JbMCgq60tRicJ", "content": "", "creation_timestamp": "2025-02-06T02:40:19.000000Z"}, {"uuid": "4a4d7255-5e77-4a5a-a8d7-e7e95e41a14a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57678", "type": "seen", "source": "Telegram/68g_ian2QS0VmQiUVaCPD1OrDXIR8hTCNShkXXUygHyXmpZM", "content": "", "creation_timestamp": "2025-02-06T02:40:19.000000Z"}, {"uuid": "d31b7da2-2f73-4935-8d8e-d117eabbf56b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57716", "type": "seen", "source": "Telegram/zNKhOX9IKykgAumVGRVGYO77Ff8cRAkM7CXuZsoJyjYCsrVw", "content": "", "creation_timestamp": "2025-02-21T22:10:25.000000Z"}, {"uuid": "308d98e1-7355-4e28-bc47-157f84658e47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57677", "type": "seen", "source": "Telegram/U0FCfE0mG67h_gkQkP1EfQLY0DGMtfsEuTt9XxQyhsmJMKES", "content": "", "creation_timestamp": "2025-02-06T02:40:19.000000Z"}, {"uuid": "4b085b01-1718-4a04-a2d2-a9d8c761253a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57676", "type": "seen", "source": "Telegram/X6Q2-VM8osKMAxhPq8LxIcWzQOVGbqamX8ZWKgt-A-JY_c6t", "content": "", "creation_timestamp": "2025-02-06T02:40:19.000000Z"}, {"uuid": "494e1f8b-afca-4e81-93a9-9cb9a65bd18b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57776", "type": "seen", "source": "Telegram/6X_2DyYibnEOtA8Rh6bu3C09438nlCTH4kvBk3EjZL7Giwn7", "content": "", "creation_timestamp": "2025-02-06T02:40:19.000000Z"}, {"uuid": "63caa9eb-61b3-4313-a427-1840be0aac37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57259", "type": "seen", "source": "Telegram/LiQg6nHlDQkEx7PgQLhRLR8PvzAqoCNlRVQvhBZUcDAqqEbU", "content": "", "creation_timestamp": "2025-02-19T03:09:25.000000Z"}, {"uuid": "1592ddb0-df27-4ae0-af52-dc5d905b0ff1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57522", "type": "seen", "source": "Telegram/bSWutI9dVK5opYIJhyADRPSS0OqiiG0wP8klwFflYfoPLMrN", "content": "", "creation_timestamp": "2025-02-06T02:39:11.000000Z"}, {"uuid": "40509b87-82ce-4c1c-86fc-87ecc2fc737f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57950", "type": "seen", "source": "Telegram/G14E19btSE1dOH9LutuSv3vwaIV9x_Q82Yjj2-8QdGdGq9ol", "content": "", "creation_timestamp": "2025-02-21T22:10:25.000000Z"}, {"uuid": "29e5aaf8-400a-41b5-b7e9-baf8b94a74dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57055", "type": "seen", "source": "Telegram/ZOstBnoo8ULZudEfF1tbr-sK-0_EVc5LYX7H1hHEI6yiuj_O", "content": "", "creation_timestamp": "2025-02-20T01:27:45.000000Z"}, {"uuid": "27758108-c009-42c8-b8fe-1a14400a175a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57407", "type": "seen", "source": "Telegram/m6Fwa1aCftWMWFIbvyOv-br8y0KriPrRsZ7f0RN_QiN_IvMM", "content": "", "creation_timestamp": "2025-02-20T01:27:45.000000Z"}, {"uuid": "6528b974-9e71-464b-a09e-4b2d991e568c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5739", "type": "seen", "source": "Telegram/cNuqEW8qTfE-bzUPoMPthSjiIs4WJ80uf2ASL4TK-Zjf87zu", "content": "", "creation_timestamp": "2025-02-20T23:26:54.000000Z"}, {"uuid": "de8dffa8-51ed-4460-b2e1-04d3df21f67e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57258", "type": "seen", "source": "Telegram/KYjKbe4Sw_n_sMAh6loRjQ-QBw_0W5_Azc5Rh5TBRubX57sF", "content": "", "creation_timestamp": "2025-02-19T03:09:25.000000Z"}, {"uuid": "4e1315b5-a955-4495-94bd-f7014202aa68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57951", "type": "seen", "source": "Telegram/HIFWLVaplusfZGY4DhmDqkXWasjJIcESSRo0aUevVt9RFpRH", "content": "", "creation_timestamp": "2025-02-14T10:05:07.000000Z"}, {"uuid": "62181833-d42f-4b83-a13c-5c54d6abcf3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57409", "type": "seen", "source": "Telegram/KRouYjYjmL5CS_gdFKnnL06ZXcEs09_nQ01Sc3davy3qArI2", "content": "", "creation_timestamp": "2025-02-14T10:01:38.000000Z"}, {"uuid": "68b7e966-57ee-4471-922d-82a2eec8c5dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57408", "type": "seen", "source": "Telegram/n4Ocpo3L0Y0EmsSvhh_XmdpMTvJ6BP7ci1Uku698gx9rYRrT", "content": "", "creation_timestamp": "2025-02-14T10:01:38.000000Z"}, {"uuid": "076245c4-4c46-4a3b-ae97-e575896ecd90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57969", "type": "seen", "source": "Telegram/w-nEBJq6ht7dvjuAnwyC8CvBBVSX3ymcWJm6Wqg9p9qynS1p", "content": "", "creation_timestamp": "2025-02-14T10:09:25.000000Z"}, {"uuid": "f78b5753-7eaf-4933-84b4-9cf939f66a33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57373", "type": "seen", "source": "Telegram/ilTT1crdtQMbDQ98rM5MmrTmjkz62Kw_c46KlMSOxqvmHidL", "content": "", "creation_timestamp": "2025-01-28T03:22:55.000000Z"}, {"uuid": "bf25f12c-9052-4cfc-a100-ecfb18c512bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57052", "type": "seen", "source": "Telegram/5qdzHF4r03sEcVGZi1InfA1elRdTygOZiyiWX4yumRmzeFDh", "content": "", "creation_timestamp": "2025-01-28T03:22:55.000000Z"}, {"uuid": "0eeb68c7-ffb9-419b-8c16-d2f5a33eb686", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57378", "type": "seen", "source": "Telegram/F3Ean-LD4wM9SbdUvi5gtWlzO_xyxvtNCAbVVPPaDo0UGyqC", "content": "", "creation_timestamp": "2025-02-14T10:09:24.000000Z"}, {"uuid": "da8b1c43-11c9-4f5a-b247-344931c9479c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57665", "type": "seen", "source": "Telegram/-3ZnfvrNnHop8WKbSMT_sUZuyDmuehAG3xtN7Qm8nC-kz-vd", "content": "", "creation_timestamp": "2025-01-30T02:17:49.000000Z"}, {"uuid": "8ab1eeae-4a8d-4d8a-a1f0-23e96d74ae3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57603", "type": "seen", "source": "Telegram/fNazEgadbR0BCsABg0b0O_7dZKoMwhvuyjRtJB5Aso8MXsK3", "content": "", "creation_timestamp": "2025-02-14T10:09:22.000000Z"}, {"uuid": "94e2e062-57db-43d7-831b-92552d649634", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5745", "type": "seen", "source": "https://t.me/darkcommunityofficial/946", "content": "CVE-2024-5745\nA vulnerability was found in itsourcecode Bakery Online Ordering System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/modules/product/controller.php?action=add. The manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely.", "creation_timestamp": "2024-06-08T00:19:07.000000Z"}, {"uuid": "cfb077e2-8bd9-4cee-8099-91df2a6d454a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57968", "type": "exploited", "source": "Telegram/xv7zg-fyPkiMFIP27IgCOFS2T4cyEgEmLzZ-i1W_dI9tnw", "content": "", "creation_timestamp": "2025-03-11T12:17:52.000000Z"}, {"uuid": "285d0a7f-789a-4ac7-9e72-f523da17bf86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5722", "type": "published-proof-of-concept", "source": "https://t.me/CyberDilara/700", "content": "Tools - Hackers Factory \n\nEyes is an OSINT tool to get existing accounts from an email\n\nhttps://github.com/N0rz3/Eyes\n\nA wordlist of API names used for fuzzing web application APIs.\n\nhttps://github.com/chrislockard/api_wordlist\n\nSafeLine - Make your web apps secure\n\nhttps://github.com/chaitin/SafeLine\n\nLogsign Unified SecOps Platform: Detection CVE-2024-5716 to CVE-2024-5722 - Exploiting CVE-2024-5716 and CVE-2024-5717, Proof of Concept (PoC)\n\nhttps://github.com/j4nk3/Logsign-RCE\n\nMDUT (Multiple Database Utilization Tools) is a Chinese database cross platform utilization tool that integrates multiple mainstream database types.Based on the foundation of the predecessors SQLTOOLS, this program was developed (a tribute to SQLTOOLS), which aims to integrate common database utilization methods in one program, breaking the barriers that various database utilization tools require various environments and cause considerable inconvenience. In addition, the tool uses JAVAFx as the GUI operation interface, which is beautiful. At the same time, the program also supports simultaneous operation of multiple databases, each of which is independent of each other, which greatly facilitates the use of network security workers.\n\nhttps://github.com/SafeGroceryStore/MDUT\n\nSearch by Image is a browser extension that makes effortless reverse image searches possible, and comes with support for more than 30 search engines.\n\nhttps://github.com/dessant/search-by-image\n\nUnleashing an Ultimate XSS Polyglot\n\nhttps://github.com/0xsobky/HackVault/wiki/Unleashing-an-Ultimate-XSS-Polyglot\n\nBadsectorlabs/sccm-http-looter: Find interesting files stored on (System Center) Configuration Manager (SCCM/CM) shares via HTTP(s)''\n\nhttps://github.com/badsectorlabs/sccm-http-looter\n\nStreaming Overseer: A Telegram Monitoring Tool\n\nhttps://github.com/afolivieri/streaming_overseer\n\n#CyberDilara\nhttps://t.me/CyberDilara", "creation_timestamp": "2024-08-18T06:23:26.000000Z"}, {"uuid": "3435b89e-7ff5-433a-93b7-2455a6271246", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5717", "type": "published-proof-of-concept", "source": "https://t.me/CyberDilara/700", "content": "Tools - Hackers Factory \n\nEyes is an OSINT tool to get existing accounts from an email\n\nhttps://github.com/N0rz3/Eyes\n\nA wordlist of API names used for fuzzing web application APIs.\n\nhttps://github.com/chrislockard/api_wordlist\n\nSafeLine - Make your web apps secure\n\nhttps://github.com/chaitin/SafeLine\n\nLogsign Unified SecOps Platform: Detection CVE-2024-5716 to CVE-2024-5722 - Exploiting CVE-2024-5716 and CVE-2024-5717, Proof of Concept (PoC)\n\nhttps://github.com/j4nk3/Logsign-RCE\n\nMDUT (Multiple Database Utilization Tools) is a Chinese database cross platform utilization tool that integrates multiple mainstream database types.Based on the foundation of the predecessors SQLTOOLS, this program was developed (a tribute to SQLTOOLS), which aims to integrate common database utilization methods in one program, breaking the barriers that various database utilization tools require various environments and cause considerable inconvenience. In addition, the tool uses JAVAFx as the GUI operation interface, which is beautiful. At the same time, the program also supports simultaneous operation of multiple databases, each of which is independent of each other, which greatly facilitates the use of network security workers.\n\nhttps://github.com/SafeGroceryStore/MDUT\n\nSearch by Image is a browser extension that makes effortless reverse image searches possible, and comes with support for more than 30 search engines.\n\nhttps://github.com/dessant/search-by-image\n\nUnleashing an Ultimate XSS Polyglot\n\nhttps://github.com/0xsobky/HackVault/wiki/Unleashing-an-Ultimate-XSS-Polyglot\n\nBadsectorlabs/sccm-http-looter: Find interesting files stored on (System Center) Configuration Manager (SCCM/CM) shares via HTTP(s)''\n\nhttps://github.com/badsectorlabs/sccm-http-looter\n\nStreaming Overseer: A Telegram Monitoring Tool\n\nhttps://github.com/afolivieri/streaming_overseer\n\n#CyberDilara\nhttps://t.me/CyberDilara", "creation_timestamp": "2024-08-18T06:23:26.000000Z"}, {"uuid": "a39fd135-d8fd-4910-bea8-aab503d70d3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5716", "type": "published-proof-of-concept", "source": "https://t.me/CyberDilara/700", "content": "Tools - Hackers Factory \n\nEyes is an OSINT tool to get existing accounts from an email\n\nhttps://github.com/N0rz3/Eyes\n\nA wordlist of API names used for fuzzing web application APIs.\n\nhttps://github.com/chrislockard/api_wordlist\n\nSafeLine - Make your web apps secure\n\nhttps://github.com/chaitin/SafeLine\n\nLogsign Unified SecOps Platform: Detection CVE-2024-5716 to CVE-2024-5722 - Exploiting CVE-2024-5716 and CVE-2024-5717, Proof of Concept (PoC)\n\nhttps://github.com/j4nk3/Logsign-RCE\n\nMDUT (Multiple Database Utilization Tools) is a Chinese database cross platform utilization tool that integrates multiple mainstream database types.Based on the foundation of the predecessors SQLTOOLS, this program was developed (a tribute to SQLTOOLS), which aims to integrate common database utilization methods in one program, breaking the barriers that various database utilization tools require various environments and cause considerable inconvenience. In addition, the tool uses JAVAFx as the GUI operation interface, which is beautiful. At the same time, the program also supports simultaneous operation of multiple databases, each of which is independent of each other, which greatly facilitates the use of network security workers.\n\nhttps://github.com/SafeGroceryStore/MDUT\n\nSearch by Image is a browser extension that makes effortless reverse image searches possible, and comes with support for more than 30 search engines.\n\nhttps://github.com/dessant/search-by-image\n\nUnleashing an Ultimate XSS Polyglot\n\nhttps://github.com/0xsobky/HackVault/wiki/Unleashing-an-Ultimate-XSS-Polyglot\n\nBadsectorlabs/sccm-http-looter: Find interesting files stored on (System Center) Configuration Manager (SCCM/CM) shares via HTTP(s)''\n\nhttps://github.com/badsectorlabs/sccm-http-looter\n\nStreaming Overseer: A Telegram Monitoring Tool\n\nhttps://github.com/afolivieri/streaming_overseer\n\n#CyberDilara\nhttps://t.me/CyberDilara", "creation_timestamp": "2024-08-18T06:23:26.000000Z"}, {"uuid": "6abbad7e-fe48-46a3-8678-481b4671118e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57373", "type": "published-proof-of-concept", "source": "Telegram/rffX5EYj_oJUjYfHusAHpM7tkNAH-QqFWesotNJralJzCWQ", "content": "", "creation_timestamp": "2025-01-26T16:00:10.000000Z"}, {"uuid": "96fd4042-e4f1-4247-b38b-92468f6eb3dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57394", "type": "published-proof-of-concept", "source": "Telegram/gtxx4RE8GHtJT2JlTQ_6-BG2tvbPnnnnExDfcMYJsOVIelI", "content": "", "creation_timestamp": "2025-04-16T23:00:05.000000Z"}, {"uuid": "4151a23b-9566-4890-bccd-e565672064e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57376", "type": "published-proof-of-concept", "source": "Telegram/1FV0UW2Z7W3H1vZoLEV9oM9fSUQeb1XYT1w5GFoaXzZGsuI", "content": "", "creation_timestamp": "2025-05-08T09:00:07.000000Z"}, {"uuid": "228681c8-15f6-4d20-b35a-e10f493c64f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "published-proof-of-concept", "source": "Telegram/GVzbIvRKQ_pBb8RAmwM77aPrTfNfkOsNgLPsCj3jinnJ4WY", "content": "", "creation_timestamp": "2025-01-17T22:00:05.000000Z"}, {"uuid": "689eb2b9-d5e3-4611-94c8-ea8977a75c3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57609", "type": "published-proof-of-concept", "source": "Telegram/EPMWd4WNRecTWvESTQHlRCQzOU9qSgjrCdYAHbAYrOYLHsY", "content": "", "creation_timestamp": "2025-02-04T22:00:06.000000Z"}, {"uuid": "3a27963a-2cfa-4ebe-b9bb-6b751db9af6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57610", "type": "published-proof-of-concept", "source": "Telegram/EPMWd4WNRecTWvESTQHlRCQzOU9qSgjrCdYAHbAYrOYLHsY", "content": "", "creation_timestamp": "2025-02-04T22:00:06.000000Z"}, {"uuid": "e10b293a-6222-4ff9-ad8c-5d5c446f048c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57427", "type": "published-proof-of-concept", "source": "Telegram/Zrldk8z1EwjpYU8Vg3CSH1QFx-z50lEQp2XdvPCkQk6RQ8I", "content": "", "creation_timestamp": "2025-02-04T16:00:09.000000Z"}, {"uuid": "4f5bb0aa-e099-49bd-bbda-364bd8e38f92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57430", "type": "published-proof-of-concept", "source": "Telegram/Zrldk8z1EwjpYU8Vg3CSH1QFx-z50lEQp2XdvPCkQk6RQ8I", "content": "", "creation_timestamp": "2025-02-04T16:00:09.000000Z"}, {"uuid": "e3e84c57-73c2-4e9b-8f7d-a3269fd3da5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57429", "type": "published-proof-of-concept", "source": "Telegram/Zrldk8z1EwjpYU8Vg3CSH1QFx-z50lEQp2XdvPCkQk6RQ8I", "content": "", "creation_timestamp": "2025-02-04T16:00:09.000000Z"}, {"uuid": "6343d70b-787b-4b39-8dec-71cb007791cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57428", "type": "published-proof-of-concept", "source": "Telegram/Zrldk8z1EwjpYU8Vg3CSH1QFx-z50lEQp2XdvPCkQk6RQ8I", "content": "", "creation_timestamp": "2025-02-04T16:00:09.000000Z"}, {"uuid": "75ef23d7-2e71-4313-8671-7f7c72d3f3eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "published-proof-of-concept", "source": "Telegram/GQ3TWpg6INrtN9KxGnd3lhEVI_fRk0QGyDgSAA8YVIrxA4E", "content": "", "creation_timestamp": "2025-02-26T00:00:09.000000Z"}, {"uuid": "989ad4b8-36de-4d3f-8d0b-398e143e5607", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57487", "type": "published-proof-of-concept", "source": "Telegram/QXMR7F2jdeVfadE0UadP_87cUoa84idsq_cIO-k-scJwjtY", "content": "", "creation_timestamp": "2025-01-10T22:00:05.000000Z"}, {"uuid": "1ec6717a-235a-494c-b9b8-724502288492", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57488", "type": "published-proof-of-concept", "source": "Telegram/QXMR7F2jdeVfadE0UadP_87cUoa84idsq_cIO-k-scJwjtY", "content": "", "creation_timestamp": "2025-01-10T22:00:05.000000Z"}, {"uuid": "2603a5d8-2d82-4849-87ee-c385c2626716", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57972", "type": "published-proof-of-concept", "source": "Telegram/GzHF3F2ixYAIe8qMOMYQGibE4LU4BZAzw1J-VAyNYJhHJ4M", "content": "", "creation_timestamp": "2025-03-07T20:00:08.000000Z"}, {"uuid": "db9825ae-bc25-4873-89fe-1dac04945b2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57040", "type": "published-proof-of-concept", "source": "Telegram/I7jR8-nuB9vORcoqYQEKVbRbgCypJUG-yRbHBYfDVMuFag4", "content": "", "creation_timestamp": "2025-03-18T16:00:16.000000Z"}, {"uuid": "1c208972-d512-4095-bbad-9f3f1da1f36b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57040", "type": "published-proof-of-concept", "source": "Telegram/zR3G7SfYkfnK69UNOpyls_8VYWA0vIOvRqvJArx2ZbPMEdo", "content": "", "creation_timestamp": "2025-03-18T10:00:06.000000Z"}, {"uuid": "ce9e09d0-0608-4fbe-81ce-960ff8c1abb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57778", "type": "published-proof-of-concept", "source": "Telegram/_GFaz1X35pxMXpKQNkoVuia1y0aB-ecJ96SMHGZ5679nEQc", "content": "", "creation_timestamp": "2025-02-14T04:00:06.000000Z"}, {"uuid": "c45b9bc8-1e97-41a0-b29e-76e9d9035103", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5722", "type": "published-proof-of-concept", "source": "https://t.me/GrayHatsHack/8622", "content": "Tools - Hackers Factory \n\nEyes is an OSINT tool to get existing accounts from an email\n\nhttps://github.com/N0rz3/Eyes\n\nA wordlist of API names used for fuzzing web application APIs.\n\nhttps://github.com/chrislockard/api_wordlist\n\nSafeLine - Make your web apps secure\n\nhttps://github.com/chaitin/SafeLine\n\nLogsign Unified SecOps Platform: Detection CVE-2024-5716 to CVE-2024-5722 - Exploiting CVE-2024-5716 and CVE-2024-5717, Proof of Concept (PoC)\n\nhttps://github.com/j4nk3/Logsign-RCE\n\nMDUT (Multiple Database Utilization Tools) is a Chinese database cross platform utilization tool that integrates multiple mainstream database types.Based on the foundation of the predecessors SQLTOOLS, this program was developed (a tribute to SQLTOOLS), which aims to integrate common database utilization methods in one program, breaking the barriers that various database utilization tools require various environments and cause considerable inconvenience. In addition, the tool uses JAVAFx as the GUI operation interface, which is beautiful. At the same time, the program also supports simultaneous operation of multiple databases, each of which is independent of each other, which greatly facilitates the use of network security workers.\n\nhttps://github.com/SafeGroceryStore/MDUT\n\nSearch by Image is a browser extension that makes effortless reverse image searches possible, and comes with support for more than 30 search engines.\n\nhttps://github.com/dessant/search-by-image\n\nUnleashing an Ultimate XSS Polyglot\n\nhttps://github.com/0xsobky/HackVault/wiki/Unleashing-an-Ultimate-XSS-Polyglot\n\nBadsectorlabs/sccm-http-looter: Find interesting files stored on (System Center) Configuration Manager (SCCM/CM) shares via HTTP(s)''\n\nhttps://github.com/badsectorlabs/sccm-http-looter\n\nStreaming Overseer: A Telegram Monitoring Tool\n\nhttps://github.com/afolivieri/streaming_overseer\n\n#CyberDilara\nhttps://t.me/CyberDilara", "creation_timestamp": "2024-08-18T06:23:44.000000Z"}, {"uuid": "060a1d9a-4831-4060-b975-1dd727f17e9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5717", "type": "published-proof-of-concept", "source": "https://t.me/GrayHatsHack/8622", "content": "Tools - Hackers Factory \n\nEyes is an OSINT tool to get existing accounts from an email\n\nhttps://github.com/N0rz3/Eyes\n\nA wordlist of API names used for fuzzing web application APIs.\n\nhttps://github.com/chrislockard/api_wordlist\n\nSafeLine - Make your web apps secure\n\nhttps://github.com/chaitin/SafeLine\n\nLogsign Unified SecOps Platform: Detection CVE-2024-5716 to CVE-2024-5722 - Exploiting CVE-2024-5716 and CVE-2024-5717, Proof of Concept (PoC)\n\nhttps://github.com/j4nk3/Logsign-RCE\n\nMDUT (Multiple Database Utilization Tools) is a Chinese database cross platform utilization tool that integrates multiple mainstream database types.Based on the foundation of the predecessors SQLTOOLS, this program was developed (a tribute to SQLTOOLS), which aims to integrate common database utilization methods in one program, breaking the barriers that various database utilization tools require various environments and cause considerable inconvenience. In addition, the tool uses JAVAFx as the GUI operation interface, which is beautiful. At the same time, the program also supports simultaneous operation of multiple databases, each of which is independent of each other, which greatly facilitates the use of network security workers.\n\nhttps://github.com/SafeGroceryStore/MDUT\n\nSearch by Image is a browser extension that makes effortless reverse image searches possible, and comes with support for more than 30 search engines.\n\nhttps://github.com/dessant/search-by-image\n\nUnleashing an Ultimate XSS Polyglot\n\nhttps://github.com/0xsobky/HackVault/wiki/Unleashing-an-Ultimate-XSS-Polyglot\n\nBadsectorlabs/sccm-http-looter: Find interesting files stored on (System Center) Configuration Manager (SCCM/CM) shares via HTTP(s)''\n\nhttps://github.com/badsectorlabs/sccm-http-looter\n\nStreaming Overseer: A Telegram Monitoring Tool\n\nhttps://github.com/afolivieri/streaming_overseer\n\n#CyberDilara\nhttps://t.me/CyberDilara", "creation_timestamp": "2024-08-18T06:23:44.000000Z"}, {"uuid": "2c1d2aeb-01a7-4a38-84d7-2a9f08ac6220", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5716", "type": "published-proof-of-concept", "source": "https://t.me/GrayHatsHack/8622", "content": "Tools - Hackers Factory \n\nEyes is an OSINT tool to get existing accounts from an email\n\nhttps://github.com/N0rz3/Eyes\n\nA wordlist of API names used for fuzzing web application APIs.\n\nhttps://github.com/chrislockard/api_wordlist\n\nSafeLine - Make your web apps secure\n\nhttps://github.com/chaitin/SafeLine\n\nLogsign Unified SecOps Platform: Detection CVE-2024-5716 to CVE-2024-5722 - Exploiting CVE-2024-5716 and CVE-2024-5717, Proof of Concept (PoC)\n\nhttps://github.com/j4nk3/Logsign-RCE\n\nMDUT (Multiple Database Utilization Tools) is a Chinese database cross platform utilization tool that integrates multiple mainstream database types.Based on the foundation of the predecessors SQLTOOLS, this program was developed (a tribute to SQLTOOLS), which aims to integrate common database utilization methods in one program, breaking the barriers that various database utilization tools require various environments and cause considerable inconvenience. In addition, the tool uses JAVAFx as the GUI operation interface, which is beautiful. At the same time, the program also supports simultaneous operation of multiple databases, each of which is independent of each other, which greatly facilitates the use of network security workers.\n\nhttps://github.com/SafeGroceryStore/MDUT\n\nSearch by Image is a browser extension that makes effortless reverse image searches possible, and comes with support for more than 30 search engines.\n\nhttps://github.com/dessant/search-by-image\n\nUnleashing an Ultimate XSS Polyglot\n\nhttps://github.com/0xsobky/HackVault/wiki/Unleashing-an-Ultimate-XSS-Polyglot\n\nBadsectorlabs/sccm-http-looter: Find interesting files stored on (System Center) Configuration Manager (SCCM/CM) shares via HTTP(s)''\n\nhttps://github.com/badsectorlabs/sccm-http-looter\n\nStreaming Overseer: A Telegram Monitoring Tool\n\nhttps://github.com/afolivieri/streaming_overseer\n\n#CyberDilara\nhttps://t.me/CyberDilara", "creation_timestamp": "2024-08-18T06:23:44.000000Z"}, {"uuid": "e736597a-e34f-4431-8bf0-0afd6049f96a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5722", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/3677", "content": "Tools - Hackers Factory \n\nEyes is an OSINT tool to get existing accounts from an email\n\nhttps://github.com/N0rz3/Eyes\n\nA wordlist of API names used for fuzzing web application APIs.\n\nhttps://github.com/chrislockard/api_wordlist\n\nSafeLine - Make your web apps secure\n\nhttps://github.com/chaitin/SafeLine\n\nLogsign Unified SecOps Platform: Detection CVE-2024-5716 to CVE-2024-5722 - Exploiting CVE-2024-5716 and CVE-2024-5717, Proof of Concept (PoC)\n\nhttps://github.com/j4nk3/Logsign-RCE\n\nMDUT (Multiple Database Utilization Tools) is a Chinese database cross platform utilization tool that integrates multiple mainstream database types.Based on the foundation of the predecessors SQLTOOLS, this program was developed (a tribute to SQLTOOLS), which aims to integrate common database utilization methods in one program, breaking the barriers that various database utilization tools require various environments and cause considerable inconvenience. In addition, the tool uses JAVAFx as the GUI operation interface, which is beautiful. At the same time, the program also supports simultaneous operation of multiple databases, each of which is independent of each other, which greatly facilitates the use of network security workers.\n\nhttps://github.com/SafeGroceryStore/MDUT\n\nSearch by Image is a browser extension that makes effortless reverse image searches possible, and comes with support for more than 30 search engines.\n\nhttps://github.com/dessant/search-by-image\n\nUnleashing an Ultimate XSS Polyglot\n\nhttps://github.com/0xsobky/HackVault/wiki/Unleashing-an-Ultimate-XSS-Polyglot\n\nBadsectorlabs/sccm-http-looter: Find interesting files stored on (System Center) Configuration Manager (SCCM/CM) shares via HTTP(s)''\n\nhttps://github.com/badsectorlabs/sccm-http-looter\n\nStreaming Overseer: A Telegram Monitoring Tool\n\nhttps://github.com/afolivieri/streaming_overseer\n\n#CyberDilara\nhttps://t.me/CyberDilara", "creation_timestamp": "2024-08-18T06:23:33.000000Z"}, {"uuid": "8a0ba608-765c-4e26-b2d1-dfa731711d84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5717", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/3677", "content": "Tools - Hackers Factory \n\nEyes is an OSINT tool to get existing accounts from an email\n\nhttps://github.com/N0rz3/Eyes\n\nA wordlist of API names used for fuzzing web application APIs.\n\nhttps://github.com/chrislockard/api_wordlist\n\nSafeLine - Make your web apps secure\n\nhttps://github.com/chaitin/SafeLine\n\nLogsign Unified SecOps Platform: Detection CVE-2024-5716 to CVE-2024-5722 - Exploiting CVE-2024-5716 and CVE-2024-5717, Proof of Concept (PoC)\n\nhttps://github.com/j4nk3/Logsign-RCE\n\nMDUT (Multiple Database Utilization Tools) is a Chinese database cross platform utilization tool that integrates multiple mainstream database types.Based on the foundation of the predecessors SQLTOOLS, this program was developed (a tribute to SQLTOOLS), which aims to integrate common database utilization methods in one program, breaking the barriers that various database utilization tools require various environments and cause considerable inconvenience. In addition, the tool uses JAVAFx as the GUI operation interface, which is beautiful. At the same time, the program also supports simultaneous operation of multiple databases, each of which is independent of each other, which greatly facilitates the use of network security workers.\n\nhttps://github.com/SafeGroceryStore/MDUT\n\nSearch by Image is a browser extension that makes effortless reverse image searches possible, and comes with support for more than 30 search engines.\n\nhttps://github.com/dessant/search-by-image\n\nUnleashing an Ultimate XSS Polyglot\n\nhttps://github.com/0xsobky/HackVault/wiki/Unleashing-an-Ultimate-XSS-Polyglot\n\nBadsectorlabs/sccm-http-looter: Find interesting files stored on (System Center) Configuration Manager (SCCM/CM) shares via HTTP(s)''\n\nhttps://github.com/badsectorlabs/sccm-http-looter\n\nStreaming Overseer: A Telegram Monitoring Tool\n\nhttps://github.com/afolivieri/streaming_overseer\n\n#CyberDilara\nhttps://t.me/CyberDilara", "creation_timestamp": "2024-08-18T06:23:33.000000Z"}, {"uuid": "ee3267a8-064d-4503-86b3-c56614a59ed1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5716", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/3677", "content": "Tools - Hackers Factory \n\nEyes is an OSINT tool to get existing accounts from an email\n\nhttps://github.com/N0rz3/Eyes\n\nA wordlist of API names used for fuzzing web application APIs.\n\nhttps://github.com/chrislockard/api_wordlist\n\nSafeLine - Make your web apps secure\n\nhttps://github.com/chaitin/SafeLine\n\nLogsign Unified SecOps Platform: Detection CVE-2024-5716 to CVE-2024-5722 - Exploiting CVE-2024-5716 and CVE-2024-5717, Proof of Concept (PoC)\n\nhttps://github.com/j4nk3/Logsign-RCE\n\nMDUT (Multiple Database Utilization Tools) is a Chinese database cross platform utilization tool that integrates multiple mainstream database types.Based on the foundation of the predecessors SQLTOOLS, this program was developed (a tribute to SQLTOOLS), which aims to integrate common database utilization methods in one program, breaking the barriers that various database utilization tools require various environments and cause considerable inconvenience. In addition, the tool uses JAVAFx as the GUI operation interface, which is beautiful. At the same time, the program also supports simultaneous operation of multiple databases, each of which is independent of each other, which greatly facilitates the use of network security workers.\n\nhttps://github.com/SafeGroceryStore/MDUT\n\nSearch by Image is a browser extension that makes effortless reverse image searches possible, and comes with support for more than 30 search engines.\n\nhttps://github.com/dessant/search-by-image\n\nUnleashing an Ultimate XSS Polyglot\n\nhttps://github.com/0xsobky/HackVault/wiki/Unleashing-an-Ultimate-XSS-Polyglot\n\nBadsectorlabs/sccm-http-looter: Find interesting files stored on (System Center) Configuration Manager (SCCM/CM) shares via HTTP(s)''\n\nhttps://github.com/badsectorlabs/sccm-http-looter\n\nStreaming Overseer: A Telegram Monitoring Tool\n\nhttps://github.com/afolivieri/streaming_overseer\n\n#CyberDilara\nhttps://t.me/CyberDilara", "creation_timestamp": "2024-08-18T06:23:33.000000Z"}, {"uuid": "a553f729-2869-4aa6-8b68-e352b3ed9a9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5717", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/2225", "content": "\u041f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430 Logsign Unified SecOps\n*\nCVE: CVE-2024-5716 to CVE-2024-5722 \u0438 CVE-2024-5716 CVE-2024-5717\n*\nRCE + ByPass  (+ \u0448\u0430\u0431\u043b\u043e\u043d\u044b nuclei)\n*\nPOC exploits", "creation_timestamp": "2024-08-13T07:17:46.000000Z"}, {"uuid": "c476cd0b-1338-4385-92f6-41bf642a5000", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5716", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/2225", "content": "\u041f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430 Logsign Unified SecOps\n*\nCVE: CVE-2024-5716 to CVE-2024-5722 \u0438 CVE-2024-5716 CVE-2024-5717\n*\nRCE + ByPass  (+ \u0448\u0430\u0431\u043b\u043e\u043d\u044b nuclei)\n*\nPOC exploits", "creation_timestamp": "2024-08-13T07:17:46.000000Z"}, {"uuid": "8142697d-5314-4ba2-baeb-4376cd45c92c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5722", "type": "published-proof-of-concept", "source": "https://t.me/GrayHatsHack/7299", "content": "Tools - Hackers Factory \n\nEyes is an OSINT tool to get existing accounts from an email\n\nhttps://github.com/N0rz3/Eyes\n\nA wordlist of API names used for fuzzing web application APIs.\n\nhttps://github.com/chrislockard/api_wordlist\n\nSafeLine - Make your web apps secure\n\nhttps://github.com/chaitin/SafeLine\n\nLogsign Unified SecOps Platform: Detection CVE-2024-5716 to CVE-2024-5722 - Exploiting CVE-2024-5716 and CVE-2024-5717, Proof of Concept (PoC)\n\nhttps://github.com/j4nk3/Logsign-RCE\n\nMDUT (Multiple Database Utilization Tools) is a Chinese database cross platform utilization tool that integrates multiple mainstream database types.Based on the foundation of the predecessors SQLTOOLS, this program was developed (a tribute to SQLTOOLS), which aims to integrate common database utilization methods in one program, breaking the barriers that various database utilization tools require various environments and cause considerable inconvenience. In addition, the tool uses JAVAFx as the GUI operation interface, which is beautiful. At the same time, the program also supports simultaneous operation of multiple databases, each of which is independent of each other, which greatly facilitates the use of network security workers.\n\nhttps://github.com/SafeGroceryStore/MDUT\n\nSearch by Image is a browser extension that makes effortless reverse image searches possible, and comes with support for more than 30 search engines.\n\nhttps://github.com/dessant/search-by-image\n\nUnleashing an Ultimate XSS Polyglot\n\nhttps://github.com/0xsobky/HackVault/wiki/Unleashing-an-Ultimate-XSS-Polyglot\n\nBadsectorlabs/sccm-http-looter: Find interesting files stored on (System Center) Configuration Manager (SCCM/CM) shares via HTTP(s)''\n\nhttps://github.com/badsectorlabs/sccm-http-looter\n\nStreaming Overseer: A Telegram Monitoring Tool\n\nhttps://github.com/afolivieri/streaming_overseer\n\n#CyberDilara\nhttps://t.me/CyberDilara", "creation_timestamp": "2024-08-18T06:23:44.000000Z"}, {"uuid": "5a0b58be-796c-49a4-b545-490eb14ebad6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5717", "type": "published-proof-of-concept", "source": "https://t.me/GrayHatsHack/7299", "content": "Tools - Hackers Factory \n\nEyes is an OSINT tool to get existing accounts from an email\n\nhttps://github.com/N0rz3/Eyes\n\nA wordlist of API names used for fuzzing web application APIs.\n\nhttps://github.com/chrislockard/api_wordlist\n\nSafeLine - Make your web apps secure\n\nhttps://github.com/chaitin/SafeLine\n\nLogsign Unified SecOps Platform: Detection CVE-2024-5716 to CVE-2024-5722 - Exploiting CVE-2024-5716 and CVE-2024-5717, Proof of Concept (PoC)\n\nhttps://github.com/j4nk3/Logsign-RCE\n\nMDUT (Multiple Database Utilization Tools) is a Chinese database cross platform utilization tool that integrates multiple mainstream database types.Based on the foundation of the predecessors SQLTOOLS, this program was developed (a tribute to SQLTOOLS), which aims to integrate common database utilization methods in one program, breaking the barriers that various database utilization tools require various environments and cause considerable inconvenience. In addition, the tool uses JAVAFx as the GUI operation interface, which is beautiful. At the same time, the program also supports simultaneous operation of multiple databases, each of which is independent of each other, which greatly facilitates the use of network security workers.\n\nhttps://github.com/SafeGroceryStore/MDUT\n\nSearch by Image is a browser extension that makes effortless reverse image searches possible, and comes with support for more than 30 search engines.\n\nhttps://github.com/dessant/search-by-image\n\nUnleashing an Ultimate XSS Polyglot\n\nhttps://github.com/0xsobky/HackVault/wiki/Unleashing-an-Ultimate-XSS-Polyglot\n\nBadsectorlabs/sccm-http-looter: Find interesting files stored on (System Center) Configuration Manager (SCCM/CM) shares via HTTP(s)''\n\nhttps://github.com/badsectorlabs/sccm-http-looter\n\nStreaming Overseer: A Telegram Monitoring Tool\n\nhttps://github.com/afolivieri/streaming_overseer\n\n#CyberDilara\nhttps://t.me/CyberDilara", "creation_timestamp": "2024-08-18T06:23:44.000000Z"}, {"uuid": "f5ca98c0-7a9f-4ab0-9747-280007856807", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5716", "type": "published-proof-of-concept", "source": "https://t.me/GrayHatsHack/7299", "content": "Tools - Hackers Factory \n\nEyes is an OSINT tool to get existing accounts from an email\n\nhttps://github.com/N0rz3/Eyes\n\nA wordlist of API names used for fuzzing web application APIs.\n\nhttps://github.com/chrislockard/api_wordlist\n\nSafeLine - Make your web apps secure\n\nhttps://github.com/chaitin/SafeLine\n\nLogsign Unified SecOps Platform: Detection CVE-2024-5716 to CVE-2024-5722 - Exploiting CVE-2024-5716 and CVE-2024-5717, Proof of Concept (PoC)\n\nhttps://github.com/j4nk3/Logsign-RCE\n\nMDUT (Multiple Database Utilization Tools) is a Chinese database cross platform utilization tool that integrates multiple mainstream database types.Based on the foundation of the predecessors SQLTOOLS, this program was developed (a tribute to SQLTOOLS), which aims to integrate common database utilization methods in one program, breaking the barriers that various database utilization tools require various environments and cause considerable inconvenience. In addition, the tool uses JAVAFx as the GUI operation interface, which is beautiful. At the same time, the program also supports simultaneous operation of multiple databases, each of which is independent of each other, which greatly facilitates the use of network security workers.\n\nhttps://github.com/SafeGroceryStore/MDUT\n\nSearch by Image is a browser extension that makes effortless reverse image searches possible, and comes with support for more than 30 search engines.\n\nhttps://github.com/dessant/search-by-image\n\nUnleashing an Ultimate XSS Polyglot\n\nhttps://github.com/0xsobky/HackVault/wiki/Unleashing-an-Ultimate-XSS-Polyglot\n\nBadsectorlabs/sccm-http-looter: Find interesting files stored on (System Center) Configuration Manager (SCCM/CM) shares via HTTP(s)''\n\nhttps://github.com/badsectorlabs/sccm-http-looter\n\nStreaming Overseer: A Telegram Monitoring Tool\n\nhttps://github.com/afolivieri/streaming_overseer\n\n#CyberDilara\nhttps://t.me/CyberDilara", "creation_timestamp": "2024-08-18T06:23:44.000000Z"}, {"uuid": "8d60b21a-9c84-436c-bd6f-2109ac309efc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5765", "type": "published-proof-of-concept", "source": "https://t.me/codeb0ss/1572", "content": "", "creation_timestamp": "2024-08-27T14:23:34.000000Z"}, {"uuid": "cf97c5df-59d9-4c0a-a706-e53b652d89cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "seen", "source": "https://t.me/true_secator/6670", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442 \u043e \u0434\u0432\u0443\u0445 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f\u0445, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439 \u0443\u0437\u044f\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 SimpleHelp Remote Monitoring and Management (RMM) \u0438 SonicWall Secure Mobile Access (SMA) 1000.\n\n\u041f\u0435\u0440\u0432\u0430\u044f \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f SimpleHelp RMM \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0446\u0435\u043b\u0435\u0432\u044b\u043c \u0441\u0435\u0442\u044f\u043c.\n\nCVE-2024-57726, CVE-2024-57727 \u0438 CVE-2024-57728 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0438 \u0432\u044b\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0438 \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0438\u00a0\u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 Horizon3\u00a0\u0434\u0432\u0435 \u043d\u0435\u0434\u0435\u043b\u0438 \u043d\u0430\u0437\u0430\u0434. SimpleHelp \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043c\u0435\u0436\u0434\u0443 8 \u0438 13 \u044f\u043d\u0432\u0430\u0440\u044f \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430 5.5.8, 5.4.10 \u0438 5.3.9.\n\n\u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 Arctic Wolf \u0438 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b SimpleHelp \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0434\u0435\u043b\u044e \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a Horizon3 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u043a\u0430 \u0442\u043e\u0447\u043d\u043e \u043d\u0435 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u043b\u0438, \u0447\u0442\u043e \u0430\u0442\u0430\u043a\u0438 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0442 \u0438\u043c\u0435\u043d\u043d\u043e \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043d\u043e \u0441\u0432\u044f\u0437\u044b\u0432\u0430\u0435\u0442 \u0441\u0432\u043e\u0438 \u043d\u0430\u0431\u043b\u044e\u0434\u0435\u043d\u0438\u044f \u0441 \u043e\u0442\u0447\u0435\u0442\u043e\u043c Horizon3 \u0441\u043e \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u044c\u044e \u0443\u0432\u0435\u0440\u0435\u043d\u043d\u043e\u0441\u0442\u0438.\n\n\u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435, Arctic Wolf \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f SimpleHelp, \u0433\u0434\u0435 \u044d\u0442\u043e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e.\n\n\u0412 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044f\u0445, \u043a\u043e\u0433\u0434\u0430 \u043a\u043b\u0438\u0435\u043d\u0442 SimpleHelp \u0431\u044b\u043b \u0440\u0430\u043d\u0435\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0434\u043b\u044f \u0441\u0435\u0430\u043d\u0441\u043e\u0432 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0435\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438, \u043d\u043e \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0432 \u043f\u043e\u0432\u0441\u0435\u0434\u043d\u0435\u0432\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u0435, Arctic Wolf \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u041f\u041e, \u0447\u0442\u043e\u0431\u044b \u0443\u043c\u0435\u043d\u044c\u0448\u0438\u0442\u044c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u043f\u043e\u0432\u0435\u0440\u0445\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u0438.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, Shadowserver Foundation \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u0447\u0442\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0432 \u0441\u0435\u0442\u0438 580 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432, \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 (345) - \u0432 \u0421\u0428\u0410.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f SonicWall \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430, \u0447\u0442\u043e 0-day \u0432 SMA 1000, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2025-23006, \u0431\u044b\u043b\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430\u00a0\u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u0438 \u043f\u0440\u043e\u0438\u043d\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043b\u0430, \u0447\u0442\u043e \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f Appliance Management Console (AMC) \u0438 Central Management Console (CMC) \u0448\u043b\u044e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\nCVE-2025-23006 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 SMA1000 \u0441 \u0432\u044b\u043f\u0443\u0441\u043a\u043e\u043c \u0432\u0435\u0440\u0441\u0438\u0438 12.4.3-02854 \u0438 \u0438\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 Microsoft.\n\n\u0422\u043e\u0433\u0434\u0430 SonicWall \u0432\u00a0\u0441\u0440\u043e\u0447\u043d\u043e\u043c \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0438 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430 \u0444\u0430\u043a\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445, \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u0438\u043c\u0435\u044e\u0449\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u043c\u0443 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 (\u043a\u0430\u043a \u0432 \u043e\u0434\u043d\u043e-, \u0442\u0430\u043a \u0438 \u0432 \u0434\u0432\u0443\u0445\u0434\u043e\u043c\u0435\u043d\u043d\u043e\u0439 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430), \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c CVE-2025-23006 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430\n\nShodan \u0438 Censys \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0442 \u043e\u043a\u043e\u043b\u043e 2000 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 SMA, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442, \u0430 Netlas - \u043e\u043a\u043e\u043b\u043e 4000, \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0430\u0445\u043e\u0434\u044f\u0442\u0441\u044f \u0432 \u0421\u0428\u0410.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0438\u0448\u0443\u0442, \u0447\u0442\u043e \u0442\u043e\u043b\u044c\u043a\u043e 215 \u0438\u0437 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 Shodan \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u043f\u043e-\u0432\u0438\u0434\u0438\u043c\u043e\u043c\u0443, \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442 \u0441\u0432\u043e\u0439 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2025-23006.\n\n\u041d\u043e \u0431\u0443\u0434\u0435\u043c \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0447\u0430\u0441\u0442\u043e \u043d\u0430\u0446\u0435\u043b\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b SonicWall \u0438 \u0432\u0440\u044f\u0434 \u043b\u0438 \u0443\u043f\u0443\u0441\u0442\u044f\u0442 \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u0443\u044e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c.", "creation_timestamp": "2025-01-29T13:50:05.000000Z"}, {"uuid": "da3d2c3a-5b34-468d-b432-3e02b94bc5c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57728", "type": "seen", "source": "https://t.me/true_secator/6670", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442 \u043e \u0434\u0432\u0443\u0445 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f\u0445, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439 \u0443\u0437\u044f\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 SimpleHelp Remote Monitoring and Management (RMM) \u0438 SonicWall Secure Mobile Access (SMA) 1000.\n\n\u041f\u0435\u0440\u0432\u0430\u044f \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f SimpleHelp RMM \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0446\u0435\u043b\u0435\u0432\u044b\u043c \u0441\u0435\u0442\u044f\u043c.\n\nCVE-2024-57726, CVE-2024-57727 \u0438 CVE-2024-57728 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0438 \u0432\u044b\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0438 \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0438\u00a0\u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 Horizon3\u00a0\u0434\u0432\u0435 \u043d\u0435\u0434\u0435\u043b\u0438 \u043d\u0430\u0437\u0430\u0434. SimpleHelp \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043c\u0435\u0436\u0434\u0443 8 \u0438 13 \u044f\u043d\u0432\u0430\u0440\u044f \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430 5.5.8, 5.4.10 \u0438 5.3.9.\n\n\u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 Arctic Wolf \u0438 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b SimpleHelp \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0434\u0435\u043b\u044e \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a Horizon3 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u043a\u0430 \u0442\u043e\u0447\u043d\u043e \u043d\u0435 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u043b\u0438, \u0447\u0442\u043e \u0430\u0442\u0430\u043a\u0438 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0442 \u0438\u043c\u0435\u043d\u043d\u043e \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043d\u043e \u0441\u0432\u044f\u0437\u044b\u0432\u0430\u0435\u0442 \u0441\u0432\u043e\u0438 \u043d\u0430\u0431\u043b\u044e\u0434\u0435\u043d\u0438\u044f \u0441 \u043e\u0442\u0447\u0435\u0442\u043e\u043c Horizon3 \u0441\u043e \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u044c\u044e \u0443\u0432\u0435\u0440\u0435\u043d\u043d\u043e\u0441\u0442\u0438.\n\n\u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435, Arctic Wolf \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f SimpleHelp, \u0433\u0434\u0435 \u044d\u0442\u043e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e.\n\n\u0412 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044f\u0445, \u043a\u043e\u0433\u0434\u0430 \u043a\u043b\u0438\u0435\u043d\u0442 SimpleHelp \u0431\u044b\u043b \u0440\u0430\u043d\u0435\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0434\u043b\u044f \u0441\u0435\u0430\u043d\u0441\u043e\u0432 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0435\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438, \u043d\u043e \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0432 \u043f\u043e\u0432\u0441\u0435\u0434\u043d\u0435\u0432\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u0435, Arctic Wolf \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u041f\u041e, \u0447\u0442\u043e\u0431\u044b \u0443\u043c\u0435\u043d\u044c\u0448\u0438\u0442\u044c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u043f\u043e\u0432\u0435\u0440\u0445\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u0438.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, Shadowserver Foundation \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u0447\u0442\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0432 \u0441\u0435\u0442\u0438 580 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432, \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 (345) - \u0432 \u0421\u0428\u0410.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f SonicWall \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430, \u0447\u0442\u043e 0-day \u0432 SMA 1000, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2025-23006, \u0431\u044b\u043b\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430\u00a0\u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u0438 \u043f\u0440\u043e\u0438\u043d\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043b\u0430, \u0447\u0442\u043e \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f Appliance Management Console (AMC) \u0438 Central Management Console (CMC) \u0448\u043b\u044e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\nCVE-2025-23006 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 SMA1000 \u0441 \u0432\u044b\u043f\u0443\u0441\u043a\u043e\u043c \u0432\u0435\u0440\u0441\u0438\u0438 12.4.3-02854 \u0438 \u0438\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 Microsoft.\n\n\u0422\u043e\u0433\u0434\u0430 SonicWall \u0432\u00a0\u0441\u0440\u043e\u0447\u043d\u043e\u043c \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0438 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430 \u0444\u0430\u043a\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445, \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u0438\u043c\u0435\u044e\u0449\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u043c\u0443 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 (\u043a\u0430\u043a \u0432 \u043e\u0434\u043d\u043e-, \u0442\u0430\u043a \u0438 \u0432 \u0434\u0432\u0443\u0445\u0434\u043e\u043c\u0435\u043d\u043d\u043e\u0439 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430), \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c CVE-2025-23006 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430\n\nShodan \u0438 Censys \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0442 \u043e\u043a\u043e\u043b\u043e 2000 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 SMA, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442, \u0430 Netlas - \u043e\u043a\u043e\u043b\u043e 4000, \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0430\u0445\u043e\u0434\u044f\u0442\u0441\u044f \u0432 \u0421\u0428\u0410.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0438\u0448\u0443\u0442, \u0447\u0442\u043e \u0442\u043e\u043b\u044c\u043a\u043e 215 \u0438\u0437 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 Shodan \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u043f\u043e-\u0432\u0438\u0434\u0438\u043c\u043e\u043c\u0443, \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442 \u0441\u0432\u043e\u0439 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2025-23006.\n\n\u041d\u043e \u0431\u0443\u0434\u0435\u043c \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0447\u0430\u0441\u0442\u043e \u043d\u0430\u0446\u0435\u043b\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b SonicWall \u0438 \u0432\u0440\u044f\u0434 \u043b\u0438 \u0443\u043f\u0443\u0441\u0442\u044f\u0442 \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u0443\u044e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c.", "creation_timestamp": "2025-01-29T13:50:05.000000Z"}, {"uuid": "ccd3486a-b8a7-4441-922d-52c5ab8eeebd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57726", "type": "seen", "source": "https://t.me/true_secator/6670", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442 \u043e \u0434\u0432\u0443\u0445 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f\u0445, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439 \u0443\u0437\u044f\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 SimpleHelp Remote Monitoring and Management (RMM) \u0438 SonicWall Secure Mobile Access (SMA) 1000.\n\n\u041f\u0435\u0440\u0432\u0430\u044f \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f SimpleHelp RMM \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0446\u0435\u043b\u0435\u0432\u044b\u043c \u0441\u0435\u0442\u044f\u043c.\n\nCVE-2024-57726, CVE-2024-57727 \u0438 CVE-2024-57728 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0438 \u0432\u044b\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0438 \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0438\u00a0\u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 Horizon3\u00a0\u0434\u0432\u0435 \u043d\u0435\u0434\u0435\u043b\u0438 \u043d\u0430\u0437\u0430\u0434. SimpleHelp \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043c\u0435\u0436\u0434\u0443 8 \u0438 13 \u044f\u043d\u0432\u0430\u0440\u044f \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430 5.5.8, 5.4.10 \u0438 5.3.9.\n\n\u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 Arctic Wolf \u0438 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b SimpleHelp \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0434\u0435\u043b\u044e \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a Horizon3 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u043a\u0430 \u0442\u043e\u0447\u043d\u043e \u043d\u0435 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u043b\u0438, \u0447\u0442\u043e \u0430\u0442\u0430\u043a\u0438 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0442 \u0438\u043c\u0435\u043d\u043d\u043e \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043d\u043e \u0441\u0432\u044f\u0437\u044b\u0432\u0430\u0435\u0442 \u0441\u0432\u043e\u0438 \u043d\u0430\u0431\u043b\u044e\u0434\u0435\u043d\u0438\u044f \u0441 \u043e\u0442\u0447\u0435\u0442\u043e\u043c Horizon3 \u0441\u043e \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u044c\u044e \u0443\u0432\u0435\u0440\u0435\u043d\u043d\u043e\u0441\u0442\u0438.\n\n\u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435, Arctic Wolf \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f SimpleHelp, \u0433\u0434\u0435 \u044d\u0442\u043e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e.\n\n\u0412 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044f\u0445, \u043a\u043e\u0433\u0434\u0430 \u043a\u043b\u0438\u0435\u043d\u0442 SimpleHelp \u0431\u044b\u043b \u0440\u0430\u043d\u0435\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0434\u043b\u044f \u0441\u0435\u0430\u043d\u0441\u043e\u0432 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0435\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438, \u043d\u043e \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0432 \u043f\u043e\u0432\u0441\u0435\u0434\u043d\u0435\u0432\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u0435, Arctic Wolf \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u041f\u041e, \u0447\u0442\u043e\u0431\u044b \u0443\u043c\u0435\u043d\u044c\u0448\u0438\u0442\u044c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u043f\u043e\u0432\u0435\u0440\u0445\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u0438.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, Shadowserver Foundation \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u0447\u0442\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0432 \u0441\u0435\u0442\u0438 580 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432, \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 (345) - \u0432 \u0421\u0428\u0410.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f SonicWall \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430, \u0447\u0442\u043e 0-day \u0432 SMA 1000, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2025-23006, \u0431\u044b\u043b\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430\u00a0\u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u0438 \u043f\u0440\u043e\u0438\u043d\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043b\u0430, \u0447\u0442\u043e \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f Appliance Management Console (AMC) \u0438 Central Management Console (CMC) \u0448\u043b\u044e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\nCVE-2025-23006 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 SMA1000 \u0441 \u0432\u044b\u043f\u0443\u0441\u043a\u043e\u043c \u0432\u0435\u0440\u0441\u0438\u0438 12.4.3-02854 \u0438 \u0438\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 Microsoft.\n\n\u0422\u043e\u0433\u0434\u0430 SonicWall \u0432\u00a0\u0441\u0440\u043e\u0447\u043d\u043e\u043c \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0438 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430 \u0444\u0430\u043a\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445, \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u0438\u043c\u0435\u044e\u0449\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u043c\u0443 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 (\u043a\u0430\u043a \u0432 \u043e\u0434\u043d\u043e-, \u0442\u0430\u043a \u0438 \u0432 \u0434\u0432\u0443\u0445\u0434\u043e\u043c\u0435\u043d\u043d\u043e\u0439 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430), \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c CVE-2025-23006 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430\n\nShodan \u0438 Censys \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0442 \u043e\u043a\u043e\u043b\u043e 2000 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 SMA, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442, \u0430 Netlas - \u043e\u043a\u043e\u043b\u043e 4000, \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0430\u0445\u043e\u0434\u044f\u0442\u0441\u044f \u0432 \u0421\u0428\u0410.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0438\u0448\u0443\u0442, \u0447\u0442\u043e \u0442\u043e\u043b\u044c\u043a\u043e 215 \u0438\u0437 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 Shodan \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u043f\u043e-\u0432\u0438\u0434\u0438\u043c\u043e\u043c\u0443, \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442 \u0441\u0432\u043e\u0439 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2025-23006.\n\n\u041d\u043e \u0431\u0443\u0434\u0435\u043c \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0447\u0430\u0441\u0442\u043e \u043d\u0430\u0446\u0435\u043b\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b SonicWall \u0438 \u0432\u0440\u044f\u0434 \u043b\u0438 \u0443\u043f\u0443\u0441\u0442\u044f\u0442 \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u0443\u044e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c.", "creation_timestamp": "2025-01-29T13:50:05.000000Z"}, {"uuid": "5d962a55-efe7-49d8-91f0-8d2017b2dc75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "seen", "source": "https://t.me/true_secator/6621", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Horizon3.ai \u043d\u0430\u0448\u043b\u0438 \u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 SimpleHelp, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, EoP \u0438 RCE, \u0438\u0445 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043b\u0435\u0433\u043a\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u0438 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u0441\u0442\u043e \u043f\u043e\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c.\n\n\u041f\u0435\u0440\u0432\u0430\u044f CVE-2024-57727 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 SimpleHelp, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0444\u0430\u0439\u043b serverconfig.xml, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0439 \u0445\u0435\u0448\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043f\u0430\u0440\u043e\u043b\u0438 \u0434\u043b\u044f \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 SimpleHelpAdmin \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439.\n\n\u0412\u0442\u043e\u0440\u0430\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2024-57728 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u043e\u0439 \u0444\u0430\u0439\u043b\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 SimpleHelpAdmin \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0432 \u043b\u044e\u0431\u043e\u0435 \u043c\u0435\u0441\u0442\u043e \u043d\u0430 \u0445\u043e\u0441\u0442\u0435 SimpleServer, \u0447\u0442\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a RCE.\n\n\u0422\u0440\u0435\u0442\u044c\u044f CVE-2024-57726\u00a0\u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0435\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0442\u0435\u0445\u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u0430 \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438, \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430, \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0432\u0448\u0438\u0441\u044c \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u043e\u043a \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u043d\u0430 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u043c \u0443\u0440\u043e\u0432\u043d\u0435.\n\n\u0412 \u0433\u0438\u043f\u043e\u0442\u0435\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0438 \u0430\u0442\u0430\u043a\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0441\u0432\u044f\u0437\u0430\u0442\u044c CVE-2024-57726 \u0438 CVE-2024-57728, \u0447\u0442\u043e\u0431\u044b \u0441\u0442\u0430\u0442\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u043c \u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c SimpleHelp.\n\n\u041a \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u043c\u0443 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 Horizon3.ai \u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e \u0442\u0440\u0435\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445, \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u044f \u0438\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0441\u0442\u044c \u0438 \u043f\u0440\u043e\u0441\u0442\u043e\u0442\u0443 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f.\n\n\u041f\u043e\u0441\u043b\u0435 \u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 6 \u044f\u043d\u0432\u0430\u0440\u044f 2025 \u0433\u043e\u0434\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0431\u044b\u043b\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0432\u00a0\u0432\u0435\u0440\u0441\u0438\u044f\u0445 SimpleHelp 5.3.9, 5.4.10 \u0438 5.5.8, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0445 8 \u0438 13 \u044f\u043d\u0432\u0430\u0440\u044f.\n\n\u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043e\u0431\u044b\u0447\u043d\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0447\u0430\u0441\u0442\u043e \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430\u00a0\u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e\u0433\u043e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0446\u0435\u043b\u0435\u0432\u044b\u043c \u0441\u0440\u0435\u0434\u0430\u043c, \u043a\u0440\u0430\u0439\u043d\u0435 \u0432\u0430\u0436\u043d\u043e \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u043d\u0430\u043a\u0430\u0442\u0438\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, SimpleHelp \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0441\u043c\u0435\u043d\u0438\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u0441\u043c\u0435\u043d\u0438\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u0438 \u0434\u043b\u044f \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432 \u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c IP-\u0430\u0434\u0440\u0435\u0441\u0430 \u0432\u0445\u043e\u0434\u0430 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432 \u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432.", "creation_timestamp": "2025-01-15T13:18:05.000000Z"}, {"uuid": "7852c922-dcca-46d2-b958-c06ce9f414f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57728", "type": "seen", "source": "https://t.me/true_secator/6621", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Horizon3.ai \u043d\u0430\u0448\u043b\u0438 \u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 SimpleHelp, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, EoP \u0438 RCE, \u0438\u0445 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043b\u0435\u0433\u043a\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u0438 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u0441\u0442\u043e \u043f\u043e\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c.\n\n\u041f\u0435\u0440\u0432\u0430\u044f CVE-2024-57727 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 SimpleHelp, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0444\u0430\u0439\u043b serverconfig.xml, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0439 \u0445\u0435\u0448\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043f\u0430\u0440\u043e\u043b\u0438 \u0434\u043b\u044f \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 SimpleHelpAdmin \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439.\n\n\u0412\u0442\u043e\u0440\u0430\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2024-57728 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u043e\u0439 \u0444\u0430\u0439\u043b\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 SimpleHelpAdmin \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0432 \u043b\u044e\u0431\u043e\u0435 \u043c\u0435\u0441\u0442\u043e \u043d\u0430 \u0445\u043e\u0441\u0442\u0435 SimpleServer, \u0447\u0442\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a RCE.\n\n\u0422\u0440\u0435\u0442\u044c\u044f CVE-2024-57726\u00a0\u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0435\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0442\u0435\u0445\u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u0430 \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438, \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430, \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0432\u0448\u0438\u0441\u044c \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u043e\u043a \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u043d\u0430 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u043c \u0443\u0440\u043e\u0432\u043d\u0435.\n\n\u0412 \u0433\u0438\u043f\u043e\u0442\u0435\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0438 \u0430\u0442\u0430\u043a\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0441\u0432\u044f\u0437\u0430\u0442\u044c CVE-2024-57726 \u0438 CVE-2024-57728, \u0447\u0442\u043e\u0431\u044b \u0441\u0442\u0430\u0442\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u043c \u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c SimpleHelp.\n\n\u041a \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u043c\u0443 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 Horizon3.ai \u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e \u0442\u0440\u0435\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445, \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u044f \u0438\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0441\u0442\u044c \u0438 \u043f\u0440\u043e\u0441\u0442\u043e\u0442\u0443 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f.\n\n\u041f\u043e\u0441\u043b\u0435 \u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 6 \u044f\u043d\u0432\u0430\u0440\u044f 2025 \u0433\u043e\u0434\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0431\u044b\u043b\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0432\u00a0\u0432\u0435\u0440\u0441\u0438\u044f\u0445 SimpleHelp 5.3.9, 5.4.10 \u0438 5.5.8, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0445 8 \u0438 13 \u044f\u043d\u0432\u0430\u0440\u044f.\n\n\u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043e\u0431\u044b\u0447\u043d\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0447\u0430\u0441\u0442\u043e \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430\u00a0\u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e\u0433\u043e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0446\u0435\u043b\u0435\u0432\u044b\u043c \u0441\u0440\u0435\u0434\u0430\u043c, \u043a\u0440\u0430\u0439\u043d\u0435 \u0432\u0430\u0436\u043d\u043e \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u043d\u0430\u043a\u0430\u0442\u0438\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, SimpleHelp \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0441\u043c\u0435\u043d\u0438\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u0441\u043c\u0435\u043d\u0438\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u0438 \u0434\u043b\u044f \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432 \u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c IP-\u0430\u0434\u0440\u0435\u0441\u0430 \u0432\u0445\u043e\u0434\u0430 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432 \u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432.", "creation_timestamp": "2025-01-15T13:18:05.000000Z"}, {"uuid": "47628df7-7e54-4f4a-b556-91df2946ac54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57726", "type": "seen", "source": "https://t.me/true_secator/6621", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Horizon3.ai \u043d\u0430\u0448\u043b\u0438 \u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 SimpleHelp, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, EoP \u0438 RCE, \u0438\u0445 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043b\u0435\u0433\u043a\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u0438 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u0441\u0442\u043e \u043f\u043e\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c.\n\n\u041f\u0435\u0440\u0432\u0430\u044f CVE-2024-57727 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 SimpleHelp, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0444\u0430\u0439\u043b serverconfig.xml, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0439 \u0445\u0435\u0448\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043f\u0430\u0440\u043e\u043b\u0438 \u0434\u043b\u044f \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 SimpleHelpAdmin \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439.\n\n\u0412\u0442\u043e\u0440\u0430\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2024-57728 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u043e\u0439 \u0444\u0430\u0439\u043b\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 SimpleHelpAdmin \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0432 \u043b\u044e\u0431\u043e\u0435 \u043c\u0435\u0441\u0442\u043e \u043d\u0430 \u0445\u043e\u0441\u0442\u0435 SimpleServer, \u0447\u0442\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a RCE.\n\n\u0422\u0440\u0435\u0442\u044c\u044f CVE-2024-57726\u00a0\u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0435\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0442\u0435\u0445\u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u0430 \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438, \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430, \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0432\u0448\u0438\u0441\u044c \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u043e\u043a \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u043d\u0430 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u043c \u0443\u0440\u043e\u0432\u043d\u0435.\n\n\u0412 \u0433\u0438\u043f\u043e\u0442\u0435\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0438 \u0430\u0442\u0430\u043a\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0441\u0432\u044f\u0437\u0430\u0442\u044c CVE-2024-57726 \u0438 CVE-2024-57728, \u0447\u0442\u043e\u0431\u044b \u0441\u0442\u0430\u0442\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u043c \u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c SimpleHelp.\n\n\u041a \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u043c\u0443 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 Horizon3.ai \u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e \u0442\u0440\u0435\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445, \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u044f \u0438\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0441\u0442\u044c \u0438 \u043f\u0440\u043e\u0441\u0442\u043e\u0442\u0443 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f.\n\n\u041f\u043e\u0441\u043b\u0435 \u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 6 \u044f\u043d\u0432\u0430\u0440\u044f 2025 \u0433\u043e\u0434\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0431\u044b\u043b\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0432\u00a0\u0432\u0435\u0440\u0441\u0438\u044f\u0445 SimpleHelp 5.3.9, 5.4.10 \u0438 5.5.8, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0445 8 \u0438 13 \u044f\u043d\u0432\u0430\u0440\u044f.\n\n\u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043e\u0431\u044b\u0447\u043d\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0447\u0430\u0441\u0442\u043e \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430\u00a0\u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e\u0433\u043e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0446\u0435\u043b\u0435\u0432\u044b\u043c \u0441\u0440\u0435\u0434\u0430\u043c, \u043a\u0440\u0430\u0439\u043d\u0435 \u0432\u0430\u0436\u043d\u043e \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u043d\u0430\u043a\u0430\u0442\u0438\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, SimpleHelp \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0441\u043c\u0435\u043d\u0438\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u0441\u043c\u0435\u043d\u0438\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u0438 \u0434\u043b\u044f \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432 \u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c IP-\u0430\u0434\u0440\u0435\u0441\u0430 \u0432\u0445\u043e\u0434\u0430 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432 \u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432.", "creation_timestamp": "2025-01-15T13:18:05.000000Z"}, {"uuid": "caabda2c-751c-4675-bedf-9a32a2701d5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "seen", "source": "Telegram/cT3ETXi8ueGY8kAtGyfu7wb0NUfCf_Oa836RYQyuDMgp6vQ", "content": "", "creation_timestamp": "2026-09-02T01:00:12.569002Z"}, {"uuid": "4a121b76-eb79-471d-9f80-370733489c49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57968", "type": "seen", "source": "https://t.me/purp_sec/249", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u0434\u043b\u044f \u0432\u0430\u0441 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2024-57968 \u0438 CVE-2025-25181 \u2014 0day-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 VeraCore, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 XE Group. \u041f\u0435\u0440\u0432\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u043d\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0432 \u043d\u0435\u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u043f\u0430\u043f\u043a\u0438 \u0447\u0435\u0440\u0435\u0437 upload.aspx. \u0412\u0442\u043e\u0440\u0430\u044f \u2014 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b SQL \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 PmSess1.\n\n\ud83d\udd35CVE-2025-24860 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Apache Cassandra, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0435\u0439. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0426\u041e\u0414 \u0438\u043b\u0438 \u0433\u0440\u0443\u043f\u043f\u0430\u043c IP/CIDR \u0447\u0435\u0440\u0435\u0437 CassandraNetworkAuthorizer \u0438\u043b\u0438 CassandraCIDRAuthorizer. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0426\u041e\u0414 \u043c\u043e\u0433\u0443\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e data control language (DCL) \u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445.\n\n\ud83d\udd35CVE-2025-24964 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Cross-site WebSocket Hijacking (CSWSH) \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 API Vitest. \u041a\u043e\u0433\u0434\u0430 \u043e\u043f\u0446\u0438\u044f api \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430, Vitest \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0441\u0435\u0440\u0432\u0435\u0440 WebSocket \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u043e\u0432 Origin \u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430\u043c\u0438 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f.\n\n\ud83d\udd35CVE-2025-20124 \u0438 CVE-2025-20125 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Cisco, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0435 API ISE. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u043c\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u043f\u043e\u0434 \u043f\u0440\u043e\u0444\u0438\u043b\u0435\u043c \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 read-only \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\n\ud83d\udd35CVE-2019-18935 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Progress Telerik UI \u0434\u043b\u044f ASP.NET AJAX, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445, \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0438 \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-05T00:00:11.663946Z"}, {"uuid": "38c44d85-f891-446f-bc5c-f38e9879e6fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "seen", "source": "https://t.me/information_security_channel/53381", "content": "CVE-2024-57727: Path Traversal Vulnerability in SimpleHelp Web Application\nhttps://www.offsec.com/blog/cve-2024-57727-path/\n\nCVE-2024-57727 lets attackers read sensitive files via path traversal in SimpleHelp. Learn more about how attackers exploit this flaw.\nThe post CVE-2024-57727: Path Traversal Vulnerability in SimpleHelp Web Application (https://www.offsec.com/blog/cve-2024-57727-path/) appeared first on OffSec (https://www.offsec.com/).", "creation_timestamp": "2025-04-10T21:35:57.000000Z"}, {"uuid": "45913fa4-96b5-4caf-a447-a49f0a9bad47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "exploited", "source": "https://t.me/thehackernews/6303", "content": "\ud83d\udea8 URGENT: Attackers are exploiting newly discovered flaws in SimpleHelp RMM software to establish persistent access to networks and deploy ransomware.\n\nCVE-2024-57726, CVE-2024-57727, CVE-2024-57728: Flaws enabling privilege escalation, remote code execution.\n\n\ud83d\udc49 Secure your systems and read the full details: https://thehackernews.com/2025/02/hackers-exploit-simplehelp-rmm-flaws.html", "creation_timestamp": "2025-02-07T06:24:29.000000Z"}, {"uuid": "7a131b2e-0ccd-4a1c-880c-62ccd719c227", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57728", "type": "exploited", "source": "https://t.me/thehackernews/6303", "content": "\ud83d\udea8 URGENT: Attackers are exploiting newly discovered flaws in SimpleHelp RMM software to establish persistent access to networks and deploy ransomware.\n\nCVE-2024-57726, CVE-2024-57727, CVE-2024-57728: Flaws enabling privilege escalation, remote code execution.\n\n\ud83d\udc49 Secure your systems and read the full details: https://thehackernews.com/2025/02/hackers-exploit-simplehelp-rmm-flaws.html", "creation_timestamp": "2025-02-07T06:24:29.000000Z"}, {"uuid": "98ee4006-6f4b-4c9f-b206-9748325c002e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57726", "type": "exploited", "source": "https://t.me/thehackernews/6303", "content": "\ud83d\udea8 URGENT: Attackers are exploiting newly discovered flaws in SimpleHelp RMM software to establish persistent access to networks and deploy ransomware.\n\nCVE-2024-57726, CVE-2024-57727, CVE-2024-57728: Flaws enabling privilege escalation, remote code execution.\n\n\ud83d\udc49 Secure your systems and read the full details: https://thehackernews.com/2025/02/hackers-exploit-simplehelp-rmm-flaws.html", "creation_timestamp": "2025-02-07T06:24:29.000000Z"}, {"uuid": "6aef5074-d2de-4f42-ae59-f312a1aa2844", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57968", "type": "exploited", "source": "https://t.me/thehackernews/6310", "content": "\ud83d\uded1 XE Group has evolved. They\u2019re no longer just stealing credit card data\u2014they\u2019re exploiting zero-day vulnerabilities (like CVE-2024-57968 in VeraCore) to target supply chains\n\nOnce in, they can drop reverse shells, exfiltrate files, and even modify data\n\nhttps://thehackernews.com/2025/02/xe-hacker-group-exploits-veracore-zero.html", "creation_timestamp": "2025-02-10T06:19:30.000000Z"}, {"uuid": "68687c75-371b-4b8f-a3fa-7cbb0e4c771e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57514", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/11769", "content": "#exploit\n1. CVE-2024-57514:\nXSS in TP-Link A20 v3 Router\n\n2. CVE-2025-21293:\nAD Domain Services EoP\n\n3. CVE-2025-24118:\nmacOS XNU kernel vulnerability\n\n4. CVE-2024-8381:\nSpiderMonkey Interpreter Type Confusion Bug", "creation_timestamp": "2025-02-04T03:53:11.000000Z"}, {"uuid": "3d180d20-98ef-4d9b-98e7-51e8e7c0edcc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57233", "type": "seen", "source": "https://t.me/cvedetector/24463", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57233 - NETGEAR RAX5 Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57233 \nPublished : May 5, 2025, 5:18 p.m. | 16\u00a0minutes ago \nDescription : NETGEAR RAX5 (AX1600 WiFi Router) v1.0.2.26 was discovered to contain a command injection vulnerability via the iface parameter in the vif_disable function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-05T20:03:39.000000Z"}, {"uuid": "fa42a056-036b-4479-b464-b2b6bbb1474e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57234", "type": "seen", "source": "https://t.me/cvedetector/24464", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57234 - NETGEAR RAX5 Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57234 \nPublished : May 5, 2025, 5:18 p.m. | 16\u00a0minutes ago \nDescription : NETGEAR RAX5 (AX1600 WiFi Router) V1.0.2.26 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_cancel_wps function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-05T20:03:40.000000Z"}, {"uuid": "e4cd97b9-05ea-4969-aa70-3d2cd221e59f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57235", "type": "seen", "source": "https://t.me/cvedetector/24465", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57235 - NETGEAR RAX5 Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57235 \nPublished : May 5, 2025, 5:18 p.m. | 16\u00a0minutes ago \nDescription : NETGEAR RAX5 (AX1600 WiFi Router) V1.0.2.26 was discovered to contain a command injection vulnerability via the iface parameter in the vif_enable function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-05T20:03:41.000000Z"}, {"uuid": "93cd1e09-e9f6-4eaa-b208-918fe37f1f32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3msaueuvbnl2b", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2024-57727: SimpleHelp remote support software v5.5.7 and before is vulnerable to multiple path traversal vulnerabilities that enabl\u2026\nCVSS 7.5 \u00b7 EPSS 95.2% \u00b7 CISA KEV\nhttps://beta.vulnsea.com/cve/CVE-2024-57727\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-08-04T11:02:03.851213Z"}, {"uuid": "529f7e84-656a-4360-aaa3-1d93813cdeea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57231", "type": "seen", "source": "https://t.me/cvedetector/24468", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57231 - NETGEAR RAX5 Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57231 \nPublished : May 5, 2025, 5:18 p.m. | 16\u00a0minutes ago \nDescription : NETGEAR RAX5 (AX1600 WiFi Router) V1.0.2.26 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_do_enr_pbc_wps function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-05T20:03:47.000000Z"}, {"uuid": "fed2e3b5-8232-40b4-bb54-c9d9fccaa273", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57229", "type": "seen", "source": "https://t.me/cvedetector/24469", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57229 - NETGEAR RAX5 Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57229 \nPublished : May 5, 2025, 5:18 p.m. | 16\u00a0minutes ago \nDescription : NETGEAR RAX5 (AX1600 WiFi Router) V1.0.2.26 was discovered to contain a command injection vulnerability via the devname parameter in the reset_wifi function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-05T20:03:47.000000Z"}, {"uuid": "fa43d659-82ee-4668-a6b1-01945f6a0a13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57230", "type": "seen", "source": "https://t.me/cvedetector/24470", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57230 - NETGEAR RAX5 Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57230 \nPublished : May 5, 2025, 5:18 p.m. | 16\u00a0minutes ago \nDescription : NETGEAR RAX5 (AX1600 WiFi Router) V1.0.2.26 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_do_enr_pin_wps function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-05T20:03:48.000000Z"}, {"uuid": "d9f49cca-7e40-4c36-9759-8c51cd679c91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57232", "type": "seen", "source": "https://t.me/cvedetector/24462", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-57232 - NETGEAR RAX5 Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-57232 \nPublished : May 5, 2025, 5:18 p.m. | 16\u00a0minutes ago \nDescription : NETGEAR RAX5 (AX1600 WiFi Router) V1.0.2.26 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_wps_gen_pincode function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-05T20:03:38.000000Z"}, {"uuid": "16aaf9e6-3cf0-4c8c-9793-c7b20a0e0a93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57968", "type": "seen", "source": "https://t.me/purp_sec/363", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2024-12297 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 MOXA PT Switch, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0435\u0432\u043e\u043c\u0443 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044e. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\ud83d\udd35CVE-2025-27509 \u2014 \u0431\u0430\u0433 \u0432 Fleet, \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u0430\u043c\u0438. \u041e\u0448\u0438\u0431\u043a\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 SAML-\u0442\u043e\u043a\u0435\u043d\u043e\u0432, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439.\n\n\ud83d\udd35CVE-2024-38311, CVE-2024-56195, CVE-2024-56196 \u0438 CVE-2024-5620 \u2014 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Apache Traffic Server \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043f\u0430\u0442\u0447, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0439 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c DoS-\u0430\u0442\u0430\u043a\u0438, \u043a\u0440\u0430\u0441\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0442\u0440\u0430\u0444\u0438\u043a\u043e\u043c.\n\n\ud83d\udd35CVE-2025-25181, CVE-2024-57968, CVE-2024-13159, CVE-2024-13160, CVE-2024-13161 \u2014 \u043f\u044f\u0442\u044c \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Advantive VeraCore \u0438 Ivanti Endpoint Manager \u043f\u043e\u043f\u0430\u043b\u0438 \u0432 \u043f\u043e\u0434\u0431\u043e\u0440\u043a\u0443 CISA \u043a\u0430\u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\ud83d\udd35CVE-2025-27816 \u2014 Veritas \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Alta Recovery Vault, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043d\u043d\u044b\u043c, \u043c\u0435\u043d\u044f\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u0435 \u043a\u043e\u043f\u0438\u0438. \u0421\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u0435 .NET.\n\n\ud83d\udd35CVE-2025\u201327636 \u2014 PoC \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Apache Camel. \u0421\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u043e\u0434\u043d\u043e\u043c \u0438\u0437 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 Camel, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-04T13:00:06.845758Z"}, {"uuid": "3e0e14b3-e197-41a3-bef3-3ff7854c7c30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57968", "type": "seen", "source": "https://t.me/purp_sec/363", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2024-12297 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 MOXA PT Switch, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0435\u0432\u043e\u043c\u0443 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044e. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\ud83d\udd35CVE-2025-27509 \u2014 \u0431\u0430\u0433 \u0432 Fleet, \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u0430\u043c\u0438. \u041e\u0448\u0438\u0431\u043a\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 SAML-\u0442\u043e\u043a\u0435\u043d\u043e\u0432, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439.\n\n\ud83d\udd35CVE-2024-38311, CVE-2024-56195, CVE-2024-56196 \u0438 CVE-2024-5620 \u2014 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Apache Traffic Server \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043f\u0430\u0442\u0447, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0439 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c DoS-\u0430\u0442\u0430\u043a\u0438, \u043a\u0440\u0430\u0441\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0442\u0440\u0430\u0444\u0438\u043a\u043e\u043c.\n\n\ud83d\udd35CVE-2025-25181, CVE-2024-57968, CVE-2024-13159, CVE-2024-13160, CVE-2024-13161 \u2014 \u043f\u044f\u0442\u044c \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Advantive VeraCore \u0438 Ivanti Endpoint Manager \u043f\u043e\u043f\u0430\u043b\u0438 \u0432 \u043f\u043e\u0434\u0431\u043e\u0440\u043a\u0443 CISA \u043a\u0430\u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\ud83d\udd35CVE-2025-27816 \u2014 Veritas \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Alta Recovery Vault, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043d\u043d\u044b\u043c, \u043c\u0435\u043d\u044f\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u0435 \u043a\u043e\u043f\u0438\u0438. \u0421\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u0435 .NET.\n\n\ud83d\udd35CVE-2025\u201327636 \u2014 PoC \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Apache Camel. \u0421\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u043e\u0434\u043d\u043e\u043c \u0438\u0437 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 Camel, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-05T00:00:26.875116Z"}, {"uuid": "c04911dd-2532-49a0-9a83-aeffd7909378", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57968", "type": "seen", "source": "https://t.me/purp_sec/249", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u0434\u043b\u044f \u0432\u0430\u0441 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2024-57968 \u0438 CVE-2025-25181 \u2014 0day-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 VeraCore, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 XE Group. \u041f\u0435\u0440\u0432\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u043d\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0432 \u043d\u0435\u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u043f\u0430\u043f\u043a\u0438 \u0447\u0435\u0440\u0435\u0437 upload.aspx. \u0412\u0442\u043e\u0440\u0430\u044f \u2014 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b SQL \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 PmSess1.\n\n\ud83d\udd35CVE-2025-24860 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Apache Cassandra, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0435\u0439. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0426\u041e\u0414 \u0438\u043b\u0438 \u0433\u0440\u0443\u043f\u043f\u0430\u043c IP/CIDR \u0447\u0435\u0440\u0435\u0437 CassandraNetworkAuthorizer \u0438\u043b\u0438 CassandraCIDRAuthorizer. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0426\u041e\u0414 \u043c\u043e\u0433\u0443\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e data control language (DCL) \u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445.\n\n\ud83d\udd35CVE-2025-24964 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Cross-site WebSocket Hijacking (CSWSH) \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 API Vitest. \u041a\u043e\u0433\u0434\u0430 \u043e\u043f\u0446\u0438\u044f api \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430, Vitest \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0441\u0435\u0440\u0432\u0435\u0440 WebSocket \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u043e\u0432 Origin \u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430\u043c\u0438 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f.\n\n\ud83d\udd35CVE-2025-20124 \u0438 CVE-2025-20125 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Cisco, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0435 API ISE. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u043c\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u043f\u043e\u0434 \u043f\u0440\u043e\u0444\u0438\u043b\u0435\u043c \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 read-only \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\n\ud83d\udd35CVE-2019-18935 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Progress Telerik UI \u0434\u043b\u044f ASP.NET AJAX, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445, \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0438 \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-04T13:00:13.513667Z"}, {"uuid": "1c1d912c-5a5e-4dd5-b594-243450cc17e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-57795", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260511", "content": "", "creation_timestamp": "2026-05-10T18:00:00.000000Z"}, {"uuid": "1d6c1dc0-321e-4325-a1b9-891721a18313", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57726", "type": "seen", "source": "https://t.me/purp_sec/156", "content": "\ud83d\udee1\u0422\u0440\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 SimpleHelp \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0432\u0437\u043b\u0430\u043c\u044b\u0432\u0430\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\n\n\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Horizon3 \u043f\u0440\u043e\u0432\u0435\u043b\u0438 \u0418\u0411-\u0430\u0443\u0434\u0438\u0442 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u043e\u0433\u043e \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u2014 SimpleHelp \u2014 \u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0442\u0440\u0438 \u043f\u0440\u043e\u0441\u0442\u044b\u0435 \u0432 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 \u0438 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u0441 \u043b\u044e\u0431\u044b\u043c\u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u043c\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u043c\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438.\n\n\ud83d\udd35CVE-2024-57727 (CVSSv3: 7.5) \u2014 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 SimpleHelp, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0444\u0430\u0439\u043b \u0441 \u0445\u0435\u0448\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 \u043f\u0430\u0440\u043e\u043b\u044f\u043c\u0438 \u0434\u043b\u044f \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 SimpleHelpAdmin \u0438 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e. \u041f\u0440\u043e\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u043d\u043e \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 LDAP, OIDC, \u043a\u043b\u044e\u0447\u0438 API \u0438 \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f TOTP.\n\n\ud83d\udd35CVE-2024-57728 (CVSSv3: 7.2) \u2014 \u043f\u043e\u043b\u0443\u0447\u0438\u0432 \u043f\u0430\u0440\u043e\u043b\u0438 \u043e\u0442 SimpleHelpAdmin \u043f\u0440\u0438 \u044d\u043a\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043f\u0435\u0440\u0432\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u043d\u043e \u043f\u0440\u043e\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432\u0442\u043e\u0440\u0443\u044e, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0432 \u043b\u044e\u0431\u043e\u0435 \u043c\u0435\u0441\u0442\u043e \u043d\u0430 \u0445\u043e\u0441\u0442\u0435 SimpleServer, \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u0441 \u043b\u044e\u0431\u044b\u043c\u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u043c\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438 \u0438\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043a \u043d\u0438\u043c \u043f\u0440\u044f\u043c\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f.\n\n\ud83d\udd35CVE-2024-57726 (CVSSv3: 9.9) \u2014 \u043f\u043e\u043b\u044c\u0437\u0443\u044f\u0441\u044c \u0442\u0435\u043c, \u0447\u0442\u043e \u0432 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u0445 SimpleHelp \u043d\u0435\u0442 \u043f\u0440\u043e\u0432\u0435\u0440\u043e\u043a \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0432\u0441\u0435 \u0432\u044b\u0448\u0435\u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0435 \u0437\u043b\u043e\u0432\u0440\u0435\u0434\u043d\u044b\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f.\n\n\u0412\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 SimpleHelp \u0434\u043e 5.5.7 \u0443\u044f\u0437\u0432\u0438\u043c\u044b. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0443\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 5.5.8 \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e \u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f.\n\n#blue_team #SimpleHelp", "creation_timestamp": "2026-08-04T13:00:15.486236Z"}, {"uuid": "38ba4e38-9354-46c8-b096-97a8e469391c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57728", "type": "seen", "source": "https://t.me/purp_sec/156", "content": "\ud83d\udee1\u0422\u0440\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 SimpleHelp \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0432\u0437\u043b\u0430\u043c\u044b\u0432\u0430\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\n\n\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Horizon3 \u043f\u0440\u043e\u0432\u0435\u043b\u0438 \u0418\u0411-\u0430\u0443\u0434\u0438\u0442 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u043e\u0433\u043e \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u2014 SimpleHelp \u2014 \u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0442\u0440\u0438 \u043f\u0440\u043e\u0441\u0442\u044b\u0435 \u0432 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 \u0438 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u0441 \u043b\u044e\u0431\u044b\u043c\u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u043c\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u043c\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438.\n\n\ud83d\udd35CVE-2024-57727 (CVSSv3: 7.5) \u2014 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 SimpleHelp, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0444\u0430\u0439\u043b \u0441 \u0445\u0435\u0448\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 \u043f\u0430\u0440\u043e\u043b\u044f\u043c\u0438 \u0434\u043b\u044f \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 SimpleHelpAdmin \u0438 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e. \u041f\u0440\u043e\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u043d\u043e \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 LDAP, OIDC, \u043a\u043b\u044e\u0447\u0438 API \u0438 \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f TOTP.\n\n\ud83d\udd35CVE-2024-57728 (CVSSv3: 7.2) \u2014 \u043f\u043e\u043b\u0443\u0447\u0438\u0432 \u043f\u0430\u0440\u043e\u043b\u0438 \u043e\u0442 SimpleHelpAdmin \u043f\u0440\u0438 \u044d\u043a\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043f\u0435\u0440\u0432\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u043d\u043e \u043f\u0440\u043e\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432\u0442\u043e\u0440\u0443\u044e, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0432 \u043b\u044e\u0431\u043e\u0435 \u043c\u0435\u0441\u0442\u043e \u043d\u0430 \u0445\u043e\u0441\u0442\u0435 SimpleServer, \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u0441 \u043b\u044e\u0431\u044b\u043c\u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u043c\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438 \u0438\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043a \u043d\u0438\u043c \u043f\u0440\u044f\u043c\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f.\n\n\ud83d\udd35CVE-2024-57726 (CVSSv3: 9.9) \u2014 \u043f\u043e\u043b\u044c\u0437\u0443\u044f\u0441\u044c \u0442\u0435\u043c, \u0447\u0442\u043e \u0432 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u0445 SimpleHelp \u043d\u0435\u0442 \u043f\u0440\u043e\u0432\u0435\u0440\u043e\u043a \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0432\u0441\u0435 \u0432\u044b\u0448\u0435\u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0435 \u0437\u043b\u043e\u0432\u0440\u0435\u0434\u043d\u044b\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f.\n\n\u0412\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 SimpleHelp \u0434\u043e 5.5.7 \u0443\u044f\u0437\u0432\u0438\u043c\u044b. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0443\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 5.5.8 \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e \u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f.\n\n#blue_team #SimpleHelp", "creation_timestamp": "2026-08-04T13:00:15.453654Z"}, {"uuid": "2b8f375b-dcd9-4bbb-9368-08e667ccc0e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "seen", "source": "https://t.me/purp_sec/156", "content": "\ud83d\udee1\u0422\u0440\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 SimpleHelp \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0432\u0437\u043b\u0430\u043c\u044b\u0432\u0430\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\n\n\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Horizon3 \u043f\u0440\u043e\u0432\u0435\u043b\u0438 \u0418\u0411-\u0430\u0443\u0434\u0438\u0442 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u043e\u0433\u043e \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u2014 SimpleHelp \u2014 \u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0442\u0440\u0438 \u043f\u0440\u043e\u0441\u0442\u044b\u0435 \u0432 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 \u0438 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u0441 \u043b\u044e\u0431\u044b\u043c\u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u043c\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u043c\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438.\n\n\ud83d\udd35CVE-2024-57727 (CVSSv3: 7.5) \u2014 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 SimpleHelp, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0444\u0430\u0439\u043b \u0441 \u0445\u0435\u0448\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 \u043f\u0430\u0440\u043e\u043b\u044f\u043c\u0438 \u0434\u043b\u044f \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 SimpleHelpAdmin \u0438 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e. \u041f\u0440\u043e\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u043d\u043e \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 LDAP, OIDC, \u043a\u043b\u044e\u0447\u0438 API \u0438 \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f TOTP.\n\n\ud83d\udd35CVE-2024-57728 (CVSSv3: 7.2) \u2014 \u043f\u043e\u043b\u0443\u0447\u0438\u0432 \u043f\u0430\u0440\u043e\u043b\u0438 \u043e\u0442 SimpleHelpAdmin \u043f\u0440\u0438 \u044d\u043a\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043f\u0435\u0440\u0432\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u043d\u043e \u043f\u0440\u043e\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432\u0442\u043e\u0440\u0443\u044e, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0432 \u043b\u044e\u0431\u043e\u0435 \u043c\u0435\u0441\u0442\u043e \u043d\u0430 \u0445\u043e\u0441\u0442\u0435 SimpleServer, \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u0441 \u043b\u044e\u0431\u044b\u043c\u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u043c\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438 \u0438\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043a \u043d\u0438\u043c \u043f\u0440\u044f\u043c\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f.\n\n\ud83d\udd35CVE-2024-57726 (CVSSv3: 9.9) \u2014 \u043f\u043e\u043b\u044c\u0437\u0443\u044f\u0441\u044c \u0442\u0435\u043c, \u0447\u0442\u043e \u0432 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u0445 SimpleHelp \u043d\u0435\u0442 \u043f\u0440\u043e\u0432\u0435\u0440\u043e\u043a \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0432\u0441\u0435 \u0432\u044b\u0448\u0435\u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0435 \u0437\u043b\u043e\u0432\u0440\u0435\u0434\u043d\u044b\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f.\n\n\u0412\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 SimpleHelp \u0434\u043e 5.5.7 \u0443\u044f\u0437\u0432\u0438\u043c\u044b. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0443\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 5.5.8 \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e \u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f.\n\n#blue_team #SimpleHelp", "creation_timestamp": "2026-08-04T13:00:17.115516Z"}, {"uuid": "d73abacc-56de-454e-a4b7-bb81ad89ff62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57924", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-134-10", "content": "View CSAF\n\nSummary\n\nSIMATIC CN 4100 contains multiple vulnerabilities which could potentially lead to a compromise in availability, integrity and confidentiality. Siemens has released a new version for SIMATIC CN 4100 and recommends to update to the latest version.\n\nThe following versions of Siemens SIMATIC are affected:\n\n\n\nSIMATIC CN 4100 vers:intdot/<5.0 \n\n<div class=\"csaf-table\">\n\n\n\n\nCVSS\nVendor\nEquipment\nVulnerabilities\n\n\n\n\nv3 9.6\nSiemens\nSiemens SIMATIC\nNULL Pointer Dereference, Reachable Assertion, Use After Free, Out-of-bounds Write, Integer Overflow or Wraparound, Allocation of Resources Without Limits or Throttling, Out-of-bounds Read, Covert Timing Channel, Stack-based Buffer Overflow, Inefficient Algorithmic Complexity, Missing Release of Memory after Effective Lifetime, Improper Restriction of Operations within the Bounds of a Memory Buffer, Improper Input Validation, Improper Locking, Uncontrolled Recursion, Buffer Access with Incorrect Length Value, Race Condition within a Thread, Missing Synchronization, Use of Uninitialized Resource, Double Free, Missing Release of Resource after Effective Lifetime, Loop with Unreachable Exit Condition ('Infinite Loop'), Improper Update of Reference Count, Improper Control of a Resource Through its Lifetime, Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition'), Unexpected Status Code or Return Value, Divide By Zero, Improper Validation of Specified Index, Position, or Offset in Input, Comparison Using Wrong Factors, Observable Timing Discrepancy, Improper Validation of Syntactic Correctness of Input, Deadlock, Signal Handler Race Condition, Improper Following of Specification by Caller, Improper Check for Dropped Privileges, Transmission of Private Resources into a New Sphere ('Resource Leak'), Improper Resource Shutdown or Release, Improper Access Control, Exposure of Sensitive Information to an Unauthorized Actor, Relative Path Traversal, Improper Neutralization of Escape, Meta, or Control Sequences, Selection of Less-Secure Algorithm During Negotiation ('Algorithm Downgrade'), Uncontrolled Resource Consumption, Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'), Missing Authentication for Critical Function, Improper Check for Unusual or Exceptional Conditions\n\n\n\n</div>\n\nBackground\n\n\n\nCritical Infrastructure Sectors: Critical Manufacturing\n\nCountries/Areas Deployed: Worldwide\n\nCompany Headquarters Location: Germany\n\n\n\n\nVulnerabilities\n<div class=\"csaf-accordion\">\n\nExpand All +\n<div class=\"csaf-accordion-item\">\n\nCVE-2024-47704\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check link_res->hpo_dp_link_enc before using it [WHAT & HOW] Functions dp_enable_link_phy and dp_disable_link_phy can pass link_res without initializing hpo_dp_link_enc and it is necessary to check for null before dereferencing. This fixes 2 FORWARD_NULL issues reported by Coverity.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-476 NULL Pointer Dereference\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2024-57924\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: fs: relax assertions on failure to encode file handles Encoding file handles is usually performed by a filesystem >encode_fh() method that may fail for various reasons. The legacy users of exportfs_encode_fh(), namely, nfsd and name_to_handle_at(2) syscall are ready to cope with the possibility of failure to encode a file handle. There are a few other users of exportfs_encode_{fh,fid}() that currently have a WARN_ON() assertion when ->encode_fh() fails. Relax those assertions because they are wrong. The second linked bug report states commit 16aac5ad1fa9 (\"ovl: support encoding non-decodable file handles\") in v6.6 as the regressing commit, but this is not accurate. The aforementioned commit only increases the chances of the assertion and allows triggering the assertion with the reproducer using overlayfs, inotify and drop_caches. Triggering this assertion was always possible with other filesystems and other reasons of ->encode_fh() failures and more particularly, it was also possible with the exact same reproducer using overlayfs that is mounted with options index=on,nfs_export=on also on kernels < v6.6. Therefore, I am not listing the aforementioned commit as a Fixes commit. Backport hint: this patch will have a trivial conflict applying to v6.6.y, and other trivial conflicts applying to stable kernels < v6.6.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-617 Reachable Assertion\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2024-58240\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: tls: separate no-async decryption request handling from async If we're not doing async, the handling is much simpler. There's no reference counting, we just need to wait for the completion to wake us up and return its result. We should preferably also use a separate crypto_wait. I'm not seeing a UAF as I did in the past, I think aec7961916f3 (\"tls: fix race between async notify and socket close\") took care of it. This will make the next fix easier.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-416 Use After Free\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.3\nHIGH\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-6021\n<div class=\"csaf-accordion-content\">\n\nA flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow. This issue can result in memory corruption or a denial of service when processing crafted input.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.5\nHIGH\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-6052\n<div class=\"csaf-accordion-content\">\n\nA flaw was found in how GLib\u2019s GString manages memory when adding data to strings. If a string is already very large, combining it with more input can cause a hidden overflow in the size calculation. This makes the system think it has enough memory when it doesn\u2019t. As a result, data may be written past the end of the allocated memory, leading to crashes or memory corruption.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-190 Integer Overflow or Wraparound\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n3.7\nLOW\nCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-7425\n<div class=\"csaf-accordion-content\">\n\nA flaw was found in libxslt where the attribute type, atype, flags are modified in a way that corrupts internal memory management. When XSLT functions, such as the key() process, result in tree fragments, this corruption prevents the proper cleanup of ID attributes. As a result, the system may access freed memory, causing crashes or enabling attackers to trigger heap corruption.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-416 Use After Free\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.8\nHIGH\nCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-8916\n<div class=\"csaf-accordion-content\">\n\nAllocation of Resources Without Limits or Throttling vulnerability in Legion of the Bouncy Castle Inc. BC Java bcpkix on All (API modules), Legion of the Bouncy Castle Inc. BC Java bcprov on All (API modules), Legion of the Bouncy Castle Inc. BCPKIX FIPS bcpkix-fips on All (API modules) allows Excessive Allocation. This vulnerability is associated with program files https://github.Com/bcgit/bc-java/blob/main/pkix/src/main/java/org/bouncycastle/pkix/jcajce/PKIXCertPathReviewer.Java, https://github.Com/bcgit/bc-java/blob/main/prov/src/main/java/org/bouncycastle/x509/PKIXCertPathReviewer.Java. This issue affects BC Java: from 1.44 through 1.78; BC Java: from 1.44 through 1.78; BCPKIX FIPS: from 1.0.0 through 1.0.7, from 2.0.0 through 2.0.7.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-770 Allocation of Resources Without Limits or Throttling\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.3\nMEDIUM\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-9230\n<div class=\"csaf-accordion-content\">\n\nIssue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write. Impact summary: This out-of-bounds read may trigger a crash which leads to Denial of Service for an application. The out-of-bounds write can cause a memory corruption which can have various consequences including a Denial of Service or Execution of attacker-supplied code. Although the consequences of a successful exploit of this vulnerability could be severe, the probability that the attacker would be able to perform it is low. Besides, password based (PWRI) encryption support in CMS messages is very rarely used. For that reason the issue was assessed as Moderate severity according to our Security Policy. The FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue, as the CMS implementation is outside the OpenSSL FIPS module boundary.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-125 Out-of-bounds Read\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.5\nHIGH\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-9231\n<div class=\"csaf-accordion-content\">\n\nIssue summary: A timing side-channel which could potentially allow remote recovery of the private key exists in the SM2 algorithm implementation on 64 bit ARM platforms. Impact summary: A timing side-channel in SM2 signature computations on 64 bit ARM platforms could allow recovering the private key by an attacker.. While remote key recovery over a network was not attempted by the reporter, timing measurements revealed a timing signal which may allow such an attack. OpenSSL does not directly support certificates with SM2 keys in TLS, and so this CVE is not relevant in most TLS contexts. However, given that it is possible to add support for such certificates via a custom provider, coupled with the fact that in such a custom provider context the private key may be recoverable via remote timing measurements, we consider this to be a Moderate severity issue. The FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue, as SM2 is not an approved algorithm.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-385 Covert Timing Channel\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n6.5\nMEDIUM\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-9232\n<div class=\"csaf-accordion-content\">\n\nIssue summary: An application using the OpenSSL HTTP client API functions may trigger an out-of-bounds read if the 'no_proxy' environment variable is set and the host portion of the authority component of the HTTP URL is an IPv6 address. Impact summary: An out-of-bounds read can trigger a crash which leads to Denial of Service for an application. The OpenSSL HTTP client API functions can be used directly by applications but they are also used by the OCSP client functions and CMP (Certificate Management Protocol) client implementation in OpenSSL. However the URLs used by these implementations are unlikely to be controlled by an attacker. In this vulnerable code the out of bounds read can only trigger a crash. Furthermore the vulnerability requires an attacker-controlled URL to be passed from an application to the OpenSSL function and the user has to have a 'no_proxy' environment variable set. For the aforementioned reasons the issue was assessed as Low severity. The vulnerable code was introduced in the following patch releases: 3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0. The FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue, as the HTTP client implementation is outside the OpenSSL FIPS module boundary.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-125 Out-of-bounds Read\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.9\nMEDIUM\nCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-9820\n<div class=\"csaf-accordion-content\">\n\nA flaw was found in the GnuTLS library, specifically in the gnutls_pkcs11_token_init() function that handles PKCS#11 token initialization. When a token label longer than expected is processed, the function writes past the end of a fixed-size stack buffer. This programming error can cause the application using GnuTLS to crash or, in certain conditions, be exploited for code execution. As a result, systems or applications relying on GnuTLS may be vulnerable to a denial of service or local privilege escalation attacks.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-121 Stack-based Buffer Overflow\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n4\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-14831\n<div class=\"csaf-accordion-content\">\n\nA flaw was found in GnuTLS. This vulnerability allows a denial of service (DoS) by excessive CPU (Central Processing Unit) and memory consumption via specially crafted malicious certificates containing a large number of name constraints and subject alternative names (SANs).\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-407 Inefficient Algorithmic Complexity\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.3\nMEDIUM\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-23143\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod. When I ran the repro [0] and waited a few seconds, I observed two LOCKDEP splats: a warning immediately followed by a null-ptr-deref. [1] Reproduction Steps: 1) Mount CIFS 2) Add an iptables rule to drop incoming FIN packets for CIFS 3) Unmount CIFS 4) Unload the CIFS module 5) Remove the iptables rule At step 3), the CIFS module calls sock_release() for the underlying TCP socket, and it returns quickly. However, the socket remains in FIN_WAIT_1 because incoming FIN packets are dropped. At this point, the module's refcnt is 0 while the socket is still alive, so the following rmmod command succeeds. # ss -tan State Recv-Q Send-Q Local Address:Port Peer Address:Port FIN-WAIT-1 0 477 10.0.2.15:51062 10.0.0.137:445 # lsmod | grep cifs cifs 1159168 0 This highlights a discrepancy between the lifetime of the CIFS module and the underlying TCP socket. Even after CIFS calls sock_release() and it returns, the TCP socket does not die immediately in order to close the connection gracefully. While this is generally fine, it causes an issue with LOCKDEP because CIFS assigns a different lock class to the TCP socket's sk->sk_lock using sock_lock_init_class_and_name(). Once an incoming packet is processed for the socket or a timer fires, sk->sk_lock is acquired. Then, LOCKDEP checks the lock context in check_wait_context(), where hlock_class() is called to retrieve the lock class. However, since the module has already been unloaded, hlock_class() logs a warning and returns NULL, triggering the null-ptr-deref. If LOCKDEP is enabled, we must ensure that a module calling sock_lock_init_class_and_name() (CIFS, NFS, etc) cannot be unloaded while such a socket is still alive to prevent this issue. Let's hold the module reference in sock_lock_init_class_and_name() and release it when the socket is freed in sk_prot_free(). Note that sock_lock_init() clears sk->sk_owner for svc_create_socket() that calls sock_lock_init_class_and_name() for a listening socket, which clones a socket by sk_clone_lock() without GFP_ZERO. [0]: CIFS_SERVER=\"10.0.0.137\" CIFS_PATH=\"//${CIFS_SERVER}/Users/Administrator/Desktop/CIFS_TEST\" DEV=\"enp0s3\" CRED=\"/root/WindowsCredential.txt\" MNT=$(mktemp -d /tmp/XXXXXX) mount -t cifs ${CIFS_PATH} ${MNT} -o vers=3.0,credentials=${CRED},cache=none,echo_interval=1 iptables -A INPUT -s ${CIFS_SERVER} -j DROP for i in $(seq 10); do umount ${MNT} rmmod cifs sleep 1 done rm -r ${MNT} iptables -D INPUT -s ${CIFS_SERVER} -j DROP [1]: DEBUG_LOCKS_WARN_ON(1) WARNING: CPU: 10 PID: 0 at kernel/locking/lockdep.c:234 hlock_class (kernel/locking/lockdep.c:234 kernel/locking/lockdep.c:223) Modules linked in: cifs_arc4 nls_ucs2_utils cifs_md4 [last unloaded: cifs] CPU: 10 UID: 0 PID: 0 Comm: swapper/10 Not tainted 6.14.0 #36 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.0-0-gd239552ce722-prebuilt.qemu.org 04/01/2014 RIP: 0010:hlock_class (kernel/locking/lockdep.c:234 kernel/locking/lockdep.c:223) ... Call Trace: __lock_acquire (kernel/locking/lockdep.c:4853 kernel/locking/lockdep.c:5178) lock_acquire (kernel/locking/lockdep.c:469 kernel/locking/lockdep.c:5853 kernel/locking/lockdep.c:5816) _raw_spin_lock_nested (kernel/locking/spinlock.c:379) tcp_v4_rcv (./include/linux/skbuff.h:1678 ./include/net/tcp.h:2547 net/ipv4/tcp_ipv4.c:2350) ... BUG: kernel NULL pointer dereference, address: 00000000000000c4 PF: supervisor read access in kernel mode PF: error_code(0x0000) - not-present page PGD 0 Oops: Oops: 0000 [#1] PREEMPT SMP NOPTI CPU: 10 UID: 0 PID: 0 Comm: swapper/10 Tainted: G W 6.14.0 #36 Tainted: [W]=WARN Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.0-0-gd239552ce722-prebuilt.qemu.org 04/01/2014 RIP: 0010:__lock_acquire (kernel/ ---truncated---\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-476 NULL Pointer Dereference\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-23160\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Fix a resource leak related to the scp device in FW initialization On Mediatek devices with a system companion processor (SCP) the mtk_scp structure has to be removed explicitly to avoid a resource leak. Free the structure in case the allocation of the firmware structure fails during the firmware initialization.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-401 Missing Release of Memory after Effective Lifetime\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-31257\n<div class=\"csaf-accordion-content\">\n\nThis issue was addressed with improved memory handling. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, tvOS 18.5, visionOS 2.5, watchOS 11.5. Processing maliciously crafted web content may lead to an unexpected Safari crash.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n4.7\nMEDIUM\nCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:L\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-37931\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: btrfs: adjust subpage bit start based on sectorsize When running machines with 64k page size and a 16k nodesize we started seeing tree log corruption in production. This turned out to be because we were not writing out dirty blocks sometimes, so this in fact affects all metadata writes. When writing out a subpage EB we scan the subpage bitmap for a dirty range. If the range isn't dirty we do bit_start++; to move onto the next bit. The problem is the bitmap is based on the number of sectors that an EB has. So in this case, we have a 64k pagesize, 16k nodesize, but a 4k sectorsize. This means our bitmap is 4 bits for every node. With a 64k page size we end up with 4 nodes per page. To make this easier this is how everything looks [0 16k 32k 48k ] logical address [0 4 8 12 ] radix tree offset [ 64k page ] folio [ 16k eb ][ 16k eb ][ 16k eb ][ 16k eb ] extent buffers [ | | | | | | | | | | | | | | | | ] bitmap Now we use all of our addressing based on fs_info->sectorsize_bits, so as you can see the above our 16k eb->start turns into radix entry 4. When we find a dirty range for our eb, we correctly do bit_start += sectors_per_node, because if we start at bit 0, the next bit for the next eb is 4, to correspond to eb->start 16k. However if our range is clean, we will do bit_start++, which will now put us offset from our radix tree entries. In our case, assume that the first time we check the bitmap the block is not dirty, we increment bit_start so now it == 1, and then we loop around and check again. This time it is dirty, and we go to find that start using the following equation start = folio_start + bit_start * fs_info->sectorsize; so in the case above, eb->start 0 is now dirty, and we calculate start as 0 + 1 * fs_info->sectorsize = 4096 4096 >> 12 = 1 Now we're looking up the radix tree for 1, and we won't find an eb. What's worse is now we're using bit_start == 1, so we do bit_start += sectors_per_node, which is now 5. If that eb is dirty we will run into the same thing, we will look at an offset that is not populated in the radix tree, and now we're skipping the writeout of dirty extent buffers. The best fix for this is to not use sectorsize_bits to address nodes, but that's a larger change. Since this is a fs corruption problem fix it simply by always using sectors_per_node to increment the start bit.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-37968\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: iio: light: opt3001: fix deadlock due to concurrent flag access The threaded IRQ function in this driver is reading the flag twice: once to lock a mutex and once to unlock it. Even though the code setting the flag is designed to prevent it, there are subtle cases where the flag could be true at the mutex_lock stage and false at the mutex_unlock stage. This results in the mutex not being unlocked, resulting in a deadlock. Fix it by making the opt3001_irq() code generally more robust, reading the flag into a variable and using the variable value at both stages.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-667 Improper Locking\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-38322\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Fix crash in icl_update_topdown_event() The perf_fuzzer found a hard-lockup crash on a RaptorLake machine: Oops: general protection fault, maybe for address 0xffff89aeceab400: 0000 CPU: 23 UID: 0 PID: 0 Comm: swapper/23 Tainted: [W]=WARN Hardware name: Dell Inc. Precision 9660/0VJ762 RIP: 0010:native_read_pmc+0x7/0x40 Code: cc e8 8d a9 01 00 48 89 03 5b cd cc cc cc cc 0f 1f ... RSP: 000:fffb03100273de8 EFLAGS: 00010046 .... Call Trace: icl_update_topdown_event+0x165/0x190 ? ktime_get+0x38/0xd0 intel_pmu_read_event+0xf9/0x210 __perf_event_read+0xf9/0x210 CPUs 16-23 are E-core CPUs that don't support the perf metrics feature. The icl_update_topdown_event() should not be invoked on these CPUs. It's a regression of commit: f9bdf1f95339 (\"perf/x86/intel: Avoid disable PMU if !cpuc->enabled in sample read\") The bug introduced by that commit is that the is_topdown_event() function is mistakenly used to replace the is_topdown_count() call to check if the topdown functions for the perf metrics feature should be invoked. Fix it.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-38347\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on ino and xnid syzbot reported a f2fs bug as below: INFO: task syz-executor140:5308 blocked for more than 143 seconds. Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 \"echo 0 > /proc/sys/kernel/hung_task_timeout_secs\" disables this message. task:syz-executor140 state:D stack:24016 pid:5308 tgid:5308 ppid:5306 task_flags:0x400140 flags:0x00000006 Call Trace: context_switch kernel/sched/core.c:5378 [inline] __schedule+0x190e/0x4c90 kernel/sched/core.c:6765 __schedule_loop kernel/sched/core.c:6842 [inline] schedule+0x14b/0x320 kernel/sched/core.c:6857 io_schedule+0x8d/0x110 kernel/sched/core.c:7690 folio_wait_bit_common+0x839/0xee0 mm/filemap.c:1317 __folio_lock mm/filemap.c:1664 [inline] folio_lock include/linux/pagemap.h:1163 [inline] __filemap_get_folio+0x147/0xb40 mm/filemap.c:1917 pagecache_get_page+0x2c/0x130 mm/folio-compat.c:87 find_get_page_flags include/linux/pagemap.h:842 [inline] f2fs_grab_cache_page+0x2b/0x320 fs/f2fs/f2fs.h:2776 __get_node_page+0x131/0x11b0 fs/f2fs/node.c:1463 read_xattr_block+0xfb/0x190 fs/f2fs/xattr.c:306 lookup_all_xattrs fs/f2fs/xattr.c:355 [inline] f2fs_getxattr+0x676/0xf70 fs/f2fs/xattr.c:533 __f2fs_get_acl+0x52/0x870 fs/f2fs/acl.c:179 f2fs_acl_create fs/f2fs/acl.c:375 [inline] f2fs_init_acl+0xd7/0x9b0 fs/f2fs/acl.c:418 f2fs_init_inode_metadata+0xa0f/0x1050 fs/f2fs/dir.c:539 f2fs_add_inline_entry+0x448/0x860 fs/f2fs/inline.c:666 f2fs_add_dentry+0xba/0x1e0 fs/f2fs/dir.c:765 f2fs_do_add_link+0x28c/0x3a0 fs/f2fs/dir.c:808 f2fs_add_link fs/f2fs/f2fs.h:3616 [inline] f2fs_mknod+0x2e8/0x5b0 fs/f2fs/namei.c:766 vfs_mknod+0x36d/0x3b0 fs/namei.c:4191 unix_bind_bsd net/unix/af_unix.c:1286 [inline] unix_bind+0x563/0xe30 net/unix/af_unix.c:1379 __sys_bind_socket net/socket.c:1817 [inline] __sys_bind+0x1e4/0x290 net/socket.c:1848 __do_sys_bind net/socket.c:1853 [inline] __se_sys_bind net/socket.c:1851 [inline] __x64_sys_bind+0x7a/0x90 net/socket.c:1851 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f Let's dump and check metadata of corrupted inode, it shows its xattr_nid is the same to its i_ino. dump.f2fs -i 3 chaseyu.img.raw i_xattr_nid [0x 3 : 3] So that, during mknod in the corrupted directory, it tries to get and lock inode page twice, result in deadlock. - f2fs_mknod - f2fs_add_inline_entry - f2fs_get_inode_page --- lock dir's inode page - f2fs_init_acl - f2fs_acl_create(dir,..) - __f2fs_get_acl - f2fs_getxattr - lookup_all_xattrs - __get_node_page --- try to lock dir's inode page In order to fix this, let's add sanity check on ino and xnid.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-38491\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: mptcp: make fallback action and fallback decision atomic Syzkaller reported the following splat: WARNING: CPU: 1 PID: 7704 at net/mptcp/protocol.h:1223 __mptcp_do_fallback net/mptcp/protocol.h:1223 [inline] WARNING: CPU: 1 PID: 7704 at net/mptcp/protocol.h:1223 mptcp_do_fallback net/mptcp/protocol.h:1244 [inline] WARNING: CPU: 1 PID: 7704 at net/mptcp/protocol.h:1223 check_fully_established net/mptcp/options.c:982 [inline] WARNING: CPU: 1 PID: 7704 at net/mptcp/protocol.h:1223 mptcp_incoming_options+0x21a8/0x2510 net/mptcp/options.c:1153 Modules linked in: CPU: 1 UID: 0 PID: 7704 Comm: syz.3.1419 Not tainted 6.16.0-rc3-gbd5ce2324dba #20 PREEMPT(voluntary) Hardware name: QEMU Ubuntu 24.04 PC (i440FX + PIIX, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 RIP: 0010:__mptcp_do_fallback net/mptcp/protocol.h:1223 [inline] RIP: 0010:mptcp_do_fallback net/mptcp/protocol.h:1244 [inline] RIP: 0010:check_fully_established net/mptcp/options.c:982 [inline] RIP: 0010:mptcp_incoming_options+0x21a8/0x2510 net/mptcp/options.c:1153 Code: 24 18 e8 bb 2a 00 fd e9 1b df ff ff e8 b1 21 0f 00 e8 ec 5f c4 fc 44 0f b7 ac 24 b0 00 00 00 e9 54 f1 ff ff e8 d9 5f c4 fc 90 <0f> 0b 90 e9 b8 f4 ff ff e8 8b 2a 00 fd e9 8d e6 ff ff e8 81 2a 00 RSP: 0018:ffff8880a3f08448 EFLAGS: 00010246 RAX: 0000000000000000 RBX: ffff8880180a8000 RCX: ffffffff84afcf45 RDX: ffff888090223700 RSI: ffffffff84afdaa7 RDI: 0000000000000001 RBP: ffff888017955780 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: ffff8880180a8910 R14: ffff8880a3e9d058 R15: 0000000000000000 FS: 00005555791b8500(0000) GS:ffff88811c495000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000110c2800b7 CR3: 0000000058e44000 CR4: 0000000000350ef0 Call Trace: tcp_reset+0x26f/0x2b0 net/ipv4/tcp_input.c:4432 tcp_validate_incoming+0x1057/0x1b60 net/ipv4/tcp_input.c:5975 tcp_rcv_established+0x5b5/0x21f0 net/ipv4/tcp_input.c:6166 tcp_v4_do_rcv+0x5dc/0xa70 net/ipv4/tcp_ipv4.c:1925 tcp_v4_rcv+0x3473/0x44a0 net/ipv4/tcp_ipv4.c:2363 ip_protocol_deliver_rcu+0xba/0x480 net/ipv4/ip_input.c:205 ip_local_deliver_finish+0x2f1/0x500 net/ipv4/ip_input.c:233 NF_HOOK include/linux/netfilter.h:317 [inline] NF_HOOK include/linux/netfilter.h:311 [inline] ip_local_deliver+0x1be/0x560 net/ipv4/ip_input.c:254 dst_input include/net/dst.h:469 [inline] ip_rcv_finish net/ipv4/ip_input.c:447 [inline] NF_HOOK include/linux/netfilter.h:317 [inline] NF_HOOK include/linux/netfilter.h:311 [inline] ip_rcv+0x514/0x810 net/ipv4/ip_input.c:567 __netif_receive_skb_one_core+0x197/0x1e0 net/core/dev.c:5975 __netif_receive_skb+0x1f/0x120 net/core/dev.c:6088 process_backlog+0x301/0x1360 net/core/dev.c:6440 __napi_poll.constprop.0+0xba/0x550 net/core/dev.c:7453 napi_poll net/core/dev.c:7517 [inline] net_rx_action+0xb44/0x1010 net/core/dev.c:7644 handle_softirqs+0x1d0/0x770 kernel/softirq.c:579 do_softirq+0x3f/0x90 kernel/softirq.c:480 __local_bh_enable_ip+0xed/0x110 kernel/softirq.c:407 local_bh_enable include/linux/bottom_half.h:33 [inline] inet_csk_listen_stop+0x2c5/0x1070 net/ipv4/inet_connection_sock.c:1524 mptcp_check_listen_stop.part.0+0x1cc/0x220 net/mptcp/protocol.c:2985 mptcp_check_listen_stop net/mptcp/mib.h:118 [inline] __mptcp_close+0x9b9/0xbd0 net/mptcp/protocol.c:3000 mptcp_close+0x2f/0x140 net/mptcp/protocol.c:3066 inet_release+0xed/0x200 net/ipv4/af_inet.c:435 inet6_release+0x4f/0x70 net/ipv6/af_inet6.c:487 __sock_release+0xb3/0x270 net/socket.c:649 sock_close+0x1c/0x30 net/socket.c:1439 __fput+0x402/0xb70 fs/file_table.c:465 task_work_run+0x150/0x240 kernel/task_work.c:227 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] exit_to_user_mode_loop+0xd4 ---truncated---\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-667 Improper Locking\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-38502\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: bpf: Fix oob access in cgroup local storage Lonial reported that an out-of-bounds access in cgroup local storage can be crafted via tail calls. Given two programs each utilizing a cgroup local storage with a different value size, and one program doing a tail call into the other. The verifier will validate each of the indivial programs just fine. However, in the runtime context the bpf_cg_run_ctx holds an bpf_prog_array_item which contains the BPF program as well as any cgroup local storage flavor the program uses. Helpers such as bpf_get_local_storage() pick this up from the runtime context: ctx = container_of(current->bpf_ctx, struct bpf_cg_run_ctx, run_ctx); storage = ctx->prog_item->cgroup_storage[stype]; if (stype == BPF_CGROUP_STORAGE_SHARED) ptr = &READ_ONCE(storage->buf)->data[0]; else ptr = this_cpu_ptr(storage->percpu_buf); For the second program which was called from the originally attached one, this means bpf_get_local_storage() will pick up the former program's map, not its own. With mismatching sizes, this can result in an unintended out-of-bounds access. To fix this issue, we need to extend bpf_map_owner with an array of storage_cookie[] to match on i) the exact maps from the original program if the second program was using bpf_get_local_storage(), or ii) allow the tail call combination if the second program was not using any of the cgroup local storage maps.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-125 Out-of-bounds Read\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n4\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-38552\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: mptcp: plug races between subflow fail and subflow creation We have races similar to the one addressed by the previous patch between subflow failing and additional subflow creation. They are just harder to trigger. The solution is similar. Use a separate flag to track the condition 'socket state prevent any additional subflow creation' protected by the fallback lock. The socket fallback makes such flag true, and also receiving or sending an MP_FAIL option. The field 'allow_infinite_fallback' is now always touched under the relevant lock, we can drop the ONCE annotation on write.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.3\nMEDIUM\nCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-38614\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: eventpoll: Fix semi-unbounded recursion Ensure that epoll instances can never form a graph deeper than EP_MAX_NESTS+1 links. Currently, ep_loop_check_proc() ensures that the graph is loop-free and does some recursion depth checks, but those recursion depth checks don't limit the depth of the resulting tree for two reasons: - They don't look upwards in the tree. - If there are multiple downwards paths of different lengths, only one of the paths is actually considered for the depth check since commit 28d82dc1c4ed (\"epoll: limit paths\"). Essentially, the current recursion depth check in ep_loop_check_proc() just serves to prevent it from recursing too deeply while checking for loops. A more thorough check is done in reverse_path_check() after the new graph edge has already been created; this checks, among other things, that no paths going upwards from any non-epoll file with a length of more than 5 edges exist. However, this check does not apply to non-epoll files. As a result, it is possible to recurse to a depth of at least roughly 500, tested on v6.15. (I am unsure if deeper recursion is possible; and this may have changed with commit 8c44dac8add7 (\"eventpoll: Fix priority inversion problem\").) To fix it: 1. In ep_loop_check_proc(), note the subtree depth of each visited node, and use subtree depths for the total depth calculation even when a subtree has already been visited. 2. Add ep_get_upwards_depth_proc() for similarly determining the maximum depth of an upwards walk. 3. In ep_loop_check(), use these values to limit the total path length between epoll nodes to EP_MAX_NESTS edges.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-674 Uncontrolled Recursion\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-38670\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: arm64/entry: Mask DAIF in cpu_switch_to(), call_on_irq_stack() `cpu_switch_to()` and `call_on_irq_stack()` manipulate SP to change to different stacks along with the Shadow Call Stack if it is enabled. Those two stack changes cannot be done atomically and both functions can be interrupted by SErrors or Debug Exceptions which, though unlikely, is very much broken : if interrupted, we can end up with mismatched stacks and Shadow Call Stack leading to clobbered stacks. In `cpu_switch_to()`, it can happen when SP_EL0 points to the new task, but x18 stills points to the old task's SCS. When the interrupt handler tries to save the task's SCS pointer, it will save the old task SCS pointer (x18) into the new task struct (pointed to by SP_EL0), clobbering it. In `call_on_irq_stack()`, it can happen when switching from the task stack to the IRQ stack and when switching back. In both cases, we can be interrupted when the SCS pointer points to the IRQ SCS, but SP points to the task stack. The nested interrupt handler pushes its return addresses on the IRQ SCS. It then detects that SP points to the task stack, calls `call_on_irq_stack()` and clobbers the task SCS pointer with the IRQ SCS pointer, which it will also use ! This leads to tasks returning to addresses on the wrong SCS, or even on the IRQ SCS, triggering kernel panics via CONFIG_VMAP_STACK or FPAC if enabled. This is possible on a default config, but unlikely. However, when enabling CONFIG_ARM64_PSEUDO_NMI, DAIF is unmasked and instead the GIC is responsible for filtering what interrupts the CPU should receive based on priority. Given the goal of emulating NMIs, pseudo-NMIs can be received by the CPU even in `cpu_switch_to()` and `call_on_irq_stack()`, possibly *very* frequently depending on the system configuration and workload, leading to unpredictable kernel panics. Completely mask DAIF in `cpu_switch_to()` and restore it when returning. Do the same in `call_on_irq_stack()`, but restore and mask around the branch. Mask DAIF even if CONFIG_SHADOW_CALL_STACK is not enabled for consistency of behaviour between all configurations. Introduce and use an assembly macro for saving and masking DAIF, as the existing one saves but only masks IF.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-38676\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: iommu/amd: Avoid stack buffer overflow from kernel cmdline While the kernel command line is considered trusted in most environments, avoid writing 1 byte past the end of \"acpiid\" if the \"str\" argument is maximum length.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-805 Buffer Access with Incorrect Length Value\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n6\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-38677\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid out-of-boundary access in dnode page As Jiaming Zhang reported: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x1c1/0x2a0 lib/dump_stack.c:120 print_address_description mm/kasan/report.c:378 [inline] print_report+0x17e/0x800 mm/kasan/report.c:480 kasan_report+0x147/0x180 mm/kasan/report.c:593 data_blkaddr fs/f2fs/f2fs.h:3053 [inline] f2fs_data_blkaddr fs/f2fs/f2fs.h:3058 [inline] f2fs_get_dnode_of_data+0x1a09/0x1c40 fs/f2fs/node.c:855 f2fs_reserve_block+0x53/0x310 fs/f2fs/data.c:1195 prepare_write_begin fs/f2fs/data.c:3395 [inline] f2fs_write_begin+0xf39/0x2190 fs/f2fs/data.c:3594 generic_perform_write+0x2c7/0x910 mm/filemap.c:4112 f2fs_buffered_write_iter fs/f2fs/file.c:4988 [inline] f2fs_file_write_iter+0x1ec8/0x2410 fs/f2fs/file.c:5216 new_sync_write fs/read_write.c:593 [inline] vfs_write+0x546/0xa90 fs/read_write.c:686 ksys_write+0x149/0x250 fs/read_write.c:738 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xf3/0x3d0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f The root cause is in the corrupted image, there is a dnode has the same node id w/ its inode, so during f2fs_get_dnode_of_data(), it tries to access block address in dnode at offset 934, however it parses the dnode as inode node, so that get_dnode_addr() returns 360, then it tries to access page address from 360 + 934 * 4 = 4096 w/ 4 bytes. To fix this issue, let's add sanity check for node id of all direct nodes during f2fs_get_dnode_of_data().\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-38679\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: media: venus: Fix OOB read due to missing payload bound check Currently, The event_seq_changed() handler processes a variable number of properties sent by the firmware. The number of properties is indicated by the firmware and used to iterate over the payload. However, the payload size is not being validated against the actual message length. This can lead to out-of-bounds memory access if the firmware provides a property count that exceeds the data available in the payload. Such a condition can result in kernel crashes or potential information leaks if memory beyond the buffer is accessed. Fix this by properly validating the remaining size of the payload before each property access and updating bounds accordingly as properties are parsed. This ensures that property parsing is safely bounded within the received message buffer and protects against malformed or malicious firmware behavior.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-38680\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() The buffer length check before calling uvc_parse_format() only ensured that the buffer has at least 3 bytes (buflen > 2), buf the function accesses buffer[3], requiring at least 4 bytes. This can lead to an out-of-bounds read if the buffer has exactly 3 bytes. Fix it by checking that the buffer has at least 4 bytes in uvc_parse_format().\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-125 Out-of-bounds Read\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-38681\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd() Memory hot remove unmaps and tears down various kernel page table regions as required. The ptdump code can race with concurrent modifications of the kernel page tables. When leaf entries are modified concurrently, the dump code may log stale or inconsistent information for a VA range, but this is otherwise not harmful. But when intermediate levels of kernel page table are freed, the dump code will continue to use memory that has been freed and potentially reallocated for another purpose. In such cases, the ptdump code may dereference bogus addresses, leading to a number of potential problems. To avoid the above mentioned race condition, platforms such as arm64, riscv and s390 take memory hotplug lock, while dumping kernel page table via the sysfs interface /sys/kernel/debug/kernel_page_tables. Similar race condition exists while checking for pages that might have been marked W+X via /sys/kernel/debug/kernel_page_tables/check_wx_pages which in turn calls ptdump_check_wx(). Instead of solving this race condition again, let's just move the memory hotplug lock inside generic ptdump_check_wx() which will benefit both the scenarios. Drop get_online_mems() and put_online_mems() combination from all existing platform ptdump code paths.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-366 Race Condition within a Thread\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n6.5\nMEDIUM\nCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-38683\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: hv_netvsc: Fix panic during namespace deletion with VF The existing code move the VF NIC to new namespace when NETDEV_REGISTER is received on netvsc NIC. During deletion of the namespace, default_device_exit_batch() >> default_device_exit_net() is called. When netvsc NIC is moved back and registered to the default namespace, it automatically brings VF NIC back to the default namespace. This will cause the default_device_exit_net() >> for_each_netdev_safe loop unable to detect the list end, and hit NULL ptr: [ 231.449420] mana 7870:00:00.0 enP30832s1: Moved VF to namespace with: eth0 [ 231.449656] BUG: kernel NULL pointer dereference, address: 0000000000000010 [ 231.450246] #PF: supervisor read access in kernel mode [ 231.450579] #PF: error_code(0x0000) - not-present page [ 231.450916] PGD 17b8a8067 P4D 0 [ 231.451163] Oops: Oops: 0000 [#1] SMP NOPTI [ 231.451450] CPU: 82 UID: 0 PID: 1394 Comm: kworker/u768:1 Not tainted 6.16.0-rc4+ #3 VOLUNTARY [ 231.452042] Hardware name: Microsoft Corporation Virtual Machine/Virtual Machine, BIOS Hyper-V UEFI Release v4.1 11/21/2024 [ 231.452692] Workqueue: netns cleanup_net [ 231.452947] RIP: 0010:default_device_exit_batch+0x16c/0x3f0 [ 231.453326] Code: c0 0c f5 b3 e8 d5 db fe ff 48 85 c0 74 15 48 c7 c2 f8 fd ca b2 be 10 00 00 00 48 8d 7d c0 e8 7b 77 25 00 49 8b 86 28 01 00 00 <48> 8b 50 10 4c 8b 2a 4c 8d 62 f0 49 83 ed 10 4c 39 e0 0f 84 d6 00 [ 231.454294] RSP: 0018:ff75fc7c9bf9fd00 EFLAGS: 00010246 [ 231.454610] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 61c8864680b583eb [ 231.455094] RDX: ff1fa9f71462d800 RSI: ff75fc7c9bf9fd38 RDI: 0000000030766564 [ 231.455686] RBP: ff75fc7c9bf9fd78 R08: 0000000000000000 R09: 0000000000000000 [ 231.456126] R10: 0000000000000001 R11: 0000000000000004 R12: ff1fa9f70088e340 [ 231.456621] R13: ff1fa9f70088e340 R14: ffffffffb3f50c20 R15: ff1fa9f7103e6340 [ 231.457161] FS: 0000000000000000(0000) GS:ff1faa6783a08000(0000) knlGS:0000000000000000 [ 231.457707] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 231.458031] CR2: 0000000000000010 CR3: 0000000179ab2006 CR4: 0000000000b73ef0 [ 231.458434] Call Trace: [ 231.458600] [ 231.458777] ops_undo_list+0x100/0x220 [ 231.459015] cleanup_net+0x1b8/0x300 [ 231.459285] process_one_work+0x184/0x340 To fix it, move the ns change to a workqueue, and take rtnl_lock to avoid changing the netdev list when default_device_exit_net() is using it.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-820 Missing Synchronization\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.2\nMEDIUM\nCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-38684\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: net/sched: ets: use old 'nbands' while purging unused classes Shuang reported sch_ets test-case [1] crashing in ets_class_qlen_notify() after recent changes from Lion [2]. The problem is: in ets_qdisc_change() we purge unused DWRR queues; the value of 'q->nbands' is the new one, and the cleanup should be done with the old one. The problem is here since my first attempts to fix ets_qdisc_change(), but it surfaced again after the recent qdisc len accounting fixes. Fix it purging idle DWRR queues before assigning a new value of 'q->nbands', so that all purge operations find a consistent configuration: - old 'q->nbands' because it's needed by ets_class_find() - old 'q->nstrict' because it's needed by ets_class_is_strict() BUG: kernel NULL pointer dereference, address: 0000000000000000 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 0 P4D 0 Oops: Oops: 0000 [#1] SMP NOPTI CPU: 62 UID: 0 PID: 39457 Comm: tc Kdump: loaded Not tainted 6.12.0-116.el10.x86_64 #1 PREEMPT(voluntary) Hardware name: Dell Inc. PowerEdge R640/06DKY5, BIOS 2.12.2 07/09/2021 RIP: 0010:__list_del_entry_valid_or_report+0x4/0x80 Code: ff 4c 39 c7 0f 84 39 19 8e ff b8 01 00 00 00 c3 cc cc cc cc 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <48> 8b 17 48 8b 4f 08 48 85 d2 0f 84 56 19 8e ff 48 85 c9 0f 84 ab RSP: 0018:ffffba186009f400 EFLAGS: 00010202 RAX: 00000000000000d6 RBX: 0000000000000000 RCX: 0000000000000004 RDX: ffff9f0fa29b69c0 RSI: 0000000000000000 RDI: 0000000000000000 RBP: ffffffffc12c2400 R08: 0000000000000008 R09: 0000000000000004 R10: ffffffffffffffff R11: 0000000000000004 R12: 0000000000000000 R13: ffff9f0f8cfe0000 R14: 0000000000100005 R15: 0000000000000000 FS: 00007f2154f37480(0000) GS:ffff9f269c1c0000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000000 CR3: 00000001530be001 CR4: 00000000007726f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 PKRU: 55555554 Call Trace: ets_class_qlen_notify+0x65/0x90 [sch_ets] qdisc_tree_reduce_backlog+0x74/0x110 ets_qdisc_change+0x630/0xa40 [sch_ets] __tc_modify_qdisc.constprop.0+0x216/0x7f0 tc_modify_qdisc+0x7c/0x120 rtnetlink_rcv_msg+0x145/0x3f0 netlink_rcv_skb+0x53/0x100 netlink_unicast+0x245/0x390 netlink_sendmsg+0x21b/0x470 ____sys_sendmsg+0x39d/0x3d0 ___sys_sendmsg+0x9a/0xe0 __sys_sendmsg+0x7a/0xd0 do_syscall_64+0x7d/0x160 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7f2155114084 Code: 89 02 b8 ff ff ff ff eb bb 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 80 3d 25 f0 0c 00 00 74 13 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 54 c3 0f 1f 00 48 83 ec 28 89 54 24 1c 48 89 RSP: 002b:00007fff1fd7a988 EFLAGS: 00000202 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 0000560ec063e5e0 RCX: 00007f2155114084 RDX: 0000000000000000 RSI: 00007fff1fd7a9f0 RDI: 0000000000000003 RBP: 00007fff1fd7aa60 R08: 0000000000000010 R09: 000000000000003f R10: 0000560ee9b3a010 R11: 0000000000000202 R12: 00007fff1fd7aae0 R13: 000000006891ccde R14: 0000560ec063e5e0 R15: 00007fff1fd7aad0 [1] https://lore.kernel.org/netdev/e08c7f4a6882f260011909a868311c6e9b54f3e4.1639153474.git.dcaratti@redhat.com/ [2] https://lore.kernel.org/netdev/d912cbd7-193b-4269-9857-525bee8bbb6a@gmail.com/\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-476 NULL Pointer Dereference\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.2\nMEDIUM\nCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-38685\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: fbdev: Fix vmalloc out-of-bounds write in fast_imageblit This issue triggers when a userspace program does an ioctl FBIOPUT_CON2FBMAP by passing console number and frame buffer number. Ideally this maps console to frame buffer and updates the screen if console is visible. As part of mapping it has to do resize of console according to frame buffer info. if this resize fails and returns from vc_do_resize() and continues further. At this point console and new frame buffer are mapped and sets display vars. Despite failure still it continue to proceed updating the screen at later stages where vc_data is related to previous frame buffer and frame buffer info and display vars are mapped to new frame buffer and eventully leading to out-of-bounds write in fast_imageblit(). This bheviour is excepted only when fg_console is equal to requested console which is a visible console and updates screen with invalid struct references in fbcon_putcs().\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.8\nHIGH\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-38687\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: comedi: fix race between polling and detaching syzbot reports a use-after-free in comedi in the below link, which is due to comedi gladly removing the allocated async area even though poll requests are still active on the wait_queue_head inside of it. This can cause a use-after-free when the poll entries are later triggered or removed, as the memory for the wait_queue_head has been freed. We need to check there are no tasks queued on any of the subdevices' wait queues before allowing the device to be detached by the `COMEDI_DEVCONFIG` ioctl. Tasks will read-lock `dev->attach_lock` before adding themselves to the subdevice wait queue, so fix the problem in the `COMEDI_DEVCONFIG` ioctl handler by write-locking `dev->attach_lock` before checking that all of the subdevices are safe to be deleted. This includes testing for any sleepers on the subdevices' wait queues. It remains locked until the device has been detached. This requires the `comedi_device_detach()` function to be refactored slightly, moving the bulk of it into new function `comedi_device_detach_locked()`. Note that the refactor of `comedi_device_detach()` results in `comedi_device_cancel_all()` now being called while `dev->attach_lock` is write-locked, which wasn't the case previously, but that does not matter. Thanks to Jens Axboe for diagnosing the problem and co-developing this patch.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-38691\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: pNFS: Fix uninited ptr deref in block/scsi layout The error occurs on the third attempt to encode extents. When function ext_tree_prepare_commit() reallocates a larger buffer to retry encoding extents, the \"layoutupdate_pages\" page array is initialized only after the retry loop. But ext_tree_free_commitdata() is called on every iteration and tries to put pages in the array, thus dereferencing uninitialized pointers. An additional problem is that there is no limit on the maximum possible buffer_size. When there are too many extents, the client may create a layoutcommit that is larger than the maximum possible RPC size accepted by the server. During testing, we observed two typical scenarios. First, one memory page for extents is enough when we work with small files, append data to the end of the file, or preallocate extents before writing. But when we fill a new large file without preallocating, the number of extents can be huge, and counting the number of written extents in ext_tree_encode_commit() does not help much. Since this number increases even more between unlocking and locking of ext_tree, the reallocated buffer may not be large enough again and again.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-908 Use of Uninitialized Resource\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-38693\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar In w7090p_tuner_write_serpar, msg is controlled by user. When msg[0].buf is null and msg[0].len is zero, former checks on msg[0].buf would be passed. If accessing msg[0].buf[2] without sanity check, null pointer deref would happen. We add check on msg[0].len to prevent crash. Similar commit: commit 0ed554fd769a (\"media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()\")\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7\nHIGH\nCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-38694\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: media: dvb-frontends: dib7090p: fix null-ptr-deref in dib7090p_rw_on_apb() In dib7090p_rw_on_apb, msg is controlled by user. When msg[0].buf is null and msg[0].len is zero, former checks on msg[0].buf would be passed. If accessing msg[0].buf[2] without sanity check, null pointer deref would happen. We add check on msg[0].len to prevent crash. Similar issue occurs when access msg[1].buf[0] and msg[1].buf[1]. Similar commit: commit 0ed554fd769a (\"media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()\")\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-476 NULL Pointer Dereference\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-38695\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure If a call to lpfc_sli4_read_rev() from lpfc_sli4_hba_setup() fails, the resultant cleanup routine lpfc_sli4_vport_delete_fcp_xri_aborted() may occur before sli4_hba.hdwqs are allocated. This may result in a null pointer dereference when attempting to take the abts_io_buf_list_lock for the first hardware queue. Fix by adding a null ptr check on phba->sli4_hba.hdwq and early return because this situation means there must have been an error during port initialization.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-476 NULL Pointer Dereference\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7\nHIGH\nCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-38696\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: MIPS: Don't crash in stack_top() for tasks without ABI or vDSO Not all tasks have an ABI associated or vDSO mapped, for example kthreads never do. If such a task ever ends up calling stack_top(), it will derefence the NULL ABI pointer and crash. This can for example happen when using kunit: mips_stack_top+0x28/0xc0 arch_pick_mmap_layout+0x190/0x220 kunit_vm_mmap_init+0xf8/0x138 __kunit_add_resource+0x40/0xa8 kunit_vm_mmap+0x88/0xd8 usercopy_test_init+0xb8/0x240 kunit_try_run_case+0x5c/0x1a8 kunit_generic_run_threadfn_adapter+0x28/0x50 kthread+0x118/0x240 ret_from_kernel_thread+0x14/0x1c Only dereference the ABI point if it is set. The GIC page is also included as it is specific to the vDSO. Also move the randomization adjustment into the same conditional.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-38697\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: jfs: upper bound check of tree index in dbAllocAG When computing the tree index in dbAllocAG, we never check if we are out of bounds realative to the size of the stree. This could happen in a scenario where the filesystem metadata are corrupted.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7\nHIGH\nCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-38698\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: jfs: Regular file corruption check The reproducer builds a corrupted file on disk with a negative i_size value. Add a check when opening this file to avoid subsequent operation failures.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7\nHIGH\nCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-38699\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: scsi: bfa: Double-free fix When the bfad_im_probe() function fails during initialization, the memory pointed to by bfad->im is freed without setting bfad->im to NULL. Subsequently, during driver uninstallation, when the state machine enters the bfad_sm_stopping state and calls the bfad_im_probe_undo() function, it attempts to free the memory pointed to by bfad->im again, thereby triggering a double-free vulnerability. Set bfad->im to NULL if probing fails.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-415 Double Free\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n6.4\nMEDIUM\nCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-38700\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated In case of an ib_fast_reg_mr allocation failure during iSER setup, the machine hits a panic because iscsi_conn->dd_data is initialized unconditionally, even when no memory is allocated (dd_size == 0). This leads invalid pointer dereference during connection teardown. Fix by setting iscsi_conn->dd_data only if memory is actually allocated. Panic trace: ------------ iser: iser_create_fastreg_desc: Failed to allocate ib_fast_reg_mr err=-12 iser: iser_alloc_rx_descriptors: failed allocating rx descriptors / data buffers BUG: unable to handle page fault for address: fffffffffffffff8 RIP: 0010:swake_up_locked.part.5+0xa/0x40 Call Trace: complete+0x31/0x40 iscsi_iser_conn_stop+0x88/0xb0 [ib_iser] iscsi_stop_conn+0x66/0xc0 [scsi_transport_iscsi] iscsi_if_stop_conn+0x14a/0x150 [scsi_transport_iscsi] iscsi_if_rx+0x1135/0x1834 [scsi_transport_iscsi] ? netlink_lookup+0x12f/0x1b0 ? netlink_deliver_tap+0x2c/0x200 netlink_unicast+0x1ab/0x280 netlink_sendmsg+0x257/0x4f0 ? _copy_from_user+0x29/0x60 sock_sendmsg+0x5f/0x70\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7\nHIGH\nCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-38701\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr A syzbot fuzzed image triggered a BUG_ON in ext4_update_inline_data() when an inode had the INLINE_DATA_FL flag set but was missing the system.data extended attribute. Since this can happen due to a maiciouly fuzzed file system, we shouldn't BUG, but rather, report it as a corrupted file system. Add similar replacements of BUG_ON with EXT4_ERROR_INODE() ii ext4_create_inline_data() and ext4_inline_data_truncate().\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-617 Reachable Assertion\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-38702\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: fbdev: fix potential buffer overflow in do_register_framebuffer() The current implementation may lead to buffer overflow when: 1. Unregistration creates NULL gaps in registered_fb[] 2. All array slots become occupied despite num_registered_fb < FB_MAX 3. The registration loop exceeds array bounds Add boundary check to prevent registered_fb[FB_MAX] access.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.8\nHIGH\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-38706\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime() snd_soc_remove_pcm_runtime() might be called with rtd == NULL which will leads to null pointer dereference. This was reproduced with topology loading and marking a link as ignore due to missing hardware component on the system. On module removal the soc_tplg_remove_link() would call snd_soc_remove_pcm_runtime() with rtd == NULL since the link was ignored, no runtime was created.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-476 NULL Pointer Dereference\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-38707\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Add sanity check for file name The length of the file name should be smaller than the directory entry size.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-38708\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: drbd: add missing kref_get in handle_write_conflicts With `two-primaries` enabled, DRBD tries to detect \"concurrent\" writes and handle write conflicts, so that even if you write to the same sector simultaneously on both nodes, they end up with the identical data once the writes are completed. In handling \"superseeded\" writes, we forgot a kref_get, resulting in a premature drbd_destroy_device and use after free, and further to kernel crashes with symptoms. Relevance: No one should use DRBD as a random data generator, and apparently all users of \"two-primaries\" handle concurrent writes correctly on layer up. That is cluster file systems use some distributed lock manager, and live migration in virtualization environments stops writes on one node before starting writes on the other node. Which means that other than for \"test cases\", this code path is never taken in real life. FYI, in DRBD 9, things are handled differently nowadays. We still detect \"write conflicts\", but no longer try to be smart about them. We decided to disconnect hard instead: upper layers must not submit concurrent writes. If they do, that's their fault.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-416 Use After Free\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.8\nHIGH\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-38711\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: smb/server: avoid deadlock when linking with ReplaceIfExists If smb2_create_link() is called with ReplaceIfExists set and the name does exist then a deadlock will happen. ksmbd_vfs_kern_path_locked() will return with success and the parent directory will be locked. ksmbd_vfs_remove_file() will then remove the file. ksmbd_vfs_link() will then be called while the parent is still locked. It will try to lock the same parent and will deadlock. This patch moves the ksmbd_vfs_kern_path_unlock() call to *before* ksmbd_vfs_link() and then simplifies the code, removing the file_present flag variable.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-38712\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file() When the volume header contains erroneous values that do not reflect the actual state of the filesystem, hfsplus_fill_super() assumes that the attributes file is not yet created, which later results in hitting BUG_ON() when hfsplus_create_attributes_file() is called. Replace this BUG_ON() with -EIO error with a message to suggest running fsck tool.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-38713\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() The hfsplus_readdir() method is capable to crash by calling hfsplus_uni2asc(): [ 667.121659][ T9805] ================================================================== [ 667.122651][ T9805] BUG: KASAN: slab-out-of-bounds in hfsplus_uni2asc+0x902/0xa10 [ 667.123627][ T9805] Read of size 2 at addr ffff88802592f40c by task repro/9805 [ 667.124578][ T9805] [ 667.124876][ T9805] CPU: 3 UID: 0 PID: 9805 Comm: repro Not tainted 6.16.0-rc3 #1 PREEMPT(full) [ 667.124886][ T9805] Hardware name: QEMU Ubuntu 24.04 PC (i440FX + PIIX, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 667.124890][ T9805] Call Trace: [ 667.124893][ T9805] [ 667.124896][ T9805] dump_stack_lvl+0x10e/0x1f0 [ 667.124911][ T9805] print_report+0xd0/0x660 [ 667.124920][ T9805] ? __virt_addr_valid+0x81/0x610 [ 667.124928][ T9805] ? __phys_addr+0xe8/0x180 [ 667.124934][ T9805] ? hfsplus_uni2asc+0x902/0xa10 [ 667.124942][ T9805] kasan_report+0xc6/0x100 [ 667.124950][ T9805] ? hfsplus_uni2asc+0x902/0xa10 [ 667.124959][ T9805] hfsplus_uni2asc+0x902/0xa10 [ 667.124966][ T9805] ? hfsplus_bnode_read+0x14b/0x360 [ 667.124974][ T9805] hfsplus_readdir+0x845/0xfc0 [ 667.124984][ T9805] ? __pfx_hfsplus_readdir+0x10/0x10 [ 667.124994][ T9805] ? stack_trace_save+0x8e/0xc0 [ 667.125008][ T9805] ? iterate_dir+0x18b/0xb20 [ 667.125015][ T9805] ? trace_lock_acquire+0x85/0xd0 [ 667.125022][ T9805] ? lock_acquire+0x30/0x80 [ 667.125029][ T9805] ? iterate_dir+0x18b/0xb20 [ 667.125037][ T9805] ? down_read_killable+0x1ed/0x4c0 [ 667.125044][ T9805] ? putname+0x154/0x1a0 [ 667.125051][ T9805] ? __pfx_down_read_killable+0x10/0x10 [ 667.125058][ T9805] ? apparmor_file_permission+0x239/0x3e0 [ 667.125069][ T9805] iterate_dir+0x296/0xb20 [ 667.125076][ T9805] __x64_sys_getdents64+0x13c/0x2c0 [ 667.125084][ T9805] ? __pfx___x64_sys_getdents64+0x10/0x10 [ 667.125091][ T9805] ? __x64_sys_openat+0x141/0x200 [ 667.125126][ T9805] ? __pfx_filldir64+0x10/0x10 [ 667.125134][ T9805] ? do_user_addr_fault+0x7fe/0x12f0 [ 667.125143][ T9805] do_syscall_64+0xc9/0x480 [ 667.125151][ T9805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.125158][ T9805] RIP: 0033:0x7fa8753b2fc9 [ 667.125164][ T9805] Code: 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 48 [ 667.125172][ T9805] RSP: 002b:00007ffe96f8e0f8 EFLAGS: 00000217 ORIG_RAX: 00000000000000d9 [ 667.125181][ T9805] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa8753b2fc9 [ 667.125185][ T9805] RDX: 0000000000000400 RSI: 00002000000063c0 RDI: 0000000000000004 [ 667.125190][ T9805] RBP: 00007ffe96f8e110 R08: 00007ffe96f8e110 R09: 00007ffe96f8e110 [ 667.125195][ T9805] R10: 0000000000000000 R11: 0000000000000217 R12: 0000556b1e3b4260 [ 667.125199][ T9805] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 667.125207][ T9805] [ 667.125210][ T9805] [ 667.145632][ T9805] Allocated by task 9805: [ 667.145991][ T9805] kasan_save_stack+0x20/0x40 [ 667.146352][ T9805] kasan_save_track+0x14/0x30 [ 667.146717][ T9805] __kasan_kmalloc+0xaa/0xb0 [ 667.147065][ T9805] __kmalloc_noprof+0x205/0x550 [ 667.147448][ T9805] hfsplus_find_init+0x95/0x1f0 [ 667.147813][ T9805] hfsplus_readdir+0x220/0xfc0 [ 667.148174][ T9805] iterate_dir+0x296/0xb20 [ 667.148549][ T9805] __x64_sys_getdents64+0x13c/0x2c0 [ 667.148937][ T9805] do_syscall_64+0xc9/0x480 [ 667.149291][ T9805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.149809][ T9805] [ 667.150030][ T9805] The buggy address belongs to the object at ffff88802592f000 [ 667.150030][ T9805] which belongs to the cache kmalloc-2k of size 2048 [ 667.151282][ T9805] The buggy address is located 0 bytes to the right of [ 667.151282][ T9805] allocated 1036-byte region [ffff88802592f000, ffff88802592f40c) [ 667.1 ---truncated---\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7\nHIGH\nCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-38714\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read() The hfsplus_bnode_read() method can trigger the issue: [ 174.852007][ T9784] ================================================================== [ 174.852709][ T9784] BUG: KASAN: slab-out-of-bounds in hfsplus_bnode_read+0x2f4/0x360 [ 174.853412][ T9784] Read of size 8 at addr ffff88810b5fc6c0 by task repro/9784 [ 174.854059][ T9784] [ 174.854272][ T9784] CPU: 1 UID: 0 PID: 9784 Comm: repro Not tainted 6.16.0-rc3 #7 PREEMPT(full) [ 174.854281][ T9784] Hardware name: QEMU Ubuntu 24.04 PC (i440FX + PIIX, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 174.854286][ T9784] Call Trace: [ 174.854289][ T9784] [ 174.854292][ T9784] dump_stack_lvl+0x10e/0x1f0 [ 174.854305][ T9784] print_report+0xd0/0x660 [ 174.854315][ T9784] ? __virt_addr_valid+0x81/0x610 [ 174.854323][ T9784] ? __phys_addr+0xe8/0x180 [ 174.854330][ T9784] ? hfsplus_bnode_read+0x2f4/0x360 [ 174.854337][ T9784] kasan_report+0xc6/0x100 [ 174.854346][ T9784] ? hfsplus_bnode_read+0x2f4/0x360 [ 174.854354][ T9784] hfsplus_bnode_read+0x2f4/0x360 [ 174.854362][ T9784] hfsplus_bnode_dump+0x2ec/0x380 [ 174.854370][ T9784] ? __pfx_hfsplus_bnode_dump+0x10/0x10 [ 174.854377][ T9784] ? hfsplus_bnode_write_u16+0x83/0xb0 [ 174.854385][ T9784] ? srcu_gp_start+0xd0/0x310 [ 174.854393][ T9784] ? __mark_inode_dirty+0x29e/0xe40 [ 174.854402][ T9784] hfsplus_brec_remove+0x3d2/0x4e0 [ 174.854411][ T9784] __hfsplus_delete_attr+0x290/0x3a0 [ 174.854419][ T9784] ? __pfx_hfs_find_1st_rec_by_cnid+0x10/0x10 [ 174.854427][ T9784] ? __pfx___hfsplus_delete_attr+0x10/0x10 [ 174.854436][ T9784] ? __asan_memset+0x23/0x50 [ 174.854450][ T9784] hfsplus_delete_all_attrs+0x262/0x320 [ 174.854459][ T9784] ? __pfx_hfsplus_delete_all_attrs+0x10/0x10 [ 174.854469][ T9784] ? rcu_is_watching+0x12/0xc0 [ 174.854476][ T9784] ? __mark_inode_dirty+0x29e/0xe40 [ 174.854483][ T9784] hfsplus_delete_cat+0x845/0xde0 [ 174.854493][ T9784] ? __pfx_hfsplus_delete_cat+0x10/0x10 [ 174.854507][ T9784] hfsplus_unlink+0x1ca/0x7c0 [ 174.854516][ T9784] ? __pfx_hfsplus_unlink+0x10/0x10 [ 174.854525][ T9784] ? down_write+0x148/0x200 [ 174.854532][ T9784] ? __pfx_down_write+0x10/0x10 [ 174.854540][ T9784] vfs_unlink+0x2fe/0x9b0 [ 174.854549][ T9784] do_unlinkat+0x490/0x670 [ 174.854557][ T9784] ? __pfx_do_unlinkat+0x10/0x10 [ 174.854565][ T9784] ? __might_fault+0xbc/0x130 [ 174.854576][ T9784] ? getname_flags.part.0+0x1c5/0x550 [ 174.854584][ T9784] __x64_sys_unlink+0xc5/0x110 [ 174.854592][ T9784] do_syscall_64+0xc9/0x480 [ 174.854600][ T9784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.854608][ T9784] RIP: 0033:0x7f6fdf4c3167 [ 174.854614][ T9784] Code: f0 ff ff 73 01 c3 48 8b 0d 26 0d 0e 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 08 [ 174.854622][ T9784] RSP: 002b:00007ffcb948bca8 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 174.854630][ T9784] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6fdf4c3167 [ 174.854636][ T9784] RDX: 00007ffcb948bcc0 RSI: 00007ffcb948bcc0 RDI: 00007ffcb948bd50 [ 174.854641][ T9784] RBP: 00007ffcb948cd90 R08: 0000000000000001 R09: 00007ffcb948bb40 [ 174.854645][ T9784] R10: 00007f6fdf564fc0 R11: 0000000000000206 R12: 0000561e1bc9c2d0 [ 174.854650][ T9784] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 174.854658][ T9784] [ 174.854661][ T9784] [ 174.879281][ T9784] Allocated by task 9784: [ 174.879664][ T9784] kasan_save_stack+0x20/0x40 [ 174.880082][ T9784] kasan_save_track+0x14/0x30 [ 174.880500][ T9784] __kasan_kmalloc+0xaa/0xb0 [ 174.880908][ T9784] __kmalloc_noprof+0x205/0x550 [ 174.881337][ T9784] __hfs_bnode_create+0x107/0x890 [ 174.881779][ T9784] hfsplus_bnode_find+0x2d0/0xd10 [ 174.882222][ T9784] hfsplus_brec_find+0x2b0/0x520 [ 174.882659][ T9784] hfsplus_delete_all_attrs+0x23b/0x3 ---truncated---\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7\nHIGH\nCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-38715\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: hfs: fix slab-out-of-bounds in hfs_bnode_read() This patch introduces is_bnode_offset_valid() method that checks the requested offset value. Also, it introduces check_and_correct_requested_length() method that checks and correct the requested length (if it is necessary). These methods are used in hfs_bnode_read(), hfs_bnode_write(), hfs_bnode_clear(), hfs_bnode_copy(), and hfs_bnode_move() with the goal to prevent the access out of allocated memory and triggering the crash.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-38721\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: fix refcount leak on table dump There is a reference count leak in ctnetlink_dump_table(): if (res < 0) { nf_conntrack_get(&ct->ct_general); // HERE cb->args[1] = (unsigned long)ct; ... While its very unlikely, its possible that ct == last. If this happens, then the refcount of ct was already incremented. This 2nd increment is never undone. This prevents the conntrack object from being released, which in turn keeps prevents cnet->count from dropping back to 0. This will then block the netns dismantle (or conntrack rmmod) as nf_conntrack_cleanup_net_list() will wait forever. This can be reproduced by running conntrack_resize.sh selftest in a loop. It takes ~20 minutes for me on a preemptible kernel on average before I see a runaway kworker spinning in nf_conntrack_cleanup_net_list. One fix would to change this to: if (res < 0) { if (ct != last) nf_conntrack_get(&ct->ct_general); But this reference counting isn't needed in the first place. We can just store a cookie value instead. A followup patch will do the same for ctnetlink_exp_dump_table, it looks to me as if this has the same problem and like ctnetlink_dump_table, we only need a 'skip hint', not the actual object so we can apply the same cookie strategy there as well.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-772 Missing Release of Resource after Effective Lifetime\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-38723\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Fix jump offset calculation in tailcall The extra pass of bpf_int_jit_compile() skips JIT context initialization which essentially skips offset calculation leaving out_offset = -1, so the jmp_offset in emit_bpf_tail_call is calculated by \"#define jmp_offset (out_offset - (cur_offset))\" is a negative number, which is wrong. The final generated assembly are as follow. 54: bgeu $a2, $t1, -8 # 0x0000004c 58: addi.d $a6, $s5, -1 5c: bltz $a6, -16 # 0x0000004c 60: alsl.d $t2, $a2, $a1, 0x3 64: ld.d $t2, $t2, 264 68: beq $t2, $zero, -28 # 0x0000004c Before apply this patch, the follow test case will reveal soft lock issues. cd tools/testing/selftests/bpf/ ./test_progs --allow=tailcalls/tailcall_bpf2bpf_1 dmesg: watchdog: BUG: soft lockup - CPU#2 stuck for 26s! [test_progs:25056]\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-38724\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() Lei Lu recently reported that nfsd4_setclientid_confirm() did not check the return value from get_client_locked(). a SETCLIENTID_CONFIRM could race with a confirmed client expiring and fail to get a reference. That could later lead to a UAF. Fix this by getting a reference early in the case where there is an extant confirmed client. If that fails then treat it as if there were no confirmed client found at all. In the case where the unconfirmed client is expiring, just fail and return the result from get_client_locked().\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-416 Use After Free\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.8\nHIGH\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-38725\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: net: usb: asix_devices: add phy_mask for ax88772 mdio bus Without setting phy_mask for ax88772 mdio bus, current driver may create at most 32 mdio phy devices with phy address range from 0x00 ~ 0x1f. DLink DUB-E100 H/W Ver B1 is such a device. However, only one main phy device will bind to net phy driver. This is creating issue during system suspend/resume since phy_polling_mode() in phy_state_machine() will directly deference member of phydev->drv for non-main phy devices. Then NULL pointer dereference issue will occur. Due to only external phy or internal phy is necessary, add phy_mask for ax88772 mdio bus to workarnoud the issue.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7\nHIGH\nCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-38727\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: netlink: avoid infinite retry looping in netlink_unicast() netlink_attachskb() checks for the socket's read memory allocation constraints. Firstly, it has: rmem < READ_ONCE(sk->sk_rcvbuf) to check if the just increased rmem value fits into the socket's receive buffer. If not, it proceeds and tries to wait for the memory under: rmem + skb->truesize > READ_ONCE(sk->sk_rcvbuf) The checks don't cover the case when skb->truesize + sk->sk_rmem_alloc is equal to sk->sk_rcvbuf. Thus the function neither successfully accepts these conditions, nor manages to reschedule the task - and is called in retry loop for indefinite time which is caught as: rcu: INFO: rcu_sched self-detected stall on CPU rcu: 0-....: (25999 ticks this GP) idle=ef2/1/0x4000000000000000 softirq=262269/262269 fqs=6212 (t=26000 jiffies g=230833 q=259957) NMI backtrace for cpu 0 CPU: 0 PID: 22 Comm: kauditd Not tainted 5.10.240 #68 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.17.0-4.fc42 04/01/2014 Call Trace: dump_stack lib/dump_stack.c:120 nmi_cpu_backtrace.cold lib/nmi_backtrace.c:105 nmi_trigger_cpumask_backtrace lib/nmi_backtrace.c:62 rcu_dump_cpu_stacks kernel/rcu/tree_stall.h:335 rcu_sched_clock_irq.cold kernel/rcu/tree.c:2590 update_process_times kernel/time/timer.c:1953 tick_sched_handle kernel/time/tick-sched.c:227 tick_sched_timer kernel/time/tick-sched.c:1399 __hrtimer_run_queues kernel/time/hrtimer.c:1652 hrtimer_interrupt kernel/time/hrtimer.c:1717 __sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1113 asm_call_irq_on_stack arch/x86/entry/entry_64.S:808 netlink_attachskb net/netlink/af_netlink.c:1234 netlink_unicast net/netlink/af_netlink.c:1349 kauditd_send_queue kernel/audit.c:776 kauditd_thread kernel/audit.c:897 kthread kernel/kthread.c:328 ret_from_fork arch/x86/entry/entry_64.S:304 Restore the original behavior of the check which commit in Fixes accidentally missed when restructuring the code. Found by Linux Verification Center (linuxtesting.org).\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-38728\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: smb3: fix for slab out of bounds on mount to ksmbd With KASAN enabled, it is possible to get a slab out of bounds during mount to ksmbd due to missing check in parse_server_interfaces() (see below): BUG: KASAN: slab-out-of-bounds in parse_server_interfaces+0x14ee/0x1880 [cifs] Read of size 4 at addr ffff8881433dba98 by task mount/9827 CPU: 5 UID: 0 PID: 9827 Comm: mount Tainted: G OE 6.16.0-rc2-kasan #2 PREEMPT(voluntary) Tainted: [O]=OOT_MODULE, [E]=UNSIGNED_MODULE Hardware name: Dell Inc. Precision Tower 3620/0MWYPT, BIOS 2.13.1 06/14/2019 Call Trace: dump_stack_lvl+0x9f/0xf0 print_report+0xd1/0x670 __virt_addr_valid+0x22c/0x430 ? parse_server_interfaces+0x14ee/0x1880 [cifs] ? kasan_complete_mode_report_info+0x2a/0x1f0 ? parse_server_interfaces+0x14ee/0x1880 [cifs] kasan_report+0xd6/0x110 parse_server_interfaces+0x14ee/0x1880 [cifs] __asan_report_load_n_noabort+0x13/0x20 parse_server_interfaces+0x14ee/0x1880 [cifs] ? __pfx_parse_server_interfaces+0x10/0x10 [cifs] ? trace_hardirqs_on+0x51/0x60 SMB3_request_interfaces+0x1ad/0x3f0 [cifs] ? __pfx_SMB3_request_interfaces+0x10/0x10 [cifs] ? SMB2_tcon+0x23c/0x15d0 [cifs] smb3_qfs_tcon+0x173/0x2b0 [cifs] ? __pfx_smb3_qfs_tcon+0x10/0x10 [cifs] ? cifs_get_tcon+0x105d/0x2120 [cifs] ? do_raw_spin_unlock+0x5d/0x200 ? cifs_get_tcon+0x105d/0x2120 [cifs] ? __pfx_smb3_qfs_tcon+0x10/0x10 [cifs] cifs_mount_get_tcon+0x369/0xb90 [cifs] ? dfs_cache_find+0xe7/0x150 [cifs] dfs_mount_share+0x985/0x2970 [cifs] ? check_path.constprop.0+0x28/0x50 ? save_trace+0x54/0x370 ? __pfx_dfs_mount_share+0x10/0x10 [cifs] ? __lock_acquire+0xb82/0x2ba0 ? __kasan_check_write+0x18/0x20 cifs_mount+0xbc/0x9e0 [cifs] ? __pfx_cifs_mount+0x10/0x10 [cifs] ? do_raw_spin_unlock+0x5d/0x200 ? cifs_setup_cifs_sb+0x29d/0x810 [cifs] cifs_smb3_do_mount+0x263/0x1990 [cifs]\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-125 Out-of-bounds Read\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-38729\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Validate UAC3 power domain descriptors, too UAC3 power domain descriptors need to be verified with its variable bLength for avoiding the unexpected OOB accesses by malicious firmware, too.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-125 Out-of-bounds Read\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.1\nHIGH\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-38732\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: netfilter: nf_reject: don't leak dst refcount for loopback packets recent patches to add a WARN() when replacing skb dst entry found an old bug: WARNING: include/linux/skbuff.h:1165 skb_dst_check_unset include/linux/skbuff.h:1164 [inline] WARNING: include/linux/skbuff.h:1165 skb_dst_set include/linux/skbuff.h:1210 [inline] WARNING: include/linux/skbuff.h:1165 nf_reject_fill_skb_dst+0x2a4/0x330 net/ipv4/netfilter/nf_reject_ipv4.c:234 [..] Call Trace: nf_send_unreach+0x17b/0x6e0 net/ipv4/netfilter/nf_reject_ipv4.c:325 nft_reject_inet_eval+0x4bc/0x690 net/netfilter/nft_reject_inet.c:27 expr_call_ops_eval net/netfilter/nf_tables_core.c:237 [inline] .. This is because blamed commit forgot about loopback packets. Such packets already have a dst_entry attached, even at PRE_ROUTING stage. Instead of checking hook just check if the skb already has a route attached to it.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-911 Improper Update of Reference Count\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.8\nMEDIUM\nCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-38735\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: gve: prevent ethtool ops after shutdown A crash can occur if an ethtool operation is invoked after shutdown() is called. shutdown() is invoked during system shutdown to stop DMA operations without performing expensive deallocations. It is discouraged to unregister the netdev in this path, so the device may still be visible to userspace and kernel helpers. In gve, shutdown() tears down most internal data structures. If an ethtool operation is dispatched after shutdown(), it will dereference freed or NULL pointers, leading to a kernel panic. While graceful shutdown normally quiesces userspace before invoking the reboot syscall, forced shutdowns (as observed on GCP VMs) can still trigger this path. Fix by calling netif_device_detach() in shutdown(). This marks the device as detached so the ethtool ioctl handler will skip dispatching operations to the driver.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-664 Improper Control of a Resource Through its Lifetime\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-38736\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization Syzbot reported shift-out-of-bounds exception on MDIO bus initialization. The PHY address should be masked to 5 bits (0-31). Without this mask, invalid PHY addresses could be used, potentially causing issues with MDIO bus operations. Fix this by masking the PHY address with 0x1f (31 decimal) to ensure it stays within the valid range.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39673\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: ppp: fix race conditions in ppp_fill_forward_path ppp_fill_forward_path() has two race conditions: 1. The ppp->channels list can change between list_empty() and list_first_entry(), as ppp_lock() is not held. If the only channel is deleted in ppp_disconnect_channel(), list_first_entry() may access an empty head or a freed entry, and trigger a panic. 2. pch->chan can be NULL. When ppp_unregister_channel() is called, pch->chan is set to NULL before pch is removed from ppp->channels. Fix these by using a lockless RCU approach: - Use list_first_or_null_rcu() to safely test and access the first list entry. - Convert list modifications on ppp->channels to their RCU variants and add synchronize_net() after removal. - Check for a NULL pch->chan before dereferencing it.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.9\nMEDIUM\nCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39675\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null pointer check in mod_hdcp_hdcp1_create_session() The function mod_hdcp_hdcp1_create_session() calls the function get_first_active_display(), but does not check its return value. The return value is a null pointer if the display list is empty. This will lead to a null pointer dereference. Add a null pointer check for get_first_active_display() and return MOD_HDCP_STATUS_DISPLAY_NOT_FOUND if the function return null. This is similar to the commit c3e9826a2202 (\"drm/amd/display: Add null pointer check for get_first_active_display()\"). (cherry picked from commit 5e43eb3cd731649c4f8b9134f857be62a416c893)\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39676\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: scsi: qla4xxx: Prevent a potential error pointer dereference The qla4xxx_get_ep_fwdb() function is supposed to return NULL on error, but qla4xxx_ep_connect() returns error pointers. Propagating the error pointers will lead to an Oops in the caller, so change the error pointers to NULL.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-394 Unexpected Status Code or Return Value\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.1\nMEDIUM\nCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39681\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper Since 923f3a2b48bd (\"x86/resctrl: Query LLC monitoring properties once during boot\") resctrl_cpu_detect() has been moved from common CPU initialization code to the vendor-specific BSP init helper, while Hygon didn't put that call in their code. This triggers a division by zero fault during early booting stage on our machines with X86_FEATURE_CQM* supported, where get_rdt_mon_resources() tries to calculate mon_l3_config with uninitialized boot_cpu_data.x86_cache_occ_scale. Add the missing resctrl_cpu_detect() in the Hygon BSP init helper. [ bp: Massage commit message. ]\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-369 Divide By Zero\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39682\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: tls: fix handling of zero-length records on the rx_list Each recvmsg() call must process either - only contiguous DATA records (any number of them) - one non-DATA record If the next record has different type than what has already been processed we break out of the main processing loop. If the record has already been decrypted (which may be the case for TLS 1.3 where we don't know type until decryption) we queue the pending record to the rx_list. Next recvmsg() will pick it up from there. Queuing the skb to rx_list after zero-copy decrypt is not possible, since in that case we decrypted directly to the user space buffer, and we don't have an skb to queue (darg.skb points to the ciphertext skb for access to metadata like length). Only data records are allowed zero-copy, and we break the processing loop after each non-data record. So we should never zero-copy and then find out that the record type has changed. The corner case we missed is when the initial record comes from rx_list, and it's zero length.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7\nHIGH\nCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39683\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: tracing: Limit access to parser->buffer when trace_get_user failed When the length of the string written to set_ftrace_filter exceeds FTRACE_BUFF_MAX, the following KASAN alarm will be triggered: BUG: KASAN: slab-out-of-bounds in strsep+0x18c/0x1b0 Read of size 1 at addr ffff0000d00bd5ba by task ash/165 CPU: 1 UID: 0 PID: 165 Comm: ash Not tainted 6.16.0-g6bcdbd62bd56-dirty Hardware name: linux,dummy-virt (DT) Call trace: show_stack+0x34/0x50 (C) dump_stack_lvl+0xa0/0x158 print_address_description.constprop.0+0x88/0x398 print_report+0xb0/0x280 kasan_report+0xa4/0xf0 __asan_report_load1_noabort+0x20/0x30 strsep+0x18c/0x1b0 ftrace_process_regex.isra.0+0x100/0x2d8 ftrace_regex_release+0x484/0x618 __fput+0x364/0xa58 ____fput+0x28/0x40 task_work_run+0x154/0x278 do_notify_resume+0x1f0/0x220 el0_svc+0xec/0xf0 el0t_64_sync_handler+0xa0/0xe8 el0t_64_sync+0x1ac/0x1b0 The reason is that trace_get_user will fail when processing a string longer than FTRACE_BUFF_MAX, but not set the end of parser->buffer to 0. Then an OOB access will be triggered in ftrace_regex_release-> ftrace_process_regex->strsep->strpbrk. We can solve this problem by limiting access to parser->buffer when trace_get_user failed.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-125 Out-of-bounds Read\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.1\nHIGH\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39684\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: comedi: Fix use of uninitialized memory in do_insn_ioctl() and do_insnlist_ioctl() syzbot reports a KMSAN kernel-infoleak in `do_insn_ioctl()`. A kernel buffer is allocated to hold `insn->n` samples (each of which is an `unsigned int`). For some instruction types, `insn->n` samples are copied back to user-space, unless an error code is being returned. The problem is that not all the instruction handlers that need to return data to userspace fill in the whole `insn->n` samples, so that there is an information leak. There is a similar syzbot report for `do_insnlist_ioctl()`, although it does not have a reproducer for it at the time of writing. One culprit is `insn_rw_emulate_bits()` which is used as the handler for `INSN_READ` or `INSN_WRITE` instructions for subdevices that do not have a specific handler for that instruction, but do have an `INSN_BITS` handler. For `INSN_READ` it only fills in at most 1 sample, so if `insn->n` is greater than 1, the remaining `insn->n - 1` samples copied to userspace will be uninitialized kernel data. Another culprit is `vm80xx_ai_insn_read()` in the \"vm80xx\" driver. It never returns an error, even if it fails to fill the buffer. Fix it in `do_insn_ioctl()` and `do_insnlist_ioctl()` by making sure that uninitialized parts of the allocated buffer are zeroed before handling each instruction. Thanks to Arnaud Lecomte for their fix to `do_insn_ioctl()`. That fix replaced the call to `kmalloc_array()` with `kcalloc()`, but it is not always necessary to clear the whole buffer.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39685\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: comedi: pcl726: Prevent invalid irq number The reproducer passed in an irq number(0x80008000) that was too large, which triggered the oob. Added an interrupt number check to prevent users from passing in an irq number that was too large. If `it->options[1]` is 31, then `1 << it->options[1]` is still invalid because it shifts a 1-bit into the sign bit (which is UB in C). Possible solutions include reducing the upper bound on the `it->options[1]` value to 30 or lower, or using `1U << it->options[1]`. The old code would just not attempt to request the IRQ if the `options[1]` value were invalid. And it would still configure the device without interrupts even if the call to `request_irq` returned an error. So it would be better to combine this test with the test below.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39686\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: comedi: Make insn_rw_emulate_bits() do insn->n samples The `insn_rw_emulate_bits()` function is used as a default handler for `INSN_READ` instructions for subdevices that have a handler for `INSN_BITS` but not for `INSN_READ`. Similarly, it is used as a default handler for `INSN_WRITE` instructions for subdevices that have a handler for `INSN_BITS` but not for `INSN_WRITE`. It works by emulating the `INSN_READ` or `INSN_WRITE` instruction handling with a constructed `INSN_BITS` instruction. However, `INSN_READ` and `INSN_WRITE` instructions are supposed to be able read or write multiple samples, indicated by the `insn->n` value, but `insn_rw_emulate_bits()` currently only handles a single sample. For `INSN_READ`, the comedi core will copy `insn->n` samples back to user-space. (That triggered KASAN kernel-infoleak errors when `insn->n` was greater than 1, but that is being fixed more generally elsewhere in the comedi core.) Make `insn_rw_emulate_bits()` either handle `insn->n` samples, or return an error, to conform to the general expectation for `INSN_READ` and `INSN_WRITE` handlers.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39687\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: iio: light: as73211: Ensure buffer holes are zeroed Given that the buffer is copied to a kfifo that ultimately user space can read, ensure we zero it.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39689\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: ftrace: Also allocate and copy hash for reading of filter files Currently the reader of set_ftrace_filter and set_ftrace_notrace just adds the pointer to the global tracer hash to its iterator. Unlike the writer that allocates a copy of the hash, the reader keeps the pointer to the filter hashes. This is problematic because this pointer is static across function calls that release the locks that can update the global tracer hashes. This can cause UAF and similar bugs. Allocate and copy the hash for reading the filter files like it is done for the writers. This not only fixes UAF bugs, but also makes the code a bit simpler as it doesn't have to differentiate when to free the iterator's hash between writers and readers.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-416 Use After Free\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.8\nHIGH\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39691\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: fs/buffer: fix use-after-free when call bh_read() helper There's issue as follows: BUG: KASAN: stack-out-of-bounds in end_buffer_read_sync+0xe3/0x110 Read of size 8 at addr ffffc9000168f7f8 by task swapper/3/0 CPU: 3 UID: 0 PID: 0 Comm: swapper/3 Not tainted 6.16.0-862.14.0.6.x86_64 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996) Call Trace: dump_stack_lvl+0x55/0x70 print_address_description.constprop.0+0x2c/0x390 print_report+0xb4/0x270 kasan_report+0xb8/0xf0 end_buffer_read_sync+0xe3/0x110 end_bio_bh_io_sync+0x56/0x80 blk_update_request+0x30a/0x720 scsi_end_request+0x51/0x2b0 scsi_io_completion+0xe3/0x480 ? scsi_device_unbusy+0x11e/0x160 blk_complete_reqs+0x7b/0x90 handle_softirqs+0xef/0x370 irq_exit_rcu+0xa5/0xd0 sysvec_apic_timer_interrupt+0x6e/0x90 Above issue happens when do ntfs3 filesystem mount, issue may happens as follows: mount IRQ ntfs_fill_super read_cache_page do_read_cache_folio filemap_read_folio mpage_read_folio do_mpage_readpage ntfs_get_block_vbo bh_read submit_bh wait_on_buffer(bh); blk_complete_reqs scsi_io_completion scsi_end_request blk_update_request end_bio_bh_io_sync end_buffer_read_sync __end_buffer_read_notouch unlock_buffer wait_on_buffer(bh);--> return will return to caller put_bh --> trigger stack-out-of-bounds In the mpage_read_folio() function, the stack variable 'map_bh' is passed to ntfs_get_block_vbo(). Once unlock_buffer() unlocks and wait_on_buffer() returns to continue processing, the stack variable is likely to be reclaimed. Consequently, during the end_buffer_read_sync() process, calling put_bh() may result in stack overrun. If the bh is not allocated on the stack, it belongs to a folio. Freeing a buffer head which belongs to a folio is done by drop_buffers() which will fail to free buffers which are still locked. So it is safe to call put_bh() before __end_buffer_read_notouch().\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-416 Use After Free\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n4.4\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39692\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: smb: server: split ksmbd_rdma_stop_listening() out of ksmbd_rdma_destroy() We can't call destroy_workqueue(smb_direct_wq); before stop_sessions()! Otherwise already existing connections try to use smb_direct_wq as a NULL pointer.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39693\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid a NULL pointer dereference [WHY] Although unlikely drm_atomic_get_new_connector_state() or drm_atomic_get_old_connector_state() can return NULL. [HOW] Check returns before dereference. (cherry picked from commit 1e5e8d672fec9f2ab352be121be971877bff2af9)\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-476 NULL Pointer Dereference\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n4.7\nMEDIUM\nCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39694\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: s390/sclp: Fix SCCB present check Tracing code called by the SCLP interrupt handler contains early exits if the SCCB address associated with an interrupt is NULL. This check is performed after physical to virtual address translation. If the kernel identity mapping does not start at address zero, the resulting virtual address is never zero, so that the NULL checks won't work. Subsequently this may result in incorrect accesses to the first page of the identity mapping. Fix this by introducing a function that handles the NULL case before address translation.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-1285 Improper Validation of Specified Index, Position, or Offset in Input\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7\nHIGH\nCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39697\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: NFS: Fix a race when updating an existing write After nfs_lock_and_join_requests() tests for whether the request is still attached to the mapping, nothing prevents a call to nfs_inode_remove_request() from succeeding until we actually lock the page group. The reason is that whoever called nfs_inode_remove_request() doesn't necessarily have a lock on the page group head. So in order to avoid races, let's take the page group lock earlier in nfs_lock_and_join_requests(), and hold it across the removal of the request in nfs_inode_remove_request().\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n4.7\nMEDIUM\nCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39701\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: ACPI: pfr_update: Fix the driver update version check The security-version-number check should be used rather than the runtime version check for driver updates. Otherwise, the firmware update would fail when the update binary had a lower runtime version number than the current one. [ rjw: Changelog edits ]\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-1025 Comparison Using Wrong Factors\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39702\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: ipv6: sr: Fix MAC comparison to be constant-time To prevent timing attacks, MACs need to be compared in constant time. Use the appropriate helper function for this.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-208 Observable Timing Discrepancy\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.1\nHIGH\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39703\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: net, hsr: reject HSR frame if skb can't hold tag Receiving HSR frame with insufficient space to hold HSR tag in the skb can result in a crash (kernel BUG): [ 45.390915] skbuff: skb_under_panic: text:ffffffff86f32cac len:26 put:14 head:ffff888042418000 data:ffff888042417ff4 tail:0xe end:0x180 dev:bridge_slave_1 [ 45.392559] ------------[ cut here ]------------ [ 45.392912] kernel BUG at net/core/skbuff.c:211! [ 45.393276] Oops: invalid opcode: 0000 [#1] SMP DEBUG_PAGEALLOC KASAN NOPTI [ 45.393809] CPU: 1 UID: 0 PID: 2496 Comm: reproducer Not tainted 6.15.0 #12 PREEMPT(undef) [ 45.394433] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014 [ 45.395273] RIP: 0010:skb_panic+0x15b/0x1d0 [ 45.402911] Call Trace: [ 45.403105] [ 45.404470] skb_push+0xcd/0xf0 [ 45.404726] br_dev_queue_push_xmit+0x7c/0x6c0 [ 45.406513] br_forward_finish+0x128/0x260 [ 45.408483] __br_forward+0x42d/0x590 [ 45.409464] maybe_deliver+0x2eb/0x420 [ 45.409763] br_flood+0x174/0x4a0 [ 45.410030] br_handle_frame_finish+0xc7c/0x1bc0 [ 45.411618] br_handle_frame+0xac3/0x1230 [ 45.413674] __netif_receive_skb_core.constprop.0+0x808/0x3df0 [ 45.422966] __netif_receive_skb_one_core+0xb4/0x1f0 [ 45.424478] __netif_receive_skb+0x22/0x170 [ 45.424806] process_backlog+0x242/0x6d0 [ 45.425116] __napi_poll+0xbb/0x630 [ 45.425394] net_rx_action+0x4d1/0xcc0 [ 45.427613] handle_softirqs+0x1a4/0x580 [ 45.427926] do_softirq+0x74/0x90 [ 45.428196] This issue was found by syzkaller. The panic happens in br_dev_queue_push_xmit() once it receives a corrupted skb with ETH header already pushed in linear data. When it attempts the skb_push() call, there's not enough headroom and skb_push() panics. The corrupted skb is put on the queue by HSR layer, which makes a sequence of unintended transformations when it receives a specific corrupted HSR frame (with incomplete TAG). Fix it by dropping and consuming frames that are not long enough to contain both ethernet and hsr headers. Alternative fix would be to check for enough headroom before skb_push() in br_dev_queue_push_xmit(). In the reproducer, this is injected via AF_PACKET, but I don't easily see why it couldn't be sent over the wire from adjacent network. Further Details: In the reproducer, the following network interface chain is set up: \u250c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510 \u250c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510 \u2502 veth0_to_hsr \u251c\u2500\u2500\u2500\u2524 hsr_slave0 \u253c\u2500\u2500\u2500\u2510 \u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2518 \u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2518 \u2502 \u2502 \u250c\u2500\u2500\u2500\u2500\u2500\u2500\u2510 \u251c\u2500\u2524 hsr0 \u251c\u2500\u2500\u2500\u2510 \u2502 \u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2518 \u2502 \u250c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510 \u250c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510 \u2502 \u2502\u250c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510 \u2502 veth1_to_hsr \u253c\u2500\u2500\u2500\u2524 hsr_slave1 \u251c\u2500\u2500\u2500\u2518 \u2514\u2524 \u2502 \u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2518 \u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2518 \u250c\u253c bridge \u2502 \u2502\u2502 \u2502 \u2502\u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2518 \u2502 \u250c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510 \u2502 \u2502 ... \u251c\u2500\u2500\u2500\u2500\u2500\u2500\u2518 \u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2518 To trigger the events leading up to crash, reproducer sends a corrupted HSR fr ---truncated---\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-1286 Improper Validation of Syntactic Correctness of Input\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n6.5\nMEDIUM\nCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39706\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Destroy KFD debugfs after destroy KFD wq Since KFD proc content was moved to kernel debugfs, we can't destroy KFD debugfs before kfd_process_destroy_wq. Move kfd_process_destroy_wq prior to kfd_debugfs_fini to fix a kernel NULL pointer problem. It happens when /sys/kernel/debug/kfd was already destroyed in kfd_debugfs_fini but kfd_process_destroy_wq calls kfd_debugfs_remove_process. This line debugfs_remove_recursive(entry->proc_dentry); tries to remove /sys/kernel/debug/kfd/proc/ while /sys/kernel/debug/kfd is already gone. It hangs the kernel by kernel NULL pointer. (cherry picked from commit 0333052d90683d88531558dcfdbf2525cc37c233)\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39709\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: media: venus: protect against spurious interrupts during probe Make sure the interrupt handler is initialized before the interrupt is registered. If the IRQ is registered before hfi_create(), it's possible that an interrupt fires before the handler setup is complete, leading to a NULL dereference. This error condition has been observed during system boot on Rb3Gen2.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39710\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: media: venus: Add a check for packet size after reading from shared memory Add a check to ensure that the packet size does not exceed the number of available words after reading the packet header from shared memory. This ensures that the size provided by the firmware is safe to process and prevent potential out-of-bounds memory access.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39713\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt() In the interrupt handler rain_interrupt(), the buffer full check on rain->buf_len is performed before acquiring rain->buf_lock. This creates a Time-of-Check to Time-of-Use (TOCTOU) race condition, as rain->buf_len is concurrently accessed and modified in the work handler rain_irq_work_handler() under the same lock. Multiple interrupt invocations can race, with each reading buf_len before it becomes full and then proceeding. This can lead to both interrupts attempting to write to the buffer, incrementing buf_len beyond its capacity (DATA_SIZE) and causing a buffer overflow. Fix this bug by moving the spin_lock() to before the buffer full check. This ensures that the check and the subsequent buffer modification are performed atomically, preventing the race condition. An corresponding spin_unlock() is added to the overflow path to correctly release the lock. This possible bug was found by an experimental static analysis tool developed by our team.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39714\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: media: usbtv: Lock resolution while streaming When an program is streaming (ffplay) and another program (qv4l2) changes the TV standard from NTSC to PAL, the kernel crashes due to trying to copy to unmapped memory. Changing from NTSC to PAL increases the resolution in the usbtv struct, but the video plane buffer isn't adjusted, so it overflows. [hverkuil: call vb2_is_busy instead of vb2_is_streaming]\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39715\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: parisc: Revise gateway LWS calls to probe user read access We use load and stbys,e instructions to trigger memory reference interruptions without writing to memory. Because of the way read access support is implemented, read access interruptions are only triggered at privilege levels 2 and 3. The kernel and gateway page execute at privilege level 0, so this code never triggers a read access interruption. Thus, it is currently possible for user code to execute a LWS compare and swap operation at an address that is read protected at privilege level 3 (PRIV_USER). Fix this by probing read access rights at privilege level 3 and branching to lws_fault if access isn't allowed.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39716\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: parisc: Revise __get_user() to probe user read access Because of the way read access support is implemented, read access interruptions are only triggered at privilege levels 2 and 3. The kernel executes at privilege level 0, so __get_user() never triggers a read access interruption (code 26). Thus, it is currently possible for user code to access a read protected address via a system call. Fix this by probing read access rights at privilege level 3 (PRIV_USER) and setting __gu_err to -EFAULT (-14) if access isn't allowed. Note the cmpiclr instruction does a 32-bit compare because COND macro doesn't work inside asm.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39718\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: vsock/virtio: Validate length in packet header before skb_put() When receiving a vsock packet in the guest, only the virtqueue buffer size is validated prior to virtio_vsock_skb_rx_put(). Unfortunately, virtio_vsock_skb_rx_put() uses the length from the packet header as the length argument to skb_put(), potentially resulting in SKB overflow if the host has gone wonky. Validate the length as advertised by the packet header before calling virtio_vsock_skb_rx_put().\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.6\nHIGH\nCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39719\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: iio: imu: bno055: fix OOB access of hw_xlate array Fix a potential out-of-bounds array access of the hw_xlate array in bno055.c. In bno055_get_regmask(), hw_xlate was iterated over the length of the vals array instead of the length of the hw_xlate array. In the case of bno055_gyr_scale, the vals array is larger than the hw_xlate array, so this could result in an out-of-bounds access. In practice, this shouldn't happen though because a match should always be found which breaks out of the for loop before it iterates beyond the end of the hw_xlate array. By adding a new hw_xlate_len field to the bno055_sysfs_attr, we can be sure we are iterating over the correct length.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39724\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: serial: 8250: fix panic due to PSLVERR When the PSLVERR_RESP_EN parameter is set to 1, the device generates an error response if an attempt is made to read an empty RBR (Receive Buffer Register) while the FIFO is enabled. In serial8250_do_startup(), calling serial_port_out(port, UART_LCR, UART_LCR_WLEN8) triggers dw8250_check_lcr(), which invokes dw8250_force_idle() and serial8250_clear_and_reinit_fifos(). The latter function enables the FIFO via serial_out(p, UART_FCR, p->fcr). Execution proceeds to the serial_port_in(port, UART_RX). This satisfies the PSLVERR trigger condition. When another CPU (e.g., using printk()) is accessing the UART (UART is busy), the current CPU fails the check (value & ~UART_LCR_SPAR) == (lcr & ~UART_LCR_SPAR) in dw8250_check_lcr(), causing it to enter dw8250_force_idle(). Put serial_port_out(port, UART_LCR, UART_LCR_WLEN8) under the port->lock to fix this issue. Panic backtrace: [ 0.442336] Oops - unknown exception [#1] [ 0.442343] epc : dw8250_serial_in32+0x1e/0x4a [ 0.442351] ra : serial8250_do_startup+0x2c8/0x88e ... [ 0.442416] console_on_rootfs+0x26/0x70\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39736\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock When netpoll is enabled, calling pr_warn_once() while holding kmemleak_lock in mem_pool_alloc() can cause a deadlock due to lock inversion with the netconsole subsystem. This occurs because pr_warn_once() may trigger netpoll, which eventually leads to __alloc_skb() and back into kmemleak code, attempting to reacquire kmemleak_lock. This is the path for the deadlock. mem_pool_alloc() -> raw_spin_lock_irqsave(&kmemleak_lock, flags); -> pr_warn_once() -> netconsole subsystem -> netpoll -> __alloc_skb -> __create_object -> raw_spin_lock_irqsave(&kmemleak_lock, flags); Fix this by setting a flag and issuing the pr_warn_once() after kmemleak_lock is released.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-833 Deadlock\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39737\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup() A soft lockup warning was observed on a relative small system x86-64 system with 16 GB of memory when running a debug kernel with kmemleak enabled. watchdog: BUG: soft lockup - CPU#8 stuck for 33s! [kworker/8:1:134] The test system was running a workload with hot unplug happening in parallel. Then kemleak decided to disable itself due to its inability to allocate more kmemleak objects. The debug kernel has its CONFIG_DEBUG_KMEMLEAK_MEM_POOL_SIZE set to 40,000. The soft lockup happened in kmemleak_do_cleanup() when the existing kmemleak objects were being removed and deleted one-by-one in a loop via a workqueue. In this particular case, there are at least 40,000 objects that need to be processed and given the slowness of a debug kernel and the fact that a raw_spinlock has to be acquired and released in __delete_object(), it could take a while to properly handle all these objects. As kmemleak has been disabled in this case, the object removal and deletion process can be further optimized as locking isn't really needed. However, it is probably not worth the effort to optimize for such an edge case that should rarely happen. So the simple solution is to call cond_resched() at periodic interval in the iteration loop to avoid soft lockup.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39738\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: btrfs: do not allow relocation of partially dropped subvolumes [BUG] There is an internal report that balance triggered transaction abort, with the following call trace: item 85 key (594509824 169 0) itemoff 12599 itemsize 33 extent refs 1 gen 197740 flags 2 ref#0: tree block backref root 7 item 86 key (594558976 169 0) itemoff 12566 itemsize 33 extent refs 1 gen 197522 flags 2 ref#0: tree block backref root 7 ... BTRFS error (device loop0): extent item not found for insert, bytenr 594526208 num_bytes 16384 parent 449921024 root_objectid 934 owner 1 offset 0 BTRFS error (device loop0): failed to run delayed ref for logical 594526208 num_bytes 16384 type 182 action 1 ref_mod 1: -117 ------------[ cut here ]------------ BTRFS: Transaction aborted (error -117) WARNING: CPU: 1 PID: 6963 at ../fs/btrfs/extent-tree.c:2168 btrfs_run_delayed_refs+0xfa/0x110 [btrfs] And btrfs check doesn't report anything wrong related to the extent tree. [CAUSE] The cause is a little complex, firstly the extent tree indeed doesn't have the backref for 594526208. The extent tree only have the following two backrefs around that bytenr on-disk: item 65 key (594509824 METADATA_ITEM 0) itemoff 13880 itemsize 33 refs 1 gen 197740 flags TREE_BLOCK tree block skinny level 0 (176 0x7) tree block backref root CSUM_TREE item 66 key (594558976 METADATA_ITEM 0) itemoff 13847 itemsize 33 refs 1 gen 197522 flags TREE_BLOCK tree block skinny level 0 (176 0x7) tree block backref root CSUM_TREE But the such missing backref item is not an corruption on disk, as the offending delayed ref belongs to subvolume 934, and that subvolume is being dropped: item 0 key (934 ROOT_ITEM 198229) itemoff 15844 itemsize 439 generation 198229 root_dirid 256 bytenr 10741039104 byte_limit 0 bytes_used 345571328 last_snapshot 198229 flags 0x1000000000001(RDONLY) refs 0 drop_progress key (206324 EXTENT_DATA 2711650304) drop_level 2 level 2 generation_v2 198229 And that offending tree block 594526208 is inside the dropped range of that subvolume. That explains why there is no backref item for that bytenr and why btrfs check is not reporting anything wrong. But this also shows another problem, as btrfs will do all the orphan subvolume cleanup at a read-write mount. So half-dropped subvolume should not exist after an RW mount, and balance itself is also exclusive to subvolume cleanup, meaning we shouldn't hit a subvolume half-dropped during relocation. The root cause is, there is no orphan item for this subvolume. In fact there are 5 subvolumes from around 2021 that have the same problem. It looks like the original report has some older kernels running, and caused those zombie subvolumes. Thankfully upstream commit 8d488a8c7ba2 (\"btrfs: fix subvolume/snapshot deletion not triggered on mount\") has long fixed the bug. [ENHANCEMENT] For repairing such old fs, btrfs-progs will be enhanced. Considering how delayed the problem will show up (at run delayed ref time) and at that time we have to abort transaction already, it is too late. Instead here we reject any half-dropped subvolume for reloc tree at the earliest time, preventing confusion and extra time wasted on debugging similar bugs.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39742\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() The function divides number of online CPUs by num_core_siblings, and later checks the divider by zero. This implies a possibility to get and divide-by-zero runtime error. Fix it by moving the check prior to division. This also helps to save one indentation level.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-369 Divide By Zero\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39743\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: jfs: truncate good inode pages when hard link is 0 The fileset value of the inode copy from the disk by the reproducer is AGGR_RESERVED_I. When executing evict, its hard link number is 0, so its inode pages are not truncated. This causes the bugon to be triggered when executing clear_inode() because nrpages is greater than 0.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7\nHIGH\nCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39749\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: rcu: Protect ->defer_qs_iw_pending from data race On kernels built with CONFIG_IRQ_WORK=y, when rcu_read_unlock() is invoked within an interrupts-disabled region of code [1], it will invoke rcu_read_unlock_special(), which uses an irq-work handler to force the system to notice when the RCU read-side critical section actually ends. That end won't happen until interrupts are enabled at the soonest. In some kernels, such as those booted with rcutree.use_softirq=y, the irq-work handler is used unconditionally. The per-CPU rcu_data structure's ->defer_qs_iw_pending field is updated by the irq-work handler and is both read and updated by rcu_read_unlock_special(). This resulted in the following KCSAN splat: ------------------------------------------------------------------------ BUG: KCSAN: data-race in rcu_preempt_deferred_qs_handler / rcu_read_unlock_special read to 0xffff96b95f42d8d8 of 1 bytes by task 90 on cpu 8: rcu_read_unlock_special+0x175/0x260 __rcu_read_unlock+0x92/0xa0 rt_spin_unlock+0x9b/0xc0 __local_bh_enable+0x10d/0x170 __local_bh_enable_ip+0xfb/0x150 rcu_do_batch+0x595/0xc40 rcu_cpu_kthread+0x4e9/0x830 smpboot_thread_fn+0x24d/0x3b0 kthread+0x3bd/0x410 ret_from_fork+0x35/0x40 ret_from_fork_asm+0x1a/0x30 write to 0xffff96b95f42d8d8 of 1 bytes by task 88 on cpu 8: rcu_preempt_deferred_qs_handler+0x1e/0x30 irq_work_single+0xaf/0x160 run_irq_workd+0x91/0xc0 smpboot_thread_fn+0x24d/0x3b0 kthread+0x3bd/0x410 ret_from_fork+0x35/0x40 ret_from_fork_asm+0x1a/0x30 no locks held by irq_work/8/88. irq event stamp: 200272 hardirqs last enabled at (200272): [] finish_task_switch+0x131/0x320 hardirqs last disabled at (200271): [] __schedule+0x129/0xd70 softirqs last enabled at (0): [] copy_process+0x4df/0x1cc0 softirqs last disabled at (0): [<0000000000000000>] 0x0 ------------------------------------------------------------------------ The problem is that irq-work handlers run with interrupts enabled, which means that rcu_preempt_deferred_qs_handler() could be interrupted, and that interrupt handler might contain an RCU read-side critical section, which might invoke rcu_read_unlock_special(). In the strict KCSAN mode of operation used by RCU, this constitutes a data race on the ->defer_qs_iw_pending field. This commit therefore disables interrupts across the portion of the rcu_preempt_deferred_qs_handler() that updates the ->defer_qs_iw_pending field. This suffices because this handler is not a fast path.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39752\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: ARM: rockchip: fix kernel hang during smp initialization In order to bring up secondary CPUs main CPU write trampoline code to SRAM. The trampoline code is written while secondary CPUs are powered on (at least that true for RK3188 CPU). Sometimes that leads to kernel hang. Probably because secondary CPU execute trampoline code while kernel doesn't expect. The patch moves SRAM initialization step to the point where all secondary CPUs are powered down. That fixes rarely hangs on RK3188: [ 0.091568] CPU0: thread -1, cpu 0, socket 0, mpidr 80000000 [ 0.091996] rockchip_smp_prepare_cpus: ncores 4\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-364 Signal Handler Race Condition\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39756\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: fs: Prevent file descriptor table allocations exceeding INT_MAX When sysctl_nr_open is set to a very high value (for example, 1073741816 as set by systemd), processes attempting to use file descriptors near the limit can trigger massive memory allocation attempts that exceed INT_MAX, resulting in a WARNING in mm/slub.c: WARNING: CPU: 0 PID: 44 at mm/slub.c:5027 __kvmalloc_node_noprof+0x21a/0x288 This happens because kvmalloc_array() and kvmalloc() check if the requested size exceeds INT_MAX and emit a warning when the allocation is not flagged with __GFP_NOWARN. Specifically, when nr_open is set to 1073741816 (0x3ffffff8) and a process calls dup2(oldfd, 1073741880), the kernel attempts to allocate: - File descriptor array: 1073741880 * 8 bytes = 8,589,935,040 bytes - Multiple bitmaps: ~400MB - Total allocation size: > 8GB (exceeding INT_MAX = 2,147,483,647) Reproducer: 1. Set /proc/sys/fs/nr_open to 1073741816: # echo 1073741816 > /proc/sys/fs/nr_open 2. Run a program that uses a high file descriptor: #include #include int main() { struct rlimit rlim = {1073741824, 1073741824}; setrlimit(RLIMIT_NOFILE, &rlim); dup2(2, 1073741880); // Triggers the warning return 0; } 3. Observe WARNING in dmesg at mm/slub.c:5027 systemd commit a8b627a introduced automatic bumping of fs.nr_open to the maximum possible value. The rationale was that systems with memory control groups (memcg) no longer need separate file descriptor limits since memory is properly accounted. However, this change overlooked that: 1. The kernel's allocation functions still enforce INT_MAX as a maximum size regardless of memcg accounting 2. Programs and tests that legitimately test file descriptor limits can inadvertently trigger massive allocations 3. The resulting allocations (>8GB) are impractical and will always fail systemd's algorithm starts with INT_MAX and keeps halving the value until the kernel accepts it. On most systems, this results in nr_open being set to 1073741816 (0x3ffffff8), which is just under 1GB of file descriptors. While processes rarely use file descriptors near this limit in normal operation, certain selftests (like tools/testing/selftests/core/unshare_test.c) and programs that test file descriptor limits can trigger this issue. Fix this by adding a check in alloc_fdtable() to ensure the requested allocation size does not exceed INT_MAX. This causes the operation to fail with -EMFILE instead of triggering a kernel warning and avoids the impractical >8GB memory allocation request.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-401 Missing Release of Memory after Effective Lifetime\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39757\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Validate UAC3 cluster segment descriptors UAC3 class segment descriptors need to be verified whether their sizes match with the declared lengths and whether they fit with the allocated buffer sizes, too. Otherwise malicious firmware may lead to the unexpected OOB accesses.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.1\nHIGH\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39759\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: btrfs: qgroup: fix race between quota disable and quota rescan ioctl There's a race between a task disabling quotas and another running the rescan ioctl that can result in a use-after-free of qgroup records from the fs_info->qgroup_tree rbtree. This happens as follows: 1) Task A enters btrfs_ioctl_quota_rescan() -> btrfs_qgroup_rescan(); 2) Task B enters btrfs_quota_disable() and calls btrfs_qgroup_wait_for_completion(), which does nothing because at that point fs_info->qgroup_rescan_running is false (it wasn't set yet by task A); 3) Task B calls btrfs_free_qgroup_config() which starts freeing qgroups from fs_info->qgroup_tree without taking the lock fs_info->qgroup_lock; 4) Task A enters qgroup_rescan_zero_tracking() which starts iterating the fs_info->qgroup_tree tree while holding fs_info->qgroup_lock, but task B is freeing qgroup records from that tree without holding the lock, resulting in a use-after-free. Fix this by taking fs_info->qgroup_lock at btrfs_free_qgroup_config(). Also at btrfs_qgroup_rescan() don't start the rescan worker if quotas were already disabled.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39760\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: usb: core: config: Prevent OOB read in SS endpoint companion parsing usb_parse_ss_endpoint_companion() checks descriptor type before length, enabling a potentially odd read outside of the buffer size. Fix this up by checking the size first before looking at any of the fields in the descriptor.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39766\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit The following setup can trigger a WARNING in htb_activate due to the condition: !cl->leaf.q->q.qlen tc qdisc del dev lo root tc qdisc add dev lo root handle 1: htb default 1 tc class add dev lo parent 1: classid 1:1 \\ htb rate 64bit tc qdisc add dev lo parent 1:1 handle f: \\ cake memlimit 1b ping -I lo -f -c1 -s64 -W0.001 127.0.0.1 This is because the low memlimit leads to a low buffer_limit, which causes packet dropping. However, cake_enqueue still returns NET_XMIT_SUCCESS, causing htb_enqueue to call htb_activate with an empty child qdisc. We should return NET_XMIT_CN when packets are dropped from the same tin and flow. I do not believe return value of NET_XMIT_CN is necessary for packet drops in the case of ack filtering, as that is meant to optimize performance, not to signal congestion.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7\nHIGH\nCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39770\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM When performing Generic Segmentation Offload (GSO) on an IPv6 packet that contains extension headers, the kernel incorrectly requests checksum offload if the egress device only advertises NETIF_F_IPV6_CSUM feature, which has a strict contract: it supports checksum offload only for plain TCP or UDP over IPv6 and explicitly does not support packets with extension headers. The current GSO logic violates this contract by failing to disable the feature for packets with extension headers, such as those used in GREoIPv6 tunnels. This violation results in the device being asked to perform an operation it cannot support, leading to a `skb_warn_bad_offload` warning and a collapse of network throughput. While device TSO/USO is correctly bypassed in favor of software GSO for these packets, the GSO stack must be explicitly told not to request checksum offload. Mask NETIF_F_IPV6_CSUM, NETIF_F_TSO6 and NETIF_F_GSO_UDP_L4 in gso_features_check if the IPv6 header contains extension headers to compute checksum in software. The exception is a BIG TCP extension, which, as stated in commit 68e068cabd2c6c53 (\"net: reenable NETIF_F_IPV6_CSUM offload for BIG TCP packets\"): \"The feature is only enabled on devices that support BIG TCP TSO. The header is only present for PF_PACKET taps like tcpdump, and not transmitted by physical devices.\" kernel log output (truncated): WARNING: CPU: 1 PID: 5273 at net/core/dev.c:3535 skb_warn_bad_offload+0x81/0x140 ... Call Trace: skb_checksum_help+0x12a/0x1f0 validate_xmit_skb+0x1a3/0x2d0 validate_xmit_skb_list+0x4f/0x80 sch_direct_xmit+0x1a2/0x380 __dev_xmit_skb+0x242/0x670 __dev_queue_xmit+0x3fc/0x7f0 ip6_finish_output2+0x25e/0x5d0 ip6_finish_output+0x1fc/0x3f0 ip6_tnl_xmit+0x608/0xc00 [ip6_tunnel] ip6gre_tunnel_xmit+0x1c0/0x390 [ip6_gre] dev_hard_start_xmit+0x63/0x1c0 __dev_queue_xmit+0x6d0/0x7f0 ip6_finish_output2+0x214/0x5d0 ip6_finish_output+0x1fc/0x3f0 ip6_xmit+0x2ca/0x6f0 ip6_finish_output+0x1fc/0x3f0 ip6_xmit+0x2ca/0x6f0 inet6_csk_xmit+0xeb/0x150 __tcp_transmit_skb+0x555/0xa80 tcp_write_xmit+0x32a/0xe90 tcp_sendmsg_locked+0x437/0x1110 tcp_sendmsg+0x2f/0x50 ... skb linear: 00000000: e4 3d 1a 7d ec 30 e4 3d 1a 7e 5d 90 86 dd 60 0e skb linear: 00000010: 00 0a 1b 34 3c 40 20 11 00 00 00 00 00 00 00 00 skb linear: 00000020: 00 00 00 00 00 12 20 11 00 00 00 00 00 00 00 00 skb linear: 00000030: 00 00 00 00 00 11 2f 00 04 01 04 01 01 00 00 00 skb linear: 00000040: 86 dd 60 0e 00 0a 1b 00 06 40 20 23 00 00 00 00 skb linear: 00000050: 00 00 00 00 00 00 00 00 00 12 20 23 00 00 00 00 skb linear: 00000060: 00 00 00 00 00 00 00 00 00 11 bf 96 14 51 13 f9 skb linear: 00000070: ae 27 a0 a8 2b e3 80 18 00 40 5b 6f 00 00 01 01 skb linear: 00000080: 08 0a 42 d4 50 d5 4b 70 f8 1a\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-573 Improper Following of Specification by Caller\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39772\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: drm/hisilicon/hibmc: fix the hibmc loaded failed bug When hibmc loaded failed, the driver use hibmc_unload to free the resource, but the mutexes in mode.config are not init, which will access an NULL pointer. Just change goto statement to return, because hibnc_hw_init() doesn't need to free anything.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39773\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: net: bridge: fix soft lockup in br_multicast_query_expired() When set multicast_query_interval to a large value, the local variable 'time' in br_multicast_send_query() may overflow. If the time is smaller than jiffies, the timer will expire immediately, and then call mod_timer() again, which creates a loop and may trigger the following soft lockup issue. watchdog: BUG: soft lockup - CPU#1 stuck for 221s! [rb_consumer:66] CPU: 1 UID: 0 PID: 66 Comm: rb_consumer Not tainted 6.16.0+ #259 PREEMPT(none) Call Trace: __netdev_alloc_skb+0x2e/0x3a0 br_ip6_multicast_alloc_query+0x212/0x1b70 __br_multicast_send_query+0x376/0xac0 br_multicast_send_query+0x299/0x510 br_multicast_query_expired.constprop.0+0x16d/0x1b0 call_timer_fn+0x3b/0x2a0 __run_timers+0x619/0x950 run_timer_softirq+0x11c/0x220 handle_softirqs+0x18e/0x560 __irq_exit_rcu+0x158/0x1a0 sysvec_apic_timer_interrupt+0x76/0x90 This issue can be reproduced with: ip link add br0 type bridge echo 1 > /sys/class/net/br0/bridge/multicast_querier echo 0xffffffffffffffff > /sys/class/net/br0/bridge/multicast_query_interval ip link set dev br0 up The multicast_startup_query_interval can also cause this issue. Similar to the commit 99b40610956a (\"net: bridge: mcast: add and enforce query interval minimum\"), add check for the query interval maximum to fix this issue.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-667 Improper Locking\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39776\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: mm/debug_vm_pgtable: clear page table entries at destroy_args() The mm/debug_vm_pagetable test allocates manually page table entries for the tests it runs, using also its manually allocated mm_struct. That in itself is ok, but when it exits, at destroy_args() it fails to clear those entries with the *_clear functions. The problem is that leaves stale entries. If another process allocates an mm_struct with a pgd at the same address, it may end up running into the stale entry. This is happening in practice on a debug kernel with CONFIG_DEBUG_VM_PGTABLE=y, for example this is the output with some extra debugging I added (it prints a warning trace if pgtables_bytes goes negative, in addition to the warning at check_mm() function): [ 2.539353] debug_vm_pgtable: [get_random_vaddr ]: random_vaddr is 0x7ea247140000 [ 2.539366] kmem_cache info [ 2.539374] kmem_cachep 0x000000002ce82385 - freelist 0x0000000000000000 - offset 0x508 [ 2.539447] debug_vm_pgtable: [init_args ]: args->mm is 0x000000002267cc9e (...) [ 2.552800] WARNING: CPU: 5 PID: 116 at include/linux/mm.h:2841 free_pud_range+0x8bc/0x8d0 [ 2.552816] Modules linked in: [ 2.552843] CPU: 5 UID: 0 PID: 116 Comm: modprobe Not tainted 6.12.0-105.debug_vm2.el10.ppc64le+debug #1 VOLUNTARY [ 2.552859] Hardware name: IBM,9009-41A POWER9 (architected) 0x4e0202 0xf000005 of:IBM,FW910.00 (VL910_062) hv:phyp pSeries [ 2.552872] NIP: c0000000007eef3c LR: c0000000007eef30 CTR: c0000000003d8c90 [ 2.552885] REGS: c0000000622e73b0 TRAP: 0700 Not tainted (6.12.0-105.debug_vm2.el10.ppc64le+debug) [ 2.552899] MSR: 800000000282b033 CR: 24002822 XER: 0000000a [ 2.552954] CFAR: c0000000008f03f0 IRQMASK: 0 [ 2.552954] GPR00: c0000000007eef30 c0000000622e7650 c000000002b1ac00 0000000000000001 [ 2.552954] GPR04: 0000000000000008 0000000000000000 c0000000007eef30 ffffffffffffffff [ 2.552954] GPR08: 00000000ffff00f5 0000000000000001 0000000000000048 0000000000004000 [ 2.552954] GPR12: 00000003fa440000 c000000017ffa300 c0000000051d9f80 ffffffffffffffdb [ 2.552954] GPR16: 0000000000000000 0000000000000008 000000000000000a 60000000000000e0 [ 2.552954] GPR20: 4080000000000000 c0000000113af038 00007fffcf130000 0000700000000000 [ 2.552954] GPR24: c000000062a6a000 0000000000000001 8000000062a68000 0000000000000001 [ 2.552954] GPR28: 000000000000000a c000000062ebc600 0000000000002000 c000000062ebc760 [ 2.553170] NIP [c0000000007eef3c] free_pud_range+0x8bc/0x8d0 [ 2.553185] LR [c0000000007eef30] free_pud_range+0x8b0/0x8d0 [ 2.553199] Call Trace: [ 2.553207] [c0000000622e7650] [c0000000007eef30] free_pud_range+0x8b0/0x8d0 (unreliable) [ 2.553229] [c0000000622e7750] [c0000000007f40b4] free_pgd_range+0x284/0x3b0 [ 2.553248] [c0000000622e7800] [c0000000007f4630] free_pgtables+0x450/0x570 [ 2.553274] [c0000000622e78e0] [c0000000008161c0] exit_mmap+0x250/0x650 [ 2.553292] [c0000000622e7a30] [c0000000001b95b8] __mmput+0x98/0x290 [ 2.558344] [c0000000622e7a80] [c0000000001d1018] exit_mm+0x118/0x1b0 [ 2.558361] [c0000000622e7ac0] [c0000000001d141c] do_exit+0x2ec/0x870 [ 2.558376] [c0000000622e7b60] [c0000000001d1ca8] do_group_exit+0x88/0x150 [ 2.558391] [c0000000622e7bb0] [c0000000001d1db8] sys_exit_group+0x48/0x50 [ 2.558407] [c0000000622e7be0] [c00000000003d810] system_call_exception+0x1e0/0x4c0 [ 2.558423] [c0000000622e7e50] [c00000000000d05c] system_call_vectored_common+0x15c/0x2ec (...) [ 2.558892] ---[ end trace 0000000000000000 ]--- [ 2.559022] BUG: Bad rss-counter state mm:000000002267cc9e type:MM_ANONPAGES val:1 [ 2.559037] BUG: non-zero pgtables_bytes on freeing mm: -6144 Here the modprobe process ended up with an allocated mm_struct from the mm_struct slab that was used before by the debug_vm_pgtable test. That is not a problem, since the mm_stru ---truncated---\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39782\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: jbd2: prevent softlockup in jbd2_log_do_checkpoint() Both jbd2_log_do_checkpoint() and jbd2_journal_shrink_checkpoint_list() periodically release j_list_lock after processing a batch of buffers to avoid long hold times on the j_list_lock. However, since both functions contend for j_list_lock, the combined time spent waiting and processing can be significant. jbd2_journal_shrink_checkpoint_list() explicitly calls cond_resched() when need_resched() is true to avoid softlockups during prolonged operations. But jbd2_log_do_checkpoint() only exits its loop when need_resched() is true, relying on potentially sleeping functions like __flush_batch() or wait_on_buffer() to trigger rescheduling. If those functions do not sleep, the kernel may hit a softlockup. watchdog: BUG: soft lockup - CPU#3 stuck for 156s! [kworker/u129:2:373] CPU: 3 PID: 373 Comm: kworker/u129:2 Kdump: loaded Not tainted 6.6.0+ #10 Hardware name: Huawei TaiShan 2280 /BC11SPCD, BIOS 1.27 06/13/2017 Workqueue: writeback wb_workfn (flush-7:2) pstate: 20000005 (nzCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : native_queued_spin_lock_slowpath+0x358/0x418 lr : jbd2_log_do_checkpoint+0x31c/0x438 [jbd2] Call trace: native_queued_spin_lock_slowpath+0x358/0x418 jbd2_log_do_checkpoint+0x31c/0x438 [jbd2] __jbd2_log_wait_for_space+0xfc/0x2f8 [jbd2] add_transaction_credits+0x3bc/0x418 [jbd2] start_this_handle+0xf8/0x560 [jbd2] jbd2__journal_start+0x118/0x228 [jbd2] __ext4_journal_start_sb+0x110/0x188 [ext4] ext4_do_writepages+0x3dc/0x740 [ext4] ext4_writepages+0xa4/0x190 [ext4] do_writepages+0x94/0x228 __writeback_single_inode+0x48/0x318 writeback_sb_inodes+0x204/0x590 __writeback_inodes_wb+0x54/0xf8 wb_writeback+0x2cc/0x3d8 wb_do_writeback+0x2e0/0x2f8 wb_workfn+0x80/0x2a8 process_one_work+0x178/0x3e8 worker_thread+0x234/0x3b8 kthread+0xf0/0x108 ret_from_fork+0x10/0x20 So explicitly call cond_resched() in jbd2_log_do_checkpoint() to avoid softlockup.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39783\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: Fix configfs group list head handling Doing a list_del() on the epf_group field of struct pci_epf_driver in pci_epf_remove_cfs() is not correct as this field is a list head, not a list entry. This list_del() call triggers a KASAN warning when an endpoint function driver which has a configfs attribute group is torn down: ================================================================== BUG: KASAN: slab-use-after-free in pci_epf_remove_cfs+0x17c/0x198 Write of size 8 at addr ffff00010f4a0d80 by task rmmod/319 CPU: 3 UID: 0 PID: 319 Comm: rmmod Not tainted 6.16.0-rc2 #1 NONE Hardware name: Radxa ROCK 5B (DT) Call trace: show_stack+0x2c/0x84 (C) dump_stack_lvl+0x70/0x98 print_report+0x17c/0x538 kasan_report+0xb8/0x190 __asan_report_store8_noabort+0x20/0x2c pci_epf_remove_cfs+0x17c/0x198 pci_epf_unregister_driver+0x18/0x30 nvmet_pci_epf_cleanup_module+0x24/0x30 [nvmet_pci_epf] __arm64_sys_delete_module+0x264/0x424 invoke_syscall+0x70/0x260 el0_svc_common.constprop.0+0xac/0x230 do_el0_svc+0x40/0x58 el0_svc+0x48/0xdc el0t_64_sync_handler+0x10c/0x138 el0t_64_sync+0x198/0x19c ... Remove this incorrect list_del() call from pci_epf_remove_cfs().\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.8\nHIGH\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39787\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: soc: qcom: mdt_loader: Ensure we don't read past the ELF header When the MDT loader is used in remoteproc, the ELF header is sanitized beforehand, but that's not necessary the case for other clients. Validate the size of the firmware buffer to ensure that we don't read past the end as we iterate over the header. e_phentsize and e_shentsize are validated as well, to ensure that the assumptions about step size in the traversal are valid.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-125 Out-of-bounds Read\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39788\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE On Google gs101, the number of UTP transfer request slots (nutrs) is 32, and in this case the driver ends up programming the UTRL_NEXUS_TYPE incorrectly as 0. This is because the left hand side of the shift is 1, which is of type int, i.e. 31 bits wide. Shifting by more than that width results in undefined behaviour. Fix this by switching to the BIT() macro, which applies correct type casting as required. This ensures the correct value is written to UTRL_NEXUS_TYPE (0xffffffff on gs101), and it also fixes a UBSAN shift warning: UBSAN: shift-out-of-bounds in drivers/ufs/host/ufs-exynos.c:1113:21 shift exponent 32 is too large for 32-bit type 'int' For consistency, apply the same change to the nutmrs / UTMRL_NEXUS_TYPE write.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39790\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Detect events pointing to unexpected TREs When a remote device sends a completion event to the host, it contains a pointer to the consumed TRE. The host uses this pointer to process all of the TREs between it and the host's local copy of the ring's read pointer. This works when processing completion for chained transactions, but can lead to nasty results if the device sends an event for a single-element transaction with a read pointer that is multiple elements ahead of the host's read pointer. For instance, if the host accesses an event ring while the device is updating it, the pointer inside of the event might still point to an old TRE. If the host uses the channel's xfer_cb() to directly free the buffer pointed to by the TRE, the buffer will be double-freed. This behavior was observed on an ep that used upstream EP stack without 'commit 6f18d174b73d (\"bus: mhi: ep: Update read pointer only after buffer is written\")'. Where the device updated the events ring pointer before updating the event contents, so it left a window where the host was able to access the stale data the event pointed to, before the device had the chance to update them. The usual pattern was that the host received an event pointing to a TRE that is not immediately after the last processed one, so it got treated as if it was a chained transaction, processing all of the TREs in between the two read pointers. This commit aims to harden the host by ensuring transactions where the event points to a TRE that isn't local_rp + 1 are chained. [mani: added stable tag and reworded commit message]\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-415 Double Free\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n6.7\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39794\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: ARM: tegra: Use I/O memcpy to write to IRAM Kasan crashes the kernel trying to check boundaries when using the normal memcpy.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.1\nHIGH\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39795\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: block: avoid possible overflow for chunk_sectors check in blk_stack_limits() In blk_stack_limits(), we check that the t->chunk_sectors value is a multiple of the t->physical_block_size value. However, by finding the chunk_sectors value in bytes, we may overflow the unsigned int which holds chunk_sectors, so change the check to be based on sectors.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-674 Uncontrolled Recursion\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39798\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: NFS: Fix the setting of capabilities when automounting a new filesystem Capabilities cannot be inherited when we cross into a new filesystem. They need to be reset to the minimal defaults, and then probed for again.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-273 Improper Check for Dropped Privileges\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39800\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: btrfs: abort transaction on unexpected eb generation at btrfs_copy_root() If we find an unexpected generation for the extent buffer we are cloning at btrfs_copy_root(), we just WARN_ON() and don't error out and abort the transaction, meaning we allow to persist metadata with an unexpected generation. Instead of warning only, abort the transaction and return -EUCLEAN.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39801\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: usb: dwc3: Remove WARN_ON for device endpoint command timeouts This commit addresses a rarely observed endpoint command timeout which causes kernel panic due to warn when 'panic_on_warn' is enabled and unnecessary call trace prints when 'panic_on_warn' is disabled. It is seen during fast software-controlled connect/disconnect testcases. The following is one such endpoint command timeout that we observed: 1. Connect ======= ->dwc3_thread_interrupt ->dwc3_ep0_interrupt ->configfs_composite_setup ->composite_setup ->usb_ep_queue ->dwc3_gadget_ep0_queue ->__dwc3_gadget_ep0_queue ->__dwc3_ep0_do_control_data ->dwc3_send_gadget_ep_cmd 2. Disconnect ========== ->dwc3_thread_interrupt ->dwc3_gadget_disconnect_interrupt ->dwc3_ep0_reset_state ->dwc3_ep0_end_control_data ->dwc3_send_gadget_ep_cmd In the issue scenario, in Exynos platforms, we observed that control transfers for the previous connect have not yet been completed and end transfer command sent as a part of the disconnect sequence and processing of USB_ENDPOINT_HALT feature request from the host timeout. This maybe an expected scenario since the controller is processing EP commands sent as a part of the previous connect. It maybe better to remove WARN_ON in all places where device endpoint commands are sent to avoid unnecessary kernel panic due to warn.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39806\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() A malicious HID device can trigger a slab out-of-bounds during mt_report_fixup() by passing in report descriptor smaller than 607 bytes. mt_report_fixup() attempts to patch byte offset 607 of the descriptor with 0x25 by first checking if byte offset 607 is 0x15 however it lacks bounds checks to verify if the descriptor is big enough before conducting this check. Fix this bug by ensuring the descriptor size is at least 608 bytes before accessing it. Below is the KASAN splat after the out of bounds access happens: [ 13.671954] ================================================================== [ 13.672667] BUG: KASAN: slab-out-of-bounds in mt_report_fixup+0x103/0x110 [ 13.673297] Read of size 1 at addr ffff888103df39df by task kworker/0:1/10 [ 13.673297] [ 13.673297] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted 6.15.0-00005-gec5d573d83f4-dirty #3 [ 13.673297] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.2-debian-1.16.2-1 04/04 [ 13.673297] Call Trace: [ 13.673297] [ 13.673297] dump_stack_lvl+0x5f/0x80 [ 13.673297] print_report+0xd1/0x660 [ 13.673297] kasan_report+0xe5/0x120 [ 13.673297] __asan_report_load1_noabort+0x18/0x20 [ 13.673297] mt_report_fixup+0x103/0x110 [ 13.673297] hid_open_report+0x1ef/0x810 [ 13.673297] mt_probe+0x422/0x960 [ 13.673297] hid_device_probe+0x2e2/0x6f0 [ 13.673297] really_probe+0x1c6/0x6b0 [ 13.673297] __driver_probe_device+0x24f/0x310 [ 13.673297] driver_probe_device+0x4e/0x220 [ 13.673297] __device_attach_driver+0x169/0x320 [ 13.673297] bus_for_each_drv+0x11d/0x1b0 [ 13.673297] __device_attach+0x1b8/0x3e0 [ 13.673297] device_initial_probe+0x12/0x20 [ 13.673297] bus_probe_device+0x13d/0x180 [ 13.673297] device_add+0xe3a/0x1670 [ 13.673297] hid_add_device+0x31d/0xa40 [...]\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7\nHIGH\nCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39808\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: HID: hid-ntrig: fix unable to handle page fault in ntrig_report_version() in ntrig_report_version(), hdev parameter passed from hid_probe(). sending descriptor to /dev/uhid can make hdev->dev.parent->parent to null if hdev->dev.parent->parent is null, usb_dev has invalid address(0xffffffffffffff58) that hid_to_usb_dev(hdev) returned when usb_rcvctrlpipe() use usb_dev,it trigger page fault error for address(0xffffffffffffff58) add null check logic to ntrig_report_version() before calling hid_to_usb_dev()\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39812\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: sctp: initialize more fields in sctp_v6_from_sk() syzbot found that sin6_scope_id was not properly initialized, leading to undefined behavior. Clear sin6_scope_id and sin6_flowinfo. BUG: KMSAN: uninit-value in __sctp_v6_cmp_addr+0x887/0x8c0 net/sctp/ipv6.c:649 __sctp_v6_cmp_addr+0x887/0x8c0 net/sctp/ipv6.c:649 sctp_inet6_cmp_addr+0x4f2/0x510 net/sctp/ipv6.c:983 sctp_bind_addr_conflict+0x22a/0x3b0 net/sctp/bind_addr.c:390 sctp_get_port_local+0x21eb/0x2440 net/sctp/socket.c:8452 sctp_get_port net/sctp/socket.c:8523 [inline] sctp_listen_start net/sctp/socket.c:8567 [inline] sctp_inet_listen+0x710/0xfd0 net/sctp/socket.c:8636 __sys_listen_socket net/socket.c:1912 [inline] __sys_listen net/socket.c:1927 [inline] __do_sys_listen net/socket.c:1932 [inline] __se_sys_listen net/socket.c:1930 [inline] __x64_sys_listen+0x343/0x4c0 net/socket.c:1930 x64_sys_call+0x271d/0x3e20 arch/x86/include/generated/asm/syscalls_64.h:51 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xd9/0x210 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f Local variable addr.i.i created at: sctp_get_port net/sctp/socket.c:8515 [inline] sctp_listen_start net/sctp/socket.c:8567 [inline] sctp_inet_listen+0x650/0xfd0 net/sctp/socket.c:8636 __sys_listen_socket net/socket.c:1912 [inline] __sys_listen net/socket.c:1927 [inline] __do_sys_listen net/socket.c:1932 [inline] __se_sys_listen net/socket.c:1930 [inline] __x64_sys_listen+0x343/0x4c0 net/socket.c:1930\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39813\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump When calling ftrace_dump_one() concurrently with reading trace_pipe, a WARN_ON_ONCE() in trace_printk_seq() can be triggered due to a race condition. The issue occurs because: CPU0 (ftrace_dump) CPU1 (reader) echo z > /proc/sysrq-trigger !trace_empty(&iter) trace_iterator_reset(&iter) <- len = size = 0 cat /sys/kernel/tracing/trace_pipe trace_find_next_entry_inc(&iter) __find_next_entry ring_buffer_empty_cpu <- all empty return NULL trace_printk_seq(&iter.seq) WARN_ON_ONCE(s->seq.len >= s->seq.size) In the context between trace_empty() and trace_find_next_entry_inc() during ftrace_dump, the ring buffer data was consumed by other readers. This caused trace_find_next_entry_inc to return NULL, failing to populate `iter.seq`. At this point, due to the prior trace_iterator_reset, both `iter.seq.len` and `iter.seq.size` were set to 0. Since they are equal, the WARN_ON_ONCE condition is triggered. Move the trace_printk_seq() into the if block that checks to make sure the return value of trace_find_next_entry_inc() is non-NULL in ftrace_dump_one(), ensuring the 'iter.seq' is properly populated before subsequent operations.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39817\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare Observed on kernel 6.6 (present on master as well): BUG: KASAN: slab-out-of-bounds in memcmp+0x98/0xd0 Call trace: kasan_check_range+0xe8/0x190 __asan_loadN+0x1c/0x28 memcmp+0x98/0xd0 efivarfs_d_compare+0x68/0xd8 __d_lookup_rcu_op_compare+0x178/0x218 __d_lookup_rcu+0x1f8/0x228 d_alloc_parallel+0x150/0x648 lookup_open.isra.0+0x5f0/0x8d0 open_last_lookups+0x264/0x828 path_openat+0x130/0x3f8 do_filp_open+0x114/0x248 do_sys_openat2+0x340/0x3c0 __arm64_sys_openat+0x120/0x1a0 If dentry->d_name.len < EFI_VARIABLE_GUID_LEN , 'guid' can become negative, leadings to oob. The issue can be triggered by parallel lookups using invalid filename: T1 T2 lookup_open ->lookup simple_lookup d_add // invalid dentry is added to hash list lookup_open d_alloc_parallel __d_lookup_rcu __d_lookup_rcu_op_compare hlist_bl_for_each_entry_rcu // invalid dentry can be retrieved ->d_compare efivarfs_d_compare // oob Fix it by checking 'guid' before cmp.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7\nHIGH\nCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39819\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: fs/smb: Fix inconsistent refcnt update A possible inconsistent update of refcount was identified in `smb2_compound_op`. Such inconsistent update could lead to possible resource leaks. Why it is a possible bug: 1. In the comment section of the function, it clearly states that the reference to `cfile` should be dropped after calling this function. 2. Every control flow path would check and drop the reference to `cfile`, except the patched one. 3. Existing callers would not handle refcount update of `cfile` if -ENOMEM is returned. To fix the bug, an extra goto label \"out\" is added, to make sure that the cleanup logic would always be respected. As the problem is caused by the allocation failure of `vars`, the cleanup logic between label \"finished\" and \"out\" can be safely ignored. According to the definition of function `is_replayable_error`, the error code of \"-ENOMEM\" is not recoverable. Therefore, the replay logic also gets ignored.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39823\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: KVM: x86: use array_index_nospec with indices that come from guest min and dest_id are guest-controlled indices. Using array_index_nospec() after the bounds checks clamps these values to mitigate speculative execution side-channels.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7\nHIGH\nCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39824\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: HID: asus: fix UAF via HID_CLAIMED_INPUT validation After hid_hw_start() is called hidinput_connect() will eventually be called to set up the device with the input layer since the HID_CONNECT_DEFAULT connect mask is used. During hidinput_connect() all input and output reports are processed and corresponding hid_inputs are allocated and configured via hidinput_configure_usages(). This process involves slot tagging report fields and configuring usages by setting relevant bits in the capability bitmaps. However it is possible that the capability bitmaps are not set at all leading to the subsequent hidinput_has_been_populated() check to fail leading to the freeing of the hid_input and the underlying input device. This becomes problematic because a malicious HID device like a ASUS ROG N-Key keyboard can trigger the above scenario via a specially crafted descriptor which then leads to a user-after-free when the name of the freed input device is written to later on after hid_hw_start(). Below, report 93 intentionally utilises the HID_UP_UNDEFINED Usage Page which is skipped during usage configuration, leading to the frees. 0x05, 0x0D, // Usage Page (Digitizer) 0x09, 0x05, // Usage (Touch Pad) 0xA1, 0x01, // Collection (Application) 0x85, 0x0D, // Report ID (13) 0x06, 0x00, 0xFF, // Usage Page (Vendor Defined 0xFF00) 0x09, 0xC5, // Usage (0xC5) 0x15, 0x00, // Logical Minimum (0) 0x26, 0xFF, 0x00, // Logical Maximum (255) 0x75, 0x08, // Report Size (8) 0x95, 0x04, // Report Count (4) 0xB1, 0x02, // Feature (Data,Var,Abs) 0x85, 0x5D, // Report ID (93) 0x06, 0x00, 0x00, // Usage Page (Undefined) 0x09, 0x01, // Usage (0x01) 0x15, 0x00, // Logical Minimum (0) 0x26, 0xFF, 0x00, // Logical Maximum (255) 0x75, 0x08, // Report Size (8) 0x95, 0x1B, // Report Count (27) 0x81, 0x02, // Input (Data,Var,Abs) 0xC0, // End Collection Below is the KASAN splat after triggering the UAF: [ 21.672709] ================================================================== [ 21.673700] BUG: KASAN: slab-use-after-free in asus_probe+0xeeb/0xf80 [ 21.673700] Write of size 8 at addr ffff88810a0ac000 by task kworker/1:2/54 [ 21.673700] [ 21.673700] CPU: 1 UID: 0 PID: 54 Comm: kworker/1:2 Not tainted 6.16.0-rc4-g9773391cf4dd-dirty #36 PREEMPT(voluntary) [ 21.673700] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 21.673700] Call Trace: [ 21.673700] [ 21.673700] dump_stack_lvl+0x5f/0x80 [ 21.673700] print_report+0xd1/0x660 [ 21.673700] kasan_report+0xe5/0x120 [ 21.673700] __asan_report_store8_noabort+0x1b/0x30 [ 21.673700] asus_probe+0xeeb/0xf80 [ 21.673700] hid_device_probe+0x2ee/0x700 [ 21.673700] really_probe+0x1c6/0x6b0 [ 21.673700] __driver_probe_device+0x24f/0x310 [ 21.673700] driver_probe_device+0x4e/0x220 [...] [ 21.673700] [ 21.673700] Allocated by task 54: [ 21.673700] kasan_save_stack+0x3d/0x60 [ 21.673700] kasan_save_track+0x18/0x40 [ 21.673700] kasan_save_alloc_info+0x3b/0x50 [ 21.673700] __kasan_kmalloc+0x9c/0xa0 [ 21.673700] __kmalloc_cache_noprof+0x139/0x340 [ 21.673700] input_allocate_device+0x44/0x370 [ 21.673700] hidinput_connect+0xcb6/0x2630 [ 21.673700] hid_connect+0xf74/0x1d60 [ 21.673700] hid_hw_start+0x8c/0x110 [ 21.673700] asus_probe+0x5a3/0xf80 [ 21.673700] hid_device_probe+0x2ee/0x700 [ 21.673700] really_probe+0x1c6/0x6b0 [ 21.673700] __driver_probe_device+0x24f/0x310 [ 21.673700] driver_probe_device+0x4e/0x220 [...] [ 21.673700] [ 21.673700] Freed by task 54: [ 21.673700] kasan_save_stack+0x3d/0x60 [ 21.673700] kasan_save_track+0x18/0x40 [ 21.673700] kasan_save_free_info+0x3f/0x60 [ 21.673700] __kasan_slab_free+0x3c/0x50 [ 21.673700] kfre ---truncated---\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7\nHIGH\nCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39825\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: smb: client: fix race with concurrent opens in rename(2) Besides sending the rename request to the server, the rename process also involves closing any deferred close, waiting for outstanding I/O to complete as well as marking all existing open handles as deleted to prevent them from deferring closes, which increases the race window for potential concurrent opens on the target file. Fix this by unhashing the dentry in advance to prevent any concurrent opens on the target.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7\nHIGH\nCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39826\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: net: rose: convert 'use' field to refcount_t The 'use' field in struct rose_neigh is used as a reference counter but lacks atomicity. This can lead to race conditions where a rose_neigh structure is freed while still being referenced by other code paths. For example, when rose_neigh->use becomes zero during an ioctl operation via rose_rt_ioctl(), the structure may be removed while its timer is still active, potentially causing use-after-free issues. This patch changes the type of 'use' from unsigned short to refcount_t and updates all code paths to use rose_neigh_hold() and rose_neigh_put() which operate reference counts atomically.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39827\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: net: rose: include node references in rose_neigh refcount Current implementation maintains two separate reference counting mechanisms: the 'count' field in struct rose_neigh tracks references from rose_node structures, while the 'use' field (now refcount_t) tracks references from rose_sock. This patch merges these two reference counting systems using 'use' field for proper reference management. Specifically, this patch adds incrementing and decrementing of rose_neigh->use when rose_neigh->count is incremented or decremented. This patch also modifies rose_rt_free(), rose_rt_device_down() and rose_clear_route() to properly release references to rose_neigh objects before freeing a rose_node through rose_remove_node(). These changes ensure rose_neigh structures are properly freed only when all references, including those from rose_node structures, are released. As a result, this resolves a slab-use-after-free issue reported by Syzbot.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39828\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control(). syzbot reported the splat below. [0] When atmtcp_v_open() or atmtcp_v_close() is called via connect() or close(), atmtcp_send_control() is called to send an in-kernel special message. The message has ATMTCP_HDR_MAGIC in atmtcp_control.hdr.length. Also, a pointer of struct atm_vcc is set to atmtcp_control.vcc. The notable thing is struct atmtcp_control is uAPI but has a space for an in-kernel pointer. struct atmtcp_control { struct atmtcp_hdr hdr; /* must be first */ ... atm_kptr_t vcc; /* both directions */ ... } __ATM_API_ALIGN; typedef struct { unsigned char _[8]; } __ATM_API_ALIGN atm_kptr_t; The special message is processed in atmtcp_recv_control() called from atmtcp_c_send(). atmtcp_c_send() is vcc->dev->ops->send() and called from 2 paths: 1. .ndo_start_xmit() (vcc->send() == atm_send_aal0()) 2. vcc_sendmsg() The problem is sendmsg() does not validate the message length and userspace can abuse atmtcp_recv_control() to overwrite any kptr by atmtcp_control. Let's add a new ->pre_send() hook to validate messages from sendmsg(). [0]: Oops: general protection fault, probably for non-canonical address 0xdffffc00200000ab: 0000 [#1] SMP KASAN PTI KASAN: probably user-memory-access in range [0x0000000100000558-0x000000010000055f] CPU: 0 UID: 0 PID: 5865 Comm: syz-executor331 Not tainted 6.17.0-rc1-syzkaller-00215-gbab3ce404553 #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 RIP: 0010:atmtcp_recv_control drivers/atm/atmtcp.c:93 [inline] RIP: 0010:atmtcp_c_send+0x1da/0x950 drivers/atm/atmtcp.c:297 Code: 4d 8d 75 1a 4c 89 f0 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 15 06 00 00 41 0f b7 1e 4d 8d b7 60 05 00 00 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 13 06 00 00 66 41 89 1e 4d 8d 75 1c 4c RSP: 0018:ffffc90003f5f810 EFLAGS: 00010203 RAX: 00000000200000ab RBX: 0000000000000000 RCX: 0000000000000000 RDX: ffff88802a510000 RSI: 00000000ffffffff RDI: ffff888030a6068c RBP: ffff88802699fb40 R08: ffff888030a606eb R09: 1ffff1100614c0dd R10: dffffc0000000000 R11: ffffffff8718fc40 R12: dffffc0000000000 R13: ffff888030a60680 R14: 000000010000055f R15: 00000000ffffffff FS: 00007f8d7e9236c0(0000) GS:ffff888125c1c000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000000045ad50 CR3: 0000000075bde000 CR4: 00000000003526f0 Call Trace: vcc_sendmsg+0xa10/0xc60 net/atm/common.c:645 sock_sendmsg_nosec net/socket.c:714 [inline] __sock_sendmsg+0x219/0x270 net/socket.c:729 ____sys_sendmsg+0x505/0x830 net/socket.c:2614 ___sys_sendmsg+0x21f/0x2a0 net/socket.c:2668 __sys_sendmsg net/socket.c:2700 [inline] __do_sys_sendmsg net/socket.c:2705 [inline] __se_sys_sendmsg net/socket.c:2703 [inline] __x64_sys_sendmsg+0x19b/0x260 net/socket.c:2703 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f8d7e96a4a9 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f8d7e923198 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 00007f8d7e9f4308 RCX: 00007f8d7e96a4a9 RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005 RBP: 00007f8d7e9f4300 R08: 65732f636f72702f R09: 65732f636f72702f R10: 65732f636f72702f R11: 0000000000000246 R12: 00007f8d7e9c10ac R13: 00007f8d7e9231a0 R14: 0000200000000200 R15: 0000200000000250 Modules linked in:\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7\nHIGH\nCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39835\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: xfs: do not propagate ENODATA disk errors into xattr code ENODATA (aka ENOATTR) has a very specific meaning in the xfs xattr code; namely, that the requested attribute name could not be found. However, a medium error from disk may also return ENODATA. At best, this medium error may escape to userspace as \"attribute not found\" when in fact it's an IO (disk) error. At worst, we may oops in xfs_attr_leaf_get() when we do: error = xfs_attr_leaf_hasname(args, &bp); if (error == -ENOATTR) { xfs_trans_brelse(args->trans, bp); return error; } because an ENODATA/ENOATTR error from disk leaves us with a null bp, and the xfs_trans_brelse will then null-deref it. As discussed on the list, we really need to modify the lower level IO functions to trap all disk errors and ensure that we don't let unique errors like this leak up into higher xfs functions - many like this should be remapped to EIO. However, this patch directly addresses a reported bug in the xattr code, and should be safe to backport to stable kernels. A larger-scope patch to handle more unique errors at lower levels can follow later. (Note, prior to 07120f1abdff we did not oops, but we did return the wrong error code to userspace.)\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39838\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: cifs: prevent NULL pointer dereference in UTF16 conversion There can be a NULL pointer dereference bug here. NULL is passed to __cifs_sfu_make_node without checks, which passes it unchecked to cifs_strndup_to_utf16, which in turn passes it to cifs_local_to_utf16_bytes where '*from' is dereferenced, causing a crash. This patch adds a check for NULL 'src' in cifs_strndup_to_utf16 and returns NULL early to prevent dereferencing NULL pointer. Found by Linux Verification Center (linuxtesting.org) with SVACE\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7\nHIGH\nCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39839\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: batman-adv: fix OOB read/write in network-coding decode batadv_nc_skb_decode_packet() trusts coded_len and checks only against skb->len. XOR starts at sizeof(struct batadv_unicast_packet), reducing payload headroom, and the source skb length is not verified, allowing an out-of-bounds read and a small out-of-bounds write. Validate that coded_len fits within the payload area of both destination and source sk_buffs before XORing.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39841\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix buffer free/clear order in deferred receive path Fix a use-after-free window by correcting the buffer release sequence in the deferred receive path. The code freed the RQ buffer first and only then cleared the context pointer under the lock. Concurrent paths (e.g., ABTS and the repost path) also inspect and release the same pointer under the lock, so the old order could lead to double-free/UAF. Note that the repost path already uses the correct pattern: detach the pointer under the lock, then free it after dropping the lock. The deferred path should do the same.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.8\nHIGH\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39842\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: ocfs2: prevent release journal inode after journal shutdown Before calling ocfs2_delete_osb(), ocfs2_journal_shutdown() has already been executed in ocfs2_dismount_volume(), so osb->journal must be NULL. Therefore, the following calltrace will inevitably fail when it reaches jbd2_journal_release_jbd_inode(). ocfs2_dismount_volume()-> ocfs2_delete_osb()-> ocfs2_free_slot_info()-> __ocfs2_free_slot_info()-> evict()-> ocfs2_evict_inode()-> ocfs2_clear_inode()-> jbd2_journal_release_jbd_inode(osb->journal->j_journal, Adding osb->journal checks will prevent null-ptr-deref during the above execution path.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39843\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: mm: slub: avoid wake up kswapd in set_track_prepare set_track_prepare() can incur lock recursion. The issue is that it is called from hrtimer_start_range_ns holding the per_cpu(hrtimer_bases)[n].lock, but when enabled CONFIG_DEBUG_OBJECTS_TIMERS, may wake up kswapd in set_track_prepare, and try to hold the per_cpu(hrtimer_bases)[n].lock. Avoid deadlock caused by implicitly waking up kswapd by passing in allocation flags, which do not contain __GFP_KSWAPD_RECLAIM in the debug_objects_fill_pool() case. Inside stack depot they are processed by gfp_nested_mask(). Since ___slab_alloc() has preemption disabled, we mask out __GFP_DIRECT_RECLAIM from the flags there. The oops looks something like: BUG: spinlock recursion on CPU#3, swapper/3/0 lock: 0xffffff8a4bf29c80, .magic: dead4ead, .owner: swapper/3/0, .owner_cpu: 3 Hardware name: Qualcomm Technologies, Inc. Popsicle based on SM8850 (DT) Call trace: spin_bug+0x0 _raw_spin_lock_irqsave+0x80 hrtimer_try_to_cancel+0x94 task_contending+0x10c enqueue_dl_entity+0x2a4 dl_server_start+0x74 enqueue_task_fair+0x568 enqueue_task+0xac do_activate_task+0x14c ttwu_do_activate+0xcc try_to_wake_up+0x6c8 default_wake_function+0x20 autoremove_wake_function+0x1c __wake_up+0xac wakeup_kswapd+0x19c wake_all_kswapds+0x78 __alloc_pages_slowpath+0x1ac __alloc_pages_noprof+0x298 stack_depot_save_flags+0x6b0 stack_depot_save+0x14 set_track_prepare+0x5c ___slab_alloc+0xccc __kmalloc_cache_noprof+0x470 __set_page_owner+0x2bc post_alloc_hook[jt]+0x1b8 prep_new_page+0x28 get_page_from_freelist+0x1edc __alloc_pages_noprof+0x13c alloc_slab_page+0x244 allocate_slab+0x7c ___slab_alloc+0x8e8 kmem_cache_alloc_noprof+0x450 debug_objects_fill_pool+0x22c debug_object_activate+0x40 enqueue_hrtimer[jt]+0xdc hrtimer_start_range_ns+0x5f8 ...\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7\nHIGH\nCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39844\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: mm: move page table sync declarations to linux/pgtable.h During our internal testing, we started observing intermittent boot failures when the machine uses 4-level paging and has a large amount of persistent memory: BUG: unable to handle page fault for address: ffffe70000000034 #PF: supervisor write access in kernel mode #PF: error_code(0x0002) - not-present page PGD 0 P4D 0 Oops: 0002 [#1] SMP NOPTI RIP: 0010:__init_single_page+0x9/0x6d Call Trace: __init_zone_device_page+0x17/0x5d memmap_init_zone_device+0x154/0x1bb pagemap_range+0x2e0/0x40f memremap_pages+0x10b/0x2f0 devm_memremap_pages+0x1e/0x60 dev_dax_probe+0xce/0x2ec [device_dax] dax_bus_probe+0x6d/0xc9 [... snip ...] It turns out that the kernel panics while initializing vmemmap (struct page array) when the vmemmap region spans two PGD entries, because the new PGD entry is only installed in init_mm.pgd, but not in the page tables of other tasks. And looking at __populate_section_memmap(): if (vmemmap_can_optimize(altmap, pgmap)) // does not sync top level page tables r = vmemmap_populate_compound_pages(pfn, start, end, nid, pgmap); else // sync top level page tables in x86 r = vmemmap_populate(start, end, nid, altmap); In the normal path, vmemmap_populate() in arch/x86/mm/init_64.c synchronizes the top level page table (See commit 9b861528a801 (\"x86-64, mem: Update all PGDs for direct mapping and vmemmap mapping changes\")) so that all tasks in the system can see the new vmemmap area. However, when vmemmap_can_optimize() returns true, the optimized path skips synchronization of top-level page tables. This is because vmemmap_populate_compound_pages() is implemented in core MM code, which does not handle synchronization of the top-level page tables. Instead, the core MM has historically relied on each architecture to perform this synchronization manually. We're not the first party to encounter a crash caused by not-sync'd top level page tables: earlier this year, Gwan-gyeong Mun attempted to address the issue [1] [2] after hitting a kernel panic when x86 code accessed the vmemmap area before the corresponding top-level entries were synced. At that time, the issue was believed to be triggered only when struct page was enlarged for debugging purposes, and the patch did not get further updates. It turns out that current approach of relying on each arch to handle the page table sync manually is fragile because 1) it's easy to forget to sync the top level page table, and 2) it's also easy to overlook that the kernel should not access the vmemmap and direct mapping areas before the sync. # The solution: Make page table sync more code robust and harder to miss To address this, Dave Hansen suggested [3] [4] introducing {pgd,p4d}_populate_kernel() for updating kernel portion of the page tables and allow each architecture to explicitly perform synchronization when installing top-level entries. With this approach, we no longer need to worry about missing the sync step, reducing the risk of future regressions. The new interface reuses existing ARCH_PAGE_TABLE_SYNC_MASK, PGTBL_P*D_MODIFIED and arch_sync_kernel_mappings() facility used by vmalloc and ioremap to synchronize page tables. pgd_populate_kernel() looks like this: static inline void pgd_populate_kernel(unsigned long addr, pgd_t *pgd, p4d_t *p4d) { pgd_populate(&init_mm, pgd, p4d); if (ARCH_PAGE_TABLE_SYNC_MASK & PGTBL_PGD_MODIFIED) arch_sync_kernel_mappings(addr, addr); } It is worth noting that vmalloc() and apply_to_range() carefully synchronizes page tables by calling p*d_alloc_track() and arch_sync_kernel_mappings(), and thus they are not affected by ---truncated---\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39845\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() Define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() to ensure page tables are properly synchronized when calling p*d_populate_kernel(). For 5-level paging, synchronization is performed via pgd_populate_kernel(). In 4-level paging, pgd_populate() is a no-op, so synchronization is instead performed at the P4D level via p4d_populate_kernel(). This fixes intermittent boot failures on systems using 4-level paging and a large amount of persistent memory: BUG: unable to handle page fault for address: ffffe70000000034 #PF: supervisor write access in kernel mode #PF: error_code(0x0002) - not-present page PGD 0 P4D 0 Oops: 0002 [#1] SMP NOPTI RIP: 0010:__init_single_page+0x9/0x6d Call Trace: __init_zone_device_page+0x17/0x5d memmap_init_zone_device+0x154/0x1bb pagemap_range+0x2e0/0x40f memremap_pages+0x10b/0x2f0 devm_memremap_pages+0x1e/0x60 dev_dax_probe+0xce/0x2ec [device_dax] dax_bus_probe+0x6d/0xc9 [... snip ...] It also fixes a crash in vmemmap_set_pmd() caused by accessing vmemmap before sync_global_pgds() [1]: BUG: unable to handle page fault for address: ffffeb3ff1200000 #PF: supervisor write access in kernel mode #PF: error_code(0x0002) - not-present page PGD 0 P4D 0 Oops: Oops: 0002 [#1] PREEMPT SMP NOPTI Tainted: [W]=WARN RIP: 0010:vmemmap_set_pmd+0xff/0x230 vmemmap_populate_hugepages+0x176/0x180 vmemmap_populate+0x34/0x80 __populate_section_memmap+0x41/0x90 sparse_add_section+0x121/0x3e0 __add_pages+0xba/0x150 add_pages+0x1d/0x70 memremap_pages+0x3dc/0x810 devm_memremap_pages+0x1c/0x60 xe_devm_add+0x8b/0x100 [xe] xe_tile_init_noalloc+0x6a/0x70 [xe] xe_device_probe+0x48c/0x740 [xe] [... snip ...]\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39846\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: pcmcia: Fix a NULL pointer dereference in __iodyn_find_io_region() In __iodyn_find_io_region(), pcmcia_make_resource() is assigned to res and used in pci_bus_alloc_resource(). There is a dereference of res in pci_bus_alloc_resource(), which could lead to a NULL pointer dereference on failure of pcmcia_make_resource(). Fix this bug by adding a check of res.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39847\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: ppp: fix memory leak in pad_compress_skb If alloc_skb() fails in pad_compress_skb(), it returns NULL without releasing the old skb. The caller does: skb = pad_compress_skb(ppp, skb); if (!skb) goto drop; drop: kfree_skb(skb); When pad_compress_skb() returns NULL, the reference to the old skb is lost and kfree_skb(skb) ends up doing nothing, leading to a memory leak. Align pad_compress_skb() semantics with realloc(): only free the old skb if allocation and compression succeed. At the call site, use the new_skb variable so the original skb is not lost when pad_compress_skb() fails.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-772 Missing Release of Resource after Effective Lifetime\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39848\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: ax25: properly unshare skbs in ax25_kiss_rcv() Bernard Pidoux reported a regression apparently caused by commit c353e8983e0d (\"net: introduce per netns packet chains\"). skb->dev becomes NULL and we crash in __netif_receive_skb_core(). Before above commit, different kind of bugs or corruptions could happen without a major crash. But the root cause is that ax25_kiss_rcv() can queue/mangle input skb without checking if this skb is shared or not. Many thanks to Bernard Pidoux for his help, diagnosis and tests. We had a similar issue years ago fixed with commit 7aaed57c5c28 (\"phonet: properly unshare skbs in phonet_rcv()\").\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39849\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() If the ssid->datalen is more than IEEE80211_MAX_SSID_LEN (32) it would lead to memory corruption so add some bounds checking.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39853\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: i40e: Fix potential invalid access when MAC list is empty list_first_entry() never returns NULL - if the list is empty, it still returns a pointer to an invalid object, leading to potential invalid memory access when dereferenced. Fix this by using list_first_entry_or_null instead of list_first_entry.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39857\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: net/smc: fix one NULL pointer dereference in smc_ib_is_sg_need_sync() BUG: kernel NULL pointer dereference, address: 00000000000002ec PGD 0 P4D 0 Oops: Oops: 0000 [#1] SMP PTI CPU: 28 UID: 0 PID: 343 Comm: kworker/28:1 Kdump: loaded Tainted: G OE 6.17.0-rc2+ #9 NONE Tainted: [O]=OOT_MODULE, [E]=UNSIGNED_MODULE Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.15.0-1 04/01/2014 Workqueue: smc_hs_wq smc_listen_work [smc] RIP: 0010:smc_ib_is_sg_need_sync+0x9e/0xd0 [smc] ... Call Trace: smcr_buf_map_link+0x211/0x2a0 [smc] __smc_buf_create+0x522/0x970 [smc] smc_buf_create+0x3a/0x110 [smc] smc_find_rdma_v2_device_serv+0x18f/0x240 [smc] ? smc_vlan_by_tcpsk+0x7e/0xe0 [smc] smc_listen_find_device+0x1dd/0x2b0 [smc] smc_listen_work+0x30f/0x580 [smc] process_one_work+0x18c/0x340 worker_thread+0x242/0x360 kthread+0xe7/0x220 ret_from_fork+0x13a/0x160 ret_from_fork_asm+0x1a/0x30 If the software RoCE device is used, ibdev->dma_device is a null pointer. As a result, the problem occurs. Null pointer detection is added to prevent problems.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7\nHIGH\nCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39860\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() syzbot reported the splat below without a repro. In the splat, a single thread calling bt_accept_dequeue() freed sk and touched it after that. The root cause would be the racy l2cap_sock_cleanup_listen() call added by the cited commit. bt_accept_dequeue() is called under lock_sock() except for l2cap_sock_release(). Two threads could see the same socket during the list iteration in bt_accept_dequeue(): CPU1 CPU2 (close()) ---- ---- sock_hold(sk) sock_hold(sk); lock_sock(sk) <-- block close() sock_put(sk) bt_accept_unlink(sk) sock_put(sk) <-- refcnt by bt_accept_enqueue() release_sock(sk) lock_sock(sk) sock_put(sk) bt_accept_unlink(sk) sock_put(sk) <-- last refcnt bt_accept_unlink(sk) <-- UAF Depending on the timing, the other thread could show up in the \"Freed by task\" part. Let's call l2cap_sock_cleanup_listen() under lock_sock() in l2cap_sock_release(). [0]: BUG: KASAN: slab-use-after-free in debug_spin_lock_before kernel/locking/spinlock_debug.c:86 [inline] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x26f/0x2b0 kernel/locking/spinlock_debug.c:115 Read of size 4 at addr ffff88803b7eb1c4 by task syz.5.3276/16995 CPU: 3 UID: 0 PID: 16995 Comm: syz.5.3276 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120 print_address_description mm/kasan/report.c:378 [inline] print_report+0xcd/0x630 mm/kasan/report.c:482 kasan_report+0xe0/0x110 mm/kasan/report.c:595 debug_spin_lock_before kernel/locking/spinlock_debug.c:86 [inline] do_raw_spin_lock+0x26f/0x2b0 kernel/locking/spinlock_debug.c:115 spin_lock_bh include/linux/spinlock.h:356 [inline] release_sock+0x21/0x220 net/core/sock.c:3746 bt_accept_dequeue+0x505/0x600 net/bluetooth/af_bluetooth.c:312 l2cap_sock_cleanup_listen+0x5c/0x2a0 net/bluetooth/l2cap_sock.c:1451 l2cap_sock_release+0x5c/0x210 net/bluetooth/l2cap_sock.c:1425 __sock_release+0xb3/0x270 net/socket.c:649 sock_close+0x1c/0x30 net/socket.c:1439 __fput+0x3ff/0xb70 fs/file_table.c:468 task_work_run+0x14d/0x240 kernel/task_work.c:227 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] exit_to_user_mode_loop+0xeb/0x110 kernel/entry/common.c:43 exit_to_user_mode_prepare include/linux/irq-entry-common.h:225 [inline] syscall_exit_to_user_mode_work include/linux/entry-common.h:175 [inline] syscall_exit_to_user_mode include/linux/entry-common.h:210 [inline] do_syscall_64+0x3f6/0x4c0 arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f2accf8ebe9 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffdb6cb1378 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 RAX: 0000000000000000 RBX: 00000000000426fb RCX: 00007f2accf8ebe9 RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 RBP: 00007f2acd1b7da0 R08: 0000000000000001 R09: 00000012b6cb166f R10: 0000001b30e20000 R11: 0000000000000246 R12: 00007f2acd1b609c R13: 00007f2acd1b6090 R14: ffffffffffffffff R15: 00007ffdb6cb1490 Allocated by task 5326: kasan_save_stack+0x33/0x60 mm/kasan/common.c:47 kasan_save_track+0x14/0x30 mm/kasan/common.c:68 poison_kmalloc_redzone mm/kasan/common.c:388 [inline] __kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:405 kasan_kmalloc include/linux/kasan.h:260 [inline] __do_kmalloc_node mm/slub.c:4365 [inline] __kmalloc_nopro ---truncated---\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.1\nHIGH\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39864\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: fix use-after-free in cmp_bss() Following bss_free() quirk introduced in commit 776b3580178f (\"cfg80211: track hidden SSID networks properly\"), adjust cfg80211_update_known_bss() to free the last beacon frame elements only if they're not shared via the corresponding 'hidden_beacon_bss' pointer.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.8\nHIGH\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39865\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: tee: fix NULL pointer dereference in tee_shm_put tee_shm_put have NULL pointer dereference: __optee_disable_shm_cache --> shm = reg_pair_to_ptr(...);//shm maybe return NULL tee_shm_free(shm); --> tee_shm_put(shm);//crash Add check in tee_shm_put to fix it. panic log: Unable to handle kernel paging request at virtual address 0000000000100cca Mem abort info: ESR = 0x0000000096000004 EC = 0x25: DABT (current EL), IL = 32 bits SET = 0, FnV = 0 EA = 0, S1PTW = 0 FSC = 0x04: level 0 translation fault Data abort info: ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000 CM = 0, WnR = 0, TnD = 0, TagAccess = 0 GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 user pgtable: 4k pages, 48-bit VAs, pgdp=0000002049d07000 [0000000000100cca] pgd=0000000000000000, p4d=0000000000000000 Internal error: Oops: 0000000096000004 [#1] SMP CPU: 2 PID: 14442 Comm: systemd-sleep Tainted: P OE ------- ---- 6.6.0-39-generic #38 Source Version: 938b255f6cb8817c95b0dd5c8c2944acfce94b07 Hardware name: greatwall GW-001Y1A-FTH, BIOS Great Wall BIOS V3.0 10/26/2022 pstate: 80000005 (Nzcv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : tee_shm_put+0x24/0x188 lr : tee_shm_free+0x14/0x28 sp : ffff001f98f9faf0 x29: ffff001f98f9faf0 x28: ffff0020df543cc0 x27: 0000000000000000 x26: ffff001f811344a0 x25: ffff8000818dac00 x24: ffff800082d8d048 x23: ffff001f850fcd18 x22: 0000000000000001 x21: ffff001f98f9fb88 x20: ffff001f83e76218 x19: ffff001f83e761e0 x18: 000000000000ffff x17: 303a30303a303030 x16: 0000000000000000 x15: 0000000000000003 x14: 0000000000000001 x13: 0000000000000000 x12: 0101010101010101 x11: 0000000000000001 x10: 0000000000000001 x9 : ffff800080e08d0c x8 : ffff001f98f9fb88 x7 : 0000000000000000 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000000 x2 : ffff001f83e761e0 x1 : 00000000ffff001f x0 : 0000000000100cca Call trace: tee_shm_put+0x24/0x188 tee_shm_free+0x14/0x28 __optee_disable_shm_cache+0xa8/0x108 optee_shutdown+0x28/0x38 platform_shutdown+0x28/0x40 device_shutdown+0x144/0x2b0 kernel_power_off+0x3c/0x80 hibernate+0x35c/0x388 state_store+0x64/0x80 kobj_attr_store+0x14/0x28 sysfs_kf_write+0x48/0x60 kernfs_fop_write_iter+0x128/0x1c0 vfs_write+0x270/0x370 ksys_write+0x6c/0x100 __arm64_sys_write+0x20/0x30 invoke_syscall+0x4c/0x120 el0_svc_common.constprop.0+0x44/0xf0 do_el0_svc+0x24/0x38 el0_svc+0x24/0x88 el0t_64_sync_handler+0x134/0x150 el0t_64_sync+0x14c/0x15\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7\nHIGH\nCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-39866\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: fs: writeback: fix use-after-free in __mark_inode_dirty() An use-after-free issue occurred when __mark_inode_dirty() get the bdi_writeback that was in the progress of switching. CPU: 1 PID: 562 Comm: systemd-random- Not tainted 6.6.56-gb4403bd46a8e #1 ...... pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : __mark_inode_dirty+0x124/0x418 lr : __mark_inode_dirty+0x118/0x418 sp : ffffffc08c9dbbc0 ........ Call trace: __mark_inode_dirty+0x124/0x418 generic_update_time+0x4c/0x60 file_modified+0xcc/0xd0 ext4_buffered_write_iter+0x58/0x124 ext4_file_write_iter+0x54/0x704 vfs_write+0x1c0/0x308 ksys_write+0x74/0x10c __arm64_sys_write+0x1c/0x28 invoke_syscall+0x48/0x114 el0_svc_common.constprop.0+0xc0/0xe0 do_el0_svc+0x1c/0x28 el0_svc+0x40/0xe4 el0t_64_sync_handler+0x120/0x12c el0t_64_sync+0x194/0x198 Root cause is: systemd-random-seed kworker ---------------------------------------------------------------------- ___mark_inode_dirty inode_switch_wbs_work_fn spin_lock(&inode->i_lock); inode_attach_wb locked_inode_to_wb_and_lock_list get inode->i_wb spin_unlock(&inode->i_lock); spin_lock(&wb->list_lock) spin_lock(&inode->i_lock) inode_io_list_move_locked spin_unlock(&wb->list_lock) spin_unlock(&inode->i_lock) spin_lock(&old_wb->list_lock) inode_do_switch_wbs spin_lock(&inode->i_lock) inode->i_wb = new_wb spin_unlock(&inode->i_lock) spin_unlock(&old_wb->list_lock) wb_put_many(old_wb, nr_switched) cgwb_release old wb released wb_wakeup_delayed() accesses wb, then trigger the use-after-free issue Fix this race condition by holding inode spinlock until wb_wakeup_delayed() finished.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-416 Use After Free\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.8\nHIGH\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-40300\n<div class=\"csaf-accordion-content\">\n\nIn the Linux kernel, the following vulnerability has been resolved: x86/vmscape: Add conditional IBPB mitigation VMSCAPE is a vulnerability that exploits insufficient branch predictor isolation between a guest and a userspace hypervisor (like QEMU). Existing mitigations already protect kernel/KVM from a malicious guest. Userspace can additionally be protected by flushing the branch predictors after a VMexit. Since it is the userspace that consumes the poisoned branch predictors, conditionally issue an IBPB after a VMexit and before returning to userspace. Workloads that frequently switch between hypervisor and userspace will incur the most overhead from the new IBPB. This new IBPB is not integrated with the existing IBPB sites. For instance, a task can use the existing speculation control prctl() to get an IBPB at context switch time. With this implementation, the IBPB is doubled up: one at context switch and another before running userspace. The intent is to integrate and optimize these cases post-embargo. [ dhansen: elaborate on suboptimal IBPB solution ]\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-402 Transmission of Private Resources into a New Sphere ('Resource Leak')\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n6.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-43368\n<div class=\"csaf-accordion-content\">\n\nA use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26, iOS 26 and iPadOS 26, macOS Tahoe 26. Processing maliciously crafted web content may lead to an unexpected Safari crash.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-416 Use After Free\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n4.3\nMEDIUM\nCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-47219\n<div class=\"csaf-accordion-content\">\n\nIn GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_trak function may read past the end of a heap buffer while parsing an MP4 file, possibly leading to information disclosure.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-125 Out-of-bounds Read\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n8.1\nHIGH\nCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-48989\n<div class=\"csaf-accordion-content\">\n\nImproper Resource Shutdown or Release vulnerability in Apache Tomcat made Tomcat vulnerable to the made you reset attack. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.9, from 10.1.0-M1 through 10.1.43 and from 9.0.0.M1 through 9.0.107. Older, EOL versions may also be affected. Users are recommended to upgrade to one of versions 11.0.10, 10.1.44 or 9.0.108 which fix the issue.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-404 Improper Resource Shutdown or Release\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.5\nHIGH\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-53057\n<div class=\"csaf-accordion-content\">\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u461, 8u461-perf, 11.0.28, 17.0.16, 21.0.8, 25; Oracle GraalVM for JDK: 17.0.16 and 21.0.8; Oracle GraalVM Enterprise Edition: 21.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-284 Improper Access Control\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.9\nMEDIUM\nCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-53066\n<div class=\"csaf-accordion-content\">\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 8u461, 8u461-perf, 11.0.28, 17.0.16, 21.0.8, 25; Oracle GraalVM for JDK: 17.0.16 and 21.0.8; Oracle GraalVM Enterprise Edition: 21.3.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-200 Exposure of Sensitive Information to an Unauthorized Actor\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.5\nHIGH\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-55752\n<div class=\"csaf-accordion-content\">\n\nRelative Path Traversal vulnerability in Apache Tomcat. The fix for bug 60013 introduced a regression where the rewritten URL was normalized before it was decoded. This introduced the possibility that, for rewrite rules that rewrite query parameters to the URL, an attacker could manipulate the request URI to bypass security constraints including the protection for /WEB-INF/ and /META-INF/. If PUT requests were also enabled then malicious files could be uploaded leading to remote code execution. PUT requests are normally limited to trusted users and it is considered unlikely that PUT requests would be enabled in conjunction with a rewrite that manipulated the URI. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.10, from 10.1.0-M1 through 10.1.44, from 9.0.0.M11 through 9.0.108. The following versions were EOL at the time the CVE was created but are known to be affected: 8.5.6 though 8.5.100. Other, older, EOL versions may also be affected. Users are recommended to upgrade to version 11.0.11 or later, 10.1.45 or later or 9.0.109 or later, which fix the issue.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-23 Relative Path Traversal\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.5\nHIGH\nCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-55754\n<div class=\"csaf-accordion-content\">\n\nImproper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache Tomcat. Tomcat did not escape ANSI escape sequences in log messages. If Tomcat was running in a console on a Windows operating system, and the console supported ANSI escape sequences, it was possible for an attacker to use a specially crafted URL to inject ANSI escape sequences to manipulate the console and the clipboard and attempt to trick an administrator into running an attacker controlled command. While no attack vector was found, it may have been possible to mount this attack on other operating systems. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.10, from 10.1.0-M1 through 10.1.44, from 9.0.40 through 9.0.108. The following versions were EOL at the time the CVE was created but are known to be affected: 8.5.60 though 8.5.100. Other, older, EOL versions may also be affected. Users are recommended to upgrade to version 11.0.11 or later, 10.1.45 or later or 9.0.109 or later, which fix the issue.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-150 Improper Neutralization of Escape, Meta, or Control Sequences\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.6\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-61748\n<div class=\"csaf-accordion-content\">\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 21.0.8 and 25; Oracle GraalVM for JDK: 21.0.8; Oracle GraalVM Enterprise Edition: 21.3.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-284 Improper Access Control\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n3.7\nLOW\nCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-61795\n<div class=\"csaf-accordion-content\">\n\nImproper Resource Shutdown or Release vulnerability in Apache Tomcat. If an error occurred (including exceeding limits) during the processing of a multipart upload, temporary copies of the uploaded parts written to disc were not cleaned up immediately but left for the garbage collection process to delete. Depending on JVM settings, application memory usage and application load, it was possible that space for the temporary copies of uploaded parts would be filled faster than GC cleared it, leading to a DoS. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.11, from 10.1.0-M1 through 10.1.46, from 9.0.0.M1 through 9.0.109. The following versions were EOL at the time the CVE was created but are known to be affected: 8.5.0 though 8.5.100. Other, older, EOL versions may also be affected. Users are recommended to upgrade to version 11.0.12 or later, 10.1.47 or later or 9.0.110 or later which fixes the issue.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-404 Improper Resource Shutdown or Release\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.3\nMEDIUM\nCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2026-2673\n<div class=\"csaf-accordion-content\">\n\nIssue summary: An OpenSSL TLS 1.3 server may fail to negotiate the expected preferred key exchange group when its key exchange group configuration includes the default by using the 'DEFAULT' keyword. Impact summary: A less preferred key exchange may be used even when a more preferred group is supported by both client and server, if the group was not included among the client's initial predicated keyshares. This will sometimes be the case with the new hybrid post-quantum groups, if the client chooses to defer their use until specifically requested by the server. If an OpenSSL TLS 1.3 server's configuration uses the 'DEFAULT' keyword to interpolate the built-in default group list into its own configuration, perhaps adding or removing specific elements, then an implementation defect causes the 'DEFAULT' list to lose its 'tuple' structure, and all server-supported groups were treated as a single sufficiently secure 'tuple', with the server not sending a Hello Retry Request (HRR) even when a group in a more preferred tuple was mutually supported. As a result, the client and server might fail to negotiate a mutually supported post-quantum key agreement group, such as 'X25519MLKEM768', if the client's configuration results in only 'classical' groups (such as 'X25519' being the only ones in the client's initial keyshare prediction). OpenSSL 3.5 and later support a new syntax for selecting the most preferred TLS 1.3 key agreement group on TLS servers. The old syntax had a single 'flat' list of groups, and treated all the supported groups as sufficiently secure. If any of the keyshares predicted by the client were supported by the server the most preferred among these was selected, even if other groups supported by the client, but not included in the list of predicted keyshares would have been more preferred, if included. The new syntax partitions the groups into distinct 'tuples' of roughly equivalent security. Within each tuple the most preferred group included among the client's predicted keyshares is chosen, but if the client supports a group from a more preferred tuple, but did not predict any corresponding keyshares, the server will ask the client to retry the ClientHello (by issuing a Hello Retry Request or HRR) with the most preferred mutually supported group. The above works as expected when the server's configuration uses the built-in default group list, or explicitly defines its own list by directly defining the various desired groups and group 'tuples'. No OpenSSL FIPS modules are affected by this issue, the code in question lies outside the FIPS boundary. OpenSSL 3.6 and 3.5 are vulnerable to this issue. OpenSSL 3.6 users should upgrade to OpenSSL 3.6.2 once it is released. OpenSSL 3.5 users should upgrade to OpenSSL 3.5.6 once it is released. OpenSSL 3.4, 3.3, 3.0, 1.0.2 and 1.1.1 are not affected by this issue.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-757 Selection of Less-Secure Algorithm During Negotiation ('Algorithm Downgrade')\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.5\nHIGH\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2026-21925\n<div class=\"csaf-accordion-content\">\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: RMI). Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for JDK: 17.0.17 and 21.0.9; Oracle GraalVM Enterprise Edition: 21.3.16. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n4.8\nMEDIUM\nCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2026-21932\n<div class=\"csaf-accordion-content\">\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: AWT, JavaFX). Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for JDK: 17.0.17 and 21.0.9; Oracle GraalVM Enterprise Edition: 21.3.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.4 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N).\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.4\nHIGH\nCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2026-21933\n<div class=\"csaf-accordion-content\">\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for JDK: 17.0.17 and 21.0.9; Oracle GraalVM Enterprise Edition: 21.3.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n6.1\nMEDIUM\nCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2026-21945\n<div class=\"csaf-accordion-content\">\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for JDK: 17.0.17 and 21.0.9; Oracle GraalVM Enterprise Edition: 21.3.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-400 Uncontrolled Resource Consumption\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.5\nHIGH\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2026-21947\n<div class=\"csaf-accordion-content\">\n\nVulnerability in Oracle Java SE (component: JavaFX). Supported versions that are affected are Oracle Java SE: 8u471-b50. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n3.1\nLOW\nCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2026-22924\n<div class=\"csaf-accordion-content\">\n\nThe affected application does not properly restrict unauthenticated connections and is susceptible to resource exhaustion conditions. This could allow an attacker to disrupt normal operations or perform unauthorized actions, potentially impacting system availability and integrity.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-306 Missing Authentication for Critical Function\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.1\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2026-22925\n<div class=\"csaf-accordion-content\">\n\nThe affected application is susceptible to resource exhaustion when subjected to high volume of TCP SYN packets This could allow an attacker to render the service unavailable and cause denial-of-service conditions by overwhelming system resources.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-770 Allocation of Resources Without Limits or Throttling\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.5\nHIGH\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2026-28387\n<div class=\"csaf-accordion-content\">\n\nIssue summary: An uncommon configuration of clients performing DANE TLSA-based server authentication, when paired with uncommon server DANE TLSA records, may result in a use-after-free and/or double-free on the client side. Impact summary: A use after free can have a range of potential consequences such as the corruption of valid data, crashes or execution of arbitrary code. However, the issue only affects clients that make use of TLSA records with both the PKIX-TA(0/PKIX-EE(1) certificate usages and the DANE-TA(2) certificate usage. By far the most common deployment of DANE is in SMTP MTAs for which RFC7672 recommends that clients treat as 'unusable' any TLSA records that have the PKIX certificate usages. These SMTP (or other similar) clients are not vulnerable to this issue. Conversely, any clients that support only the PKIX usages, and ignore the DANE-TA(2) usage are also not vulnerable. The client would also need to be communicating with a server that publishes a TLSA RRset with both types of TLSA records. No FIPS modules are affected by this issue, the problem code is outside the FIPS module boundary.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-416 Use After Free\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7\nHIGH\nCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2026-28388\n<div class=\"csaf-accordion-content\">\n\nIssue summary: When a delta CRL that contains a Delta CRL Indicator extension is processed a NULL pointer dereference might happen if the required CRL Number extension is missing. Impact summary: A NULL pointer dereference can trigger a crash which leads to a Denial of Service for an application. When CRL processing and delta CRL processing is enabled during X.509 certificate verification, the delta CRL processing does not check whether the CRL Number extension is NULL before dereferencing it. When a malformed delta CRL file is being processed, this parameter can be NULL, causing a NULL pointer dereference. Exploiting this issue requires the X509_V_FLAG_USE_DELTAS flag to be enabled in the verification context, the certificate being verified to contain a freshestCRL extension or the base CRL to have the EXFLAG_FRESHEST flag set, and an attacker to provide a malformed CRL to an application that processes it. The vulnerability is limited to Denial of Service and cannot be escalated to achieve code execution or memory disclosure. For that reason the issue was assessed as Low severity according to our Security Policy. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the affected code is outside the OpenSSL FIPS module boundary.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-476 NULL Pointer Dereference\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.5\nHIGH\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2026-28389\n<div class=\"csaf-accordion-content\">\n\nIssue summary: During processing of a crafted CMS EnvelopedData message with KeyAgreeRecipientInfo a NULL pointer dereference can happen. Impact summary: Applications that process attacker-controlled CMS data may crash before authentication or cryptographic operations occur resulting in Denial of Service. When a CMS EnvelopedData message that uses KeyAgreeRecipientInfo is processed, the optional parameters field of KeyEncryptionAlgorithmIdentifier is examined without checking for its presence. This results in a NULL pointer dereference if the field is missing. Applications and services that call CMS_decrypt() on untrusted input (e.g., S/MIME processing or CMS-based protocols) are vulnerable. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the affected code is outside the OpenSSL FIPS module boundary.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-476 NULL Pointer Dereference\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.5\nHIGH\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2026-28390\n<div class=\"csaf-accordion-content\">\n\nIssue summary: During processing of a crafted CMS EnvelopedData message with KeyTransportRecipientInfo a NULL pointer dereference can happen. Impact summary: Applications that process attacker-controlled CMS data may crash before authentication or cryptographic operations occur resulting in Denial of Service. When a CMS EnvelopedData message that uses KeyTransportRecipientInfo with RSA-OAEP encryption is processed, the optional parameters field of RSA-OAEP SourceFunc algorithm identifier is examined without checking for its presence. This results in a NULL pointer dereference if the field is missing. Applications and services that call CMS_decrypt() on untrusted input (e.g., S/MIME processing or CMS-based protocols) are vulnerable. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the affected code is outside the OpenSSL FIPS module boundary.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-476 NULL Pointer Dereference\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.5\nHIGH\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2026-31789\n<div class=\"csaf-accordion-content\">\n\nIssue summary: Converting an excessively large OCTET STRING value to a hexadecimal string leads to a heap buffer overflow on 32 bit platforms. Impact summary: A heap buffer overflow may lead to a crash or possibly an attacker controlled code execution or other undefined behavior. If an attacker can supply a crafted X.509 certificate with an excessively large OCTET STRING value in extensions such as the Subject Key Identifier (SKID) or Authority Key Identifier (AKID) which are being converted to hex, the size of the buffer needed for the result is calculated as multiplication of the input length by 3. On 32 bit platforms, this multiplication may overflow resulting in the allocation of a smaller buffer and a heap buffer overflow. Applications and services that print or log contents of untrusted X.509 certificates are vulnerable to this issue. As the certificates would have to have sizes of over 1 Gigabyte, printing or logging such certificates is a fairly unlikely operation and only 32 bit platforms are affected, this issue was assigned Low severity. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the affected code is outside the OpenSSL FIPS module boundary.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7\nHIGH\nCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2026-31790\n<div class=\"csaf-accordion-content\">\n\nIssue summary: Applications using RSASVE key encapsulation to establish a secret encryption key can send contents of an uninitialized memory buffer to a malicious peer. Impact summary: The uninitialized buffer might contain sensitive data from the previous execution of the application process which leads to sensitive data leakage to an attacker. RSA_public_encrypt() returns the number of bytes written on success and -1 on error. The affected code tests only whether the return value is non-zero. As a result, if RSA encryption fails, encapsulation can still return success to the caller, set the output lengths, and leave the caller to use the contents of the ciphertext buffer as if a valid KEM ciphertext had been produced. If applications use EVP_PKEY_encapsulate() with RSA/RSASVE on an attacker-supplied invalid RSA public key without first validating that key, then this may cause stale or uninitialized contents of the caller-provided ciphertext buffer to be disclosed to the attacker in place of the KEM ciphertext. As a workaround calling EVP_PKEY_public_check() or EVP_PKEY_public_check_quick() before EVP_PKEY_encapsulate() will mitigate the issue. The FIPS modules in 3.6, 3.5, 3.4, 3.3, 3.1 and 3.0 are affected by this issue.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens SIMATIC\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:SIMATIC CN 4100</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V5.0 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/109814144/\n</div>\n\nRelevant CWE: CWE-754 Improper Check for Unusual or Exceptional Conditions\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.5\nHIGH\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\n\n\n\n</div>\n</div>\n</div>\n</div>\n\n\n\nAcknowledgments\n\n\n\nSiemens ProductCERT reported these vulnerabilities to CISA.\n\n\n\n\nGeneral Recommendations\n\nAs a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity\n\n\n\nAdditional Resources\n\nFor further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories\n\n\n\nTerms of Use\n\nThe use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.\n\n\n\nLegal Notice and Terms of Use\n\nThis product is provided subject to this Notification (https://www.cisa.gov/notification) and this Privacy & Use policy (https://www.cisa.gov/privacy-policy).\n\n\n\nRecommended Practices\n\nCISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.\n\nMinimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.\n\nLocate control system networks and remote devices behind firewalls and isolate them from business networks.\n\nWhen remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.\n\nCISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.\n\nCISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.\n\nCISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.\n\nOrganizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.\n\n\n\nAdvisory Conversion Disclaimer\n\nThis ICSA is a verbatim republication of Siemens ProductCERT SSA-032379 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided \"as-is\" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Siemens ProductCERT directly for any questions regarding this advisory.\n\nRevision History\n\n\n\nInitial Release Date: 2026-05-12\n\n\n\n\n\nDate\nRevision\nSummary\n\n\n\n\n2026-05-12\n1\nPublication Date\n\n\n2026-05-14\n2\nInitial CISA Republication of Siemens ProductCERT SSA-032379 advisory\n\n\n\n\n\n\nLegal Notice and Terms of Use", "creation_timestamp": "2026-05-14T10:00:00.000000Z"}, {"uuid": "0755e60e-a732-4863-ad3e-79b83dcfeabf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57256", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-134-16", "content": "View CSAF\n\nSummary\n\nRuggedcom Rox before v2.17.1 contain multiple third-party vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions.\n\nThe following versions of Siemens Ruggedcom Rox are affected:\n\n\n\nRUGGEDCOM ROX MX5000 vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\nRUGGEDCOM ROX MX5000RE vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\nRUGGEDCOM ROX RX1400 vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\nRUGGEDCOM ROX RX1500 vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\nRUGGEDCOM ROX RX1501 vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\nRUGGEDCOM ROX RX1510 vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\nRUGGEDCOM ROX RX1511 vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\nRUGGEDCOM ROX RX1512 vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\nRUGGEDCOM ROX RX1524 vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\nRUGGEDCOM ROX RX1536 vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\nRUGGEDCOM ROX RX5000 vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\n<div class=\"csaf-table\">\n\n\n\n\nCVSS\nVendor\nEquipment\nVulnerabilities\n\n\n\n\nv3 9.8\nSiemens\nSiemens Ruggedcom Rox\nUncontrolled Recursion, Integer Underflow (Wrap or Wraparound), Out-of-bounds Write, Out-of-bounds Read, Improper Input Validation, Heap-based Buffer Overflow, Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Use After Free, Improper Validation of Syntactic Correctness of Input, Improper Control of a Resource Through its Lifetime, Integer Overflow or Wraparound, Incorrect Calculation of Buffer Size, Use of Weak Hash, Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Stack-based Buffer Overflow, Expired Pointer Dereference\n\n\n\n</div>\n\nBackground\n\n\n\nCritical Infrastructure Sectors: Critical Manufacturing\n\nCountries/Areas Deployed: Worldwide\n\nCompany Headquarters Location: Germany\n\n\n\n\nVulnerabilities\n<div class=\"csaf-accordion\">\n\nExpand All +\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-13103\n<div class=\"csaf-accordion-content\">\n\nA crafted self-referential DOS partition table will cause all Das U-Boot versions through 2019.07-rc4 to infinitely recurse, causing the stack to grow infinitely and eventually either crash or overwrite other data.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-674 Uncontrolled Recursion\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.1\nHIGH\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-13104\n<div class=\"csaf-accordion-content\">\n\nIn Das U-Boot versions 2016.11-rc1 through 2019.07-rc4, an underflow can cause memcpy() to overwrite a very large amount of data (including the whole stack) while reading a crafted ext4 filesystem.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-191 Integer Underflow (Wrap or Wraparound)\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.8\nHIGH\nCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-13106\n<div class=\"csaf-accordion-content\">\n\nDas U-Boot versions 2016.09 through 2019.07-rc4 can memset() too much data while reading a crafted ext4 filesystem, which results in a stack buffer overflow and likely code execution.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.8\nHIGH\nCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14192\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP packet due to a net_process_received_packet integer underflow during an nc_input_packet call.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-191 Integer Underflow (Wrap or Wraparound)\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14193\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with an unvalidated length at nfs_readlink_reply, in the \"if\" block after calculating the new path length.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14194\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_read_reply when calling store_block in the NFSv2 case.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14195\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with unvalidated length at nfs_readlink_reply in the \"else\" block after calculating the new path length.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14196\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_lookup_reply.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14197\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is a read of out-of-bounds data at nfs_read_reply.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-125 Out-of-bounds Read\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.0\n9.1\nCRITICAL\nCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14198\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_read_reply when calling store_block in the NFSv3 case.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14199\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP packet due to a net_process_received_packet integer underflow during an *udp_packet_handler call.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-191 Integer Underflow (Wrap or Wraparound)\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14200\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: rpc_lookup_reply.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14201\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_lookup_reply.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14202\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_readlink_reply.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14203\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_mount_reply.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14204\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_umountall_reply.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2020-10648\n<div class=\"csaf-accordion-content\">\n\nDas U-Boot through 2020.01 allows attackers to bypass verified boot restrictions and subsequently boot arbitrary images by providing a crafted FIT image to a system configured to boot the default configuration.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.8\nHIGH\nCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2022-2347\n<div class=\"csaf-accordion-content\">\n\nThere exists an unchecked length field in UBoot. The U-Boot DFU implementation does not bound the length field in USB DFU download setup packets, and it does not verify that the transfer direction corresponds to the specified command. Consequently, if a physical attacker crafts a USB DFU download setup packet with a `wLength` greater than 4096 bytes, they can write beyond the heap-allocated request buffer.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-122 Heap-based Buffer Overflow\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.7\nHIGH\nCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2022-30552\n<div class=\"csaf-accordion-content\">\n\nDas U-Boot 2022.01 has a Buffer Overflow.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2022-30790\n<div class=\"csaf-accordion-content\">\n\nDas U-Boot 2022.01 has a Buffer Overflow, a different issue than CVE-2022-30552.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.8\nHIGH\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2022-34835\n<div class=\"csaf-accordion-content\">\n\nIn Das U-Boot through 2022.07-rc5, an integer signedness error and resultant stack-based buffer overflow in the \"i2c md\" command enables the corruption of the return address pointer of the do_i2c_md function.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2023-3019\n<div class=\"csaf-accordion-content\">\n\nA DMA reentrancy issue leading to a use-after-free error was found in the e1000e NIC emulation code in QEMU. This issue could allow a privileged guest user to crash the QEMU process on the host, resulting in a denial of service.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-416 Use After Free\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n6\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2023-27043\n<div class=\"csaf-accordion-content\">\n\nThe email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special character. The wrong portion of an RFC2822 header is identified as the value of the addr-spec. In some applications, an attacker can bypass a protection mechanism in which application access is granted only after verifying receipt of e-mail to a specific domain (e.g., only @company.example.com addresses may be used for signup). This occurs in email/_parseaddr.py in recent versions of Python.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-1286 Improper Validation of Syntactic Correctness of Input\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.3\nMEDIUM\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2024-3447\n<div class=\"csaf-accordion-content\">\n\nA heap-based buffer overflow was found in the SDHCI device emulation of QEMU. The bug is triggered when both `s->data_count` and the size of `s->fifo_buffer` are set to 0x200, leading to an out-of-bound access. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-122 Heap-based Buffer Overflow\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n6\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2024-22365\n<div class=\"csaf-accordion-content\">\n\nlinux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo because the openat call (for protect_dir) lacks O_DIRECTORY.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-664 Improper Control of a Resource Through its Lifetime\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2024-57256\n<div class=\"csaf-accordion-content\">\n\nAn integer overflow in ext4fs_read_symlink in Das U-Boot before 2025.01-rc1 occurs for zalloc (adding one to an le32 variable) via a crafted ext4 filesystem with an inode size of 0xffffffff, resulting in a malloc of zero and resultant memory overwrite.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-190 Integer Overflow or Wraparound\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.1\nHIGH\nCVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2024-57258\n<div class=\"csaf-accordion-content\">\n\nInteger overflows in memory allocation in Das U-Boot before 2025.01-rc1 occur for a crafted squashfs filesystem via sbrk, via request2size, or because ptrdiff_t is mishandled on x86_64.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-190 Integer Overflow or Wraparound\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.1\nHIGH\nCVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-0395\n<div class=\"csaf-accordion-content\">\n\nWhen the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-131 Incorrect Calculation of Buffer Size\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n6.2\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-3576\n<div class=\"csaf-accordion-content\">\n\nA vulnerability in the MIT Kerberos implementation allows GSSAPI-protected messages using RC4-HMAC-MD5 to be spoofed due to weaknesses in the MD5 checksum design. If RC4 is preferred over stronger encryption types, an attacker could exploit MD5 collisions to forge message integrity codes. This may lead to unauthorized message tampering.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-328 Use of Weak Hash\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.9\nMEDIUM\nCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-6020\n<div class=\"csaf-accordion-content\">\n\nA flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.8\nHIGH\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-7425\n<div class=\"csaf-accordion-content\">\n\nA flaw was found in libxslt where the attribute type, atype, flags are modified in a way that corrupts internal memory management. When XSLT functions, such as the key() process, result in tree fragments, this corruption prevents the proper cleanup of ID attributes. As a result, the system may access freed memory, causing crashes or enabling attackers to trigger heap corruption.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-416 Use After Free\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.8\nHIGH\nCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-9714\n<div class=\"csaf-accordion-content\">\n\nUncontrolled recursion in XPath evaluation in libxml2 up to and including version 2.9.14 allows a local attacker to cause a stack overflow via crafted expressions. XPath processing functions `xmlXPathRunEval`, `xmlXPathCtxtCompile`, and `xmlXPathEvalExpr` were resetting recursion depth to zero before making potentially recursive calls. When such functions were called recursively this could allow for uncontrolled recursion and lead to a stack overflow. These functions now preserve recursion depth across recursive calls, allowing recursion depth to be controlled.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-674 Uncontrolled Recursion\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n6.2\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-46836\n<div class=\"csaf-accordion-content\">\n\nnet-tools is a collection of programs that form the base set of the NET-3 networking distribution for the Linux operating system. Inn versions up to and including 2.10, the Linux network utilities (like ifconfig) from the net-tools package do not properly validate the structure of /proc files when showing interfaces. `get_name()` in `interface.c` copies interface labels from `/proc/net/dev` into a fixed 16-byte stack buffer without bounds checking, leading to possible arbitrary code execution or crash. The known attack path does not require privilege but also does not provide privilege escalation in this scenario. A patch is available and expected to be part of version 2.20.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-121 Stack-based Buffer Overflow\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n6.6\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-49794\n<div class=\"csaf-accordion-content\">\n\nA use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements under certain circumstances when the XML schematron has the schema elements. This flaw allows a malicious actor to craft a malicious XML document used as input for libxml, resulting in the program's crash using libxml or other possible undefined behaviors.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-825 Expired Pointer Dereference\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.1\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-49796\n<div class=\"csaf-accordion-content\">\n\nA vulnerability was found in libxml2. Processing certain sch:name elements from the input XML file can trigger a memory corruption issue. This flaw allows an attacker to craft a malicious XML input file that can lead libxml to crash, resulting in a denial of service or other possible undefined behavior due to sensitive data being corrupted in memory.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-125 Out-of-bounds Read\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.1\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n</div>\n\n\n\nAcknowledgments\n\n\n\nSiemens ProductCERT reported these vulnerabilities to CISA.\n\n\n\n\nGeneral Recommendations\n\nAs a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity\n\n\n\nAdditional Resources\n\nFor further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories\n\n\n\nTerms of Use\n\nThe use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.\n\n\n\nLegal Notice and Terms of Use\n\nThis product is provided subject to this Notification (https://www.cisa.gov/notification) and this Privacy & Use policy (https://www.cisa.gov/privacy-policy).\n\n\n\nRecommended Practices\n\nCISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.\n\nMinimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.\n\nLocate control system networks and remote devices behind firewalls and isolate them from business networks.\n\nWhen remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.\n\nCISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.\n\nCISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.\n\nCISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.\n\nOrganizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.\n\n\n\nAdvisory Conversion Disclaimer\n\nThis ICSA is a verbatim republication of Siemens ProductCERT SSA-577017 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided \"as-is\" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Siemens ProductCERT directly for any questions regarding this advisory.\n\nRevision History\n\n\n\nInitial Release Date: 2026-05-12\n\n\n\n\n\nDate\nRevision\nSummary\n\n\n\n\n2026-05-12\n1\nPublication Date\n\n\n2026-05-14\n2\nInitial CISA Republication of Siemens ProductCERT SSA-577017 advisory\n\n\n\n\n\n\nLegal Notice and Terms of Use", "creation_timestamp": "2026-05-14T10:00:00.000000Z"}, {"uuid": "c79d8c81-219f-40da-acda-c0a5325f4803", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57258", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-134-16", "content": "View CSAF\n\nSummary\n\nRuggedcom Rox before v2.17.1 contain multiple third-party vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions.\n\nThe following versions of Siemens Ruggedcom Rox are affected:\n\n\n\nRUGGEDCOM ROX MX5000 vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\nRUGGEDCOM ROX MX5000RE vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\nRUGGEDCOM ROX RX1400 vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\nRUGGEDCOM ROX RX1500 vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\nRUGGEDCOM ROX RX1501 vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\nRUGGEDCOM ROX RX1510 vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\nRUGGEDCOM ROX RX1511 vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\nRUGGEDCOM ROX RX1512 vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\nRUGGEDCOM ROX RX1524 vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\nRUGGEDCOM ROX RX1536 vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\nRUGGEDCOM ROX RX5000 vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\n<div class=\"csaf-table\">\n\n\n\n\nCVSS\nVendor\nEquipment\nVulnerabilities\n\n\n\n\nv3 9.8\nSiemens\nSiemens Ruggedcom Rox\nUncontrolled Recursion, Integer Underflow (Wrap or Wraparound), Out-of-bounds Write, Out-of-bounds Read, Improper Input Validation, Heap-based Buffer Overflow, Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Use After Free, Improper Validation of Syntactic Correctness of Input, Improper Control of a Resource Through its Lifetime, Integer Overflow or Wraparound, Incorrect Calculation of Buffer Size, Use of Weak Hash, Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Stack-based Buffer Overflow, Expired Pointer Dereference\n\n\n\n</div>\n\nBackground\n\n\n\nCritical Infrastructure Sectors: Critical Manufacturing\n\nCountries/Areas Deployed: Worldwide\n\nCompany Headquarters Location: Germany\n\n\n\n\nVulnerabilities\n<div class=\"csaf-accordion\">\n\nExpand All +\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-13103\n<div class=\"csaf-accordion-content\">\n\nA crafted self-referential DOS partition table will cause all Das U-Boot versions through 2019.07-rc4 to infinitely recurse, causing the stack to grow infinitely and eventually either crash or overwrite other data.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-674 Uncontrolled Recursion\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.1\nHIGH\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-13104\n<div class=\"csaf-accordion-content\">\n\nIn Das U-Boot versions 2016.11-rc1 through 2019.07-rc4, an underflow can cause memcpy() to overwrite a very large amount of data (including the whole stack) while reading a crafted ext4 filesystem.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-191 Integer Underflow (Wrap or Wraparound)\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.8\nHIGH\nCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-13106\n<div class=\"csaf-accordion-content\">\n\nDas U-Boot versions 2016.09 through 2019.07-rc4 can memset() too much data while reading a crafted ext4 filesystem, which results in a stack buffer overflow and likely code execution.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.8\nHIGH\nCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14192\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP packet due to a net_process_received_packet integer underflow during an nc_input_packet call.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-191 Integer Underflow (Wrap or Wraparound)\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14193\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with an unvalidated length at nfs_readlink_reply, in the \"if\" block after calculating the new path length.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14194\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_read_reply when calling store_block in the NFSv2 case.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14195\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with unvalidated length at nfs_readlink_reply in the \"else\" block after calculating the new path length.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14196\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_lookup_reply.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14197\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is a read of out-of-bounds data at nfs_read_reply.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-125 Out-of-bounds Read\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.0\n9.1\nCRITICAL\nCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14198\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_read_reply when calling store_block in the NFSv3 case.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14199\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP packet due to a net_process_received_packet integer underflow during an *udp_packet_handler call.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-191 Integer Underflow (Wrap or Wraparound)\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14200\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: rpc_lookup_reply.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14201\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_lookup_reply.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14202\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_readlink_reply.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14203\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_mount_reply.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14204\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_umountall_reply.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2020-10648\n<div class=\"csaf-accordion-content\">\n\nDas U-Boot through 2020.01 allows attackers to bypass verified boot restrictions and subsequently boot arbitrary images by providing a crafted FIT image to a system configured to boot the default configuration.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.8\nHIGH\nCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2022-2347\n<div class=\"csaf-accordion-content\">\n\nThere exists an unchecked length field in UBoot. The U-Boot DFU implementation does not bound the length field in USB DFU download setup packets, and it does not verify that the transfer direction corresponds to the specified command. Consequently, if a physical attacker crafts a USB DFU download setup packet with a `wLength` greater than 4096 bytes, they can write beyond the heap-allocated request buffer.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-122 Heap-based Buffer Overflow\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.7\nHIGH\nCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2022-30552\n<div class=\"csaf-accordion-content\">\n\nDas U-Boot 2022.01 has a Buffer Overflow.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2022-30790\n<div class=\"csaf-accordion-content\">\n\nDas U-Boot 2022.01 has a Buffer Overflow, a different issue than CVE-2022-30552.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.8\nHIGH\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2022-34835\n<div class=\"csaf-accordion-content\">\n\nIn Das U-Boot through 2022.07-rc5, an integer signedness error and resultant stack-based buffer overflow in the \"i2c md\" command enables the corruption of the return address pointer of the do_i2c_md function.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2023-3019\n<div class=\"csaf-accordion-content\">\n\nA DMA reentrancy issue leading to a use-after-free error was found in the e1000e NIC emulation code in QEMU. This issue could allow a privileged guest user to crash the QEMU process on the host, resulting in a denial of service.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-416 Use After Free\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n6\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2023-27043\n<div class=\"csaf-accordion-content\">\n\nThe email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special character. The wrong portion of an RFC2822 header is identified as the value of the addr-spec. In some applications, an attacker can bypass a protection mechanism in which application access is granted only after verifying receipt of e-mail to a specific domain (e.g., only @company.example.com addresses may be used for signup). This occurs in email/_parseaddr.py in recent versions of Python.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-1286 Improper Validation of Syntactic Correctness of Input\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.3\nMEDIUM\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2024-3447\n<div class=\"csaf-accordion-content\">\n\nA heap-based buffer overflow was found in the SDHCI device emulation of QEMU. The bug is triggered when both `s->data_count` and the size of `s->fifo_buffer` are set to 0x200, leading to an out-of-bound access. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-122 Heap-based Buffer Overflow\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n6\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2024-22365\n<div class=\"csaf-accordion-content\">\n\nlinux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo because the openat call (for protect_dir) lacks O_DIRECTORY.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-664 Improper Control of a Resource Through its Lifetime\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2024-57256\n<div class=\"csaf-accordion-content\">\n\nAn integer overflow in ext4fs_read_symlink in Das U-Boot before 2025.01-rc1 occurs for zalloc (adding one to an le32 variable) via a crafted ext4 filesystem with an inode size of 0xffffffff, resulting in a malloc of zero and resultant memory overwrite.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-190 Integer Overflow or Wraparound\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.1\nHIGH\nCVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2024-57258\n<div class=\"csaf-accordion-content\">\n\nInteger overflows in memory allocation in Das U-Boot before 2025.01-rc1 occur for a crafted squashfs filesystem via sbrk, via request2size, or because ptrdiff_t is mishandled on x86_64.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-190 Integer Overflow or Wraparound\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.1\nHIGH\nCVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-0395\n<div class=\"csaf-accordion-content\">\n\nWhen the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-131 Incorrect Calculation of Buffer Size\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n6.2\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-3576\n<div class=\"csaf-accordion-content\">\n\nA vulnerability in the MIT Kerberos implementation allows GSSAPI-protected messages using RC4-HMAC-MD5 to be spoofed due to weaknesses in the MD5 checksum design. If RC4 is preferred over stronger encryption types, an attacker could exploit MD5 collisions to forge message integrity codes. This may lead to unauthorized message tampering.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-328 Use of Weak Hash\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.9\nMEDIUM\nCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-6020\n<div class=\"csaf-accordion-content\">\n\nA flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.8\nHIGH\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-7425\n<div class=\"csaf-accordion-content\">\n\nA flaw was found in libxslt where the attribute type, atype, flags are modified in a way that corrupts internal memory management. When XSLT functions, such as the key() process, result in tree fragments, this corruption prevents the proper cleanup of ID attributes. As a result, the system may access freed memory, causing crashes or enabling attackers to trigger heap corruption.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-416 Use After Free\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.8\nHIGH\nCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-9714\n<div class=\"csaf-accordion-content\">\n\nUncontrolled recursion in XPath evaluation in libxml2 up to and including version 2.9.14 allows a local attacker to cause a stack overflow via crafted expressions. XPath processing functions `xmlXPathRunEval`, `xmlXPathCtxtCompile`, and `xmlXPathEvalExpr` were resetting recursion depth to zero before making potentially recursive calls. When such functions were called recursively this could allow for uncontrolled recursion and lead to a stack overflow. These functions now preserve recursion depth across recursive calls, allowing recursion depth to be controlled.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-674 Uncontrolled Recursion\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n6.2\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-46836\n<div class=\"csaf-accordion-content\">\n\nnet-tools is a collection of programs that form the base set of the NET-3 networking distribution for the Linux operating system. Inn versions up to and including 2.10, the Linux network utilities (like ifconfig) from the net-tools package do not properly validate the structure of /proc files when showing interfaces. `get_name()` in `interface.c` copies interface labels from `/proc/net/dev` into a fixed 16-byte stack buffer without bounds checking, leading to possible arbitrary code execution or crash. The known attack path does not require privilege but also does not provide privilege escalation in this scenario. A patch is available and expected to be part of version 2.20.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-121 Stack-based Buffer Overflow\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n6.6\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-49794\n<div class=\"csaf-accordion-content\">\n\nA use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements under certain circumstances when the XML schematron has the schema elements. This flaw allows a malicious actor to craft a malicious XML document used as input for libxml, resulting in the program's crash using libxml or other possible undefined behaviors.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-825 Expired Pointer Dereference\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.1\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-49796\n<div class=\"csaf-accordion-content\">\n\nA vulnerability was found in libxml2. Processing certain sch:name elements from the input XML file can trigger a memory corruption issue. This flaw allows an attacker to craft a malicious XML input file that can lead libxml to crash, resulting in a denial of service or other possible undefined behavior due to sensitive data being corrupted in memory.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-125 Out-of-bounds Read\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.1\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n</div>\n\n\n\nAcknowledgments\n\n\n\nSiemens ProductCERT reported these vulnerabilities to CISA.\n\n\n\n\nGeneral Recommendations\n\nAs a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity\n\n\n\nAdditional Resources\n\nFor further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories\n\n\n\nTerms of Use\n\nThe use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.\n\n\n\nLegal Notice and Terms of Use\n\nThis product is provided subject to this Notification (https://www.cisa.gov/notification) and this Privacy & Use policy (https://www.cisa.gov/privacy-policy).\n\n\n\nRecommended Practices\n\nCISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.\n\nMinimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.\n\nLocate control system networks and remote devices behind firewalls and isolate them from business networks.\n\nWhen remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.\n\nCISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.\n\nCISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.\n\nCISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.\n\nOrganizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.\n\n\n\nAdvisory Conversion Disclaimer\n\nThis ICSA is a verbatim republication of Siemens ProductCERT SSA-577017 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided \"as-is\" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Siemens ProductCERT directly for any questions regarding this advisory.\n\nRevision History\n\n\n\nInitial Release Date: 2026-05-12\n\n\n\n\n\nDate\nRevision\nSummary\n\n\n\n\n2026-05-12\n1\nPublication Date\n\n\n2026-05-14\n2\nInitial CISA Republication of Siemens ProductCERT SSA-577017 advisory\n\n\n\n\n\n\nLegal Notice and Terms of Use", "creation_timestamp": "2026-05-14T10:00:00.000000Z"}, {"uuid": "fd2fad55-f191-4c3a-833b-2b301dd6470e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "seen", "source": "https://t.me/purp_sec/156", "content": "\ud83d\udee1\u0422\u0440\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 SimpleHelp \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0432\u0437\u043b\u0430\u043c\u044b\u0432\u0430\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\n\n\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Horizon3 \u043f\u0440\u043e\u0432\u0435\u043b\u0438 \u0418\u0411-\u0430\u0443\u0434\u0438\u0442 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u043e\u0433\u043e \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u2014 SimpleHelp \u2014 \u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0442\u0440\u0438 \u043f\u0440\u043e\u0441\u0442\u044b\u0435 \u0432 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 \u0438 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u0441 \u043b\u044e\u0431\u044b\u043c\u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u043c\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u043c\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438.\n\n\ud83d\udd35CVE-2024-57727 (CVSSv3: 7.5) \u2014 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 SimpleHelp, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0444\u0430\u0439\u043b \u0441 \u0445\u0435\u0448\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 \u043f\u0430\u0440\u043e\u043b\u044f\u043c\u0438 \u0434\u043b\u044f \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 SimpleHelpAdmin \u0438 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e. \u041f\u0440\u043e\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u043d\u043e \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 LDAP, OIDC, \u043a\u043b\u044e\u0447\u0438 API \u0438 \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f TOTP.\n\n\ud83d\udd35CVE-2024-57728 (CVSSv3: 7.2) \u2014 \u043f\u043e\u043b\u0443\u0447\u0438\u0432 \u043f\u0430\u0440\u043e\u043b\u0438 \u043e\u0442 SimpleHelpAdmin \u043f\u0440\u0438 \u044d\u043a\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043f\u0435\u0440\u0432\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u043d\u043e \u043f\u0440\u043e\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432\u0442\u043e\u0440\u0443\u044e, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0432 \u043b\u044e\u0431\u043e\u0435 \u043c\u0435\u0441\u0442\u043e \u043d\u0430 \u0445\u043e\u0441\u0442\u0435 SimpleServer, \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u0441 \u043b\u044e\u0431\u044b\u043c\u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u043c\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438 \u0438\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043a \u043d\u0438\u043c \u043f\u0440\u044f\u043c\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f.\n\n\ud83d\udd35CVE-2024-57726 (CVSSv3: 9.9) \u2014 \u043f\u043e\u043b\u044c\u0437\u0443\u044f\u0441\u044c \u0442\u0435\u043c, \u0447\u0442\u043e \u0432 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u0445 SimpleHelp \u043d\u0435\u0442 \u043f\u0440\u043e\u0432\u0435\u0440\u043e\u043a \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0432\u0441\u0435 \u0432\u044b\u0448\u0435\u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0435 \u0437\u043b\u043e\u0432\u0440\u0435\u0434\u043d\u044b\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f.\n\n\u0412\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 SimpleHelp \u0434\u043e 5.5.7 \u0443\u044f\u0437\u0432\u0438\u043c\u044b. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0443\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 5.5.8 \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e \u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f.\n\n#blue_team #SimpleHelp", "creation_timestamp": "2026-08-05T00:00:07.004217Z"}, {"uuid": "4a3b523b-ca16-4dda-92b0-8c6d42f569ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57728", "type": "seen", "source": "https://t.me/purp_sec/156", "content": "\ud83d\udee1\u0422\u0440\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 SimpleHelp \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0432\u0437\u043b\u0430\u043c\u044b\u0432\u0430\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\n\n\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Horizon3 \u043f\u0440\u043e\u0432\u0435\u043b\u0438 \u0418\u0411-\u0430\u0443\u0434\u0438\u0442 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u043e\u0433\u043e \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u2014 SimpleHelp \u2014 \u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0442\u0440\u0438 \u043f\u0440\u043e\u0441\u0442\u044b\u0435 \u0432 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 \u0438 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u0441 \u043b\u044e\u0431\u044b\u043c\u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u043c\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u043c\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438.\n\n\ud83d\udd35CVE-2024-57727 (CVSSv3: 7.5) \u2014 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 SimpleHelp, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0444\u0430\u0439\u043b \u0441 \u0445\u0435\u0448\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 \u043f\u0430\u0440\u043e\u043b\u044f\u043c\u0438 \u0434\u043b\u044f \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 SimpleHelpAdmin \u0438 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e. \u041f\u0440\u043e\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u043d\u043e \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 LDAP, OIDC, \u043a\u043b\u044e\u0447\u0438 API \u0438 \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f TOTP.\n\n\ud83d\udd35CVE-2024-57728 (CVSSv3: 7.2) \u2014 \u043f\u043e\u043b\u0443\u0447\u0438\u0432 \u043f\u0430\u0440\u043e\u043b\u0438 \u043e\u0442 SimpleHelpAdmin \u043f\u0440\u0438 \u044d\u043a\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043f\u0435\u0440\u0432\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u043d\u043e \u043f\u0440\u043e\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432\u0442\u043e\u0440\u0443\u044e, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0432 \u043b\u044e\u0431\u043e\u0435 \u043c\u0435\u0441\u0442\u043e \u043d\u0430 \u0445\u043e\u0441\u0442\u0435 SimpleServer, \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u0441 \u043b\u044e\u0431\u044b\u043c\u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u043c\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438 \u0438\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043a \u043d\u0438\u043c \u043f\u0440\u044f\u043c\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f.\n\n\ud83d\udd35CVE-2024-57726 (CVSSv3: 9.9) \u2014 \u043f\u043e\u043b\u044c\u0437\u0443\u044f\u0441\u044c \u0442\u0435\u043c, \u0447\u0442\u043e \u0432 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u0445 SimpleHelp \u043d\u0435\u0442 \u043f\u0440\u043e\u0432\u0435\u0440\u043e\u043a \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0432\u0441\u0435 \u0432\u044b\u0448\u0435\u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0435 \u0437\u043b\u043e\u0432\u0440\u0435\u0434\u043d\u044b\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f.\n\n\u0412\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 SimpleHelp \u0434\u043e 5.5.7 \u0443\u044f\u0437\u0432\u0438\u043c\u044b. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0443\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 5.5.8 \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e \u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f.\n\n#blue_team #SimpleHelp", "creation_timestamp": "2026-08-05T00:00:07.042300Z"}, {"uuid": "3507f72d-3255-4af0-9aa4-238b6c489af2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57726", "type": "seen", "source": "https://t.me/purp_sec/156", "content": "\ud83d\udee1\u0422\u0440\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 SimpleHelp \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0432\u0437\u043b\u0430\u043c\u044b\u0432\u0430\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\n\n\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Horizon3 \u043f\u0440\u043e\u0432\u0435\u043b\u0438 \u0418\u0411-\u0430\u0443\u0434\u0438\u0442 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u043e\u0433\u043e \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u2014 SimpleHelp \u2014 \u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0442\u0440\u0438 \u043f\u0440\u043e\u0441\u0442\u044b\u0435 \u0432 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 \u0438 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u0441 \u043b\u044e\u0431\u044b\u043c\u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u043c\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u043c\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438.\n\n\ud83d\udd35CVE-2024-57727 (CVSSv3: 7.5) \u2014 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 SimpleHelp, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0444\u0430\u0439\u043b \u0441 \u0445\u0435\u0448\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 \u043f\u0430\u0440\u043e\u043b\u044f\u043c\u0438 \u0434\u043b\u044f \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 SimpleHelpAdmin \u0438 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e. \u041f\u0440\u043e\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u043d\u043e \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 LDAP, OIDC, \u043a\u043b\u044e\u0447\u0438 API \u0438 \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f TOTP.\n\n\ud83d\udd35CVE-2024-57728 (CVSSv3: 7.2) \u2014 \u043f\u043e\u043b\u0443\u0447\u0438\u0432 \u043f\u0430\u0440\u043e\u043b\u0438 \u043e\u0442 SimpleHelpAdmin \u043f\u0440\u0438 \u044d\u043a\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043f\u0435\u0440\u0432\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u043d\u043e \u043f\u0440\u043e\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432\u0442\u043e\u0440\u0443\u044e, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0432 \u043b\u044e\u0431\u043e\u0435 \u043c\u0435\u0441\u0442\u043e \u043d\u0430 \u0445\u043e\u0441\u0442\u0435 SimpleServer, \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u0441 \u043b\u044e\u0431\u044b\u043c\u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u043c\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438 \u0438\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043a \u043d\u0438\u043c \u043f\u0440\u044f\u043c\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f.\n\n\ud83d\udd35CVE-2024-57726 (CVSSv3: 9.9) \u2014 \u043f\u043e\u043b\u044c\u0437\u0443\u044f\u0441\u044c \u0442\u0435\u043c, \u0447\u0442\u043e \u0432 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u0445 SimpleHelp \u043d\u0435\u0442 \u043f\u0440\u043e\u0432\u0435\u0440\u043e\u043a \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0432\u0441\u0435 \u0432\u044b\u0448\u0435\u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0435 \u0437\u043b\u043e\u0432\u0440\u0435\u0434\u043d\u044b\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f.\n\n\u0412\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 SimpleHelp \u0434\u043e 5.5.7 \u0443\u044f\u0437\u0432\u0438\u043c\u044b. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0443\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 5.5.8 \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e \u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f.\n\n#blue_team #SimpleHelp", "creation_timestamp": "2026-08-05T00:00:07.074641Z"}, {"uuid": "2b9d6728-e36d-41d1-a54d-7835ea317535", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-57077", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-7qgg-vw88-cc99", "content": "", "creation_timestamp": "2025-02-06T06:31:26.000000Z"}, {"uuid": "08087e17-6483-42fb-889c-73a0ea338dc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-57075", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-r7jx-5m6m-cpg9", "content": "", "creation_timestamp": "2025-02-06T06:31:26.000000Z"}, {"uuid": "649e86f8-a39e-488a-8e0e-4ac462e53210", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57728", "type": "seen", "source": "https://t.me/VulnerabilityNews/42162", "content": "CISA Adds Four Known Exploited Vulnerabilities to Catalog\n\nCISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.\nCVE-2024-7399\u00a0Samsung\u00a0MagicINFO\u00a09 Server Path Traversal Vulnerability\nCVE-2024-57726\u00a0SimpleHelp\u00a0Missing Authorization Vulnerability\nCVE-2024-57728\u00a0SimpleHelp\u00a0Path Traversal Vulnerability\nCVE-2025-29635\u00a0D-Link DIR-823X Command Injection Vulnerability\u00a0\nThese\u00a0types\u00a0of vulnerabilities\u00a0are\u00a0frequent attack vectors\u00a0for malicious cyber actors and pose significant risks to the federal enterprise.\u00a0\nBinding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities\u00a0established the KEV Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the\u00a0BOD 22-01 Fact Sheet\u00a0for more information.\u00a0\nAlthough BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing\u00a0timely\u00a0remediation of\u00a0KEV Catalog vulnerabilities\u00a0as part of their vulnerability management practice. CISA will continue to add vulnerabilities to the catalog that meet the\u00a0specified criteria.\nhttps://www.cisa.gov/news-events/alerts/2026/04/24/cisa-adds-four-known-exploited-vulnerabilities-catalog", "creation_timestamp": "2026-08-18T19:00:04.115979Z"}, {"uuid": "3b23eae4-62c3-4bbc-8724-efc626e2ed72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57726", "type": "seen", "source": "https://t.me/VulnerabilityNews/42168", "content": "CISA Adds 4 Exploited Flaws to KEV, Sets May 2026 Federal Deadline\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added four vulnerabilities impacting SimpleHelp, Samsung MagicINFO 9 Server, and D-Link DIR-823X series routers to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.\nThe list of vulnerabilities is below -\n\nCVE-2024-57726 (CVSS score: 9.9) - A missing authorization vulnerability in\nhttps://thehackernews.com/2026/04/cisa-adds-4-exploited-flaws-to-kev-sets.html", "creation_timestamp": "2026-08-18T19:00:04.164343Z"}, {"uuid": "1889e821-3e7f-4ccd-9d96-6a53db1d1cfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57726", "type": "seen", "source": "https://t.me/VulnerabilityNews/42162", "content": "CISA Adds Four Known Exploited Vulnerabilities to Catalog\n\nCISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.\nCVE-2024-7399\u00a0Samsung\u00a0MagicINFO\u00a09 Server Path Traversal Vulnerability\nCVE-2024-57726\u00a0SimpleHelp\u00a0Missing Authorization Vulnerability\nCVE-2024-57728\u00a0SimpleHelp\u00a0Path Traversal Vulnerability\nCVE-2025-29635\u00a0D-Link DIR-823X Command Injection Vulnerability\u00a0\nThese\u00a0types\u00a0of vulnerabilities\u00a0are\u00a0frequent attack vectors\u00a0for malicious cyber actors and pose significant risks to the federal enterprise.\u00a0\nBinding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities\u00a0established the KEV Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the\u00a0BOD 22-01 Fact Sheet\u00a0for more information.\u00a0\nAlthough BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing\u00a0timely\u00a0remediation of\u00a0KEV Catalog vulnerabilities\u00a0as part of their vulnerability management practice. CISA will continue to add vulnerabilities to the catalog that meet the\u00a0specified criteria.\nhttps://www.cisa.gov/news-events/alerts/2026/04/24/cisa-adds-four-known-exploited-vulnerabilities-catalog", "creation_timestamp": "2026-08-18T19:00:04.027959Z"}, {"uuid": "b64d2d78-bb1d-4e38-afbc-b6afb189b47b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "seen", "source": "https://t.me/Intel_Encyclopedia/708", "content": "\ud83d\udee0\ufe0f [Vulnerabilities]\nRansomware Actors Exploit Unpatched SimpleHelp Remote Monitoring and Management to Compromise Utility Billing Software Provider\nSummary The Cybersecurity and Infrastructure Security Agency (CISA) is releasing this advisory in response to ransomware actors leveraging unpatched instances of a vulnerability in SimpleHelp Remote Monitoring and Management (RMM) to compromise customers of a utility billing software provider. This incident reflects a broader pattern of ransomware actors targeting organizations through unpatched versions of SimpleHelp RMM since January 2025. SimpleHelp versions 5.5.7 and earlier contain several vulnerabilities, including CVE-2024-57727 \u2014a path traversal vulnerability. 1 Ransomware actors likel\n\nSource: us-cert.cisa.gov \u2014 link\n#cybersecurity #infosec", "creation_timestamp": "2026-08-09T04:17:03.764976Z"}, {"uuid": "93483bf5-6c4f-4f74-8c4a-9dd0dd9d666c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "exploited", "source": "https://t.me/Intel_Encyclopedia/708", "content": "\ud83d\udee0\ufe0f [Vulnerabilities]\nRansomware Actors Exploit Unpatched SimpleHelp Remote Monitoring and Management to Compromise Utility Billing Software Provider\nSummary The Cybersecurity and Infrastructure Security Agency (CISA) is releasing this advisory in response to ransomware actors leveraging unpatched instances of a vulnerability in SimpleHelp Remote Monitoring and Management (RMM) to compromise customers of a utility billing software provider. This incident reflects a broader pattern of ransomware actors targeting organizations through unpatched versions of SimpleHelp RMM since January 2025. SimpleHelp versions 5.5.7 and earlier contain several vulnerabilities, including CVE-2024-57727 \u2014a path traversal vulnerability. 1 Ransomware actors likel\n\nSource: us-cert.cisa.gov \u2014 link\n#cybersecurity #infosec", "creation_timestamp": "2026-08-10T00:00:31.155319Z"}, {"uuid": "5f49d998-d6d8-40a0-920c-61abfda0bdf4", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57726", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6a63f22c-6fd6-49ab-9cb9-2f7387b5aec9", "content": "", "creation_timestamp": "2026-06-19T12:45:12.850635Z"}, {"uuid": "4f4babaa-ae42-484e-bfb9-7b7675f36a1d", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57728", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/06bf8a1f-03a9-40eb-b535-5bb0e07d4e8c", "content": "", "creation_timestamp": "2026-06-19T12:45:12.787996Z"}, {"uuid": "07e64369-c3f3-4350-9be8-84ce7781c2ea", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/82de5bc8-8627-4d38-b1f6-0a9e12cd8c25", "content": "", "creation_timestamp": "2026-06-19T12:46:27.280127Z"}, {"uuid": "122ddbf3-b7f8-4aba-a858-2cff88d47853", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57049", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/41426e34-14db-4bbb-903a-b251937d28cd", "content": "", "creation_timestamp": "2026-06-19T12:46:06.644259Z"}, {"uuid": "e8f1f9f2-b890-4280-9e7c-e445e032c1c0", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57968", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/064fe99e-afc7-4128-97d3-9923b25afdb5", "content": "", "creation_timestamp": "2026-06-19T12:46:25.346219Z"}, {"uuid": "4163eb8a-1eec-47b8-a7fb-e91acdd144ae", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57728", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/db7178d9-9051-46e1-90d7-c5f1e9b19c2f", "content": "", "creation_timestamp": "2026-06-23T14:03:39.035696Z"}, {"uuid": "a1ff1c8c-f846-4ed6-98f2-e41d3d4ea358", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57726", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8f297339-e210-4a69-be3a-775bf950150e", "content": "", "creation_timestamp": "2026-06-23T14:03:39.122155Z"}, {"uuid": "e9d8ac0d-e19c-4857-9b65-8061a6841ffc", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57049", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0c980cd1-774a-46e7-bfab-88a2882d7291", "content": "", "creation_timestamp": "2026-06-23T14:03:29.814572Z"}, {"uuid": "005e8e18-c7a9-4ee4-aa6e-8416573ef27d", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3bbb281d-e1df-4e92-b56a-26e702e81fdc", "content": "", "creation_timestamp": "2026-06-23T14:06:05.034789Z"}, {"uuid": "5c491d83-4399-4aff-a6ad-e28727ff0928", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57968", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1273a02b-c51d-463b-9bf0-5112c7305f4e", "content": "", "creation_timestamp": "2026-06-23T14:06:06.435945Z"}, {"uuid": "276d294d-4ec9-4415-8d92-0eb7ffd54c0f", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-57049", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/7b10aa2c-64f3-48b8-8e44-d17af0a935f6", "content": "", "creation_timestamp": "2026-06-30T09:23:06.672217Z"}, {"uuid": "d85579a6-4c02-4313-b96c-6d98feb17466", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57726", "type": "exploited", "source": "https://t.me/VulnerabilityNews/42168", "content": "CISA Adds 4 Exploited Flaws to KEV, Sets May 2026 Federal Deadline\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added four vulnerabilities impacting SimpleHelp, Samsung MagicINFO 9 Server, and D-Link DIR-823X series routers to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.\nThe list of vulnerabilities is below -\n\nCVE-2024-57726 (CVSS score: 9.9) - A missing authorization vulnerability in\nhttps://thehackernews.com/2026/04/cisa-adds-4-exploited-flaws-to-kev-sets.html", "creation_timestamp": "2026-08-19T00:00:09.865282Z"}, {"uuid": "92005753-2909-467a-b498-359ecc3cece1", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-57727", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f9a81ae8-d54b-45bd-8367-435db8fa020f", "content": "", "creation_timestamp": "2026-06-30T11:52:48.795746Z"}, {"uuid": "9721940b-7ac5-46df-b320-9a6f5c3fac94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57726", "type": "seen", "source": "https://t.me/VulnerabilityNews/42162", "content": "CISA Adds Four Known Exploited Vulnerabilities to Catalog\n\nCISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.\nCVE-2024-7399\u00a0Samsung\u00a0MagicINFO\u00a09 Server Path Traversal Vulnerability\nCVE-2024-57726\u00a0SimpleHelp\u00a0Missing Authorization Vulnerability\nCVE-2024-57728\u00a0SimpleHelp\u00a0Path Traversal Vulnerability\nCVE-2025-29635\u00a0D-Link DIR-823X Command Injection Vulnerability\u00a0\nThese\u00a0types\u00a0of vulnerabilities\u00a0are\u00a0frequent attack vectors\u00a0for malicious cyber actors and pose significant risks to the federal enterprise.\u00a0\nBinding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities\u00a0established the KEV Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the\u00a0BOD 22-01 Fact Sheet\u00a0for more information.\u00a0\nAlthough BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing\u00a0timely\u00a0remediation of\u00a0KEV Catalog vulnerabilities\u00a0as part of their vulnerability management practice. CISA will continue to add vulnerabilities to the catalog that meet the\u00a0specified criteria.\nhttps://www.cisa.gov/news-events/alerts/2026/04/24/cisa-adds-four-known-exploited-vulnerabilities-catalog", "creation_timestamp": "2026-08-19T00:00:09.957500Z"}, {"uuid": "0a0bffb0-b60e-4222-b5e5-61459261e247", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57728", "type": "seen", "source": "https://t.me/VulnerabilityNews/42162", "content": "CISA Adds Four Known Exploited Vulnerabilities to Catalog\n\nCISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.\nCVE-2024-7399\u00a0Samsung\u00a0MagicINFO\u00a09 Server Path Traversal Vulnerability\nCVE-2024-57726\u00a0SimpleHelp\u00a0Missing Authorization Vulnerability\nCVE-2024-57728\u00a0SimpleHelp\u00a0Path Traversal Vulnerability\nCVE-2025-29635\u00a0D-Link DIR-823X Command Injection Vulnerability\u00a0\nThese\u00a0types\u00a0of vulnerabilities\u00a0are\u00a0frequent attack vectors\u00a0for malicious cyber actors and pose significant risks to the federal enterprise.\u00a0\nBinding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities\u00a0established the KEV Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the\u00a0BOD 22-01 Fact Sheet\u00a0for more information.\u00a0\nAlthough BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing\u00a0timely\u00a0remediation of\u00a0KEV Catalog vulnerabilities\u00a0as part of their vulnerability management practice. CISA will continue to add vulnerabilities to the catalog that meet the\u00a0specified criteria.\nhttps://www.cisa.gov/news-events/alerts/2026/04/24/cisa-adds-four-known-exploited-vulnerabilities-catalog", "creation_timestamp": "2026-08-19T00:00:10.050011Z"}, {"uuid": "658bd377-cccf-43b2-a97a-6743f218b82c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57726", "type": "seen", "source": "https://t.me/brutsecurity/1335", "content": "CVE-2024-57726, -57727, -57728: Multiple vulnerabilities in SimpleHelp, 7.2 - 8.8 rating\u2757\ufe0f\n\nThe vulnerabilities allow attackers to upload arbitrary files to the SimpleHelp server, as well as escalate privileges, which together allows RCE to be carried out.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/Frx6H\n\ud83d\udc49 Dork: http.headers.server:\"SimpleHelp\"\n\nVendor's advisory: https://simple-help.com/kb---security-vulnerabilities-01-2025#", "creation_timestamp": "2026-07-09T03:00:10.275677Z"}, {"uuid": "75107f87-b98c-4827-ab2a-c885308a56f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57726", "type": "seen", "source": "https://t.me/brutsecurity/1335", "content": "CVE-2024-57726, -57727, -57728: Multiple vulnerabilities in SimpleHelp, 7.2 - 8.8 rating\u2757\ufe0f\n\nThe vulnerabilities allow attackers to upload arbitrary files to the SimpleHelp server, as well as escalate privileges, which together allows RCE to be carried out.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/Frx6H\n\ud83d\udc49 Dork: http.headers.server:\"SimpleHelp\"\n\nVendor's advisory: https://simple-help.com/kb---security-vulnerabilities-01-2025#", "creation_timestamp": "2026-07-10T00:00:33.964075Z"}, {"uuid": "32bf3e1e-4955-4772-b231-9f4966d4db86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57726", "type": "seen", "source": "https://t.me/brutsecurity/1335", "content": "CVE-2024-57726, -57727, -57728: Multiple vulnerabilities in SimpleHelp, 7.2 - 8.8 rating\u2757\ufe0f\n\nThe vulnerabilities allow attackers to upload arbitrary files to the SimpleHelp server, as well as escalate privileges, which together allows RCE to be carried out.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/Frx6H\n\ud83d\udc49 Dork: http.headers.server:\"SimpleHelp\"\n\nVendor's advisory: https://simple-help.com/kb---security-vulnerabilities-01-2025#", "creation_timestamp": "2026-07-11T15:00:04.822458Z"}, {"uuid": "f863c5d1-ee9e-4709-b38c-b68f44a05fca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57726", "type": "seen", "source": "https://t.me/brutsecurity/1335", "content": "CVE-2024-57726, -57727, -57728: Multiple vulnerabilities in SimpleHelp, 7.2 - 8.8 rating\u2757\ufe0f\n\nThe vulnerabilities allow attackers to upload arbitrary files to the SimpleHelp server, as well as escalate privileges, which together allows RCE to be carried out.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/Frx6H\n\ud83d\udc49 Dork: http.headers.server:\"SimpleHelp\"\n\nVendor's advisory: https://simple-help.com/kb---security-vulnerabilities-01-2025#", "creation_timestamp": "2026-07-12T00:00:46.921570Z"}, {"uuid": "1049e6ef-48d5-4249-aeea-d1671093cad7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5721", "type": "seen", "source": "https://t.me/GithubRedTeam/88649", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a logsign-rce\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a byjanke\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-13 13:43:04\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nOriginal Logsign Unified SecOps Platform unauthenticated RCE exploit \u2014 CVE-2024-5716, CVE-2024-5717, CVE-2024-5718, CVE-2024-5719, CVE-2024-5720, CVE-2024-5721, CVE-2024-5722\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:43.039842Z"}, {"uuid": "3fa4990f-3ff3-4173-8db9-dc5e26f8b46b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5719", "type": "seen", "source": "https://t.me/GithubRedTeam/88649", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a logsign-rce\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a byjanke\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-13 13:43:04\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nOriginal Logsign Unified SecOps Platform unauthenticated RCE exploit \u2014 CVE-2024-5716, CVE-2024-5717, CVE-2024-5718, CVE-2024-5719, CVE-2024-5720, CVE-2024-5721, CVE-2024-5722\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:43.110910Z"}, {"uuid": "9defcc96-d238-4e58-8076-9f61847b5442", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5722", "type": "seen", "source": "https://t.me/GithubRedTeam/88649", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a logsign-rce\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a byjanke\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-13 13:43:04\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nOriginal Logsign Unified SecOps Platform unauthenticated RCE exploit \u2014 CVE-2024-5716, CVE-2024-5717, CVE-2024-5718, CVE-2024-5719, CVE-2024-5720, CVE-2024-5721, CVE-2024-5722\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:43.073061Z"}, {"uuid": "b09b58b4-cf5f-4d8f-a156-913a6a2d4ff1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5717", "type": "seen", "source": "https://t.me/GithubRedTeam/88649", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a logsign-rce\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a byjanke\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-13 13:43:04\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nOriginal Logsign Unified SecOps Platform unauthenticated RCE exploit \u2014 CVE-2024-5716, CVE-2024-5717, CVE-2024-5718, CVE-2024-5719, CVE-2024-5720, CVE-2024-5721, CVE-2024-5722\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:43.356316Z"}, {"uuid": "f7b75d59-a7e1-444c-a1f2-e7f76cdd9d2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5716", "type": "seen", "source": "https://t.me/GithubRedTeam/88649", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a logsign-rce\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a byjanke\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-13 13:43:04\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nOriginal Logsign Unified SecOps Platform unauthenticated RCE exploit \u2014 CVE-2024-5716, CVE-2024-5717, CVE-2024-5718, CVE-2024-5719, CVE-2024-5720, CVE-2024-5721, CVE-2024-5722\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:43.387531Z"}, {"uuid": "eaad460c-9596-475f-9858-bf5a3ad2536c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5720", "type": "seen", "source": "https://t.me/GithubRedTeam/88649", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a logsign-rce\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a byjanke\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-13 13:43:04\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nOriginal Logsign Unified SecOps Platform unauthenticated RCE exploit \u2014 CVE-2024-5716, CVE-2024-5717, CVE-2024-5718, CVE-2024-5719, CVE-2024-5720, CVE-2024-5721, CVE-2024-5722\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:43.420402Z"}, {"uuid": "4a019d89-6b5c-40b7-84ed-a8fc67bb7c01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5718", "type": "seen", "source": "https://t.me/GithubRedTeam/88649", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a logsign-rce\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a byjanke\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-13 13:43:04\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nOriginal Logsign Unified SecOps Platform unauthenticated RCE exploit \u2014 CVE-2024-5716, CVE-2024-5717, CVE-2024-5718, CVE-2024-5719, CVE-2024-5720, CVE-2024-5721, CVE-2024-5722\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:43.452433Z"}, {"uuid": "6d196983-6878-4b07-9c75-3ce8477e0f56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5720", "type": "seen", "source": "https://t.me/GithubRedTeam/88649", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a logsign-rce\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a byjanke\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-13 13:43:04\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nOriginal Logsign Unified SecOps Platform unauthenticated RCE exploit \u2014 CVE-2024-5716, CVE-2024-5717, CVE-2024-5718, CVE-2024-5719, CVE-2024-5720, CVE-2024-5721, CVE-2024-5722\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:42.545344Z"}, {"uuid": "438e173a-3b01-4772-85d7-0f4c7cef11f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5721", "type": "seen", "source": "https://t.me/GithubRedTeam/88649", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a logsign-rce\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a byjanke\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-13 13:43:04\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nOriginal Logsign Unified SecOps Platform unauthenticated RCE exploit \u2014 CVE-2024-5716, CVE-2024-5717, CVE-2024-5718, CVE-2024-5719, CVE-2024-5720, CVE-2024-5721, CVE-2024-5722\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:42.236687Z"}, {"uuid": "b0ffbc2e-3be4-4b52-a8b1-915b758f5af4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5722", "type": "seen", "source": "https://t.me/GithubRedTeam/88649", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a logsign-rce\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a byjanke\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-13 13:43:04\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nOriginal Logsign Unified SecOps Platform unauthenticated RCE exploit \u2014 CVE-2024-5716, CVE-2024-5717, CVE-2024-5718, CVE-2024-5719, CVE-2024-5720, CVE-2024-5721, CVE-2024-5722\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:42.268714Z"}, {"uuid": "4128ddeb-2b15-4386-8fc1-309321d76798", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5719", "type": "seen", "source": "https://t.me/GithubRedTeam/88649", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a logsign-rce\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a byjanke\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-13 13:43:04\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nOriginal Logsign Unified SecOps Platform unauthenticated RCE exploit \u2014 CVE-2024-5716, CVE-2024-5717, CVE-2024-5718, CVE-2024-5719, CVE-2024-5720, CVE-2024-5721, CVE-2024-5722\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:42.297758Z"}, {"uuid": "f809bd9b-d1e2-4714-a44f-1ceaf5a9faed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5717", "type": "seen", "source": "https://t.me/GithubRedTeam/88649", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a logsign-rce\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a byjanke\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-13 13:43:04\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nOriginal Logsign Unified SecOps Platform unauthenticated RCE exploit \u2014 CVE-2024-5716, CVE-2024-5717, CVE-2024-5718, CVE-2024-5719, CVE-2024-5720, CVE-2024-5721, CVE-2024-5722\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:42.478699Z"}, {"uuid": "396a6fcf-7b62-4ace-8c1e-f40587dbb301", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5716", "type": "seen", "source": "https://t.me/GithubRedTeam/88649", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a logsign-rce\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a byjanke\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-13 13:43:04\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nOriginal Logsign Unified SecOps Platform unauthenticated RCE exploit \u2014 CVE-2024-5716, CVE-2024-5717, CVE-2024-5718, CVE-2024-5719, CVE-2024-5720, CVE-2024-5721, CVE-2024-5722\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:42.510544Z"}, {"uuid": "fbc672ef-3630-4679-8002-4a84bd841055", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5718", "type": "seen", "source": "https://t.me/GithubRedTeam/88649", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a logsign-rce\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a byjanke\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-13 13:43:04\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nOriginal Logsign Unified SecOps Platform unauthenticated RCE exploit \u2014 CVE-2024-5716, CVE-2024-5717, CVE-2024-5718, CVE-2024-5719, CVE-2024-5720, CVE-2024-5721, CVE-2024-5722\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:42.587921Z"}, {"uuid": "8ae0d493-82e1-4b25-bf15-f1f01b07ff6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5717", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/88649", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a logsign-rce\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a byjanke\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-13 13:43:04\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nOriginal Logsign Unified SecOps Platform unauthenticated RCE exploit \u2014 CVE-2024-5716, CVE-2024-5717, CVE-2024-5718, CVE-2024-5719, CVE-2024-5720, CVE-2024-5721, CVE-2024-5722\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:06.109753Z"}, {"uuid": "188ca06b-777a-4500-9b7c-e67324d53584", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5716", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/88649", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a logsign-rce\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a byjanke\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-13 13:43:04\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nOriginal Logsign Unified SecOps Platform unauthenticated RCE exploit \u2014 CVE-2024-5716, CVE-2024-5717, CVE-2024-5718, CVE-2024-5719, CVE-2024-5720, CVE-2024-5721, CVE-2024-5722\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:06.149526Z"}, {"uuid": "5824d30f-e362-4330-a077-19cb9336c8d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5720", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/88649", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a logsign-rce\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a byjanke\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-13 13:43:04\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nOriginal Logsign Unified SecOps Platform unauthenticated RCE exploit \u2014 CVE-2024-5716, CVE-2024-5717, CVE-2024-5718, CVE-2024-5719, CVE-2024-5720, CVE-2024-5721, CVE-2024-5722\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:06.189724Z"}, {"uuid": "c2cec599-4941-4aa3-8f06-82b991272cbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5718", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/88649", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a logsign-rce\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a byjanke\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-13 13:43:04\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nOriginal Logsign Unified SecOps Platform unauthenticated RCE exploit \u2014 CVE-2024-5716, CVE-2024-5717, CVE-2024-5718, CVE-2024-5719, CVE-2024-5720, CVE-2024-5721, CVE-2024-5722\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:06.230780Z"}, {"uuid": "50b684b8-d4e7-48ac-9049-5b2749a0b123", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5721", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/88649", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a logsign-rce\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a byjanke\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-13 13:43:04\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nOriginal Logsign Unified SecOps Platform unauthenticated RCE exploit \u2014 CVE-2024-5716, CVE-2024-5717, CVE-2024-5718, CVE-2024-5719, CVE-2024-5720, CVE-2024-5721, CVE-2024-5722\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:06.271116Z"}, {"uuid": "8a22b68c-c519-4f29-8b34-2986607a8500", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5722", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/88649", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a logsign-rce\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a byjanke\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-13 13:43:04\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nOriginal Logsign Unified SecOps Platform unauthenticated RCE exploit \u2014 CVE-2024-5716, CVE-2024-5717, CVE-2024-5718, CVE-2024-5719, CVE-2024-5720, CVE-2024-5721, CVE-2024-5722\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:06.317714Z"}, {"uuid": "cb799096-4249-4c49-a77b-898a2a0d55ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5719", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/88649", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a logsign-rce\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a byjanke\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-13 13:43:04\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nOriginal Logsign Unified SecOps Platform unauthenticated RCE exploit \u2014 CVE-2024-5716, CVE-2024-5717, CVE-2024-5718, CVE-2024-5719, CVE-2024-5720, CVE-2024-5721, CVE-2024-5722\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:06.352683Z"}, {"uuid": "c8eaf9c0-fb9c-49a5-a15d-d8569a5e6aaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57968", "type": "seen", "source": "https://t.me/claytechsolution/204", "content": "The Hacker News\nCISA Adds Five Actively Exploited Vulnerabilities in Advantive VeraCore and Ivanti EPM to KEV List\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added five security flaws impacting Advantive VeraCore and Ivanti Endpoint Manager (EPM) to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation in the wild.\nThe list of vulnerabilities is as follows -\n\nCVE-2024-57968 - An unrestricted file upload vulnerability in Advantive VeraCore", "creation_timestamp": "2026-07-20T22:00:05.950460Z"}, {"uuid": "07dd1488-8a0f-4be7-ba21-b4f584c81ca8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57968", "type": "exploited", "source": "https://t.me/claytechsolution/204", "content": "The Hacker News\nCISA Adds Five Actively Exploited Vulnerabilities in Advantive VeraCore and Ivanti EPM to KEV List\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added five security flaws impacting Advantive VeraCore and Ivanti Endpoint Manager (EPM) to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation in the wild.\nThe list of vulnerabilities is as follows -\n\nCVE-2024-57968 - An unrestricted file upload vulnerability in Advantive VeraCore", "creation_timestamp": "2026-07-21T00:00:08.341184Z"}, {"uuid": "e127f8b8-8411-43c1-981d-a282344082a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-57917", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-04", "content": "", "creation_timestamp": "2026-07-28T16:16:12.706797Z"}, {"uuid": "740240ca-7627-473f-bf06-c5485637c777", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-57924", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-04", "content": "", "creation_timestamp": "2026-07-28T16:16:15.098804Z"}, {"uuid": "98a46bf2-4bcf-4430-9af6-ad101141485e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-57973", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-04", "content": "", "creation_timestamp": "2026-07-28T16:16:17.476873Z"}, {"uuid": "7327cc84-d88c-485b-8214-87158cbf5e8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-57977", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-04", "content": "", "creation_timestamp": "2026-07-28T16:16:19.854246Z"}, {"uuid": "39d233c2-b73b-4431-9ca1-9481205e65e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-57979", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-04", "content": "", "creation_timestamp": "2026-07-28T16:16:22.234436Z"}, {"uuid": "2e0471e8-67c5-40ff-a642-414a3ff10294", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57429", "type": "seen", "source": "Telegram/DD-qBI0ZtvLYMwpAeT-u9CBD1OFkNvyW9gj0OIVfc8sm9IM", "content": "", "creation_timestamp": "2026-09-02T01:00:05.455648Z"}, {"uuid": "54688a7a-7470-443f-a678-ce96241c9e91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57049", "type": "seen", "source": "https://t.me/hacking_Attack/190954", "content": "How one russian-speaking operator chained camera and router CVEs into a proxy and viewing pipeline against Ukraine\nhttps://www.reddit.com/r/redteamsec/comments/1vktd2p/how_one_russianspeaking_operator_chained_camera/\n\nAnalysis of two open directories showing the offensive workflow one operator used against exposed cameras and routers.  A custom project the operator named camview: fingerprints cameras over ONVIF, tests known CVEs, brute-forces HTTP/RTSP creds from a 3,811-pair list, and caches working creds and stream patterns to improve on later runs Proxy-through-victim: a script authenticated to a compromised OpenCart admin panel and relayed traffic through the victim network, with fallback logic for expired sessions Second directory chained TP-Link Archer CVE-2024-53375 and CVE-2024-57049 and brute-forced the MikroTik API, then flipped devices into SOCKS5 proxies reporting to a chisel listener on port 4444 Recon was Tor-routed via local SOCKS5 on 9050, including headless Chrome over Tor to fingerprint an anti-bot-protected target  Full writeup: https://hunt.io/blog/russian-speaking-operator-ukrainian-camera-toolkit    submitted by    /u/Straight-Practice-99  (https://www.reddit.com/user/Straight-Practice-99) \n [link] (https://hunt.io/blog/russian-speaking-operator-ukrainian-camera-toolkit)   [comments] (https://www.reddit.com/r/redteamsec/comments/1vktd2p/how_one_russianspeaking_operator_chained_camera/)", "creation_timestamp": "2026-09-01T20:00:05.717009Z"}, {"uuid": "e88d24e2-051c-43c0-89a1-d283879356e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57767", "type": "seen", "source": "https://t.me/hacking_Attack/150318", "content": "WIRE TOR\u200a\u2014\u200aThe Ethical Hacking ServicesContinue reading on Medium \u00bb (https://medium.com/@wiretor/cve-2024-57767-critical-server-side-request-forgery-ssrf-vulnerability-722db6cbba17?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-01T20:00:26.894834Z"}, {"uuid": "2ee1f438-0f21-4e5c-bf74-c25d17c22587", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57767", "type": "seen", "source": "https://t.me/hacking_Attack/150316", "content": "CVE-2024\u201357767: Critical Server-Side Request Forgery (SSRF) Vulnerability\nhttps://medium.com/@wiretor/cve-2024-57767-critical-server-side-request-forgery-ssrf-vulnerability-722db6cbba17?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-01T20:00:27.109522Z"}, {"uuid": "575557b1-2dcd-4391-9430-f8f00e23569c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5764", "type": "seen", "source": "https://t.me/hacking_Attack/149722", "content": "Static Keys, Shattered Security Dreams: A CVE-2024\u20135764 Story\nhttps://www.reddit.com/r/redteamsec/comments/1hz80d4/static_keys_shattered_security_dreams_a/\n\n  submitted by    /u/meterpretersession1  (https://www.reddit.com/user/meterpretersession1) \n [link] (https://medium.com/maverislabs/static-keys-shattered-security-dreams-a-cve-2024-5764-story-c76ee594adc2?source=friends_link&sk=804b473f5247ceab9463b28fc5b66958)   [comments] (https://www.reddit.com/r/redteamsec/comments/1hz80d4/static_keys_shattered_security_dreams_a/)", "creation_timestamp": "2026-09-01T20:00:27.292544Z"}, {"uuid": "372dc625-b059-417b-a109-c284cb84d73e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57049", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/190954", "content": "How one russian-speaking operator chained camera and router CVEs into a proxy and viewing pipeline against Ukraine\nhttps://www.reddit.com/r/redteamsec/comments/1vktd2p/how_one_russianspeaking_operator_chained_camera/\n\nAnalysis of two open directories showing the offensive workflow one operator used against exposed cameras and routers.  A custom project the operator named camview: fingerprints cameras over ONVIF, tests known CVEs, brute-forces HTTP/RTSP creds from a 3,811-pair list, and caches working creds and stream patterns to improve on later runs Proxy-through-victim: a script authenticated to a compromised OpenCart admin panel and relayed traffic through the victim network, with fallback logic for expired sessions Second directory chained TP-Link Archer CVE-2024-53375 and CVE-2024-57049 and brute-forced the MikroTik API, then flipped devices into SOCKS5 proxies reporting to a chisel listener on port 4444 Recon was Tor-routed via local SOCKS5 on 9050, including headless Chrome over Tor to fingerprint an anti-bot-protected target  Full writeup: https://hunt.io/blog/russian-speaking-operator-ukrainian-camera-toolkit    submitted by    /u/Straight-Practice-99  (https://www.reddit.com/user/Straight-Practice-99) \n [link] (https://hunt.io/blog/russian-speaking-operator-ukrainian-camera-toolkit)   [comments] (https://www.reddit.com/r/redteamsec/comments/1vktd2p/how_one_russianspeaking_operator_chained_camera/)", "creation_timestamp": "2026-09-02T01:00:25.549359Z"}, {"uuid": "4bfc6b27-33c3-4881-9d6d-a7013dbdc456", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57767", "type": "seen", "source": "https://t.me/hacking_Attack/150318", "content": "WIRE TOR\u200a\u2014\u200aThe Ethical Hacking ServicesContinue reading on Medium \u00bb (https://medium.com/@wiretor/cve-2024-57767-critical-server-side-request-forgery-ssrf-vulnerability-722db6cbba17?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-02T01:00:45.063798Z"}, {"uuid": "81e889f1-f03f-49e7-9c3d-2febaecdb18b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57767", "type": "seen", "source": "https://t.me/hacking_Attack/150316", "content": "CVE-2024\u201357767: Critical Server-Side Request Forgery (SSRF) Vulnerability\nhttps://medium.com/@wiretor/cve-2024-57767-critical-server-side-request-forgery-ssrf-vulnerability-722db6cbba17?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-02T01:00:45.336986Z"}, {"uuid": "f2ca20e0-8c44-4cd8-b72b-a8d39a3085dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5764", "type": "seen", "source": "https://t.me/hacking_Attack/149722", "content": "Static Keys, Shattered Security Dreams: A CVE-2024\u20135764 Story\nhttps://www.reddit.com/r/redteamsec/comments/1hz80d4/static_keys_shattered_security_dreams_a/\n\n  submitted by    /u/meterpretersession1  (https://www.reddit.com/user/meterpretersession1) \n [link] (https://medium.com/maverislabs/static-keys-shattered-security-dreams-a-cve-2024-5764-story-c76ee594adc2?source=friends_link&sk=804b473f5247ceab9463b28fc5b66958)   [comments] (https://www.reddit.com/r/redteamsec/comments/1hz80d4/static_keys_shattered_security_dreams_a/)", "creation_timestamp": "2026-09-02T01:00:45.557132Z"}, {"uuid": "fa75720e-afc4-4409-bd5f-41df11a8dfc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57429", "type": "published-proof-of-concept", "source": "Telegram/DD-qBI0ZtvLYMwpAeT-u9CBD1OFkNvyW9gj0OIVfc8sm9IM", "content": "", "creation_timestamp": "2026-09-03T00:00:59.414907Z"}, {"uuid": "8a65331d-6911-41d3-b7dd-e7ddaf5f16fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "published-proof-of-concept", "source": "Telegram/cT3ETXi8ueGY8kAtGyfu7wb0NUfCf_Oa836RYQyuDMgp6vQ", "content": "", "creation_timestamp": "2026-09-03T00:00:54.097069Z"}, {"uuid": "40f55b75-c7da-41d9-8c90-75cc17c8fdd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5764", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/149722", "content": "Static Keys, Shattered Security Dreams: A CVE-2024\u20135764 Story\nhttps://www.reddit.com/r/redteamsec/comments/1hz80d4/static_keys_shattered_security_dreams_a/\n\n  submitted by    /u/meterpretersession1  (https://www.reddit.com/user/meterpretersession1) \n [link] (https://medium.com/maverislabs/static-keys-shattered-security-dreams-a-cve-2024-5764-story-c76ee594adc2?source=friends_link&sk=804b473f5247ceab9463b28fc5b66958)   [comments] (https://www.reddit.com/r/redteamsec/comments/1hz80d4/static_keys_shattered_security_dreams_a/)", "creation_timestamp": "2026-09-03T14:00:04.894041Z"}, {"uuid": "228ab259-18b4-4788-9253-02b5b8e8c66c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57767", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/150316", "content": "CVE-2024\u201357767: Critical Server-Side Request Forgery (SSRF) Vulnerability\nhttps://medium.com/@wiretor/cve-2024-57767-critical-server-side-request-forgery-ssrf-vulnerability-722db6cbba17?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-03T14:00:05.066877Z"}, {"uuid": "239f2c2f-1cc1-4eb6-bf02-02b49b8d8f93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57767", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/150318", "content": "WIRE TOR\u200a\u2014\u200aThe Ethical Hacking ServicesContinue reading on Medium \u00bb (https://medium.com/@wiretor/cve-2024-57767-critical-server-side-request-forgery-ssrf-vulnerability-722db6cbba17?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-03T14:00:05.314427Z"}, {"uuid": "4c2751a4-b7d9-4447-96ad-ae2f93204afe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5764", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/149722", "content": "Static Keys, Shattered Security Dreams: A CVE-2024\u20135764 Story\nhttps://www.reddit.com/r/redteamsec/comments/1hz80d4/static_keys_shattered_security_dreams_a/\n\n  submitted by    /u/meterpretersession1  (https://www.reddit.com/user/meterpretersession1) \n [link] (https://medium.com/maverislabs/static-keys-shattered-security-dreams-a-cve-2024-5764-story-c76ee594adc2?source=friends_link&sk=804b473f5247ceab9463b28fc5b66958)   [comments] (https://www.reddit.com/r/redteamsec/comments/1hz80d4/static_keys_shattered_security_dreams_a/)", "creation_timestamp": "2026-09-04T00:00:47.172475Z"}, {"uuid": "9fc276fa-ea79-4125-95dc-df8fd3296807", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57767", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/150316", "content": "CVE-2024\u201357767: Critical Server-Side Request Forgery (SSRF) Vulnerability\nhttps://medium.com/@wiretor/cve-2024-57767-critical-server-side-request-forgery-ssrf-vulnerability-722db6cbba17?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-04T00:00:47.410044Z"}, {"uuid": "d19a537c-c2b9-43d8-80db-5f066a6885c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57767", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/150318", "content": "WIRE TOR\u200a\u2014\u200aThe Ethical Hacking ServicesContinue reading on Medium \u00bb (https://medium.com/@wiretor/cve-2024-57767-critical-server-side-request-forgery-ssrf-vulnerability-722db6cbba17?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-04T00:00:47.682895Z"}, {"uuid": "d8288e1f-565a-4137-b7e6-79eda3c47557", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57428", "type": "seen", "source": "Telegram/DGzHuk8RVb1b8Xt8T_i7JrWo03tk4z5tw950ouDC7Dv-DN4", "content": "", "creation_timestamp": "2026-09-04T18:00:04.134949Z"}, {"uuid": "9e5eed9f-65ca-4f5f-a8be-8f5e98c55abf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57553", "type": "seen", "source": "Telegram/saF7t803_3F3Ra_Gsh2itlwbpKCr-JJsYdlNdWBMzEsIfS4", "content": "", "creation_timestamp": "2026-09-05T01:00:04.363640Z"}, {"uuid": "093fa16c-48df-403e-b1e5-90c575b987d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57551", "type": "seen", "source": "Telegram/saF7t803_3F3Ra_Gsh2itlwbpKCr-JJsYdlNdWBMzEsIfS4", "content": "", "creation_timestamp": "2026-09-05T01:00:04.427627Z"}, {"uuid": "0e26916e-846a-4189-b847-42ad8591c09e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57552", "type": "seen", "source": "Telegram/saF7t803_3F3Ra_Gsh2itlwbpKCr-JJsYdlNdWBMzEsIfS4", "content": "", "creation_timestamp": "2026-09-05T01:00:04.556706Z"}, {"uuid": "013e0a53-808c-4627-8bb6-8bf45e4660c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57428", "type": "published-proof-of-concept", "source": "Telegram/DGzHuk8RVb1b8Xt8T_i7JrWo03tk4z5tw950ouDC7Dv-DN4", "content": "", "creation_timestamp": "2026-09-05T01:00:20.480880Z"}, {"uuid": "47f27962-34ce-4b13-83fe-18d57ac90f50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57551", "type": "seen", "source": "Telegram/saF7t803_3F3Ra_Gsh2itlwbpKCr-JJsYdlNdWBMzEsIfS4", "content": "", "creation_timestamp": "2026-09-06T00:01:03.481875Z"}, {"uuid": "c754e0cf-b9f7-4f4f-92b1-66bce46ffe74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57553", "type": "seen", "source": "Telegram/saF7t803_3F3Ra_Gsh2itlwbpKCr-JJsYdlNdWBMzEsIfS4", "content": "", "creation_timestamp": "2026-09-06T00:01:03.380542Z"}, {"uuid": "1c2c18e8-62ea-434d-ab27-f4e26cfd5828", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57552", "type": "seen", "source": "Telegram/saF7t803_3F3Ra_Gsh2itlwbpKCr-JJsYdlNdWBMzEsIfS4", "content": "", "creation_timestamp": "2026-09-06T00:01:03.718800Z"}, {"uuid": "6db70f76-30f1-4964-8645-b943666002f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/simplehelp_toolbox_path_traversal.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"horizon3ai\", \"imjdl\", \"jheysel-r7\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"There exists a path traversal vulnerability in the /toolbox-resource endpoint that enables unauthenticated\\n          remote attackers to download arbitrary files from the SimpleHelp server via crafted HTTP requests\", \"disclosure_date\": \"2025-01-12\", \"fullname\": \"auxiliary/scanner/http/simplehelp_toolbox_path_traversal\", \"is_install_path\": true, \"mod_time\": \"2025-02-24 10:26:01 +0000\", \"name\": \"SimpleHelp Path Traversal Vulnerability CVE-2024-57727\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/scanner/http/simplehelp_toolbox_path_traversal.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"scanner/http/simplehelp_toolbox_path_traversal\", \"references\": [\"URL-https://www.horizon3.ai/attack-research/disclosures/critical-vulnerabilities-in-simplehelp-remote-support-software/\", \"URL-https://simple-help.com/kb---security-vulnerabilities-01-2025#security-vulnerabilities-in-simplehelp-5-5-7-and-earlier\", \"URL-https://rustlang.rs/posts/simple-help/\", \"URL-https://attackerkb.com/topics/G4CTOrbDx0/cve-2024-57727\", \"CVE-2024-57727\"], \"rport\": 80, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:51.298079Z"}, {"uuid": "01a339d3-a0f0-488b-ae25-d0359c760a36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5721", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/logsign_exec.rb", "content": "{\"aliases\": [], \"arch\": \"python\", \"author\": [\"Mehmet Ince \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a command injection vulnerability in Logsign.\\n          By exploiting this vulnerability, unauthenticated users can execute\\n          arbitrary code under the root user.\\n\\n          Logsign has a publicly accessible endpoint. That endpoint takes a user\\n          input and then use it during operating system command execution without\\n          proper validation.\\n\\n          This module was tested against 4.4.2 and 4.4.137 versions.\", \"disclosure_date\": \"2017-02-26\", \"fullname\": \"exploit/linux/http/logsign_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:54:55 +0000\", \"name\": \"Logsign Remote Command Injection\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/linux/http/logsign_exec.rb\", \"platform\": \"Python\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/http/logsign_exec\", \"references\": [\"CVE-2024-5721\", \"URL-https://pentest.blog/unexpected-journey-3-visiting-another-siem-and-uncovering-pre-auth-privileged-remote-code-execution/\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Automatic\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:43.758831Z"}, {"uuid": "1e6bc937-3d41-44de-9bc4-8979f30d5d15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-57849", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/redhat-linux-kernel-multiple-vulnerabilities_20260902", "content": "", "creation_timestamp": "2026-09-08T20:45:13.515306Z"}, {"uuid": "3d7ca589-36ac-4675-af12-55015bf265e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57487", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/carrental_fileupload_rce.rb", "content": "{\"aliases\": [], \"arch\": \"php\", \"author\": [\"Aaryan Golatkar\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an authenticated remote code execution vulnerability in the\\n          Online Car Rental System 1.0 via the `changeimage1.php` endpoint. An authenticated\\n          attacker can upload malicious PHP scripts without proper validation, enabling\\n          arbitrary code execution on the server.\", \"disclosure_date\": \"2025-01-13\", \"fullname\": \"exploit/multi/http/carrental_fileupload_rce\", \"is_install_path\": true, \"mod_time\": \"2025-05-13 23:54:36 +0000\", \"name\": \"Car Rental System 1.0 File Upload RCE (Authenticated)\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/carrental_fileupload_rce.rb\", \"platform\": \"PHP\", \"post_auth\": true, \"rank\": 300, \"ref_name\": \"multi/http/carrental_fileupload_rce\", \"references\": [\"CVE-2024-57487\", \"URL-https://nvd.nist.gov/vuln/detail/CVE-2024-57487\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Automatic\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:43.361409Z"}]}