{"vulnerability": "CVE-2024-4348", "sightings": [{"uuid": "d6d8fcf7-9469-42db-bfc7-a8ca4749fc29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-43488", "type": "seen", "source": "https://www.thezdi.com/blog/2024/10/8/the-october-2024-security-update-review", "content": "", "creation_timestamp": "2024-10-08T17:54:47.000000Z"}, {"uuid": "eb62b733-b2fb-4b0b-ba63-647b6359fb19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-43480", "type": "seen", "source": "https://www.thezdi.com/blog/2024/10/8/the-october-2024-security-update-review", "content": "", "creation_timestamp": "2024-10-08T17:54:47.000000Z"}, {"uuid": "c19802b6-c81d-409d-b793-23a4e62fff52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-43485", "type": "seen", "source": "https://www.thezdi.com/blog/2024/10/8/the-october-2024-security-update-review", "content": "", "creation_timestamp": "2024-10-08T17:54:47.000000Z"}, {"uuid": "bb893a88-82d1-4fac-b2f9-dbf00ca9fc77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-43484", "type": "seen", "source": "https://www.thezdi.com/blog/2024/10/8/the-october-2024-security-update-review", "content": "", "creation_timestamp": "2024-10-08T17:54:47.000000Z"}, {"uuid": "9ab2e02d-2265-4801-875f-e53f8e884239", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-43483", "type": "seen", "source": "https://www.thezdi.com/blog/2024/10/8/the-october-2024-security-update-review", "content": "", "creation_timestamp": "2024-10-08T17:54:47.000000Z"}, {"uuid": "f74ebbb5-1bfa-4da0-a7ac-de907e04c4ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-43481", "type": "seen", "source": "https://www.thezdi.com/blog/2024/10/8/the-october-2024-security-update-review", "content": "", "creation_timestamp": "2024-10-08T17:54:47.000000Z"}, {"uuid": "d5466b26-b346-4a16-8193-dc3d6e2fbcfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-43482", "type": "seen", "source": "https://www.thezdi.com/blog/2024/9/10/the-september-2024-security-update-review", "content": "", "creation_timestamp": "2024-09-10T17:25:32.000000Z"}, {"uuid": "f4009067-79b8-43b6-9a3e-0e4684223c11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-43487", "type": "seen", "source": "https://www.thezdi.com/blog/2024/9/10/the-september-2024-security-update-review", "content": "", "creation_timestamp": "2024-09-10T17:25:32.000000Z"}, {"uuid": "961ef8ed-21ea-4f68-90b2-6d638668e555", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-43485", "type": "seen", "source": "https://bsky.app/profile/cti-news.bsky.social/post/3lgw3brca3y2k", "content": "", "creation_timestamp": "2025-01-29T23:02:58.453897Z"}, {"uuid": "38828849-a3f9-48a9-ad0d-0af32efd6127", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-43483", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-135-02", "content": "", "creation_timestamp": "2025-05-15T10:00:00.000000Z"}, {"uuid": "5dad24de-0225-4bd0-b18d-ebcb8fb17fd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-43485", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-135-02", "content": "", "creation_timestamp": "2025-05-15T10:00:00.000000Z"}, {"uuid": "76b21ada-b7a4-49dc-8bcd-51b3b5696485", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-43488", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1390", "content": "", "creation_timestamp": "2024-10-09T04:00:00.000000Z"}, {"uuid": "47eff563-38af-4880-bce3-8abd0a8542fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-43488", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2687", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-43488\n\ud83d\udd39 Description: Missing authentication for critical function in Visual Studio Code extension for Arduino allows an unauthenticated attacker to perform remote code execution through network attack vector.\n\ud83d\udccf Published: 2024-10-08T17:36:19.468Z\n\ud83d\udccf Modified: 2025-01-23T01:39:34.702Z\n\ud83d\udd17 References:\n1. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43488", "creation_timestamp": "2025-01-23T02:02:34.000000Z"}, {"uuid": "fa6ead10-799c-4779-b12a-d814036fdc79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-43488", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18396", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-43488\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)\n\ud83d\udd39 Description: Missing authentication for critical function in Visual Studio Code extension for Arduino allows an unauthenticated attacker to perform remote code execution through network attack vector.\n\ud83d\udccf Published: 2024-10-08T17:36:19.468Z\n\ud83d\udccf Modified: 2025-06-16T02:45:15.399Z\n\ud83d\udd17 References:\n1. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43488", "creation_timestamp": "2025-06-16T03:35:27.000000Z"}, {"uuid": "527bbc6f-f5dd-4527-9c80-611aeb11c80f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-43487", "type": "seen", "source": "https://t.me/cvedetector/5281", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-43487 - Microsoft Windows Mark of the Web Security Feature Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-43487 \nPublished : Sept. 10, 2024, 5:15 p.m. | 42\u00a0minutes ago \nDescription : Windows Mark of the Web Security Feature Bypass Vulnerability \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-10T20:06:18.000000Z"}, {"uuid": "6acadc5d-22fb-43ac-9b2b-2b055d55ef18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-43482", "type": "seen", "source": "https://t.me/cvedetector/5280", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-43482 - Microsoft Outlook iOS Information Leak\", \n  \"Content\": \"CVE ID : CVE-2024-43482 \nPublished : Sept. 10, 2024, 5:15 p.m. | 42\u00a0minutes ago \nDescription : Microsoft Outlook for iOS Information Disclosure Vulnerability \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-10T20:06:16.000000Z"}, {"uuid": "0122dea3-db3a-483f-8661-8957455e1428", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-43489", "type": "seen", "source": "https://t.me/cvedetector/6077", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-43489 - Microsoft Edge Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-43489 \nPublished : Sept. 19, 2024, 9:15 p.m. | 17\u00a0minutes ago \nDescription : Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-19T23:41:08.000000Z"}, {"uuid": "8a81b1d9-ca87-4f9b-9230-9fcb13ae3fed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4348", "type": "seen", "source": "https://t.me/arpsyndicate/4910", "content": "#ExploitObserverAlert\n\nCVE-2024-4348\n\nDESCRIPTION: Exploit Observer has 5 entries in 2 file formats related to CVE-2024-4348. A vulnerability, which was classified as problematic, was found in osCommerce 4. Affected is an unknown function of the file /catalog/all-products. The manipulation of the argument cat leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-262488. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.\n\nFIRST-EPSS: 0.000450000\nARPS-PRIORITY: 0.8702569", "creation_timestamp": "2024-05-02T22:31:13.000000Z"}, {"uuid": "a32ab4a8-dadc-4dd4-9fba-b501d20a26f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4348", "type": "seen", "source": "https://t.me/arpsyndicate/4921", "content": "#ExploitObserverAlert\n\nCVE-2024-4348\n\nDESCRIPTION: Exploit Observer has 5 entries in 2 file formats related to CVE-2024-4348. A vulnerability, which was classified as problematic, was found in osCommerce 4. Affected is an unknown function of the file /catalog/all-products. The manipulation of the argument cat leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-262488. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.\n\nFIRST-EPSS: 0.000650000\nARPS-PRIORITY: 0.8702569", "creation_timestamp": "2024-05-04T08:06:46.000000Z"}, {"uuid": "cc60d945-ea7e-4506-b84e-90640cf30ff0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-43483", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116719508098466554", "content": "#OT #Advisory VDE-2026-064METTLER TOLEDO: LabX Standard Report on External Component Analysis - v21.3\nMultiple vulnerabilities have been discovered in LabX Standard v21.3.22. Most of the vulnerabilities are fixed in LabX Standard v21.4.23. The Vulnerabilities CVE-2025-69419, CVE-2026-0915, CVE-2025-15467 and CVE-2025-58187 are not yet fixed. The fix will be available in the upcoming releases.#CVE CVE-2025-68121, CVE-2018-15727, CVE-2025-15467, CVE-2023-36414, CVE-2024-0056, CVE-2025-68154, CVE-2026-24737, CVE-2021-24112, CVE-2025-58187, CVE-2025-9230, CVE-2025-15281, CVE-2026-21218, CVE-2026-26127, CVE-2026-26130, CVE-2026-0915, CVE-2026-2391, CVE-2026-22036, CVE-2024-43483, CVE-2023-29331, CVE-2025-69419, CVE-2025-46817\nhttps://certvde.com/en/advisories/vde-2026-064/\n#CSAF https://mettler-toledo.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-064.json", "creation_timestamp": "2026-06-09T09:46:02.715533Z"}, {"uuid": "ba98e67b-8854-41bf-8a90-ae3857c0dcdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-43487", "type": "seen", "source": "https://infosec.exchange/users/wdormann/statuses/116755475429413960", "content": "I just realized that I'm personally \"credited\" in April's Microsoft Patch Tuesday with a CVE-less \"Defense-in-depth\" update.\nThe vulnerability?CAB files downloaded from the internet do not write the MotW for files extracted from them.\nI reported this to MSRC, and after refusing to generate a screen recording of the exploit (I mean, really?!), they finally acknowledged the problem. However, they went radio silent after that.\nMark of the Web (MotW) evasions have gotten CVEs in the past. If we look in the last 2 years we have: CVE-2024-38213, CVE-2024-38217, CVE-2024-43487, CVE-2025-24061, CVE-2025-27472, CVE-2025-47160, CVE-2025-49740, CVE-2026-20824, CVE-2026-32225, CVE-2026-45595\nSo, why does \"Windows doesn't write MotW for extracted CAB file contents\" get a CVE?  Well, Microsoft is a CNA.  So for the most part they can invent any rules that they'd like to play by.  It could be as simple as \"We're not particularly fond of you\", and as a result, we have a vulnerability with no ID to track it.\nHere's a screen recording of a VM with March's Patch Tuesday level of updates.  When you extract a file from a CAB file, no MotW is written.  And as such, we get no protections that leverage the presence of MotW, such as SmartScreen, Smart Application Control, Office Protected View.  In this case, we have a .URL file in a CAB.  Double clicking on it results in a remote EXE running on your computer with no warning or other prompts.  But, I suppose we all know that URL files are evil and have them blocked.", "creation_timestamp": "2026-06-15T18:12:54.535782Z"}, {"uuid": "579d6182-6fed-41bd-bff8-71bb1d9c18c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-43488", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpy2iivzyc2i", "content": "\ud83d\udccc CVE-2024-43488 - Missing authentication for critical function in Visual Studio Code extension for Arduino allows an unauthenticated attacker to perform remote code exe... https://www.cyberhub.blog/cves/CVE-2024-43488", "creation_timestamp": "2026-07-06T12:07:09.758979Z"}]}