{"vulnerability": "cve-2024-3343", "sightings": [{"uuid": "3d7db450-2cb4-4a4f-8b49-ed8090fff636", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-33439", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113516778892421525", "content": "", "creation_timestamp": "2024-11-20T18:49:45.656851Z"}, {"uuid": "d8c7bc36-e571-46ae-8afd-7f6dac899213", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-33434", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3miz6wtwx3g2p", "content": "", "creation_timestamp": "2026-04-08T21:03:04.109247Z"}, {"uuid": "08d43a3d-477c-4a97-ae78-4533890277c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-33438", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7163", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCubeCart <= 6.5.4 is vulnerable to an arbitrary file upload that leads to remote code execution (RCE).\nURL\uff1ahttps://github.com/julio-cfa/CVE-2024-33438\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-04-24T16:33:49.000000Z"}, {"uuid": "e72a8540-a603-4007-986c-0879e7a40b80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-33436", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7603", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-33436\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in CSS Exfil Protection v.1.1.0 allows a remote attacker to obtain sensitive information due to missing support for CSS variables\n\ud83d\udccf Published: 2024-04-30T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-14T17:31:58.811Z\n\ud83d\udd17 References:\n1. https://github.com/mlgualtieri/CSS-Exfil-Protection/issues/41\n2. https://github.com/randshell/vulnerability-research/tree/main/CVE-2024-33436", "creation_timestamp": "2025-03-14T17:48:46.000000Z"}, {"uuid": "30bfc0fb-cd1b-4374-beaf-35d146e3fdcc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-33439", "type": "seen", "source": "https://t.me/cvedetector/11654", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-33439 - Kasda LinkSmart Router OS Command Injection\", \n  \"Content\": \"CVE ID : CVE-2024-33439 \nPublished : Nov. 20, 2024, 7:15 p.m. | 35\u00a0minutes ago \nDescription : An issue in Kasda LinkSmart Router KW5515 v1.7 and before allows an authenticated remote attacker to execute arbitrary OS commands via cgi parameters. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-20T21:16:55.000000Z"}, {"uuid": "ff9ddd02-4817-4f42-b622-85c90df6050c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-33438", "type": "published-proof-of-concept", "source": "Telegram/Y6YhWWM6wSycucdpzi76AX4nxS_SF6-PLv3DnxvbRhHpVA", "content": "", "creation_timestamp": "2024-04-25T16:45:33.000000Z"}, {"uuid": "e663a647-846e-48e5-b16c-865e5a0a515b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-33438", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/2377", "content": "https://github.com/julio-cfa/CVE-2024-33438\n\nCubeCart <= 6.5.4 is vulnerable to an arbitrary file upload that leads to remote code execution (RCE).\n#github #poc", "creation_timestamp": "2024-07-27T09:02:00.000000Z"}]}