{"vulnerability": "cve-2024-3613", "sightings": [{"uuid": "87956d3e-e9df-4506-970d-84dcf90d02bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-36130", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lkc2pn3ff62v", "content": "", "creation_timestamp": "2025-03-13T21:40:21.556439Z"}, {"uuid": "be9305ec-2f3f-425b-b32e-4a0d9e56b090", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-36137", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3michjcdym62q", "content": "", "creation_timestamp": "2026-03-30T20:05:16.708774Z"}, {"uuid": "631483b7-6c33-4f06-b662-81ab1bc4c211", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-36137", "type": "seen", "source": "https://bsky.app/profile/euvd-bot.bsky.social/post/3mickn6l5p227", "content": "", "creation_timestamp": "2026-03-30T21:01:08.226689Z"}, {"uuid": "ecd97f9d-fa1c-49be-b222-aa1526d65297", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-36131", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1339", "content": "", "creation_timestamp": "2024-07-19T04:00:00.000000Z"}, {"uuid": "9cc97c9f-2a17-412e-ac91-89865bca64e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-36132", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1339", "content": "", "creation_timestamp": "2024-07-19T04:00:00.000000Z"}, {"uuid": "ab751204-b0e3-4a0b-9ef6-4e8cb7497575", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-36130", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1339", "content": "", "creation_timestamp": "2024-07-19T04:00:00.000000Z"}, {"uuid": "5a212934-abd1-440f-bfd0-4c33c2528e2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-36137", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14200", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-36137\n\ud83d\udd25 CVSS Score: 3.3 (cvssV3_0, Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: A vulnerability has been identified in Node.js, affecting users of the experimental permission model when the --allow-fs-write flag is used.\n\nNode.js Permission Model do not operate on file descriptors, however, operations such as fs.fchown or fs.fchmod can use a \"read-only\" file descriptor to change the owner and permissions of a file.\n\ud83d\udccf Published: 2024-09-07T16:00:35.999Z\n\ud83d\udccf Modified: 2025-04-30T22:25:18.074Z\n\ud83d\udd17 References:\n1. https://nodejs.org/en/blog/vulnerability/july-2024-security-releases", "creation_timestamp": "2025-04-30T23:14:44.000000Z"}, {"uuid": "3e8d8034-117a-4d7f-a297-7e0c300a56b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-36138", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14199", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-36138\n\ud83d\udd25 CVSS Score: 8.1 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Bypass incomplete fix of CVE-2024-27980, that arises from improper handling of batch files with all possible extensions on Windows via child_process.spawn / child_process.spawnSync. A malicious command line argument can inject arbitrary commands and achieve code execution even if the shell option is not enabled.\n\ud83d\udccf Published: 2024-09-07T16:00:36.011Z\n\ud83d\udccf Modified: 2025-04-30T22:25:18.920Z\n\ud83d\udd17 References:\n1. https://nodejs.org/en/blog/vulnerability/july-2024-security-releases", "creation_timestamp": "2025-04-30T23:14:43.000000Z"}, {"uuid": "1147bf49-9524-40a9-8805-3b3f5c6d8a0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-36138", "type": "seen", "source": "https://t.me/cvedetector/5029", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-36138 - Microsoft Windows Child Process Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-36138 \nPublished : Sept. 7, 2024, 4:15 p.m. | 42\u00a0minutes ago \nDescription : Bypass incomplete fix of CVE-2024-27980, that arises from improper handling of batch files with all possible extensions on Windows via child_process.spawn / child_process.spawnSync. A malicious command line argument can inject arbitrary commands and achieve code execution even if the shell option is not enabled. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-07T19:20:31.000000Z"}, {"uuid": "94f494c7-6d5f-4c4f-beab-25beb7e53949", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-36137", "type": "seen", "source": "https://t.me/cvedetector/5031", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-36137 - Node.js FS Write Flag Experimental Permission Model Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-36137 \nPublished : Sept. 7, 2024, 4:15 p.m. | 42\u00a0minutes ago \nDescription : A vulnerability has been identified in Node.js, affecting users of the experimental permission model when the --allow-fs-write flag is used.  \n  \nNode.js Permission Model do not operate on file descriptors, however, operations such as fs.fchown or fs.fchmod can use a \"read-only\" file descriptor to change the owner and permissions of a file. \nSeverity: 3.3 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-07T19:20:32.000000Z"}, {"uuid": "8b70ead2-bc70-4093-bab3-8708782c4350", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-36136", "type": "seen", "source": "https://t.me/cvedetector/3096", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-36136 - Ivanti Avalanche Off-by-One Error Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2024-36136 \nPublished : Aug. 14, 2024, 3:15 a.m. | 22\u00a0minutes ago \nDescription : An off-by-one error in WLInfoRailService in Ivanti Avalanche 6.3.1 allows a remote unauthenticated attacker to crash the service, resulting in a DoS. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-14T05:40:27.000000Z"}, {"uuid": "8f3eeb2c-2a56-40eb-8ec0-a9ff6eca2bed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-36130", "type": "seen", "source": "https://t.me/cvedetector/2670", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-36130 - VMware EPMM Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-36130 \nPublished : Aug. 7, 2024, 4:17 a.m. | 36\u00a0minutes ago \nDescription : An insufficient authorization vulnerability in web component of EPMM prior to 12.1.0.1 allows an unauthorized attacker within the network to execute arbitrary commands on the underlying operating system of the appliance. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-07T06:56:18.000000Z"}, {"uuid": "7f24a2a3-e4b1-42bb-bacc-627346035387", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-36132", "type": "seen", "source": "https://t.me/cvedetector/2669", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-36132 - VMware EPMM Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-36132 \nPublished : Aug. 7, 2024, 4:17 a.m. | 36\u00a0minutes ago \nDescription : Insufficient verification of authentication controls in EPMM prior to 12.1.0.1 allows a remote attacker to bypass authentication and access sensitive resources. \nSeverity: 8.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-07T06:56:17.000000Z"}, {"uuid": "4bdde3b4-d230-439f-9ec0-546b3c403a76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-36131", "type": "seen", "source": "https://t.me/cvedetector/2667", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-36131 - Apache EPMM Deserialization Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-36131 \nPublished : Aug. 7, 2024, 4:17 a.m. | 36\u00a0minutes ago \nDescription : An insecure deserialization vulnerability in web component of EPMM prior to 12.1.0.1 allows an authenticated remote attacker to execute arbitrary commands on the underlying operating system of the appliance. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-07T06:56:15.000000Z"}, {"uuid": "2b2071d4-56bb-45c6-935a-1cc4d76dbf1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-36138", "type": "published-proof-of-concept", "source": "https://t.me/HackingInsights/5331", "content": "\u200aCVE-2024-36138: High-Severity Vulnerability in Node.js Allows Code Execution on Windows\n\nhttps://securityonline.info/cve-2024-36138-high-severity-vulnerability-in-node-js-allows-code-execution-on-windows/", "creation_timestamp": "2024-07-09T10:08:51.000000Z"}]}