{"vulnerability": "cve-2024-3673", "sightings": [{"uuid": "44f75d1c-c569-42fc-94c0-bacd0e085cba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-36735", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9186", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-36735\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: OneFlow-Inc. Oneflow v0.9.1 does not display an error or warning when the oneflow.eye parameter is floating.\n\ud83d\udccf Published: 2024-06-06T18:41:19.132Z\n\ud83d\udccf Modified: 2025-03-27T19:06:18.956Z\n\ud83d\udd17 References:\n1. https://gist.github.com/Redmept1on/4998e9b6435448cea07a8b2dbf96eedc", "creation_timestamp": "2025-03-27T19:26:59.000000Z"}, {"uuid": "8d480ce3-a555-4767-be59-10080f3624ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-3673", "type": "seen", "source": "https://t.me/cvedetector/4502", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-3673 - \"Apache Web Directory Free WordPress LFI Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-3673 \nPublished : Aug. 30, 2024, 6:15 a.m. | 41\u00a0minutes ago \nDescription : The Web Directory Free WordPress plugin before 1.7.3 does not validate a parameter before using it in an include(), which could lead to Local File Inclusion issues. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-30T08:57:50.000000Z"}, {"uuid": "3413796a-4e43-4e86-97b4-a27d395727a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-3673", "type": "published-proof-of-concept", "source": "Telegram/sU-jNaPMtLGhQJIUlK_Y1eVeodJiHQnKe9p9PX30oKjDADc", "content": "", "creation_timestamp": "2025-01-29T12:30:50.000000Z"}, {"uuid": "dc419f64-9d74-4709-a454-85761d7b68d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-3673", "type": "published-proof-of-concept", "source": "Telegram/hjx4rs6g_Td9kyDvFblZ1T_EL9AVexPKDlB_M89JkK7cIak", "content": "", "creation_timestamp": "2025-01-25T04:00:08.000000Z"}, {"uuid": "0e8f6f0b-3028-4aa6-8761-6f753e6d5b5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-3673", "type": "seen", "source": "https://t.me/hacking_Attack/150163", "content": "Web Directory Free Plugin <= 1.7.2: Unauthenticated LFI Exploit (CVE-2024-3673)\n\nWrite-up CVE-2024-3673: Unauthenticated LFI in Web Directory Free Wordpress Plugin.Continue reading on Medium \u00bb\nRead more...", "creation_timestamp": "2026-09-01T20:00:27.245690Z"}, {"uuid": "7be14b47-3229-4d48-a9a4-1186eaae6988", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-3673", "type": "seen", "source": "https://t.me/hacking_Attack/150172", "content": "Web Directory Free Plugin <= 1.7.2: Unauthenticated LFI Exploit (CVE-2024-3673)\nhttps://bashoverflow.medium.com/web-directory-free-plugin-1-7-2-unauthenticated-lfi-exploit-cve-2024-3673-f3721f79477d?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-01T20:00:27.027082Z"}, {"uuid": "37f958a0-1deb-4368-a11b-deddda8e7e35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-3673", "type": "seen", "source": "https://t.me/hacking_Attack/150174", "content": "[Write-up] CVE-2024-3673: Unauthenticated LFI in Web Directory Free Wordpress Plugin.Continue reading on Medium \u00bb (https://bashoverflow.medium.com/web-directory-free-plugin-1-7-2-unauthenticated-lfi-exploit-cve-2024-3673-f3721f79477d?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-01T20:00:27.067628Z"}, {"uuid": "5a48953d-d559-4f83-add2-5d142b00b0d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-3673", "type": "seen", "source": "https://t.me/hacking_Attack/150163", "content": "Web Directory Free Plugin <= 1.7.2: Unauthenticated LFI Exploit (CVE-2024-3673)\n\nWrite-up CVE-2024-3673: Unauthenticated LFI in Web Directory Free Wordpress Plugin.Continue reading on Medium \u00bb\nRead more...", "creation_timestamp": "2026-09-02T01:00:45.499055Z"}, {"uuid": "6ad23407-d8b6-4d73-8ebc-8325c9eb58bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-3673", "type": "seen", "source": "https://t.me/hacking_Attack/150174", "content": "[Write-up] CVE-2024-3673: Unauthenticated LFI in Web Directory Free Wordpress Plugin.Continue reading on Medium \u00bb (https://bashoverflow.medium.com/web-directory-free-plugin-1-7-2-unauthenticated-lfi-exploit-cve-2024-3673-f3721f79477d?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-02T01:00:45.284851Z"}, {"uuid": "ded37825-2352-444b-b93a-ba440ec834c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-3673", "type": "seen", "source": "https://t.me/hacking_Attack/150172", "content": "Web Directory Free Plugin <= 1.7.2: Unauthenticated LFI Exploit (CVE-2024-3673)\nhttps://bashoverflow.medium.com/web-directory-free-plugin-1-7-2-unauthenticated-lfi-exploit-cve-2024-3673-f3721f79477d?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-02T01:00:45.228948Z"}]}