{"vulnerability": "cve-2024-4245", "sightings": [{"uuid": "696766b2-c777-4e81-9872-f4f5eda33312", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-42457", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113592131466152509", "content": "", "creation_timestamp": "2024-12-04T02:12:53.674278Z"}, {"uuid": "c0d6bf94-3d6b-44b9-823b-860de7e06106", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-42453", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113592072421345224", "content": "", "creation_timestamp": "2024-12-04T01:57:53.857224Z"}, {"uuid": "275913da-3bae-4884-9ae4-aeeaf5624772", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-42452", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113592072406685919", "content": "", "creation_timestamp": "2024-12-04T01:57:52.721726Z"}, {"uuid": "b24b1c5d-cd00-41c8-a357-bb2bdee4187b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-42451", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113592013401947604", "content": "", "creation_timestamp": "2024-12-04T01:42:52.485940Z"}, {"uuid": "6cc07fe6-bccb-4f95-85b1-038b3375c73e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-42451", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113590271100041825", "content": "", "creation_timestamp": "2024-12-03T18:19:48.864557Z"}, {"uuid": "75806236-f03d-41fc-905d-03056ec75417", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-42453", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113590271100041825", "content": "", "creation_timestamp": "2024-12-03T18:19:48.940117Z"}, {"uuid": "729f50f2-7d15-476f-b16b-591de9df4dd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-42456", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113590271100041825", "content": "", "creation_timestamp": "2024-12-03T18:19:49.013752Z"}, {"uuid": "85e7d5ae-ecdf-4902-a61d-4b7876e0cf06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-42452", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113590271100041825", "content": "", "creation_timestamp": "2024-12-03T18:19:48.903771Z"}, {"uuid": "9f2abc98-79d6-4867-b307-6e59bcae58f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-42455", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113590271100041825", "content": "", "creation_timestamp": "2024-12-03T18:19:48.977977Z"}, {"uuid": "03d20a3b-74b0-4e1b-87a5-1cba7312e58e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-42457", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113590271100041825", "content": "", "creation_timestamp": "2024-12-03T18:19:49.051903Z"}, {"uuid": "35c95875-f513-46b8-9dce-25c5ee72ab3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-42456", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113592072469119386", "content": "", "creation_timestamp": "2024-12-04T01:57:53.909446Z"}, {"uuid": "3eab0469-c03a-4239-9177-a31e30330fda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-42455", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113592072454409042", "content": "", "creation_timestamp": "2024-12-04T01:57:53.955407Z"}, {"uuid": "2e4eda7a-1b45-4162-9503-6f00a87122c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-42452", "type": "seen", "source": "https://t.me/cvedetector/11933", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-42452 - A vulnerability in Veeam Backup &amp; Replication allo\", \n  \"Content\": \"CVE ID : CVE-2024-42452 \nPublished : Dec. 4, 2024, 2:15 a.m. | 48\u00a0minutes ago \nDescription : A vulnerability in Veeam Backup &amp; Replication allows a low-privileged user to start an agent remotely in server mode and obtain credentials, effectively escalating privileges to system-level access. This allows the attacker to upload files to the server with elevated privileges. The vulnerability exists because remote calls bypass permission checks, leading to full system compromise. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-04T04:12:25.000000Z"}, {"uuid": "d557e03d-2778-4219-862d-b3a376c77b09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-42450", "type": "seen", "source": "https://t.me/CyberBulletin/1557", "content": "\u26a1\ufe0fCVE-2024-42450 (CVSS 10): Versa Networks Addresses Critical Vulnerability in Versa Director.\n\n#CyberBulletin", "creation_timestamp": "2024-11-21T11:23:38.000000Z"}, {"uuid": "c5a16e2e-8ea5-4594-b91f-e3450fd3d727", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-42451", "type": "seen", "source": "https://t.me/cvedetector/11932", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-42451 - A vulnerability in Veeam Backup &amp; Replication allo\", \n  \"Content\": \"CVE ID : CVE-2024-42451 \nPublished : Dec. 4, 2024, 2:15 a.m. | 48\u00a0minutes ago \nDescription : A vulnerability in Veeam Backup &amp; Replication allows low-privileged users to leak all saved credentials in plaintext. This is achieved by calling a series of methods over an external protocol, ultimately retrieving the credentials using a malicious setup on the attacker's side. This exposes sensitive data, which could be used for further attacks, including unauthorized access to systems managed by the platform. \nSeverity: 7.7 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-04T04:12:24.000000Z"}, {"uuid": "007e3a58-d113-4818-b465-02ccdac1ae44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-42459", "type": "seen", "source": "https://t.me/cvedetector/2332", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-42459 - Elliptic EDDSA Signature Malleability\", \n  \"Content\": \"CVE ID : CVE-2024-42459 \nPublished : Aug. 2, 2024, 7:16 a.m. | 30\u00a0minutes ago \nDescription : In the Elliptic package 6.5.6 for Node.js, EDDSA signature malleability occurs because there is a missing signature length check, and thus zero-valued bytes can be removed or appended. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-02T09:50:13.000000Z"}, {"uuid": "070224fd-30bc-4ba1-aa83-55ab89dd1fdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-42455", "type": "seen", "source": "https://t.me/cvedetector/11935", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-42455 - A vulnerability in Veeam Backup &amp; Replication allo\", \n  \"Content\": \"CVE ID : CVE-2024-42455 \nPublished : Dec. 4, 2024, 2:15 a.m. | 48\u00a0minutes ago \nDescription : A vulnerability in Veeam Backup &amp; Replication allows a low-privileged user to connect to remoting services and exploit insecure deserialization by sending a serialized temporary file collection. This exploit allows the attacker to delete any file on the system with service account privileges. The vulnerability is caused by an insufficient blacklist during the deserialization process. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-04T04:12:30.000000Z"}, {"uuid": "b9c90469-2350-499d-814b-672860e9b5fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-42453", "type": "seen", "source": "https://t.me/cvedetector/11934", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-42453 - A vulnerability Veeam Backup &amp; Replication allows\", \n  \"Content\": \"CVE ID : CVE-2024-42453 \nPublished : Dec. 4, 2024, 2:15 a.m. | 48\u00a0minutes ago \nDescription : A vulnerability Veeam Backup &amp; Replication allows low-privileged users to control and modify configurations on connected virtual infrastructure hosts. This includes the ability to power off virtual machines, delete files in storage, and make configuration changes, potentially leading to Denial of Service (DoS) and data integrity issues. The vulnerability is caused by improper permission checks in methods accessed via management services. \nSeverity: 7.4 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-04T04:12:29.000000Z"}, {"uuid": "1a952d50-721c-4b65-8188-5af03baeba7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-42457", "type": "seen", "source": "https://t.me/cvedetector/11925", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-42457 - A vulnerability in Veeam Backup &amp; Replication allo\", \n  \"Content\": \"CVE ID : CVE-2024-42457 \nPublished : Dec. 4, 2024, 2:15 a.m. | 48\u00a0minutes ago \nDescription : A vulnerability in Veeam Backup &amp; Replication allows users with certain operator roles to expose saved credentials by leveraging a combination of methods in a remote management interface. This can be achieved using a session object that allows for credential enumeration and exploitation, leading to the leak of plaintext credentials to a malicious host. The attack is facilitated by improper usage of a method that allows operators to add a new host with an attacker-controlled IP, enabling them to retrieve sensitive credentials in plaintext. \nSeverity: 7.7 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-04T04:12:17.000000Z"}, {"uuid": "fe220203-3aec-4a6a-b15f-078b97f9dcd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-42456", "type": "seen", "source": "https://t.me/cvedetector/11924", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-42456 - A vulnerability in Veeam Backup &amp; Replication plat\", \n  \"Content\": \"CVE ID : CVE-2024-42456 \nPublished : Dec. 4, 2024, 2:15 a.m. | 48\u00a0minutes ago \nDescription : A vulnerability in Veeam Backup &amp; Replication platform allows a low-privileged user with a specific role to exploit a method that updates critical configuration settings, such as modifying the trusted client certificate used for authentication on a specific port. This can result in unauthorized access, enabling the user to call privileged methods and initiate critical services. The issue arises due to insufficient permission requirements on the method, allowing users with low privileges to perform actions that should require higher-level permissions. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-04T04:12:16.000000Z"}, {"uuid": "01173ac5-10cc-4fcb-922a-1e7c0e1e5f5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-42458", "type": "seen", "source": "https://t.me/MrVGunz/1241", "content": "\ud83d\udccd \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc \u062f\u0631 #NeatVNC (#CVE-2024-42458)\n\n\u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u0642\u0628\u0644 \u0627\u0632 0.8.1 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 #VNC_\u0633\u0631\u0648\u0631 neatvnc \u0628\u0647 \u062f\u0644\u06cc\u0644 \u0639\u062f\u0645 \u0627\u0639\u062a\u0628\u0627\u0631\u0633\u0646\u062c\u06cc \u0635\u062d\u06cc\u062d \u067e\u0631\u0648\u062a\u06a9\u0644 \u0627\u0645\u0646\u06cc\u062a\u06cc\u060c \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062c\u062f\u06cc CVE-2024-42458 \u0631\u0646\u062c \u0645\u06cc\u200c\u0628\u0631\u0646\u062f. \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u06a9\u0647 \u0634\u0628\u0627\u0647\u062a\u200c\u0647\u0627\u06cc\u06cc \u0628\u0647 CVE-2006-2369 \u062f\u0627\u0631\u062f\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0645\u0646\u062c\u0631 \u0628\u0647 #\u062f\u0633\u062a\u0631\u0633\u06cc_\u063a\u06cc\u0631\u0645\u062c\u0627\u0632 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0628\u0647 \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc \u0627\u0633\u062a\u0641\u0627\u062f\u0647\u200c\u06a9\u0646\u0646\u062f\u0647 \u0627\u0632 \u0627\u06cc\u0646 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u0634\u0648\u062f.\n\n\u062c\u0632\u0626\u06cc\u0627\u062a \u0641\u0646\u06cc:\n- \u0645\u062d\u0644 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc: \u0641\u0627\u06cc\u0644 #server.c \u062f\u0631 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u0642\u062f\u06cc\u0645\u06cc\u200c\u062a\u0631\n- \u0639\u0644\u062a: \u0639\u062f\u0645 \u0627\u0639\u062a\u0628\u0627\u0631\u0633\u0646\u062c\u06cc \u06a9\u0627\u0641\u06cc \u0646\u0648\u0639 \u0627\u0645\u0646\u06cc\u062a\u06cc\n- \u062a\u0623\u062b\u06cc\u0631: \u062e\u0637\u0631 #\u0627\u062c\u0631\u0627\u06cc_\u06a9\u062f_\u062f\u0644\u062e\u0648\u0627\u0647 \u0645\u0647\u0627\u062c\u0645 \u0648 \u062f\u0633\u062a\u06cc\u0627\u0628\u06cc \u06a9\u0627\u0645\u0644 \u0628\u0647 \u0633\u06cc\u0633\u062a\u0645\n- \u062a\u0627\u0631\u06cc\u062e \u0627\u0646\u062a\u0634\u0627\u0631: 2 \u0627\u0648\u062a 2024\n- \u0622\u062e\u0631\u06cc\u0646 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc\u200c\u0647\u0627: 8 \u0627\u0648\u062a 2024\n\n\u0627\u0642\u062f\u0627\u0645\u0627\u062a \u0636\u0631\u0648\u0631\u06cc:\n- #\u0628\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc_\u0641\u0648\u0631\u06cc: \u062a\u0645\u0627\u0645\u06cc \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 Neat VNC \u0628\u0627\u06cc\u062f \u0628\u0647 \u0646\u0633\u062e\u0647 0.8.1 \u06cc\u0627 \u0628\u0627\u0644\u0627\u062a\u0631 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06a9\u0646\u0646\u062f.\n- \u0628\u0631\u0631\u0633\u06cc \u062a\u063a\u06cc\u06cc\u0631\u0627\u062a \u06a9\u062f: \u0628\u0631\u0627\u06cc \u062f\u0631\u06a9 \u0628\u0647\u062a\u0631 \u0627\u0635\u0644\u0627\u062d\u0627\u062a \u0627\u0639\u0645\u0627\u0644\u200c\u0634\u062f\u0647\u060c \u062a\u063a\u06cc\u06cc\u0631\u0627\u062a \u06a9\u062f \u0631\u0627 \u062f\u0631 \u0645\u062e\u0632\u0646 GitHub \u067e\u0631\u0648\u0698\u0647 \u0628\u0631\u0631\u0633\u06cc \u06a9\u0646\u06cc\u062f.\n- \u062a\u0648\u062c\u0647: \u0628\u0631\u0627\u06cc \u0645\u0634\u0627\u0647\u062f\u0647 \u062a\u0645\u0627\u0645 \u062c\u0632\u0626\u06cc\u0627\u062a \u062f\u0631 \u0635\u0641\u062d\u0647 NVD\u060c \u0641\u0639\u0627\u0644 \u0628\u0648\u062f\u0646 JavaScript \u062f\u0631 \u0645\u0631\u0648\u0631\u06af\u0631 \u0636\u0631\u0648\u0631\u06cc \u0627\u0633\u062a.\n\n\u0646\u062a\u06cc\u062c\u0647\u200c\u06af\u06cc\u0631\u06cc:\n\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc CVE-2024-42458 \u062a\u0647\u062f\u06cc\u062f\u06cc \u062c\u062f\u06cc \u0628\u0631\u0627\u06cc #\u0627\u0645\u0646\u06cc\u062a_\u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc \u0627\u0633\u062a\u0641\u0627\u062f\u0647\u200c\u06a9\u0646\u0646\u062f\u0647 \u0627\u0632 Neat VNC \u0645\u062d\u0633\u0648\u0628 \u0645\u06cc\u200c\u0634\u0648\u062f. \u0628\u0647 \u0647\u0645\u06cc\u0646 \u062f\u0644\u06cc\u0644\u060c \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u0633\u0631\u06cc\u0639 \u0648 \u0627\u0639\u0645\u0627\u0644 \u062a\u063a\u06cc\u06cc\u0631\u0627\u062a \u0627\u0645\u0646\u06cc\u062a\u06cc \u062a\u0648\u0635\u06cc\u0647 \u0627\u06a9\u06cc\u062f \u0645\u06cc\u200c\u0634\u0648\u062f.\n\n\ud83d\udd17 \u062c\u0647\u062a \u0645\u0637\u0627\u0644\u0639\u0647 \u0627\u062f\u0627\u0645\u0647 \u0645\u0642\u0627\u0644\u0647 \u0628\u0647 \u0627\u06cc\u0646 \u0633\u0627\u06cc\u062a \u0645\u0631\u0627\u062c\u0639\u0647 \u06a9\u0646\u06cc\u062f:\n\n\ud83c\udf10 https://nvd.nist.gov/vuln/detail/CVE-2024-42458\n\n\ud83d\udccd Critical Vulnerability in #NeatVNC (#CVE-2024-42458)\n\nVersions prior to 0.8.1 of the #VNC_server software NeatVNC suffer from a serious vulnerability, CVE-2024-42458, due to improper security protocol validation. This vulnerability, similar to CVE-2006-2369, can lead to unauthorized access by attackers to systems using this software.\n\nTechnical Details:\n- Vulnerability Location: #server.c file in older versions\n- Cause: Insufficient validation of security type\n- Impact: Risk of #arbitrary_code_execution by attackers, allowing full system access\n- Release Date: August 2, 2024\n- Last Update: August 8, 2024\n\nNecessary Actions:\n- #Immediate_Update: All Neat VNC users should update to version 0.8.1 or later.\n- Review Code Changes: For a better understanding of the applied fixes, review the code changes in the project's GitHub repository.\n- Note: To view all details on the NVD page, JavaScript must be enabled in your browser.\n\nConclusion:\nThe CVE-2024-42458 vulnerability poses a serious threat to the #security of systems using Neat VNC. Therefore, prompt updating and implementation of security changes are strongly recommended.\n\n\ud83d\udd17 Read the full article here:\n\n\ud83c\udf10 https://nvd.nist.gov/vuln/detail/CVE-2024-42458", "creation_timestamp": "2024-08-08T14:30:36.000000Z"}, {"uuid": "4f9559d8-a4b6-49af-ab1c-a8f1c54dedff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-42458", "type": "seen", "source": "https://t.me/cvedetector/2325", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-42458 - Neat VNC SSL Type Validation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-42458 \nPublished : Aug. 2, 2024, 4:17 a.m. | 33\u00a0minutes ago \nDescription : server.c in Neat VNC (aka neatvnc) before 0.8.1 does not properly validate the security type. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-02T07:19:47.000000Z"}, {"uuid": "2422b5ec-389f-46eb-8057-a6e74271d360", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-42458", "type": "seen", "source": "https://t.me/HackingInsights/9235", "content": "\u200aCVE-2024-42458 (CVSS 9.8) \u2013 New Security Vulnerability in Neat VNC: Urgent Patch Released\n\nhttps://securityonline.info/cve-2024-42458-cvss-9-8-new-security-vulnerability-in-neat-vnc-urgent-patch-released/", "creation_timestamp": "2024-08-10T21:41:30.000000Z"}, {"uuid": "c974f8e6-0fb6-4649-b7db-cf5ee574bff1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-42450", "type": "seen", "source": "https://t.me/CyberBulletin/26535", "content": "\u26a1\ufe0fCVE-2024-42450 (CVSS 10): Versa Networks Addresses Critical Vulnerability in Versa Director.\n\n#CyberBulletin", "creation_timestamp": "2024-11-21T11:23:38.000000Z"}]}