{"vulnerability": "cve-2024-4885", "sightings": [{"uuid": "feb76aa4-dc20-47f3-92aa-bd7a9da3fff9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48859", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113606852952938161", "content": "", "creation_timestamp": "2024-12-06T16:36:45.783910Z"}, {"uuid": "485edcae-75cf-4dfc-8180-374c4ad2ef73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48854", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpxlxod4d2h", "content": "", "creation_timestamp": "2025-01-14T19:15:55.544843Z"}, {"uuid": "d504ddd0-8fa2-463d-9688-de2d50838df4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48855", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpxlzxtha2b", "content": "", "creation_timestamp": "2025-01-14T19:15:57.996870Z"}, {"uuid": "d030a38b-2998-4dbb-8128-d29d87ad2d86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48857", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpxm7vclr2n", "content": "", "creation_timestamp": "2025-01-14T19:16:04.055935Z"}, {"uuid": "bf8d7e52-9cf3-45fd-9230-4a4929e3f206", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48856", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpxm4727j2f", "content": "", "creation_timestamp": "2025-01-14T19:16:00.161907Z"}, {"uuid": "3733903e-7ee8-4afd-870d-8a80fb7468f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48856", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/113828360052318580", "content": "", "creation_timestamp": "2025-01-14T19:28:56.365234Z"}, {"uuid": "2187c99c-7b01-48bb-8b5f-a171282d6b66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48854", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/113828360052318580", "content": "", "creation_timestamp": "2025-01-14T19:28:56.405410Z"}, {"uuid": "d4a0aeb9-9f24-4f15-a302-fbfab299c4b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48855", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/113828360052318580", "content": "", "creation_timestamp": "2025-01-14T19:28:56.440169Z"}, {"uuid": "6c0d26bf-8867-4ba7-833a-933c1146fb2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48857", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/113828360052318580", "content": "", "creation_timestamp": "2025-01-14T19:28:56.474259Z"}, {"uuid": "1dff40eb-0d99-4053-854e-49d607ee0c98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48858", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/113828360052318580", "content": "", "creation_timestamp": "2025-01-14T19:28:56.511553Z"}, {"uuid": "4831d095-2aad-41db-996d-efd7d6141435", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48856", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113828437956667256", "content": "", "creation_timestamp": "2025-01-14T19:48:44.658787Z"}, {"uuid": "f28193ca-2ca4-4ad9-bb4d-a76e239854fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48858", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfq2x2vup32e", "content": "", "creation_timestamp": "2025-01-14T20:15:49.420902Z"}, {"uuid": "f37d7434-f141-4cf4-8a25-8672c3faf0c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48852", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgw3xdq7pz2g", "content": "", "creation_timestamp": "2025-01-29T23:15:05.134086Z"}, {"uuid": "a3caa899-3d67-45ff-ba1a-d87f29026a89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4885", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-07)", "content": "", "creation_timestamp": "2024-12-07T00:00:00.000000Z"}, {"uuid": "001f24f1-0486-4479-8a49-0444998ea97b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48852", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113913186573736765", "content": "", "creation_timestamp": "2025-01-29T19:01:25.821839Z"}, {"uuid": "b88c8452-8eb3-48b0-8091-8c2c534363cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48852", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgvolhve4v2p", "content": "", "creation_timestamp": "2025-01-29T19:15:45.816682Z"}, {"uuid": "7e8b1024-a653-4de2-a349-65d9999e0496", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48852", "type": "seen", "source": "https://bsky.app/profile/gothburz.bsky.social/post/3lgsrp3sorh23", "content": "", "creation_timestamp": "2025-01-28T15:33:29.179133Z"}, {"uuid": "9c5f83be-32e1-4837-a0c5-581978cef846", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48852", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113913606635491180", "content": "", "creation_timestamp": "2025-01-29T20:48:43.354342Z"}, {"uuid": "3b91ac82-ca09-4d74-9121-e4e66c206bf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48852", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lgxp7vphef22", "content": "", "creation_timestamp": "2025-01-30T14:32:30.822568Z"}, {"uuid": "908e5dae-3be3-4cda-b3d3-df1af933679a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4885", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/3472168", "content": "", "creation_timestamp": "2025-03-03T15:58:12.739202Z"}, {"uuid": "a3fc5b55-973d-4a7e-81fe-52294dfd0d53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4885", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-03-03T18:10:04.000000Z"}, {"uuid": "49dac62e-2e27-4fd4-8d22-35fdfca104de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4885", "type": "seen", "source": "https://bsky.app/profile/nihonmatsu.bsky.social/post/3ljnfrdwpgs2i", "content": "", "creation_timestamp": "2025-03-05T16:32:20.332119Z"}, {"uuid": "f24cb521-f15c-45ac-bc51-890a3dc70bdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48852", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-051-02", "content": "", "creation_timestamp": "2025-02-20T11:00:00.000000Z"}, {"uuid": "a29892de-1568-4933-bfb4-8d267ec2b4d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4885", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3ljjiqoibmk2j", "content": "", "creation_timestamp": "2025-03-04T03:14:57.554738Z"}, {"uuid": "a3081ac9-fa99-49d9-8fa2-0189955ceb74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4885", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3ljleerdxzw2q", "content": "", "creation_timestamp": "2025-03-04T21:02:05.300559Z"}, {"uuid": "a15012dd-6f38-41c4-86cc-116c2367f694", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4885", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-03-06T04:40:22.000000Z"}, {"uuid": "9ad56807-d8e1-45d8-9c5b-3c2efa56e9b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4885", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-15)", "content": "", "creation_timestamp": "2025-05-15T00:00:00.000000Z"}, {"uuid": "4ad57c8c-8a33-406e-b098-95499e9c4cfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48852", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lmngl3lp4t2u", "content": "", "creation_timestamp": "2025-04-12T21:02:21.341136Z"}, {"uuid": "ccfad03f-e570-4898-a88c-d6fdb1f11c20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4885", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-26)", "content": "", "creation_timestamp": "2025-06-26T00:00:00.000000Z"}, {"uuid": "8bbdae24-2694-4822-b874-4cf527e04a91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4885", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-05)", "content": "", "creation_timestamp": "2025-10-05T00:00:00.000000Z"}, {"uuid": "2c773a1c-1837-475d-85e4-2bc56d29caa0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4885", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-10)", "content": "", "creation_timestamp": "2025-11-10T00:00:00.000000Z"}, {"uuid": "f7a9db12-5482-42f1-a141-32adbbaba32b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48851", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lz4gzk45vb2a", "content": "", "creation_timestamp": "2025-09-18T13:22:34.957390Z"}, {"uuid": "5b7e61a6-6854-4429-9d92-af6e9b0798c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48851", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-310-03", "content": "", "creation_timestamp": "2025-11-06T11:00:00.000000Z"}, {"uuid": "f31ca280-9350-4278-991c-20efd4d504d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4885", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-27)", "content": "", "creation_timestamp": "2026-02-27T00:00:00.000000Z"}, {"uuid": "b86d6cc3-5f71-4673-b519-0bdf57cb408f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-4885", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/aef35cd6-09c1-46ef-acbc-65df705001b1", "content": "", "creation_timestamp": "2026-02-02T12:26:09.326444Z"}, {"uuid": "b9833d76-95bf-4dda-abdf-1970bbf2a937", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48855", "type": "seen", "source": "https://t.me/cvedetector/15350", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-48855 - QNX SDP TIFF Image Codec Out-of-bounds Read Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-48855 \nPublished : Jan. 14, 2025, 7:15 p.m. | 26\u00a0minutes ago \nDescription : Out-of-bounds read in the TIFF image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause an information disclosure in the context of the process using the image codec. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-14T20:42:28.000000Z"}, {"uuid": "6a54db86-3852-4b30-a58d-b59e51fb506c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48854", "type": "seen", "source": "https://t.me/cvedetector/15349", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-48854 - QNX TIFF Image Codec Off-by-One Image Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-48854 \nPublished : Jan. 14, 2025, 7:15 p.m. | 26\u00a0minutes ago \nDescription : Off-by-one error in the TIFF image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause an information disclosure in the context of the process using the image codec. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-14T20:42:27.000000Z"}, {"uuid": "540d41b5-8aa8-4007-aaad-d05d434150b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48856", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1568", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-48856\n\ud83d\udd39 Description: Out-of-bounds write in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause a denial-of-service condition or execute code in the context of the process using the image codec.\n\ud83d\udccf Published: 2025-01-14T19:03:33.883Z\n\ud83d\udccf Modified: 2025-01-14T19:03:33.883Z\n\ud83d\udd17 References:\n1. https://support.blackberry.com/pkb/s/article/140334", "creation_timestamp": "2025-01-14T19:09:39.000000Z"}, {"uuid": "8a70c4b5-a612-435e-a293-79f0c218325b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48857", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1565", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-48857\n\ud83d\udd39 Description: NULL pointer dereference in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause a denial-of-service condition in the context of the process using the image codec.\n\ud83d\udccf Published: 2025-01-14T19:06:38.040Z\n\ud83d\udccf Modified: 2025-01-14T19:06:38.040Z\n\ud83d\udd17 References:\n1. https://support.blackberry.com/pkb/s/article/140334", "creation_timestamp": "2025-01-14T19:09:28.000000Z"}, {"uuid": "689ca5b2-5655-4eda-972f-5b4ff4713853", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48855", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1570", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-48855\n\ud83d\udd39 Description: Out-of-bounds read in the TIFF image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause an information disclosure in the context of the process using the image codec.\n\ud83d\udccf Published: 2025-01-14T18:59:25.736Z\n\ud83d\udccf Modified: 2025-01-14T18:59:25.736Z\n\ud83d\udd17 References:\n1. https://support.blackberry.com/pkb/s/article/140334", "creation_timestamp": "2025-01-14T19:09:50.000000Z"}, {"uuid": "f87586a8-1992-4166-a191-93a939774168", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48854", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1578", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-48854\n\ud83d\udd39 Description: Off-by-one error in the TIFF image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause an information disclosure in the context of the process using the image codec.\n\ud83d\udccf Published: 2025-01-14T18:53:25.936Z\n\ud83d\udccf Modified: 2025-01-14T18:53:25.936Z\n\ud83d\udd17 References:\n1. https://support.blackberry.com/pkb/s/article/140334", "creation_timestamp": "2025-01-14T19:10:28.000000Z"}, {"uuid": "f166f3fc-1255-44f9-b26d-d5d99f466f8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4885", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6283", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-4885\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: In WhatsUp Gold versions released before 2023.1.3,\u00a0an unauthenticated Remote Code Execution vulnerability in Progress WhatsUpGold.\u00a0\u00a0The \n\nWhatsUp.ExportUtilities.Export.GetFileWithoutZip\n\n\n\n allows execution of commands with iisapppool\\nmconsole privileges.\n\ud83d\udccf Published: 2024-06-25T19:48:15.268Z\n\ud83d\udccf Modified: 2025-03-03T20:14:13.636Z\n\ud83d\udd17 References:\n1. https://www.progress.com/network-monitoring\n2. https://community.progress.com/s/article/WhatsUp-Gold-Security-Bulletin-June-2024", "creation_timestamp": "2025-03-03T20:30:49.000000Z"}, {"uuid": "83f991e7-25cd-4916-a741-79a19ac7346b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48850", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17340", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-48850\n\ud83d\udd25 CVSS Score: 7.5 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/R:U/V:C)\n\ud83d\udd39 Description: Absolute File Traversal vulnerabilities in ASPECT allows access and modification of unintended resources.\nThis issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through 3.08.03.\n\ud83d\udccf Published: 2025-05-22T16:45:45.409Z\n\ud83d\udccf Modified: 2025-05-22T17:30:39.471Z\n\ud83d\udd17 References:\n1. https://search.abb.com/library/Download.aspx?DocumentID=9AKK108471A0021&amp;LanguageCode=en&amp;DocumentPartId=pdf&amp;Action=Launch", "creation_timestamp": "2025-05-22T17:43:44.000000Z"}, {"uuid": "8def39c3-7147-4afb-9b10-85d1c6ae665a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48852", "type": "seen", "source": "https://t.me/cvedetector/16699", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-48852 - FLEXON Log File Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-48852 \nPublished : Jan. 29, 2025, 7:15 p.m. | 1\u00a0hour, 7\u00a0minutes ago \nDescription : Insertion of Sensitive Information into Log File vulnerability observed in FLEXON. Some information may be improperly disclosed through https access.  \n   \n  \nThis issue affects FLXEON through &lt;=\nSeverity: 9.4 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-29T21:32:23.000000Z"}, {"uuid": "f162d906-11ea-418e-8cdf-b9f7b9c16a84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48858", "type": "seen", "source": "https://t.me/cvedetector/15367", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-48858 - QNX SSD Denial of Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-48858 \nPublished : Jan. 14, 2025, 8:15 p.m. | 37\u00a0minutes ago \nDescription : Improper input validation in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause a denial-of-service condition in the context of the process using the image codec. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-14T22:23:00.000000Z"}, {"uuid": "07324a8e-c973-496b-983f-40d03c6df3fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4885", "type": "published-proof-of-concept", "source": "https://t.me/realLulzSec/12133", "content": "https://github.com/sinsinology/CVE-2024-4885\n\nPoC for CVE-2024-4885 Progress WhatsUp Gold GetFileWithoutZip Unauthenticated Remote Code Execution\n#github  #poc", "creation_timestamp": "2024-07-09T21:15:21.000000Z"}, {"uuid": "5aeb28d3-b354-4a56-8350-3af9b108df48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4885", "type": "published-proof-of-concept", "source": "https://t.me/realLulzSec/12033", "content": "https://github.com/sinsinology/CVE-2024-4885\n\nhttps://summoning.team/blog/progress-whatsup-gold-rce-cve-2024-4885/\n\nWhatsUp Gold Pre-Auth RCE GetFileWithoutZip Primitive\nCVE-2024-4885", "creation_timestamp": "2024-07-08T18:42:49.000000Z"}, {"uuid": "b4902146-1691-4ccc-9637-82a29bbbdb8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48859", "type": "seen", "source": "https://t.me/cvedetector/12259", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-48859 - An improper authentication vulnerability has been\", \n  \"Content\": \"CVE ID : CVE-2024-48859 \nPublished : Dec. 6, 2024, 5:15 p.m. | 35\u00a0minutes ago \nDescription : An improper authentication vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers to compromise the security of the system.  \n  \nWe have already fixed the vulnerability in the following versions:  \nQTS 5.1.9.2954 build 20241120 and later  \nQTS 5.2.2.2950 build 20241114 and later  \nQuTS hero h5.1.9.2954 build 20241120 and later  \nQuTS hero h5.2.2.2952 build 20241116 and later \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-06T18:58:32.000000Z"}, {"uuid": "02329887-e1d1-4549-9c72-c1c768bd963c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4885", "type": "exploited", "source": "Telegram/zvA9mxiL6w9Olhtrl4qEfzXVUJenrhbynzhr-SNhe3DaBg", "content": "", "creation_timestamp": "2024-08-08T09:21:30.000000Z"}, {"uuid": "a4041603-8d83-4da2-809d-27e9d9fbe800", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4885", "type": "published-proof-of-concept", "source": "https://t.me/realLulzSec/1198", "content": "https://github.com/sinsinology/CVE-2024-4885\n\nhttps://summoning.team/blog/progress-whatsup-gold-rce-cve-2024-4885/\n\nWhatsUp Gold Pre-Auth RCE GetFileWithoutZip Primitive\nCVE-2024-4885", "creation_timestamp": "2024-07-08T18:42:49.000000Z"}, {"uuid": "9d65b7a6-dff1-4a41-9050-2cb65d2b5f2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4885", "type": "published-proof-of-concept", "source": "https://t.me/realLulzSec/1202", "content": "https://github.com/sinsinology/CVE-2024-4885\n\nPoC for CVE-2024-4885 Progress WhatsUp Gold GetFileWithoutZip Unauthenticated Remote Code Execution\n#github  #poc", "creation_timestamp": "2024-07-09T21:15:21.000000Z"}, {"uuid": "f26e6303-4e1f-43c4-a192-aff79e2e5670", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4885", "type": "published-proof-of-concept", "source": "Telegram/E0K4SacbBo7vvN_grN7HUJjKIuPNHN1egbc3qXVTBTE2Hg", "content": "", "creation_timestamp": "2024-07-11T07:55:58.000000Z"}, {"uuid": "f5970ca2-ec6d-40aa-89ae-48f341514b02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4885", "type": "exploited", "source": "https://t.me/tengkorakcybercrewz/17245", "content": "The Hacker News\nCritical Security Flaw in WhatsUp Gold Under Active Attack - Patch Now\n\nA critical security flaw impacting Progress Software WhatsUp Gold is seeing active exploitation attempts, making it essential that users move quickly to apply the latest.\nThe vulnerability in question is CVE-2024-4885 (CVSS score: 9.8), an unauthenticated remote code execution bug impacting versions of the network monitoring application released before 2023.1.3.\n\"The", "creation_timestamp": "2024-08-08T09:21:31.000000Z"}, {"uuid": "d37b6a8a-c035-49f6-8d5b-334e2fbf7103", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4885", "type": "published-proof-of-concept", "source": "https://t.me/SouthSumatraCyberTeamSSCT/800", "content": "https://github.com/sinsinology/CVE-2024-4885\n\nhttps://summoning.team/blog/progress-whatsup-gold-rce-cve-2024-4885/\n\nWhatsUp Gold Pre-Auth RCE GetFileWithoutZip Primitive\nCVE-2024-4885", "creation_timestamp": "2024-07-09T00:58:46.000000Z"}, {"uuid": "24440a7f-fc38-4b1e-8974-caeea7884f23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4885", "type": "exploited", "source": "Telegram/ig3mk0mX2RqfN7z3-jznsaNAylNbMPY5OpS0fe2_ouUyfg", "content": "", "creation_timestamp": "2024-08-08T08:34:10.000000Z"}, {"uuid": "91ca6f70-76fc-4a0e-b261-0d3d4d93fe7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4885", "type": "published-proof-of-concept", "source": "Telegram/FUryBaeTd16I_Z_BI23kcNzYjlRgHXorESHpEaaZvMk8bEI", "content": "", "creation_timestamp": "2024-07-11T04:35:45.000000Z"}, {"uuid": "cabc2484-b708-462a-8ce0-3468e6064999", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4885", "type": "published-proof-of-concept", "source": "Telegram/yyHU4AmcuvzMH7Mr_Iyg6WOXfkLoQk9lbnAqVqjqphJYHjY", "content": "", "creation_timestamp": "2024-08-09T09:36:15.000000Z"}, {"uuid": "a1fa7619-8dac-43b4-b4e1-415d4f1cce53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4885", "type": "exploited", "source": "https://t.me/tengkorakcybercrewz/3383", "content": "The Hacker News\nCritical Security Flaw in WhatsUp Gold Under Active Attack - Patch Now\n\nA critical security flaw impacting Progress Software WhatsUp Gold is seeing active exploitation attempts, making it essential that users move quickly to apply the latest.\nThe vulnerability in question is CVE-2024-4885 (CVSS score: 9.8), an unauthenticated remote code execution bug impacting versions of the network monitoring application released before 2023.1.3.\n\"The", "creation_timestamp": "2024-08-08T09:21:31.000000Z"}, {"uuid": "7cbf22ea-e6c5-463e-93ab-977fb3659b9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4885", "type": "exploited", "source": "https://t.me/KomunitiSiber/2368", "content": "Critical Security Flaw in WhatsUp Gold Under Active Attack - Patch Now\nhttps://thehackernews.com/2024/08/critical-security-flaw-in-whatsup-gold.html\n\nA critical security flaw impacting Progress Software WhatsUp Gold is seeing active exploitation attempts, making it essential that users move quickly to apply the latest.\nThe vulnerability in question is CVE-2024-4885 (CVSS score: 9.8), an unauthenticated remote code execution bug impacting versions of the network monitoring application released before 2023.1.3.\n\"The", "creation_timestamp": "2024-08-08T12:02:46.000000Z"}, {"uuid": "10302d7b-a58e-4ba9-8f56-a954603d37a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4885", "type": "published-proof-of-concept", "source": "Telegram/pAhChO9CuHFdbSib_WxE7CILDZQiorOLN-cRrdUQx_hBETw", "content": "", "creation_timestamp": "2024-08-30T16:08:05.000000Z"}, {"uuid": "0a0cd17a-5d52-4656-82bf-86a56b977a68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4885", "type": "seen", "source": "https://t.me/cyberden_team/507", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 WhatsUp Gold: \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432\n\n\ud83d\udda5 \u0412 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 WhatsUp Gold \u043e\u0442 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Progress \u0431\u044b\u043b\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\ud83d\udcca \u041e\u0431\u043e\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u0430\u044f \u043a\u0430\u043a CVE-2024-4885, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c.\n\n\ud83e\udee1 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Progress \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u043e\u0442\u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u043d\u0430 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0435\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443.  \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c #\u0434\u0430\u043d\u043d\u044b\u0435\u0432\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 #WhatsUpGold\n\n@ZerodayAlert", "creation_timestamp": "2024-07-10T20:19:38.000000Z"}, {"uuid": "962c15fc-58eb-4ae4-aba6-c4e6c12a1815", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4885", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/6078", "content": "\u0412 \u0434\u043e\u0433\u043e\u043d\u043a\u0443 \u043a Cisco, \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u0438 \u0440\u044f\u0434 \u0434\u0440\u0443\u0433\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Claroty \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438  \u0434\u0432\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 \u041f\u041b\u041a \u0438\u0437\u0440\u0430\u0438\u043b\u044c\u0441\u043a\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Unitronics, \u0442\u043e\u0439 \u0441\u0430\u043c\u043e\u0439, \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u0433\u043e\u0434\u0443 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0438\u0440\u0430\u043d\u0441\u043a\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 Cyber Av3ngers. \u041e\u0431\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0431\u044b\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b.\n\nJenkins \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0434\u0432\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043f\u0440\u043e\u0435\u043a\u0442\u0430.\n\n\u0422\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b Progress, \u043d\u0430 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u0434\u043e\u0441\u0442\u0430\u043b\u043e\u0441\u044c \u0440\u0435\u0448\u0435\u043d\u0438\u044e \u0434\u043b\u044f \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0441\u0435\u0442\u0438 WhatsUp Gold.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Shadowserver Foundation, \u0430\u0442\u0430\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438\u0441\u044c \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u0430\u0432\u0433\u0443\u0441\u0442\u0430 \u0438 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u044b \u043d\u0430 \u043e\u0448\u0438\u0431\u043a\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0434\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (CVE-2024-4885), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u0438\u044e\u043d\u044f. \n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0438 PoC \u0431\u044b\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0441 \u043d\u0430\u0447\u0430\u043b\u0430 \u0438\u044e\u043b\u044f.\n\n1Password \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 CVE-2024-42219 \u0432 \u0441\u0432\u043e\u0435\u043c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 \u0434\u043b\u044f macOS, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c \u0432\u044b\u0434\u0430\u0432\u0430\u0442\u044c \u0441\u0435\u0431\u044f \u0437\u0430 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 1Password \u0438 \u043a\u0440\u0430\u0441\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0438\u0437 \u0435\u0433\u043e \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0430.\n\nGoogle \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0435\u00a0\u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0434\u043b\u044f CVE-2023-2163 - \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 \u044f\u0434\u0440\u0430 Linux eBPF, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f LPE \u0438 \u0430\u0442\u0430\u043a \u0441 \u0446\u0435\u043b\u044c\u044e \u0432\u044b\u0445\u043e\u0434\u0430 \u0438\u0437 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430.\n\nSonos \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0432\u043e\u0438\u0445 \u0443\u043c\u043d\u044b\u0445 \u043a\u043e\u043b\u043e\u043d\u043a\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u043e\u0448\u0438\u0431\u043a\u0443 CVE-2023-50809.\n\n\u041e\u043d\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c, \u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0438\u043c\u0441\u044f \u0432 \u0437\u043e\u043d\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f Wi-Fi \u0446\u0435\u043b\u0435\u0432\u043e\u0433\u043e \u0441\u043c\u0430\u0440\u0442-\u0434\u0438\u043d\u0430\u043c\u0438\u043a\u0430 Sonos, \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044f\u043c\u0438 \u0441\u043a\u0440\u044b\u0442\u043d\u043e \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0437\u0432\u0443\u043a.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 NCC Group \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0441 \u0432\u0438\u0434\u0435\u043e, \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u044e\u0449\u0438\u043c \u0440\u0435\u0430\u043b\u044c\u043d\u0443\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0437\u0430\u043f\u0438\u0441\u0438 \u043e\u043a\u0440\u0443\u0436\u0430\u044e\u0449\u0435\u0433\u043e \u0437\u0432\u0443\u043a\u0430.", "creation_timestamp": "2024-08-09T16:50:05.000000Z"}, {"uuid": "fd73e90e-38bc-44e9-9226-7eddf5f7ef89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4885", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/4550", "content": "WhatsUp Gold Pre-Auth RCE GetFileWithoutZip PrimitiveCVE-2024-4885 #WhatsUpGold #PreAuthRCE #GetFileWithoutZip #PrimitiveSummoning #TeamTraining https://summoning.team/blog/progress-whatsup-gold-rce-cve-2024-4885/", "creation_timestamp": "2026-08-03T02:11:40.863673Z"}, {"uuid": "4cef0bb7-a53b-4485-bfe3-c9df17a7e0c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4885", "type": "exploited", "source": "https://t.me/thehackernews/5379", "content": "A critical security flaw in Progress Software's WhatsUp Gold is under active exploitation. \n \nThis vulnerability allows unauthenticated remote code execution, posing a severe threat to network security. \n \nThe flaw (CVE-2024-4885) affects versions released before 2023.1.3. A PoC exploit is already in circulation. \n \nRead: https://thehackernews.com/2024/08/critical-security-flaw-in-whatsup-gold.html \n \nUpdate to the latest version immediately to protect your systems!", "creation_timestamp": "2024-08-08T07:35:36.000000Z"}, {"uuid": "7fead274-bb13-4b8a-8b15-092c9f0f6049", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4885", "type": "published-proof-of-concept", "source": "https://t.me/thebugbountyhunter/8953", "content": "WhatsUp Gold Pre-Auth RCE GetFileWithoutZip Primitive\n\nhttps://summoning.team/blog/progress-whatsup-gold-rce-cve-2024-4885", "creation_timestamp": "2024-07-23T01:02:48.000000Z"}, {"uuid": "021eb7e6-bdc3-4d14-b1c1-ba9910ce08b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4885", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/2770", "content": "https://github.com/sinsinology/CVE-2024-4885\n\nPoC for CVE-2024-4885 Progress WhatsUp Gold GetFileWithoutZip Unauthenticated Remote Code Execution\n#github  #poc", "creation_timestamp": "2024-07-09T16:36:01.000000Z"}, {"uuid": "e8a09a0b-5658-4b05-aa2b-335cc1b8734e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4885", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/2765", "content": "https://github.com/sinsinology/CVE-2024-4885\n\nhttps://summoning.team/blog/progress-whatsup-gold-rce-cve-2024-4885/\n\nWhatsUp Gold Pre-Auth RCE GetFileWithoutZip Primitive\nCVE-2024-4885\n#github  #\u5206\u6790", "creation_timestamp": "2024-07-08T18:41:24.000000Z"}, {"uuid": "8da32458-4f35-4b4f-b913-3486b81d987d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4885", "type": "published-proof-of-concept", "source": "https://t.me/fattahh_ir/2172", "content": "https://github.com/sinsinology/CVE-2024-4885\n\nhttps://summoning.team/blog/progress-whatsup-gold-rce-cve-2024-4885/\n\nWhatsUp Gold Pre-Auth RCE GetFileWithoutZip Primitive\nCVE-2024-4885", "creation_timestamp": "2024-07-08T19:17:30.000000Z"}, {"uuid": "1e06ad0b-c1dd-4283-9365-5a4ca90a4107", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4885", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/10809", "content": "#exploit\n1. CVE-2024-36404:\nRCE in evaluating XPath expressions\nhttps://github.com/geotools/geotools/security/advisories/GHSA-w3pj-wh35-fq8w\n\n2. CVE-2022-24785:\nMomentJS Path Traversal\nhttps://0xjay.com/how-cve-2022-24785-momentjs-path-traversal-works-detailed-exploit-guide\n\n3. CVE-2024-4885:\nProgress WhatsUp Gold GetFileWithoutZip Unauthenticated RCE\nhttps://github.com/sinsinology/CVE-2024-4885", "creation_timestamp": "2024-07-09T16:34:26.000000Z"}, {"uuid": "d428c7d1-6611-447f-a4a7-1d4c43189316", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4885", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/4550", "content": "WhatsUp Gold Pre-Auth RCE GetFileWithoutZip PrimitiveCVE-2024-4885 #WhatsUpGold #PreAuthRCE #GetFileWithoutZip #PrimitiveSummoning #TeamTraining https://summoning.team/blog/progress-whatsup-gold-rce-cve-2024-4885/", "creation_timestamp": "2026-08-02T07:06:35.373549Z"}, {"uuid": "ced50240-cf90-4d80-a544-0c012d5c3f0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48852", "type": "seen", "source": "https://t.me/purp_sec/212", "content": "\u041f\u043e\u0441\u043c\u0435\u044f\u043b\u0438\u0441\u044c \u043d\u0430\u0434 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 DeepSeek \u0438 \u0445\u0432\u0430\u0442\u0438\u0442. \u041f\u043e\u0440\u0430 \u0432\u0435\u0440\u043d\u0443\u0442\u044c\u0441\u044f \u043a \u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u043c \u0432\u0435\u0449\u0430\u043c \u0438 \u0440\u0430\u0431\u043e\u0442\u0435, \u0434\u0430, @Pr0xProw?\n\n\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u0437\u0430\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u044f.\n\n\ud83d\udd35CVE-2024-48841, CVE-2024-48849, and CVE-2024-48852 \u2014 \u0442\u0440\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430\u0445 FLXeon, \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u044b\u0445 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a RCE-\u0430\u0442\u0430\u043a\u0435, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c \u0441 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0447\u0443\u0432\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\ud83d\udd35CVE-2024\u201354887 \u2014 \u043e\u0431\u0437\u043e\u0440 \u0438 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u044b \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (\u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430) \u0432 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0435 \u0422\u0420-Link \u0447\u0435\u0440\u0435\u0437 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b dnsserver1 \u0438 dnsserver2 \u0432 \u0444\u0430\u0439\u043b\u0435 /userRpm/Wan6to4TunnelCfgRpm.htm. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u043c\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\n\ud83d\udd35CVE-2024-53704 \u2014 \u0430\u043d\u0430\u043b\u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 SonicOS, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0432 SSLVPN \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0438.\n\n\ud83d\udd35CVE-2025-23006 \u2014 \u0435\u0449\u0435 \u043e\u0434\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443 SonicWall, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0443\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u0445\u0430\u043a\u0435\u0440\u044b. \u041e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0448\u043b\u044e\u0437\u044b Secure Mobile Access (SMA) 1000 \u0438 Central Management Console (CMC). \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0438\u043c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u0441\u043e\u0432\u0435\u0440\u0448\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0443.\n\n\ud83d\udd35CVE-2025-22604 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Cacti, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c\u0438 ss_net_snmp_disk_io() \u0438\u043b\u0438 ss_net_snmp_disk_bytes() \u0432 SNMP. \u0410\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 RCE-\u0430\u0442\u0430\u043a\u0443 \u0447\u0435\u0440\u0435\u0437 SNMP-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u043c\u0438 OID.\n\n\ud83d\udd35CVE-2024-12647, CVE-2024-12648 \u0438 CVE-2024-12649 \u2014 \u0432\u0441\u0435 \u0442\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0430\u0439\u0434\u0435\u043d\u044b \u0432 \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u0430\u0445 Canon \u0438 \u043e\u0446\u0435\u043d\u0435\u043d\u044b \u043d\u0430 CVSS 9,8. \u0412\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0442 \u0438\u0437-\u0437\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u0445: \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0430 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0448\u0440\u0438\u0444\u0442\u043e\u0432 CPCA, \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0430 \u0442\u0435\u0433\u043e\u0432 EXIF \u0432 TIFF \u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0430 \u0448\u0440\u0438\u0444\u0442\u043e\u0432 \u0432 XPS.\n\n\ud83d\udd35CVE-2024-56614 \u0438 CVE-2024-56615 \u2014 \u0434\u0432\u0435 \u043d\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u044f\u0434\u0440\u0435 Linux, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 eBPF. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u043f\u0440\u0430\u0432\u0430, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438\u043b\u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c DoS-\u0430\u0442\u0430\u043a\u0438.\n\n\ud83d\udd35CVE-2024-49138 \u2014 \u0447\u0430\u0441\u0442\u044c 1 \u0438 \u0447\u0430\u0441\u0442\u044c 2. \u0410\u043d\u0430\u043b\u0438\u0437 \u043e\u0448\u0438\u0431\u043a\u0438 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043e\u0431\u0449\u0435\u0439 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0436\u0443\u0440\u043d\u0430\u043b\u043e\u0432 Windows CLFS.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-04T13:00:14.530267Z"}, {"uuid": "dd4c67ec-a861-4e6f-ad84-b3fb4faf8b6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48852", "type": "seen", "source": "https://t.me/purp_sec/212", "content": "\u041f\u043e\u0441\u043c\u0435\u044f\u043b\u0438\u0441\u044c \u043d\u0430\u0434 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 DeepSeek \u0438 \u0445\u0432\u0430\u0442\u0438\u0442. \u041f\u043e\u0440\u0430 \u0432\u0435\u0440\u043d\u0443\u0442\u044c\u0441\u044f \u043a \u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u043c \u0432\u0435\u0449\u0430\u043c \u0438 \u0440\u0430\u0431\u043e\u0442\u0435, \u0434\u0430, @Pr0xProw?\n\n\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u0437\u0430\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u044f.\n\n\ud83d\udd35CVE-2024-48841, CVE-2024-48849, and CVE-2024-48852 \u2014 \u0442\u0440\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430\u0445 FLXeon, \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u044b\u0445 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a RCE-\u0430\u0442\u0430\u043a\u0435, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c \u0441 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0447\u0443\u0432\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\ud83d\udd35CVE-2024\u201354887 \u2014 \u043e\u0431\u0437\u043e\u0440 \u0438 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u044b \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (\u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430) \u0432 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0435 \u0422\u0420-Link \u0447\u0435\u0440\u0435\u0437 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b dnsserver1 \u0438 dnsserver2 \u0432 \u0444\u0430\u0439\u043b\u0435 /userRpm/Wan6to4TunnelCfgRpm.htm. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u043c\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\n\ud83d\udd35CVE-2024-53704 \u2014 \u0430\u043d\u0430\u043b\u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 SonicOS, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0432 SSLVPN \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0438.\n\n\ud83d\udd35CVE-2025-23006 \u2014 \u0435\u0449\u0435 \u043e\u0434\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443 SonicWall, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0443\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u0445\u0430\u043a\u0435\u0440\u044b. \u041e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0448\u043b\u044e\u0437\u044b Secure Mobile Access (SMA) 1000 \u0438 Central Management Console (CMC). \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0438\u043c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u0441\u043e\u0432\u0435\u0440\u0448\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0443.\n\n\ud83d\udd35CVE-2025-22604 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Cacti, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c\u0438 ss_net_snmp_disk_io() \u0438\u043b\u0438 ss_net_snmp_disk_bytes() \u0432 SNMP. \u0410\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 RCE-\u0430\u0442\u0430\u043a\u0443 \u0447\u0435\u0440\u0435\u0437 SNMP-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u043c\u0438 OID.\n\n\ud83d\udd35CVE-2024-12647, CVE-2024-12648 \u0438 CVE-2024-12649 \u2014 \u0432\u0441\u0435 \u0442\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0430\u0439\u0434\u0435\u043d\u044b \u0432 \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u0430\u0445 Canon \u0438 \u043e\u0446\u0435\u043d\u0435\u043d\u044b \u043d\u0430 CVSS 9,8. \u0412\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0442 \u0438\u0437-\u0437\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u0445: \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0430 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0448\u0440\u0438\u0444\u0442\u043e\u0432 CPCA, \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0430 \u0442\u0435\u0433\u043e\u0432 EXIF \u0432 TIFF \u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0430 \u0448\u0440\u0438\u0444\u0442\u043e\u0432 \u0432 XPS.\n\n\ud83d\udd35CVE-2024-56614 \u0438 CVE-2024-56615 \u2014 \u0434\u0432\u0435 \u043d\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u044f\u0434\u0440\u0435 Linux, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 eBPF. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u043f\u0440\u0430\u0432\u0430, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438\u043b\u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c DoS-\u0430\u0442\u0430\u043a\u0438.\n\n\ud83d\udd35CVE-2024-49138 \u2014 \u0447\u0430\u0441\u0442\u044c 1 \u0438 \u0447\u0430\u0441\u0442\u044c 2. \u0410\u043d\u0430\u043b\u0438\u0437 \u043e\u0448\u0438\u0431\u043a\u0438 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043e\u0431\u0449\u0435\u0439 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0436\u0443\u0440\u043d\u0430\u043b\u043e\u0432 Windows CLFS.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-05T00:00:10.234746Z"}, {"uuid": "be76e410-92f5-46b0-b2a8-6d320cf906f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4885", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-14)", "content": "", "creation_timestamp": "2026-06-14T00:00:00.000000Z"}, {"uuid": "fbf74c16-4edb-4470-9872-9e1562db9a23", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4885", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e2a1810b-f550-43d4-84a4-12bbe1930b5f", "content": "", "creation_timestamp": "2026-06-19T12:46:25.948820Z"}, {"uuid": "75a4cefc-87d9-4ec1-8ff3-016e2dbc2f61", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4885", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1d5ad2d3-456a-4284-aa38-a3bb1aab8f3a", "content": "", "creation_timestamp": "2026-06-23T14:06:05.992701Z"}, {"uuid": "39ab28d6-b246-43ec-8a86-2969287a75fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4885", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-26)", "content": "", "creation_timestamp": "2026-06-27T10:15:09.576378Z"}, {"uuid": "7fba6af7-76a3-489e-bf6d-29e7456efebb", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-4885", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/7f8189cd-bafd-40f6-b54a-d2724a363419", "content": "", "creation_timestamp": "2026-06-30T09:23:22.497695Z"}, {"uuid": "925ada5f-459d-40f2-906d-f046822f814d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4885", "type": "seen", "source": "https://t.me/ZerodayAlert/270", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 WhatsUp Gold: \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432\n\n\ud83d\udda5 \u0412 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 WhatsUp Gold \u043e\u0442 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Progress \u0431\u044b\u043b\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\ud83d\udcca \u041e\u0431\u043e\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u0430\u044f \u043a\u0430\u043a CVE-2024-4885, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c.\n\n\ud83e\udee1 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Progress \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u043e\u0442\u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u043d\u0430 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0435\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443.  \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c #\u0434\u0430\u043d\u043d\u044b\u0435\u0432\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 #WhatsUpGold\n\n@ZerodayAlert", "creation_timestamp": "2026-07-06T11:00:05.673624Z"}, {"uuid": "2c8a0175-5b75-4d46-9ea9-b1e44ad23d3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4885", "type": "seen", "source": "https://t.me/ZerodayAlert/270", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 WhatsUp Gold: \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432\n\n\ud83d\udda5 \u0412 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 WhatsUp Gold \u043e\u0442 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Progress \u0431\u044b\u043b\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\ud83d\udcca \u041e\u0431\u043e\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u0430\u044f \u043a\u0430\u043a CVE-2024-4885, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c.\n\n\ud83e\udee1 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Progress \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u043e\u0442\u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u043d\u0430 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0435\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443.  \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c #\u0434\u0430\u043d\u043d\u044b\u0435\u0432\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 #WhatsUpGold\n\n@ZerodayAlert", "creation_timestamp": "2026-07-07T00:00:08.033418Z"}, {"uuid": "e37db5a0-ebe2-444c-b72a-30520b2a6826", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4885", "type": "seen", "source": "https://t.me/ZerodayAlert/270", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 WhatsUp Gold: \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432\n\n\ud83d\udda5 \u0412 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 WhatsUp Gold \u043e\u0442 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Progress \u0431\u044b\u043b\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\ud83d\udcca \u041e\u0431\u043e\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u0430\u044f \u043a\u0430\u043a CVE-2024-4885, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c.\n\n\ud83e\udee1 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Progress \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u043e\u0442\u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u043d\u0430 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0435\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443.  \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c #\u0434\u0430\u043d\u043d\u044b\u0435\u0432\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 #WhatsUpGold\n\n@ZerodayAlert", "creation_timestamp": "2026-07-11T22:00:06.947839Z"}, {"uuid": "93f71d89-7a94-4bfc-a347-7c3ef1d176a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4885", "type": "seen", "source": "https://t.me/ZerodayAlert/270", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 WhatsUp Gold: \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432\n\n\ud83d\udda5 \u0412 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 WhatsUp Gold \u043e\u0442 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Progress \u0431\u044b\u043b\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\ud83d\udcca \u041e\u0431\u043e\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u0430\u044f \u043a\u0430\u043a CVE-2024-4885, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c.\n\n\ud83e\udee1 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Progress \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u043e\u0442\u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u043d\u0430 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0435\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443.  \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c #\u0434\u0430\u043d\u043d\u044b\u0435\u0432\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 #WhatsUpGold\n\n@ZerodayAlert", "creation_timestamp": "2026-07-12T00:00:19.865920Z"}, {"uuid": "102e5b93-0a85-47ec-82e1-08a4200670ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4885", "type": "seen", "source": "https://t.me/cyberwarehouse/469", "content": "CVE-2024-4885\n\nExploit for Progress WhatsUp Gold GetFileWithoutZip Unauthenticated Remote Code Execution\n\nTechnical Analysis: https://summoning.team/blog/progress-whatsup-gold-rce-cve-2024-4885/\n\nCVE-2024-4883\n\nExploit for Progress WhatsUp Gold WriteDatafile Unauthenticated Remote Code Execution\n\nTechnical Analysis: https://summoning.team/blog/progress-whatsup-gold-WriteDataFile-CVE-2024-4883-RCE/\n\nCVE-2024-5009\n\nExploit for Progress WhatsUp Gold SetAdminPassword Privilege Escalation\n\nTechnical Analysis: https://summoning.team/blog/progress-whatsup-gold-privesc-setadminpassword-cve-2024-5009/", "creation_timestamp": "2026-07-26T02:00:20.314582Z"}, {"uuid": "65175132-5f9a-4581-8ca2-47635d82b267", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4885", "type": "published-proof-of-concept", "source": "https://t.me/cyberwarehouse/469", "content": "CVE-2024-4885\n\nExploit for Progress WhatsUp Gold GetFileWithoutZip Unauthenticated Remote Code Execution\n\nTechnical Analysis: https://summoning.team/blog/progress-whatsup-gold-rce-cve-2024-4885/\n\nCVE-2024-4883\n\nExploit for Progress WhatsUp Gold WriteDatafile Unauthenticated Remote Code Execution\n\nTechnical Analysis: https://summoning.team/blog/progress-whatsup-gold-WriteDataFile-CVE-2024-4883-RCE/\n\nCVE-2024-5009\n\nExploit for Progress WhatsUp Gold SetAdminPassword Privilege Escalation\n\nTechnical Analysis: https://summoning.team/blog/progress-whatsup-gold-privesc-setadminpassword-cve-2024-5009/", "creation_timestamp": "2026-07-27T00:00:21.906686Z"}, {"uuid": "784ef359-92d5-4f53-872d-8225180f1a25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4885", "type": "seen", "source": "https://t.me/reverseame/4550", "content": "WhatsUp Gold Pre-Auth RCE GetFileWithoutZip PrimitiveCVE-2024-4885 #WhatsUpGold #PreAuthRCE #GetFileWithoutZip #PrimitiveSummoning #TeamTraining https://summoning.team/blog/progress-whatsup-gold-rce-cve-2024-4885/", "creation_timestamp": "2026-07-29T12:02:13.383194Z"}, {"uuid": "4963afb0-8052-4baf-b537-9e67ed934842", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4885", "type": "seen", "source": "https://t.me/reverseame/4550", "content": "WhatsUp Gold Pre-Auth RCE GetFileWithoutZip PrimitiveCVE-2024-4885 #WhatsUpGold #PreAuthRCE #GetFileWithoutZip #PrimitiveSummoning #TeamTraining https://summoning.team/blog/progress-whatsup-gold-rce-cve-2024-4885/", "creation_timestamp": "2026-07-30T00:02:20.131938Z"}]}