{"vulnerability": "cve-2024-4957", "sightings": [{"uuid": "da876888-ccd1-4948-8006-468bf4265eb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-49574", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113502888468887530", "content": "", "creation_timestamp": "2024-11-18T07:57:13.872023Z"}, {"uuid": "6754ae32-a5db-4e58-878e-41fb9a61c9a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-49576", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113674653393885665", "content": "", "creation_timestamp": "2024-12-18T15:59:18.318197Z"}, {"uuid": "1a287e79-694b-4e5d-9c42-0f04904fcf3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-49576", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3ldq37hqcsv2b", "content": "", "creation_timestamp": "2024-12-20T09:30:08.584263Z"}, {"uuid": "86a14f41-c98b-4318-a1c9-5e47954ac604", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-49576", "type": "seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3ldpon4kwqk24", "content": "", "creation_timestamp": "2024-12-20T05:45:07.635661Z"}, {"uuid": "1e2d026d-99a9-4c7b-86df-7a2205ddfa87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-49576", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3ldpw7sx65222", "content": "", "creation_timestamp": "2024-12-20T08:00:56.684482Z"}, {"uuid": "f343777a-c8e2-4296-94af-4bcc44dd1285", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-49573", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhs4b4j5f2e", "content": "", "creation_timestamp": "2025-01-11T13:16:21.837938Z"}, {"uuid": "d00fcfb0-e059-427b-a690-f0403f5d7562", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-49571", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhs46zsev2e", "content": "", "creation_timestamp": "2025-01-11T13:16:19.746499Z"}, {"uuid": "752cf4d6-8230-45e3-ac3e-eda09a3d33be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-49572", "type": "seen", "source": "https://infosec.place/objects/c22ffb7b-d370-4185-b12a-8e92088603d6", "content": "", "creation_timestamp": "2025-12-01T15:30:22.987462Z"}, {"uuid": "c350e15b-2045-45b3-b5b3-5755606a1b49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-49571", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "4f94f935-c5b7-449b-9023-679b44a5cfe6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-49571", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1312", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-49571\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nnet/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg\n\nWhen receiving proposal msg in server, the field iparea_offset\nand the field ipv6_prefixes_cnt in proposal msg are from the\nremote client and can not be fully trusted. Especially the\nfield iparea_offset, once exceed the max value, there has the\nchance to access wrong address, and crash may happen.\n\nThis patch checks iparea_offset and ipv6_prefixes_cnt before using them.\n\ud83d\udccf Published: 2025-01-11T12:35:36.957Z\n\ud83d\udccf Modified: 2025-01-11T12:35:36.957Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/846bada23bfcdeb83621b045ed85dc06c7833ff0\n2. https://git.kernel.org/stable/c/f10635268a0a49ee902a3b63b5dbb76f4fed498e\n3. https://git.kernel.org/stable/c/62056d1592e63d85e82357ee2ae6a6a294f440b0\n4. https://git.kernel.org/stable/c/91a7c27c1444ed4677b83fd5308d2cf03f5f0851\n5. https://git.kernel.org/stable/c/47ce46349672a7e0c361bfe39ed0b22e824ef4fb\n6. https://git.kernel.org/stable/c/a29e220d3c8edbf0e1beb0f028878a4a85966556", "creation_timestamp": "2025-01-11T13:06:46.000000Z"}, {"uuid": "65ee6255-4dc1-461c-95f8-fd20b3e8e78a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-49573", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1311", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-49573\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nsched/fair: Fix NEXT_BUDDY\n\nAdam reports that enabling NEXT_BUDDY insta triggers a WARN in\npick_next_entity().\n\nMoving clear_buddies() up before the delayed dequeue bits ensures\nno ->next buddy becomes delayed. Further ensure no new ->next buddy\never starts as delayed.\n\ud83d\udccf Published: 2025-01-11T12:35:37.625Z\n\ud83d\udccf Modified: 2025-01-11T12:35:37.625Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/5dbe6816c49197677a5ecce749bd99929da147da\n2. https://git.kernel.org/stable/c/493afbd187c4c9cc1642792c0d9ba400c3d6d90d", "creation_timestamp": "2025-01-11T13:06:44.000000Z"}, {"uuid": "d84ed1d0-7d6d-427c-ad2f-ae8427669cd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-49576", "type": "seen", "source": "https://t.me/CyberBulletin/1792", "content": "\u26a1\ufe0fCVE-2024-49576 and CVE-2024-47810: Foxit Addresses Remote Code Execution Flaws.\n\n#CyberBulletin", "creation_timestamp": "2024-12-20T16:20:05.000000Z"}, {"uuid": "689d2e29-89b2-447e-abfa-2794ad0f4241", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-49574", "type": "seen", "source": "https://t.me/cvedetector/11298", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-49574 - Zohocorp ManageEngine ADAudit Plus SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-49574 \nPublished : Nov. 18, 2024, 8:15 a.m. | 27\u00a0minutes ago \nDescription : Zohocorp ManageEngine ADAudit Plus versions below 8123 are vulnerable to SQL Injection in\u00a0the reports module. \nSeverity: 8.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-18T09:51:31.000000Z"}, {"uuid": "dfe71ef8-e571-453f-9e0a-f4332e524e55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-49576", "type": "seen", "source": "https://t.me/cvedetector/13206", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-49576 - Foxit Reader Use-after-Free Vulnerability (Arbitrary Code Execution)\", \n  \"Content\": \"CVE ID : CVE-2024-49576 \nPublished : Dec. 18, 2024, 4:15 p.m. | 36\u00a0minutes ago \nDescription : A use-after-free vulnerability exists in the way Foxit Reader 2024.3.0.26795 handles a checkbox CBF_Widget object. A specially crafted Javascript code inside a malicious PDF document can trigger this vulnerability, which can lead to memory corruption and result in arbitrary code execution. An attacker needs to trick the user into opening the malicious file to trigger this vulnerability. Exploitation is also possible if a user visits a specially crafted, malicious site if the browser plugin extension is enabled. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T17:52:37.000000Z"}, {"uuid": "42f9ecae-bd92-495d-b9e0-91f538ddfe55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-49579", "type": "seen", "source": "https://t.me/cvedetector/8171", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-49579 - JetBrains YouTrack Insecure Plugin Vulnerability (Cross-Site Scripting & Authentication Bypass)\", \n  \"Content\": \"CVE ID : CVE-2024-49579 \nPublished : Oct. 17, 2024, 1:15 p.m. | 31\u00a0minutes ago \nDescription : In JetBrains YouTrack before 2024.3.47197 insecure plugin iframe allowed arbitrary JavaScript execution and unauthorized API requests \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-17T15:48:21.000000Z"}, {"uuid": "fea31d86-7472-4eb2-88a2-4af8db8d97b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-49576", "type": "seen", "source": "https://t.me/CyberBulletin/26868", "content": "\u26a1\ufe0fCVE-2024-49576 and CVE-2024-47810: Foxit Addresses Remote Code Execution Flaws.\n\n#CyberBulletin", "creation_timestamp": "2024-12-20T16:20:05.000000Z"}, {"uuid": "be77eeaa-4145-4365-b619-8e21c949c931", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-49576", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpp5iyqw5z22", "content": "\ud83d\udccc CVE-2024-49576 - A use-after-free vulnerability exists in the way Foxit Reader 2024.3.0.26795 handles a checkbox CBF_Widget object. A specially crafted Javascript code... https://www.cyberhub.blog/cves/CVE-2024-49576", "creation_timestamp": "2026-07-02T23:07:08.098985Z"}, {"uuid": "5e887f13-9180-460e-9c05-5d2db1cfbd58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-49574", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqxozltbtw2y", "content": "\ud83d\udccc CVE-2024-49574 - Zohocorp ManageEngine ADAudit Plus versions below 8123 are vulnerable to SQL Injection in\u00a0the reports module. https://www.cyberhub.blog/cves/CVE-2024-49574", "creation_timestamp": "2026-07-19T02:07:07.445438Z"}]}