{"metadata": {"vulnerability": "CVE-2024-4885", "count": 86, "kinds": {"milestone": 5, "sighting": 50, "kev": 17, "other": 14}}, "data": [{"timestamp": "2024-05-14T18:28:11.852Z", "date_only": false, "value": "2024-05-14T18:28:11.852Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-4885", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-06-25T19:48:15.268Z", "date_only": false, "value": "2024-06-25T19:48:15.268Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-4885", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-06-25T19:48:15.268Z", "date_only": false, "value": "2024-06-25T19:48:15.268Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / ProgressSoftware", "record": "CVE-2024-4885", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-06-25T20:15:12Z", "date_only": false, "value": "2024-06-25T20:15:12Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-QCJ6-WQ2R-C3XH", "record": "GHSA-QCJ6-WQ2R-C3XH", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-06-25T20:15:12.970Z", "date_only": false, "value": "2024-06-25T20:15:12.970", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-4885", "record": "FKIE_CVE-2024-4885", "field": "published"}, {"timestamp": "2024-06-25T21:31:16Z", "date_only": false, "value": "2024-06-25T21:31:16Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-QCJ6-WQ2R-C3XH", "record": "GHSA-QCJ6-WQ2R-C3XH", "field": "published"}, {"timestamp": "2024-06-26T07:43:11.795Z", "date_only": false, "value": "2024-06-26T07:43:11.795773Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2024-0268", "record": "NCSC-2024-0268", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-06-26T07:43:11.795Z", "date_only": false, "value": "2024-06-26T07:43:11.795773Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2024-0268", "record": "NCSC-2024-0268", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-07-08T18:41:24Z", "date_only": false, "value": "2024-07-08T18:41:24.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/2765", "record": "CVE-2024-4885", "field": "creation_timestamp", "uuid": "e8a09a0b-5658-4b05-aa2b-335cc1b8734e", "content": "https://github.com/sinsinology/CVE-2024-4885\n\nhttps://summoning.team/blog/progress-whatsup-gold-rce-cve-2024-4885/\n\nWhatsUp Gold Pre-Auth RCE GetFileWithoutZip Primitive\nCVE-2024-4885\n#github  #\u5206\u6790", "url": "https://t.me/CNArsenal/2765"}, {"timestamp": "2024-07-08T18:42:49Z", "date_only": false, "value": "2024-07-08T18:42:49.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/realLulzSec/1198", "record": "CVE-2024-4885", "field": "creation_timestamp", "uuid": "a4041603-8d83-4da2-809d-27e9d9fbe800", "content": "https://github.com/sinsinology/CVE-2024-4885\n\nhttps://summoning.team/blog/progress-whatsup-gold-rce-cve-2024-4885/\n\nWhatsUp Gold Pre-Auth RCE GetFileWithoutZip Primitive\nCVE-2024-4885", "url": "https://t.me/realLulzSec/1198"}, {"timestamp": "2024-07-08T18:42:49Z", "date_only": false, "value": "2024-07-08T18:42:49.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/realLulzSec/12033", "record": "CVE-2024-4885", "field": "creation_timestamp", "uuid": "5aeb28d3-b354-4a56-8350-3af9b108df48", "content": "https://github.com/sinsinology/CVE-2024-4885\n\nhttps://summoning.team/blog/progress-whatsup-gold-rce-cve-2024-4885/\n\nWhatsUp Gold Pre-Auth RCE GetFileWithoutZip Primitive\nCVE-2024-4885", "url": "https://t.me/realLulzSec/12033"}, {"timestamp": "2024-07-08T19:17:30Z", "date_only": false, "value": "2024-07-08T19:17:30.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/fattahh_ir/2172", "record": "CVE-2024-4885", "field": "creation_timestamp", "uuid": "8da32458-4f35-4b4f-b913-3486b81d987d", "content": "https://github.com/sinsinology/CVE-2024-4885\n\nhttps://summoning.team/blog/progress-whatsup-gold-rce-cve-2024-4885/\n\nWhatsUp Gold Pre-Auth RCE GetFileWithoutZip Primitive\nCVE-2024-4885", "url": "https://t.me/fattahh_ir/2172"}, {"timestamp": "2024-07-09T00:58:46Z", "date_only": false, "value": "2024-07-09T00:58:46.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/SouthSumatraCyberTeamSSCT/800", "record": "CVE-2024-4885", "field": "creation_timestamp", "uuid": "d37b6a8a-c035-49f6-8d5b-334e2fbf7103", "content": "https://github.com/sinsinology/CVE-2024-4885\n\nhttps://summoning.team/blog/progress-whatsup-gold-rce-cve-2024-4885/\n\nWhatsUp Gold Pre-Auth RCE GetFileWithoutZip Primitive\nCVE-2024-4885", "url": "https://t.me/SouthSumatraCyberTeamSSCT/800"}, {"timestamp": "2024-07-09T16:34:26Z", "date_only": false, "value": "2024-07-09T16:34:26.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/10809", "record": "CVE-2024-4885", "field": "creation_timestamp", "uuid": "1e06ad0b-c1dd-4283-9365-5a4ca90a4107", "content": "#exploit\n1. CVE-2024-36404:\nRCE in evaluating XPath expressions\nhttps://github.com/geotools/geotools/security/advisories/GHSA-w3pj-wh35-fq8w\n\n2. CVE-2022-24785:\nMomentJS Path Traversal\nhttps://0xjay.com/how-cve-2022-24785-momentjs-path-traversal-works-detailed-exploit-guide\n\n3. CVE-2024-4885:\nProgress WhatsUp Gold GetFileWithoutZip Unauthenticated RCE\nhttps://github.com/sinsinology/CVE-2024-4885", "url": "https://t.me/CyberSecurityTechnologies/10809"}, {"timestamp": "2024-07-09T16:36:01Z", "date_only": false, "value": "2024-07-09T16:36:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/2770", "record": "CVE-2024-4885", "field": "creation_timestamp", "uuid": "021eb7e6-bdc3-4d14-b1c1-ba9910ce08b1", "content": "https://github.com/sinsinology/CVE-2024-4885\n\nPoC for CVE-2024-4885 Progress WhatsUp Gold GetFileWithoutZip Unauthenticated Remote Code Execution\n#github  #poc", "url": "https://t.me/CNArsenal/2770"}, {"timestamp": "2024-07-09T21:15:21Z", "date_only": false, "value": "2024-07-09T21:15:21.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/realLulzSec/1202", "record": "CVE-2024-4885", "field": "creation_timestamp", "uuid": "9d65b7a6-dff1-4a41-9050-2cb65d2b5f2d", "content": "https://github.com/sinsinology/CVE-2024-4885\n\nPoC for CVE-2024-4885 Progress WhatsUp Gold GetFileWithoutZip Unauthenticated Remote Code Execution\n#github  #poc", "url": "https://t.me/realLulzSec/1202"}, {"timestamp": "2024-07-09T21:15:21Z", "date_only": false, "value": "2024-07-09T21:15:21.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/realLulzSec/12133", "record": "CVE-2024-4885", "field": "creation_timestamp", "uuid": "07324a8e-c973-496b-983f-40d03c6df3fc", "content": "https://github.com/sinsinology/CVE-2024-4885\n\nPoC for CVE-2024-4885 Progress WhatsUp Gold GetFileWithoutZip Unauthenticated Remote Code Execution\n#github  #poc", "url": "https://t.me/realLulzSec/12133"}, {"timestamp": "2024-07-10T20:19:38Z", "date_only": false, "value": "2024-07-10T20:19:38.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberden_team/507", "record": "CVE-2024-4885", "field": "creation_timestamp", "uuid": "0a0cd17a-5d52-4656-82bf-86a56b977a68", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 WhatsUp Gold: \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432\n\n\ud83d\udda5 \u0412 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 WhatsUp Gold \u043e\u0442 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Progress \u0431\u044b\u043b\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\ud83d\udcca \u041e\u0431\u043e\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u0430\u044f \u043a\u0430\u043a CVE-2024-4885, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c.\n\n\ud83e\udee1 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Progress \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u043e\u0442\u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u043d\u0430 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0435\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443.  \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c #\u0434\u0430\u043d\u043d\u044b\u0435\u0432\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 #WhatsUpGold\n\n@ZerodayAlert", "url": "https://t.me/cyberden_team/507"}, {"timestamp": "2024-07-11T04:35:45Z", "date_only": false, "value": "2024-07-11T04:35:45.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/FUryBaeTd16I_Z_BI23kcNzYjlRgHXorESHpEaaZvMk8bEI", "record": "CVE-2024-4885", "field": "creation_timestamp", "uuid": "91ca6f70-76fc-4a0e-b261-0d3d4d93fe7c"}, {"timestamp": "2024-07-11T07:55:58Z", "date_only": false, "value": "2024-07-11T07:55:58.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/E0K4SacbBo7vvN_grN7HUJjKIuPNHN1egbc3qXVTBTE2Hg", "record": "CVE-2024-4885", "field": "creation_timestamp", "uuid": "f26e6303-4e1f-43c4-a192-aff79e2e5670"}, {"timestamp": "2024-07-23T01:02:48Z", "date_only": false, "value": "2024-07-23T01:02:48.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/thebugbountyhunter/8953", "record": "CVE-2024-4885", "field": "creation_timestamp", "uuid": "7fead274-bb13-4b8a-8b15-092c9f0f6049", "content": "WhatsUp Gold Pre-Auth RCE GetFileWithoutZip Primitive\n\nhttps://summoning.team/blog/progress-whatsup-gold-rce-cve-2024-4885", "url": "https://t.me/thebugbountyhunter/8953"}, {"timestamp": "2024-08-01T20:55:10.084Z", "date_only": false, "value": "2024-08-01T20:55:10.084Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2024-4885", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-06T02:47:11Z", "date_only": false, "value": "2024-08-06T02:47:11+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2024-4885", "field": "timestamps.asserted_at", "uuid": "7f8189cd-bafd-40f6-b54a-d2724a363419", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-08-06T02:47:11Z", "date_only": false, "value": "2024-08-06T02:47:11+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2024-4885", "field": "timestamps.first_seen_at", "uuid": "7f8189cd-bafd-40f6-b54a-d2724a363419", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-08-08T07:35:36Z", "date_only": false, "value": "2024-08-08T07:35:36.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/5379", "record": "CVE-2024-4885", "field": "creation_timestamp", "uuid": "4cef0bb7-a53b-4485-bfe3-c9df17a7e0c3", "content": "A critical security flaw in Progress Software's WhatsUp Gold is under active exploitation. \n \nThis vulnerability allows unauthenticated remote code execution, posing a severe threat to network security. \n \nThe flaw (CVE-2024-4885) affects versions released before 2023.1.3. A PoC exploit is already in circulation. \n \nRead: https://thehackernews.com/2024/08/critical-security-flaw-in-whatsup-gold.html \n \nUpdate to the latest version immediately to protect your systems!", "url": "https://t.me/thehackernews/5379"}, {"timestamp": "2024-08-08T07:50:41.453Z", "date_only": false, "value": "2024-08-08T07:50:41.453544Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2024-0268", "record": "NCSC-2024-0268", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2024-08-08T07:50:41.453Z", "date_only": false, "value": "2024-08-08T07:50:41.453544Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2024-0268", "record": "NCSC-2024-0268", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-08-08T08:34:10Z", "date_only": false, "value": "2024-08-08T08:34:10.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/ig3mk0mX2RqfN7z3-jznsaNAylNbMPY5OpS0fe2_ouUyfg", "record": "CVE-2024-4885", "field": "creation_timestamp", "uuid": "24440a7f-fc38-4b1e-8974-caeea7884f23"}, {"timestamp": "2024-08-08T09:21:30Z", "date_only": false, "value": "2024-08-08T09:21:30.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/zvA9mxiL6w9Olhtrl4qEfzXVUJenrhbynzhr-SNhe3DaBg", "record": "CVE-2024-4885", "field": "creation_timestamp", "uuid": "02329887-e1d1-4549-9c72-c1c768bd963c"}, {"timestamp": "2024-08-08T09:21:31Z", "date_only": false, "value": "2024-08-08T09:21:31.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/tengkorakcybercrewz/17245", "record": "CVE-2024-4885", "field": "creation_timestamp", "uuid": "f5970ca2-ec6d-40aa-89ae-48f341514b02", "content": "The Hacker News\nCritical Security Flaw in WhatsUp Gold Under Active Attack - Patch Now\n\nA critical security flaw impacting Progress Software WhatsUp Gold is seeing active exploitation attempts, making it essential that users move quickly to apply the latest.\nThe vulnerability in question is CVE-2024-4885 (CVSS score: 9.8), an unauthenticated remote code execution bug impacting versions of the network monitoring application released before 2023.1.3.\n\"The", "url": "https://t.me/tengkorakcybercrewz/17245"}, {"timestamp": "2024-08-08T09:21:31Z", "date_only": false, "value": "2024-08-08T09:21:31.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/tengkorakcybercrewz/3383", "record": "CVE-2024-4885", "field": "creation_timestamp", "uuid": "a1fa7619-8dac-43b4-b4e1-415d4f1cce53", "content": "The Hacker News\nCritical Security Flaw in WhatsUp Gold Under Active Attack - Patch Now\n\nA critical security flaw impacting Progress Software WhatsUp Gold is seeing active exploitation attempts, making it essential that users move quickly to apply the latest.\nThe vulnerability in question is CVE-2024-4885 (CVSS score: 9.8), an unauthenticated remote code execution bug impacting versions of the network monitoring application released before 2023.1.3.\n\"The", "url": "https://t.me/tengkorakcybercrewz/3383"}, {"timestamp": "2024-08-08T12:02:46Z", "date_only": false, "value": "2024-08-08T12:02:46.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/KomunitiSiber/2368", "record": "CVE-2024-4885", "field": "creation_timestamp", "uuid": "7cbf22ea-e6c5-463e-93ab-977fb3659b9d", "content": "Critical Security Flaw in WhatsUp Gold Under Active Attack - Patch Now\nhttps://thehackernews.com/2024/08/critical-security-flaw-in-whatsup-gold.html\n\nA critical security flaw impacting Progress Software WhatsUp Gold is seeing active exploitation attempts, making it essential that users move quickly to apply the latest.\nThe vulnerability in question is CVE-2024-4885 (CVSS score: 9.8), an unauthenticated remote code execution bug impacting versions of the network monitoring application released before 2023.1.3.\n\"The", "url": "https://t.me/KomunitiSiber/2368"}, {"timestamp": "2024-08-09T09:36:15Z", "date_only": false, "value": "2024-08-09T09:36:15.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/yyHU4AmcuvzMH7Mr_Iyg6WOXfkLoQk9lbnAqVqjqphJYHjY", "record": "CVE-2024-4885", "field": "creation_timestamp", "uuid": "cabc2484-b708-462a-8ce0-3468e6064999"}, {"timestamp": "2024-08-09T16:50:05Z", "date_only": false, "value": "2024-08-09T16:50:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/true_secator/6078", "record": "CVE-2024-4885", "field": "creation_timestamp", "uuid": "962c15fc-58eb-4ae4-aba6-c4e6c12a1815", "content": "\u0412 \u0434\u043e\u0433\u043e\u043d\u043a\u0443 \u043a Cisco, \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u0438 \u0440\u044f\u0434 \u0434\u0440\u0443\u0433\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Claroty \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438  \u0434\u0432\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 \u041f\u041b\u041a \u0438\u0437\u0440\u0430\u0438\u043b\u044c\u0441\u043a\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Unitronics, \u0442\u043e\u0439 \u0441\u0430\u043c\u043e\u0439, \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u0433\u043e\u0434\u0443 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0438\u0440\u0430\u043d\u0441\u043a\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 Cyber Av3ngers. \u041e\u0431\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0431\u044b\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b.\n\nJenkins \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0434\u0432\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043f\u0440\u043e\u0435\u043a\u0442\u0430.\n\n\u0422\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b Progress, \u043d\u0430 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u0434\u043e\u0441\u0442\u0430\u043b\u043e\u0441\u044c \u0440\u0435\u0448\u0435\u043d\u0438\u044e \u0434\u043b\u044f \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0441\u0435\u0442\u0438 WhatsUp Gold.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Shadowserver Foundation, \u0430\u0442\u0430\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438\u0441\u044c \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u0430\u0432\u0433\u0443\u0441\u0442\u0430 \u0438 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u044b \u043d\u0430 \u043e\u0448\u0438\u0431\u043a\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0434\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (CVE-2024-4885), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u0438\u044e\u043d\u044f. \n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0438 PoC \u0431\u044b\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0441 \u043d\u0430\u0447\u0430\u043b\u0430 \u0438\u044e\u043b\u044f.\n\n1Password \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 CVE-2024-42219 \u0432 \u0441\u0432\u043e\u0435\u043c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 \u0434\u043b\u044f macOS, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c \u0432\u044b\u0434\u0430\u0432\u0430\u0442\u044c \u0441\u0435\u0431\u044f \u0437\u0430 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 1Password \u0438 \u043a\u0440\u0430\u0441\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0438\u0437 \u0435\u0433\u043e \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0430.\n\nGoogle \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0435\u00a0\u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0434\u043b\u044f CVE-2023-2163 - \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 \u044f\u0434\u0440\u0430 Linux eBPF, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f LPE \u0438 \u0430\u0442\u0430\u043a \u0441 \u0446\u0435\u043b\u044c\u044e \u0432\u044b\u0445\u043e\u0434\u0430 \u0438\u0437 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430.\n\nSonos \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0432\u043e\u0438\u0445 \u0443\u043c\u043d\u044b\u0445 \u043a\u043e\u043b\u043e\u043d\u043a\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u043e\u0448\u0438\u0431\u043a\u0443 CVE-2023-50809.\n\n\u041e\u043d\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c, \u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0438\u043c\u0441\u044f \u0432 \u0437\u043e\u043d\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f Wi-Fi \u0446\u0435\u043b\u0435\u0432\u043e\u0433\u043e \u0441\u043c\u0430\u0440\u0442-\u0434\u0438\u043d\u0430\u043c\u0438\u043a\u0430 Sonos, \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044f\u043c\u0438 \u0441\u043a\u0440\u044b\u0442\u043d\u043e \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0437\u0432\u0443\u043a.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 NCC Group \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0441 \u0432\u0438\u0434\u0435\u043e, \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u044e\u0449\u0438\u043c \u0440\u0435\u0430\u043b\u044c\u043d\u0443\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0437\u0430\u043f\u0438\u0441\u0438 \u043e\u043a\u0440\u0443\u0436\u0430\u044e\u0449\u0435\u0433\u043e \u0437\u0432\u0443\u043a\u0430.", "url": "https://t.me/true_secator/6078"}, {"timestamp": "2024-08-30T16:08:05Z", "date_only": false, "value": "2024-08-30T16:08:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/pAhChO9CuHFdbSib_WxE7CILDZQiorOLN-cRrdUQx_hBETw", "record": "CVE-2024-4885", "field": "creation_timestamp", "uuid": "10302d7b-a58e-4ba9-8f56-a954603d37a4"}, {"timestamp": "2024-12-07T00:00:00Z", "date_only": false, "value": "2024-12-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-07)", "record": "CVE-2024-4885", "field": "creation_timestamp", "uuid": "a3caa899-3d67-45ff-ba1a-d87f29026a89"}, {"timestamp": "2025-03-03T00:00:00Z", "date_only": false, "value": "2025-03-03T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2024-4885", "field": "timestamps.asserted_at", "uuid": "aef35cd6-09c1-46ef-acbc-65df705001b1", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-03-03T00:00:00Z", "date_only": false, "value": "2025-03-03T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2024-4885", "field": "timestamps.asserted_at", "uuid": "1d5ad2d3-456a-4284-aa38-a3bb1aab8f3a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-03-03T00:00:00Z", "date_only": true, "value": "2025-03-03", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-4885", "field": "containers.adp.0.metrics.1.other.content.dateAdded"}, {"timestamp": "2025-03-03T00:00:00Z", "date_only": false, "value": "2025-03-03T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2024-4885", "field": "evidence.0.details.added_date", "uuid": "1d5ad2d3-456a-4284-aa38-a3bb1aab8f3a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-03-03T00:00:00Z", "date_only": true, "value": "2025-03-03", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2024-4885", "field": "evidence.0.details.date_added", "uuid": "aef35cd6-09c1-46ef-acbc-65df705001b1", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-03-03T00:00:00Z", "date_only": false, "value": "2025-03-03T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2024-4885", "field": "timestamps.first_seen_at", "uuid": "aef35cd6-09c1-46ef-acbc-65df705001b1", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-03-03T00:00:00Z", "date_only": false, "value": "2025-03-03T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2024-4885", "field": "timestamps.first_seen_at", "uuid": "1d5ad2d3-456a-4284-aa38-a3bb1aab8f3a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-03-03T00:00:00Z", "date_only": false, "value": "2025-03-03T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2024-4885", "field": "status.status_updated_at", "uuid": "aef35cd6-09c1-46ef-acbc-65df705001b1", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-03-03T00:00:00Z", "date_only": false, "value": "2025-03-03T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2024-4885", "field": "status.status_updated_at", "uuid": "1d5ad2d3-456a-4284-aa38-a3bb1aab8f3a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-03-03T00:00:00Z", "date_only": false, "value": "2025-03-03T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-4885", "field": "containers.adp.0.timeline.0.time"}, {"timestamp": "2025-03-03T15:58:12.739Z", "date_only": false, "value": "2025-03-03T15:58:12.739202Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/3472168", "record": "CVE-2024-4885", "field": "creation_timestamp", "uuid": "908e5dae-3be3-4cda-b3d3-df1af933679a", "url": "https://feedsin.space/feed/CISAKevBot/items/3472168"}, {"timestamp": "2025-03-03T18:10:04Z", "date_only": false, "value": "2025-03-03T18:10:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2024-4885", "field": "creation_timestamp", "uuid": "a3fc5b55-973d-4a7e-81fe-52294dfd0d53"}, {"timestamp": "2025-03-03T20:12:05.609Z", "date_only": false, "value": "2025-03-03T20:12:05.609998Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-4885", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-03-03T20:12:05.609Z", "date_only": false, "value": "2025-03-03T20:12:05.609998Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-4885", "record": "FKIE_CVE-2024-4885", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-03-03T20:30:49Z", "date_only": false, "value": "2025-03-03T20:30:49.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6283", "record": "CVE-2024-4885", "field": "creation_timestamp", "uuid": "f166f3fc-1255-44f9-b26d-d5d99f466f8b", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-4885\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: In WhatsUp Gold versions released before 2023.1.3,\u00a0an unauthenticated Remote Code Execution vulnerability in Progress WhatsUpGold.\u00a0\u00a0The \n\nWhatsUp.ExportUtilities.Export.GetFileWithoutZip\n\n\n\n allows execution of commands with iisapppool\\nmconsole privileges.\n\ud83d\udccf Published: 2024-06-25T19:48:15.268Z\n\ud83d\udccf Modified: 2025-03-03T20:14:13.636Z\n\ud83d\udd17 References:\n1. https://www.progress.com/network-monitoring\n2. https://community.progress.com/s/article/WhatsUp-Gold-Security-Bulletin-June-2024", "url": "https://t.me/DarkWebInformer_CVEAlerts/6283"}, {"timestamp": "2025-03-04T03:14:57.554Z", "date_only": false, "value": "2025-03-04T03:14:57.554738Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3ljjiqoibmk2j", "record": "CVE-2024-4885", "field": "creation_timestamp", "uuid": "a29892de-1568-4933-bfb4-8d267ec2b4d6", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3ljjiqoibmk2j"}, {"timestamp": "2025-03-04T21:02:05.300Z", "date_only": false, "value": "2025-03-04T21:02:05.300559Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3ljleerdxzw2q", "record": "CVE-2024-4885", "field": "creation_timestamp", "uuid": "a3081ac9-fa99-49d9-8fa2-0189955ceb74", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3ljleerdxzw2q"}, {"timestamp": "2025-03-05T16:32:20.332Z", "date_only": false, "value": "2025-03-05T16:32:20.332119Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nihonmatsu.bsky.social/post/3ljnfrdwpgs2i", "record": "CVE-2024-4885", "field": "creation_timestamp", "uuid": "49dac62e-2e27-4fd4-8d22-35fdfca104de", "url": "https://bsky.app/profile/nihonmatsu.bsky.social/post/3ljnfrdwpgs2i"}, {"timestamp": "2025-03-06T04:40:22Z", "date_only": false, "value": "2025-03-06T04:40:22.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2024-4885", "field": "creation_timestamp", "uuid": "a15012dd-6f38-41c4-86cc-116c2367f694"}, {"timestamp": "2025-03-24T00:00:00Z", "date_only": true, "value": "2025-03-24", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2024-4885", "field": "evidence.0.details.due_date", "uuid": "aef35cd6-09c1-46ef-acbc-65df705001b1", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-05-15T00:00:00Z", "date_only": false, "value": "2025-05-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-15)", "record": "CVE-2024-4885", "field": "creation_timestamp", "uuid": "9ad56807-d8e1-45d8-9c5b-3c2efa56e9b9"}, {"timestamp": "2025-06-26T00:00:00Z", "date_only": false, "value": "2025-06-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-26)", "record": "CVE-2024-4885", "field": "creation_timestamp", "uuid": "ccfad03f-e570-4898-a88c-d6fdb1f11c20"}, {"timestamp": "2025-10-05T00:00:00Z", "date_only": false, "value": "2025-10-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-05)", "record": "CVE-2024-4885", "field": "creation_timestamp", "uuid": "8bbdae24-2694-4822-b874-4cf527e04a91"}, {"timestamp": "2025-10-21T22:56:21.609Z", "date_only": false, "value": "2025-10-21T22:56:21.609Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-4885", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T22:56:21.609Z", "date_only": false, "value": "2025-10-21T22:56:21.609Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-4885", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:33:04Z", "date_only": false, "value": "2025-10-22T00:33:04Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-QCJ6-WQ2R-C3XH", "record": "GHSA-QCJ6-WQ2R-C3XH", "field": "modified"}, {"timestamp": "2025-11-10T00:00:00Z", "date_only": false, "value": "2025-11-10T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-10)", "record": "CVE-2024-4885", "field": "creation_timestamp", "uuid": "2c773a1c-1837-475d-85e4-2bc56d29caa0"}, {"timestamp": "2026-02-02T12:25:39Z", "date_only": false, "value": "2026-02-02T12:25:39+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2024-4885", "field": "timestamps.recorded_at", "uuid": "aef35cd6-09c1-46ef-acbc-65df705001b1", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-02T12:26:09.326Z", "date_only": false, "value": "2026-02-02T12:26:09.326444Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/aef35cd6-09c1-46ef-acbc-65df705001b1", "record": "CVE-2024-4885", "field": "creation_timestamp", "uuid": "b86d6cc3-5f71-4673-b519-0bdf57cb408f", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/aef35cd6-09c1-46ef-acbc-65df705001b1"}, {"timestamp": "2026-02-27T00:00:00Z", "date_only": false, "value": "2026-02-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-27)", "record": "CVE-2024-4885", "field": "creation_timestamp", "uuid": "f31ca280-9350-4278-991c-20efd4d504d2"}, {"timestamp": "2026-06-14T00:00:00Z", "date_only": false, "value": "2026-06-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-14)", "record": "CVE-2024-4885", "field": "creation_timestamp", "uuid": "be76e410-92f5-46b0-b2a8-6d320cf906f2"}, {"timestamp": "2026-06-17T08:03:06.323Z", "date_only": false, "value": "2026-06-17T08:03:06.323", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-4885", "record": "FKIE_CVE-2024-4885", "field": "lastModified"}, {"timestamp": "2026-06-19T12:46:25.948Z", "date_only": false, "value": "2026-06-19T12:46:25.948820Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e2a1810b-f550-43d4-84a4-12bbe1930b5f", "record": "CVE-2024-4885", "field": "creation_timestamp", "uuid": "fbf74c16-4edb-4470-9872-9e1562db9a23", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e2a1810b-f550-43d4-84a4-12bbe1930b5f"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2024-4885", "field": "timestamps.recorded_at", "uuid": "1d5ad2d3-456a-4284-aa38-a3bb1aab8f3a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:06:05.992Z", "date_only": false, "value": "2026-06-23T14:06:05.992701Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1d5ad2d3-456a-4284-aa38-a3bb1aab8f3a", "record": "CVE-2024-4885", "field": "creation_timestamp", "uuid": "75a4cefc-87d9-4ec1-8ff3-016e2dbc2f61", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1d5ad2d3-456a-4284-aa38-a3bb1aab8f3a"}, {"timestamp": "2026-06-27T10:15:09.576Z", "date_only": false, "value": "2026-06-27T10:15:09.576378Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-26)", "record": "CVE-2024-4885", "field": "creation_timestamp", "uuid": "39ab28d6-b246-43ec-8a86-2969287a75fa"}, {"timestamp": "2026-06-30T09:23:22.497Z", "date_only": false, "value": "2026-06-30T09:23:22.497695Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/7f8189cd-bafd-40f6-b54a-d2724a363419", "record": "CVE-2024-4885", "field": "creation_timestamp", "uuid": "7fba6af7-76a3-489e-bf6d-29e7456efebb", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/7f8189cd-bafd-40f6-b54a-d2724a363419"}, {"timestamp": "2026-07-06T11:00:05.673Z", "date_only": false, "value": "2026-07-06T11:00:05.673624Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/270", "record": "CVE-2024-4885", "field": "creation_timestamp", "uuid": "925ada5f-459d-40f2-906d-f046822f814d", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 WhatsUp Gold: \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432\n\n\ud83d\udda5 \u0412 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 WhatsUp Gold \u043e\u0442 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Progress \u0431\u044b\u043b\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\ud83d\udcca \u041e\u0431\u043e\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u0430\u044f \u043a\u0430\u043a CVE-2024-4885, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c.\n\n\ud83e\udee1 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Progress \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u043e\u0442\u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u043d\u0430 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0435\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443.  \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c #\u0434\u0430\u043d\u043d\u044b\u0435\u0432\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 #WhatsUpGold\n\n@ZerodayAlert", "url": "https://t.me/ZerodayAlert/270"}, {"timestamp": "2026-07-16T00:00:00Z", "date_only": false, "value": "2026-07-16T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2024-4885", "field": "timestamps.last_seen_at", "uuid": "7f8189cd-bafd-40f6-b54a-d2724a363419", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-16T00:00:00Z", "date_only": true, "value": "2026-07-16", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2024-4885", "field": "evidence.0.details.observation_date", "uuid": "7f8189cd-bafd-40f6-b54a-d2724a363419", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-16T00:00:00Z", "date_only": false, "value": "2026-07-16T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2024-4885", "field": "status.status_updated_at", "uuid": "7f8189cd-bafd-40f6-b54a-d2724a363419", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-18T01:00:01Z", "date_only": false, "value": "2026-07-18T01:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2024-4885", "field": "timestamps.recorded_at", "uuid": "7f8189cd-bafd-40f6-b54a-d2724a363419", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-26T02:00:20.314Z", "date_only": false, "value": "2026-07-26T02:00:20.314582Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberwarehouse/469", "record": "CVE-2024-4885", "field": "creation_timestamp", "uuid": "102e5b93-0a85-47ec-82e1-08a4200670ea", "content": "CVE-2024-4885\n\nExploit for Progress WhatsUp Gold GetFileWithoutZip Unauthenticated Remote Code Execution\n\nTechnical Analysis: https://summoning.team/blog/progress-whatsup-gold-rce-cve-2024-4885/\n\nCVE-2024-4883\n\nExploit for Progress WhatsUp Gold WriteDatafile Unauthenticated Remote Code Execution\n\nTechnical Analysis: https://summoning.team/blog/progress-whatsup-gold-WriteDataFile-CVE-2024-4883-RCE/\n\nCVE-2024-5009\n\nExploit for Progress WhatsUp Gold SetAdminPassword Privilege Escalation\n\nTechnical Analysis: https://summoning.team/blog/progress-whatsup-gold-privesc-setadminpassword-cve-2024-5009/", "url": "https://t.me/cyberwarehouse/469"}, {"timestamp": "2026-07-27T00:00:21.906Z", "date_only": false, "value": "2026-07-27T00:00:21.906686Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cyberwarehouse/469", "record": "CVE-2024-4885", "field": "creation_timestamp", "uuid": "65175132-5f9a-4581-8ca2-47635d82b267", "content": "CVE-2024-4885\n\nExploit for Progress WhatsUp Gold GetFileWithoutZip Unauthenticated Remote Code Execution\n\nTechnical Analysis: https://summoning.team/blog/progress-whatsup-gold-rce-cve-2024-4885/\n\nCVE-2024-4883\n\nExploit for Progress WhatsUp Gold WriteDatafile Unauthenticated Remote Code Execution\n\nTechnical Analysis: https://summoning.team/blog/progress-whatsup-gold-WriteDataFile-CVE-2024-4883-RCE/\n\nCVE-2024-5009\n\nExploit for Progress WhatsUp Gold SetAdminPassword Privilege Escalation\n\nTechnical Analysis: https://summoning.team/blog/progress-whatsup-gold-privesc-setadminpassword-cve-2024-5009/", "url": "https://t.me/cyberwarehouse/469"}, {"timestamp": "2026-07-29T12:02:13.383Z", "date_only": false, "value": "2026-07-29T12:02:13.383194Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/4550", "record": "CVE-2024-4885", "field": "creation_timestamp", "uuid": "784ef359-92d5-4f53-872d-8225180f1a25", "content": "WhatsUp Gold Pre-Auth RCE GetFileWithoutZip PrimitiveCVE-2024-4885 #WhatsUpGold #PreAuthRCE #GetFileWithoutZip #PrimitiveSummoning #TeamTraining https://summoning.team/blog/progress-whatsup-gold-rce-cve-2024-4885/", "url": "https://t.me/reverseame/4550"}, {"timestamp": "2026-08-02T07:06:35.373Z", "date_only": false, "value": "2026-08-02T07:06:35.373549Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/4550", "record": "CVE-2024-4885", "field": "creation_timestamp", "uuid": "d428c7d1-6611-447f-a4a7-1d4c43189316", "content": "WhatsUp Gold Pre-Auth RCE GetFileWithoutZip PrimitiveCVE-2024-4885 #WhatsUpGold #PreAuthRCE #GetFileWithoutZip #PrimitiveSummoning #TeamTraining https://summoning.team/blog/progress-whatsup-gold-rce-cve-2024-4885/", "url": "https://t.me/reverseame/4550"}, {"timestamp": "2026-09-18T04:00:14.403Z", "date_only": false, "value": "2026-09-18T04:00:14.403429Z", "kind": "sighting", "label": "Seen", "source": "Telegram/0TYm20Si6i9ATjKMTFhXmrxNMpb5Q10R_tUfUFsZfOykYXE", "record": "CVE-2024-4885", "field": "creation_timestamp", "uuid": "8b20a926-54fa-49b9-8368-ad5c139cc53a"}, {"timestamp": "2026-09-19T00:00:12.946Z", "date_only": false, "value": "2026-09-19T00:00:12.946477Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/0TYm20Si6i9ATjKMTFhXmrxNMpb5Q10R_tUfUFsZfOykYXE", "record": "CVE-2024-4885", "field": "creation_timestamp", "uuid": "7c70aa37-cec8-4d17-9180-f3e4e67c2826"}, {"timestamp": "2026-10-06T23:00:20Z", "date_only": false, "value": "2026-10-06T23:00:20.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Ca4LUgHaPf7SnlvWANBEFLlvL974Tb9uhxxu25ElKUB_LXg", "record": "CVE-2024-4885", "field": "creation_timestamp", "uuid": "35dc9253-d2e4-452d-849e-7dc3773b34cb"}, {"timestamp": "2026-10-06T23:00:20Z", "date_only": false, "value": "2026-10-06T23:00:20.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/Ca4LUgHaPf7SnlvWANBEFLlvL974Tb9uhxxu25ElKUB_LXg", "record": "CVE-2024-4885", "field": "creation_timestamp", "uuid": "0d332b1e-3a92-490d-8d96-84a5e8805ee7"}]}