{"metadata": {"vulnerability": "cve-2024-55963", "count": 33, "kinds": {"milestone": 4, "sighting": 22, "kev": 0, "other": 7}}, "data": [{"timestamp": "2024-12-13T00:00:00Z", "date_only": false, "value": "2024-12-13T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2024-55963", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-03-25T16:43:16.676Z", "date_only": false, "value": "2025-03-25T16:43:16.676769Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3ll7ppfyype2q", "record": "CVE-2024-55963", "field": "creation_timestamp", "uuid": "3cef0a39-304c-4f8c-90a8-c17eb51c1739", "url": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3ll7ppfyype2q"}, {"timestamp": "2025-03-25T17:39:32.499Z", "date_only": false, "value": "2025-03-25T17:39:32.499357Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3ll7su2ssvy2a", "record": "CVE-2024-55963", "field": "creation_timestamp", "uuid": "d482d026-c95c-4437-984e-3c42c5b56d9a", "url": "https://bsky.app/profile/r-netsec.bsky.social/post/3ll7su2ssvy2a"}, {"timestamp": "2025-03-25T21:24:36.287Z", "date_only": false, "value": "2025-03-25T21:24:36.287214Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberresearch.bsky.social/post/3lla7giapmn2p", "record": "CVE-2024-55963", "field": "creation_timestamp", "uuid": "e88944ed-f995-4fb8-a440-315538625c00", "url": "https://bsky.app/profile/cyberresearch.bsky.social/post/3lla7giapmn2p"}, {"timestamp": "2025-03-25T22:16:47Z", "date_only": false, "value": "2025-03-25T22:16:47.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/thebugbountyhunter/9758", "record": "CVE-2024-55963", "field": "creation_timestamp", "uuid": "f1a5dcc0-f130-42b1-b081-3d031f0551c2", "content": "CVE-2024-55963: Unauthenticated RCE in Default-Install of Appsmith\n\nhttps://rhinosecuritylabs.com/research/cve-2024-55963-unauthenticated-rce-in-appsmith/", "url": "https://t.me/thebugbountyhunter/9758"}, {"timestamp": "2025-03-26T00:00:00Z", "date_only": false, "value": "2025-03-26T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-55963", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-03-26T04:51:22Z", "date_only": false, "value": "2025-03-26T04:51:22.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/P0x3k_1N73LL1G3NC3/53", "record": "CVE-2024-55963", "field": "creation_timestamp", "uuid": "ce0119a9-d4c9-4f39-9f16-6d54caed4720", "content": "CVE-2024-55963: Unauthenticated RCE in Default-Install of Appsmith\n\nBlog: https://rhinosecuritylabs.com/research/cve-2024-55963-unauthenticated-rce-in-appsmith/", "url": "https://t.me/P0x3k_1N73LL1G3NC3/53"}, {"timestamp": "2025-03-26T09:30:16Z", "date_only": false, "value": "2025-03-26T09:30:16.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/TopCyberTechNews/445", "record": "CVE-2024-55963", "field": "creation_timestamp", "uuid": "c26f09de-5f22-44bf-ab40-87740b0b85f4", "content": "Top Security News for Today\n\nAn Introduction to Data Masking in Privacy Engineering  \nhttps://www.tripwire.com/state-of-security/introduction-data-masking-privacy-engineering\n\nMAS Compliance 101: Key Regulations for Financial Institutions in Singapore  \nhttps://www.tripwire.com/state-of-security/mas-compliance-key-regulations-financial-institutions-singapore\n\nFrida 16.7.0 is out w/ brand new APIs for observing the lifecycles of threads and modules  \nhttps://www.reddit.com/r/netsec/comments/1jjg9kq/frida_1670_is_out_w_brand_new_apis_for_observing/\n\nReport on Paragon Spyware  \nhttps://www.schneier.com/blog/archives/2025/03/report-on-paragon-spyware.html\n\nCVE-2025-26633: How Water Gamayun Weaponizes MUIPath using MSC EvilTwin  \nhttps://www.trendmicro.com/en_us/research/25/c/cve-2025-26633-water-gamayun.html\n\nCVE-2024-55963: Unauthenticated RCE in Default-Install of Appsmith  \nhttps://www.reddit.com/r/netsec/comments/1jjnjam/cve202455963_unauthenticated_rce_in/\n\nFollow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman", "url": "https://t.me/TopCyberTechNews/445"}, {"timestamp": "2025-03-26T17:58:08Z", "date_only": false, "value": "2025-03-26T17:58:08.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberBulletin/2828", "record": "CVE-2024-55963", "field": "creation_timestamp", "uuid": "da2cb60f-6fb3-4086-9f7b-04eb75f00dcd", "content": "\u26a1CVE-2024-55963: Unauthenticated RCE in Default-Install of Appsmith.\n\n#CyberBulletin", "url": "https://t.me/CyberBulletin/2828"}, {"timestamp": "2025-03-26T20:09:16.461Z", "date_only": false, "value": "2025-03-26T20:09:16.461Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "cve-2024-55963", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-03-26T20:15:21.253Z", "date_only": false, "value": "2025-03-26T20:15:21.253", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-55963", "record": "FKIE_CVE-2024-55963", "field": "published"}, {"timestamp": "2025-03-26T20:25:52Z", "date_only": false, "value": "2025-03-26T20:25:52.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8963", "record": "CVE-2024-55963", "field": "creation_timestamp", "uuid": "80c7a882-bbd1-495a-a64c-dff83ce1b75d", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55963\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue was discovered in Appsmith before 1.51. A user on Appsmith that doesn't have admin permissions can trigger the restart API on Appsmith, causing a server restart. This is still within the Appsmith container, and the impact is limited to Appsmith's own server only, but there is a denial of service because it can be continually restarted. This is due to incorrect access control checks, which should check for super user permissions on the incoming request.\n\ud83d\udccf Published: 2025-03-26T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-26T20:09:16.461Z\n\ud83d\udd17 References:\n1. https://github.com/appsmithorg/appsmith/security/advisories/GHSA-6mc8-hw5c-7qqr", "url": "https://t.me/DarkWebInformer_CVEAlerts/8963"}, {"timestamp": "2025-03-26T22:15:22Z", "date_only": false, "value": "2025-03-26T22:15:22.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/21219", "record": "CVE-2024-55963", "field": "creation_timestamp", "uuid": "e3b9443b-6622-4a37-88aa-56ff85110278", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55963 - Appsmith DoS: Unauthorized Server Restart\", \n  \"Content\": \"CVE ID : CVE-2024-55963 \nPublished : March 26, 2025, 8:15 p.m. | 31\u00a0minutes ago \nDescription : An issue was discovered in Appsmith before 1.51. A user on Appsmith that doesn't have admin permissions can trigger the restart API on Appsmith, causing a server restart. This is still within the Appsmith container, and the impact is limited to Appsmith's own server only, but there is a denial of service because it can be continually restarted. This is due to incorrect access control checks, which should check for super user permissions on the incoming request. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/21219"}, {"timestamp": "2025-03-27T04:24:01.972Z", "date_only": false, "value": "2025-03-27T04:24:01.972532Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lldhdfoxav2t", "record": "CVE-2024-55963", "field": "creation_timestamp", "uuid": "fe119730-8348-42ea-a47e-b008904f82ec", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lldhdfoxav2t"}, {"timestamp": "2025-03-27T13:34:31.028Z", "date_only": false, "value": "2025-03-27T13:34:31.028297Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-55963", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2025-03-27T13:34:31.028Z", "date_only": false, "value": "2025-03-27T13:34:31.028297Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-55963", "record": "FKIE_CVE-2024-55963", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-03-27T13:36:32.205Z", "date_only": false, "value": "2025-03-27T13:36:32.205Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2024-55963", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-03-27T13:36:32.205Z", "date_only": false, "value": "2025-03-27T13:36:32.205Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-55963", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-03-31T12:29:08Z", "date_only": false, "value": "2025-03-31T12:29:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/11988", "record": "CVE-2024-55963", "field": "creation_timestamp", "uuid": "09eaa7f2-1d87-44c7-81aa-1b696474426a", "content": "#exploit\n1. CVE-2024-55963:\nUnauth RCE in Default-Install of Appsmith\nhttps://rhinosecuritylabs.com/research/cve-2024-55963-unauthenticated-rce-in-appsmith\n\n2. CVE-2025-26909:\nLFI to RCE in WP Ghost Plugin\nhttps://github.com/zerodayx/cve-2025-26909\n\n3. CVE-2025-27840:\nVulnerability in ESP32 Microcontrollers\nhttps://github.com/demining/Bluetooth-Attacks-CVE-2025-27840", "url": "https://t.me/CyberSecurityTechnologies/11988"}, {"timestamp": "2025-03-31T18:38:27Z", "date_only": false, "value": "2025-03-31T18:38:27.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ton618cyber/3335", "record": "CVE-2024-55963", "field": "creation_timestamp", "uuid": "95b75956-23ef-4087-ba94-7129d170190f", "content": "#exploit\n1. CVE-2024-55963:\nUnauth RCE in Default-Install of Appsmith\nhttps://rhinosecuritylabs.com/research/cve-2024-55963-unauthenticated-rce-in-appsmith\n\n2. CVE-2025-26909:\nLFI to RCE in WP Ghost Plugin\nhttps://github.com/zerodayx/cve-2025-26909\n\n3. CVE-2025-27840:\nVulnerability in ESP32 Microcontrollers\nhttps://github.com/demining/Bluetooth-Attacks-CVE-2025-27840", "url": "https://t.me/ton618cyber/3335"}, {"timestamp": "2025-03-31T18:38:27Z", "date_only": false, "value": "2025-03-31T18:38:27.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ton618cyber/8406", "record": "CVE-2024-55963", "field": "creation_timestamp", "uuid": "7094242b-a1f7-46c7-b41a-2745af09d5ee", "content": "#exploit\n1. CVE-2024-55963:\nUnauth RCE in Default-Install of Appsmith\nhttps://rhinosecuritylabs.com/research/cve-2024-55963-unauthenticated-rce-in-appsmith\n\n2. CVE-2025-26909:\nLFI to RCE in WP Ghost Plugin\nhttps://github.com/zerodayx/cve-2025-26909\n\n3. CVE-2025-27840:\nVulnerability in ESP32 Microcontrollers\nhttps://github.com/demining/Bluetooth-Attacks-CVE-2025-27840", "url": "https://t.me/ton618cyber/8406"}, {"timestamp": "2025-04-02T07:06:56.893Z", "date_only": false, "value": "2025-04-02T07:06:56.893Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-APPSMITH-2024-55963", "record": "BIT-APPSMITH-2024-55963", "field": "published"}, {"timestamp": "2025-04-04T21:02:08.424Z", "date_only": false, "value": "2025-04-04T21:02:08.424318Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3llzctfbrqb2v", "record": "CVE-2024-55963", "field": "creation_timestamp", "uuid": "ea2f0e0c-c696-41a5-a477-fe4319e07a8e", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3llzctfbrqb2v"}, {"timestamp": "2025-04-07T14:00:17Z", "date_only": false, "value": "2025-04-07T14:00:17.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/appsmith_rce_cve_2024_55964.rb", "record": "CVE-2024-55963", "field": "creation_timestamp", "uuid": "4151f18b-601f-461e-bbfa-9b99abe54678", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/appsmith_rce_cve_2024_55964.rb"}, {"timestamp": "2025-07-06T03:00:04Z", "date_only": false, "value": "2025-07-06T03:00:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/rldrVU4EbTTnPd8U3W40-F0FQeroqHkK7JRuQCr9iPTQCg8", "record": "CVE-2024-55963", "field": "creation_timestamp", "uuid": "7276137c-41fc-4034-a26f-a886034a2ef8"}, {"timestamp": "2025-07-06T15:00:06Z", "date_only": false, "value": "2025-07-06T15:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/ziOVGRU4cKcimSIJ_E6PMSYJvnmBXzqpvenCO7rqIs6XBvg", "record": "CVE-2024-55963", "field": "creation_timestamp", "uuid": "f74eedee-1e46-472b-b779-33ce4d9a63bd"}, {"timestamp": "2025-08-11T18:27:48Z", "date_only": false, "value": "2025-08-11T18:27:48.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3e4b778d-5810-4171-a915-f1d106684af4", "record": "CVE-2024-55963", "field": "creation_timestamp", "uuid": "4d2f1471-57d4-4803-a286-55862dbaf2c7"}, {"timestamp": "2025-10-23T21:13:04Z", "date_only": false, "value": "2025-10-23T21:13:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "record": "CVE-2024-55963", "field": "creation_timestamp", "uuid": "217cf432-2509-431e-adf1-d861125f3b5a"}, {"timestamp": "2026-06-17T08:11:30.300Z", "date_only": false, "value": "2026-06-17T08:11:30.300", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-55963", "record": "FKIE_CVE-2024-55963", "field": "lastModified"}, {"timestamp": "2026-08-14T16:00:21.072Z", "date_only": false, "value": "2026-08-14T16:00:21.072305Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/purp_sec/422", "record": "CVE-2024-55963", "field": "creation_timestamp", "uuid": "3f281cc9-b472-4fab-8b73-1e0348df09f8", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-1097, CVE-2025-1098, CVE-2025-24514 \u0438 CVE-2025-1974 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Ingress-NGINX \u0434\u043b\u044f Kubernetes, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u044e \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430. \n\n\ud83d\udd35 CVE-2024-55963 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043e \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 Appsmith, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0431\u0435\u0437 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\ud83d\udd35 CVE-2025-22230 \u2014 \u0431\u0430\u0433, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441 \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 Windows Tools Suite. \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0435\u0433\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\ud83d\udd35 CVE-2024-29029 \u2014 PoC \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0439 \u0441 \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 Apache ActiveMQ.\n\n\ud83d\udd35 CVE-2025-0927 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u044f\u0434\u0440\u0435 Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 Ubuntu 22.04 \u0434\u043b\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0441\u0435\u0430\u043d\u0441\u043e\u0432.\n\n\ud83d\udd35 CVE-2024-53678 \u0438 CVE-2024-53679 \u2014 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Apache VCL, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c SQLi \u0438 XSS \u0430\u0442\u0430\u043a\u0438. \n\n#blue_team #CVE_\u0434\u043d\u044f", "url": "https://t.me/purp_sec/422"}, {"timestamp": "2026-09-08T08:34:36.952Z", "date_only": false, "value": "2026-09-08T08:34:36.952Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-APPSMITH-2024-55963", "record": "BIT-APPSMITH-2024-55963", "field": "modified"}, {"timestamp": "2026-09-27T11:29:42Z", "date_only": false, "value": "2026-09-27T11:29:42.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/7eet65ZBtnaSToIObmChHbwdVKZr_dBmacwHoFztHG8TT4o", "record": "CVE-2024-55963", "field": "creation_timestamp", "uuid": "f12b93af-9c04-4ba8-b9e0-13ca306efcc7"}, {"timestamp": "2026-09-27T11:29:42Z", "date_only": false, "value": "2026-09-27T11:29:42.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/7eet65ZBtnaSToIObmChHbwdVKZr_dBmacwHoFztHG8TT4o", "record": "CVE-2024-55963", "field": "creation_timestamp", "uuid": "28425827-b7a6-472f-81dc-12674e0e4096"}]}