https://vulnerability.circl.lu/sightings/feed 2026-10-09T17:12:37.878701+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/988e3013-d0f7-4679-85e0-e16f57b50b4b/export 2026-10-09T17:12:37.908415+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "988e3013-d0f7-4679-85e0-e16f57b50b4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-52012", "type": "seen", "source": "https://t.me/purp_sec/200", "content": "\u041d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0432\u0435\u0436\u0438\u0445 CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2024-11218 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Podman \u0438 Buildah, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043d\u0430 \u0445\u043e\u0441\u0442\u0435. \u041f\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u0440\u0438 \u0432\u0437\u043b\u043e\u043c\u0435 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e --jobs=2 \u0438 race condition \u043f\u0440\u0438 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 Containerfile.\n\n\ud83d\udd35CVE-2024-52975 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043e Fleet Server, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u044f\u0445 \u0436\u0443\u0440\u043d\u0430\u043b\u043e\u0432 INFO \u0438 ERROR. \u041a \u044d\u0442\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438.\n\n\ud83d\udd35CVE-2024-52012 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Apache Solr. \u0412 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0430\u0445 Solr (\u0432 \u041e\u0421 Windows) \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u0440\u0438 configset upload API \u043f\u0440\u043e\u0445\u043e\u0434\u0438\u0442 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 ZIP-\u0444\u0430\u0439\u043b\u044b \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f write-access \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\ud83d\udd35CVE-2025-24814 \u2014 \u0435\u0449\u0435 \u043e\u0434\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Apache Solr, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u0432\u0441\u0435 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 FileSystemConfigSetService \u0438 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0435 \u0431\u0435\u0437 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u043e\u0438\u0433\u043d\u043e\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0435 configset-\u0444\u0430\u0439\u043b\u044b \u0438 \u0437\u0430\u043c\u0435\u043d\u0438\u0442\u044c \u0438\u0445 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u043c\u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f\u043c\u0438, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c\u0438 \u043d\u0430 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u042d\u0442\u0438 \u0444\u0430\u0439\u043b\u044b \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0435 \u0438 \u043c\u043e\u0433\u0443\u0442 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442\u044c -\u0442\u0435\u0433\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432 classpath Solr (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043a\u0430\u043a searchComponent \u0438\u043b\u0438 \u043f\u043b\u0430\u0433\u0438\u043d).\n\n\ud83d\udd35CVE-2025-0411 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 7-Zip, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u044e Windows Mark of the Web (MotW) \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u0438\u0437 \u0432\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0445 \u0430\u0440\u0445\u0438\u0432\u043e\u0432. \u041f\u0440\u0438 \u0440\u0430\u0441\u043f\u0430\u043a\u043e\u0432\u043a\u0435 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438\u0437 \u0430\u0440\u0445\u0438\u0432\u0430 \u0441 \u0444\u043b\u0430\u0433\u043e\u043c MotW 7-Zip \u043d\u0435 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 MotW \u043d\u0430 \u0441\u0430\u043c\u0438 \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u043e \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-04T13:00:14.714631Z"} 2026-08-04T13:00:14.714631+00:00 https://vulnerability.circl.lu/sighting/1710e81f-0105-443a-a6ac-141cb7b56269/export 2026-10-09T17:12:37.910097+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "1710e81f-0105-443a-a6ac-141cb7b56269", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-52011", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mppawoqzzu2k", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-52011 \u0432 Node.js: \u043a\u0430\u043a \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\n\n\n\nhttps://kripta.biz/posts/A01B3E08-9853-4A21-A60F-66B43445CB75", "creation_timestamp": "2026-07-03T00:08:27.696373Z"} 2026-07-03T00:08:27.696373+00:00 https://vulnerability.circl.lu/sighting/3928aa7f-c0fd-485b-b23b-4d0119b59622/export 2026-10-09T17:12:37.910243+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "3928aa7f-c0fd-485b-b23b-4d0119b59622", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-52011", "type": "published-proof-of-concept", "source": "Telegram/cFkqaiLeMF7rcnyy-4alEvGOnwxzqn60V0GjpreyOt3-Yxw", "content": "", "creation_timestamp": "2026-06-09T11:00:07.000000Z"} 2026-06-09T11:00:07+00:00 https://vulnerability.circl.lu/sighting/08000e06-87df-4fab-8dd7-ac4b4dc8b60d/export 2026-10-09T17:12:37.910347+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "08000e06-87df-4fab-8dd7-ac4b4dc8b60d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-52011", "type": "seen", "source": "https://gist.github.com/alon710/af9fd1f0bf5e15b0603c7992be5645c7", "content": "# CVE-2024-52011: CVE-2024-52011: Remote Command Injection in ViteJS launch-editor\n\n> **CVSS Score:** 7.5\n> **Published:** 2026-06-03\n> **Full Report:** https://cvereports.com/reports/CVE-2024-52011\n\n## Summary\nCVE-2024-52011 is a critical command injection vulnerability in the ViteJS launch-editor utility (versions prior to 2.9.0) affecting Windows environments. Unsanitized command-line arguments can lead to remote code execution on a developer workstation via cross-origin requests targeting the local development server.\n\n## TL;DR\nViteJS launch-editor before version 2.9.0 on Windows fails to validate line numbers parsed from filenames, allowing remote attackers to trigger arbitrary command execution on developer workstations via cross-origin HTTP requests targeting the local development server.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-77\n- **Attack Vector**: Network / Cross-Origin HTTP Request\n- **CVSS Score**: 7.5 (High)\n- **EPSS Score**: 0.0006\n- **Impact**: Remote Code Execution (RCE)\n- **Exploit Status**: Proof-of-Concept Available\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Vite Development Server\n- launch-editor (npm package)\n- Windows Operating System\n- **launch-editor**: < 2.9.0 (Fixed in: `2.9.0`)\n- **vite**: < 5.4.9 (Fixed in: `5.4.9`)\n\n## Mitigation\n\n- Upgrade launch-editor to version 2.9.0 or higher.\n- Upgrade vite to version 5.4.9 or higher.\n- Enforce strict host header validation and cross-origin controls on development servers.\n- Utilize browser plugins or local firewalls to block cross-origin requests targeting localhost.\n\n**Remediation Steps:**\n1. Verify the installed launch-editor and vite versions in package-lock.json or yarn.lock.\n2. Run 'npm install launch-editor@latest' or 'npm update vite' to apply security updates.\n3. Restart any running local development servers to apply the patched versions.\n\n## References\n\n- [GitHub Security Advisory GHSA-c27g-q93r-2cwf](https://github.com/vitejs/launch-editor/security/advisories/GHSA-c27g-q93r-2cwf)\n- [NVD - CVE-2024-52011](https://nvd.nist.gov/vuln/detail/CVE-2024-52011)\n- [CVE Org Authority Record - CVE-2024-52011](https://www.cve.org/CVERecord?id=CVE-2024-52011)\n- [Official Fix Commit](https://github.com/vitejs/launch-editor/commit/971291e8a6a91226e1616c5c0ec85423d2d50a5e)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2024-52011) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-06-03T19:00:57.000000Z"} 2026-06-03T19:00:57+00:00 https://vulnerability.circl.lu/sighting/7b20b084-269f-4f60-86dd-591b7b067a1b/export 2026-10-09T17:12:37.910469+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "7b20b084-269f-4f60-86dd-591b7b067a1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-52011", "type": "seen", "source": "https://gist.github.com/alon710/8b99e8a330b30729487263e5e6c526a7", "content": "# CVE-2024-52011: CVE-2024-52011: Remote Command Injection in ViteJS launch-editor\n\n> **CVSS Score:** 7.5\n> **Published:** 2026-06-03\n> **Full Report:** https://cvereports.com/reports/CVE-2024-52011\n\n## Summary\nCVE-2024-52011 is a critical command injection vulnerability in the ViteJS launch-editor utility (versions prior to 2.9.0) affecting Windows environments. Unsanitized command-line arguments can lead to remote code execution on a developer workstation via cross-origin requests targeting the local development server.\n\n## TL;DR\nViteJS launch-editor before version 2.9.0 on Windows fails to validate line numbers parsed from filenames, allowing remote attackers to trigger arbitrary command execution on developer workstations via cross-origin HTTP requests targeting the local development server.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-77\n- **Attack Vector**: Network / Cross-Origin HTTP Request\n- **CVSS Score**: 7.5 (High)\n- **EPSS Score**: 0.0006\n- **Impact**: Remote Code Execution (RCE)\n- **Exploit Status**: Proof-of-Concept Available\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Vite Development Server\n- launch-editor (npm package)\n- Windows Operating System\n- **launch-editor**: < 2.9.0 (Fixed in: `2.9.0`)\n- **vite**: < 5.4.9 (Fixed in: `5.4.9`)\n\n## Mitigation\n\n- Upgrade launch-editor to version 2.9.0 or higher.\n- Upgrade vite to version 5.4.9 or higher.\n- Enforce strict host header validation and cross-origin controls on development servers.\n- Utilize browser plugins or local firewalls to block cross-origin requests targeting localhost.\n\n**Remediation Steps:**\n1. Verify the installed launch-editor and vite versions in package-lock.json or yarn.lock.\n2. Run 'npm install launch-editor@latest' or 'npm update vite' to apply security updates.\n3. Restart any running local development servers to apply the patched versions.\n\n## References\n\n- [GitHub Security Advisory GHSA-c27g-q93r-2cwf](https://github.com/vitejs/launch-editor/security/advisories/GHSA-c27g-q93r-2cwf)\n- [NVD - CVE-2024-52011](https://nvd.nist.gov/vuln/detail/CVE-2024-52011)\n- [CVE Org Authority Record - CVE-2024-52011](https://www.cve.org/CVERecord?id=CVE-2024-52011)\n- [Official Fix Commit](https://github.com/vitejs/launch-editor/commit/971291e8a6a91226e1616c5c0ec85423d2d50a5e)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2024-52011) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-06-03T18:51:02.000000Z"} 2026-06-03T18:51:02+00:00 https://vulnerability.circl.lu/sighting/ce027598-1e59-4ec3-b03d-3fd297657a53/export 2026-10-09T17:12:37.910601+00:00 Joseph Lee https://cvepremium.circl.lu/user/syspect {"uuid": "ce027598-1e59-4ec3-b03d-3fd297657a53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-52012", "type": "published-proof-of-concept", "source": "https://blog.securelayer7.net/cve-2024-52012-apache-solr-zip-slip-rce-attack/", "content": "", "creation_timestamp": "2026-04-09T04:00:00.000000Z"} 2026-04-09T04:00:00+00:00 https://vulnerability.circl.lu/sighting/4627832d-ae95-4f1a-8fa6-b1b458865880/export 2026-10-09T17:12:37.913788+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "4627832d-ae95-4f1a-8fa6-b1b458865880", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-52012", "type": "seen", "source": "https://bsky.app/profile/tmjintel.bsky.social/post/3lgsrkq7gq32n", "content": "", "creation_timestamp": "2025-01-28T15:31:03.281333Z"} 2025-01-28T15:31:03.281333+00:00 https://vulnerability.circl.lu/sighting/ea2527f4-0274-4c35-b263-5e051194b40f/export 2026-10-09T17:12:37.913914+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "ea2527f4-0274-4c35-b263-5e051194b40f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-52012", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/113900760592649826", "content": "", "creation_timestamp": "2025-01-27T14:21:21.313816Z"} 2025-01-27T14:21:21.313816+00:00 https://vulnerability.circl.lu/sighting/1b35919f-75b4-4104-b6db-7bc7c35d2e12/export 2026-10-09T17:12:37.914021+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "1b35919f-75b4-4104-b6db-7bc7c35d2e12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-52012", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgpy3rlhua2h", "content": "", "creation_timestamp": "2025-01-27T12:49:57.658070Z"} 2025-01-27T12:49:57.658070+00:00 https://vulnerability.circl.lu/sighting/a53dcaf0-d91f-40db-9164-965b418a7e5b/export 2026-10-09T17:12:37.914120+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "a53dcaf0-d91f-40db-9164-965b418a7e5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-52012", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3lgpx52oyws22", "content": "", "creation_timestamp": "2025-01-27T12:32:50.231480Z"} 2025-01-27T12:32:50.231480+00:00