https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Wed, 05 Aug 2026 12:50:45 +0000 https://vulnerability.circl.lu/sighting/8fbf8277-107b-4ed9-9760-bc32c2575ad7/export {"uuid": "8fbf8277-107b-4ed9-9760-bc32c2575ad7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-52301", "type": "seen", "source": "https://t.me/bagl3y_notes/134", "content": "\ud83c\udd95 \u041d\u043e\u0432\u044b\u0439 \u0432\u0438\u0434\u0435\u043e-\u0440\u0430\u0437\u0431\u043e\u0440 \u0442\u0430\u0447\u043a\u0438 HTB (HackTheBox) \u043e\u0442 ippsec'a\n\n\u2049\ufe0f \u041d\u0430 \u0441\u0442\u0430\u0440\u0442\u0435 \u0443 \u043d\u0430\u0441 Laravel \u0432 \u043e\u0442\u043b\u0430\u0434\u043e\u0447\u043d\u043e\u043c \u0440\u0435\u0436\u0438\u043c\u0435 (\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f CVE-2024-52301) \u27a1\ufe0f \u043f\u043e \u043e\u0448\u0438\u0431\u043a\u0435 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 grep.app \u043d\u0430\u0445\u043e\u0434\u0438\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0439 package - UniSharp\u2019s Laravel Filemanager (\u0441\u043e \u0441\u0432\u043e\u0435\u0439 CVE-2024-21546, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a RCE) \u27a1\ufe0f \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u044b\u0432\u0430\u0435\u043c Keyvault, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f gpg \u27a1\ufe0f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f env_keep+=\"ENV BASH_ENV\" \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f root\n\n#\ufe0f\u20e3 \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u044d\u0442\u043e Linux box - Environment, \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 Medium \n#\ufe0f\u20e3 \u0410 \u0432\u043e\u0442 \u0435\u0449\u0435 \u0440\u0430\u0437\u0431\u043e\u0440 \u043e\u0442 \u043a\u0440\u0443\u0442\u043e\u0433\u043e \u0447\u0435\u043b\u0430 - 0xdf\n\n\n\u2754 \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u043f\u043e\u0441\u0442\u044b \u043a\u0430\u043d\u0430\u043b\u0430\n\n#video #HTB #ippsec #0xdf #Walkthroughs", "creation_timestamp": "2026-08-05T00:00:41.908880Z"} {"uuid": "8fbf8277-107b-4ed9-9760-bc32c2575ad7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-52301", "type": "seen", "source": "https://t.me/bagl3y_notes/134", "content": "\ud83c\udd95 \u041d\u043e\u0432\u044b\u0439 \u0432\u0438\u0434\u0435\u043e-\u0440\u0430\u0437\u0431\u043e\u0440 \u0442\u0430\u0447\u043a\u0438 HTB (HackTheBox) \u043e\u0442 ippsec'a\n\n\u2049\ufe0f \u041d\u0430 \u0441\u0442\u0430\u0440\u0442\u0435 \u0443 \u043d\u0430\u0441 Laravel \u0432 \u043e\u0442\u043b\u0430\u0434\u043e\u0447\u043d\u043e\u043c \u0440\u0435\u0436\u0438\u043c\u0435 (\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f CVE-2024-52301) \u27a1\ufe0f \u043f\u043e \u043e\u0448\u0438\u0431\u043a\u0435 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 grep.app \u043d\u0430\u0445\u043e\u0434\u0438\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0439 package - UniSharp\u2019s Laravel Filemanager (\u0441\u043e \u0441\u0432\u043e\u0435\u0439 CVE-2024-21546, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a RCE) \u27a1\ufe0f \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u044b\u0432\u0430\u0435\u043c Keyvault, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f gpg \u27a1\ufe0f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f env_keep+=\"ENV BASH_ENV\" \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f root\n\n#\ufe0f\u20e3 \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u044d\u0442\u043e Linux box - Environment, \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 Medium \n#\ufe0f\u20e3 \u0410 \u0432\u043e\u0442 \u0435\u0449\u0435 \u0440\u0430\u0437\u0431\u043e\u0440 \u043e\u0442 \u043a\u0440\u0443\u0442\u043e\u0433\u043e \u0447\u0435\u043b\u0430 - 0xdf\n\n\n\u2754 \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u043f\u043e\u0441\u0442\u044b \u043a\u0430\u043d\u0430\u043b\u0430\n\n#video #HTB #ippsec #0xdf #Walkthroughs", "creation_timestamp": "2026-08-05T00:00:41.908880Z"} https://vulnerability.circl.lu/sighting/8fbf8277-107b-4ed9-9760-bc32c2575ad7/export Wed, 05 Aug 2026 00:00:41 +0000 https://vulnerability.circl.lu/sighting/f20cb799-6dd5-4f1b-a139-d9493611ae5c/export {"uuid": "f20cb799-6dd5-4f1b-a139-d9493611ae5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-52301", "type": "seen", "source": "https://t.me/bagl3y_notes/134", "content": "\ud83c\udd95 \u041d\u043e\u0432\u044b\u0439 \u0432\u0438\u0434\u0435\u043e-\u0440\u0430\u0437\u0431\u043e\u0440 \u0442\u0430\u0447\u043a\u0438 HTB (HackTheBox) \u043e\u0442 ippsec'a\n\n\u2049\ufe0f \u041d\u0430 \u0441\u0442\u0430\u0440\u0442\u0435 \u0443 \u043d\u0430\u0441 Laravel \u0432 \u043e\u0442\u043b\u0430\u0434\u043e\u0447\u043d\u043e\u043c \u0440\u0435\u0436\u0438\u043c\u0435 (\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f CVE-2024-52301) \u27a1\ufe0f \u043f\u043e \u043e\u0448\u0438\u0431\u043a\u0435 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 grep.app \u043d\u0430\u0445\u043e\u0434\u0438\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0439 package - UniSharp\u2019s Laravel Filemanager (\u0441\u043e \u0441\u0432\u043e\u0435\u0439 CVE-2024-21546, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a RCE) \u27a1\ufe0f \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u044b\u0432\u0430\u0435\u043c Keyvault, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f gpg \u27a1\ufe0f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f env_keep+=\"ENV BASH_ENV\" \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f root\n\n#\ufe0f\u20e3 \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u044d\u0442\u043e Linux box - Environment, \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 Medium \n#\ufe0f\u20e3 \u0410 \u0432\u043e\u0442 \u0435\u0449\u0435 \u0440\u0430\u0437\u0431\u043e\u0440 \u043e\u0442 \u043a\u0440\u0443\u0442\u043e\u0433\u043e \u0447\u0435\u043b\u0430 - 0xdf\n\n\n\u2754 \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u043f\u043e\u0441\u0442\u044b \u043a\u0430\u043d\u0430\u043b\u0430\n\n#video #HTB #ippsec #0xdf #Walkthroughs", "creation_timestamp": "2026-08-04T13:00:26.164759Z"} {"uuid": "f20cb799-6dd5-4f1b-a139-d9493611ae5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-52301", "type": "seen", "source": "https://t.me/bagl3y_notes/134", "content": "\ud83c\udd95 \u041d\u043e\u0432\u044b\u0439 \u0432\u0438\u0434\u0435\u043e-\u0440\u0430\u0437\u0431\u043e\u0440 \u0442\u0430\u0447\u043a\u0438 HTB (HackTheBox) \u043e\u0442 ippsec'a\n\n\u2049\ufe0f \u041d\u0430 \u0441\u0442\u0430\u0440\u0442\u0435 \u0443 \u043d\u0430\u0441 Laravel \u0432 \u043e\u0442\u043b\u0430\u0434\u043e\u0447\u043d\u043e\u043c \u0440\u0435\u0436\u0438\u043c\u0435 (\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f CVE-2024-52301) \u27a1\ufe0f \u043f\u043e \u043e\u0448\u0438\u0431\u043a\u0435 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 grep.app \u043d\u0430\u0445\u043e\u0434\u0438\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0439 package - UniSharp\u2019s Laravel Filemanager (\u0441\u043e \u0441\u0432\u043e\u0435\u0439 CVE-2024-21546, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a RCE) \u27a1\ufe0f \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u044b\u0432\u0430\u0435\u043c Keyvault, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f gpg \u27a1\ufe0f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f env_keep+=\"ENV BASH_ENV\" \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f root\n\n#\ufe0f\u20e3 \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u044d\u0442\u043e Linux box - Environment, \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 Medium \n#\ufe0f\u20e3 \u0410 \u0432\u043e\u0442 \u0435\u0449\u0435 \u0440\u0430\u0437\u0431\u043e\u0440 \u043e\u0442 \u043a\u0440\u0443\u0442\u043e\u0433\u043e \u0447\u0435\u043b\u0430 - 0xdf\n\n\n\u2754 \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u043f\u043e\u0441\u0442\u044b \u043a\u0430\u043d\u0430\u043b\u0430\n\n#video #HTB #ippsec #0xdf #Walkthroughs", "creation_timestamp": "2026-08-04T13:00:26.164759Z"} https://vulnerability.circl.lu/sighting/f20cb799-6dd5-4f1b-a139-d9493611ae5c/export Tue, 04 Aug 2026 13:00:26 +0000 https://vulnerability.circl.lu/sighting/bc5cd744-ae73-48f6-a279-5e85bce45e99/export {"uuid": "bc5cd744-ae73-48f6-a279-5e85bce45e99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-52308", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3ms2ghnxnp72r", "content": "\ud83d\udccc CVE-2024-52308 - The GitHub CLI version 2.6.1 and earlier are vulnerable to remote code execution through a malicious codespace SSH server when using `gh codespace ssh... https://www.cyberhub.blog/cves/CVE-2024-52308", "creation_timestamp": "2026-08-01T21:37:06.600305Z"} {"uuid": "bc5cd744-ae73-48f6-a279-5e85bce45e99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-52308", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3ms2ghnxnp72r", "content": "\ud83d\udccc CVE-2024-52308 - The GitHub CLI version 2.6.1 and earlier are vulnerable to remote code execution through a malicious codespace SSH server when using `gh codespace ssh... https://www.cyberhub.blog/cves/CVE-2024-52308", "creation_timestamp": "2026-08-01T21:37:06.600305Z"} https://vulnerability.circl.lu/sighting/bc5cd744-ae73-48f6-a279-5e85bce45e99/export Sat, 01 Aug 2026 21:37:06 +0000 https://vulnerability.circl.lu/sighting/ed33becf-e03c-4393-a60b-a4cc51deafef/export {"uuid": "ed33becf-e03c-4393-a60b-a4cc51deafef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-52301", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/1117", "content": "CVE-2024-52301: Improper Input Validation in Laravel Framework, 8.7 rating\u2757\ufe0f\n\nThe vulnerability allows an attacker to change environment using a special crafted query string.\n\nMore then 830k instances at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/CDJgv\n\ud83d\udc49 Dork: http.headers.set_cookie:\"laravel_session=\"\n\nVendor's advisory: https://github.com/laravel/framework/security/advisories/GHSA-gv7v-rgg6-548h", "creation_timestamp": "2026-07-12T00:00:45.590441Z"} {"uuid": "ed33becf-e03c-4393-a60b-a4cc51deafef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-52301", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/1117", "content": "CVE-2024-52301: Improper Input Validation in Laravel Framework, 8.7 rating\u2757\ufe0f\n\nThe vulnerability allows an attacker to change environment using a special crafted query string.\n\nMore then 830k instances at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/CDJgv\n\ud83d\udc49 Dork: http.headers.set_cookie:\"laravel_session=\"\n\nVendor's advisory: https://github.com/laravel/framework/security/advisories/GHSA-gv7v-rgg6-548h", "creation_timestamp": "2026-07-12T00:00:45.590441Z"} https://vulnerability.circl.lu/sighting/ed33becf-e03c-4393-a60b-a4cc51deafef/export Sun, 12 Jul 2026 00:00:45 +0000 https://vulnerability.circl.lu/sighting/8fb7d1a5-f483-4adc-ba8d-a386741cf7d7/export {"uuid": "8fb7d1a5-f483-4adc-ba8d-a386741cf7d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-52301", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/1117", "content": "CVE-2024-52301: Improper Input Validation in Laravel Framework, 8.7 rating\u2757\ufe0f\n\nThe vulnerability allows an attacker to change environment using a special crafted query string.\n\nMore then 830k instances at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/CDJgv\n\ud83d\udc49 Dork: http.headers.set_cookie:\"laravel_session=\"\n\nVendor's advisory: https://github.com/laravel/framework/security/advisories/GHSA-gv7v-rgg6-548h", "creation_timestamp": "2026-07-11T16:00:02.888599Z"} {"uuid": "8fb7d1a5-f483-4adc-ba8d-a386741cf7d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-52301", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/1117", "content": "CVE-2024-52301: Improper Input Validation in Laravel Framework, 8.7 rating\u2757\ufe0f\n\nThe vulnerability allows an attacker to change environment using a special crafted query string.\n\nMore then 830k instances at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/CDJgv\n\ud83d\udc49 Dork: http.headers.set_cookie:\"laravel_session=\"\n\nVendor's advisory: https://github.com/laravel/framework/security/advisories/GHSA-gv7v-rgg6-548h", "creation_timestamp": "2026-07-11T16:00:02.888599Z"} https://vulnerability.circl.lu/sighting/8fb7d1a5-f483-4adc-ba8d-a386741cf7d7/export Sat, 11 Jul 2026 16:00:02 +0000 https://vulnerability.circl.lu/sighting/36d9fb70-d62f-48b6-9bdf-50c5733d7f06/export {"uuid": "36d9fb70-d62f-48b6-9bdf-50c5733d7f06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-52301", "type": "seen", "source": "https://t.me/brutsecurity/1117", "content": "CVE-2024-52301: Improper Input Validation in Laravel Framework, 8.7 rating\u2757\ufe0f\n\nThe vulnerability allows an attacker to change environment using a special crafted query string.\n\nMore then 830k instances at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/CDJgv\n\ud83d\udc49 Dork: http.headers.set_cookie:\"laravel_session=\"\n\nVendor's advisory: https://github.com/laravel/framework/security/advisories/GHSA-gv7v-rgg6-548h", "creation_timestamp": "2026-07-10T00:00:35.873379Z"} {"uuid": "36d9fb70-d62f-48b6-9bdf-50c5733d7f06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-52301", "type": "seen", "source": "https://t.me/brutsecurity/1117", "content": "CVE-2024-52301: Improper Input Validation in Laravel Framework, 8.7 rating\u2757\ufe0f\n\nThe vulnerability allows an attacker to change environment using a special crafted query string.\n\nMore then 830k instances at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/CDJgv\n\ud83d\udc49 Dork: http.headers.set_cookie:\"laravel_session=\"\n\nVendor's advisory: https://github.com/laravel/framework/security/advisories/GHSA-gv7v-rgg6-548h", "creation_timestamp": "2026-07-10T00:00:35.873379Z"} https://vulnerability.circl.lu/sighting/36d9fb70-d62f-48b6-9bdf-50c5733d7f06/export Fri, 10 Jul 2026 00:00:35 +0000 https://vulnerability.circl.lu/sighting/3e36c378-6d56-4703-9c85-feec34d1e220/export {"uuid": "3e36c378-6d56-4703-9c85-feec34d1e220", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-52301", "type": "seen", "source": "https://t.me/brutsecurity/1117", "content": "CVE-2024-52301: Improper Input Validation in Laravel Framework, 8.7 rating\u2757\ufe0f\n\nThe vulnerability allows an attacker to change environment using a special crafted query string.\n\nMore then 830k instances at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/CDJgv\n\ud83d\udc49 Dork: http.headers.set_cookie:\"laravel_session=\"\n\nVendor's advisory: https://github.com/laravel/framework/security/advisories/GHSA-gv7v-rgg6-548h", "creation_timestamp": "2026-07-09T03:00:11.963109Z"} {"uuid": "3e36c378-6d56-4703-9c85-feec34d1e220", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-52301", "type": "seen", "source": "https://t.me/brutsecurity/1117", "content": "CVE-2024-52301: Improper Input Validation in Laravel Framework, 8.7 rating\u2757\ufe0f\n\nThe vulnerability allows an attacker to change environment using a special crafted query string.\n\nMore then 830k instances at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/CDJgv\n\ud83d\udc49 Dork: http.headers.set_cookie:\"laravel_session=\"\n\nVendor's advisory: https://github.com/laravel/framework/security/advisories/GHSA-gv7v-rgg6-548h", "creation_timestamp": "2026-07-09T03:00:11.963109Z"} https://vulnerability.circl.lu/sighting/3e36c378-6d56-4703-9c85-feec34d1e220/export Thu, 09 Jul 2026 03:00:11 +0000 https://vulnerability.circl.lu/sighting/8fcdd23d-5e85-4b55-9ad6-ce7700bad417/export {"uuid": "8fcdd23d-5e85-4b55-9ad6-ce7700bad417", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-52300", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpi6kcspre2t", "content": "\ud83d\udccc CVE-2024-52300 - macro-pdfviewer is a PDF Viewer Macro for XWiki using Mozilla pdf.js. The width parameter of the PDF viewer macro isn't properly escaped, allowing XSS... https://www.cyberhub.blog/cves/CVE-2024-52300", "creation_timestamp": "2026-06-30T04:37:07.256110Z"} {"uuid": "8fcdd23d-5e85-4b55-9ad6-ce7700bad417", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-52300", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpi6kcspre2t", "content": "\ud83d\udccc CVE-2024-52300 - macro-pdfviewer is a PDF Viewer Macro for XWiki using Mozilla pdf.js. The width parameter of the PDF viewer macro isn't properly escaped, allowing XSS... https://www.cyberhub.blog/cves/CVE-2024-52300", "creation_timestamp": "2026-06-30T04:37:07.256110Z"} https://vulnerability.circl.lu/sighting/8fcdd23d-5e85-4b55-9ad6-ce7700bad417/export Tue, 30 Jun 2026 04:37:07 +0000 https://vulnerability.circl.lu/sighting/7efea6e6-c384-4465-8ddb-8157cb3cd2f2/export {"uuid": "7efea6e6-c384-4465-8ddb-8157cb3cd2f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-52304", "type": "seen", "source": "https://gist.github.com/konard/0d69c914be52c3cee3437d4858b1c259", "content": "", "creation_timestamp": "2026-01-19T23:20:05.000000Z"} {"uuid": "7efea6e6-c384-4465-8ddb-8157cb3cd2f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-52304", "type": "seen", "source": "https://gist.github.com/konard/0d69c914be52c3cee3437d4858b1c259", "content": "", "creation_timestamp": "2026-01-19T23:20:05.000000Z"} https://vulnerability.circl.lu/sighting/7efea6e6-c384-4465-8ddb-8157cb3cd2f2/export Mon, 19 Jan 2026 23:20:05 +0000 https://vulnerability.circl.lu/sighting/b1a52bef-42d3-4fbb-8274-2ff816efb669/export {"uuid": "b1a52bef-42d3-4fbb-8274-2ff816efb669", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-52308", "type": "seen", "source": "MISP/1c5c38d6-3401-41ac-be0e-4cf361fa6f51", "content": "", "creation_timestamp": "2025-09-25T00:36:28.000000Z"} {"uuid": "b1a52bef-42d3-4fbb-8274-2ff816efb669", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-52308", "type": "seen", "source": "MISP/1c5c38d6-3401-41ac-be0e-4cf361fa6f51", "content": "", "creation_timestamp": "2025-09-25T00:36:28.000000Z"} https://vulnerability.circl.lu/sighting/b1a52bef-42d3-4fbb-8274-2ff816efb669/export Thu, 25 Sep 2025 00:36:28 +0000